Skip to content
Tags give the ability to mark specific points in history as being important
  • v1.7.8
    containerd 1.7.8
    
    Welcome to the v1.7.8 release of containerd!
    
    The eighth patch release for containerd 1.7 contains various fixes and updates.
    
    ### Notable Updates
    
    * **Fix ambiguous TLS fallback** ([#9299](https://github.com/containerd/containerd/pull/9299))
    * **Update Go to 1.20.10** ([#9265](https://github.com/containerd/containerd/pull/9265))
    * **Add a new image label on converted schema 1 images** ([#9252](https://github.com/containerd/containerd/pull/9252))
    * **Fix handling for missing basic auth credentials** ([#9235](https://github.com/containerd/containerd/pull/9235))
    * **Fix potential deadlock in create handler for containerd-shim-runc-v2** ([#9209](https://github.com/containerd/containerd/pull/9209))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Sebastiaan van Stijn
    * Derek McGowan
    * Phil Estes
    * Chen Yiyang
    * Wei Fu
    * Akihiro Suda
    * Maksym Pavlenko
    * Marat Radchenko
    * Milas Bowman
    * Qiutong Song
    * Samuel Karp
    
    ### Changes
    <details><summary>27 commits</summary>
    <p>
    
    * [release/1.7] Prepare release notes for v1.7.8 ([#9278](https://github.com/containerd/containerd/pull/9278))
      * [`48dbdf871`](https://github.com/containerd/containerd/commit/48dbdf871b43ca94f243779bd641fcda49c94f66) Prepare release notes for v1.7.8
    * [release/1.7] Fix ambiguous tls fallback ([#9299](https://github.com/containerd/containerd/pull/9299))
      * [`68abc543b`](https://github.com/containerd/containerd/commit/68abc543b1eb4a8196842de6c83115ba4e5698b0) Check scheme and host of request on push redirect
      * [`35c7634e3`](https://github.com/containerd/containerd/commit/35c7634e33651053a934bbcb831c90ddc65ede2e) Avoid TLS fallback when protocol is not ambiguous
    * [release/1.7] vendor: google.golang.org/grpc v1.58.3 ([#9281](https://github.com/containerd/containerd/pull/9281))
      * [`f36948cad`](https://github.com/containerd/containerd/commit/f36948cad712b9f813518ceaa5ac5441b6e10347) vendor: gRPC v1.58.3
    * [release/1.7 backport] vendor: golang.org/x/net v0.17.0 ([#9276](https://github.com/containerd/containerd/pull/9276))
      * [`c67a53190`](https://github.com/containerd/containerd/commit/c67a5319050614a947c9e5c133e44164e487a223) vendor: golang.org/x/net v0.17.0
      * [`71f4b36ca`](https://github.com/containerd/containerd/commit/71f4b36ca7a420d53a9f6c1b3f846a4a94b739de) vendor: golang.org/x/text v0.13.0
      * [`a7b3b7090`](https://github.com/containerd/containerd/commit/a7b3b70909a99f47845b74a3dbe58032c17bd1e0) vendor: golang.org/x/sys v0.13.0
    * [release/1.7] vendor: google.golang.org/grpc v1.56.3 ([#9248](https://github.com/containerd/containerd/pull/9248))
      * [`26736d6e1`](https://github.com/containerd/containerd/commit/26736d6e1af5f45386ae9382a6a951aee33c9ca7) vendor: google.golang.org/grpc v1.56.3
      * [`54a69a6e4`](https://github.com/containerd/containerd/commit/54a69a6e448d61fe88ad90bd476f8f65cf21277f) vendor: golang.org/x/oauth2 v0.7.0
      * [`ac15a7f5b`](https://github.com/containerd/containerd/commit/ac15a7f5b9da1b45ffc66bb8ccdcaed2f571c73a) vendor: google.golang.org/protobuf v1.30.0
    * [release/1.7] update to go1.20.10, test go1.21.3 ([#9265](https://github.com/containerd/containerd/pull/9265))
      * [`2479c3321`](https://github.com/containerd/containerd/commit/2479c332173014f3086d9b016214c536a7c03f39) [release/1.7] update to go1.20.10, test go1.21.3
      * [`11f40e9d8`](https://github.com/containerd/containerd/commit/11f40e9d80409b8dfa9dcb3eb81934e08384dd8e) [release/1.7] update to go1.20.9, test go1.21.2
    * [release/1.7] Add a new image label if it is docker schema 1 ([#9252](https://github.com/containerd/containerd/pull/9252))
      * [`cac1bab79`](https://github.com/containerd/containerd/commit/cac1bab797ed8d1245bff49aa90e6c80d8714899) Add a new image label if it is docker schema 1
    * [release/1.7] remotes: add handling for missing basic auth credentials ([#9235](https://github.com/containerd/containerd/pull/9235))
      * [`6cd2cc4a8`](https://github.com/containerd/containerd/commit/6cd2cc4a8f035162e06d5ffbf868c540e7eb40eb) remotes: add handling for missing basic auth credentials
    * [release/1.7 backport] containerd-shim-runc-v2: avoid potential deadlock in create handler ([#9209](https://github.com/containerd/containerd/pull/9209))
      * [`d0a1fedb5`](https://github.com/containerd/containerd/commit/d0a1fedb5a4828daddff330a345780d0222e47e8) *: add runc-fp as runc wrapper to inject failpoint
      * [`04491240a`](https://github.com/containerd/containerd/commit/04491240af1766337e0fbb5145405f74a39f5ad5) containerd-shim-runc-v2: avoid potential deadlock in create handler
      * [`6982a0df5`](https://github.com/containerd/containerd/commit/6982a0df5bc0d31ae82f0810518550006bf90931) containerd-shim-runc-v2: remove unnecessary `s.getContainer()`
      * [`0e2320398`](https://github.com/containerd/containerd/commit/0e2320398f0fb9974232ef68ea70625645f42661) Uncopypaste parsing of OCI Bundle spec file
    </p>
    </details>
    
    ### Dependency Changes
    
    * **golang.org/x/crypto**                        v0.11.0 -> v0.14.0
    * **golang.org/x/mod**                           v0.9.0 -> v0.11.0
    * **golang.org/x/net**                           v0.13.0 -> v0.17.0
    * **golang.org/x/oauth2**                        v0.4.0 -> v0.10.0
    * **golang.org/x/sync**                          v0.1.0 -> v0.3.0
    * **golang.org/x/sys**                           v0.10.0 -> v0.13.0
    * **golang.org/x/term**                          v0.10.0 -> v0.13.0
    * **golang.org/x/text**                          v0.11.0 -> v0.13.0
    * **golang.org/x/tools**                         v0.7.0 -> v0.10.0
    * **google.golang.org/genproto**                 7f2fa6fef1f4 -> 782d3b101e98
    * **google.golang.org/genproto/googleapis/api**  782d3b101e98 **_new_**
    * **google.golang.org/genproto/googleapis/rpc**  782d3b101e98 **_new_**
    * **google.golang.org/grpc**                     v1.53.0 -> v1.58.3
    * **google.golang.org/protobuf**                 v1.29.1 -> v1.31.0
    
    Previous release can be found at [v1.7.7](https://github.com/containerd/containerd/releases/tag/v1.7.7)
    
  • v1.7.7
    containerd 1.7.7
    
    Welcome to the v1.7.7 release of containerd!
    
    The seventh patch release for containerd 1.7 contains various fixes and updates.
    
    ### Notable Updates
    
    * **Require plugins to succeed after registering readiness** ([#9165](https://github.com/containerd/containerd/pull/9165))
    * **Handle unexpected shim kill events** ([#9132](https://github.com/containerd/containerd/pull/9132))
    * **Build binaries with Go 1.21.1** ([#9167](https://github.com/containerd/containerd/pull/9167))
    * **cri: Stop recommending disable_cgroup** ([#9168](https://github.com/containerd/containerd/pull/9168))
    * **remotes/docker: Fix MountedFrom prefixed with target repository** ([#9193](https://github.com/containerd/containerd/pull/9193))
    * **remotes: always try to establish tls connection when tls configured** ([#9188](https://github.com/containerd/containerd/pull/9188))
    * **NRI: Add support for rlimits** ([#48](https://github.com/containerd/nri/pull/48))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Derek McGowan
    * Samuel Karp
    * Krisztian Litkey
    * Wei Fu
    * Phil Estes
    * Sebastiaan van Stijn
    * Iceber Gu
    * Mike Brown
    * Akihiro Suda
    * Paweł Gronowski
    * Steve Griffith
    * Aditya Ramani
    * Austin Vazquez
    * Danny Canter
    * James Sturtevant
    * Kern Walster
    * ZP-AlwaysWin
    
    ### Changes
    <details><summary>31 commits</summary>
    <p>
    
    * [release/1.7] Prepare release notes for v1.7.7 ([#9194](https://github.com/containerd/containerd/pull/9194))
      * [`a34fa5681`](https://github.com/containerd/containerd/commit/a34fa5681a8cf8a250cdb638e29f54be44b7554f) Prepare release notes for v1.7.7
    * [release/1.7] Allow for images with artifacts to pull ([#9149](https://github.com/containerd/containerd/pull/9149))
      * [`6ca0aebf0`](https://github.com/containerd/containerd/commit/6ca0aebf0c40c3a2ea59c0ede440f9b6be5d1ded) Allow for images with artifacts to pull
    * [release 1.7] remotes/docker: Fix MountedFrom prefixed with target repository ([#9193](https://github.com/containerd/containerd/pull/9193))
      * [`7df492a95`](https://github.com/containerd/containerd/commit/7df492a95c7283a3f402b5a0e96030e42724d9d0) remotes/docker: Fix MountedFrom prefixed with target repository
    * [release/1.7] Update x/net to 0.13 ([#9134](https://github.com/containerd/containerd/pull/9134))
      * [`b3db314a5`](https://github.com/containerd/containerd/commit/b3db314a58311b3e754906baf356ec83d05015d6) Bump x/net to 0.13
    * [release/1.7] remotes: always try to establish tls connection when tls configured ([#9188](https://github.com/containerd/containerd/pull/9188))
      * [`7779ce64e`](https://github.com/containerd/containerd/commit/7779ce64e563f366199e7b22972ca18ec060b944) remotes: always try to establish tls connection when tls configured
    * [release/1.7] cri: stop recommending disable_cgroup ([#9168](https://github.com/containerd/containerd/pull/9168))
      * [`6013b5e03`](https://github.com/containerd/containerd/commit/6013b5e03ebadfc70eb711118a05e24891f8e2dc) cri: stop recommending disable_cgroup
    * [release/1.7] Require plugins to succeed after registering readiness ([#9165](https://github.com/containerd/containerd/pull/9165))
      * [`a83c66813`](https://github.com/containerd/containerd/commit/a83c66813f908c861ad3d908755d4c4b0a86778c) Require plugins to succeed after registering readiness
      * [`171d76849`](https://github.com/containerd/containerd/commit/171d76849393a3efa3b244f84c7dceff8c7d5026) cri: call RegisterReadiness after NewCRIService
    * [release/1.7] Handle unexpected shim kill events ([#9132](https://github.com/containerd/containerd/pull/9132))
      * [`3d27bc738`](https://github.com/containerd/containerd/commit/3d27bc738a6e6762a9c240f420491632e3eaae3d) Handle unexpected shim kill events
    * [release/1.7] Build binaries with 1.21.1 ([#9167](https://github.com/containerd/containerd/pull/9167))
      * [`4ffa3ed29`](https://github.com/containerd/containerd/commit/4ffa3ed2940b122cf5191746edeb30e177ea9820) Build binaries with 1.21.1
    * [release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 ([#9127](https://github.com/containerd/containerd/pull/9127))
      * [`5756f6064`](https://github.com/containerd/containerd/commit/5756f6064b89c4c403439b49353d5dd035ba8c4f) [release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1
    * [release/1.7 backport] alias log package to github.com/containerd/log v0.1.0 ([#9106](https://github.com/containerd/containerd/pull/9106))
      * [`09633b539`](https://github.com/containerd/containerd/commit/09633b539fad441c730569050e66a87d713a14a9) deprecate logs package, but disable linter (for transitioning)
      * [`cb201519f`](https://github.com/containerd/containerd/commit/cb201519f8757f4272d88f3a785a4cb56215095c) alias log package to github.com/containerd/log v0.1.0
      * [`a5024e6dd`](https://github.com/containerd/containerd/commit/a5024e6dd9f797051a465516066b248294c434e1) vendor: github.com/stretchr/testify v1.8.4
      * [`7bd976af3`](https://github.com/containerd/containerd/commit/7bd976af3fe068a79fec23d9fc05a69e26aa18c3) vendor: github.com/sirupsen/logrus v1.9.3
    * [release/1.7] remotes/docker: Add MountedFrom and Exists push status ([#9097](https://github.com/containerd/containerd/pull/9097))
      * [`8cd2d33c2`](https://github.com/containerd/containerd/commit/8cd2d33c2aaa730717be1b75a4d2f3629e493c55) [release/1.7] remotes/docker: Add MountedFrom and Exists push status
    * [release/1.7] vendor: update github.com/containerd/nri@v0.4.0 ([#9099](https://github.com/containerd/containerd/pull/9099))
      * [`3ca015e55`](https://github.com/containerd/containerd/commit/3ca015e55672c128d9f021d14f49ef96c247cd5b) nri: update mock plugin handlers
      * [`4cd208c1f`](https://github.com/containerd/containerd/commit/4cd208c1f2d80d863776c1947881d5283f3b25fc) vendor: update github.com/containerd/nri@v0.4.0
    </p>
    </details>
    
    ### Changes from containerd/log
    <details><summary>9 commits</summary>
    <p>
    
    * Update golangci to 1.49 ([#1](https://github.com/containerd/log/pull/1))
      * [`89c9a54`](https://github.com/containerd/log/commit/89c9a54561e8736fddc519cf033d936de65ebe67) Update golangci to 1.49
      * [`cf26711`](https://github.com/containerd/log/commit/cf267115d825238992448dbe1cd6cd440c934d8a) Update description in README
      * [`f9f250c`](https://github.com/containerd/log/commit/f9f250cc3a5d033c759b715aa09ff7cdbfc19500) Add project details
      * [`fb7fe3d`](https://github.com/containerd/log/commit/fb7fe3d663dee55b38f2ab094d9ac794dcacba40) Add github CI flow
      * [`7e13034`](https://github.com/containerd/log/commit/7e13034365475c99956f31770c43e296fc6d1a98) Add go module
      * [`16a3c76`](https://github.com/containerd/log/commit/16a3c768269b03fe62fff34d3a76528335a35064) Rename log import from logtest
      * [`698c398`](https://github.com/containerd/log/commit/698c39829fd9372465cb2537db16a7346afb9f31) Add README
      * [`87c83c4`](https://github.com/containerd/log/commit/87c83c42bbd22c5f1d3725fc5006b35217b4629a) Add license file
    </p>
    </details>
    
    ### Changes from containerd/nri
    <details><summary>35 commits</summary>
    <p>
    
    * releases: update note about 0.4.0 ([#50](https://github.com/containerd/nri/pull/50))
      * [`5f13915`](https://github.com/containerd/nri/commit/5f139156d546cb68a8495c9c36cfc6a574ba3a55) releases: update note about 0.4.0
    * Add support for rlimits ([#48](https://github.com/containerd/nri/pull/48))
      * [`5ecea04`](https://github.com/containerd/nri/commit/5ecea042d15be1ba5e0b988a40a4c90fb2210a7f) ulimit-adjuster: add validation for hard limits
      * [`db3de10`](https://github.com/containerd/nri/commit/db3de101ccaba370f9238188da0d8e05039efdee) test: exclude ulimit-adjuster from ginkgo
      * [`f0deb59`](https://github.com/containerd/nri/commit/f0deb59b4fbf7bcc62597a1299f4544638daa81a) ulimit-adjuster: new sample plugin
      * [`d2dd708`](https://github.com/containerd/nri/commit/d2dd708de134cfe0617821142557b3e55b0bdf64) Add support for rlimits
      * [`efaf36e`](https://github.com/containerd/nri/commit/efaf36e49f30c4ca0bfb0bba2c412e87241674c1) api: add POSIXRlimit type
    * .github: add test build to CI workflow. ([#47](https://github.com/containerd/nri/pull/47))
      * [`3f092c2`](https://github.com/containerd/nri/commit/3f092c29cf62a77c9eadaa9d7ff9ac28ece3d180) .github: add test build to CI workflow.
    * stub: pass context to plugins, pass updated resources to UpdateContainers. ([#40](https://github.com/containerd/nri/pull/40))
      * [`01d5f14`](https://github.com/containerd/nri/commit/01d5f14d96708830f232b2744742fc14763816b1) Add a note about NRI API stability and release notes.
      * [`ea9976d`](https://github.com/containerd/nri/commit/ea9976d8dae3a6e630da76a26dbef44b5c8a3de3) adaptation: add UpdateContainer tests.
      * [`d042d24`](https://github.com/containerd/nri/commit/d042d24bc4a96fa5fcf1aa0d2195ff75833d7d4e) stub: fix plugin UpdateContainerInterface.
      * [`f5d0f51`](https://github.com/containerd/nri/commit/f5d0f513608b2afc3fcc5e6bdf76b10b3004c14c) plugins: update plugins for stub changes.
      * [`b4bd301`](https://github.com/containerd/nri/commit/b4bd301a1ead4d277af088e321c05e76102c8769) adaptation: update tests with stub changes.
      * [`9d86150`](https://github.com/containerd/nri/commit/9d86150fce4318491481e354d0f34c6b76e8806e) stub: pass context to plugin event handlers.
    * Updated the OCI Hook Injector README to resovle broken links to the p… ([#34](https://github.com/containerd/nri/pull/34))
      * [`5eee915`](https://github.com/containerd/nri/commit/5eee9158f7fab6294bdbc5c76b2793f2dbe9faec) removed link
      * [`c783fc7`](https://github.com/containerd/nri/commit/c783fc76a80b315253d407f1e74ff9263cf5ce21) Resolves broken podman links and adds details to help better guide people in testing.
    * Fix ParseEventMask to produce proper masks for 'pod' and 'container' shorthand event notations. ([#39](https://github.com/containerd/nri/pull/39))
      * [`da291a6`](https://github.com/containerd/nri/commit/da291a66180b6989a6dcc6bcffcc3257c185f8f8) Fix ParseEventMask to produce proper masks
    * fix the `NRI_PLUGIN_NAME` env value when launching a pre-installed plugin ([#42](https://github.com/containerd/nri/pull/42))
      * [`4a4cea6`](https://github.com/containerd/nri/commit/4a4cea6142a5a34301b796a36355e3b38bb98522) fix the NRI_PLUGIN_NAME env value when launching a pre-installed plugin
      * [`a67478e`](https://github.com/containerd/nri/commit/a67478ed7c0b38454f3ef4e86f36d870c365c0d5) stub: update setIdentify to ensureIdentify
    * update module name of the logger plugin ([#41](https://github.com/containerd/nri/pull/41))
      * [`841f5ed`](https://github.com/containerd/nri/commit/841f5ed96067b8d737e39e9df16c55231c350d1d) update module name of the logger plugin
    * Add gitignore for build artifacts ([#32](https://github.com/containerd/nri/pull/32))
      * [`8d9c64d`](https://github.com/containerd/nri/commit/8d9c64def7f2ba89a065990e89c2bf39f8046bac) Add gitignore for build artifacts
    * Makefile: fix 'install-*' targets. ([#38](https://github.com/containerd/nri/pull/38))
      * [`c03d1be`](https://github.com/containerd/nri/commit/c03d1bee1efca43e4b59395622510844b36cd26c) Makefile: fix 'install-*' targets.
    * docs: add a chapter about security considerations. ([#36](https://github.com/containerd/nri/pull/36))
      * [`ab28e71`](https://github.com/containerd/nri/commit/ab28e7136bbf3c41c7344b0430087c1aed47b05a) docs: add a chapter about security considerations.
    * api: initialize OCI LinuxMemory resources to empty. ([#37](https://github.com/containerd/nri/pull/37))
      * [`2862d98`](https://github.com/containerd/nri/commit/2862d98443ccdb1162963ee979639fd973ddc37b) api: initialize OCI LinuxMemory resources to empty.
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/Microsoft/hcsshim**  v0.11.0 -> v0.11.1
    * **github.com/containerd/log**     v0.1.0 **_new_**
    * **github.com/containerd/nri**     v0.3.0 -> v0.4.0
    * **github.com/sirupsen/logrus**    v1.9.0 -> v1.9.3
    * **github.com/stretchr/testify**   v1.8.2 -> v1.8.4
    * **golang.org/x/crypto**           v0.1.0 -> v0.11.0
    * **golang.org/x/net**              v0.8.0 -> v0.13.0
    * **golang.org/x/sys**              v0.7.0 -> v0.10.0
    * **golang.org/x/term**             v0.6.0 -> v0.10.0
    * **golang.org/x/text**             v0.8.0 -> v0.11.0
    
    Previous release can be found at [v1.7.6](https://github.com/containerd/containerd/releases/tag/v1.7.6)
    ### Which file should I download?
    * `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
    * `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
    * `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:     (Deprecated)
    * `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated)
    
    In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
    and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
    
    See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.
    
    
  • v1.6.24
    containerd 1.6.24
    
    Welcome to the v1.6.24 release of containerd!
    
    The twenty-fourth patch release for containerd 1.6 contains various fixes and updates.
    
    ### Notable Updates
    
    * **CRI: fix leaked shim caused by high IO pressure** ([#9004](https://github.com/containerd/containerd/pull/9004))
    * **Update to go1.20.8** ([#9073](https://github.com/containerd/containerd/pull/9073))
    * **Update runc to v1.1.9** ([#8966](https://github.com/containerd/containerd/pull/8966))
    * **Backport: add configurable mount options to overlay snapshotter** ([#8961](https://github.com/containerd/containerd/pull/8961))
    * **log: cleanups and improvements to decouple more from logrus** ([#9002](https://github.com/containerd/containerd/pull/9002))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Sebastiaan van Stijn
    * Akihiro Suda
    * Wei Fu
    * Derek McGowan
    * Akhil Mohan
    * Cardy.Tang
    * Danny Canter
    * Kazuyoshi Kato
    * Mike Brown
    * Phil Estes
    * Samuel Karp
    
    ### Changes
    <details><summary>45 commits</summary>
    <p>
    
    * [release/1.6] Prepare release notes for v1.6.24 ([#9087](https://github.com/containerd/containerd/pull/9087))
      * [`cdd59290d`](https://github.com/containerd/containerd/commit/cdd59290d051ffd8b5e730f96930c42cad65beac) Prepare release notes for v1.6.24
    * [release/1.6 backport] log: cleanups and improvements to decouple more from logrus ([#9002](https://github.com/containerd/containerd/pull/9002))
      * [`33c2d88e7`](https://github.com/containerd/containerd/commit/33c2d88e7809eb42b0e9711c29a35c25a12dc18c) Revert "log: define G() as a function instead of a variable"
      * [`0a7f2975e`](https://github.com/containerd/containerd/commit/0a7f2975efbad7baddb31c36fb142db2a793534c) log: swap logrus functions with their equivalent on default logger
      * [`9d175a19b`](https://github.com/containerd/containerd/commit/9d175a19b7cbe165cb6285c891b384d518e2686b) log: add package documentation and summary of package's purpose
      * [`96fb65529`](https://github.com/containerd/containerd/commit/96fb655290f286eb818bf70f08555cd64ba8e780) log: make Fields type a generic map[string]any
      * [`bace17e2e`](https://github.com/containerd/containerd/commit/bace17e2ead161c06fdd670be532f0c042071bd7) log: add log.Entry type
      * [`dd127885f`](https://github.com/containerd/containerd/commit/dd127885feacdeefc554d7042c49e01002809864) log: define OutputFormat type
      * [`5b4cf2329`](https://github.com/containerd/containerd/commit/5b4cf23295581c70b92db1dc7c30114bc1a8f3c8) log: define G() as a function instead of a variable
      * [`ee1b4a1e2`](https://github.com/containerd/containerd/commit/ee1b4a1e2f844a45c0ba784273501bc490e77aa2) log: add all log-levels that are accepted
      * [`d563a411f`](https://github.com/containerd/containerd/commit/d563a411facc32c8287136d53ca0a744f991f3b4) log: group "enum" consts and touch-up docs
      * [`6e8f4555b`](https://github.com/containerd/containerd/commit/6e8f4555b3f3f155ee9ffe5f3e7cf8e8c2ee10a6) log: WithLogger: remove redundant intermediate var
      * [`c19325559`](https://github.com/containerd/containerd/commit/c193255597662b8a7f16479dd454ba3dd728a3c4) log: SetFormat: include returns in switch
      * [`c3c22f8cb`](https://github.com/containerd/containerd/commit/c3c22f8cbc5b3687bdee79266602bff51e61c84a) log: remove gotest.tools dependency
    * [release/1.6] update to go1.20.8 ([#9073](https://github.com/containerd/containerd/pull/9073))
      * [`a2c294800`](https://github.com/containerd/containerd/commit/a2c294800ec11447b497bf7452bbbfba06c0168d) [release/1.6] update to go1.20.8
    * [release/1.6 backport] make repositories of install dependencies configurable ([#9024](https://github.com/containerd/containerd/pull/9024))
      * [`0da8dcaa7`](https://github.com/containerd/containerd/commit/0da8dcaa7c93c0b708c375a32328a7b85fd668d8) make repositories of install dependencies configurable
    * [release/1.6 backport] update Golang to go1.20.7, minimum version go1.19 ([#9020](https://github.com/containerd/containerd/pull/9020))
      * [`8e6a9de5b`](https://github.com/containerd/containerd/commit/8e6a9de5b5291b97684e948be096317611b37930) update to go1.20.7, go1.19.12
      * [`8b2eb371f`](https://github.com/containerd/containerd/commit/8b2eb371f958f1bfc5bcab5ee70bcad18b2e5efc) Update Go to 1.20.6,1.19.11
      * [`cff669c7a`](https://github.com/containerd/containerd/commit/cff669c7aab055d6b46bbb27fd044aba5e1453d8) update go to go1.20.5, go1.19.10
      * [`f34a22de9`](https://github.com/containerd/containerd/commit/f34a22de99b57e30cd33d3769e3765950475ba07) update go to go1.20.4, go1.19.9
      * [`e8e73065e`](https://github.com/containerd/containerd/commit/e8e73065ec668097067d37381399a80c8107fae1) update go to go1.20.3, go1.19.8
      * [`9b3f950d6`](https://github.com/containerd/containerd/commit/9b3f950d607c3a6c2a3c1b8740c87338a986e203) Go 1.20.2
      * [`17d03ac68`](https://github.com/containerd/containerd/commit/17d03ac681f61cd83c2bc7239956504c25ceb2f4) Go 1.20.1
      * [`861f65447`](https://github.com/containerd/containerd/commit/861f65447c4cc59b2b91e441b24f1c80a730ce2b) go.mod: go 1.19
      * [`81fa93784`](https://github.com/containerd/containerd/commit/81fa937842ac2501f777e23cddab8c7a573bd318) Stop using math/rand.Read and rand.Seed (deprecated in Go 1.20)
      * [`70dc11a6c`](https://github.com/containerd/containerd/commit/70dc11a6c1258891aa281815bb94d4bdc1194fe7) lint: remove `//nolint:dupword` that are no longer needed
      * [`fec784a06`](https://github.com/containerd/containerd/commit/fec784a06ad4276574dfb16ff631f9839f3b676c) lint: silence "SA1019: tar.TypeRegA has been deprecated... (staticheck)"
      * [`6648df1ad`](https://github.com/containerd/containerd/commit/6648df1ada2575df6adcaf295b611d966d3308d7) lint: silence "type `HostFileConfig` is unused (unused)"
      * [`e6b268bc7`](https://github.com/containerd/containerd/commit/e6b268bc703b5903de719533a8fbe0307767342c) golangci-lint v1.51.1
      * [`c552ccf67`](https://github.com/containerd/containerd/commit/c552ccf6769245e1531212505fa75e89f6f6ff1c) go.mod: golang.org/x/sync v0.1.0
    * [releases/1.6] *: fix leaked shim caused by high IO pressure ([#9004](https://github.com/containerd/containerd/pull/9004))
      * [`d00af5c3e`](https://github.com/containerd/containerd/commit/d00af5c3ea1a290112b3a56bee31023ef1d2019d) integration: issue7496 case should work for runc.v2 only
      * [`583696e4e`](https://github.com/containerd/containerd/commit/583696e4e0b055b8a0f860b9ed7f31f0f3127ff4) Vagrantfile: add strace tool
      * [`ab21d60d2`](https://github.com/containerd/containerd/commit/ab21d60d27d1d7c87423e9b4ecb076358762e89b) pkg/cri/server: add criService as argument when handle exit event
      * [`a229883cb`](https://github.com/containerd/containerd/commit/a229883cb1bffecbd8bd4d41ab19c99110bbd189) pkg/cri/server: fix leaked shim issue
      * [`d8f824200`](https://github.com/containerd/containerd/commit/d8f824200cdc39410bf9a4d110073186d6864f64) integration: add case to reproduce #7496
    * [release/1.6] Cherry-pick: [overlay] add configurable mount options to overlay snapshotter ([#8961](https://github.com/containerd/containerd/pull/8961))
      * [`8cd40e1d0`](https://github.com/containerd/containerd/commit/8cd40e1d0f13e5ddfef13833b265f6dfa298ec69) Add configurable mount options to overlay
      * [`453fa397a`](https://github.com/containerd/containerd/commit/453fa397a1f0f00871ff1ca4314b65e898e33661) feat: make overlay sync removal configurable
    * [release/1.6 backport] update runc binary to v1.1.9 ([#8966](https://github.com/containerd/containerd/pull/8966))
      * [`4cb7764df`](https://github.com/containerd/containerd/commit/4cb7764df8025d0a6edb34f6b69daf6c2abe6ad0) update runc binary to v1.1.9
    </p>
    </details>
    
    ### Dependency Changes
    
    * **golang.org/x/sync**  036812b2e83c -> v0.1.0
    
    Previous release can be found at [v1.6.23](https://github.com/containerd/containerd/releases/tag/v1.6.23)
    
  • v1.7.6
    containerd 1.7.6
    
    Welcome to the v1.7.6 release of containerd!
    
    The sixth patch release for containerd 1.7 contains various fixes and updates.
    
    ### Notable Updates
    
    * **Fix log package for clients overwriting the global logger** ([#9032](https://github.com/containerd/containerd/pull/9032))
    * **Fix blockfile snapshotter copy on Darwin** ([#9047](https://github.com/containerd/containerd/pull/9047))
    * **Add support for Linux usernames on non-Linux platforms** ([#9015](https://github.com/containerd/containerd/pull/9015))
    * **Update Windows platform matcher to invoke stable ABI compability function** ([#9069](https://github.com/containerd/containerd/pull/9069))
    * **Update Golang to 1.20.8** ([#9074](https://github.com/containerd/containerd/pull/9074))
    * **Update push to inherit distribution sources from parent** ([#9084](https://github.com/containerd/containerd/pull/9084))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Derek McGowan
    * Kirtana Ashok
    * Phil Estes
    * Akihiro Suda
    * Danny Canter
    * Sebastiaan van Stijn
    * Akhil Mohan
    * Maksym Pavlenko
    * Samuel Karp
    * Wei Fu
    
    ### Changes
    <details><summary>20 commits</summary>
    <p>
    
    * [release/1.7] Prepare release notes for 1.7.6 ([#9085](https://github.com/containerd/containerd/pull/9085))
      * [`3e09c65b2`](https://github.com/containerd/containerd/commit/3e09c65b21bdda743f5f5de9fb392a25f6a342be) Prepare release notes for v1.7.6
    * [release/1.7] Invoke Stable ABI compatibility function in windows platform matcher ([#9069](https://github.com/containerd/containerd/pull/9069))
      * [`c7a35ccdc`](https://github.com/containerd/containerd/commit/c7a35ccdcc674e42c2364f062890b1e40507f543) Fix transfer service dependencies:
      * [`38d4e506d`](https://github.com/containerd/containerd/commit/38d4e506dd261b48bffbdd04e775d2b687290e2f) Invoke Stable ABI compatibility function in windows platform matcher
    * [release/1.7] push: inherit distribution sources from parent ([#9084](https://github.com/containerd/containerd/pull/9084))
      * [`5ebf05d97`](https://github.com/containerd/containerd/commit/5ebf05d97e2ef1b09d427118911a89c55059b0fe) push: inherit distribution sources from parent
      * [`d206896dd`](https://github.com/containerd/containerd/commit/d206896ddd965ab72605aca4337293c056fdd21b) content: add InfoProvider interface
    * [release/1.7] update to go1.20.8 ([#9074](https://github.com/containerd/containerd/pull/9074))
      * [`423693d7b`](https://github.com/containerd/containerd/commit/423693d7b481e4bd8adb7b0ed76cec0b2cb96724) [release/1.7] update to go1.20.8
    * [release/1.7] Update hcsshim tag to v0.11.0 ([#9063](https://github.com/containerd/containerd/pull/9063))
      * [`ddffc7c9a`](https://github.com/containerd/containerd/commit/ddffc7c9a1e5b6d73953a7f5f8a04170dc45c62a) Update hcsshim tag to v0.11.0
    * [release/1.7] CRI: Support Linux usernames for !linux platforms ([#9015](https://github.com/containerd/containerd/pull/9015))
      * [`b449440a4`](https://github.com/containerd/containerd/commit/b449440a40896d5c8f78460354eb2f5506432180) CRI: Support Linux usernames for !linux platforms
    * [release/1.7] Blockfile: Enlighten blockfile copy on Darwin ([#9047](https://github.com/containerd/containerd/pull/9047))
      * [`ed4bac11e`](https://github.com/containerd/containerd/commit/ed4bac11e5a60aaa3283f998313522d19d54c7f8) Blockfile: Enlighten blockfile copy on Darwin
    * [release/1.7 backport] Revert "log: define G() as a function instead of a variable" ([#9032](https://github.com/containerd/containerd/pull/9032))
      * [`4d1cfbbdd`](https://github.com/containerd/containerd/commit/4d1cfbbddb57ec10a3e55f71ae5a590091b6e3ab) Revert "log: define G() as a function instead of a variable"
    * [release/1.7 backport] make repositories of install dependencies configurable ([#9025](https://github.com/containerd/containerd/pull/9025))
      * [`a34e93241`](https://github.com/containerd/containerd/commit/a34e93241254112f8bab49a27f5aeee1f2317d9f) make repositories of install dependencies configurable
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/Microsoft/hcsshim**  v0.10.0-rc.8 -> v0.11.0
    
    Previous release can be found at [v1.7.5](https://github.com/containerd/containerd/releases/tag/v1.7.5)
    
  • v1.7.5
    containerd 1.7.5
    
    Welcome to the v1.7.5 release of containerd!
    
    The fifth patch release for containerd 1.7 fixes a versioning issue from
    the previous release and includes some internal logging API changes.
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Sebastiaan van Stijn
    * Derek McGowan
    * Akihiro Suda
    * Antonio Huete Jimenez
    * Phil Estes
    * Samuel Karp
    
    ### Changes
    <details><summary>18 commits</summary>
    <p>
    
    * [release/1.7] Prepare release notes for 1.7.5 ([#9010](https://github.com/containerd/containerd/pull/9010))
      * [`93b23eb10`](https://github.com/containerd/containerd/commit/93b23eb106f416179ea2fa9c0db621a9fa19c8e9) Prepare release notes for v1.7.5
      * [`fb1292c8d`](https://github.com/containerd/containerd/commit/fb1292c8de8b4ca8b273f9c500ef5da0f541c4fa) Bump version to v1.7.4
    * [release/1.7 backport] go.mod: github.com/containerd/continuity v0.4.2 ([#9012](https://github.com/containerd/containerd/pull/9012))
      * [`503ab21bf`](https://github.com/containerd/containerd/commit/503ab21bfc4c5be65cba0b6b58aa2968a44bbe65) go.mod: github.com/containerd/continuity v0.4.2
    * [release/1.7 backport] log: cleanups and improvements to decouple more from logrus ([#9001](https://github.com/containerd/containerd/pull/9001))
      * [`2a9ae3c51`](https://github.com/containerd/containerd/commit/2a9ae3c51132080940d40343175e0d3eb2a111fc) log: swap logrus functions with their equivalent on default logger
      * [`01445bb73`](https://github.com/containerd/containerd/commit/01445bb7386b98271b383b76e3d9007dabee03e8) log: add package documentation and summary of package's purpose
      * [`932795f45`](https://github.com/containerd/containerd/commit/932795f4526ad4dd5d76e2d9b4c1daeaeab19172) log: make Fields type a generic map[string]any
      * [`707ca94d8`](https://github.com/containerd/containerd/commit/707ca94d890dbea1be767312483522a98f6c5969) log: add log.Entry type
      * [`0a79e67e4`](https://github.com/containerd/containerd/commit/0a79e67e4f7bff1128c81ee14a8b2a74a8c55c51) log: define OutputFormat type
      * [`dbbe28b7d`](https://github.com/containerd/containerd/commit/dbbe28b7d1cc6137ed9fff1bcd8ed5e3ec442059) log: define G() as a function instead of a variable
      * [`93b6cb784`](https://github.com/containerd/containerd/commit/93b6cb78456b642a5470b24e9ec1fca17ec12e49) log: add all log-levels that are accepted
      * [`e8e086e02`](https://github.com/containerd/containerd/commit/e8e086e02bbcb078297302bc77a126647606c898) log: group "enum" consts and touch-up docs
      * [`7aa4f8fdc`](https://github.com/containerd/containerd/commit/7aa4f8fdccea58b2816fe7fe818653100cadfb98) log: WithLogger: remove redundant intermediate var
      * [`bfdce4ce4`](https://github.com/containerd/containerd/commit/bfdce4ce4bc922ab4990a71f4a5f31a8e2c0224d) log: SetFormat: include returns in switch
      * [`6621e0888`](https://github.com/containerd/containerd/commit/6621e08887d94b90d3c9b3756acff02573cdc147) log: remove testify dependency
      * [`df76aaede`](https://github.com/containerd/containerd/commit/df76aaede4b741e9436ced76dea71946d8f29684) removes/docker: remove unnecessary conversion (unconvert)
    </p>
    </details>
    
    ### Changes from containerd/continuity
    <details><summary>2 commits</summary>
    <p>
    
    * Add initial DragonFly BSD support ([#230](https://github.com/containerd/continuity/pull/230))
      * [`bcc6e25`](https://github.com/containerd/continuity/commit/bcc6e254708e0ace144a3d590a631db61da0a659) dragonfly: Initial porting work
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/containerd/continuity**  1e0d26eb2381 -> v0.4.2
    
    Previous release can be found at [v1.7.4](https://github.com/containerd/containerd/releases/tag/v1.7.4)
    
  • v1.7.4
    containerd 1.7.4
    
    Welcome to the v1.7.4 release of containerd!
    
    The fourth patch release for containerd 1.7 contains remote differ plugin support,
    a new block file based snapshotter, and various fixes and updates.
    
    ### Notable Updates
    
    * **Add blockfile snapshotter** ([#8986](https://github.com/containerd/containerd/pull/8986))
    * **Add remote/proxy differ** ([#8985](https://github.com/containerd/containerd/pull/8985))
    * **Update runc binary to v1.1.9** ([#8965](https://github.com/containerd/containerd/pull/8965))
    * **Cri: Don't use rel path for image volumes** ([#8926](https://github.com/containerd/containerd/pull/8926))
    * **Allow attaching to any combination of stdin/out/err** ([#8910](https://github.com/containerd/containerd/pull/8910))
    * **Fix ro mount option being passed** ([#8887](https://github.com/containerd/containerd/pull/8887))
    * **Fix leaked shim caused by high IO pressure** ([#9003](https://github.com/containerd/containerd/pull/9003))
    * **Add configurable mount options to overlay snapshotter** ([#9005](https://github.com/containerd/containerd/pull/9005))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Wei Fu
    * Derek McGowan
    * Akihiro Suda
    * Kazuyoshi Kato
    * Cardy.Tang
    * Phil Estes
    * Ben Foster
    * Danny Canter
    * Hsing-Yu (David) Chen
    * James Jenkins
    * James Sturtevant
    * Maksym Pavlenko
    * Rodrigo Campos
    * Sebastiaan van Stijn
    * rongfu.leng
    
    ### Changes
    <details><summary>43 commits</summary>
    <p>
    
    * [release/1.7] Prepare release notes for v1.7.4 ([#9000](https://github.com/containerd/containerd/pull/9000))
      * [`7a0cae3ca`](https://github.com/containerd/containerd/commit/7a0cae3ca1acf9a5ab4df4f77ee1b7cc6c3306ce) [release/1.7] Prepare release notes for v1.7.4
    * [releases/1.7] *: fix leaked shim caused by high IO pressure ([#9003](https://github.com/containerd/containerd/pull/9003))
      * [`537d7526e`](https://github.com/containerd/containerd/commit/537d7526e44bcefe509614abc04930345fbdb941) integration: issue7496 case should work for runc.v2 only
      * [`5add172be`](https://github.com/containerd/containerd/commit/5add172be5d27d1f98b430a6775da0256afc1e82) Vagrantfile: add strace tool
      * [`207e28f36`](https://github.com/containerd/containerd/commit/207e28f36dd9daa7ef412c0c2b7b32af3356a2da) integration: add ShouldRetryShutdown case based on #7496
      * [`b4f480fb3`](https://github.com/containerd/containerd/commit/b4f480fb30f71ec15055cab0421aa16258ac4b58) pkg/cri/sbserver: fix leaked shim issue for podsandbox mode
      * [`88ff575c5`](https://github.com/containerd/containerd/commit/88ff575c5cecf81ea7ef78079941521123b451de) pkg/cri/server: fix leaked shim issue
      * [`9f61dfb7c`](https://github.com/containerd/containerd/commit/9f61dfb7c50dea7bdf4326cf7b04a2ec088b81a5) integration: add case to reproduce #7496
    * [release/1.7] Cherry-pick: [overlay] add configurable mount options to overlay snapshotter ([#9005](https://github.com/containerd/containerd/pull/9005))
      * [`0f4885c16`](https://github.com/containerd/containerd/commit/0f4885c1660d2b1a855e79751daf5367fc679079) Add configurable mount options to overlay
      * [`8804a27d7`](https://github.com/containerd/containerd/commit/8804a27d72275497e4a590b92832d4f1076b43dc) feat: make overlay sync removal configurable
    * [release/1.7] Remove temporary replace ([#8997](https://github.com/containerd/containerd/pull/8997))
      * [`1c2dd5198`](https://github.com/containerd/containerd/commit/1c2dd5198e5d3d6d111d37a68ad67ae37adf6101) Remove temporary replace
    * [release/1.7] Add blockfile snapshotter ([#8986](https://github.com/containerd/containerd/pull/8986))
      * [`2bf6bd143`](https://github.com/containerd/containerd/commit/2bf6bd1431512c59f91318e817ee83c4adfcd282) vendor: update github.com/containerd/continuity
      * [`30a163086`](https://github.com/containerd/containerd/commit/30a163086959b89459b8193884f669561bb56f9e) snapshots|pkg: umount without DETACH and nosync after umount
      * [`c9eebe3d1`](https://github.com/containerd/containerd/commit/c9eebe3d1151ba3e523c2f0473e61132edf95a72) mount: support direct-io for loopback device
      * [`1c2977db0`](https://github.com/containerd/containerd/commit/1c2977db01efdd4a5aaff79d72d7e21b19d0f59a) Modify loopback size
      * [`cf9c78d2d`](https://github.com/containerd/containerd/commit/cf9c78d2d9eb7c3d66d1a94768d63b4f8482c4b2) snapshots/blockfile: fix lint issue
      * [`b823b4f54`](https://github.com/containerd/containerd/commit/b823b4f546cec4a9d92f9a8ed5b606cbffa287f9) snapshots/blockfile: deflaky the testsuite
      * [`6daeceb11`](https://github.com/containerd/containerd/commit/6daeceb1168303548ddc0d1af420813ad8475ceb) snapshots/blockfile: use passed in dst in scratchGenerator
      * [`99b61aee3`](https://github.com/containerd/containerd/commit/99b61aee341fa89370524e49b42212cea79d9fbc) snapshots/blockfile: use loop if options is empty
      * [`fd39769ac`](https://github.com/containerd/containerd/commit/fd39769ac70a382a0b4459080cb2f10c40842182) Add mount options to blockfile snapshotter
      * [`8d732c6c2`](https://github.com/containerd/containerd/commit/8d732c6c22d6e723f65be957427b16d48e1d488d) Add sync before unmount on snapshotter layer test
      * [`8472a407e`](https://github.com/containerd/containerd/commit/8472a407e0eb91f4e10d9e446bdfd439d11cfd55) Add blockfile snapshotter to snapshotters doc
      * [`6740d77ca`](https://github.com/containerd/containerd/commit/6740d77cae44522820e7575eb9d105e6c5b8d56b) Add blockfile as a builtin
      * [`07cc24b32`](https://github.com/containerd/containerd/commit/07cc24b32a319fb72622453f40ee8c338062df95) Add blockfile snapshotter
    * [release/1.7] Backport remote/proxy differ ([#8985](https://github.com/containerd/containerd/pull/8985))
      * [`32e3b76ee`](https://github.com/containerd/containerd/commit/32e3b76ee70fea42234b95ef01f78a13ac7c5c1d) Add diffservice to contrib
      * [`661e505c8`](https://github.com/containerd/containerd/commit/661e505c8239e97710bac220edf735f06027dbda) Add proxy differ
    * [release/1.7 backport] update runc binary to v1.1.9 ([#8965](https://github.com/containerd/containerd/pull/8965))
      * [`af79c07fd`](https://github.com/containerd/containerd/commit/af79c07fd69cd20b97b37a903ee6c6957e4628ec) update runc binary to v1.1.9
    * [release/1.7] Port fix for Linux Integration test failure ([#8950](https://github.com/containerd/containerd/pull/8950))
      * [`c0b1c8f74`](https://github.com/containerd/containerd/commit/c0b1c8f74aa5616c5e27845d18d4dca5ab30f9fd) fix ci Linux Integration test fail
    * [release/1.7] cri: Don't use rel path for image volumes ([#8926](https://github.com/containerd/containerd/pull/8926))
      * [`4e97a115f`](https://github.com/containerd/containerd/commit/4e97a115f702bd7de43ee17442a96f3537007a07) cri: Don't use rel path for image volumes
    * [release/1.7] fix: allow attaching to any combination of stdin/stdout/stderr ([#8910](https://github.com/containerd/containerd/pull/8910))
      * [`34a5d0330`](https://github.com/containerd/containerd/commit/34a5d033007eaae0530a89470407fbe920eec033) fix: allow attaching to any combination of stdin/stdout/stderr
    * [release/1.7 backport] update to go1.20.7, go1.19.12 ([#8906](https://github.com/containerd/containerd/pull/8906))
      * [`c5e7b84c0`](https://github.com/containerd/containerd/commit/c5e7b84c08b507f93b2df6d393eede3ff75f4e2f) update to go1.20.7, go1.19.12
    * [release/1.7] cherry-pick: Fix ro mount option being passed ([#8887](https://github.com/containerd/containerd/pull/8887))
      * [`2eaeb3205`](https://github.com/containerd/containerd/commit/2eaeb3205a1bd61b385a259d43f29ccc09993e18) Fix ro mount option being passed
    </p>
    </details>
    
    ### Changes from containerd/continuity
    <details><summary>4 commits</summary>
    <p>
    
    * fs: use io.Copy because go supports CopyFileRange ([#227](https://github.com/containerd/continuity/pull/227))
      * [`4b8bec5`](https://github.com/containerd/continuity/commit/4b8bec5682b6d50a6fba026303fb42a6369851a6) fs: use io.Copy because go supports CopyFileRange
    * fs/fstest: CreateFile should use sync ([#228](https://github.com/containerd/continuity/pull/228))
      * [`3fa7d7a`](https://github.com/containerd/continuity/commit/3fa7d7a5ec66805f9f099001d3fe83f11fb80c0c) fs/fstest: CreateFile should use sync
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/AdaLogics/go-fuzz-headers**    1f10f66a31bf -> ced1acdcaa24
    * **github.com/AdamKorcz/go-118-fuzz-build**  5330a85ea652 -> 8075edf89bb0
    * **github.com/containerd/continuity**        v0.4.1 -> 1e0d26eb2381
    
    Previous release can be found at [v1.7.3](https://github.com/containerd/containerd/releases/tag/v1.7.3)
    
  • v1.6.23
    containerd 1.6.23
    
    Welcome to the v1.6.23 release of containerd!
    
    The twenty-third patch release for containerd 1.6 contains various fixes and updates.
    
    ### Notable Updates
    
    * **Add stable ABI support in windows platform matcher + update hcsshim tag ([#8854](https://github.com/containerd/containerd/pull/8854))
    * **cri: Don't use rel path for image volumes ([#8927](https://github.com/containerd/containerd/pull/8927))
    * **Upgrade GitHub actions packages in release workflow ([#8908](https://github.com/containerd/containerd/pull/8908))
    * **update to go1.19.12 ([#8905](https://github.com/containerd/containerd/pull/8905))
    * **backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([#8888](https://github.com/containerd/containerd/pull/8888))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Kirtana Ashok
    * Maksym Pavlenko
    * Austin Vazquez
    * Ben Foster
    * Derek McGowan
    * Mike Brown
    * Phil Estes
    * Rodrigo Campos
    * Sebastiaan van Stijn
    * Wei Fu
    
    ### Changes
    <details><summary>13 commits</summary>
    <p>
    
    * [release/1.6] Add release notes for v1.6.23 ([#8939](https://github.com/containerd/containerd/pull/8939))
      * [`e297a668f`](https://github.com/containerd/containerd/commit/e297a668fa432fddcf1ea718be697a452968847f) Add release notes for v1.6.23
    * [release/1.6] Add stable ABI support in windows platform matcher + update hcsshim tag ([#8854](https://github.com/containerd/containerd/pull/8854))
      * [`f51bf1960`](https://github.com/containerd/containerd/commit/f51bf19608714bc052a38fc2dc0920b30244aec7) Add support for stable ABI windows versions
      * [`43a02c0b2`](https://github.com/containerd/containerd/commit/43a02c0b286d77d9455055b2453cbab57c55811b) Update hcsshim tag to v0.9.10
    *  [release/1.6] cri: Don't use rel path for image volumes ([#8927](https://github.com/containerd/containerd/pull/8927))
      * [`cc5b0a21b`](https://github.com/containerd/containerd/commit/cc5b0a21b438acd750f9779d3b3c4e68879bed50) cri: Don't use rel path for image volumes
    * [release/1.6 backport] Upgrade GitHub actions packages in release workflow ([#8908](https://github.com/containerd/containerd/pull/8908))
      * [`4238cff1c`](https://github.com/containerd/containerd/commit/4238cff1cfd43711c71f769b7129c6f8832ef507) Upgrade GitHub actions packages in release workflow
    * [release/1.6] update to go1.19.12 ([#8905](https://github.com/containerd/containerd/pull/8905))
      * [`00d1092b7`](https://github.com/containerd/containerd/commit/00d1092b78c3405daf3cc4ced8075ca5ca2903a8) update to go1.19.12
    * [release/1.6] backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([#8888](https://github.com/containerd/containerd/pull/8888))
      * [`47d73b2de`](https://github.com/containerd/containerd/commit/47d73b2de65c806d93e19879ae86787b6f3735d6) Fix ro mount option being passed
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/Microsoft/hcsshim**  v0.9.8 -> v0.9.10
    
    Previous release can be found at [v1.6.22](https://github.com/containerd/containerd/releases/tag/v1.6.22)
    
  • v1.7.3
    containerd 1.7.3
    
    Welcome to the v1.7.3 release of containerd!
    
    The third patch release for containerd 1.7 contains various fixes and updates.
    
    ### Notable Updates
    
    * **RunC: Update runc binary to v1.1.8** ([#8843](https://github.com/containerd/containerd/pull/8843))
    * **CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty** ([#8824](https://github.com/containerd/containerd/pull/8824))
    * **CRI: write generated CNI config atomically** ([#8825](https://github.com/containerd/containerd/pull/8825))
    * **Port-Forward: Correctly handle known errors** ([#8806](https://github.com/containerd/containerd/pull/8806))
    * **Resolve docker.NewResolver race condition** ([#8799](https://github.com/containerd/containerd/pull/8799))
    * **Fix net.ipv4.ping_group_range with userns** ([#8786](https://github.com/containerd/containerd/pull/8786))
    * **Runtime/V2/RunC: handle early exits w/o big locks** ([#8712](https://github.com/containerd/containerd/pull/8712))
    * **SecComp: always allow name_to_handle_at** ([#8753](https://github.com/containerd/containerd/pull/8753))
    * **CRI: Windows Pod Stats: Add a check to skip stats for containers that are not running** ([#8654](https://github.com/containerd/containerd/pull/8654))
    * **Task: don't `close()` io before `cancel()`** ([#8658](https://github.com/containerd/containerd/pull/8658))
    * **Remove CNI conf_template deprecation** ([#8638](https://github.com/containerd/containerd/pull/8638))
    * **Fix issue for HPC pod metrics** ([#8634](https://github.com/containerd/containerd/pull/8634))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Akihiro Suda
    * Phil Estes
    * Sebastiaan van Stijn
    * Wei Fu
    * Derek McGowan
    * Kazuyoshi Kato
    * Austin Vazquez
    * Samuel Karp
    * Shingo Omura
    * Jin Dong
    * Maksym Pavlenko
    * Aditi Sharma
    * Danny Canter
    * James Sturtevant
    * Laura Brehm
    * Rodrigo Campos
    * Akhil Mohan
    * Andrey Epifanov
    * Bjorn Neergaard
    * Cory Snider
    * Madhav Jivrajani
    * Mahamed Ali
    * Priyanka Saggu
    * Qasim Sarfraz
    * wangxiang
    * zounengren
    
    ### Changes
    <details><summary>63 commits</summary>
    <p>
    
    * [release/1.7] Prepare release notes for v1.7.3 ([#8871](https://github.com/containerd/containerd/pull/8871))
      * [`4cb2f1515`](https://github.com/containerd/containerd/commit/4cb2f1515a39a8a6b704b74e58b96f8a1ef9840c) [release/1.7] Add release notes for v1.7.3
    * [release/1.7] cri: memory.memsw.limit_in_bytes: no such file or directory ([#8869](https://github.com/containerd/containerd/pull/8869))
      * [`b461ecacf`](https://github.com/containerd/containerd/commit/b461ecacfa155befd259877e04b9835bdd04e0d9) cri: memory.memsw.limit_in_bytes: no such file or directory
    * [release/1.7] migrate to community owned bucket for node e2e tests ([#8875](https://github.com/containerd/containerd/pull/8875))
      * [`14328ae03`](https://github.com/containerd/containerd/commit/14328ae03b51ade0512496e3a4b0c2bf33ca5ffd) migrate to community owned bucket
    * [release/1.7 backport] update runc binary to v1.1.8 ([#8843](https://github.com/containerd/containerd/pull/8843))
      * [`b985f7ef1`](https://github.com/containerd/containerd/commit/b985f7ef15b6dbb6d5ea302584dcfe491b99d70c) update runc binary to v1.1.8
    * [release/1.7 backport] [CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty ([#8824](https://github.com/containerd/containerd/pull/8824))
      * [`083f57160`](https://github.com/containerd/containerd/commit/083f571609a83be94785b77a822aa7c332eeabfd) capture desc variable in range variable just in case that it run in parallel mode
      * [`a9440ce6b`](https://github.com/containerd/containerd/commit/a9440ce6b5a150be998c70549984b508231a6dbe) Use t.TempDir instead of os.MkdirTemp
      * [`eea3440d8`](https://github.com/containerd/containerd/commit/eea3440d899f6ce74fca5257dcc53e6cecc4fce4) use strings.Cut instead of strings.Split for parsing imageConfig.User
      * [`eace67180`](https://github.com/containerd/containerd/commit/eace671808e39d351c54e917fed86a58b92fe43b) fix userstr for dditionalGids on Linux
    * [release/1.7 backport] cri: write generated CNI config atomically ([#8825](https://github.com/containerd/containerd/pull/8825))
      * [`7353c0286`](https://github.com/containerd/containerd/commit/7353c02869507eb28e571125db05c7597bf92f27) ctr: update WritePidFile to use atomicfile
      * [`ae7021300`](https://github.com/containerd/containerd/commit/ae70213003a84301ff7dc171569e8ab3adffca35) shim: WritePidFile & WriteAddress use atomicfile
      * [`186eb64b7`](https://github.com/containerd/containerd/commit/186eb64b7c7a0fbef9c1b11837056ecb2e130d38) cri: write generated CNI config atomically on Unix
      * [`64c3dcd8e`](https://github.com/containerd/containerd/commit/64c3dcd8e25ae02f6803d4131cb3e40c0c2849c7) atomicfile: new package for atomic file writes
    * [release/1.7 backport] Move logrus setup code to log package ([#8831](https://github.com/containerd/containerd/pull/8831))
      * [`f7a20e17c`](https://github.com/containerd/containerd/commit/f7a20e17c3e96324cdf83388be289c4c2db1ba55) Move logrus setup code to log package
    * [release/1.7 backport] Cirrus CI: configure apt-get to wait for locks ([#8814](https://github.com/containerd/containerd/pull/8814))
      * [`60a6db9c2`](https://github.com/containerd/containerd/commit/60a6db9c2627018aef6484d6ca5898a09aa9888e) Cirrus CI: configure apt-get to wait for locks
    * [release/1.7 backport] Update Go to 1.20.6,1.19.11 ([#8815](https://github.com/containerd/containerd/pull/8815))
      * [`973778193`](https://github.com/containerd/containerd/commit/973778193b54a73b6975388efbdfcbbd33ca3212) Update Go to 1.20.6,1.19.11
    * [release/1.7 backport] update go to go1.20.5, go1.19.10 ([#8716](https://github.com/containerd/containerd/pull/8716))
      * [`403033e52`](https://github.com/containerd/containerd/commit/403033e52782716aa444d8d43a5c7e25efdfd4e5) update go to go1.20.5, go1.19.10
    * [release/1.7 backport] bugfix(port-forward): Correctly handle known errors ([#8806](https://github.com/containerd/containerd/pull/8806))
      * [`6b6b0c828`](https://github.com/containerd/containerd/commit/6b6b0c828051ecafc0653e271cda8cab2cbd59bd) bugfix(port-forward): Correctly handle known errors
    * [release/1.7] Resolve docker.NewResolver race condition ([#8799](https://github.com/containerd/containerd/pull/8799))
      * [`898eca21e`](https://github.com/containerd/containerd/commit/898eca21e3c7d12351c26891b1813dd51a423e82) Change http.Header copy to builtin Clone
      * [`fa2efc406`](https://github.com/containerd/containerd/commit/fa2efc406f09950b466ff3f5d00a5b0a924ef738) Resolve docker.NewResolver race condition
    * [release/1.7] Fix net.ipv4.ping_group_range with userns ([#8786](https://github.com/containerd/containerd/pull/8786))
      * [`241514815`](https://github.com/containerd/containerd/commit/241514815d278865199a701f23b83a20efe169be) pkg/cri/server: Test net.ipv4.ping_group_range works with userns
      * [`801e8c806`](https://github.com/containerd/containerd/commit/801e8c8069c4613de305c756c0f497f271ef3648) pkg/cri/server: Fix net.ipv4.ping_group_range with userns
    * [release/1.7 backport] vendor: github.com/containerd/zfs v1.1.0 ([#8782](https://github.com/containerd/containerd/pull/8782))
      * [`d5639a5a8`](https://github.com/containerd/containerd/commit/d5639a5a867c45a0c6c5b4f2e65e7ebda0aa02ff) vendor: github.com/containerd/zfs v1.1.0
    * [release/1.7 backport] ci: remove libseccomp-dev installation for nightly ([#8772](https://github.com/containerd/containerd/pull/8772))
      * [`15d65709e`](https://github.com/containerd/containerd/commit/15d65709ee8f239de6b908026a51481eaeab6066) ci: remove libseccomp-dev installation for nightly
    * [release/1.7] go.mod: Update cgroups to 3.0.2 ([#8769](https://github.com/containerd/containerd/pull/8769))
      * [`a08ae718c`](https://github.com/containerd/containerd/commit/a08ae718c47ed2069ab077fc99b4951776fc41ff) [release/1.7] go.mod: Update cgroups to 3.0.2
    * [release/1.7 backport] runtime/v2/runc: handle early exits w/o big locks ([#8712](https://github.com/containerd/containerd/pull/8712))
      * [`18c6503d9`](https://github.com/containerd/containerd/commit/18c6503d98f4de37ebbd39443bde958d8b6dc367) runtime/v2/runc: handle early exits w/o big locks
    * [release/1.7 backport] integration/client: add timeout to `TestShimOOMScore` ([#8750](https://github.com/containerd/containerd/pull/8750))
      * [`3bf3996d9`](https://github.com/containerd/containerd/commit/3bf3996d921c7466ad194ef5ac26bbddb3a89a33) integration/client: add timeout to `TestShimOOMScore`
    * [release/1.7 backport] Update ginkgo to match cri-tools' version ([#8760](https://github.com/containerd/containerd/pull/8760))
      * [`c2c54af9d`](https://github.com/containerd/containerd/commit/c2c54af9ddff6f26cc5ebefb2634ed5ca4cf15c3) Update ginkgo to match cri-tools' version
    * [release/1.7 backport] seccomp: always allow name_to_handle_at ([#8753](https://github.com/containerd/containerd/pull/8753))
      * [`6281d46df`](https://github.com/containerd/containerd/commit/6281d46df9cc1df891ef1ca68b3e1a2b11dd96cd) seccomp: always allow name_to_handle_at
    * [release/1.7] Pinned image support ([#8718](https://github.com/containerd/containerd/pull/8718))
      * [`699d6701a`](https://github.com/containerd/containerd/commit/699d6701ae17bd3c12a7f86f5d9470cedf210169) Pinned image support
    * [release/1.7] cherry-pick: No more nondistributable layers in MS registry ([#8690](https://github.com/containerd/containerd/pull/8690))
      * [`dafbeb5b1`](https://github.com/containerd/containerd/commit/dafbeb5b1ffdaa6c227fddeacf2b39816e61660f) No more nondistributable layers in MS registry
    * [release/1.7] [cri] Windows Pod Stats: Add a check to skip stats for containers that are not running ([#8654](https://github.com/containerd/containerd/pull/8654))
      * [`58b6b99cd`](https://github.com/containerd/containerd/commit/58b6b99cd6fde4f173df25c09b20682e29acebf5) Add a check to skip stats for containers that are not running
    * [release/1.7 backport] task: don't `close()` io before `cancel()` ([#8658](https://github.com/containerd/containerd/pull/8658))
      * [`e5b2a0131`](https://github.com/containerd/containerd/commit/e5b2a0131ba26b4366957bea07c67c171a11f52a) task: don't `close()` io before `cancel()`
    * [release/1.7 backport] move to CRI-TOOLS v1.27.0 ([#8656](https://github.com/containerd/containerd/pull/8656))
      * [`a6a15afe3`](https://github.com/containerd/containerd/commit/a6a15afe3e9dd2de89ddf0c1bdde73b42ae9720d) move to CRI-TOOLS v1.27.0
    * [release/1.7] Remove cni conf_template deprecation ([#8638](https://github.com/containerd/containerd/pull/8638))
      * [`0b2b96479`](https://github.com/containerd/containerd/commit/0b2b9647992dc4238e2a7d98c721dacb6cf753bf) RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3
      * [`a24267b28`](https://github.com/containerd/containerd/commit/a24267b28973821c3056b43270362bec5b8471ec) Remove cni conf_template deprecation
    * [release/1.7] Fix issue for HPC pod metrics ([#8634](https://github.com/containerd/containerd/pull/8634))
      * [`89415fe36`](https://github.com/containerd/containerd/commit/89415fe36162576fb88b0fd7c117238834f2c967) Fix issue for HPC pod metrics
    </p>
    </details>
    
    ### Changes from containerd/zfs
    <details><summary>49 commits</summary>
    <p>
    
    * gofumpt and update status badges ([#75](https://github.com/containerd/zfs/pull/75))
      * [`5e3457b`](https://github.com/containerd/zfs/commit/5e3457b5e3b8e586e7b634da7bb1d05bafa7af97) TestZFSUsage: use t.TempDir()
      * [`6e9c675`](https://github.com/containerd/zfs/commit/6e9c675d5fb46bfef3450b97dc66705b9b1c1257) README: update badges
      * [`ff17a79`](https://github.com/containerd/zfs/commit/ff17a79101fc3854e86b150fe1bcb5ef67dbde6c) gofmt code
    * go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 ([#73](https://github.com/containerd/zfs/pull/73))
      * [`d3485b9`](https://github.com/containerd/zfs/commit/d3485b960a0f962115d5b27af414ef00afc3f327) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1
    * gha: fix golangci-lint, and upgrade to v1.52.2 ([#74](https://github.com/containerd/zfs/pull/74))
      * [`23c831a`](https://github.com/containerd/zfs/commit/23c831a523b5e4a183ab296098fed921392b2b66) remove pre-go1.17 build-tags, and fix missing build-tags in plugin
      * [`e5acd95`](https://github.com/containerd/zfs/commit/e5acd9583b95971c99a3d1f75c2d45f5d300da00) gha: fix golangci-lint, upgrade to v1.52.2
    * Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 ([#72](https://github.com/containerd/zfs/pull/72))
      * [`00b96c2`](https://github.com/containerd/zfs/commit/00b96c267860d15a5e075f5137d945e3a1e27248) Bump github.com/containerd/containerd from 1.6.12 to 1.6.18
    * Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 ([#69](https://github.com/containerd/zfs/pull/69))
      * [`a099def`](https://github.com/containerd/zfs/commit/a099def4fa00d26dca5d962e5dcff913803b773d) Bump github.com/containerd/containerd from 1.6.9 to 1.6.12
    * Add CodeQL analysis workflow ([#67](https://github.com/containerd/zfs/pull/67))
      * [`fee1db7`](https://github.com/containerd/zfs/commit/fee1db7f3d385bcddb3d2f5e3f8ebcd08f161348) Add CodeQL analysis workflow
    * Update GitHub actions CI workflow ([#66](https://github.com/containerd/zfs/pull/66))
      * [`b8b7ab2`](https://github.com/containerd/zfs/commit/b8b7ab2115ea4c674c9183a1bb254006c351759a) Update GitHub actions CI workflow
    * Upgrade compiler to Go 1.19 and update dependencies ([#68](https://github.com/containerd/zfs/pull/68))
      * [`3e729b3`](https://github.com/containerd/zfs/commit/3e729b3f873deef33f7d080e88a15de01ae63ced) Update dependencies
      * [`3c003f8`](https://github.com/containerd/zfs/commit/3c003f800458ecc9112c9a7f1bcdaaf098d7e317) Upgrade compiler to Go 1.19
    * Remove references to io/ioutil package ([#65](https://github.com/containerd/zfs/pull/65))
      * [`d700762`](https://github.com/containerd/zfs/commit/d70076257b75ca038a9639e54ef8a83d933ae504) Remove references to io/ioutil package
    * Update go.mod and move to supported Go version ([#62](https://github.com/containerd/zfs/pull/62))
      * [`f52906e`](https://github.com/containerd/zfs/commit/f52906e04f4a33b2671449aec79a57d398e1c9e7) Update Go version to supported version
      * [`79ca2cb`](https://github.com/containerd/zfs/commit/79ca2cbc2bec7df1b3d1aab4f3b0a4098d65cc5b) Update containerd depedency to latest
    * go.mod: github.com/mistifyio/go-zfs v3.0.0 ([#59](https://github.com/containerd/zfs/pull/59))
      * [`2e3db29`](https://github.com/containerd/zfs/commit/2e3db29964df41b3356359616600ea6be38b49b7) go.mod: github.com/mistifyio/go-zfs v3.0.0
    * go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 ([#58](https://github.com/containerd/zfs/pull/58))
      * [`d904e63`](https://github.com/containerd/zfs/commit/d904e63fbb8f04816aba652ea37d0d6ad4844ced) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309
    * Update vendoring to containerd 1.6.x ([#57](https://github.com/containerd/zfs/pull/57))
      * [`e021180`](https://github.com/containerd/zfs/commit/e021180c43b6498fe219357bd9af19c77ac04fce) Update vendoring to containerd 1.6.x
    * Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#55](https://github.com/containerd/zfs/pull/55))
      * [`fc0c9a9`](https://github.com/containerd/zfs/commit/fc0c9a9c33db265975afdb845e6bfc596fdc8198) Bump github.com/containerd/containerd from 1.5.8 to 1.5.9
    * Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 ([#54](https://github.com/containerd/zfs/pull/54))
      * [`5d2f28c`](https://github.com/containerd/zfs/commit/5d2f28cbceb5b0d4246b1c0fc0bf6b41943afb32) Bump github.com/containerd/containerd from 1.5.5 to 1.5.8
    * follow-up-#52: fix the order of cause in fmt.Errorf ([#53](https://github.com/containerd/zfs/pull/53))
      * [`b3f193d`](https://github.com/containerd/zfs/commit/b3f193d7f00753424184bfd0c584e5c56e7de659) follow-up-#52: fix the order of cause in fmt.Errorf
    * replace pkg/errors ([#52](https://github.com/containerd/zfs/pull/52))
      * [`d5b0a2f`](https://github.com/containerd/zfs/commit/d5b0a2f2e24dbbd22d20fda55743ec31f7bed0c5) replace pkg/errors
    * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#51](https://github.com/containerd/zfs/pull/51))
      * [`fd6afa5`](https://github.com/containerd/zfs/commit/fd6afa5738a6331f3fccb6cba742bc18949711e0) Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
    * Bump containerd to 1.5.2 ([#50](https://github.com/containerd/zfs/pull/50))
      * [`aef875e`](https://github.com/containerd/zfs/commit/aef875e0f05b1ceb7190ab90de813500ee1dfd51) bump containerd to 1.5.2
    * Rename branches from master to main ([#49](https://github.com/containerd/zfs/pull/49))
      * [`35c6af7`](https://github.com/containerd/zfs/commit/35c6af74680574936a45075886e03070283ef172) Rename branches from master to main
    * sync up with containerd 1.5 GA  ([#47](https://github.com/containerd/zfs/pull/47))
      * [`3d5efef`](https://github.com/containerd/zfs/commit/3d5efefdedc5ef3c11da2ec27163bc58652eb1c9) vendor sync up with containerd 1.5 ga
    * README.md: fix CI badge ([#46](https://github.com/containerd/zfs/pull/46))
      * [`0977d81`](https://github.com/containerd/zfs/commit/0977d815b7d76b21cb861b04c0f0414d26af3046) README.md: fix CI badge
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/containerd/cgroups/v3**  v3.0.1 -> v3.0.2
    * **github.com/containerd/zfs**         v1.0.0 -> v1.1.0
    * **github.com/mistifyio/go-zfs/v3**    v3.0.1 **_new_**
    
    Previous release can be found at [v1.7.2](https://github.com/containerd/containerd/releases/tag/v1.7.2)
    
    
  • v1.6.22
    containerd 1.6.22
    
    Welcome to the v1.6.22 release of containerd!
    
    The twenty-second patch release for containerd 1.6 contains various fixes and updates.
    
    ### Notable Updates
    
    * **RunC: Update runc binary to v1.1.8** ([#8842](https://github.com/containerd/containerd/pull/8842))
    * **CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty** ([#8823](https://github.com/containerd/containerd/pull/8823))
    * **CRI: Write generated CNI config atomically** ([#8826](https://github.com/containerd/containerd/pull/8826))
    * **Fix concurrent writes for `UpdateContainerStats`** ([#8819](https://github.com/containerd/containerd/pull/8819))
    * **Make checkContainerTimestamps less strict on Windows** ([#8827](https://github.com/containerd/containerd/pull/8827))
    * **Port-Forward: Correctly handle known errors** ([#8805](https://github.com/containerd/containerd/pull/8805))
    * **Resolve docker.NewResolver race condition** ([#8800](https://github.com/containerd/containerd/pull/8800))
    * **SecComp: Always allow `name_to_handle_at`** ([#8754](https://github.com/containerd/containerd/pull/8754))
    * **Adding support to run hcsshim from local clone** ([#8713](https://github.com/containerd/containerd/pull/8713))
    * **Pinned image support** ([#8720](https://github.com/containerd/containerd/pull/8720))
    * **Runtime/V2/RunC: Handle early exits w/o big locks** ([#8695](https://github.com/containerd/containerd/pull/8695))
    * **CRITool: Move up to CRI-TOOLS v1.27.0** ([#7997](https://github.com/containerd/containerd/pull/7997))
    * **Fix cpu architecture detection issue on emulated ARM platform** ([#8533](https://github.com/containerd/containerd/pull/8533))
    * **Task: Don't `close()` io before `cancel()`** ([#8659](https://github.com/containerd/containerd/pull/8659))
    * **Fix panic when remote differ returns empty result** ([#8640](https://github.com/containerd/containerd/pull/8640))
    * **Plugins: Notify readiness when registered plugins are ready** ([#8583](https://github.com/containerd/containerd/pull/8583))
    * **Unwrap io errors in server connection receive error handling** ([ttrpc#143](https://github.com/containerd/ttrpc/pull/143))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Akihiro Suda
    * Phil Estes
    * Sebastiaan van Stijn
    * Derek McGowan
    * Wei Fu
    * Kazuyoshi Kato
    * Austin Vazquez
    * Samuel Karp
    * dependabot[bot]
    * Jin Dong
    * Maksym Pavlenko
    * Mike Brown
    * Shingo Omura
    * Akhil Mohan
    * Bjorn Neergaard
    * Laura Brehm
    * Tony Fang
    * Aditi Sharma
    * Andrey Epifanov
    * Benjamin Wang
    * Brian Goff
    * Cory Snider
    * Daniel Canter
    * Daniel Lenar
    * Henry Wang
    * Luca Comellini
    * Madhav Jivrajani
    * Mahamed Ali
    * Mohit Sharma
    * Oliver Radwell
    * Priyanka Saggu
    * Qasim Sarfraz
    * Takumasa Sakao
    * wangxiang
    * zounengren
    
    ### Changes
    <details><summary>95 commits</summary>
    <p>
    
    * [release/1.6] Prepare release notes for v1.6.22 ([#8863](https://github.com/containerd/containerd/pull/8863))
      * [`0770a4601`](https://github.com/containerd/containerd/commit/0770a4601c8d1dfc7699ae35d6be239ecc18025a) [release/1.6] Add release notes for v1.6.22
    * [release/1.6] migrate to community owned bucket for node e2e tests ([#8876](https://github.com/containerd/containerd/pull/8876))
      * [`512a672af`](https://github.com/containerd/containerd/commit/512a672afc8ffe9ec9b3a53289c7c6ffc20d0b7a) migrate to community owned bucket
    * [release/1.6] cri: memory.memsw.limit_in_bytes: no such file or directory ([#8870](https://github.com/containerd/containerd/pull/8870))
      * [`b585ff155`](https://github.com/containerd/containerd/commit/b585ff155a9dd6254e08b23a09a0bb7e0aac8d3f) cri: memory.memsw.limit_in_bytes: no such file or directory
    * [release/1.6] Update go-restful to v3.10.1  ([#8412](https://github.com/containerd/containerd/pull/8412))
      * [`a322077bf`](https://github.com/containerd/containerd/commit/a322077bfb97c5946b187ec7859960870e2962cc) go.mod: github.com/emicklei/go-restful/v3 v3.10.1
    * [release/1.6 backport] update runc binary to v1.1.8 ([#8842](https://github.com/containerd/containerd/pull/8842))
      * [`b3ac068eb`](https://github.com/containerd/containerd/commit/b3ac068ebc8526589af4a8b09eab597f501f6f0f) update runc binary to v1.1.8
    * [release/1.6 backport] ci: remove libseccomp-dev installation for nightly ([#8773](https://github.com/containerd/containerd/pull/8773))
      * [`6e2bcb6dd`](https://github.com/containerd/containerd/commit/6e2bcb6ddb7629f3c7f4ba62d5d74cf7179bb204) ci: remove libseccomp-dev installation for nightly
    * [release/1.6 backport] [CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty ([#8823](https://github.com/containerd/containerd/pull/8823))
      * [`cd06f23af`](https://github.com/containerd/containerd/commit/cd06f23af6bcf8c87cda625a0e78168c032a0637) capture desc variable in range variable just in case that it run in parallel mode
      * [`30f5c6a1f`](https://github.com/containerd/containerd/commit/30f5c6a1f26bf34bbe5eaf21acc7d5b86b14e027) Use t.TempDir instead of os.MkdirTemp
      * [`59d8363ef`](https://github.com/containerd/containerd/commit/59d8363ef33caa1a8261f472d3081f7f9d39e75e) fix userstr for dditionalGids on Linux
    * [release/1.6 backport] cri: write generated CNI config atomically ([#8826](https://github.com/containerd/containerd/pull/8826))
      * [`d75bf78c2`](https://github.com/containerd/containerd/commit/d75bf78c2f4af6c773056cdd096d3e3b9536348e) ctr: update WritePidFile to use atomicfile
      * [`5f70b23c1`](https://github.com/containerd/containerd/commit/5f70b23c11dc0ff5b4602fc202ffcae30013bb41) shim: WritePidFile & WriteAddress use atomicfile
      * [`505d444b0`](https://github.com/containerd/containerd/commit/505d444b0f339f2daa631ef6ea7f1a9cc22ba6f7) cri: write generated CNI config atomically on Unix
      * [`b2d2d3829`](https://github.com/containerd/containerd/commit/b2d2d3829912a87be519840e45307e0e74bf7693) atomicfile: new package for atomic file writes
    * [release/1.6 backport] Fix concurrent writes for UpdateContainerStats ([#8819](https://github.com/containerd/containerd/pull/8819))
      * [`9f650143f`](https://github.com/containerd/containerd/commit/9f650143fafb5927479ea3b5bf2b8e309c2d8265) Fix concurrent writes for UpdateContainerStats
    * [release/1.6 backport] Make checkContainerTimestamps less strict on Windows ([#8827](https://github.com/containerd/containerd/pull/8827))
      * [`568ce91ca`](https://github.com/containerd/containerd/commit/568ce91ca590bd37346df0550f25e7ef7eef3cff) Make checkContainerTimestamps less strict on Windows
    * [release/1.6 backport] dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8817](https://github.com/containerd/containerd/pull/8817))
      * [`d2f47192a`](https://github.com/containerd/containerd/commit/d2f47192a54e7b58c037788a0f9b7e4f9047e849) dependency: bump go.etcd.io/bbolt to v1.3.7
      * [`fb56dc245`](https://github.com/containerd/containerd/commit/fb56dc24522855a33ec795eaeebbb57bb15e49f0) [release/1.6] vendor: github.com/stretchr/testify v1.8.1
    * [release/1.6 backport] Move logrus setup code to log package ([#8832](https://github.com/containerd/containerd/pull/8832))
      * [`7fbd5dc89`](https://github.com/containerd/containerd/commit/7fbd5dc893007631794984c26c3a72320a34ae92) Move logrus setup code to log package
    * [release/1.6 backport] release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles ([#8820](https://github.com/containerd/containerd/pull/8820))
      * [`59a143670`](https://github.com/containerd/containerd/commit/59a1436706a23746f45ec111a0ffbcf887fb42de) release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles
    * [release/1.6 backport] Use version 2 configuration format in docs ([#8821](https://github.com/containerd/containerd/pull/8821))
      * [`5b51b79e2`](https://github.com/containerd/containerd/commit/5b51b79e2c7baf8dad53e48dfddadabff08b711d) [release/1.6] fix remaining "v1 config" plugin IDs
      * [`b7cf26d8d`](https://github.com/containerd/containerd/commit/b7cf26d8dc72f0f79946c289ac68c0f2a581c6c5) docs: Fix sample config.toml syntax
      * [`fcdaf0966`](https://github.com/containerd/containerd/commit/fcdaf09664c006abf711ee88e26f18019643ffd9) docs: migrate config v1 to v2
      * [`728d5c5f0`](https://github.com/containerd/containerd/commit/728d5c5f0be709e415f72f44c52fe78233ddd97d) Use version 2 config and mention containerd config command
    * [release/1.6] update go to go1.19.11 ([#8816](https://github.com/containerd/containerd/pull/8816))
      * [`81aa14718`](https://github.com/containerd/containerd/commit/81aa147181ca24987be3036d8487b54125256fc3) [release/1.6] update go to go1.19.11
    * [release/1.6] update go to go1.19.10 ([#8715](https://github.com/containerd/containerd/pull/8715))
      * [`17cd86629`](https://github.com/containerd/containerd/commit/17cd86629acab42dd7708720b386e88cd4be1535) [release/1.6] update go to go1.19.10
    * [release/1.6 backport] bugfix(port-forward): Correctly handle known errors ([#8805](https://github.com/containerd/containerd/pull/8805))
      * [`fdb65f214`](https://github.com/containerd/containerd/commit/fdb65f21488bd7a2d8dfca9beac95e0dfbc4259c) bugfix(port-forward): Correctly handle known errors
    * [release/1.6] Resolve docker.NewResolver race condition ([#8800](https://github.com/containerd/containerd/pull/8800))
      * [`b5784af66`](https://github.com/containerd/containerd/commit/b5784af662f7fc409eebbd655c42b7b0f462d8ed) Change http.Header copy to builtin Clone
      * [`31c466f82`](https://github.com/containerd/containerd/commit/31c466f822906dfbbf57be1cfec253179455f429) Resolve docker.NewResolver race condition
    * [release/1.6 backport] vendor: github.com/containerd/zfs v1.1.0 ([#8781](https://github.com/containerd/containerd/pull/8781))
      * [`be6406ca6`](https://github.com/containerd/containerd/commit/be6406ca67234c0a89320272557bb5ac5b0b60cc) vendor: github.com/containerd/zfs v1.1.0
      * [`9f1260074`](https://github.com/containerd/containerd/commit/9f12600747060b5ba68d0d27d1666e7b25e00afb) [release/1.6] vendor gotest.tools/v3 v3.5.0
      * [`526e9e0ce`](https://github.com/containerd/containerd/commit/526e9e0ce4e2338afa0eca0f1c0969f24f9819dd) Bump grpc to v1.50.1
      * [`0e7d2d121`](https://github.com/containerd/containerd/commit/0e7d2d1217d6399607cf8c8abb89662cebd9a30a) go.mod: github.com/sirupsen/logrus v1.9.0
      * [`5b153c621`](https://github.com/containerd/containerd/commit/5b153c6214a9ae14e75be6a6e15b6bdf9c2b60f0) go.mod: github.com/moby/sys/mountinfo v0.6.2
      * [`9dee60960`](https://github.com/containerd/containerd/commit/9dee60960792b9e6d8d80ddc16011191e7a660c6) go.mod: github.com/moby/sys/mountinfo v0.6.0
    * [release/1.6 backport] seccomp: always allow name_to_handle_at ([#8754](https://github.com/containerd/containerd/pull/8754))
      * [`07ea7b9e7`](https://github.com/containerd/containerd/commit/07ea7b9e789ec116d9002a3ab0cfb35dc61ef8df) seccomp: always allow name_to_handle_at
    * [release/1.6 backport] Update ginkgo to match cri-tools' version ([#8759](https://github.com/containerd/containerd/pull/8759))
      * [`1dae51fed`](https://github.com/containerd/containerd/commit/1dae51fed807a56b5e135fb5a3b0455713450e25) Update ginkgo to match cri-tools' version
    * [release/1.6 backport] integration/client: add timeout to `TestShimOOMScore` ([#8749](https://github.com/containerd/containerd/pull/8749))
      * [`bd76ab978`](https://github.com/containerd/containerd/commit/bd76ab978ba760affd9fe2be2901b4ff76d5a3c0) integration/client: add timeout to `TestShimOOMScore`
    * [release/1.6 backport] Adding support to run hcsshim from local clone ([#8713](https://github.com/containerd/containerd/pull/8713))
      * [`8e14eccb2`](https://github.com/containerd/containerd/commit/8e14eccb29c6a43f75779e9cdd08dc5f75825166) Adding support to run hcsshim from local clone
    * [1.6] Add Fields type alias to log package ([#8739](https://github.com/containerd/containerd/pull/8739))
      * [`9f2cdd589`](https://github.com/containerd/containerd/commit/9f2cdd5894ba0010e602a120e0c625ac96585711) Add Fields type alias to log package
    * [release/1.6] Pinned image support ([#8720](https://github.com/containerd/containerd/pull/8720))
      * [`f4713aad0`](https://github.com/containerd/containerd/commit/f4713aad0e3b9f51d02e288b94e4d2c524373284) Pinned image support
    * [release/1.6 backport] runtime/v2/runc: handle early exits w/o big locks ([#8695](https://github.com/containerd/containerd/pull/8695))
      * [`dbeec47b4`](https://github.com/containerd/containerd/commit/dbeec47b4663422225ffc517ab9d696777c2c6f1) runtime/v2/runc: handle early exits w/o big locks
    * [release/1.6 backport] move up to CRI-TOOLS v1.27.0 ([#7997](https://github.com/containerd/containerd/pull/7997))
      * [`a8e01e40a`](https://github.com/containerd/containerd/commit/a8e01e40a0f63aac0249d514de1dc2708d40d7f7) move to CRI-TOOLS v1.27.0
      * [`755f80698`](https://github.com/containerd/containerd/commit/755f80698aeb5f1ca856f487cd2d261464c6d705) move up to CRI-TOOLS v1.26.0
      * [`b29cc035f`](https://github.com/containerd/containerd/commit/b29cc035fbe6ad06d67e4b42fed2f47b57ef0a48) bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a
      * [`9138999f5`](https://github.com/containerd/containerd/commit/9138999f5dea770598b4a67da6682cab4c3f5713) Upgrade critools from 1.24.1 to 1.25.0
    * [release/1.6] cherry-pick: No more nondistributable layers in MS registry ([#8691](https://github.com/containerd/containerd/pull/8691))
      * [`712ff8eb3`](https://github.com/containerd/containerd/commit/712ff8eb389d49531207e34479e065406effb902) No more nondistributable layers in MS registry
    * [release/1.6] Fix cpu architecture detection issue on emulated ARM platform ([#8533](https://github.com/containerd/containerd/pull/8533))
      * [`2b16e4bfa`](https://github.com/containerd/containerd/commit/2b16e4bfa135e3242b41ae43cf2bb6f3cd3fe9b1) Add unit test to function GetCPUVariantFromArch
      * [`106e36ec3`](https://github.com/containerd/containerd/commit/106e36ec3e7c72036b498b4ac73000d5c1a79d9d) Use uname machine field to get CPU variant if fails at /proc/cpuinfo
    * [release/1.6] Update lint timeout ([#8679](https://github.com/containerd/containerd/pull/8679))
      * [`287fdfea6`](https://github.com/containerd/containerd/commit/287fdfea63fea94952885f0807fc11c2612e5828) Update linter timeout to match main branch
    * [release/1.6 backport] task: don't `close()` io before `cancel()` ([#8659](https://github.com/containerd/containerd/pull/8659))
      * [`b27f7daa5`](https://github.com/containerd/containerd/commit/b27f7daa582f149f985a56313711c8c4a4353376) task: don't `close()` io before `cancel()`
    * [release/1.6] update test box to fedora 37 ([#8660](https://github.com/containerd/containerd/pull/8660))
      * [`8b4c69248`](https://github.com/containerd/containerd/commit/8b4c6924856fddaece9ed58700cb8473c6a7bdeb) update test box to fedora 37
    * [release/1.6] Revert "Downgrade MinGW to version 10.2.0" ([#8668](https://github.com/containerd/containerd/pull/8668))
      * [`81d6085af`](https://github.com/containerd/containerd/commit/81d6085af5a20fbc728ccffad4b91ee6ef08ef36) Revert "Downgrade MinGW to version 10.2.0"
    * [release/1.6 backport] Fix panic when remote differ returns empty result ([#8640](https://github.com/containerd/containerd/pull/8640))
      * [`f98122378`](https://github.com/containerd/containerd/commit/f98122378197fb5199bab1d7574288fe276293ee) Fix panic when remote differ returns empty result
    * [1.6] Bump x/net to 0.8 ([#8642](https://github.com/containerd/containerd/pull/8642))
      * [`aa53f272d`](https://github.com/containerd/containerd/commit/aa53f272dd748ef57bb22a9f9aaa86fb9ad2f4d4) Bump x/net to 0.8
    * [release/1.6 backport] remotes/docker: ResolverOptions: fix deprecation comments ([#8620](https://github.com/containerd/containerd/pull/8620))
      * [`56ff20839`](https://github.com/containerd/containerd/commit/56ff2083957e0ca58168f50e89120bb5d0067362) remotes/docker: ResolverOptions: fix deprecation comments
    * [release/1.6] notify readiness when registered plugins are ready ([#8583](https://github.com/containerd/containerd/pull/8583))
      * [`bccaf68b7`](https://github.com/containerd/containerd/commit/bccaf68b7749b62d821b80c8a845417113f44310) notify readiness when registered plugins are ready
    * [release/1.6] Update ttrpc to 1.1.2 ([#8528](https://github.com/containerd/containerd/pull/8528))
      * [`1cdbbe76b`](https://github.com/containerd/containerd/commit/1cdbbe76bc6d86d50d9338d3605af7ed8a33559c) Update ttrpc to 1.1.2
    </p>
    </details>
    
    ### Changes from containerd/ttrpc
    <details><summary>2 commits</summary>
    <p>
    
    * [release/1.1] Unwrap io errors in server connection receive error handling ([#143](https://github.com/containerd/ttrpc/pull/143))
      * [`d5f7eed`](https://github.com/containerd/ttrpc/commit/d5f7eeddb5e09b035c0683a2ffc9d19bda284b59) Unwrap io errors in server connection receive error handling
    </p>
    </details>
    
    ### Changes from containerd/zfs
    <details><summary>49 commits</summary>
    <p>
    
    * gofumpt and update status badges ([#75](https://github.com/containerd/zfs/pull/75))
      * [`5e3457b`](https://github.com/containerd/zfs/commit/5e3457b5e3b8e586e7b634da7bb1d05bafa7af97) TestZFSUsage: use t.TempDir()
      * [`6e9c675`](https://github.com/containerd/zfs/commit/6e9c675d5fb46bfef3450b97dc66705b9b1c1257) README: update badges
      * [`ff17a79`](https://github.com/containerd/zfs/commit/ff17a79101fc3854e86b150fe1bcb5ef67dbde6c) gofmt code
    * go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 ([#73](https://github.com/containerd/zfs/pull/73))
      * [`d3485b9`](https://github.com/containerd/zfs/commit/d3485b960a0f962115d5b27af414ef00afc3f327) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1
    * gha: fix golangci-lint, and upgrade to v1.52.2 ([#74](https://github.com/containerd/zfs/pull/74))
      * [`23c831a`](https://github.com/containerd/zfs/commit/23c831a523b5e4a183ab296098fed921392b2b66) remove pre-go1.17 build-tags, and fix missing build-tags in plugin
      * [`e5acd95`](https://github.com/containerd/zfs/commit/e5acd9583b95971c99a3d1f75c2d45f5d300da00) gha: fix golangci-lint, upgrade to v1.52.2
    * Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 ([#72](https://github.com/containerd/zfs/pull/72))
      * [`00b96c2`](https://github.com/containerd/zfs/commit/00b96c267860d15a5e075f5137d945e3a1e27248) Bump github.com/containerd/containerd from 1.6.12 to 1.6.18
    * Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 ([#69](https://github.com/containerd/zfs/pull/69))
      * [`a099def`](https://github.com/containerd/zfs/commit/a099def4fa00d26dca5d962e5dcff913803b773d) Bump github.com/containerd/containerd from 1.6.9 to 1.6.12
    * Add CodeQL analysis workflow ([#67](https://github.com/containerd/zfs/pull/67))
      * [`fee1db7`](https://github.com/containerd/zfs/commit/fee1db7f3d385bcddb3d2f5e3f8ebcd08f161348) Add CodeQL analysis workflow
    * Update GitHub actions CI workflow ([#66](https://github.com/containerd/zfs/pull/66))
      * [`b8b7ab2`](https://github.com/containerd/zfs/commit/b8b7ab2115ea4c674c9183a1bb254006c351759a) Update GitHub actions CI workflow
    * Upgrade compiler to Go 1.19 and update dependencies ([#68](https://github.com/containerd/zfs/pull/68))
      * [`3e729b3`](https://github.com/containerd/zfs/commit/3e729b3f873deef33f7d080e88a15de01ae63ced) Update dependencies
      * [`3c003f8`](https://github.com/containerd/zfs/commit/3c003f800458ecc9112c9a7f1bcdaaf098d7e317) Upgrade compiler to Go 1.19
    * Remove references to io/ioutil package ([#65](https://github.com/containerd/zfs/pull/65))
      * [`d700762`](https://github.com/containerd/zfs/commit/d70076257b75ca038a9639e54ef8a83d933ae504) Remove references to io/ioutil package
    * Update go.mod and move to supported Go version ([#62](https://github.com/containerd/zfs/pull/62))
      * [`f52906e`](https://github.com/containerd/zfs/commit/f52906e04f4a33b2671449aec79a57d398e1c9e7) Update Go version to supported version
      * [`79ca2cb`](https://github.com/containerd/zfs/commit/79ca2cbc2bec7df1b3d1aab4f3b0a4098d65cc5b) Update containerd depedency to latest
    * go.mod: github.com/mistifyio/go-zfs v3.0.0 ([#59](https://github.com/containerd/zfs/pull/59))
      * [`2e3db29`](https://github.com/containerd/zfs/commit/2e3db29964df41b3356359616600ea6be38b49b7) go.mod: github.com/mistifyio/go-zfs v3.0.0
    * go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 ([#58](https://github.com/containerd/zfs/pull/58))
      * [`d904e63`](https://github.com/containerd/zfs/commit/d904e63fbb8f04816aba652ea37d0d6ad4844ced) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309
    * Update vendoring to containerd 1.6.x ([#57](https://github.com/containerd/zfs/pull/57))
      * [`e021180`](https://github.com/containerd/zfs/commit/e021180c43b6498fe219357bd9af19c77ac04fce) Update vendoring to containerd 1.6.x
    * Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#55](https://github.com/containerd/zfs/pull/55))
      * [`fc0c9a9`](https://github.com/containerd/zfs/commit/fc0c9a9c33db265975afdb845e6bfc596fdc8198) Bump github.com/containerd/containerd from 1.5.8 to 1.5.9
    * Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 ([#54](https://github.com/containerd/zfs/pull/54))
      * [`5d2f28c`](https://github.com/containerd/zfs/commit/5d2f28cbceb5b0d4246b1c0fc0bf6b41943afb32) Bump github.com/containerd/containerd from 1.5.5 to 1.5.8
    * follow-up-#52: fix the order of cause in fmt.Errorf ([#53](https://github.com/containerd/zfs/pull/53))
      * [`b3f193d`](https://github.com/containerd/zfs/commit/b3f193d7f00753424184bfd0c584e5c56e7de659) follow-up-#52: fix the order of cause in fmt.Errorf
    * replace pkg/errors ([#52](https://github.com/containerd/zfs/pull/52))
      * [`d5b0a2f`](https://github.com/containerd/zfs/commit/d5b0a2f2e24dbbd22d20fda55743ec31f7bed0c5) replace pkg/errors
    * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#51](https://github.com/containerd/zfs/pull/51))
      * [`fd6afa5`](https://github.com/containerd/zfs/commit/fd6afa5738a6331f3fccb6cba742bc18949711e0) Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
    * Bump containerd to 1.5.2 ([#50](https://github.com/containerd/zfs/pull/50))
      * [`aef875e`](https://github.com/containerd/zfs/commit/aef875e0f05b1ceb7190ab90de813500ee1dfd51) bump containerd to 1.5.2
    * Rename branches from master to main ([#49](https://github.com/containerd/zfs/pull/49))
      * [`35c6af7`](https://github.com/containerd/zfs/commit/35c6af74680574936a45075886e03070283ef172) Rename branches from master to main
    * sync up with containerd 1.5 GA  ([#47](https://github.com/containerd/zfs/pull/47))
      * [`3d5efef`](https://github.com/containerd/zfs/commit/3d5efefdedc5ef3c11da2ec27163bc58652eb1c9) vendor sync up with containerd 1.5 ga
    * README.md: fix CI badge ([#46](https://github.com/containerd/zfs/pull/46))
      * [`0977d81`](https://github.com/containerd/zfs/commit/0977d815b7d76b21cb861b04c0f0414d26af3046) README.md: fix CI badge
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/containerd/ttrpc**        v1.1.1 -> v1.1.2
    * **github.com/containerd/zfs**          v1.0.0 -> v1.1.0
    * **github.com/emicklei/go-restful/v3**  v3.7.3 -> v3.10.1
    * **github.com/google/go-cmp**           v0.5.6 -> v0.5.9
    * **github.com/google/uuid**             v1.2.0 -> v1.3.0
    * **github.com/mistifyio/go-zfs/v3**     v3.0.1 **_new_**
    * **github.com/moby/sys/mountinfo**      v0.5.0 -> v0.6.2
    * **github.com/sirupsen/logrus**         v1.8.1 -> v1.9.0
    * **github.com/stretchr/testify**        v1.7.0 -> v1.8.1
    * **go.etcd.io/bbolt**                   v1.3.6 -> v1.3.7
    * **golang.org/x/net**                   a158d28d115b -> v0.8.0
    * **golang.org/x/sys**                   8c9f86f7a55f -> v0.6.0
    * **golang.org/x/term**                  03fcf44c2211 -> v0.6.0
    * **golang.org/x/text**                  v0.3.7 -> v0.8.0
    * **google.golang.org/grpc**             v1.47.0 -> v1.50.1
    * **google.golang.org/protobuf**         v1.28.0 -> v1.28.1
    * **gotest.tools/v3**                    v3.0.3 -> v3.5.0
    
    Previous release can be found at [v1.6.21](https://github.com/containerd/containerd/releases/tag/v1.6.21)
    
    
  • v1.7.2
    containerd 1.7.2
    
    Welcome to the v1.7.2 release of containerd!
    
    The second patch release for containerd 1.7 includes enhancements to CRI sandbox mode,
    Windows snapshot mounting support, and CRI and container IO bug fixes.
    
    ### CRI/Sandbox Updates
    * **Publish sandbox events** ([#8613](https://github.com/containerd/containerd/pull/8613))
    * **Make stats respect sandbox's platform** ([#8604](https://github.com/containerd/containerd/pull/8604))
    
    ### Other Notable Updates
    * **Mount snapshots on Windows** ([#8616](https://github.com/containerd/containerd/pull/8616))
    * **Notify readiness when registered plugins are ready** ([#8584](https://github.com/containerd/containerd/pull/8584))
    * **Fix cio.Cancel() should close pipes** ([#8624](https://github.com/containerd/containerd/pull/8624))
    * **CDI: Use CRI Config.CDIDevices field for CDI injection** ([#8519](https://github.com/containerd/containerd/pull/8519))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Gabriel Adrian Samfira
    * Derek McGowan
    * Paul "TBBle" Hampson
    * Maksym Pavlenko
    * Phil Estes
    * Austin Vazquez
    * Akihiro Suda
    * Kazuyoshi Kato
    * Danny Canter
    * Samuel Karp
    * Sebastiaan van Stijn
    * Ed Bartosh
    * Henry Wang
    * Hsing-Yu (David) Chen
    * Jan Dubois
    * Mike Brown
    * Wei Fu
    * helen
    
    ### Changes
    <details><summary>59 commits</summary>
    <p>
    
    * [release/1.7] Prepare release notes for v1.7.2 ([#8629](https://github.com/containerd/containerd/pull/8629))
      * [`0e41daaea`](https://github.com/containerd/containerd/commit/0e41daaeabefcf7c61034024b4507ceee139761b) [release/1.7] Prepare release notes for v1.7.2
    * [1.7 backport] Fix panic when remote differ returns empty result ([#8631](https://github.com/containerd/containerd/pull/8631))
      * [`e134b6393`](https://github.com/containerd/containerd/commit/e134b639396ab07513fecfa221fc4ad8634b2154) Fix panic when remote differ returns empty result
    * [release/1.7 backport] Mount snapshots on Windows ([#8616](https://github.com/containerd/containerd/pull/8616))
      * [`313c226b8`](https://github.com/containerd/containerd/commit/313c226b8b9c30995b90d9a6535b2972707afbd4) Update continuity to a tagged version
      * [`8dd16285a`](https://github.com/containerd/containerd/commit/8dd16285a0558c56255f7d88a509d0e8d930efe3) UnmountAll is a no-op for missing mount points
      * [`acff3eefa`](https://github.com/containerd/containerd/commit/acff3eefa69b6d0238062396fb91df5cfb699603) Improve error messages and remove check
      * [`b4dd3bf4e`](https://github.com/containerd/containerd/commit/b4dd3bf4e291b6be928de1be272740c6a9f2dd3e) Make ReadOnly() available on all platforms
      * [`08d8baf3f`](https://github.com/containerd/containerd/commit/08d8baf3f4d82d5917e8acc94e50d25b4d7d6500) Increase integration test tmieout to 20m
      * [`1f0dbd011`](https://github.com/containerd/containerd/commit/1f0dbd011ae5b635039646f29bba2e0b288d95ca) Remove bind code path in mount()
      * [`8f37b1c63`](https://github.com/containerd/containerd/commit/8f37b1c63712aefeef8e3c357e85ebde8f670ba8) Remove "bind" code path from diff
      * [`9139208b3`](https://github.com/containerd/containerd/commit/9139208b319828e0cafe8110743fa455dc3b75f1) Properly mount base layers
      * [`e61e7b312`](https://github.com/containerd/containerd/commit/e61e7b31263ca717d2ff00b37abdc83ff0f5346f) Skip parent layer options on bind mounts
      * [`e4307926f`](https://github.com/containerd/containerd/commit/e4307926f327e35cc5fcd012ac4854cf85cbee07) Add ReadOnly() function
      * [`0277b9b01`](https://github.com/containerd/containerd/commit/0277b9b01a4992ba315f379ca599bf080dd6495b) Remove escalated privileges
      * [`d5c18dfb7`](https://github.com/containerd/containerd/commit/d5c18dfb7ed449e0232ccafcc6f4cb9a2473221d) Use DefaultSnapshotter
      * [`853179366`](https://github.com/containerd/containerd/commit/853179366b2aa7bebd17903faa0ada9dcf9297cc) use t.Fatal if we cannot enable process privileges
      * [`5b3ee413f`](https://github.com/containerd/containerd/commit/5b3ee413f49fac47017cfacf09176e9701052096) Update continuity
      * [`375172604`](https://github.com/containerd/containerd/commit/375172604df61e312810efbb7fc0080df5a0ab2c) Fix go.mod, simplify boolean logic, add logging
      * [`600abd137`](https://github.com/containerd/containerd/commit/600abd13791fcc6b3dd23c7f78f8c8c796340e33) Ignore ERROR_NOT_FOUND error when removing mount
      * [`df7295dcd`](https://github.com/containerd/containerd/commit/df7295dcdf00839423109ac65b1dc9429f632e00) Update continuity, go-winio and hcsshim
      * [`0db78c482`](https://github.com/containerd/containerd/commit/0db78c48269f54b9335183b2b0d7b6138253e9e5) Remove unused function
      * [`219058766`](https://github.com/containerd/containerd/commit/2190587661ded992f2b0a55a08e3201b93e0b5a2) Grant needed privileges for snapshotter tests
      * [`96fbe5bc8`](https://github.com/containerd/containerd/commit/96fbe5bc882658780ca36499a0e0a79d095b83e8) Fix layer comparison and enable read-only checks
      * [`279e0d3c9`](https://github.com/containerd/containerd/commit/279e0d3c9ab199458387b670c19301a94dac8032) Use bind filer for mounts
      * [`93e94da40`](https://github.com/containerd/containerd/commit/93e94da4084f3fbe2d89f3145a8e56c8c24dc458) Enable TestSnapshotterClient on Windows
      * [`3a3da693a`](https://github.com/containerd/containerd/commit/3a3da693aee68afdc84ca42c0191cee88ee9c21f) Run Windows snapshotter through the test suite
      * [`e7b62322f`](https://github.com/containerd/containerd/commit/e7b62322f9218387e6f715442b2235c9feec2e01) Fix misspelling of 'Native' as 'Naive'
      * [`e1f999a18`](https://github.com/containerd/containerd/commit/e1f999a1827242a31fa85cbb4a44ee31eeebfb30) Add paired 'mount' log for 'unmount'
      * [`5788d6e52`](https://github.com/containerd/containerd/commit/5788d6e520cef08aaf2d15ceaf5c4c6b1ce735e6) Don't use all-upper-case filenames in snapshot tests
      * [`3cdcb2f10`](https://github.com/containerd/containerd/commit/3cdcb2f1088eab8d18075b0549ae59688bf15792) Skip tests that do not apply to WCOW on Windows
      * [`b0968b8bb`](https://github.com/containerd/containerd/commit/b0968b8bb920c99d341cb212bde9a4d15c050dfc) Ensure mounts are unmounted before leaving the test
      * [`b57424851`](https://github.com/containerd/containerd/commit/b57424851cc56745d677ee41e0d5a02dde29bc41) Unify testutil.Unmount on Windows and Unix
      * [`b9a8aad45`](https://github.com/containerd/containerd/commit/b9a8aad45149c40c8b5c327657a5320de29231c5) Implement Windows mounting for bind and windows-layer mounts
      * [`1a64ee183`](https://github.com/containerd/containerd/commit/1a64ee1835544d37903f667415c821526200ed8b) Implement WCOW parentless active snapshots and view snapshots
    * [release/1.7] fix: cio.Cancel() should close the pipes ([#8624](https://github.com/containerd/containerd/pull/8624))
      * [`99582fb1a`](https://github.com/containerd/containerd/commit/99582fb1a32e9d051585219d11146afb07805abf) fix: cio.Cancel() should close the pipes
    * [release/1.7 backport] remotes/docker: ResolverOptions: fix deprecation comments ([#8621](https://github.com/containerd/containerd/pull/8621))
      * [`eeda70fb0`](https://github.com/containerd/containerd/commit/eeda70fb04814f240c7e5d0f59a6369b1fdae69e) remotes/docker: ResolverOptions: fix deprecation comments
    * [release/1.7] Publish sandbox events ([#8613](https://github.com/containerd/containerd/pull/8613))
      * [`e21c8beee`](https://github.com/containerd/containerd/commit/e21c8beee6c07fd289af2cf0011e0aa8156882e4) Post cherry-pick fixes
      * [`246240f71`](https://github.com/containerd/containerd/commit/246240f71ce2adcfc5b161343f21a72fa32c1273) Move PLEG event back to CRI
      * [`16f3726dd`](https://github.com/containerd/containerd/commit/16f3726dd61ba8fa71d04957681b53a14cc5b055) Generate sandbox exit events from CRI
      * [`0c8cfb1a7`](https://github.com/containerd/containerd/commit/0c8cfb1a7c0f852842016ad0805bf8a121ede970) Move pod sandbox recovery to podsandbox/ package
      * [`91d9f5c64`](https://github.com/containerd/containerd/commit/91d9f5c643c4bc6d44964c161a56eb04201fc885) Publish sandbox events
      * [`4b77683b4`](https://github.com/containerd/containerd/commit/4b77683b46182fcdf756509767660389d2eb7169) Add sandbox events protos
    * [release/1.7] notify readiness when registered plugins are ready ([#8584](https://github.com/containerd/containerd/pull/8584))
      * [`2c38cad77`](https://github.com/containerd/containerd/commit/2c38cad77cdb2644ebf8f56a2e3f094344ef0f41) notify readiness when registered plugins are ready
    * [release/1.7] Backport CRI sandbox server stats changes ([#8604](https://github.com/containerd/containerd/pull/8604))
      * [`7851b0a9f`](https://github.com/containerd/containerd/commit/7851b0a9f27c6a2223538abe05bf23edbd790fca) CRI: Make stats respect sandbox's platform
      * [`8d7c340ca`](https://github.com/containerd/containerd/commit/8d7c340ca8cb83fda1f02e443a1fdebd04df4bd5) [sbserver] handle missing cpu stats
      * [`d08b2a088`](https://github.com/containerd/containerd/commit/d08b2a088c4446ee9bb3af6b431f7969d6a8c07e) [sbserver] Refactor usageNanoCores be to used for all OSes
    * [release/1.7] Cherry-pick: Update volume-ownership image with latest hashes ([#8574](https://github.com/containerd/containerd/pull/8574))
      * [`08de6e7b8`](https://github.com/containerd/containerd/commit/08de6e7b8c80e8815002eecc778c422764e87e13) Update volume-ownership image with latest hashes
    * [release/1.7] CDI: Use CRI Config.CDIDevices field for CDI injection ([#8519](https://github.com/containerd/containerd/pull/8519))
      * [`6a5e54c15`](https://github.com/containerd/containerd/commit/6a5e54c15a38b90fbfa2c6a8ce9ef1fb26037c7c) Get CDI devices from CRI Config.CDIDevices field
    * [release/1.7 backport] snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility ([#8510](https://github.com/containerd/containerd/pull/8510))
      * [`9e60300ea`](https://github.com/containerd/containerd/commit/9e60300ea0b1635d8d7798fc99c824cab82926f3) snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility
    </p>
    </details>
    
    ### Changes from containerd/continuity
    <details><summary>31 commits</summary>
    <p>
    
    * Fall back to Copyfile when Clonefile detects a cross-device request ([#225](https://github.com/containerd/continuity/pull/225))
      * [`7df79f5`](https://github.com/containerd/continuity/commit/7df79f562b5757ce7953302d8b80017a60dfaedf) Fall back to Copyfile when Clonefile detects a cross-device request
    * Support darwin clonefile ([#223](https://github.com/containerd/continuity/pull/223))
      * [`30cf84d`](https://github.com/containerd/continuity/commit/30cf84dfb5e0d30120e388e2e2481adad18ea27a) Add support for Darwin clonefile
      * [`ebdd069`](https://github.com/containerd/continuity/commit/ebdd069b5520106abe138eee143fb310df314afd) Add copy benchmark
    * Update golang.org/x/sys to v0.1.0 ([#222](https://github.com/containerd/continuity/pull/222))
      * [`2db84b9`](https://github.com/containerd/continuity/commit/2db84b9393154fccd9c968665b00255c688a7d00) Update golang.org/x/sys to v0.1.0
    * Enable tests for all platforms ([#220](https://github.com/containerd/continuity/pull/220))
      * [`b449cd0`](https://github.com/containerd/continuity/commit/b449cd0f764c0dc97ed496c2d3b5f8d673c6b7a6) Fix tests on Windows
      * [`eb05879`](https://github.com/containerd/continuity/commit/eb058795cb5ebba43e2a0a33f540bbc2c37945c4) Fix Darwin tests
      * [`9cd17be`](https://github.com/containerd/continuity/commit/9cd17bee62e96e79fd579ef64d86b86ec6ac6cc8) Enable tests for all platforms
    * Add more Windows metadata files ([#219](https://github.com/containerd/continuity/pull/219))
      * [`cdfbe61`](https://github.com/containerd/continuity/commit/cdfbe61803aad33055dce1b557b2bdf323860244) Add more Windows metadata files
    * atomicWriteFile: file defer close ([#213](https://github.com/containerd/continuity/pull/213))
      * [`9eb2a49`](https://github.com/containerd/continuity/commit/9eb2a492babfeb69786473a95a5de4bbc249c71d) atomicWriteFile: file defer close
    * Update GitHub Actions runner images ([#216](https://github.com/containerd/continuity/pull/216))
      * [`ad9c903`](https://github.com/containerd/continuity/commit/ad9c9033bc0d70f0c8ec837cd7cc5a237aa53503) Update GitHub Actions runner images
    * Add CodeQL security scan workflow ([#215](https://github.com/containerd/continuity/pull/215))
      * [`c8de034`](https://github.com/containerd/continuity/commit/c8de034f336e5434007cf541f850a2289463dae9) Add CodeQL security scan workflow
    * Add Go 1.20 support to CI ([#214](https://github.com/containerd/continuity/pull/214))
      * [`be62cc1`](https://github.com/containerd/continuity/commit/be62cc19f81856e329418bf36084ba7dade19af6) Add Go 1.20 support to CI
    * Add paths to windows metadataFiles ([#212](https://github.com/containerd/continuity/pull/212))
      * [`68f7b34`](https://github.com/containerd/continuity/commit/68f7b34f5e115fe81b09971f79bf59897805e99c) Add paths to windows metadataFiles
    * Remove references to io/ioutil package ([#211](https://github.com/containerd/continuity/pull/211))
      * [`e22f001`](https://github.com/containerd/continuity/commit/e22f0013e31f7d7acfdfdfe03c3fc216cd7814c7) Remove references to io/ioutil package
    * Update GitHub actions CI workflow ([#210](https://github.com/containerd/continuity/pull/210))
      * [`1c3fa33`](https://github.com/containerd/continuity/commit/1c3fa33439810d944467f2cf3a4b61be3b048296) Update GitHub actions CI workflow
    * format code with gofumpt ([#209](https://github.com/containerd/continuity/pull/209))
      * [`f5d245e`](https://github.com/containerd/continuity/commit/f5d245e404beb0f7e0403288f4bf0bff7b1c26b4) format code with gofumpt
    * Correctly ignore error wrapping `ErrNotSupported` ([#207](https://github.com/containerd/continuity/pull/207))
      * [`1ee38b5`](https://github.com/containerd/continuity/commit/1ee38b500a97d2b2eaac33a002dabf7b25886c22) Correctly ignore error wrapping ErrNotSupported
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/containerd/continuity**  v0.3.0 -> v0.4.1
    
    Previous release can be found at [v1.7.1](https://github.com/containerd/containerd/releases/tag/v1.7.1)
    
    
  • v1.7.1
    containerd 1.7.1
    
    Welcome to the v1.7.1 release of containerd!
    
    The first patch release for containerd 1.7 includes many fixes to CRI
    sandbox mode, various other fixes, runc update, and important fixes in
    core dependencies such as ttrpc and typeurl.
    
    ### CRI/Sandbox Updates
    * **Throw not supported error when UID or GID mappings provided** ([#8211](https://github.com/containerd/containerd/pull/8211))
    * **Cleanup shim on start failure** ([#8282](https://github.com/containerd/containerd/pull/8282))
    * **Fix premature close of CRI service when there are no CNI configuration monitors** ([#8282](https://github.com/containerd/containerd/pull/8282))
    * **Avoid UID lookup from mount on Darwin** ([#8314](https://github.com/containerd/containerd/pull/8314))
    * **Keep Linux mounts for Linux sandboxes on non-Linux hosts** ([#8331](https://github.com/containerd/containerd/pull/8331))
    * **Add `noexec`,`nodev`,`nosuid` to `/etc/resolv.conf` bind mount** ([#8336](https://github.com/containerd/containerd/pull/8336))
    * **Remove entry for container from container store on error** ([#8457](https://github.com/containerd/containerd/pull/8457))
    * **Fix unmarshal in container metrics** ([#8472](https://github.com/containerd/containerd/pull/8472))
    
    ### Other Notable Updates
    * **Use readonly for temporary mounts** ([#8300](https://github.com/containerd/containerd/pull/8300) [#8358](https://github.com/containerd/containerd/pull/8358))
    * **Fix skip docker manifest option on image exporter** ([#8344](https://github.com/containerd/containerd/pull/8344))
    * **Update runc binary to v1.1.7** ([#8451](https://github.com/containerd/containerd/pull/8451))
    * **Fix runtime path task option** ([#8453](https://github.com/containerd/containerd/pull/8453))
    * **Fix panic from nil checkpoint options** ([#8475](https://github.com/containerd/containerd/pull/8475))
    * **Fix transfer service configuration options** ([#8491](https://github.com/containerd/containerd/pull/8491))
    * **Fix server-side goroutine leak on receive message error** ([ttrpc#141](https://github.com/containerd/ttrpc/pull/141))
    * **Fix panic caused by race to close send channel** ([ttrpc#140](https://github.com/containerd/ttrpc/pull/140))
    * **Fix unmarshal to return non-nil object when nil value** ([ttrpc#140](https://github.com/containerd/typeurl/pull/41))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Derek McGowan
    * Sebastiaan van Stijn
    * Akihiro Suda
    * Iceber Gu
    * Phil Estes
    * Maksym Pavlenko
    * Wei Fu
    * Danny Canter
    * Kirtana Ashok
    * Rodrigo Campos
    * Samuel Karp
    * Vinayak Goyal
    * Austin Vazquez
    * Justin Chadwell
    * Kazuyoshi Kato
    * Brad Davidson
    * Djordje Lukic
    * Ethan Lowman
    * Laura Brehm
    * Michael Crosby
    
    ### Changes
    <details><summary>68 commits</summary>
    <p>
    
    * [release/1.7] Prepare release notes for v1.7.1 ([#8501](https://github.com/containerd/containerd/pull/8501))
      * [`27a0d957b`](https://github.com/containerd/containerd/commit/27a0d957be722eaaf34cdcc9c9a5b47d843b7a9c) Prepare release notes for v1.7.1
    * [release/1.7] Update ttrpc v1.2.2 ([#8499](https://github.com/containerd/containerd/pull/8499))
      * [`7b288e2d7`](https://github.com/containerd/containerd/commit/7b288e2d77d323cf07a210a9ed02f62235e6f41e) Update ttrpc to v1.2.2
    * [release/1.7] runtime/shim: fix the nil checkpoint options ([#8475](https://github.com/containerd/containerd/pull/8475))
      * [`3ef5b689a`](https://github.com/containerd/containerd/commit/3ef5b689a7b7f6bb670ad59345c290114e5e29ef) runtime/shim: fix the nil checkpoint options
    * [release/1.7] bump typeurl to v2.1.1 ([#8495](https://github.com/containerd/containerd/pull/8495))
      * [`0e0532eb2`](https://github.com/containerd/containerd/commit/0e0532eb28eb8a1f5d34e89f6ba94eba684c8be1) bump typeurl to v2.1.1
    * [release/1.7] Transfer service backports ([#8491](https://github.com/containerd/containerd/pull/8491))
      * [`35e86f96c`](https://github.com/containerd/containerd/commit/35e86f96c24da795b3977f181b16a493a7400fdb) [transfer] avoid setting limiters when max is 0
      * [`f7233811f`](https://github.com/containerd/containerd/commit/f7233811f6fb2d521e65ecf5b156f82a1aba2f91) Update transfer configuration
      * [`4510eac00`](https://github.com/containerd/containerd/commit/4510eac009eb066501761a1dae05d4e126ef88e0) Fix image pulling with Transfer service
    * [release/1.7]Update hcsshim tag to v0.10.0-rc.8 ([#8480](https://github.com/containerd/containerd/pull/8480))
      * [`aaa65e8c1`](https://github.com/containerd/containerd/commit/aaa65e8c1461ae7187357ea6b7f2807667eada6e) Update hcsshim tag to v0.10.0-rc.8
    * [release/1.7] cri: Fix umarshal metrics ([#8472](https://github.com/containerd/containerd/pull/8472))
      * [`95ef67e19`](https://github.com/containerd/containerd/commit/95ef67e19552aaec3618cdfa06d6d3ffb57d085b) Fix umarshal metrics for CRI server
    * [release/1.7 backport] update go to go1.20.4, go1.19.9 ([#8471](https://github.com/containerd/containerd/pull/8471))
      * [`021bba28b`](https://github.com/containerd/containerd/commit/021bba28b50e445c4a0a8e79b458db7116dc50e7) update go to go1.20.4, go1.19.9
    * [release/1.7] fix the task setting the runtime path ([#8453](https://github.com/containerd/containerd/pull/8453))
      * [`c0e128624`](https://github.com/containerd/containerd/commit/c0e128624a8d6a02bb7d2ab3d29369f54791b68e) skip TestContainerStartWithAbsRuntimePath if the runtime is v1
      * [`aa3c63c15`](https://github.com/containerd/containerd/commit/aa3c63c15f379eec906cb89f7e1204a42a5d1317) integration: add container start test using abs runtime path
      * [`d2d9eedb1`](https://github.com/containerd/containerd/commit/d2d9eedb1d1b2d047fbdd847ce7c67724f27bde4) WithRuntimePath uses the TaskInfo.RuntimePath field
    * [release/1.7] Remove entry for container from container store on error  ([#8457](https://github.com/containerd/containerd/pull/8457))
      * [`6b3ae0129`](https://github.com/containerd/containerd/commit/6b3ae01297d2cb39c8018fc783751baba513b390) Remove entry for container from container store on error
    * [release/1.7 backport] update runc binary to v1.1.7 ([#8451](https://github.com/containerd/containerd/pull/8451))
      * [`fae4b6223`](https://github.com/containerd/containerd/commit/fae4b6223a597cf456b63c4272ed85f625eef9f0) update runc binary to v1.1.7
    * [release/1.7] cri: Vendor v0.27.1 ([#8444](https://github.com/containerd/containerd/pull/8444))
      * [`571715a9d`](https://github.com/containerd/containerd/commit/571715a9df043d0f75d16dcc17fd0c2c41999290) cri: Vendor v0.27.1
    * [release/1.7 backport] oci: partially restore comment on read-only mounts for uid/gid uses ([#8404](https://github.com/containerd/containerd/pull/8404))
      * [`1bbf98e53`](https://github.com/containerd/containerd/commit/1bbf98e53ec77bad5dabc2a762f4407e99f527c9) oci: partially restore comment on read-only mounts for uid/gid uses
    * [release/1.7] Fix argsEscaped tests ([#8405](https://github.com/containerd/containerd/pull/8405))
      * [`a6d336c1f`](https://github.com/containerd/containerd/commit/a6d336c1f6674c2b342d65ca78fba7fac955eaf1) Fix argsEscaped tests
    * [release/1.7] Throw an error if the kubelet requests mounts with uid/gid mappings ([#8211](https://github.com/containerd/containerd/pull/8211))
      * [`7de8629be`](https://github.com/containerd/containerd/commit/7de8629be0e62c4d8164cd873baf14b64bcbb90b) cri: Throw an error if idmap mounts is requested
      * [`75ac7e0d8`](https://github.com/containerd/containerd/commit/75ac7e0d8200539ff444b952bc060ffa23582a87) cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings
    * [release/1.7] go.mod: remove redundant replace, and some cleaning-up ([#8396](https://github.com/containerd/containerd/pull/8396))
      * [`8f6e86fec`](https://github.com/containerd/containerd/commit/8f6e86fecad5c11871df20e516ae181d7abf4a7c) go.mod: add comment explaining go-fuzz-headers replace rule
      * [`1ece0cb50`](https://github.com/containerd/containerd/commit/1ece0cb50f7f2f6fc9c59a76ae49227a84a92f1e) go.mod: remove replace for github.com/opencontainers/runtime-tools
      * [`e9f962187`](https://github.com/containerd/containerd/commit/e9f96218795ef6a527fc8cac550ae90b9b09fe5c) go.mod: integration: use non-pre-release of containerd
      * [`84393b005`](https://github.com/containerd/containerd/commit/84393b005f76c085ad62c62dff980dc13d13b131) go.mod: integration: move indirect dependencies to the right group
    * [release/1.7 backport] update runc binary to v1.1.6 ([#8386](https://github.com/containerd/containerd/pull/8386))
      * [`dec2595af`](https://github.com/containerd/containerd/commit/dec2595afe92800fbf8e4e506398b00ff532332f) update runc binary to v1.1.6
    * [release/1.7 backport] oci: Use WithReadonlyTempMount when adding users/groups ([#8358](https://github.com/containerd/containerd/pull/8358))
      * [`54d12b872`](https://github.com/containerd/containerd/commit/54d12b872132d56feca792051abdce87a2077988) oci: Use WithReadonlyTempMount when adding users/groups
    * [release/1.7 backport] update go to go1.20.3, go1.19.8 ([#8354](https://github.com/containerd/containerd/pull/8354))
      * [`624327651`](https://github.com/containerd/containerd/commit/6243276515454617f58eafaa85352b6e6fcac96e) update go to go1.20.3, go1.19.8
    * [release/1.7] archive: consistently respect value of WithSkipDockerManifest ([#8344](https://github.com/containerd/containerd/pull/8344))
      * [`1d6641b7c`](https://github.com/containerd/containerd/commit/1d6641b7c92d8854548c7a07bdaa07979ad0eb68) export: add test for WithSkipDockerManifest
      * [`0e0d84f6b`](https://github.com/containerd/containerd/commit/0e0d84f6bb7a0226480dd5ead7c894175d2edcc8) archive: consistently respect value of WithSkipDockerManifest
    * [release/1.7] Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. ([#8336](https://github.com/containerd/containerd/pull/8336))
      * [`9b4935d86`](https://github.com/containerd/containerd/commit/9b4935d86436419670febe9695787a3aaf5ceeb7) Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind.
      * [`5e953cfa6`](https://github.com/containerd/containerd/commit/5e953cfa62abb90b2c4dc775907cbb276637bfe8) Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount.
      * [`0aad93f08`](https://github.com/containerd/containerd/commit/0aad93f08ca4da8f33ad709dbe49593f6ff5c59c) Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind.
    * [release/1.7] ctr/tasks: fix unmarshal the task metrics for cgroups v1 ([#8335](https://github.com/containerd/containerd/pull/8335))
      * [`1a64f1b43`](https://github.com/containerd/containerd/commit/1a64f1b4341ebda4b8f8cf67cac543394a10a4c3) ctr/tasks: fix unmarshal the task metrics for cgroups v1
    * [release/1.7] Keep linux mounts for linux sandboxes on Windows/Darwin ([#8331](https://github.com/containerd/containerd/pull/8331))
      * [`17c52a26d`](https://github.com/containerd/containerd/commit/17c52a26d63d6105e9918fb2d90ff346e4e4c463) Keep linux mounts for linux sandboxes on Windows/Darwin
    * [release/1.7] update runc binary to v1.1.5 ([#8325](https://github.com/containerd/containerd/pull/8325))
      * [`d81fc15af`](https://github.com/containerd/containerd/commit/d81fc15affe09dbb621be16bda805801a98cab4b) update runc binary to v1.1.5
      * [`755efbe64`](https://github.com/containerd/containerd/commit/755efbe6402acdaf5832e36b7c6f4e15cc2a406d) go.mod: github.com/opencontainers/runc v1.1.5
    * [backport 1.7] Defer uid lookups on Darwin ([#8314](https://github.com/containerd/containerd/pull/8314))
      * [`90591db47`](https://github.com/containerd/containerd/commit/90591db47c70db29386b8d9e58ffa1005b560dc0) Defer uid lookups on Darwin
    * [release/1.7 backport] Add `WithReadonlyTempMount` to create readonly temporary mounts ([#8300](https://github.com/containerd/containerd/pull/8300))
      * [`b7d87b190`](https://github.com/containerd/containerd/commit/b7d87b190d013929377bb85df8301fade73b0298) Add `WithReadonlyTempMount` to create readonly temporary mounts
    * [release/1.7] Backport Sandbox/CRI fixes ([#8282](https://github.com/containerd/containerd/pull/8282))
      * [`1c1b6bcb2`](https://github.com/containerd/containerd/commit/1c1b6bcb2b4a47053855bd7adaed5d9bfdf2a5f5) CRI: Don't always close netConfMonitor channel
      * [`cf2e454bf`](https://github.com/containerd/containerd/commit/cf2e454bf052bee63c0582552566c96357bd2250) Sandbox: Correct/add some fields to Status()
      * [`ce68e8e0d`](https://github.com/containerd/containerd/commit/ce68e8e0db47174580fc74ecdeb66c26695ecd0b) Sandbox: Cleanup shim on Start failure
    </p>
    </details>
    
    ### Changes from containerd/ttrpc
    <details><summary>8 commits</summary>
    <p>
    
    * First process the pending messages in recv channel ([#144](https://github.com/containerd/ttrpc/pull/144))
      * [`c51165f`](https://github.com/containerd/ttrpc/commit/c51165f20d52c5b19c76cd8a1d16ead701146e89) First process the pending messages in recv channel
    * Add recvClose channel to stream ([#140](https://github.com/containerd/ttrpc/pull/140))
      * [`471297e`](https://github.com/containerd/ttrpc/commit/471297eed95365134cb1a15defdf42334fd4c85a) Add recvClose channel to stream
    * Unwrap IO errors in server connection error handling ([#141](https://github.com/containerd/ttrpc/pull/141))
      * [`9599fad`](https://github.com/containerd/ttrpc/commit/9599fadcd66ef7b6a3aec840be59a3a38203bc2c) Unwrap io errors in server connection receive error handling
    * Update GitHub actions CI workflow ([#124](https://github.com/containerd/ttrpc/pull/124))
      * [`c7b5a32`](https://github.com/containerd/ttrpc/commit/c7b5a322eda63419e2dafa8dd215b08739ebe9f5) Update GitHub actions CI workflow
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/Microsoft/go-winio**            v0.6.0 -> v0.6.1
    * **github.com/Microsoft/hcsshim**             v0.10.0-rc.7 -> v0.10.0-rc.8
    * **github.com/containerd/ttrpc**              v1.2.1 -> v1.2.2
    * **github.com/containerd/typeurl/v2**         v2.1.0 -> v2.1.1
    * **github.com/golang/protobuf**               v1.5.2 -> v1.5.3
    * **github.com/opencontainers/runc**           v1.1.4 -> v1.1.5
    * **github.com/opencontainers/runtime-tools**  946c877fa809 -> 2e043c6bd626
    * **golang.org/x/mod**                         v0.7.0 -> v0.9.0
    * **golang.org/x/net**                         v0.7.0 -> v0.8.0
    * **golang.org/x/sys**                         v0.6.0 -> v0.7.0
    * **golang.org/x/term**                        v0.5.0 -> v0.6.0
    * **golang.org/x/text**                        v0.7.0 -> v0.8.0
    * **golang.org/x/tools**                       v0.5.0 -> v0.7.0
    * **google.golang.org/protobuf**               v1.28.1 -> v1.29.1
    * **k8s.io/cri-api**                           v0.26.2 -> v0.27.1
    
    Previous release can be found at [v1.7.0](https://github.com/containerd/containerd/releases/tag/v1.7.0)
    
    
  • v1.6.21
    containerd 1.6.21
    
    Welcome to the v1.6.21 release of containerd!
    
    The twenty-first patch release for containerd 1.6 contains various fixes and updates.
    
    ### Notable Updates
    
    * **update runc binary to v1.1.7 ([#8450](https://github.com/containerd/containerd/pull/8450))
    * **Remove entry for container from container store on error ([#8456](https://github.com/containerd/containerd/pull/8456))
    * **oci: partially restore comment on read-only mounts for uid/gid uses ([#8403](https://github.com/containerd/containerd/pull/8403))
    * **windows: Add ArgsEscaped support for CRI ([#8247](https://github.com/containerd/containerd/pull/8247))
    * **oci: Use WithReadonlyTempMount when adding users/groups ([#8357](https://github.com/containerd/containerd/pull/8357))
    * **archive: consistently respect value of WithSkipDockerManifest ([#8345](https://github.com/containerd/containerd/pull/8345))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Derek McGowan
    * Sebastiaan van Stijn
    * Iceber Gu
    * Kirtana Ashok
    * Justin Chadwell
    * Phil Estes
    * Akihiro Suda
    * Djordje Lukic
    * Kazuyoshi Kato
    * Mike Brown
    * Wei Fu
    * kiashok
    
    ### Changes
    <details><summary>26 commits</summary>
    <p>
    
    * [release/1.6] Prepare release notes for v1.6.21  ([#8463](https://github.com/containerd/containerd/pull/8463))
      * [`9226c362a`](https://github.com/containerd/containerd/commit/9226c362a92b9a19860a3facc3eaeb0d2ec22e0c) Add release notes for v1.6.21
    * [release/1.6] update go to go1.19.9 ([#8469](https://github.com/containerd/containerd/pull/8469))
      * [`39566aade`](https://github.com/containerd/containerd/commit/39566aadecc45abcfa242e41ad7bf07142f49c8c) [release/1.6] update go to go1.19.9
    * [release/1.6] fix the task setting the runtime path ([#8454](https://github.com/containerd/containerd/pull/8454))
      * [`e8840f688`](https://github.com/containerd/containerd/commit/e8840f688ae402bef461963321d63cf9cf6fbb34) skip TestContainerStartWithAbsRuntimePath if the runtime is v1
      * [`75ab094de`](https://github.com/containerd/containerd/commit/75ab094de81b2d6806434e2f9ac94cb409e36314) integration: add container start test using abs runtime path
      * [`f49254f0b`](https://github.com/containerd/containerd/commit/f49254f0b7e17951c1be6e8a8063eb3f47175cd5) WithRuntimePath uses the TaskInfo.RuntimePath field
    * [release/1.6 backport] update runc binary to v1.1.7 ([#8450](https://github.com/containerd/containerd/pull/8450))
      * [`ccb51ff26`](https://github.com/containerd/containerd/commit/ccb51ff26971c10f88f8e594aeb8d29159f93e82) update runc binary to v1.1.7
    * [release/1.6] Remove entry for container from container store on error ([#8456](https://github.com/containerd/containerd/pull/8456))
      * [`95d31551d`](https://github.com/containerd/containerd/commit/95d31551d0f7b1a842bcb87b2c2916fda52f07a6) Remove entry for container from container store on error
    * [release/1.6 backport] oci: partially restore comment on read-only mounts for uid/gid uses ([#8403](https://github.com/containerd/containerd/pull/8403))
      * [`c33eb574d`](https://github.com/containerd/containerd/commit/c33eb574dbc064ad8556512fff6b2cd81e510101) oci: partially restore comment on read-only mounts for uid/gid uses
    * [release/1.6 ] Add ArgsEscaped support for CRI ([#8247](https://github.com/containerd/containerd/pull/8247))
      * [`bc2e01303`](https://github.com/containerd/containerd/commit/bc2e01303b7103d7fe81a97caadc224102db1460) Fix argsEscaped tests
      * [`8b81d5acc`](https://github.com/containerd/containerd/commit/8b81d5acca2e6f390af99756128392253c5d0a5c) Add ArgsEscaped support for CRI
    * [release/1.6 backport] update runc binary to v1.1.6 ([#8385](https://github.com/containerd/containerd/pull/8385))
      * [`57d953482`](https://github.com/containerd/containerd/commit/57d953482083cb99c5814f5c414641599aa7c206) update runc binary to v1.1.6
    * [release/1.6 backport] oci: Use WithReadonlyTempMount when adding users/groups ([#8357](https://github.com/containerd/containerd/pull/8357))
      * [`fb5e663d0`](https://github.com/containerd/containerd/commit/fb5e663d0d4e7e5091e2dedfa079c1a8f310f0bb) oci: Use WithReadonlyTempMount when adding users/groups
    * [release/1.6] update go to go1.19.8 ([#8353](https://github.com/containerd/containerd/pull/8353))
      * [`26efb8fd5`](https://github.com/containerd/containerd/commit/26efb8fd53de5bac26b28f4a2b8d8adf284ba7c2) [release/1.6] update go to go1.19.8
    * [release/1.6] archive: consistently respect value of WithSkipDockerManifest ([#8345](https://github.com/containerd/containerd/pull/8345))
      * [`ec13b497e`](https://github.com/containerd/containerd/commit/ec13b497ee7fba96d892637b75bdfd1932e64f12) export: add test for WithSkipDockerManifest
      * [`d1f3771c4`](https://github.com/containerd/containerd/commit/d1f3771c41470b3460b37edad9e8776b913f02e5) archive: consistently respect value of WithSkipDockerManifest
    </p>
    </details>
    
    ### Dependency Changes
    
    This release has no dependency changes
    
    Previous release can be found at [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20)
    
  • v1.6.20
    containerd 1.6.20
    
    Welcome to the v1.6.20 release of containerd!
    
    The twentieth patch release for containerd 1.6 contains various fixes and updates.
    
    ### Notable Updates
    
    * **Disable looking up usernames and groupnames on host** ([#8230](https://github.com/containerd/containerd/pull/8230))
    * **Add support for Windows ArgsEscaped images** ([#8273](https://github.com/containerd/containerd/pull/8273))
    * **Update hcsshim to v0.9.8** ([#8274](https://github.com/containerd/containerd/pull/8274))
    * **Fix debug flag in shim** ([#8288](https://github.com/containerd/containerd/pull/8288))
    * **Add `WithReadonlyTempMount` to support readonly temporary mounts** ([#8299](https://github.com/containerd/containerd/pull/8299))
    * **Update ttrpc to fix file descriptor leak** ([#8308](https://github.com/containerd/containerd/pull/8308))
    * **Update runc binary to v1.1.5** ([#8324](https://github.com/containerd/containerd/pull/8324))
    * **Update image config to support ArgsEscaped** ([#8306](https://github.com/containerd/containerd/pull/8306))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Sebastiaan van Stijn
    * Derek McGowan
    * Maksym Pavlenko
    * Akihiro Suda
    * Phil Estes
    * Eng Zer Jun
    * Justin Terry
    * Kazuyoshi Kato
    * Wei Fu
    * Abirdcfly
    * Gabriel Adrian Samfira
    * Henry Wang
    * Kang.Zhang
    * Kirtana Ashok
    * Laura Brehm
    * Luca Comellini
    * Paul "TBBle" Hampson
    * liyuxuan.darfux
    * ningmingxiao
    * wanglei
    
    ### Changes
    <details><summary>48 commits</summary>
    <p>
    
    * [release/1.6] Prepare release notes for v1.6.20 ([#8310](https://github.com/containerd/containerd/pull/8310))
      * [`a039a2b9c`](https://github.com/containerd/containerd/commit/a039a2b9c6a5e655b58bdd139af7307563b8efc7) Prepare release notes for v1.6.20
    * [release/1.6]Updates oci image config to support upstream ArgsEscaped ([#8306](https://github.com/containerd/containerd/pull/8306))
      * [`5dd94a7e6`](https://github.com/containerd/containerd/commit/5dd94a7e6ccb356d2c7061ad49ba8a843ed9e4df) Updates oci image config to support upstream ArgsEscaped
    * [release/1.6] update runc binary to v1.1.5 ([#8324](https://github.com/containerd/containerd/pull/8324))
      * [`59fa6b191`](https://github.com/containerd/containerd/commit/59fa6b1914554c07321d79aa2131f370d0ebe27c) update runc binary to v1.1.5
      * [`0c0aad93e`](https://github.com/containerd/containerd/commit/0c0aad93ec9a0db6392e41790294679eb9d2e3bc) go.mod: github.com/opencontainers/runc v1.1.5
    * [release/1.6] Update ttrpc to v1.1.1 ([#8308](https://github.com/containerd/containerd/pull/8308))
      * [`50a6be0b4`](https://github.com/containerd/containerd/commit/50a6be0b4798eef5486a0f86c59686898ecc20c8) Update ttrpc to v1.1.1
    * [release/1.6 backport] Add `WithReadonlyTempMount` to create readonly temporary mounts ([#8299](https://github.com/containerd/containerd/pull/8299))
      * [`8cead6594`](https://github.com/containerd/containerd/commit/8cead659440376c4a821d702f73c392f1c7fb8ce) Add `WithReadonlyTempMount` to create readonly temporary mounts
    * [release/1.6] Adds support for Windows ArgsEscaped images ([#8273](https://github.com/containerd/containerd/pull/8273))
      * [`f0dc0297d`](https://github.com/containerd/containerd/commit/f0dc0297d02e223d997fc992496b07006c0c4a69) Adds support for Windows ArgsEscaped images
    * [release/1.6]go.mod: Bump hcsshim tag to v0.9.8 ([#8274](https://github.com/containerd/containerd/pull/8274))
      * [`5981a24e2`](https://github.com/containerd/containerd/commit/5981a24e21a039c84f532c0e1ada85077c4101f1) Update hcsshim tag to v0.9.8
    * [1.6] shim: fix debug flag not working ([#8288](https://github.com/containerd/containerd/pull/8288))
      * [`28f1e32e3`](https://github.com/containerd/containerd/commit/28f1e32e3b1b167eeab8890d67ed57817b3da29b) shim: fix debug flag not working
    * [release/1.6] cherry-pick: Update go-restful to v3 ([#8271](https://github.com/containerd/containerd/pull/8271))
      * [`5a8ea75df`](https://github.com/containerd/containerd/commit/5a8ea75df7d2956cd711e4445eea9b6aac070835) Update go-restful to v3
      * [`59bdc1d5a`](https://github.com/containerd/containerd/commit/59bdc1d5a77ec7d5d57c66395de1bd2c1e27a55f) go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3
    * [release/1.6] Go 1.19.7 ([#8238](https://github.com/containerd/containerd/pull/8238))
      * [`86e0bd9e3`](https://github.com/containerd/containerd/commit/86e0bd9e3966ae686d7ab0a99a60f0212837028d) Go 1.19.7
    * [release/1.6 backport] archive: disable looking up usernames and groupnames on the host ([#8230](https://github.com/containerd/containerd/pull/8230))
      * [`063ad2f19`](https://github.com/containerd/containerd/commit/063ad2f1949168fed35a5609d6a0c01c529da346) archive: disable looking up usernames and groupnames on the host
    * [release/1.6 backport] assorted linting, and golang update-related changes ([#8229](https://github.com/containerd/containerd/pull/8229))
      * [`9cbea6fe7`](https://github.com/containerd/containerd/commit/9cbea6fe783f6ec6086bd85477ed2df659f10988) Enable dupword linter
      * [`c73f1abff`](https://github.com/containerd/containerd/commit/c73f1abff73657ea78d8a4762ff1b60324597896) Bump golangci-lint to v1.50.1
      * [`f198f7724`](https://github.com/containerd/containerd/commit/f198f7724d6d83261ba83f830d65103169608fc7) update golangci-lint to v1.49.0
      * [`e6179af1e`](https://github.com/containerd/containerd/commit/e6179af1ea994e1bdcc2c03f65223fa7256d9024) remove unneeded nolint-comments (nolintlint), disable deprecated linters
      * [`77160e6b5`](https://github.com/containerd/containerd/commit/77160e6b592ef44e4e800fac7736742dcf521f9c) [release/1.6] adjust some nolint comments
      * [`95655f4ce`](https://github.com/containerd/containerd/commit/95655f4ceedc29e44f13bb5b6b702f319c207b43) clean-up "nolint" comments, remove unused ones
      * [`9f0617ecc`](https://github.com/containerd/containerd/commit/9f0617ecc46ab189b2bd7d4839d89327f75b75ba) pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint
      * [`e66397d83`](https://github.com/containerd/containerd/commit/e66397d838fa69e2653eba67e5e9ac081c84c69b) golangci-lint: sort linters in config file
      * [`682a567e9`](https://github.com/containerd/containerd/commit/682a567e9eb86c1a538067ad5bb36b2d6b59d4fc) linting: address gosec G112/G114
      * [`627f563e6`](https://github.com/containerd/containerd/commit/627f563e6d61d2ca98f77eef6322babf9f53553c) chore: remove duplicate word in comments
      * [`efb88a8bb`](https://github.com/containerd/containerd/commit/efb88a8bbcdbefe6b7c820aee5b41257af1fd093) pkg/cri/streaming: increase ReadHeaderTimeout
      * [`45f055df6`](https://github.com/containerd/containerd/commit/45f055df6617a5c05c494e6870694c8c11c13711) Update protobuf definitions
      * [`584707524`](https://github.com/containerd/containerd/commit/584707524ac08d5f5284fd76ded25f3845886587) Run gofmt 1.19
      * [`f33e38572`](https://github.com/containerd/containerd/commit/f33e38572758e178a7e57344983c139ac87a138e) Switch to Go 1.19
      * [`fc10cd23a`](https://github.com/containerd/containerd/commit/fc10cd23adc555c559b42e5c996bfb212cc4b50e) remove duplicate
      * [`7cbb9e746`](https://github.com/containerd/containerd/commit/7cbb9e746128e4ab87ee28bb6f833df928048fb0) Update linters to use t.Setenv
      * [`4347a3265`](https://github.com/containerd/containerd/commit/4347a3265a895d9f30602dc7dcb83c00e762892b) Use t.Setenv instead of os.Setenv
      * [`10357eab5`](https://github.com/containerd/containerd/commit/10357eab5f89aa875ff2fec3500416d86807d1da) Address some timeout issues in the Windows CI
      * [`977ce8ef5`](https://github.com/containerd/containerd/commit/977ce8ef508d5cdbf4d549458a0cc46cd14f7833) Enable gosec linter for golangci-lint
      * [`c23945c5f`](https://github.com/containerd/containerd/commit/c23945c5fab20269c98aa17337a247f6e9ec9175) test: remove redundant `mountPoint`
      * [`588ed91d3`](https://github.com/containerd/containerd/commit/588ed91d3fb93c77118e35ca09e73227ed81d3ff) test: use `T.TempDir` to create temporary test directory
      * [`c2ed63c86`](https://github.com/containerd/containerd/commit/c2ed63c86cacc0cf5e2e2729d2478c0c0385c039) Remove hardcoded /tmp in tempfile paths
      * [`7e382c516`](https://github.com/containerd/containerd/commit/7e382c516f80ea71aa9086d2cb9c0e83ec155222) fix Implicit memory aliasing in for loop
    </p>
    </details>
    
    ### Changes from containerd/ttrpc
    <details><summary>2 commits</summary>
    <p>
    
    * [release/1.1] server: Fix connection leak when receiving ECONNRESET ([#136](https://github.com/containerd/ttrpc/pull/136))
      * [`8977f59`](https://github.com/containerd/ttrpc/commit/8977f59dbda8a5a97d0801669e4c0d9f5a7088dd) server: Fix connection leak when receiving ECONNRESET
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/Microsoft/hcsshim**          v0.9.7 -> v0.9.8
    * **github.com/containerd/ttrpc**           v1.1.0 -> v1.1.1
    * **github.com/emicklei/go-restful/v3**     v3.7.3 **_new_**
    * **github.com/opencontainers/image-spec**  c5a74bcca799 -> 3a7f492d3f1b
    * **github.com/opencontainers/runc**        v1.1.2 -> v1.1.5
    
    Previous release can be found at [v1.6.19](https://github.com/containerd/containerd/releases/tag/v1.6.19)
    
  • v1.7.0
    containerd 1.7.0
    
    Welcome to the v1.7.0 release of containerd!
    
    The eighth major release of containerd includes new functionality alongside many improvements.
    This release is the last major release of containerd 1.x before 2.0.
    Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0.
    This release still adheres to our backwards compatibility guarantees and users who do not use or enable new functionality should use this release with the same stability expectations.
    The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality.
    
    ### Highlights
    
    #### Sandbox API _(experimental)_
    
    The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs.
    This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients.
    
    * **Sandbox API** ([#6703](https://github.com/containerd/containerd/pull/6703))
    * **CRI Sandbox API Implementation** ([#7228](https://github.com/containerd/containerd/pull/7228))
    
    #### Transfer Service _(experimental)_
    
    * **Transfer Service** ([#7320](https://github.com/containerd/containerd/pull/7320))
    
    The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for
    pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release
    to allow for further plugin development and integration into existing plugins.
    
    See the [Transfer Docs](https://github.com/containerd/containerd/blob/main/docs/transfer.md)
    
    #### NRI _(experimental)_
    
    * **Extend NRI scope** ([nri#16](https://github.com/containerd/nri/pull/16))
    * **Support for updated NRI** ([#6019](https://github.com/containerd/containerd/pull/6019))
    
    The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides
    basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration.
    
    This release introduces NRI v0.3.0 with an updated plugin interface to cover a wide range of use cases.
    
    See the [NRI Docs](https://github.com/containerd/containerd/blob/main/docs/NRI.md)
    
    #### Platform Support
    
    * **Linux containers on FreeBSD** ([#7000](https://github.com/containerd/containerd/pull/7000))
    
    #### Runtime Features
    
    * **Add support for CDI device injection** ([#6654](https://github.com/containerd/containerd/pull/6654))
    * **Support for cgroups blockio** ([#5490](https://github.com/containerd/containerd/pull/5490))
    * **Add restart policy for enhanced restart manager** ([#6744](https://github.com/containerd/containerd/pull/6744))
    
    #### gRPC Shim Support _(experimental)_
    
    * **Initial gRPC shim support** ([#8052](https://github.com/containerd/containerd/pull/8052))
    
    Adds support for shims to use gRPC in addition to ttrpc. Existing ttrpc shim support is not going
    away and will continue to be recommended for the best performance and lowest shim memory overhead.
    The gRPC support allows implementation of a wider range of shim implementations which may not
    have access to a stable ttrpc library in the implementation language. The shim protocol is also
    updated to allow the shims to specify the protocol which is supported.
    
    #### Road to 2.0
    
    ##### Refactoring
    
    There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points.
    
    The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality
    out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independently. The new sandbox and distribution interfaces provide one example of this,
    but it also being done for image and network management.
    
    The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc.
    Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability.
    
    * **Remove gogoproto.customtype** ([#6699](https://github.com/containerd/containerd/pull/6699))
    * **Remove enumvalue_customname, goproto_enum_prefix and enum_customname** ([#6708](https://github.com/containerd/containerd/pull/6708))
    * **Remove all gogoproto extensions** ([#6829](https://github.com/containerd/containerd/pull/6829))
    * **Migrate off from github.com/gogo/protobuf** ([#6841](https://github.com/containerd/containerd/pull/6841))
    * **ttrpc streaming** ([ttrpc#107](https://github.com/containerd/ttrpc/pull/107))
    * **Add unpack interface for client** ([#6749](https://github.com/containerd/containerd/pull/6749))
    * **Add collectible resources to metadata gc** ([#6804](https://github.com/containerd/containerd/pull/6804))
    * **Add version to shim protocol** ([#8177](https://github.com/containerd/containerd/pull/8177))
    
    ##### Configuration
    
    Existing CRI configurations will be supported until 2.0.
    Any functionality split out of CRI will have their configuration migrated to new plugins.
    Deprecated configuration versions and configurations for deprecated features will be removed in 2.0.
    
    ##### Deprecation
    
    The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include.
    
    * **Docker Schema 1 Image Deprecation** ([#6884](https://github.com/containerd/containerd/pull/6884))
    
    #### CRI Updates
    
    * **Fix CRI plugin to setup pod network after creating the sandbox container** ([#5904](https://github.com/containerd/containerd/pull/5904))
    * **Support image pull progress timeout** ([#6150](https://github.com/containerd/containerd/pull/6150))
    * **Add experimental support for runtime specific snapshotters** ([#6899](https://github.com/containerd/containerd/pull/6899))
    * **Pass all TOML runtime configuration options from CRI to the runtime** ([#7764](https://github.com/containerd/containerd/pull/7764))
    * **Support for user namespaces in stateless pods ([KEP-127](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/127-user-namespaces)) _(experimental)_** ([#7679](https://github.com/containerd/containerd/pull/7679))
    * **Add timeout option for drain exec io** ([#7832](https://github.com/containerd/containerd/pull/7832))
    * **Add network plugin metrics** ([#7858](https://github.com/containerd/containerd/pull/7858))
    * **CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23** ([#7863](https://github.com/containerd/containerd/pull/7863))
    
    #### Other
    
    * **Support shallow content copy by adding reader option to local content reader at** ([#7414](https://github.com/containerd/containerd/pull/7414))
    * **Add NoSameOwner option when unpacking tars** ([#7386](https://github.com/containerd/containerd/pull/7386))
    * **Add `FetcherByDigest` for fetching blobs without fetching a manifest** ([#7460](https://github.com/containerd/containerd/pull/7460))
    * **Update default seccomp profile to block socket calls to AF_VSOCK** ([#7510](https://github.com/containerd/containerd/pull/7510))
    * **Replace fork on mount logic with CLONE_FS** ([#7513](https://github.com/containerd/containerd/pull/7513))
    * **Add support for default registry host configuration** ([#7607](https://github.com/containerd/containerd/pull/7607))
    * **Use github.com/minio/sha256-simd for more efficient sha256 calculation** ([#7732](https://github.com/containerd/containerd/pull/7732))
    * **Make OCI options cross-platform** ([#7928](https://github.com/containerd/containerd/pull/7928))
    * **Update release builds to build from Ubuntu 20.04 with glibc 2.31** ([#8021](https://github.com/containerd/containerd/pull/8021))
    * **Use data field from OCI descriptor when provided for fetch** ([#8076](https://github.com/containerd/containerd/pull/8076))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Derek McGowan
    * Kazuyoshi Kato
    * Maksym Pavlenko
    * Wei Fu
    * Phil Estes
    * Akihiro Suda
    * Sebastiaan van Stijn
    * Samuel Karp
    * Krisztian Litkey
    * Mike Brown
    * Stefan Berger
    * Danny Canter
    * Austin Vazquez
    * Daniel Canter
    * yanggang
    * Iceber Gu
    * Ye Sijun
    * Ed Bartosh
    * Luca Comellini
    * Adam Korcz
    * Nashwan Azhari
    * Tony Fang
    * ruiwen-zhao
    * xin.li
    * Brian Goff
    * Gabriel Adrian Samfira
    * Paul "TBBle" Hampson
    * Henry Wang
    * Kevin Parsons
    * Rodrigo Campos
    * zounengren
    * Justin Terry
    * Paco Xu
    * Shengjing Zhu
    * Swagat Bora
    * wanglei
    * Gavin Inglis
    * Akhil Mohan
    * Hsing-Yu (David) Chen
    * Zechun Chen
    * guodong
    * lengrongfu
    * James Jenkins
    * James Sturtevant
    * Kirtana Ashok
    * Michael Crosby
    * Qiutong Song
    * Shiming Zhang
    * Vincent Batts
    * Antonio Ojea
    * Cameron Sparr
    * Casey Callendrello
    * Changwei Ge
    * Jian Zeng
    * Josh Seba
    * Junyu Liu
    * Kohei Tokunaga
    * Michael Zappa
    * Qasim Sarfraz
    * Tobias Klauser
    * Zhang Tianyang
    * pigletfly
    * yaoyinnan
    * Abirdcfly
    * Aditi Sharma
    * Amit Barve
    * Bennett-White
    * Bjorn Neergaard
    * Cory Snider
    * Craig Ingram
    * Eng Zer Jun
    * Eric Lin
    * Ethan Lowman
    * Fabian Hoffmann
    * Jess
    * Jiongchi Yu
    * Jonny Stoten
    * Juan Hoyos
    * Kang.Zhang
    * Kay Yan
    * Markus Lehtonen
    * Mikko Ylinen
    * Mohit Sharma
    * Paul Cacheux
    * Paul S. Schweigert
    * Qian Zhang
    * Tõnis Tiigi
    * Yasin Turan
    * bin liu
    * helen
    * yulng
    * Aman Sharma
    * Anastassios Nanos
    * Andrew G. Morgan
    * Andrey Klimentyev
    * Aniruddha Basak
    * Anthony Nandaa
    * Antti Kervinen
    * Aviral Takkar
    * Baoshuo
    * Benjamin Elder
    * Benjamin Wang
    * Brandon Lum
    * Chao Dai
    * Chuanying Du
    * Claudiu Belu
    * Daniel Lenar
    * Danielle Lancashire
    * Dat Nguyen
    * Davanum Srinivas
    * Dave
    * David Leadbeater
    * David Porter
    * Dmitry Shurupov
    * Edgar Lee
    * Eric Ernst
    * Fahed Dorgaa
    * Gabriela Cervantes
    * Gijs Peskens
    * Hamza El-Saawy
    * Ikko Ashimine
    * Jeff Widman
    * Jeff Zvier
    * Jeremi Piotrowski
    * Jimmy Hsiao
    * Jin Dong
    * Jordan Karaze
    * Joseph Sheng
    * Joyce Brum
    * Jukka Rissanen
    * Justin Chadwell
    * Kate
    * Kathryn Baldauf
    * Kyle L Frisbie
    * LongtaoZhang
    * Manuel Alejandro de Brito Fontes
    * Marc Schwind
    * Mark Rossetti
    * Mark Zhang
    * Marvin Giessing
    * Mathis Michel
    * Merlin Ran
    * Nabeel Rana
    * Nathan
    * Nguyen Phan Huy
    * Nikita Rybak
    * Nobel Barakat
    * Oleg Atamanenko
    * Oleg Zhurakivskyy
    * Oliver Radwell
    * Paweł Gronowski
    * Quan Tian
    * Roy Yang
    * Samuel Ortiz
    * Serge Logvinov
    * Shane Jennings
    * Shaun Lawrie
    * Shinichi Morimoto
    * SilverSoldier
    * Sophie Liu
    * Su Fei
    * Taeho Nam
    * Takumasa Sakao
    * Tiger Kaovilai
    * Tom Godkin
    * Tomoya.Fujita
    * Xinlin Ma
    * Yakul Garg
    * Zhongming Chang
    * Zhuchen Wang
    * austinvazquez
    * cardy.tang
    * chaunceyjiang
    * dabaooline
    * guiyong.ou
    * huoqifeng
    * jianfei.zhang
    * liyuxuan.darfux
    * ningmingxiao
    * panguicai008
    * shi yixue
    * shuaichang
    * songjiang han
    * wen chen
    * wusong
    * xiaoyang zhu
    * yanghesong
    * yaozhenxiu
    * zhang he
    
    ### Changes
    <details><summary>1753 commits</summary>
    <p>
    
    * Prepare release notes for v1.7.0 ([#8242](https://github.com/containerd/containerd/pull/8242))
    * RELEASES.md: describe the deprecated config properties ([#8241](https://github.com/containerd/containerd/pull/8241))
    * Flag usage uses uppercase letters  ([#8232](https://github.com/containerd/containerd/pull/8232))
    * docs: link docs/managed-opt.md to client.Install ([#8240](https://github.com/containerd/containerd/pull/8240))
    * Prepare release notes for v1.7.0-rc.3 ([#8233](https://github.com/containerd/containerd/pull/8233))
    * Go 1.20.2 ([#8237](https://github.com/containerd/containerd/pull/8237))
    * Update ttrpc to v1.2.1 ([#8236](https://github.com/containerd/containerd/pull/8236))
    * sandbox: create sandbox with network namespace path ([#8149](https://github.com/containerd/containerd/pull/8149))
    * labels: Add LabelDistributionSource ([#8224](https://github.com/containerd/containerd/pull/8224))
    * archive: disable looking up usernames and groupnames on the host ([#8220](https://github.com/containerd/containerd/pull/8220))
    * go.mod: go.opentelemetry.io/otel/* v1.14.0 ([#8222](https://github.com/containerd/containerd/pull/8222))
    * metadata: add comments about `Image.CreatedAt` ([#8225](https://github.com/containerd/containerd/pull/8225))
    * Add release notes for v1.7.0-rc.2 ([#8216](https://github.com/containerd/containerd/pull/8216))
    * go.mod: {hcsshim, containerd/*, go-restful/v3, mergo, klauspost/compress, opencontainers/*} latest ([#8221](https://github.com/containerd/containerd/pull/8221))
    * Bump k8s.io deps ([#8131](https://github.com/containerd/containerd/pull/8131))
    * Update imgcrypt to v1.1.7 ([#8217](https://github.com/containerd/containerd/pull/8217))
    * Add ArgsEscaped support for CRI ([#8198](https://github.com/containerd/containerd/pull/8198))
    * Sandbox: Delete shim+shutdown sandbox on create failure ([#8204](https://github.com/containerd/containerd/pull/8204))
    * [Feature] Transfer tag image ([#8205](https://github.com/containerd/containerd/pull/8205))
    * docs: fix typo of shim.RunManager's function comment ([#8214](https://github.com/containerd/containerd/pull/8214))
    * [cri] Implement CRI Pod and Container stats for Windows ([#7099](https://github.com/containerd/containerd/pull/7099))
    * Sandbox: Fix/enhance error messages for Create ([#8203](https://github.com/containerd/containerd/pull/8203))
    * epoch: fix unit test when SOURCE_DATE_EPOCH is set ([#8202](https://github.com/containerd/containerd/pull/8202))
    * pkg/cri: add timeout to drain exec io ([#7832](https://github.com/containerd/containerd/pull/7832))
    * Prepare release notes for v1.7.0-rc.1 ([#8192](https://github.com/containerd/containerd/pull/8192))
    * Transfer export image ([#8191](https://github.com/containerd/containerd/pull/8191))
    * Create config struct to take user input ([#8193](https://github.com/containerd/containerd/pull/8193))
    * ctr/tasks: support remapped UID/GID ([#7864](https://github.com/containerd/containerd/pull/7864))
    * Add experimental section to RELEASES.md ([#8119](https://github.com/containerd/containerd/pull/8119))
    * Fix streaming manager deadlock on collection ([#8188](https://github.com/containerd/containerd/pull/8188))
    * Update CRI guide link ([#8190](https://github.com/containerd/containerd/pull/8190))
    * Add max shim version environment variable ([#8189](https://github.com/containerd/containerd/pull/8189))
    * Update README with location of security audits ([#8187](https://github.com/containerd/containerd/pull/8187))
    * docs: fix typos in historical/design/data-flow.md ([#8181](https://github.com/containerd/containerd/pull/8181))
    * Increase CI workflow timeout on Windows. ([#8183](https://github.com/containerd/containerd/pull/8183))
    * releases: mark 1.5 as EOL ([#8178](https://github.com/containerd/containerd/pull/8178))
    * Add version to shim protocol ([#8177](https://github.com/containerd/containerd/pull/8177))
    * Rework install-protobuf script and add new targets ([#8164](https://github.com/containerd/containerd/pull/8164))
    * bump go-cni to v1.1.9 ([#8173](https://github.com/containerd/containerd/pull/8173))
    * Treat sandboxes as root gc resources and scan referenced objects ([#8172](https://github.com/containerd/containerd/pull/8172))
    * update CDI version to v0.5.4 ([#8152](https://github.com/containerd/containerd/pull/8152))
    * Prepare release notes for v1.7.0-rc.0 ([#8162](https://github.com/containerd/containerd/pull/8162))
    * pkg/nri: pull in latest NRI, update NRI configuration. ([#8140](https://github.com/containerd/containerd/pull/8140))
    * [transfer]Config options followup ([#8165](https://github.com/containerd/containerd/pull/8165))
    * Add configuration options to local transfer service ([#8062](https://github.com/containerd/containerd/pull/8062))
    * docs: Show how to select GRPC for shims ([#8134](https://github.com/containerd/containerd/pull/8134))
    * CRI: remove duplicated snapshotters code ([#8154](https://github.com/containerd/containerd/pull/8154))
    * docs: add more comment to logging.LoggerFunc ([#8142](https://github.com/containerd/containerd/pull/8142))
    * contrib/apparmor: remove code related to apparmor_parser version ([#8069](https://github.com/containerd/containerd/pull/8069))
    * runtime/v2: Call onCloseWithShimLog for grpc shims ([#8120](https://github.com/containerd/containerd/pull/8120))
    * Add Fields type alias to log package ([#8143](https://github.com/containerd/containerd/pull/8143))
    * Migrate from k8s.gcr.io to registry.k8s.io ([#8125](https://github.com/containerd/containerd/pull/8125))
    * sandbox: start sandbox with options ([#8129](https://github.com/containerd/containerd/pull/8129))
    * Add macOS build note ([#8115](https://github.com/containerd/containerd/pull/8115))
    * Fix concurrent writes for UpdateContainerStats ([#8130](https://github.com/containerd/containerd/pull/8130))
    * dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8128](https://github.com/containerd/containerd/pull/8128))
    * runtime/v2: Log BootstrapParams ([#8124](https://github.com/containerd/containerd/pull/8124))
    * Prepare release notes for v1.7.0 beta.4 ([#8110](https://github.com/containerd/containerd/pull/8110))
    * Go 1.20.1 ([#8103](https://github.com/containerd/containerd/pull/8103))
    * ctr version: add args check ([#8096](https://github.com/containerd/containerd/pull/8096))
    * pkg/cri/config: fix Mirrors deprecation comment ([#8041](https://github.com/containerd/containerd/pull/8041))
    * docs: fix function names in fuzzing test documentation ([#8044](https://github.com/containerd/containerd/pull/8044))
    * fix: 'go routine' should be 'goroutine' ([#8051](https://github.com/containerd/containerd/pull/8051))
    * Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p)
    * Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2)
    * pkg/cri/sbserver: experimental NRI integration for CRI. ([#7954](https://github.com/containerd/containerd/pull/7954))
    * Clean up error strings that start with uppercase ([#8114](https://github.com/containerd/containerd/pull/8114))
    * Clean up repeated package import ([#8113](https://github.com/containerd/containerd/pull/8113))
    * Go 1.19.6 ([#8109](https://github.com/containerd/containerd/pull/8109))
    * Initial GRPC shims support ([#8052](https://github.com/containerd/containerd/pull/8052))
    * CRI: Pass sandbox annotations to _other platforms ([#8060](https://github.com/containerd/containerd/pull/8060))
    * cmd/ctr/commands/images: support usage subcommand ([#8105](https://github.com/containerd/containerd/pull/8105))
    * cni: pass in the cgroupPath capability argument ([#8067](https://github.com/containerd/containerd/pull/8067))
    * Add fallback for windows platforms without osversion ([#8101](https://github.com/containerd/containerd/pull/8101))
    * release: xx v1.2.1 ([#8104](https://github.com/containerd/containerd/pull/8104))
    * [transfer] update imagestore interface to support multiple references ([#7964](https://github.com/containerd/containerd/pull/7964))
    * [sandbox] Use options to pass PodSandboxConfig to shims ([#8100](https://github.com/containerd/containerd/pull/8100))
    * Send container events with nil PodSandboxStatus ([#8047](https://github.com/containerd/containerd/pull/8047))
    * test: add hostNetwork tests for both windows and linux ([#7984](https://github.com/containerd/containerd/pull/7984))
    * loadConfig pre-inspection in advance ([#8097](https://github.com/containerd/containerd/pull/8097))
    * contrib/apparmor: remove version-dependent rules ([#8068](https://github.com/containerd/containerd/pull/8068))
    * *: introduce wrapper pkgs for blockio and rdt ([#8066](https://github.com/containerd/containerd/pull/8066))
    * Extract CRI instrument into separate package ([#8093](https://github.com/containerd/containerd/pull/8093))
    * CRI: Mirror generic toml runtime config under server ([#8091](https://github.com/containerd/containerd/pull/8091))
    * go.mod: github.com/containerd/typeurl/v2 v2.1.0 ([#8092](https://github.com/containerd/containerd/pull/8092))
    * Revert `apparmor_parser` regression ([#8086](https://github.com/containerd/containerd/pull/8086))
    * [sandbox] refactor controller interface ([#7981](https://github.com/containerd/containerd/pull/7981))
    * btrfs: depend on kernel UAPI instead of libbtrfs ([#7933](https://github.com/containerd/containerd/pull/7933))
    * CI: skip some jobs when `repo != containerd/containerd` ([#8082](https://github.com/containerd/containerd/pull/8082))
    * chore: clean up repeated package import ([#8078](https://github.com/containerd/containerd/pull/8078))
    * fetch: Use data from descriptor when available. ([#8076](https://github.com/containerd/containerd/pull/8076))
    * chore: use http constants instead of string ([#8077](https://github.com/containerd/containerd/pull/8077))
    * Fix retry logic within devmapper device deactivation ([#8075](https://github.com/containerd/containerd/pull/8075))
    * Clean CI yaml ([#8071](https://github.com/containerd/containerd/pull/8071))
    * Add critest.exe in $PATH ([#8074](https://github.com/containerd/containerd/pull/8074))
    * keep the uppercase letter for flag info ([#7976](https://github.com/containerd/containerd/pull/7976))
    * go.mod: Bump hcsshim to v0.10.0-rc.5 ([#8049](https://github.com/containerd/containerd/pull/8049))
    * Fix sandbox exit monitor ([#8045](https://github.com/containerd/containerd/pull/8045))
    * Generate GRPC contracts for runtime APIs ([#7979](https://github.com/containerd/containerd/pull/7979))
    * Make argument validation of `mount.UnmountRecursive` compatible to `mount.UnmountAll` ([#8035](https://github.com/containerd/containerd/pull/8035))
    * Export remote snapshotter label handler ([#8036](https://github.com/containerd/containerd/pull/8036))
    * Adding support to run install hcsshim from local clone ([#7989](https://github.com/containerd/containerd/pull/7989))
    * go.mod: github.com/urfave/cli v1.22.12 ([#8040](https://github.com/containerd/containerd/pull/8040))
    * cmd/ctr/commands: clean up the func IntToInt32Array in utils.go ([#8039](https://github.com/containerd/containerd/pull/8039))
    * pkg/epoch: drop timezone ([#8037](https://github.com/containerd/containerd/pull/8037))
    * go.mod: update github.com/containerd/nri. ([#8034](https://github.com/containerd/containerd/pull/8034))
    * fix(docs): minor fix on the windows installation steps ([#8013](https://github.com/containerd/containerd/pull/8013))
    * Add integration test to opentelemetry tracing on image pull ([#7847](https://github.com/containerd/containerd/pull/7847))
    * Use mount.Target to specify subdirectory of rootfs mount ([#7840](https://github.com/containerd/containerd/pull/7840))
    * cri: mkdir /etc/cni with 0755, not 0700 ([#8020](https://github.com/containerd/containerd/pull/8020))
    * log/logtest: add `testcase` as debug field ([#8025](https://github.com/containerd/containerd/pull/8025))
    * go.mod: github.com/containerd/cgroups/v3 v3.0.0 ([#8027](https://github.com/containerd/containerd/pull/8027))
    * Update CNI plugins to 1.2.0 ([#7977](https://github.com/containerd/containerd/pull/7977))
    * go.mod: go.opentelemetry.io/otel v1.12.0 ([#8026](https://github.com/containerd/containerd/pull/8026))
    * Move PLEG events for pause container under podsandbox package ([#8007](https://github.com/containerd/containerd/pull/8007))
    * runtime docs: Clarify delete cwd behavior ([#8012](https://github.com/containerd/containerd/pull/8012))
    * release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles ([#8019](https://github.com/containerd/containerd/pull/8019))
    * RELEASES.md: update release status ([#8022](https://github.com/containerd/containerd/pull/8022))
    * deflake: TestContainerPids ([#8023](https://github.com/containerd/containerd/pull/8023))
    * release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) ([#8021](https://github.com/containerd/containerd/pull/8021))
    * Update the EOL date for 1.5 release ([#8015](https://github.com/containerd/containerd/pull/8015))
    * Prepare release notes for v1.7.0-beta.3 ([#8014](https://github.com/containerd/containerd/pull/8014))
    * Fix Memory Limit test ([#7959](https://github.com/containerd/containerd/pull/7959))
    * Reused package errdefs for not supported error ([#8005](https://github.com/containerd/containerd/pull/8005))
    * pkg/cri: optimize slice initialization ([#7994](https://github.com/containerd/containerd/pull/7994))
    * go.mod: update goresctrl to v0.3.0 ([#7987](https://github.com/containerd/containerd/pull/7987))
    * pushWriter: correctly propagate errors ([#7985](https://github.com/containerd/containerd/pull/7985))
    * CI: test release.yml on every PR ([#7968](https://github.com/containerd/containerd/pull/7968))
    * fix incorrect namespace of event when create/update namespace ([#7129](https://github.com/containerd/containerd/pull/7129))
    * Backport changes to sandboxed CRI ([#7973](https://github.com/containerd/containerd/pull/7973))
    * Fix syntax errors in the document ([#7970](https://github.com/containerd/containerd/pull/7970))
    * release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7969](https://github.com/containerd/containerd/pull/7969))
    * use local variable for rt when iterating collectors ([#7963](https://github.com/containerd/containerd/pull/7963))
    * Add basic spec and mounts for Darwin ([#7960](https://github.com/containerd/containerd/pull/7960))
    * go.mod: Bump hcsshim to v0.10.0-rc.4 ([#7810](https://github.com/containerd/containerd/pull/7810))
    * Use specs Platform instead of generated API ([#7958](https://github.com/containerd/containerd/pull/7958))
    * Make OCI options cross-platform ([#7928](https://github.com/containerd/containerd/pull/7928))
    * update to go1.19.5, go1.18.10 ([#7948](https://github.com/containerd/containerd/pull/7948))
    * fuzzing: improve archive fuzzer ([#7957](https://github.com/containerd/containerd/pull/7957))
    * shim: enable debug logging for delete ([#7943](https://github.com/containerd/containerd/pull/7943))
    * cri: Fix TestUpdateOCILinuxResource for host w/o swap controller ([#7946](https://github.com/containerd/containerd/pull/7946))
    * ctr/run: flags --detach and --rm cannot be specified together ([#7929](https://github.com/containerd/containerd/pull/7929))
    * Fix Flaky Windows CRI Integration test on TestContainerConsumedStats ([#7935](https://github.com/containerd/containerd/pull/7935))
    * Refactor snapshotters metastore transaction ([#7917](https://github.com/containerd/containerd/pull/7917))
    * mod: update github.com/pelletier/go-toml@v1.9.5 ([#7932](https://github.com/containerd/containerd/pull/7932))
    * archive: improve TestSourceDateEpoch ([#7927](https://github.com/containerd/containerd/pull/7927))
    * Add tracing plugin test ([#7883](https://github.com/containerd/containerd/pull/7883))
    * docs/content-flow: update the description of the content labels  ([#7925](https://github.com/containerd/containerd/pull/7925))
    * Add cleanup package for context management during cleanup ([#7861](https://github.com/containerd/containerd/pull/7861))
    * Fix race between stream registration and use ([#7886](https://github.com/containerd/containerd/pull/7886))
    * Prepare release notes for v1.7.0-beta.2 ([#7903](https://github.com/containerd/containerd/pull/7903))
    * Cirrus CI (Fedora 37, Rocky 8): enable cri-integration ([#7892](https://github.com/containerd/containerd/pull/7892))
    * contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages ([#7891](https://github.com/containerd/containerd/pull/7891))
    * docs: fix a typo in tracing documentation ([#7914](https://github.com/containerd/containerd/pull/7914))
    * CI: Pass GITHUB_TOKEN to containerd/project-checks ([#7913](https://github.com/containerd/containerd/pull/7913))
    * Enable dupword linter ([#7911](https://github.com/containerd/containerd/pull/7911))
    * ctr: Add platform flag to 'oci spec' command ([#7905](https://github.com/containerd/containerd/pull/7905))
    * Vagrantfile: fix disk resize error with VirtualBox ([#7907](https://github.com/containerd/containerd/pull/7907))
    * Vagrantfile: fix comments about SELinux ([#7908](https://github.com/containerd/containerd/pull/7908))
    * Use the const labels.LabelUncompressed ([#7906](https://github.com/containerd/containerd/pull/7906))
    * [sandbox] Add sandbox store plugin type ([#7850](https://github.com/containerd/containerd/pull/7850))
    * Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts ([#7893](https://github.com/containerd/containerd/pull/7893))
    * CRI: Comment cleanup/misc fixes ([#7904](https://github.com/containerd/containerd/pull/7904))
    * Move snapshot event publishing into metadata store ([#5674](https://github.com/containerd/containerd/pull/5674))
    * Vagrantfile: install-rootless-podman: remove `setenforce 0` ([#7887](https://github.com/containerd/containerd/pull/7887))
    * reused package errdefs for error ([#7894](https://github.com/containerd/containerd/pull/7894))
    * integration/images: switch away from Docker Hub to avoid rate limit ([#7888](https://github.com/containerd/containerd/pull/7888))
    * Validate userns container config is consistent with sandbox userns config ([#7882](https://github.com/containerd/containerd/pull/7882))
    * `ctr contents ls` sorts the labels of the content ([#7881](https://github.com/containerd/containerd/pull/7881))
    * chore: use `go fix` to cleanup old +build buildtag ([#7879](https://github.com/containerd/containerd/pull/7879))
    * cri: Shadow variables to avoid t.Parallel() issues ([#7880](https://github.com/containerd/containerd/pull/7880))
    * Add support for user namespaces in stateless pods (KEP-127) ([#7679](https://github.com/containerd/containerd/pull/7679))
    * Refactor metastore transaction ([#7529](https://github.com/containerd/containerd/pull/7529))
    * oci: appendOSMounts(): remove unused error, and move ([#7874](https://github.com/containerd/containerd/pull/7874))
    * add kube v1.26: remove v1alph2 cri support ([#7863](https://github.com/containerd/containerd/pull/7863))
    * make runc 1.1 for oss_fuzz_build.sh ([#7875](https://github.com/containerd/containerd/pull/7875))
    * CRI sbserver: Prevent server reuse after Shutdown ([#7872](https://github.com/containerd/containerd/pull/7872))
    * Fix incorrect defer usage and refactor judgement ([#7521](https://github.com/containerd/containerd/pull/7521))
    * oci: Add WithDomainname ([#7869](https://github.com/containerd/containerd/pull/7869))
    * Reused errdefs define error ([#7871](https://github.com/containerd/containerd/pull/7871))
    * fix `ctr tasks kill` does not remove cni network under windows ([#7866](https://github.com/containerd/containerd/pull/7866))
    * add network plugin metrics ([#7858](https://github.com/containerd/containerd/pull/7858))
    * Avoid using canceled context in unpacker cleanup ([#7859](https://github.com/containerd/containerd/pull/7859))
    * image/label: print more characters of label keys ([#7618](https://github.com/containerd/containerd/pull/7618))
    * prevent Server reuse after a Shutdown ([#7165](https://github.com/containerd/containerd/pull/7165))
    * Check containerd's readiness before calling critest ([#7851](https://github.com/containerd/containerd/pull/7851))
    * Fix grammatical errors in Readme ([#7837](https://github.com/containerd/containerd/pull/7837))
    * Fix cpu architecture detection issue on linux/arm ([#7636](https://github.com/containerd/containerd/pull/7636))
    * CRI: Fix no CNI info for pod sandbox on restart ([#7845](https://github.com/containerd/containerd/pull/7845))
    * Enable checkRename test ([#7081](https://github.com/containerd/containerd/pull/7081))
    * metastore: Add WithTransaction convenience method ([#7781](https://github.com/containerd/containerd/pull/7781))
    * Prevent a race condition in testHook ([#7831](https://github.com/containerd/containerd/pull/7831))
    * cri: fix `memory.memsw.limit_in_bytes: no such file or directory` ([#7836](https://github.com/containerd/containerd/pull/7836))
    * go.mod: update fuzz-headers and fuzz-build ([#7824](https://github.com/containerd/containerd/pull/7824))
    * Remove github.com/gogo/protobuf again ([#7825](https://github.com/containerd/containerd/pull/7825))
    * CRI: Add host networking helper ([#7814](https://github.com/containerd/containerd/pull/7814))
    * Support sandbox shutdown in shim runtimes ([#7792](https://github.com/containerd/containerd/pull/7792))
    * move up to CRI-TOOLS v1.26.0 ([#7818](https://github.com/containerd/containerd/pull/7818))
    * Minor fix when querying pod sandbox status ([#7812](https://github.com/containerd/containerd/pull/7812))
    * nil check to avoid panic on upgrade ([#7809](https://github.com/containerd/containerd/pull/7809))
    * Bump grpc to v1.51.0 ([#7709](https://github.com/containerd/containerd/pull/7709))
    * fatal error: concurrent map iteration and map write ([#7805](https://github.com/containerd/containerd/pull/7805))
    * Bump golangci-lint to v1.50.1 ([#7804](https://github.com/containerd/containerd/pull/7804))
    * cri: make swapping disabled with memory limit ([#7783](https://github.com/containerd/containerd/pull/7783))
    * add metrics for image pulling: error; in progress count; thoughput  ([#7313](https://github.com/containerd/containerd/pull/7313))
    * Prepare release notes for v1.7.0-beta.1 ([#7793](https://github.com/containerd/containerd/pull/7793))
    * support fetching containerd from non public GCS buckets ([#7771](https://github.com/containerd/containerd/pull/7771))
    * images: support specifying SourceDateEpoch via ctx ([#7651](https://github.com/containerd/containerd/pull/7651))
    * fuzzing: improve archive fuzzer ([#7718](https://github.com/containerd/containerd/pull/7718))
    * fix sdNotify func when debug level ([#7798](https://github.com/containerd/containerd/pull/7798))
    * Upgrade GitHub actions packages in release workflow ([#7794](https://github.com/containerd/containerd/pull/7794))
    * Enable GitHub Actions local Linux CI runs ([#7796](https://github.com/containerd/containerd/pull/7796))
    * integration: increase timeout in container_event_test.go ([#7791](https://github.com/containerd/containerd/pull/7791))
    * digest: use github.com/minio/sha256-simd ([#7732](https://github.com/containerd/containerd/pull/7732))
    * allow client to remove created tasks with PID 0 ([#7787](https://github.com/containerd/containerd/pull/7787))
    * Add container event support to containerd ([#7073](https://github.com/containerd/containerd/pull/7073))
    * docs: Authorizer.Authorize could return ErrUnexpectedStatus ([#7786](https://github.com/containerd/containerd/pull/7786))
    * fix: check for tmpfs when evaluating if userxattr is needed ([#7772](https://github.com/containerd/containerd/pull/7772))
    * Pass TOML configuration options for runtimes CRI is not aware of ([#7764](https://github.com/containerd/containerd/pull/7764))
    * Cleanup build constraints ([#7776](https://github.com/containerd/containerd/pull/7776))
    * There is no way to disable debug endpoint on Darwin ([#7775](https://github.com/containerd/containerd/pull/7775))
    * CI: Vagrant: pin rockylinux/8 to v5.0.0 ([#7777](https://github.com/containerd/containerd/pull/7777))
    * vendor: golang.org/x/net v0.4.0 ([#7774](https://github.com/containerd/containerd/pull/7774))
    * Fix context when waiting sandbox ([#7773](https://github.com/containerd/containerd/pull/7773))
    * Github Security Advisory [GHSA-2qjp-425j-52j9](https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9)
    * update to go1.19.4, go1.18.9 ([#7765](https://github.com/containerd/containerd/pull/7765))
    * Change PushContent to require only Provider ([#7763](https://github.com/containerd/containerd/pull/7763))
    * sbserver bug fixing ([#7768](https://github.com/containerd/containerd/pull/7768))
    * Add unit test to Opentelemetry tracing ([#7671](https://github.com/containerd/containerd/pull/7671))
    * remove some (aliases for) deprecated functions ([#7525](https://github.com/containerd/containerd/pull/7525))
    * Refactor ctr restore to allow for tty allocation ([#7673](https://github.com/containerd/containerd/pull/7673))
    * fix panic when containerd-stress density --count 0 ([#7748](https://github.com/containerd/containerd/pull/7748))
    * Unwrap proto errors in streaming client ([#7753](https://github.com/containerd/containerd/pull/7753))
    * Fix process_vm_* syscall names in seccomp ([#7755](https://github.com/containerd/containerd/pull/7755))
    * upgrade the ops.md output for current 1.7 version . ([#7747](https://github.com/containerd/containerd/pull/7747))
    * docs: Add extra security instructions ([#7743](https://github.com/containerd/containerd/pull/7743))
    * go.mod: re-vendor NRI from the official repo. ([#7744](https://github.com/containerd/containerd/pull/7744))
    * [Sandbox API] CRI status cleanup ([#7731](https://github.com/containerd/containerd/pull/7731))
    * Transfer service ([#7320](https://github.com/containerd/containerd/pull/7320))
    * NRI: add support for NRI with extended scope. ([#6019](https://github.com/containerd/containerd/pull/6019))
    * archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ([#7710](https://github.com/containerd/containerd/pull/7710))
    * Fix order of operations when setting lease labels ([#7702](https://github.com/containerd/containerd/pull/7702))
    * Add ctr image prune command ([#7730](https://github.com/containerd/containerd/pull/7730))
    * Check for nullptr before dereferencing ([#7708](https://github.com/containerd/containerd/pull/7708))
    * use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers ([#7736](https://github.com/containerd/containerd/pull/7736))
    * introspection: expose the daemon's PID and PIDNS ([#7694](https://github.com/containerd/containerd/pull/7694))
    * reference/docker: synchronize fork with upstream distribution/distribution ([#7635](https://github.com/containerd/containerd/pull/7635))
    * go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions ([#7721](https://github.com/containerd/containerd/pull/7721))
    * Add ptrace readby and tracedby to default AppArmor profile ([#7714](https://github.com/containerd/containerd/pull/7714))
    * Fix sandbox API when calling sandboxed shims ([#7684](https://github.com/containerd/containerd/pull/7684))
    * make status more readable and update easy. ([#7669](https://github.com/containerd/containerd/pull/7669))
    * integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 ([#7720](https://github.com/containerd/containerd/pull/7720))
    * Resolve warnings in Windows GitHub Actions periodic workflows ([#7706](https://github.com/containerd/containerd/pull/7706))
    * Sandbox API: implement Controller.Status for SandboxAPI ([#7470](https://github.com/containerd/containerd/pull/7470))
    * [port #5904 to sbserver] Setup pod network after creating the sandbox container ([#7426](https://github.com/containerd/containerd/pull/7426))
    * fix for OSS-Fuzz infra changes ([#7677](https://github.com/containerd/containerd/pull/7677))
    * runtime/v2/shim: clean up the use of containerdBinary ([#7499](https://github.com/containerd/containerd/pull/7499))
    * Add process_vm read and write calls to default seccomp profile ([#7693](https://github.com/containerd/containerd/pull/7693))
    * Resolve Scorecards GitHub Actions workflow warnings ([#7707](https://github.com/containerd/containerd/pull/7707))
    * cri: add pod uid annotation ([#7697](https://github.com/containerd/containerd/pull/7697))
    * Missed out `platform interface` when reused the conn for Client. ([#7699](https://github.com/containerd/containerd/pull/7699))
    * overlayfs: remove duplicated tx rollback ([#7700](https://github.com/containerd/containerd/pull/7700))
    * go.mod: update some dependencies ([#7704](https://github.com/containerd/containerd/pull/7704))
    * update github.com/cpuguy83/go-md2man/v2 to v2.0.2 ([#7705](https://github.com/containerd/containerd/pull/7705))
    * Fsnotify bump and change code ([#7703](https://github.com/containerd/containerd/pull/7703))
    * fix build containerd in centos9 ([#7683](https://github.com/containerd/containerd/pull/7683))
    * Bump urfave-cli to v1.22.10 ([#7701](https://github.com/containerd/containerd/pull/7701))
    * can set up the network serially by CNI plugins ([#7685](https://github.com/containerd/containerd/pull/7685))
    * Update cri-api dependency to v0.26.0-beta.0 ([#7656](https://github.com/containerd/containerd/pull/7656))
    * overlay: Remove unused method param ([#7696](https://github.com/containerd/containerd/pull/7696))
    * CI: update Fedora to 37 ([#7691](https://github.com/containerd/containerd/pull/7691))
    * tx rollback when GetInfo return error ([#7678](https://github.com/containerd/containerd/pull/7678))
    * Upgrade github.com/containerd/cgroups from v1 to v3 ([#7601](https://github.com/containerd/containerd/pull/7601))
    * Remove OpenTelementry imports from remotes/docker package ([#7675](https://github.com/containerd/containerd/pull/7675))
    * Expose Done and Err in Shutdown service ([#7686](https://github.com/containerd/containerd/pull/7686))
    * gotestsum match go version 1.19 ([#7688](https://github.com/containerd/containerd/pull/7688))
    * complement sub-command note for containerd-main ([#7670](https://github.com/containerd/containerd/pull/7670))
    * keep the lower case letter for flag info ([#7668](https://github.com/containerd/containerd/pull/7668))
    * bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a ([#7666](https://github.com/containerd/containerd/pull/7666))
    * Fix broken link for CRI plugin in docs ([#7667](https://github.com/containerd/containerd/pull/7667))
    * add option to resolve symlinks in WithLinuxDevice ([#7523](https://github.com/containerd/containerd/pull/7523))
    * Bump k8s.io deps to v0.25.4 ([#7663](https://github.com/containerd/containerd/pull/7663))
    * Release: add static binaries ([#7659](https://github.com/containerd/containerd/pull/7659))
    * Bump OpenTelemetry contrib to v0.36.4 ([#7662](https://github.com/containerd/containerd/pull/7662))
    * Fix slice append error (`spec.Linux.Resources.HugepageLimits`) ([#7661](https://github.com/containerd/containerd/pull/7661))
    * Bump OpenTelemetry to v1.11.1 ([#7660](https://github.com/containerd/containerd/pull/7660))
    * feature: add gc scheduler metrics collection count ([#5263](https://github.com/containerd/containerd/pull/5263))
    * Add `--debug` args to all subcommands of `ctr pprof` ([#7629](https://github.com/containerd/containerd/pull/7629))
    * Add a thin wrapper around otel Span object ([#7655](https://github.com/containerd/containerd/pull/7655))
    * Bump grpc to v1.50.1 ([#7643](https://github.com/containerd/containerd/pull/7643))
    * replace strings.Split(N) for strings.Cut() or alternatives ([#7631](https://github.com/containerd/containerd/pull/7631))
    * add oci.WithCPURT ([#7642](https://github.com/containerd/containerd/pull/7642))
    * Sandbox API: Add a new mode config for sandbox controller impls ([#7590](https://github.com/containerd/containerd/pull/7590))
    * fuzzing: bump go-fuzz-headers ([#7625](https://github.com/containerd/containerd/pull/7625))
    * Bump k8s.io deps to v0.25.3 ([#7637](https://github.com/containerd/containerd/pull/7637))
    * Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex ([#7641](https://github.com/containerd/containerd/pull/7641))
    * Extra documentation for content interfaces ([#7640](https://github.com/containerd/containerd/pull/7640))
    * Fix shim socket permissions on Darwin ([#7638](https://github.com/containerd/containerd/pull/7638))
    * s390x: build and package s390x bin in release assets ([#7614](https://github.com/containerd/containerd/pull/7614))
    * Replace mount fork hack with CLONE_FS ([#7513](https://github.com/containerd/containerd/pull/7513))
    * remotes: add `FetcherByDigest` for fetching blobs without foreknown descriptors (useful for general-purpose CAS) ([#7460](https://github.com/containerd/containerd/pull/7460))
    * Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 ([#7403](https://github.com/containerd/containerd/pull/7403))
    * Support default hosts.toml configuration ([#7607](https://github.com/containerd/containerd/pull/7607))
    * Add tracing spans in CRI image service and pull.go ([#7453](https://github.com/containerd/containerd/pull/7453))
    * Fix missing closed fifo ([#7604](https://github.com/containerd/containerd/pull/7604))
    * fix comments ([#7624](https://github.com/containerd/containerd/pull/7624))
    * docs: add additional info in backport process ([#7626](https://github.com/containerd/containerd/pull/7626))
    * go.mod: golang.org/x/*: use tagged versions ([#7621](https://github.com/containerd/containerd/pull/7621))
    * Bump go version to 1.19.3 ([#7620](https://github.com/containerd/containerd/pull/7620))
    * ctr export strictly matching ([#7615](https://github.com/containerd/containerd/pull/7615))
    * Fix ctr crash when pulling with --http-dump and --http-trace simultaneously ([#7617](https://github.com/containerd/containerd/pull/7617))
    * Harden GITHUB_TOKEN permissions for OSSF Scorecard ([#7599](https://github.com/containerd/containerd/pull/7599))
    * overlayutils: Add fastpath for userxattr check ([#7611](https://github.com/containerd/containerd/pull/7611))
    * Add sequence diagram for shim runtime v2 ([#7606](https://github.com/containerd/containerd/pull/7606))
    * Sandbox API: Move remote impls to /sandbox/proxy ([#7600](https://github.com/containerd/containerd/pull/7600))
    * fuzzing: improve archive fuzzer ([#7588](https://github.com/containerd/containerd/pull/7588))
    * Retry client connection in  waitForStart ([#7537](https://github.com/containerd/containerd/pull/7537))
    * Add Workflow for running critest with Hyper-V Containers on Windows. ([#7025](https://github.com/containerd/containerd/pull/7025))
    * Add release notes for v1.7.0-beta.0 ([#7575](https://github.com/containerd/containerd/pull/7575))
    * Cleanup sandbox interfaces ([#7576](https://github.com/containerd/containerd/pull/7576))
    * Update GitHub actions release workflow set output ([#7581](https://github.com/containerd/containerd/pull/7581))
    * Fix LogURI generation-related tests on Windows. ([#7569](https://github.com/containerd/containerd/pull/7569))
    * maintenance: Remove WithWindowsNetworkNamespace from pkg/cri ([#7577](https://github.com/containerd/containerd/pull/7577))
    * CRI: implement Controller.Delete for SandboxAPI ([#7457](https://github.com/containerd/containerd/pull/7457))
    * Configure CDI registry only on start ([#7419](https://github.com/containerd/containerd/pull/7419))
    * update codeql-action to v2 ([#7568](https://github.com/containerd/containerd/pull/7568))
    * Add logging related metrics to Containerd CRI plugin ([#7546](https://github.com/containerd/containerd/pull/7546))
    * sys: optimize and refactor MkdirAllWithACL() ([#7531](https://github.com/containerd/containerd/pull/7531))
    * fix install cni script ([#7484](https://github.com/containerd/containerd/pull/7484))
    * Update 1.5 release support timeframe ([#7560](https://github.com/containerd/containerd/pull/7560))
    * bump go-fuzz-headers ([#7503](https://github.com/containerd/containerd/pull/7503))
    * Add long term stable release branches ([#7454](https://github.com/containerd/containerd/pull/7454))
    * fix pusher concurrent close channel ([#7473](https://github.com/containerd/containerd/pull/7473))
    * Make tests on GitHub less noisy ([#7530](https://github.com/containerd/containerd/pull/7530))
    * containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded ([#7541](https://github.com/containerd/containerd/pull/7541))
    * Update required Go version in BUILDING.md ([#7544](https://github.com/containerd/containerd/pull/7544))
    * go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) ([#7522](https://github.com/containerd/containerd/pull/7522))
    * Use `go env` to determine GOPATH in Makefile. ([#7542](https://github.com/containerd/containerd/pull/7542))
    * clean-up "nolint" comments, remove unused ones, update golangci-lint ([#7349](https://github.com/containerd/containerd/pull/7349))
    * Don't unmount on Darwin when deleting bundle ([#7534](https://github.com/containerd/containerd/pull/7534))
    * Add timeouts to all CI jobs ([#7538](https://github.com/containerd/containerd/pull/7538))
    * Vagrantfile: explicitly specify rsync as the shared folder driver ([#7539](https://github.com/containerd/containerd/pull/7539))
    * sys: remove unused IsAbs() (windows) ([#7527](https://github.com/containerd/containerd/pull/7527))
    * cri: PodSandboxStatus should tolerate missing task ([#7535](https://github.com/containerd/containerd/pull/7535))
    * CI: update GHA instances from Ubuntu 18.04 to 20.04 ([#7489](https://github.com/containerd/containerd/pull/7489))
    * fix the --no-pivot flag being ignored by `ctr tasks start` ([#7519](https://github.com/containerd/containerd/pull/7519))
    * Update the default seccomp to block socket calls to AF_VSOCK ([#7510](https://github.com/containerd/containerd/pull/7510))
    * cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() ([#7511](https://github.com/containerd/containerd/pull/7511))
    * Stats() shouldn't assume s.container is non-nil ([#7517](https://github.com/containerd/containerd/pull/7517))
    * Move up actions versions to prep for NodeJS 12 deprecation ([#7516](https://github.com/containerd/containerd/pull/7516))
    * cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() ([#7512](https://github.com/containerd/containerd/pull/7512))
    * Updates oci image config to support upstream ArgsEscaped ([#7483](https://github.com/containerd/containerd/pull/7483))
    * cmd/containerd: replace deprecated windows.IsAnInteractiveSession() ([#7497](https://github.com/containerd/containerd/pull/7497))
    * Update container with sandbox metadata after NetNS is created ([#7481](https://github.com/containerd/containerd/pull/7481))
    * archive: add WithSourceDateEpoch() for whiteouts ([#7478](https://github.com/containerd/containerd/pull/7478))
    * TestTaskResize must use a terminal ([#7492](https://github.com/containerd/containerd/pull/7492))
    * diff/apply.readCounter: check negative size ([#7494](https://github.com/containerd/containerd/pull/7494))
    * Add new ctr option for discarding unpacked layers ([#7425](https://github.com/containerd/containerd/pull/7425))
    * archive: windows: chtimes(): remove redundant conversion ([#7491](https://github.com/containerd/containerd/pull/7491))
    * archive: validate digests before use ([#7488](https://github.com/containerd/containerd/pull/7488))
    * vendor: github.com/opencontainers/selinux v1.10.2 ([#7482](https://github.com/containerd/containerd/pull/7482))
    * fuzzing: create structured tar bytes in archive fuzzer ([#7477](https://github.com/containerd/containerd/pull/7477))
    * Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 ([#7474](https://github.com/containerd/containerd/pull/7474))
    * use raw link to containerd.service config ([#7463](https://github.com/containerd/containerd/pull/7463))
    * cri doc: Update kata containers reference ([#7466](https://github.com/containerd/containerd/pull/7466))
    * Setup pod network after creating the sandbox container ([#5904](https://github.com/containerd/containerd/pull/5904))
    * Swap to net.ErrClosed checks for services ([#7446](https://github.com/containerd/containerd/pull/7446))
    * go.mod: Bump go-winio to v0.6.0 ([#7443](https://github.com/containerd/containerd/pull/7443))
    * fix retry when writer is reset on push ([#6995](https://github.com/containerd/containerd/pull/6995))
    * CI: Output a summary using GITHUB_SUMMARY ([#7192](https://github.com/containerd/containerd/pull/7192))
    * Fix missing close ([#7430](https://github.com/containerd/containerd/pull/7430))
    * Add test flag for skipping shim cgroup test ([#7424](https://github.com/containerd/containerd/pull/7424))
    * Refactor CRI fuzzers ([#7405](https://github.com/containerd/containerd/pull/7405))
    * Fix LogURIGenerator on Windows ([#7351](https://github.com/containerd/containerd/pull/7351))
    * Set grpc code for unimplemented cri-api methods ([#7417](https://github.com/containerd/containerd/pull/7417))
    * Add reader option to local content reader at ([#7414](https://github.com/containerd/containerd/pull/7414))
    * Sandbox API: implement Controller.Wait and Controller.Stop ([#7401](https://github.com/containerd/containerd/pull/7401))
    * remove stray .zuul.yaml ([#7416](https://github.com/containerd/containerd/pull/7416))
    * reference CDI configuration details ([#7408](https://github.com/containerd/containerd/pull/7408))
    * cri-integration: propagate ENABLE_CRI_SANDBOXES ([#7413](https://github.com/containerd/containerd/pull/7413))
    * Enable OpenSSF Scorecard Github Action ([#7404](https://github.com/containerd/containerd/pull/7404))
    * Add ext2 fs support to devmapper snapshotter ([#7402](https://github.com/containerd/containerd/pull/7402))
    * Fuzzing: Instrument with new sanitizers ([#7396](https://github.com/containerd/containerd/pull/7396))
    * Upgrade fuzzing-related packages to reduce dependencies ([#7397](https://github.com/containerd/containerd/pull/7397))
    * remotes/docker/config: Skipping TLS verification for localhost ([#7393](https://github.com/containerd/containerd/pull/7393))
    * Replace github.com/emicklei/go-restful package, versions <2.16.0 ([#7395](https://github.com/containerd/containerd/pull/7395))
    * Add NoSameOwner option when unpacking tars ([#7386](https://github.com/containerd/containerd/pull/7386))
    * ctr: add privileged-without-host-devices for run command ([#7328](https://github.com/containerd/containerd/pull/7328))
    * chore: matching the casing of other flags for ctr's pull command ([#7341](https://github.com/containerd/containerd/pull/7341))
    * windows: Add runhcs-wcow-hypervisor runtimeclass to the default config ([#6901](https://github.com/containerd/containerd/pull/6901))
    * Fix missing close ([#7370](https://github.com/containerd/containerd/pull/7370))
    * CRI: update cdi version to v0.5.1 ([#7374](https://github.com/containerd/containerd/pull/7374))
    * Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 ([#7372](https://github.com/containerd/containerd/pull/7372))
    * vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c ([#7373](https://github.com/containerd/containerd/pull/7373))
    * Remove unused variable from images action ([#7371](https://github.com/containerd/containerd/pull/7371))
    * feature: use client default namespace ([#7291](https://github.com/containerd/containerd/pull/7291))
    * integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment ([#7367](https://github.com/containerd/containerd/pull/7367))
    * feature: upgrade registry.k8s.io/pause version ([#7359](https://github.com/containerd/containerd/pull/7359))
    * metrics/cgroups/v1: Remove unused event parameter ([#7361](https://github.com/containerd/containerd/pull/7361))
    * .zuul: remove the zuul because it is offline ([#7369](https://github.com/containerd/containerd/pull/7369))
    * Update golangci-lint timeout to match config ([#7356](https://github.com/containerd/containerd/pull/7356))
    * delete redundent import alias and and type conversion ([#7345](https://github.com/containerd/containerd/pull/7345))
    * Make checkContainerTimestamps less strict on Windows ([#7350](https://github.com/containerd/containerd/pull/7350))
    * Make oss-fuzz mandatory ([#7346](https://github.com/containerd/containerd/pull/7346))
    * Add kubernetes v1.25 supported version as v1.24 ([#7326](https://github.com/containerd/containerd/pull/7326))
    * sys: move ForceRemoveAll to integration/client ([#7335](https://github.com/containerd/containerd/pull/7335))
    * chore: remove duplicate word in comments ([#7338](https://github.com/containerd/containerd/pull/7338))
    * Use ioctl helpers from x/sys/unix ([#7342](https://github.com/containerd/containerd/pull/7342))
    * archive: replace tarName() with filepath.ToSlash() ([#7344](https://github.com/containerd/containerd/pull/7344))
    * mount: remove unused ErrNotImplementOnWindows ([#7339](https://github.com/containerd/containerd/pull/7339))
    * replace sys Sequential funcs with moby/sys/sequential ([#7334](https://github.com/containerd/containerd/pull/7334))
    * Clarify containerd 1.5.0+ for k8s 1.20,1.21 ([#7324](https://github.com/containerd/containerd/pull/7324))
    * update runc binary to v1.1.4 ([#7315](https://github.com/containerd/containerd/pull/7315))
    * Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 ([#7325](https://github.com/containerd/containerd/pull/7325))
    * Update k8s.io/cri-api to v0.25.0 ([#7287](https://github.com/containerd/containerd/pull/7287))
    * script/setup: handle cnidir with SUDO ([#7322](https://github.com/containerd/containerd/pull/7322))
    * ContainerStatus to return container resources ([#6517](https://github.com/containerd/containerd/pull/6517))
    * migrate from k8s.gcr.io to registry.k8s.io ([#7038](https://github.com/containerd/containerd/pull/7038))
    * Do not rename test files on-the-fly to share functions ([#7309](https://github.com/containerd/containerd/pull/7309))
    * ctr import: strictly match platform ([#6906](https://github.com/containerd/containerd/pull/6906))
    * Revert "Downgrade MinGW to version 10.2.0" ([#7308](https://github.com/containerd/containerd/pull/7308))
    * Follow up #7254 (Switch to Go 1.19) ([#7286](https://github.com/containerd/containerd/pull/7286))
    * Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer ([#7304](https://github.com/containerd/containerd/pull/7304))
    * Adding support of CAP_BPF and CAP_PERFMON ([#7301](https://github.com/containerd/containerd/pull/7301))
    * go.mod: Bump hcsshim to v0.10.0-rc.1 ([#7284](https://github.com/containerd/containerd/pull/7284))
    * Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset ([#7306](https://github.com/containerd/containerd/pull/7306))
    * ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 ([#7293](https://github.com/containerd/containerd/pull/7293))
    * Runtime cleanup (Shim manager and task service) ([#7280](https://github.com/containerd/containerd/pull/7280))
    * containerd-stress: add support for running through CRI ([#6931](https://github.com/containerd/containerd/pull/6931))
    * Switch to Go 1.19 ([#7254](https://github.com/containerd/containerd/pull/7254))
    * Vagrantfile: dump containerd log after critest ([#7265](https://github.com/containerd/containerd/pull/7265))
    * oci: skip checking group id for WithAppendAdditionalGroups ([#7257](https://github.com/containerd/containerd/pull/7257))
    * release workflow: increase timeout to 30 minutes & remove Go setup action ([#7259](https://github.com/containerd/containerd/pull/7259))
    * release: rollback Ubuntu to 18.04 (except for riscv64) ([#7258](https://github.com/containerd/containerd/pull/7258))
    * Initial sandbox API CRI integration (implement Controller.Start) ([#7228](https://github.com/containerd/containerd/pull/7228))
    * Use environment variable to specify Go version on CI ([#7251](https://github.com/containerd/containerd/pull/7251))
    * Update golang to 1.18.5, 1.17.13 ([#7243](https://github.com/containerd/containerd/pull/7243))
    * Change os.Stderr reassign for Windows service ([#7023](https://github.com/containerd/containerd/pull/7023))
    * script/setup: fix protobuf for aarch64 ([#7237](https://github.com/containerd/containerd/pull/7237))
    * Fix cleanup in critest ([#7232](https://github.com/containerd/containerd/pull/7232))
    * fix: support simultaneous create diff for same parent snapshot ([#7204](https://github.com/containerd/containerd/pull/7204))
    * Windows HostProcess container CRI stats test ([#7223](https://github.com/containerd/containerd/pull/7223))
    * Regenerate protos with updated protoc-gen-go ([#7226](https://github.com/containerd/containerd/pull/7226))
    * test: error strings should not be capitalized ([#7195](https://github.com/containerd/containerd/pull/7195))
    * Add extra context to error when push unauthorized ([#7220](https://github.com/containerd/containerd/pull/7220))
    * replace with selinux label ([#7207](https://github.com/containerd/containerd/pull/7207))
    * Use `httputil.DumpRequestOut` for dumping client req ([#7221](https://github.com/containerd/containerd/pull/7221))
    * Fix CRI image pull timeout test for ppc64le ([#7215](https://github.com/containerd/containerd/pull/7215))
    * test: introduce failpoint control to runc-shimv2 and cni ([#7069](https://github.com/containerd/containerd/pull/7069))
    * chore: bump macos runner version ([#7206](https://github.com/containerd/containerd/pull/7206))
    * Use image lists form integration/client tests ([#7210](https://github.com/containerd/containerd/pull/7210))
    * go.mod: Bump hcsshim to v0.9.4 ([#7212](https://github.com/containerd/containerd/pull/7212))
    * Drop deprecated `ioutil` ([#7203](https://github.com/containerd/containerd/pull/7203))
    * Make getServicesOpts a helper ([#7201](https://github.com/containerd/containerd/pull/7201))
    * adds an env var commented out for sandboxed mode ([#7183](https://github.com/containerd/containerd/pull/7183))
    * cri_stats: handle missing cpu stats ([#7198](https://github.com/containerd/containerd/pull/7198))
    * using ContextDialer instead ([#7189](https://github.com/containerd/containerd/pull/7189))
    * test: Add ability to switch between  cgroupv1 or cgroupv2 for node e2e ([#7173](https://github.com/containerd/containerd/pull/7173))
    * code cleanup ([#7182](https://github.com/containerd/containerd/pull/7182))
    * Update k8s.io/cri-api to v0.25.0-alpha2 ([#7114](https://github.com/containerd/containerd/pull/7114))
    * Refactor usageNanoCores be to used for all OSes ([#7186](https://github.com/containerd/containerd/pull/7186))
    * adds support for using env file for systemd boot ([#7191](https://github.com/containerd/containerd/pull/7191))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#7185](https://github.com/containerd/containerd/pull/7185))
    * ctr: support --user for run/create ([#7145](https://github.com/containerd/containerd/pull/7145))
    * docs: Fix sample config.toml syntax ([#7174](https://github.com/containerd/containerd/pull/7174))
    * seccomp: seccomp: add syscalls related to PKU in default policy ([#7163](https://github.com/containerd/containerd/pull/7163))
    * Update and align golangci-lint version ([#7168](https://github.com/containerd/containerd/pull/7168))
    * adds a comment explaining how to disable experimental sbserver ([#7169](https://github.com/containerd/containerd/pull/7169))
    * ci: workaround Cirrus CI's INVALID_ARGUMENT ([#7177](https://github.com/containerd/containerd/pull/7177))
    * Update install-protobuf script  to install protobuf on Darwin ([#7153](https://github.com/containerd/containerd/pull/7153))
    * Fork CRI server for Sandbox API integration work ([#7164](https://github.com/containerd/containerd/pull/7164))
    * seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE ([#7167](https://github.com/containerd/containerd/pull/7167))
    * cri doc: fix formatting for CDI options ([#7158](https://github.com/containerd/containerd/pull/7158))
    * update golang to 1.18.4, 1.17.12 ([#7159](https://github.com/containerd/containerd/pull/7159))
    * Fix out of date comments for CRI store packages ([#7152](https://github.com/containerd/containerd/pull/7152))
    * update some devmapper docs ([#7124](https://github.com/containerd/containerd/pull/7124))
    * seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#7149](https://github.com/containerd/containerd/pull/7149))
    * Copy fuzzers from github.com/cncf/cncf-fuzzing ([#7123](https://github.com/containerd/containerd/pull/7123))
    * fix can't edit object by using ctr content edit command ([#6847](https://github.com/containerd/containerd/pull/6847))
    * integration/client: fix typo in export_test.go ([#7130](https://github.com/containerd/containerd/pull/7130))
    * Fix WWW-Authenticate parsing ([#7126](https://github.com/containerd/containerd/pull/7126))
    * LCOW differ return ErrNotImplemented for wrong mount type ([#7112](https://github.com/containerd/containerd/pull/7112))
    * Update go-restful/v3 to latest release ([#7117](https://github.com/containerd/containerd/pull/7117))
    * pkg/cri: use marshal wrapper for version convertor ([#7108](https://github.com/containerd/containerd/pull/7108))
    * Remove hacks around contrib/fuzz ([#7087](https://github.com/containerd/containerd/pull/7087))
    * Fix missing closed HTTP Body ([#7107](https://github.com/containerd/containerd/pull/7107))
    * Cleanup metadata tests ([#7105](https://github.com/containerd/containerd/pull/7105))
    * Downgrade MinGW to version 10.2.0 ([#7106](https://github.com/containerd/containerd/pull/7106))
    * ctr: Fix `ctr c create` fails to parse arguments ([#7098](https://github.com/containerd/containerd/pull/7098))
    * Fix Documentation Issue ([#7103](https://github.com/containerd/containerd/pull/7103))
    * refactor: reduce duplicate code ([#7100](https://github.com/containerd/containerd/pull/7100))
    * make xattr EPERM non-fatal in createTarFile ([#7094](https://github.com/containerd/containerd/pull/7094))
    * Move metadata plugin registration to seperate package ([#7096](https://github.com/containerd/containerd/pull/7096))
    * fix: missing sudo for devmapper doc ([#7092](https://github.com/containerd/containerd/pull/7092))
    * Ensure Windows Periodic workflow errors out while still uploading results. ([#7085](https://github.com/containerd/containerd/pull/7085))
    * Add snapshotter key to snapshot events ([#7084](https://github.com/containerd/containerd/pull/7084))
    * add WithAdditionalGIDs test ([#7072](https://github.com/containerd/containerd/pull/7072))
    * Forward ctr snapshotter flags on Windows ([#7086](https://github.com/containerd/containerd/pull/7086))
    * add WithAppendAdditionalGroups helper ([#7070](https://github.com/containerd/containerd/pull/7070))
    * Make CI Fuzz less noisy ([#7065](https://github.com/containerd/containerd/pull/7065))
    * ctr: add --hostname flag to create, run ([#7082](https://github.com/containerd/containerd/pull/7082))
    * improve content-flow ([#7077](https://github.com/containerd/containerd/pull/7077))
    * Make CI Fuzz optional ([#7067](https://github.com/containerd/containerd/pull/7067))
    * Use Go 1.18's testing.F on simple fuzzers ([#7056](https://github.com/containerd/containerd/pull/7056))
    * Downgrade MinGW in Windows setup scripts. ([#7062](https://github.com/containerd/containerd/pull/7062))
    * Make test path a constant ([#7057](https://github.com/containerd/containerd/pull/7057))
    * Run fuzzers in CI ([#7052](https://github.com/containerd/containerd/pull/7052))
    * CRI: Improve the /dev/shm mount options in Sandbox. ([#6913](https://github.com/containerd/containerd/pull/6913))
    * fix:userattr-unmount unexpected timeout ([#7008](https://github.com/containerd/containerd/pull/7008))
    * Port (some) unit tests to FreeBSD ([#7042](https://github.com/containerd/containerd/pull/7042))
    * Bump Golang and MinGW versions in Windows setup script. ([#6888](https://github.com/containerd/containerd/pull/6888))
    * Windows snapshotter touch ups and new functionality ([#6918](https://github.com/containerd/containerd/pull/6918))
    * Improve naming consistencies in comments in snapshotter.go ([#7032](https://github.com/containerd/containerd/pull/7032))
    * Make building static binaries simpler ([#7022](https://github.com/containerd/containerd/pull/7022))
    * Allow CRI on Darwin ([#7033](https://github.com/containerd/containerd/pull/7033))
    * update runc binary to v1.1.3 ([#7034](https://github.com/containerd/containerd/pull/7034))
    * Linux containers on FreeBSD ([#7000](https://github.com/containerd/containerd/pull/7000))
    * go.mod: github.com/moby/sys/mountinfo v0.6.2 ([#7026](https://github.com/containerd/containerd/pull/7026))
    * fix minor spelling mistake: lablel -> label ([#7031](https://github.com/containerd/containerd/pull/7031))
    * go.mod: github.com/containerd/cgroups v1.0.4 ([#7027](https://github.com/containerd/containerd/pull/7027))
    * go.mod: github.com/containerd/continuity v0.3.0 ([#7028](https://github.com/containerd/containerd/pull/7028))
    * Correct spelling mistake ("sanbdox" to "sandbox") ([#7029](https://github.com/containerd/containerd/pull/7029))
    * Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf)
    * Bump grpc to v1.47.0 ([#7018](https://github.com/containerd/containerd/pull/7018))
    * Bump k8s.io deps to v0.24.1 ([#7017](https://github.com/containerd/containerd/pull/7017))
    * Support runtime level snapshotter for issue 6657 ([#6899](https://github.com/containerd/containerd/pull/6899))
    * update golang to 1.18.3, 1.17.11 ([#7012](https://github.com/containerd/containerd/pull/7012))
    * Fix containerd-stress duration flag ([#7004](https://github.com/containerd/containerd/pull/7004))
    * update go-cni/for cni update fixing plugins that don't respond with version ([#7009](https://github.com/containerd/containerd/pull/7009))
    * Add validations for Windows HostProcess CRI configs ([#6996](https://github.com/containerd/containerd/pull/6996))
    * Move docker reference logic to reference/docker package ([#7007](https://github.com/containerd/containerd/pull/7007))
    * promote pause image to 3.7 (sync with kube v1.24) ([#7003](https://github.com/containerd/containerd/pull/7003))
    * Makefile: use urfave_cli_no_docs for binaries that don't need it ([#6998](https://github.com/containerd/containerd/pull/6998))
    * CRI: cleanup cri/store package ([#6993](https://github.com/containerd/containerd/pull/6993))
    * Use t.Run for /pkg/cri tests ([#7001](https://github.com/containerd/containerd/pull/7001))
    * vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script ([#6997](https://github.com/containerd/containerd/pull/6997))
    * sandbox: replace github.com/pkg/errors with native errors ([#6937](https://github.com/containerd/containerd/pull/6937))
    * build: Fix references to check-protos target in Makefile ([#6983](https://github.com/containerd/containerd/pull/6983))
    * ctr: fix label args used in NewContainer ([#6954](https://github.com/containerd/containerd/pull/6954))
    * ctr sandbox: handle sandbox config ([#6959](https://github.com/containerd/containerd/pull/6959))
    * Fix broken oss-fuzz build ([#6975](https://github.com/containerd/containerd/pull/6975))
    * archive: add human-readable hint to Lchown error ([#6982](https://github.com/containerd/containerd/pull/6982))
    * Fix tx closed error when upperdirlabel specified ([#6978](https://github.com/containerd/containerd/pull/6978))
    * config: improve config v1 deprecation message ([#6972](https://github.com/containerd/containerd/pull/6972))
    * Fix Windows install powershell script ([#6969](https://github.com/containerd/containerd/pull/6969))
    * fix comments on metadata schema and update namespace doc ([#6955](https://github.com/containerd/containerd/pull/6955))
    * adjust format in comment ([#6956](https://github.com/containerd/containerd/pull/6956))
    * Restore decompression benchmarks ([#6957](https://github.com/containerd/containerd/pull/6957))
    * cmd/ctr/commands/content: fix typo in fetch command usage ([#6960](https://github.com/containerd/containerd/pull/6960))
    * fix some confusing typos ([#6950](https://github.com/containerd/containerd/pull/6950))
    * update doc url about k8s ([#6952](https://github.com/containerd/containerd/pull/6952))
    * Separate windows-2019 and windows-2022 test results ([#6946](https://github.com/containerd/containerd/pull/6946))
    * shim: fix debug flag not working ([#6910](https://github.com/containerd/containerd/pull/6910))
    * Reverts removal of parallel run from critest ([#6938](https://github.com/containerd/containerd/pull/6938))
    * Bump OpenTelemetry dependencies ([#6932](https://github.com/containerd/containerd/pull/6932))
    * update runc binary and vendor to v1.1.2 ([#6934](https://github.com/containerd/containerd/pull/6934))
    * oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ([#6923](https://github.com/containerd/containerd/pull/6923))
    * update golang to 1.18.2, 1.17.10 ([#6926](https://github.com/containerd/containerd/pull/6926))
    * CI: update Fedora to 36 ([#6925](https://github.com/containerd/containerd/pull/6925))
    * Add `Wait` to `binaryProcessor` ([#6916](https://github.com/containerd/containerd/pull/6916))
    * go.mod: Bump k8s deps to v0.24.0 ([#6905](https://github.com/containerd/containerd/pull/6905))
    * (Vagrant CI) Enable git commands due to git CVE fix ([#6915](https://github.com/containerd/containerd/pull/6915))
    * Pass explicit JUnit outfile to critest.exe in Windows workflow. ([#6912](https://github.com/containerd/containerd/pull/6912))
    * Update critools to v1.24 ([#6894](https://github.com/containerd/containerd/pull/6894))
    * devmapper docs: small fixes ([#6904](https://github.com/containerd/containerd/pull/6904))
    * move report dir option to end of line for vagrant cri tests ([#6900](https://github.com/containerd/containerd/pull/6900))
    * Update Kubernetes version matrix in release docs ([#6892](https://github.com/containerd/containerd/pull/6892))
    * Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy ([#6889](https://github.com/containerd/containerd/pull/6889))
    * containerd 1.6.4 k8s 1.24 readme announce ([#6890](https://github.com/containerd/containerd/pull/6890))
    * Cleanup leaked shim process ([#6866](https://github.com/containerd/containerd/pull/6866))
    * Add collectible resources to metadata gc ([#6804](https://github.com/containerd/containerd/pull/6804))
    * Update k8 docurl in file ([#6881](https://github.com/containerd/containerd/pull/6881))
    * Support RISC-V 64 ([#6882](https://github.com/containerd/containerd/pull/6882))
    * docs: minor fixes in snapshots.Snapshotter comments ([#6885](https://github.com/containerd/containerd/pull/6885))
    * Officially deprecate Schema 1 ([#6884](https://github.com/containerd/containerd/pull/6884))
    * Make Cirrus CI tests more stable ([#6880](https://github.com/containerd/containerd/pull/6880))
    * docs: Adding windows installation steps to getting-started.md ([#6875](https://github.com/containerd/containerd/pull/6875))
    * Add ctr support for CPUMax and CPUShares ([#6809](https://github.com/containerd/containerd/pull/6809))
    * Support for cgroups blockio ([#5490](https://github.com/containerd/containerd/pull/5490))
    * Fix comment for metadata/db.go ([#6871](https://github.com/containerd/containerd/pull/6871))
    * Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies ([#6867](https://github.com/containerd/containerd/pull/6867))
    * Update go-cni to v1.1.5 ([#6868](https://github.com/containerd/containerd/pull/6868))
    * Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#6865](https://github.com/containerd/containerd/pull/6865))
    * Upgrade google.golang.org/grpc and google.golang.org/protobuf ([#6864](https://github.com/containerd/containerd/pull/6864))
    * Don't use "uname -a" as Cirrus CI's cache key ([#6863](https://github.com/containerd/containerd/pull/6863))
    * remove duplicate ([#6856](https://github.com/containerd/containerd/pull/6856))
    * Create ppc64le release ([#6858](https://github.com/containerd/containerd/pull/6858))
    * Move Vagrant-based tests from GitHub Actions to Cirrus CI ([#6854](https://github.com/containerd/containerd/pull/6854))
    * feature: support image pull progress timeout ([#6150](https://github.com/containerd/containerd/pull/6150))
    * Add unpack interface to be used by client ([#6749](https://github.com/containerd/containerd/pull/6749))
    * Fix undefined error in use of errors package ([#6855](https://github.com/containerd/containerd/pull/6855))
    * Migrate off from github.com/gogo/protobuf ([#6841](https://github.com/containerd/containerd/pull/6841))
    * images/image.go: typo ([#6851](https://github.com/containerd/containerd/pull/6851))
    * Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices ([#5686](https://github.com/containerd/containerd/pull/5686))
    * integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage ([#6180](https://github.com/containerd/containerd/pull/6180))
    * fix incorrect syntax in comments ([#6845](https://github.com/containerd/containerd/pull/6845))
    * cri: close fifos when container is deleted ([#6842](https://github.com/containerd/containerd/pull/6842))
    * diff: hide types.Any from clients ([#6832](https://github.com/containerd/containerd/pull/6832))
    * Add Container-Optimized OS into Adopters ([#6838](https://github.com/containerd/containerd/pull/6838))
    * Prepare for google.golang.org/protobuf ([#6835](https://github.com/containerd/containerd/pull/6835))
    * fix the restart desired to running when task not found ([#6833](https://github.com/containerd/containerd/pull/6833))
    * Remove all gogoproto extensions ([#6829](https://github.com/containerd/containerd/pull/6829))
    * fix nil pointer panic for monitor ([#6830](https://github.com/containerd/containerd/pull/6830))
    * remotes/docker: log registry URLs as info instead of debug ([#5681](https://github.com/containerd/containerd/pull/5681))
    * Rename runtime/v2/task to api/runtime ([#6827](https://github.com/containerd/containerd/pull/6827))
    * Fix protoc-gen-go-fieldpath ([#6828](https://github.com/containerd/containerd/pull/6828))
    * Consolidate gogo/protobuf dependencies under our own protobuf package ([#6826](https://github.com/containerd/containerd/pull/6826))
    * Add restart policy for enhanced restart manager ([#6744](https://github.com/containerd/containerd/pull/6744))
    * Remove gogoproto.stdtime ([#6821](https://github.com/containerd/containerd/pull/6821))
    * Set timeout when collecting metrics from shim's Stat ([#6781](https://github.com/containerd/containerd/pull/6781))
    * Fuzz filter package with Go 1.18's fuzzer ([#6819](https://github.com/containerd/containerd/pull/6819))
    * allow ptrace(2) by default for kernel >= 4.8 ([#6810](https://github.com/containerd/containerd/pull/6810))
    * Build bin/gen-manpages instead of using "go run" ([#6820](https://github.com/containerd/containerd/pull/6820))
    * update golang to 1.18.1, 1.17.9 ([#6822](https://github.com/containerd/containerd/pull/6822))
    * Sandbox API ([#6703](https://github.com/containerd/containerd/pull/6703))
    * Move lease manager plugin to separate package ([#6811](https://github.com/containerd/containerd/pull/6811))
    * fix pool_device_test ([#6807](https://github.com/containerd/containerd/pull/6807))
    * check for duplicate nspath possibilities ([#6806](https://github.com/containerd/containerd/pull/6806))
    * Do not append []string{""} to command to preserve Docker compatibility ([#6805](https://github.com/containerd/containerd/pull/6805))
    * tracing: fix panic on startup when configured ([#6789](https://github.com/containerd/containerd/pull/6789))
    * Optimize loading performance for cri recover ([#6680](https://github.com/containerd/containerd/pull/6680))
    * Change architecture path in README.md ([#6798](https://github.com/containerd/containerd/pull/6798))
    * make consistent for checkpoint path ([#6792](https://github.com/containerd/containerd/pull/6792))
    * metrics/cgroups: fix deadlock issue in Add during Collect ([#6788](https://github.com/containerd/containerd/pull/6788))
    * ADOPTERS: Update AKS Info ([#6794](https://github.com/containerd/containerd/pull/6794))
    * Pin upload-cloud-storage action to 0.8.0 in Windows workflow. ([#6790](https://github.com/containerd/containerd/pull/6790))
    * docs: add Deckhouse to the list of adopters ([#6785](https://github.com/containerd/containerd/pull/6785))
    * Add `docs/snapshotters`; simplify `docs/cri` ([#6778](https://github.com/containerd/containerd/pull/6778))
    * Turn paths from cmdline into absolute paths ([#6672](https://github.com/containerd/containerd/pull/6672))
    * CRI: add support for CDI device injection ([#6654](https://github.com/containerd/containerd/pull/6654))
    * Disable writing freelist to make the file robust against data corruptions ([#6761](https://github.com/containerd/containerd/pull/6761))
    * mv design docs/historical/design ([#6777](https://github.com/containerd/containerd/pull/6777))
    * CRI: improve image pulling performance ([#6702](https://github.com/containerd/containerd/pull/6702))
    * docs: remove runtime v1; migrate config v1 to v2 ([#6776](https://github.com/containerd/containerd/pull/6776))
    * Skip flaky test on Windows ([#6779](https://github.com/containerd/containerd/pull/6779))
    * docs/getting-started.md: typo ([#6775](https://github.com/containerd/containerd/pull/6775))
    * Add no_tracing tag ([#6750](https://github.com/containerd/containerd/pull/6750))
    * Move historical docs to `docs/historical` ([#6754](https://github.com/containerd/containerd/pull/6754))
    * Run go mod tidy in integration tests ([#6768](https://github.com/containerd/containerd/pull/6768))
    * go.mod: move indirects, and update integration go.mod to 1.18 ([#6765](https://github.com/containerd/containerd/pull/6765))
    * Drop gotest.tools ([#6762](https://github.com/containerd/containerd/pull/6762))
    * Use t.Setenv instead of os.Setenv ([#6760](https://github.com/containerd/containerd/pull/6760))
    * Upgrade to Go 1.18 ([#6709](https://github.com/containerd/containerd/pull/6709))
    * Adding multi-arch support for the configure.sh script ([#6751](https://github.com/containerd/containerd/pull/6751))
    * docs/getting-started.md: massive update ([#6758](https://github.com/containerd/containerd/pull/6758))
    * Remove unmaintained contrib/linuxkit ([#6755](https://github.com/containerd/containerd/pull/6755))
    * [Windows CI] Address some timeout issues ([#6757](https://github.com/containerd/containerd/pull/6757))
    * BUILDING.md: update supported Go versions ([#6756](https://github.com/containerd/containerd/pull/6756))
    * update runc to 1.1.1 ([#6753](https://github.com/containerd/containerd/pull/6753))
    * CI: add Rocky Linux 8 ([#6747](https://github.com/containerd/containerd/pull/6747))
    * CI: bump up crun to 1.4.4 ([#6748](https://github.com/containerd/containerd/pull/6748))
    * added make help for cri integration ([#6743](https://github.com/containerd/containerd/pull/6743))
    * Update README.md cncf landscape url ([#6740](https://github.com/containerd/containerd/pull/6740))
    * Fix error message in TestNewBinaryIO ([#6738](https://github.com/containerd/containerd/pull/6738))
    * Use typeurl.Any instead of github.com/gogo/protobuf/types.Any ([#6706](https://github.com/containerd/containerd/pull/6706))
    * Use cgroups.AddProc() for cgroups v1 ([#5738](https://github.com/containerd/containerd/pull/5738))
    * fix: ctr images mount with snapshotter option can't get snapshotter ([#6713](https://github.com/containerd/containerd/pull/6713))
    * cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6323](https://github.com/containerd/containerd/pull/6323))
    * moving up to go-cni v1.1.4 ([#6721](https://github.com/containerd/containerd/pull/6721))
    * native: fix deadlock from leaving transactions open ([#6722](https://github.com/containerd/containerd/pull/6722))
    * go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 ([#5390](https://github.com/containerd/containerd/pull/5390))
    * Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c)
    * runtime: deprecate runc --criu / -criu-path option ([#6496](https://github.com/containerd/containerd/pull/6496))
    * Bug fix for mount path handling ([#6651](https://github.com/containerd/containerd/pull/6651))
    * Upgrade containerd/imgcrypt and opencontainers/image-spec ([#6711](https://github.com/containerd/containerd/pull/6711))
    * Remove enumvalue_customname, goproto_enum_prefix and enum_customname ([#6708](https://github.com/containerd/containerd/pull/6708))
    * Remove gogoproto.customtype ([#6699](https://github.com/containerd/containerd/pull/6699))
    * Skip tty critest testcase on Windows Server 2022 ([#6698](https://github.com/containerd/containerd/pull/6698))
    * Build with Go 1.18 ([#6605](https://github.com/containerd/containerd/pull/6605))
    * Update prometheus client vendor ([#6690](https://github.com/containerd/containerd/pull/6690))
    * vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd ([#6687](https://github.com/containerd/containerd/pull/6687))
    * Make the temp mount as ready only in container WithVolumes ([#6593](https://github.com/containerd/containerd/pull/6593))
    * fix: `ctr run --cni` get failed ([#6670](https://github.com/containerd/containerd/pull/6670))
    * test: use `T.TempDir` to create temporary test directory ([#6681](https://github.com/containerd/containerd/pull/6681))
    * Make OpenLab's CI jobs blocking ([#6679](https://github.com/containerd/containerd/pull/6679))
    * document log level and format ([#6683](https://github.com/containerd/containerd/pull/6683))
    * Add shared content label to namespaces ([#6660](https://github.com/containerd/containerd/pull/6660))
    * Add protoc-gen-go-fieldpath ([#6562](https://github.com/containerd/containerd/pull/6562))
    * Enable gosec linter for golangci-lint ([#6669](https://github.com/containerd/containerd/pull/6669))
    * Make mkfs.xfs available on OpenLab's CI environment ([#6668](https://github.com/containerd/containerd/pull/6668))
    * ctr: improve error relative shim path error msg ([#6519](https://github.com/containerd/containerd/pull/6519))
    * typo fixes under cmd. ([#6674](https://github.com/containerd/containerd/pull/6674))
    * Handle CRI Device.HostPath on Windows ([#6618](https://github.com/containerd/containerd/pull/6618))
    * Upgrade golangci-lint and its GitHub Action ([#6666](https://github.com/containerd/containerd/pull/6666))
    * Don't build a second copy of containerd-shim-runhcs-v1.exe ([#6661](https://github.com/containerd/containerd/pull/6661))
    * Update TestNormalize to only test Windows platform ([#6569](https://github.com/containerd/containerd/pull/6569))
    * Fix link in getting-started.md ([#6663](https://github.com/containerd/containerd/pull/6663))
    * Fuzzing: refactor metadata fuzzers ([#6423](https://github.com/containerd/containerd/pull/6423))
    * Two xfs file systems with same UUID can not be mounted on the same sy… ([#6650](https://github.com/containerd/containerd/pull/6650))
    * [Windows] Fix deadline exceeded in daemon restart ([#6635](https://github.com/containerd/containerd/pull/6635))
    * Use temp file for export/import test ([#6658](https://github.com/containerd/containerd/pull/6658))
    * strip path-info from `-v` (version) output, and implement -v flag for containerd-shim  ([#6495](https://github.com/containerd/containerd/pull/6495))
    * Improve unexpected response error handling in resolver ([#6617](https://github.com/containerd/containerd/pull/6617))
    * Use the latest tag for azure images ([#6601](https://github.com/containerd/containerd/pull/6601))
    * Run CRI integration tests in GitHub Actions (Windows) ([#6626](https://github.com/containerd/containerd/pull/6626))
    * cri: fix integration test on cgroupsv2 system ([#6595](https://github.com/containerd/containerd/pull/6595))
    * Use version 2 configuration format in docs/PLUGINS.md ([#6613](https://github.com/containerd/containerd/pull/6613))
    * update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#6619](https://github.com/containerd/containerd/pull/6619))
    * Update status of 1.4 release ([#6614](https://github.com/containerd/containerd/pull/6614))
    * Update TestContainerSymlinkVolumes to use windows path ([#6568](https://github.com/containerd/containerd/pull/6568))
    * Add --user support for ctr run Windows ([#6603](https://github.com/containerd/containerd/pull/6603))
    * Update releases ([#6608](https://github.com/containerd/containerd/pull/6608))
    * Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7)
    * Adds support for Windows ArgsEscaped images ([#6479](https://github.com/containerd/containerd/pull/6479))
    * Do not use weak import ([#6558](https://github.com/containerd/containerd/pull/6558))
    * cri: relax test for system without hugetlb ([#6596](https://github.com/containerd/containerd/pull/6596))
    * Use containerd/protobuild instead of stevvooe/protobuild ([#6578](https://github.com/containerd/containerd/pull/6578))
    * integration: remove duplicated util pkg ([#6597](https://github.com/containerd/containerd/pull/6597))
    * go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 ([#6591](https://github.com/containerd/containerd/pull/6591))
    * Update Go version recommendation in getting started ([#6585](https://github.com/containerd/containerd/pull/6585))
    * go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 ([#6337](https://github.com/containerd/containerd/pull/6337))
    * fix Implicit memory aliasing in for loop ([#6331](https://github.com/containerd/containerd/pull/6331))
    * Fix build with gccgo ([#6579](https://github.com/containerd/containerd/pull/6579))
    * Replace golang.org/x/net/context with std library ([#6580](https://github.com/containerd/containerd/pull/6580))
    * containerd-shim-runc-v1: return init pid when clean dead shim ([#6571](https://github.com/containerd/containerd/pull/6571))
    * Use Windows matcher when on Windows platform in all code paths ([#6491](https://github.com/containerd/containerd/pull/6491))
    * containerd-shim-runc-v2: return init pid when clean dead shim ([#6452](https://github.com/containerd/containerd/pull/6452))
    * [Windows][Integration] Enable TestRestartMonitor ([#6515](https://github.com/containerd/containerd/pull/6515))
    * go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 ([#6554](https://github.com/containerd/containerd/pull/6554))
    </p>
    </details>
    
    ### Changes from containerd/cgroups
    <details><summary>49 commits</summary>
    <p>
    
    * Upgrade GitHub actions CI workflow ([#249](https://github.com/containerd/cgroups/pull/249))
    * Upgrade Go compiler to 1.19 ([#248](https://github.com/containerd/cgroups/pull/248))
    * Don't use ioutil ([#246](https://github.com/containerd/cgroups/pull/246))
    * Check that cgroup is empty before deleting ([#228](https://github.com/containerd/cgroups/pull/228))
    * Support cgroup.AddThread in cgroupv2 manager ([#243](https://github.com/containerd/cgroups/pull/243))
    * Support to handle more than 4 fields in cpuacct.stat ([#231](https://github.com/containerd/cgroups/pull/231))
    * typo shoulld -> should ([#236](https://github.com/containerd/cgroups/pull/236))
    * Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 ([#241](https://github.com/containerd/cgroups/pull/241))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#240](https://github.com/containerd/cgroups/pull/240))
    * .github: use ubuntu-22.04 to test cgroupv2 ([#237](https://github.com/containerd/cgroups/pull/237))
    * feat(v2): Support cgroup.MoveTo in cgroupv2 manager ([#235](https://github.com/containerd/cgroups/pull/235))
    * Update README to include usage examples of v2 client ([#233](https://github.com/containerd/cgroups/pull/233))
    * ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path ([#232](https://github.com/containerd/cgroups/pull/232))
    * Bump go version to 1.17 in go.mod ([#230](https://github.com/containerd/cgroups/pull/230))
    * make cmd/ a separate module (as it's only for testing) ([#226](https://github.com/containerd/cgroups/pull/226))
    * feat(v2): add Update method for v2.Manager ([#225](https://github.com/containerd/cgroups/pull/225))
    * feat: add memory.min param ([#211](https://github.com/containerd/cgroups/pull/211))
    * modified the dereference null pointer value. ([#218](https://github.com/containerd/cgroups/pull/218))
    * update readme for cpu cgroup demo ([#217](https://github.com/containerd/cgroups/pull/217))
    * Fix systemd full path ([#221](https://github.com/containerd/cgroups/pull/221))
    * Update Go version and fedora base ([#223](https://github.com/containerd/cgroups/pull/223))
    * Fix panic in NewSystemd on nil values ([#219](https://github.com/containerd/cgroups/pull/219))
    </p>
    </details>
    
    ### Changes from containerd/continuity
    <details><summary>28 commits</summary>
    <p>
    
    * go.mod: update dependencies (take 2) ([#204](https://github.com/containerd/continuity/pull/204))
    * Revert "go.mod: update dependencies" ([#205](https://github.com/containerd/continuity/pull/205))
    * Various small fix-ups ([#202](https://github.com/containerd/continuity/pull/202))
    * update authors and mailmap ([#201](https://github.com/containerd/continuity/pull/201))
    * move cmd/continuity to its own go module ([#200](https://github.com/containerd/continuity/pull/200))
    * CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir)  ([#198](https://github.com/containerd/continuity/pull/198))
    * fs.CopyDir: support sockets and pipes ([#197](https://github.com/containerd/continuity/pull/197))
    * Fix wrapping errors ([#196](https://github.com/containerd/continuity/pull/196))
    </p>
    </details>
    
    ### Changes from containerd/fifo
    <details><summary>26 commits</summary>
    <p>
    
    * Update Go vers, x/sys vendor ([#51](https://github.com/containerd/fifo/pull/51))
    * chore: cleanup old buildtags by `go fix` ([#49](https://github.com/containerd/fifo/pull/49))
    * Return nil when openFifo returns nil ([#47](https://github.com/containerd/fifo/pull/47))
    * Resolve golangci-lint-action package warnings ([#48](https://github.com/containerd/fifo/pull/48))
    * Remove references to io/ioutil package ([#45](https://github.com/containerd/fifo/pull/45))
    * Update GitHub actions CI workflow ([#46](https://github.com/containerd/fifo/pull/46))
    * go.mod: github.com/stretchr/testify v1.8.0, golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8, go 1.18 ([#44](https://github.com/containerd/fifo/pull/44))
    * fifo_test: Add 2 tests for closing after reading ([#42](https://github.com/containerd/fifo/pull/42))
    * replace pkg/errors ([#41](https://github.com/containerd/fifo/pull/41))
    * fifo.Close(): prevent possible panic if fifo is nil ([#32](https://github.com/containerd/fifo/pull/32))
    * Update branch name in GitHub Actions ([#40](https://github.com/containerd/fifo/pull/40))
    </p>
    </details>
    
    ### Changes from containerd/go-cni
    <details><summary>38 commits</summary>
    <p>
    
    * Add Go 1.20 support ([#111](https://github.com/containerd/go-cni/pull/111))
    * opts: add cgroupPath capability ([#110](https://github.com/containerd/go-cni/pull/110))
    * go.mod: github.com/containernetworking/cni v1.1.2 ([#109](https://github.com/containerd/go-cni/pull/109))
    * Remove references to io/ioutil package ([#106](https://github.com/containerd/go-cni/pull/106))
    * Update golangci/golangci-lint package ([#108](https://github.com/containerd/go-cni/pull/108))
    * Update GitHub actions CI workflow ([#107](https://github.com/containerd/go-cni/pull/107))
    * Add support for Windows default conf paths ([#103](https://github.com/containerd/go-cni/pull/103))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#104](https://github.com/containerd/go-cni/pull/104))
    * go.mod: update libcni to v1.1.1 ([#101](https://github.com/containerd/go-cni/pull/101))
    * add in some serial setup tests; a little make cleanup ([#100](https://github.com/containerd/go-cni/pull/100))
    * Re-introduce serial network setup ([#99](https://github.com/containerd/go-cni/pull/99))
    * bump github.com/containernetworking/cni v1.1.0 ([#98](https://github.com/containerd/go-cni/pull/98))
    * Revert "Update loopback version to support check" ([#96](https://github.com/containerd/go-cni/pull/96))
    * Use revive instead of golint ([#92](https://github.com/containerd/go-cni/pull/92))
    * Bump go verion to 1.17 ([#91](https://github.com/containerd/go-cni/pull/91))
    * moving up to latest CNI plugin release ([#90](https://github.com/containerd/go-cni/pull/90))
    * Fix Loopback Version ([#88](https://github.com/containerd/go-cni/pull/88))
    * Update comment for capabilities ([#89](https://github.com/containerd/go-cni/pull/89))
    * Add integration test for linux and update go version from 1.16 to 1.17 ([#84](https://github.com/containerd/go-cni/pull/84))
    </p>
    </details>
    
    ### Changes from containerd/imgcrypt
    <details><summary>49 commits</summary>
    <p>
    
    * CHANGES: Updated CHANGES document for 1.1.7 release ([#97](https://github.com/containerd/imgcrypt/pull/97))
    * Update to ocicrypt 1.1.6 and add support for zstd type of compressed layers  ([#96](https://github.com/containerd/imgcrypt/pull/96))
    * build(deps): Update to containerd 1.6.8 ([#92](https://github.com/containerd/imgcrypt/pull/92))
    * tests: Add -traditional to OpenSSL command line when OSSL v3 is used ([#90](https://github.com/containerd/imgcrypt/pull/90))
    * chore: fix readme typo ([#87](https://github.com/containerd/imgcrypt/pull/87))
    * Update to min golang 1.18 ([#88](https://github.com/containerd/imgcrypt/pull/88))
    * CHANGES: Updated CHANGES document for 1.1.6 release ([#85](https://github.com/containerd/imgcrypt/pull/85))
    * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.6 ([#83](https://github.com/containerd/imgcrypt/pull/83))
    * CI: Upgrade to golangci-lint v1.46.2 ([#84](https://github.com/containerd/imgcrypt/pull/84))
    * CICD: Rename master branch to main ([#79](https://github.com/containerd/imgcrypt/pull/79))
    * Rename any to pbAny ([#78](https://github.com/containerd/imgcrypt/pull/78))
    * Use reflect to support diff.ApplyConfig with/without gogo's types.Any ([#75](https://github.com/containerd/imgcrypt/pull/75))
    * Upgrade golangci-lint-action and golangci-lint ([#76](https://github.com/containerd/imgcrypt/pull/76))
    * CHANGES: Updated CHANGES document for 1.1.4 release ([#74](https://github.com/containerd/imgcrypt/pull/74))
    * Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#73](https://github.com/containerd/imgcrypt/pull/73))
    * images: prepare for typeurl.Any ([#72](https://github.com/containerd/imgcrypt/pull/72))
    * Bump ocicrypt to 1.1.3 ([#71](https://github.com/containerd/imgcrypt/pull/71))
    * Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#67](https://github.com/containerd/imgcrypt/pull/67))
    </p>
    </details>
    
    ### Changes from containerd/nri
    <details><summary>56 commits</summary>
    <p>
    
    * Add Go 1.20 support to CI ([#30](https://github.com/containerd/nri/pull/30))
    * Add CodeQL Security scan workflow ([#31](https://github.com/containerd/nri/pull/31))
    * fixes: sort final adjusted mount slice. ([#29](https://github.com/containerd/nri/pull/29))
    * fixes: fix resource adjustment to properly ignore unset/unadjusted fields. ([#28](https://github.com/containerd/nri/pull/28))
    * adaptation: fix mount and device adjustment. ([#27](https://github.com/containerd/nri/pull/27))
    * Make plugin timeouts configurable, adjust default socket path. ([#26](https://github.com/containerd/nri/pull/26))
    * pkg/adaptation: eliminate configuration file. ([#24](https://github.com/containerd/nri/pull/24))
    * stub: fix a potential plugin crash. ([#25](https://github.com/containerd/nri/pull/25))
    * adaptation: fix a panic for unsolicited updates. ([#23](https://github.com/containerd/nri/pull/23))
    * pkg/adaptaton: log errors with %v not %w. ([#22](https://github.com/containerd/nri/pull/22))
    * chore: cleanup old buildtags by `go fix` ([#21](https://github.com/containerd/nri/pull/21))
    * add back project info ([#20](https://github.com/containerd/nri/pull/20))
    * Extend scope to enable common pluggable runtime extensions. ([#16](https://github.com/containerd/nri/pull/16))
    * Update GitHub actions CI workflow ([#19](https://github.com/containerd/nri/pull/19))
    * replace pkg/errors ([#17](https://github.com/containerd/nri/pull/17))
    * Update the examples in README.md ([#15](https://github.com/containerd/nri/pull/15))
    * Rename branch from master to main ([#12](https://github.com/containerd/nri/pull/12))
    * Update to containerd 1.5.1 ([#11](https://github.com/containerd/nri/pull/11))
    </p>
    </details>
    
    ### Changes from containerd/ttrpc
    <details><summary>62 commits</summary>
    <p>
    
    * Rework deadline assertion logging to be more clear ([#132](https://github.com/containerd/ttrpc/pull/132))
    * Fix server shutdown logic ([#130](https://github.com/containerd/ttrpc/pull/130))
    * Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 ([#133](https://github.com/containerd/ttrpc/pull/133))
    * Make checkServerShutdown verbose ([#128](https://github.com/containerd/ttrpc/pull/128))
    * server: Fix connection issues when receiving ECONNRESET ([#123](https://github.com/containerd/ttrpc/pull/123))
    * README: protobuild is in containerd org now ([#125](https://github.com/containerd/ttrpc/pull/125))
    * stream: fix the map of streams leak ([#120](https://github.com/containerd/ttrpc/pull/120))
    * Regenerated pb.go files to fix mismatches ([#122](https://github.com/containerd/ttrpc/pull/122))
    * build: Fix references to check-protos target in Makefile ([#118](https://github.com/containerd/ttrpc/pull/118))
    * Add service prefix option to generator ([#116](https://github.com/containerd/ttrpc/pull/116))
    * doc: ttrpc supports stream ([#121](https://github.com/containerd/ttrpc/pull/121))
    * *: remove codecov ([#114](https://github.com/containerd/ttrpc/pull/114))
    * Only generate a Go file if the file has some services ([#112](https://github.com/containerd/ttrpc/pull/112))
    * *.go: organize errors to one spot ([#113](https://github.com/containerd/ttrpc/pull/113))
    * PROTOCOL: slight markdown touchup ([#111](https://github.com/containerd/ttrpc/pull/111))
    * Introduce streaming ([#107](https://github.com/containerd/ttrpc/pull/107))
    * Update checkout and lint actions ([#109](https://github.com/containerd/ttrpc/pull/109))
    * Add Makefile and update protobuf ([#106](https://github.com/containerd/ttrpc/pull/106))
    * Add ttrpc protocol definition ([#102](https://github.com/containerd/ttrpc/pull/102))
    * Enable Codecov again ([#105](https://github.com/containerd/ttrpc/pull/105))
    * Use CR+LF instead of LF regardless of OS ([#103](https://github.com/containerd/ttrpc/pull/103))
    * Log the error's underyling errno if there is ([#104](https://github.com/containerd/ttrpc/pull/104))
    * Use google.golang.org/protobuf instead of github.com/gogo/protobuf ([#99](https://github.com/containerd/ttrpc/pull/99))
    * Wrap correct error on unix.GetsockoptUcred failure ([#100](https://github.com/containerd/ttrpc/pull/100))
    * Update CI project checks to use containerd project action ([#101](https://github.com/containerd/ttrpc/pull/101))
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 -> 1f10f66a31bf
    * **github.com/AdamKorcz/go-118-fuzz-build**                                       5330a85ea652 **_new_**
    * **github.com/Microsoft/go-winio**                                                v0.5.1 -> v0.6.0
    * **github.com/Microsoft/hcsshim**                                                 v0.9.2 -> v0.10.0-rc.7
    * **github.com/blang/semver/v4**                                                   v4.0.0 **_new_**
    * **github.com/cenkalti/backoff/v4**                                               v4.1.2 -> v4.2.0
    * **github.com/cespare/xxhash/v2**                                                 v2.1.2 -> v2.2.0
    * **github.com/cilium/ebpf**                                                       v0.7.0 -> v0.9.1
    * **github.com/container-orchestrated-devices/container-device-interface**         v0.5.4 **_new_**
    * **github.com/containerd/btrfs/v2**                                               v2.0.0 **_new_**
    * **github.com/containerd/cgroups**                                                v1.0.3 -> v1.1.0
    * **github.com/containerd/cgroups/v3**                                             v3.0.1 **_new_**
    * **github.com/containerd/continuity**                                             v0.2.2 -> v0.3.0
    * **github.com/containerd/fifo**                                                   v1.0.0 -> v1.1.0
    * **github.com/containerd/go-cni**                                                 v1.1.3 -> v1.1.9
    * **github.com/containerd/imgcrypt**                                               v1.1.3 -> v1.1.7
    * **github.com/containerd/nri**                                                    v0.1.0 -> v0.3.0
    * **github.com/containerd/ttrpc**                                                  v1.1.0 -> v1.2.1
    * **github.com/containerd/typeurl/v2**                                             v2.1.0 **_new_**
    * **github.com/containernetworking/cni**                                           v1.0.1 -> v1.1.2
    * **github.com/containernetworking/plugins**                                       v1.0.1 -> v1.2.0
    * **github.com/containers/ocicrypt**                                               v1.1.2 -> v1.1.6
    * **github.com/coreos/go-systemd/v22**                                             v22.3.2 -> v22.5.0
    * **github.com/cpuguy83/go-md2man/v2**                                             v2.0.0 -> v2.0.2
    * **github.com/cyphar/filepath-securejoin**                                        v0.2.3 **_new_**
    * **github.com/docker/go-units**                                                   v0.4.0 -> v0.5.0
    * **github.com/emicklei/go-restful/v3**                                            v3.10.1 **_new_**
    * **github.com/fsnotify/fsnotify**                                                 v1.4.9 -> v1.6.0
    * **github.com/go-logr/logr**                                                      v1.2.2 -> v1.2.3
    * **github.com/godbus/dbus/v5**                                                    v5.0.6 -> v5.1.0
    * **github.com/google/go-cmp**                                                     v0.5.6 -> v0.5.9
    * **github.com/google/uuid**                                                       v1.2.0 -> v1.3.0
    * **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.7.0 **_new_**
    * **github.com/imdario/mergo**                                                     v0.3.12 -> v0.3.13
    * **github.com/intel/goresctrl**                                                   v0.2.0 -> v0.3.0
    * **github.com/klauspost/compress**                                                v1.11.13 -> v1.16.0
    * **github.com/klauspost/cpuid/v2**                                                v2.0.4 **_new_**
    * **github.com/miekg/pkcs11**                                                      v1.0.3 -> v1.1.1
    * **github.com/minio/sha256-simd**                                                 v1.0.0 **_new_**
    * **github.com/moby/sys/mountinfo**                                                v0.5.0 -> v0.6.2
    * **github.com/moby/sys/sequential**                                               v0.5.0 **_new_**
    * **github.com/moby/sys/signal**                                                   v0.6.0 -> v0.7.0
    * **github.com/opencontainers/image-spec**                                         693428a734f5 -> 3a7f492d3f1b
    * **github.com/opencontainers/runc**                                               v1.1.0 -> v1.1.4
    * **github.com/opencontainers/runtime-spec**                                       1c3f411f0417 -> v1.1.0-rc.1
    * **github.com/opencontainers/runtime-tools**                                      946c877fa809 **_new_**
    * **github.com/opencontainers/selinux**                                            v1.10.0 -> v1.11.0
    * **github.com/pelletier/go-toml**                                                 v1.9.3 -> v1.9.5
    * **github.com/prometheus/client_golang**                                          v1.11.0 -> v1.14.0
    * **github.com/prometheus/client_model**                                           v0.2.0 -> v0.3.0
    * **github.com/prometheus/common**                                                 v0.30.0 -> v0.37.0
    * **github.com/prometheus/procfs**                                                 v0.7.3 -> v0.8.0
    * **github.com/russross/blackfriday/v2**                                           v2.0.1 -> v2.1.0
    * **github.com/sirupsen/logrus**                                                   v1.8.1 -> v1.9.0
    * **github.com/stretchr/testify**                                                  v1.7.0 -> v1.8.2
    * **github.com/syndtr/gocapability**                                               42c35b437635 **_new_**
    * **github.com/tchap/go-patricia/v2**                                              v2.3.1 **_new_**
    * **github.com/urfave/cli**                                                        v1.22.1 -> v1.22.12
    * **github.com/vishvananda/netlink**                                               f5de75959ad5 -> v1.2.1-beta.2
    * **go.etcd.io/bbolt**                                                             v1.3.6 -> v1.3.7
    * **go.opencensus.io**                                                             v0.23.0 -> v0.24.0
    * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 -> v0.40.0
    * **go.opentelemetry.io/otel**                                                     v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/metric**                                              v0.37.0 **_new_**
    * **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/trace**                                               v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/proto/otlp**                                               v0.11.0 -> v0.19.0
    * **golang.org/x/crypto**                                                          32db794688a5 -> v0.1.0
    * **golang.org/x/mod**                                                             v0.7.0 **_new_**
    * **golang.org/x/net**                                                             fe4d6282115f -> v0.7.0
    * **golang.org/x/oauth2**                                                          2bc19b11175f -> v0.4.0
    * **golang.org/x/sync**                                                            036812b2e83c -> v0.1.0
    * **golang.org/x/sys**                                                             1d35b9e2eb4e -> v0.6.0
    * **golang.org/x/term**                                                            6886f2dfbf5b -> v0.5.0
    * **golang.org/x/text**                                                            v0.3.7 -> v0.7.0
    * **golang.org/x/time**                                                            1f47c861a9ac -> 90d013bbcef8
    * **golang.org/x/tools**                                                           v0.5.0 **_new_**
    * **google.golang.org/genproto**                                                   e50cd9704f63 -> 7f2fa6fef1f4
    * **google.golang.org/grpc**                                                       v1.43.0 -> v1.53.0
    * **google.golang.org/protobuf**                                                   v1.27.1 -> v1.28.1
    * **gopkg.in/yaml.v3**                                                             496545a6307b -> v3.0.1
    * **k8s.io/api**                                                                   v0.22.5 -> v0.26.2
    * **k8s.io/apimachinery**                                                          v0.22.5 -> v0.26.2
    * **k8s.io/apiserver**                                                             v0.22.5 -> v0.26.2
    * **k8s.io/client-go**                                                             v0.22.5 -> v0.26.2
    * **k8s.io/component-base**                                                        v0.22.5 -> v0.26.2
    * **k8s.io/cri-api**                                                               v0.23.1 -> v0.26.2
    * **k8s.io/klog/v2**                                                               v2.30.0 -> v2.90.1
    * **k8s.io/utils**                                                                 cb0fa318a74b -> a5ecb0141aa5
    * **sigs.k8s.io/json**                                                             f223a00ba0e2 **_new_**
    * **sigs.k8s.io/structured-merge-diff/v4**                                         v4.1.2 -> v4.2.3
    * **sigs.k8s.io/yaml**                                                             v1.2.0 -> v1.3.0
    
    Previous release can be found at [v1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0)
    ### Which file should I download?
    * `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
    * `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
    * `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:     (Deprecated)
    * `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated)
    
    In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
    and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
    
    See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.
    
    
  • v1.7.0-rc.3
    containerd 1.7.0-rc.3
    
    Welcome to the v1.7.0-rc.3 release of containerd!
    *This is a pre-release of containerd*
    
    The eighth major release of containerd includes new functionality alongside many improvements.
    This release is the last major release of containerd 1.x before 2.0.
    Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0.
    This release still adheres to our backwards compatibility guarantees and users who do not use or enable new functionality should use this release with the same stability expectations.
    The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality.
    
    ### Highlights
    
    #### Sandbox API _(experimental)_
    
    The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs.
    This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients.
    
    * **Sandbox API** ([#6703](https://github.com/containerd/containerd/pull/6703))
    * **CRI Sandbox API Implementation** ([#7228](https://github.com/containerd/containerd/pull/7228))
    
    #### Transfer Service _(experimental)_
    
    * **Transfer Service** ([#7320](https://github.com/containerd/containerd/pull/7320))
    
    The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for
    pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release
    to allow for further plugin development and integration into existing plugins.
    
    See the [Transfer Docs](https://github.com/containerd/containerd/blob/main/docs/transfer.md)
    
    #### NRI _(experimental)_
    
    * **Extend NRI scope** ([nri#16](https://github.com/containerd/nri/pull/16))
    * **Support for updated NRI** ([#6019](https://github.com/containerd/containerd/pull/6019))
    
    The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides
    basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration.
    
    This release introduces NRI v0.3.0 with an updated plugin interface to cover a wide range of use cases.
    
    See the [NRI Docs](https://github.com/containerd/containerd/blob/main/docs/NRI.md)
    
    #### Platform Support
    
    * **Linux containers on FreeBSD** ([#7000](https://github.com/containerd/containerd/pull/7000))
    
    #### Runtime Features
    
    * **Add support for CDI device injection** ([#6654](https://github.com/containerd/containerd/pull/6654))
    * **Support for cgroups blockio** ([#5490](https://github.com/containerd/containerd/pull/5490))
    * **Add restart policy for enhanced restart manager** ([#6744](https://github.com/containerd/containerd/pull/6744))
    
    #### gRPC Shim Support _(experimental)_
    
    * **Initial gRPC shim support** ([#8052](https://github.com/containerd/containerd/pull/8052))
    
    Adds support for shims to use gRPC in addition to ttrpc. Existing ttrpc shim support is not going
    away and will continue to be recommended for the best performance and lowest shim memory overhead.
    The gRPC support allows implementation of a wider range of shim implementations which may not
    have access to a stable ttrpc library in the implementation language. The shim protocol is also
    updated to allow the shims to specify the protocol which is supported.
    
    #### Road to 2.0
    
    ##### Refactoring
    
    There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points.
    
    The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality
    out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independently. The new sandbox and distribution interfaces provide one example of this,
    but it also being done for image and network management.
    
    The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc.
    Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability.
    
    * **Remove gogoproto.customtype** ([#6699](https://github.com/containerd/containerd/pull/6699))
    * **Remove enumvalue_customname, goproto_enum_prefix and enum_customname** ([#6708](https://github.com/containerd/containerd/pull/6708))
    * **Remove all gogoproto extensions** ([#6829](https://github.com/containerd/containerd/pull/6829))
    * **Migrate off from github.com/gogo/protobuf** ([#6841](https://github.com/containerd/containerd/pull/6841))
    * **ttrpc streaming** ([ttrpc#107](https://github.com/containerd/ttrpc/pull/107))
    * **Add unpack interface for client** ([#6749](https://github.com/containerd/containerd/pull/6749))
    * **Add collectible resources to metadata gc** ([#6804](https://github.com/containerd/containerd/pull/6804))
    * **Add version to shim protocol** ([#8177](https://github.com/containerd/containerd/pull/8177))
    
    ##### Configuration
    
    Existing CRI configurations will be supported until 2.0.
    Any functionality split out of CRI will have their configuration migrated to new plugins.
    Deprecated configuration versions and configurations for deprecated features will be removed in 2.0.
    
    ##### Deprecation
    
    The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include.
    
    * **Docker Schema 1 Image Deprecation** ([#6884](https://github.com/containerd/containerd/pull/6884))
    
    #### CRI Updates
    
    * **Fix CRI plugin to setup pod network after creating the sandbox container** ([#5904](https://github.com/containerd/containerd/pull/5904))
    * **Support image pull progress timeout** ([#6150](https://github.com/containerd/containerd/pull/6150))
    * **Add experimental support for runtime specific snapshotters** ([#6899](https://github.com/containerd/containerd/pull/6899))
    * **Pass all TOML runtime configuration options from CRI to the runtime** ([#7764](https://github.com/containerd/containerd/pull/7764))
    * **Support for user namespaces in stateless pods ([KEP-127](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/127-user-namespaces)) _(experimental)_** ([#7679](https://github.com/containerd/containerd/pull/7679))
    * **Add timeout option for drain exec io** ([#7832](https://github.com/containerd/containerd/pull/7832))
    * **Add network plugin metrics** ([#7858](https://github.com/containerd/containerd/pull/7858))
    * **CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23** ([#7863](https://github.com/containerd/containerd/pull/7863))
    
    #### Other
    
    * **Support shallow content copy by adding reader option to local content reader at** ([#7414](https://github.com/containerd/containerd/pull/7414))
    * **Add NoSameOwner option when unpacking tars** ([#7386](https://github.com/containerd/containerd/pull/7386))
    * **Add `FetcherByDigest` for fetching blobs without fetching a manifest** ([#7460](https://github.com/containerd/containerd/pull/7460))
    * **Update default seccomp profile to block socket calls to AF_VSOCK** ([#7510](https://github.com/containerd/containerd/pull/7510))
    * **Replace fork on mount logic with CLONE_FS** ([#7513](https://github.com/containerd/containerd/pull/7513))
    * **Add support for default registry host configuration** ([#7607](https://github.com/containerd/containerd/pull/7607))
    * **Use github.com/minio/sha256-simd for more efficient sha256 calculation** ([#7732](https://github.com/containerd/containerd/pull/7732))
    * **Make OCI options cross-platform** ([#7928](https://github.com/containerd/containerd/pull/7928))
    * **Update release builds to build from Ubuntu 20.04 with glibc 2.31** ([#8021](https://github.com/containerd/containerd/pull/8021))
    * **Use data field from OCI descriptor when provided for fetch** ([#8076](https://github.com/containerd/containerd/pull/8076))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Derek McGowan
    * Kazuyoshi Kato
    * Maksym Pavlenko
    * Wei Fu
    * Phil Estes
    * Akihiro Suda
    * Sebastiaan van Stijn
    * Samuel Karp
    * Krisztian Litkey
    * Mike Brown
    * Stefan Berger
    * Danny Canter
    * Austin Vazquez
    * Daniel Canter
    * yanggang
    * Iceber Gu
    * Ye Sijun
    * Ed Bartosh
    * Luca Comellini
    * Adam Korcz
    * Nashwan Azhari
    * Tony Fang
    * ruiwen-zhao
    * xin.li
    * Brian Goff
    * Gabriel Adrian Samfira
    * Paul "TBBle" Hampson
    * Henry Wang
    * Kevin Parsons
    * Rodrigo Campos
    * zounengren
    * Justin Terry
    * Paco Xu
    * Shengjing Zhu
    * Swagat Bora
    * wanglei
    * Gavin Inglis
    * Akhil Mohan
    * Zechun Chen
    * guodong
    * lengrongfu
    * Hsing-Yu (David) Chen
    * James Jenkins
    * James Sturtevant
    * Kirtana Ashok
    * Michael Crosby
    * Qiutong Song
    * Shiming Zhang
    * Vincent Batts
    * dependabot[bot]
    * Antonio Ojea
    * Cameron Sparr
    * Casey Callendrello
    * Changwei Ge
    * Jian Zeng
    * Josh Seba
    * Junyu Liu
    * Kohei Tokunaga
    * Michael Zappa
    * Qasim Sarfraz
    * Tobias Klauser
    * Zhang Tianyang
    * pigletfly
    * yaoyinnan
    * Abirdcfly
    * Aditi Sharma
    * Amit Barve
    * Bennett-White
    * Bjorn Neergaard
    * Cory Snider
    * Craig Ingram
    * Eng Zer Jun
    * Eric Lin
    * Ethan Lowman
    * Fabian Hoffmann
    * Jess
    * Jiongchi Yu
    * Jonny Stoten
    * Juan Hoyos
    * Kang.Zhang
    * Kay Yan
    * Markus Lehtonen
    * Mikko Ylinen
    * Mohit Sharma
    * Paul Cacheux
    * Paul S. Schweigert
    * Qian Zhang
    * Tõnis Tiigi
    * Yasin Turan
    * bin liu
    * helen
    * yulng
    * Aman Sharma
    * Anastassios Nanos
    * Andrew G. Morgan
    * Andrey Klimentyev
    * Aniruddha Basak
    * Anthony Nandaa
    * Antti Kervinen
    * Aviral Takkar
    * Baoshuo
    * Benjamin Elder
    * Benjamin Wang
    * Brandon Lum
    * Chao Dai
    * Chuanying Du
    * Claudiu Belu
    * Daniel Lenar
    * Danielle Lancashire
    * Dat Nguyen
    * Davanum Srinivas
    * Dave
    * David Leadbeater
    * David Porter
    * Dmitry Shurupov
    * Edgar Lee
    * Eric Ernst
    * Fahed Dorgaa
    * Gabriela Cervantes
    * Gijs Peskens
    * Hamza El-Saawy
    * Ikko Ashimine
    * Jeff Widman
    * Jeff Zvier
    * Jeremi Piotrowski
    * Jimmy Hsiao
    * Jin Dong
    * Jordan Karaze
    * Joseph Sheng
    * Joyce Brum
    * Jukka Rissanen
    * Justin Chadwell
    * Kate
    * Kathryn Baldauf
    * Kyle L Frisbie
    * LongtaoZhang
    * Manuel Alejandro de Brito Fontes
    * Marc Schwind
    * Mark Rossetti
    * Mark Zhang
    * Marvin Giessing
    * Mathis Michel
    * Merlin Ran
    * Nabeel Rana
    * Nathan
    * Nguyen Phan Huy
    * Nikita Rybak
    * Nobel Barakat
    * Oleg Atamanenko
    * Oleg Zhurakivskyy
    * Oliver Radwell
    * Paweł Gronowski
    * Quan Tian
    * Roy Yang
    * Samuel Ortiz
    * Serge Logvinov
    * Shane Jennings
    * Shaun Lawrie
    * Shinichi Morimoto
    * SilverSoldier
    * Sophie Liu
    * Su Fei
    * Taeho Nam
    * Takumasa Sakao
    * Tiger Kaovilai
    * Tom Godkin
    * Tomoya.Fujita
    * Xinlin Ma
    * Yakul Garg
    * Zhongming Chang
    * Zhuchen Wang
    * austinvazquez
    * cardy.tang
    * chaunceyjiang
    * dabaooline
    * guiyong.ou
    * huoqifeng
    * jianfei.zhang
    * liyuxuan.darfux
    * ningmingxiao
    * shi yixue
    * shuaichang
    * songjiang han
    * wen chen
    * wusong
    * xiaoyang zhu
    * yanghesong
    * yaozhenxiu
    * zhang he
    
    ### Changes
    <details><summary>1745 commits</summary>
    <p>
    
    * Prepare release notes for v1.7.0-rc.3 ([#8233](https://github.com/containerd/containerd/pull/8233))
    * Go 1.20.2 ([#8237](https://github.com/containerd/containerd/pull/8237))
    * Update ttrpc to v1.2.1 ([#8236](https://github.com/containerd/containerd/pull/8236))
    * sandbox: create sandbox with network namespace path ([#8149](https://github.com/containerd/containerd/pull/8149))
    * labels: Add LabelDistributionSource ([#8224](https://github.com/containerd/containerd/pull/8224))
    * archive: disable looking up usernames and groupnames on the host ([#8220](https://github.com/containerd/containerd/pull/8220))
    * go.mod: go.opentelemetry.io/otel/* v1.14.0 ([#8222](https://github.com/containerd/containerd/pull/8222))
    * metadata: add comments about `Image.CreatedAt` ([#8225](https://github.com/containerd/containerd/pull/8225))
    * Add release notes for v1.7.0-rc.2 ([#8216](https://github.com/containerd/containerd/pull/8216))
    * go.mod: {hcsshim, containerd/*, go-restful/v3, mergo, klauspost/compress, opencontainers/*}@latest ([#8221](https://github.com/containerd/containerd/pull/8221))
    * Bump k8s.io deps ([#8131](https://github.com/containerd/containerd/pull/8131))
    * Update imgcrypt to v1.1.7 ([#8217](https://github.com/containerd/containerd/pull/8217))
    * Add ArgsEscaped support for CRI ([#8198](https://github.com/containerd/containerd/pull/8198))
    * Sandbox: Delete shim+shutdown sandbox on create failure ([#8204](https://github.com/containerd/containerd/pull/8204))
    * [Feature] Transfer tag image ([#8205](https://github.com/containerd/containerd/pull/8205))
    * docs: fix typo of shim.RunManager's function comment ([#8214](https://github.com/containerd/containerd/pull/8214))
    * [cri] Implement CRI Pod and Container stats for Windows ([#7099](https://github.com/containerd/containerd/pull/7099))
    * Sandbox: Fix/enhance error messages for Create ([#8203](https://github.com/containerd/containerd/pull/8203))
    * epoch: fix unit test when SOURCE_DATE_EPOCH is set ([#8202](https://github.com/containerd/containerd/pull/8202))
    * pkg/cri: add timeout to drain exec io ([#7832](https://github.com/containerd/containerd/pull/7832))
    * Prepare release notes for v1.7.0-rc.1 ([#8192](https://github.com/containerd/containerd/pull/8192))
    * Transfer export image ([#8191](https://github.com/containerd/containerd/pull/8191))
    * Create config struct to take user input ([#8193](https://github.com/containerd/containerd/pull/8193))
    * ctr/tasks: support remapped UID/GID ([#7864](https://github.com/containerd/containerd/pull/7864))
    * Add experimental section to RELEASES.md ([#8119](https://github.com/containerd/containerd/pull/8119))
    * Fix streaming manager deadlock on collection ([#8188](https://github.com/containerd/containerd/pull/8188))
    * Update CRI guide link ([#8190](https://github.com/containerd/containerd/pull/8190))
    * Add max shim version environment variable ([#8189](https://github.com/containerd/containerd/pull/8189))
    * Update README with location of security audits ([#8187](https://github.com/containerd/containerd/pull/8187))
    * docs: fix typos in historical/design/data-flow.md ([#8181](https://github.com/containerd/containerd/pull/8181))
    * Increase CI workflow timeout on Windows. ([#8183](https://github.com/containerd/containerd/pull/8183))
    * releases: mark 1.5 as EOL ([#8178](https://github.com/containerd/containerd/pull/8178))
    * Add version to shim protocol ([#8177](https://github.com/containerd/containerd/pull/8177))
    * Rework install-protobuf script and add new targets ([#8164](https://github.com/containerd/containerd/pull/8164))
    * bump go-cni to v1.1.9 ([#8173](https://github.com/containerd/containerd/pull/8173))
    * Treat sandboxes as root gc resources and scan referenced objects ([#8172](https://github.com/containerd/containerd/pull/8172))
    * update CDI version to v0.5.4 ([#8152](https://github.com/containerd/containerd/pull/8152))
    * Prepare release notes for v1.7.0-rc.0 ([#8162](https://github.com/containerd/containerd/pull/8162))
    * pkg/nri: pull in latest NRI, update NRI configuration. ([#8140](https://github.com/containerd/containerd/pull/8140))
    * [transfer]Config options followup ([#8165](https://github.com/containerd/containerd/pull/8165))
    * Add configuration options to local transfer service ([#8062](https://github.com/containerd/containerd/pull/8062))
    * docs: Show how to select GRPC for shims ([#8134](https://github.com/containerd/containerd/pull/8134))
    * CRI: remove duplicated snapshotters code ([#8154](https://github.com/containerd/containerd/pull/8154))
    * docs: add more comment to logging.LoggerFunc ([#8142](https://github.com/containerd/containerd/pull/8142))
    * contrib/apparmor: remove code related to apparmor_parser version ([#8069](https://github.com/containerd/containerd/pull/8069))
    * runtime/v2: Call onCloseWithShimLog for grpc shims ([#8120](https://github.com/containerd/containerd/pull/8120))
    * Add Fields type alias to log package ([#8143](https://github.com/containerd/containerd/pull/8143))
    * Migrate from k8s.gcr.io to registry.k8s.io ([#8125](https://github.com/containerd/containerd/pull/8125))
    * sandbox: start sandbox with options ([#8129](https://github.com/containerd/containerd/pull/8129))
    * Add macOS build note ([#8115](https://github.com/containerd/containerd/pull/8115))
    * Fix concurrent writes for UpdateContainerStats ([#8130](https://github.com/containerd/containerd/pull/8130))
    * dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8128](https://github.com/containerd/containerd/pull/8128))
    * runtime/v2: Log BootstrapParams ([#8124](https://github.com/containerd/containerd/pull/8124))
    * Prepare release notes for v1.7.0 beta.4 ([#8110](https://github.com/containerd/containerd/pull/8110))
    * Go 1.20.1 ([#8103](https://github.com/containerd/containerd/pull/8103))
    * ctr version: add args check ([#8096](https://github.com/containerd/containerd/pull/8096))
    * pkg/cri/config: fix Mirrors deprecation comment ([#8041](https://github.com/containerd/containerd/pull/8041))
    * docs: fix function names in fuzzing test documentation ([#8044](https://github.com/containerd/containerd/pull/8044))
    * fix: 'go routine' should be 'goroutine' ([#8051](https://github.com/containerd/containerd/pull/8051))
    * Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p)
    * Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2)
    * pkg/cri/sbserver: experimental NRI integration for CRI. ([#7954](https://github.com/containerd/containerd/pull/7954))
    * Clean up error strings that start with uppercase ([#8114](https://github.com/containerd/containerd/pull/8114))
    * Clean up repeated package import ([#8113](https://github.com/containerd/containerd/pull/8113))
    * Go 1.19.6 ([#8109](https://github.com/containerd/containerd/pull/8109))
    * Initial GRPC shims support ([#8052](https://github.com/containerd/containerd/pull/8052))
    * CRI: Pass sandbox annotations to _other platforms ([#8060](https://github.com/containerd/containerd/pull/8060))
    * cmd/ctr/commands/images: support usage subcommand ([#8105](https://github.com/containerd/containerd/pull/8105))
    * cni: pass in the cgroupPath capability argument ([#8067](https://github.com/containerd/containerd/pull/8067))
    * Add fallback for windows platforms without osversion ([#8101](https://github.com/containerd/containerd/pull/8101))
    * release: xx v1.2.1 ([#8104](https://github.com/containerd/containerd/pull/8104))
    * [transfer] update imagestore interface to support multiple references ([#7964](https://github.com/containerd/containerd/pull/7964))
    * [sandbox] Use options to pass PodSandboxConfig to shims ([#8100](https://github.com/containerd/containerd/pull/8100))
    * Send container events with nil PodSandboxStatus ([#8047](https://github.com/containerd/containerd/pull/8047))
    * test: add hostNetwork tests for both windows and linux ([#7984](https://github.com/containerd/containerd/pull/7984))
    * loadConfig pre-inspection in advance ([#8097](https://github.com/containerd/containerd/pull/8097))
    * contrib/apparmor: remove version-dependent rules ([#8068](https://github.com/containerd/containerd/pull/8068))
    * *: introduce wrapper pkgs for blockio and rdt ([#8066](https://github.com/containerd/containerd/pull/8066))
    * Extract CRI instrument into separate package ([#8093](https://github.com/containerd/containerd/pull/8093))
    * CRI: Mirror generic toml runtime config under server ([#8091](https://github.com/containerd/containerd/pull/8091))
    * go.mod: github.com/containerd/typeurl/v2 v2.1.0 ([#8092](https://github.com/containerd/containerd/pull/8092))
    * Revert `apparmor_parser` regression ([#8086](https://github.com/containerd/containerd/pull/8086))
    * [sandbox] refactor controller interface ([#7981](https://github.com/containerd/containerd/pull/7981))
    * btrfs: depend on kernel UAPI instead of libbtrfs ([#7933](https://github.com/containerd/containerd/pull/7933))
    * CI: skip some jobs when `repo != containerd/containerd` ([#8082](https://github.com/containerd/containerd/pull/8082))
    * chore: clean up repeated package import ([#8078](https://github.com/containerd/containerd/pull/8078))
    * fetch: Use data from descriptor when available. ([#8076](https://github.com/containerd/containerd/pull/8076))
    * chore: use http constants instead of string ([#8077](https://github.com/containerd/containerd/pull/8077))
    * Fix retry logic within devmapper device deactivation ([#8075](https://github.com/containerd/containerd/pull/8075))
    * Clean CI yaml ([#8071](https://github.com/containerd/containerd/pull/8071))
    * Add critest.exe in $PATH ([#8074](https://github.com/containerd/containerd/pull/8074))
    * keep the uppercase letter for flag info ([#7976](https://github.com/containerd/containerd/pull/7976))
    * go.mod: Bump hcsshim to v0.10.0-rc.5 ([#8049](https://github.com/containerd/containerd/pull/8049))
    * Fix sandbox exit monitor ([#8045](https://github.com/containerd/containerd/pull/8045))
    * Generate GRPC contracts for runtime APIs ([#7979](https://github.com/containerd/containerd/pull/7979))
    * Make argument validation of `mount.UnmountRecursive` compatible to `mount.UnmountAll` ([#8035](https://github.com/containerd/containerd/pull/8035))
    * Export remote snapshotter label handler ([#8036](https://github.com/containerd/containerd/pull/8036))
    * Adding support to run install hcsshim from local clone ([#7989](https://github.com/containerd/containerd/pull/7989))
    * go.mod: github.com/urfave/cli v1.22.12 ([#8040](https://github.com/containerd/containerd/pull/8040))
    * cmd/ctr/commands: clean up the func IntToInt32Array in utils.go ([#8039](https://github.com/containerd/containerd/pull/8039))
    * pkg/epoch: drop timezone ([#8037](https://github.com/containerd/containerd/pull/8037))
    * go.mod: update github.com/containerd/nri. ([#8034](https://github.com/containerd/containerd/pull/8034))
    * fix(docs): minor fix on the windows installation steps ([#8013](https://github.com/containerd/containerd/pull/8013))
    * Add integration test to opentelemetry tracing on image pull ([#7847](https://github.com/containerd/containerd/pull/7847))
    * Use mount.Target to specify subdirectory of rootfs mount ([#7840](https://github.com/containerd/containerd/pull/7840))
    * cri: mkdir /etc/cni with 0755, not 0700 ([#8020](https://github.com/containerd/containerd/pull/8020))
    * log/logtest: add `testcase` as debug field ([#8025](https://github.com/containerd/containerd/pull/8025))
    * go.mod: github.com/containerd/cgroups/v3 v3.0.0 ([#8027](https://github.com/containerd/containerd/pull/8027))
    * Update CNI plugins to 1.2.0 ([#7977](https://github.com/containerd/containerd/pull/7977))
    * go.mod: go.opentelemetry.io/otel v1.12.0 ([#8026](https://github.com/containerd/containerd/pull/8026))
    * Move PLEG events for pause container under podsandbox package ([#8007](https://github.com/containerd/containerd/pull/8007))
    * runtime docs: Clarify delete cwd behavior ([#8012](https://github.com/containerd/containerd/pull/8012))
    * release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles ([#8019](https://github.com/containerd/containerd/pull/8019))
    * RELEASES.md: update release status ([#8022](https://github.com/containerd/containerd/pull/8022))
    * deflake: TestContainerPids ([#8023](https://github.com/containerd/containerd/pull/8023))
    * release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) ([#8021](https://github.com/containerd/containerd/pull/8021))
    * Update the EOL date for 1.5 release ([#8015](https://github.com/containerd/containerd/pull/8015))
    * Prepare release notes for v1.7.0-beta.3 ([#8014](https://github.com/containerd/containerd/pull/8014))
    * Fix Memory Limit test ([#7959](https://github.com/containerd/containerd/pull/7959))
    * Reused package errdefs for not supported error ([#8005](https://github.com/containerd/containerd/pull/8005))
    * pkg/cri: optimize slice initialization ([#7994](https://github.com/containerd/containerd/pull/7994))
    * go.mod: update goresctrl to v0.3.0 ([#7987](https://github.com/containerd/containerd/pull/7987))
    * pushWriter: correctly propagate errors ([#7985](https://github.com/containerd/containerd/pull/7985))
    * CI: test release.yml on every PR ([#7968](https://github.com/containerd/containerd/pull/7968))
    * fix incorrect namespace of event when create/update namespace ([#7129](https://github.com/containerd/containerd/pull/7129))
    * Backport changes to sandboxed CRI ([#7973](https://github.com/containerd/containerd/pull/7973))
    * Fix syntax errors in the document ([#7970](https://github.com/containerd/containerd/pull/7970))
    * release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7969](https://github.com/containerd/containerd/pull/7969))
    * use local variable for rt when iterating collectors ([#7963](https://github.com/containerd/containerd/pull/7963))
    * Add basic spec and mounts for Darwin ([#7960](https://github.com/containerd/containerd/pull/7960))
    * go.mod: Bump hcsshim to v0.10.0-rc.4 ([#7810](https://github.com/containerd/containerd/pull/7810))
    * Use specs Platform instead of generated API ([#7958](https://github.com/containerd/containerd/pull/7958))
    * Make OCI options cross-platform ([#7928](https://github.com/containerd/containerd/pull/7928))
    * update to go1.19.5, go1.18.10 ([#7948](https://github.com/containerd/containerd/pull/7948))
    * fuzzing: improve archive fuzzer ([#7957](https://github.com/containerd/containerd/pull/7957))
    * shim: enable debug logging for delete ([#7943](https://github.com/containerd/containerd/pull/7943))
    * cri: Fix TestUpdateOCILinuxResource for host w/o swap controller ([#7946](https://github.com/containerd/containerd/pull/7946))
    * ctr/run: flags --detach and --rm cannot be specified together ([#7929](https://github.com/containerd/containerd/pull/7929))
    * Fix Flaky Windows CRI Integration test on TestContainerConsumedStats ([#7935](https://github.com/containerd/containerd/pull/7935))
    * Refactor snapshotters metastore transaction ([#7917](https://github.com/containerd/containerd/pull/7917))
    * mod: update github.com/pelletier/go-toml@v1.9.5 ([#7932](https://github.com/containerd/containerd/pull/7932))
    * archive: improve TestSourceDateEpoch ([#7927](https://github.com/containerd/containerd/pull/7927))
    * Add tracing plugin test ([#7883](https://github.com/containerd/containerd/pull/7883))
    * docs/content-flow: update the description of the content labels  ([#7925](https://github.com/containerd/containerd/pull/7925))
    * Add cleanup package for context management during cleanup ([#7861](https://github.com/containerd/containerd/pull/7861))
    * Fix race between stream registration and use ([#7886](https://github.com/containerd/containerd/pull/7886))
    * Prepare release notes for v1.7.0-beta.2 ([#7903](https://github.com/containerd/containerd/pull/7903))
    * Cirrus CI (Fedora 37, Rocky 8): enable cri-integration ([#7892](https://github.com/containerd/containerd/pull/7892))
    * contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages ([#7891](https://github.com/containerd/containerd/pull/7891))
    * docs: fix a typo in tracing documentation ([#7914](https://github.com/containerd/containerd/pull/7914))
    * CI: Pass GITHUB_TOKEN to containerd/project-checks ([#7913](https://github.com/containerd/containerd/pull/7913))
    * Enable dupword linter ([#7911](https://github.com/containerd/containerd/pull/7911))
    * ctr: Add platform flag to 'oci spec' command ([#7905](https://github.com/containerd/containerd/pull/7905))
    * Vagrantfile: fix disk resize error with VirtualBox ([#7907](https://github.com/containerd/containerd/pull/7907))
    * Vagrantfile: fix comments about SELinux ([#7908](https://github.com/containerd/containerd/pull/7908))
    * Use the const labels.LabelUncompressed ([#7906](https://github.com/containerd/containerd/pull/7906))
    * [sandbox] Add sandbox store plugin type ([#7850](https://github.com/containerd/containerd/pull/7850))
    * Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts ([#7893](https://github.com/containerd/containerd/pull/7893))
    * CRI: Comment cleanup/misc fixes ([#7904](https://github.com/containerd/containerd/pull/7904))
    * Move snapshot event publishing into metadata store ([#5674](https://github.com/containerd/containerd/pull/5674))
    * Vagrantfile: install-rootless-podman: remove `setenforce 0` ([#7887](https://github.com/containerd/containerd/pull/7887))
    * reused package errdefs for error ([#7894](https://github.com/containerd/containerd/pull/7894))
    * integration/images: switch away from Docker Hub to avoid rate limit ([#7888](https://github.com/containerd/containerd/pull/7888))
    * Validate userns container config is consistent with sandbox userns config ([#7882](https://github.com/containerd/containerd/pull/7882))
    * `ctr contents ls` sorts the labels of the content ([#7881](https://github.com/containerd/containerd/pull/7881))
    * chore: use `go fix` to cleanup old +build buildtag ([#7879](https://github.com/containerd/containerd/pull/7879))
    * cri: Shadow variables to avoid t.Parallel() issues ([#7880](https://github.com/containerd/containerd/pull/7880))
    * Add support for user namespaces in stateless pods (KEP-127) ([#7679](https://github.com/containerd/containerd/pull/7679))
    * Refactor metastore transaction ([#7529](https://github.com/containerd/containerd/pull/7529))
    * oci: appendOSMounts(): remove unused error, and move ([#7874](https://github.com/containerd/containerd/pull/7874))
    * add kube v1.26: remove v1alph2 cri support ([#7863](https://github.com/containerd/containerd/pull/7863))
    * make runc 1.1 for oss_fuzz_build.sh ([#7875](https://github.com/containerd/containerd/pull/7875))
    * CRI sbserver: Prevent server reuse after Shutdown ([#7872](https://github.com/containerd/containerd/pull/7872))
    * Fix incorrect defer usage and refactor judgement ([#7521](https://github.com/containerd/containerd/pull/7521))
    * oci: Add WithDomainname ([#7869](https://github.com/containerd/containerd/pull/7869))
    * Reused errdefs define error ([#7871](https://github.com/containerd/containerd/pull/7871))
    * fix `ctr tasks kill` does not remove cni network under windows ([#7866](https://github.com/containerd/containerd/pull/7866))
    * add network plugin metrics ([#7858](https://github.com/containerd/containerd/pull/7858))
    * Avoid using canceled context in unpacker cleanup ([#7859](https://github.com/containerd/containerd/pull/7859))
    * image/label: print more characters of label keys ([#7618](https://github.com/containerd/containerd/pull/7618))
    * prevent Server reuse after a Shutdown ([#7165](https://github.com/containerd/containerd/pull/7165))
    * Check containerd's readiness before calling critest ([#7851](https://github.com/containerd/containerd/pull/7851))
    * Fix grammatical errors in Readme ([#7837](https://github.com/containerd/containerd/pull/7837))
    * Fix cpu architecture detection issue on linux/arm ([#7636](https://github.com/containerd/containerd/pull/7636))
    * CRI: Fix no CNI info for pod sandbox on restart ([#7845](https://github.com/containerd/containerd/pull/7845))
    * Enable checkRename test ([#7081](https://github.com/containerd/containerd/pull/7081))
    * metastore: Add WithTransaction convenience method ([#7781](https://github.com/containerd/containerd/pull/7781))
    * Prevent a race condition in testHook ([#7831](https://github.com/containerd/containerd/pull/7831))
    * cri: fix `memory.memsw.limit_in_bytes: no such file or directory` ([#7836](https://github.com/containerd/containerd/pull/7836))
    * go.mod: update fuzz-headers and fuzz-build ([#7824](https://github.com/containerd/containerd/pull/7824))
    * Remove github.com/gogo/protobuf again ([#7825](https://github.com/containerd/containerd/pull/7825))
    * CRI: Add host networking helper ([#7814](https://github.com/containerd/containerd/pull/7814))
    * Support sandbox shutdown in shim runtimes ([#7792](https://github.com/containerd/containerd/pull/7792))
    * move up to CRI-TOOLS v1.26.0 ([#7818](https://github.com/containerd/containerd/pull/7818))
    * Minor fix when querying pod sandbox status ([#7812](https://github.com/containerd/containerd/pull/7812))
    * nil check to avoid panic on upgrade ([#7809](https://github.com/containerd/containerd/pull/7809))
    * Bump grpc to v1.51.0 ([#7709](https://github.com/containerd/containerd/pull/7709))
    * fatal error: concurrent map iteration and map write ([#7805](https://github.com/containerd/containerd/pull/7805))
    * Bump golangci-lint to v1.50.1 ([#7804](https://github.com/containerd/containerd/pull/7804))
    * cri: make swapping disabled with memory limit ([#7783](https://github.com/containerd/containerd/pull/7783))
    * add metrics for image pulling: error; in progress count; thoughput  ([#7313](https://github.com/containerd/containerd/pull/7313))
    * Prepare release notes for v1.7.0-beta.1 ([#7793](https://github.com/containerd/containerd/pull/7793))
    * support fetching containerd from non public GCS buckets ([#7771](https://github.com/containerd/containerd/pull/7771))
    * images: support specifying SourceDateEpoch via ctx ([#7651](https://github.com/containerd/containerd/pull/7651))
    * fuzzing: improve archive fuzzer ([#7718](https://github.com/containerd/containerd/pull/7718))
    * fix sdNotify func when debug level ([#7798](https://github.com/containerd/containerd/pull/7798))
    * Upgrade GitHub actions packages in release workflow ([#7794](https://github.com/containerd/containerd/pull/7794))
    * Enable GitHub Actions local Linux CI runs ([#7796](https://github.com/containerd/containerd/pull/7796))
    * integration: increase timeout in container_event_test.go ([#7791](https://github.com/containerd/containerd/pull/7791))
    * digest: use github.com/minio/sha256-simd ([#7732](https://github.com/containerd/containerd/pull/7732))
    * allow client to remove created tasks with PID 0 ([#7787](https://github.com/containerd/containerd/pull/7787))
    * Add container event support to containerd ([#7073](https://github.com/containerd/containerd/pull/7073))
    * docs: Authorizer.Authorize could return ErrUnexpectedStatus ([#7786](https://github.com/containerd/containerd/pull/7786))
    * fix: check for tmpfs when evaluating if userxattr is needed ([#7772](https://github.com/containerd/containerd/pull/7772))
    * Pass TOML configuration options for runtimes CRI is not aware of ([#7764](https://github.com/containerd/containerd/pull/7764))
    * Cleanup build constraints ([#7776](https://github.com/containerd/containerd/pull/7776))
    * There is no way to disable debug endpoint on Darwin ([#7775](https://github.com/containerd/containerd/pull/7775))
    * CI: Vagrant: pin rockylinux/8 to v5.0.0 ([#7777](https://github.com/containerd/containerd/pull/7777))
    * vendor: golang.org/x/net v0.4.0 ([#7774](https://github.com/containerd/containerd/pull/7774))
    * Fix context when waiting sandbox ([#7773](https://github.com/containerd/containerd/pull/7773))
    * Github Security Advisory [GHSA-2qjp-425j-52j9](https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9)
    * update to go1.19.4, go1.18.9 ([#7765](https://github.com/containerd/containerd/pull/7765))
    * Change PushContent to require only Provider ([#7763](https://github.com/containerd/containerd/pull/7763))
    * sbserver bug fixing ([#7768](https://github.com/containerd/containerd/pull/7768))
    * Add unit test to Opentelemetry tracing ([#7671](https://github.com/containerd/containerd/pull/7671))
    * remove some (aliases for) deprecated functions ([#7525](https://github.com/containerd/containerd/pull/7525))
    * Refactor ctr restore to allow for tty allocation ([#7673](https://github.com/containerd/containerd/pull/7673))
    * fix panic when containerd-stress density --count 0 ([#7748](https://github.com/containerd/containerd/pull/7748))
    * Unwrap proto errors in streaming client ([#7753](https://github.com/containerd/containerd/pull/7753))
    * Fix process_vm_* syscall names in seccomp ([#7755](https://github.com/containerd/containerd/pull/7755))
    * upgrade the ops.md output for current 1.7 version . ([#7747](https://github.com/containerd/containerd/pull/7747))
    * docs: Add extra security instructions ([#7743](https://github.com/containerd/containerd/pull/7743))
    * go.mod: re-vendor NRI from the official repo. ([#7744](https://github.com/containerd/containerd/pull/7744))
    * [Sandbox API] CRI status cleanup ([#7731](https://github.com/containerd/containerd/pull/7731))
    * Transfer service ([#7320](https://github.com/containerd/containerd/pull/7320))
    * NRI: add support for NRI with extended scope. ([#6019](https://github.com/containerd/containerd/pull/6019))
    * archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ([#7710](https://github.com/containerd/containerd/pull/7710))
    * Fix order of operations when setting lease labels ([#7702](https://github.com/containerd/containerd/pull/7702))
    * Add ctr image prune command ([#7730](https://github.com/containerd/containerd/pull/7730))
    * Check for nullptr before dereferencing ([#7708](https://github.com/containerd/containerd/pull/7708))
    * use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers ([#7736](https://github.com/containerd/containerd/pull/7736))
    * introspection: expose the daemon's PID and PIDNS ([#7694](https://github.com/containerd/containerd/pull/7694))
    * reference/docker: synchronize fork with upstream distribution/distribution ([#7635](https://github.com/containerd/containerd/pull/7635))
    * go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions ([#7721](https://github.com/containerd/containerd/pull/7721))
    * Add ptrace readby and tracedby to default AppArmor profile ([#7714](https://github.com/containerd/containerd/pull/7714))
    * Fix sandbox API when calling sandboxed shims ([#7684](https://github.com/containerd/containerd/pull/7684))
    * make status more readable and update easy. ([#7669](https://github.com/containerd/containerd/pull/7669))
    * integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 ([#7720](https://github.com/containerd/containerd/pull/7720))
    * Resolve warnings in Windows GitHub Actions periodic workflows ([#7706](https://github.com/containerd/containerd/pull/7706))
    * Sandbox API: implement Controller.Status for SandboxAPI ([#7470](https://github.com/containerd/containerd/pull/7470))
    * [port #5904 to sbserver] Setup pod network after creating the sandbox container ([#7426](https://github.com/containerd/containerd/pull/7426))
    * fix for OSS-Fuzz infra changes ([#7677](https://github.com/containerd/containerd/pull/7677))
    * runtime/v2/shim: clean up the use of containerdBinary ([#7499](https://github.com/containerd/containerd/pull/7499))
    * Add process_vm read and write calls to default seccomp profile ([#7693](https://github.com/containerd/containerd/pull/7693))
    * Resolve Scorecards GitHub Actions workflow warnings ([#7707](https://github.com/containerd/containerd/pull/7707))
    * cri: add pod uid annotation ([#7697](https://github.com/containerd/containerd/pull/7697))
    * Missed out `platform interface` when reused the conn for Client. ([#7699](https://github.com/containerd/containerd/pull/7699))
    * overlayfs: remove duplicated tx rollback ([#7700](https://github.com/containerd/containerd/pull/7700))
    * go.mod: update some dependencies ([#7704](https://github.com/containerd/containerd/pull/7704))
    * update github.com/cpuguy83/go-md2man/v2 to v2.0.2 ([#7705](https://github.com/containerd/containerd/pull/7705))
    * Fsnotify bump and change code ([#7703](https://github.com/containerd/containerd/pull/7703))
    * fix build containerd in centos9 ([#7683](https://github.com/containerd/containerd/pull/7683))
    * Bump urfave-cli to v1.22.10 ([#7701](https://github.com/containerd/containerd/pull/7701))
    * can set up the network serially by CNI plugins ([#7685](https://github.com/containerd/containerd/pull/7685))
    * Update cri-api dependency to v0.26.0-beta.0 ([#7656](https://github.com/containerd/containerd/pull/7656))
    * overlay: Remove unused method param ([#7696](https://github.com/containerd/containerd/pull/7696))
    * CI: update Fedora to 37 ([#7691](https://github.com/containerd/containerd/pull/7691))
    * tx rollback when GetInfo return error ([#7678](https://github.com/containerd/containerd/pull/7678))
    * Upgrade github.com/containerd/cgroups from v1 to v3 ([#7601](https://github.com/containerd/containerd/pull/7601))
    * Remove OpenTelementry imports from remotes/docker package ([#7675](https://github.com/containerd/containerd/pull/7675))
    * Expose Done and Err in Shutdown service ([#7686](https://github.com/containerd/containerd/pull/7686))
    * gotestsum match go version 1.19 ([#7688](https://github.com/containerd/containerd/pull/7688))
    * complement sub-command note for containerd-main ([#7670](https://github.com/containerd/containerd/pull/7670))
    * keep the lower case letter for flag info ([#7668](https://github.com/containerd/containerd/pull/7668))
    * bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a ([#7666](https://github.com/containerd/containerd/pull/7666))
    * Fix broken link for CRI plugin in docs ([#7667](https://github.com/containerd/containerd/pull/7667))
    * add option to resolve symlinks in WithLinuxDevice ([#7523](https://github.com/containerd/containerd/pull/7523))
    * Bump k8s.io deps to v0.25.4 ([#7663](https://github.com/containerd/containerd/pull/7663))
    * Release: add static binaries ([#7659](https://github.com/containerd/containerd/pull/7659))
    * Bump OpenTelemetry contrib to v0.36.4 ([#7662](https://github.com/containerd/containerd/pull/7662))
    * Fix slice append error (`spec.Linux.Resources.HugepageLimits`) ([#7661](https://github.com/containerd/containerd/pull/7661))
    * Bump OpenTelemetry to v1.11.1 ([#7660](https://github.com/containerd/containerd/pull/7660))
    * feature: add gc scheduler metrics collection count ([#5263](https://github.com/containerd/containerd/pull/5263))
    * Add `--debug` args to all subcommands of `ctr pprof` ([#7629](https://github.com/containerd/containerd/pull/7629))
    * Add a thin wrapper around otel Span object ([#7655](https://github.com/containerd/containerd/pull/7655))
    * Bump grpc to v1.50.1 ([#7643](https://github.com/containerd/containerd/pull/7643))
    * replace strings.Split(N) for strings.Cut() or alternatives ([#7631](https://github.com/containerd/containerd/pull/7631))
    * add oci.WithCPURT ([#7642](https://github.com/containerd/containerd/pull/7642))
    * Sandbox API: Add a new mode config for sandbox controller impls ([#7590](https://github.com/containerd/containerd/pull/7590))
    * fuzzing: bump go-fuzz-headers ([#7625](https://github.com/containerd/containerd/pull/7625))
    * Bump k8s.io deps to v0.25.3 ([#7637](https://github.com/containerd/containerd/pull/7637))
    * Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex ([#7641](https://github.com/containerd/containerd/pull/7641))
    * Extra documentation for content interfaces ([#7640](https://github.com/containerd/containerd/pull/7640))
    * Fix shim socket permissions on Darwin ([#7638](https://github.com/containerd/containerd/pull/7638))
    * s390x: build and package s390x bin in release assets ([#7614](https://github.com/containerd/containerd/pull/7614))
    * Replace mount fork hack with CLONE_FS ([#7513](https://github.com/containerd/containerd/pull/7513))
    * remotes: add `FetcherByDigest` for fetching blobs without foreknown descriptors (useful for general-purpose CAS) ([#7460](https://github.com/containerd/containerd/pull/7460))
    * Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 ([#7403](https://github.com/containerd/containerd/pull/7403))
    * Support default hosts.toml configuration ([#7607](https://github.com/containerd/containerd/pull/7607))
    * Add tracing spans in CRI image service and pull.go ([#7453](https://github.com/containerd/containerd/pull/7453))
    * Fix missing closed fifo ([#7604](https://github.com/containerd/containerd/pull/7604))
    * fix comments ([#7624](https://github.com/containerd/containerd/pull/7624))
    * docs: add additional info in backport process ([#7626](https://github.com/containerd/containerd/pull/7626))
    * go.mod: golang.org/x/*: use tagged versions ([#7621](https://github.com/containerd/containerd/pull/7621))
    * Bump go version to 1.19.3 ([#7620](https://github.com/containerd/containerd/pull/7620))
    * ctr export strictly matching ([#7615](https://github.com/containerd/containerd/pull/7615))
    * Fix ctr crash when pulling with --http-dump and --http-trace simultaneously ([#7617](https://github.com/containerd/containerd/pull/7617))
    * Harden GITHUB_TOKEN permissions for OSSF Scorecard ([#7599](https://github.com/containerd/containerd/pull/7599))
    * overlayutils: Add fastpath for userxattr check ([#7611](https://github.com/containerd/containerd/pull/7611))
    * Add sequence diagram for shim runtime v2 ([#7606](https://github.com/containerd/containerd/pull/7606))
    * Sandbox API: Move remote impls to /sandbox/proxy ([#7600](https://github.com/containerd/containerd/pull/7600))
    * fuzzing: improve archive fuzzer ([#7588](https://github.com/containerd/containerd/pull/7588))
    * Retry client connection in  waitForStart ([#7537](https://github.com/containerd/containerd/pull/7537))
    * Add Workflow for running critest with Hyper-V Containers on Windows. ([#7025](https://github.com/containerd/containerd/pull/7025))
    * Add release notes for v1.7.0-beta.0 ([#7575](https://github.com/containerd/containerd/pull/7575))
    * Cleanup sandbox interfaces ([#7576](https://github.com/containerd/containerd/pull/7576))
    * Update GitHub actions release workflow set output ([#7581](https://github.com/containerd/containerd/pull/7581))
    * Fix LogURI generation-related tests on Windows. ([#7569](https://github.com/containerd/containerd/pull/7569))
    * maintenance: Remove WithWindowsNetworkNamespace from pkg/cri ([#7577](https://github.com/containerd/containerd/pull/7577))
    * CRI: implement Controller.Delete for SandboxAPI ([#7457](https://github.com/containerd/containerd/pull/7457))
    * Configure CDI registry only on start ([#7419](https://github.com/containerd/containerd/pull/7419))
    * update codeql-action to v2 ([#7568](https://github.com/containerd/containerd/pull/7568))
    * Add logging related metrics to Containerd CRI plugin ([#7546](https://github.com/containerd/containerd/pull/7546))
    * sys: optimize and refactor MkdirAllWithACL() ([#7531](https://github.com/containerd/containerd/pull/7531))
    * fix install cni script ([#7484](https://github.com/containerd/containerd/pull/7484))
    * Update 1.5 release support timeframe ([#7560](https://github.com/containerd/containerd/pull/7560))
    * bump go-fuzz-headers ([#7503](https://github.com/containerd/containerd/pull/7503))
    * Add long term stable release branches ([#7454](https://github.com/containerd/containerd/pull/7454))
    * fix pusher concurrent close channel ([#7473](https://github.com/containerd/containerd/pull/7473))
    * Make tests on GitHub less noisy ([#7530](https://github.com/containerd/containerd/pull/7530))
    * containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded ([#7541](https://github.com/containerd/containerd/pull/7541))
    * Update required Go version in BUILDING.md ([#7544](https://github.com/containerd/containerd/pull/7544))
    * go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) ([#7522](https://github.com/containerd/containerd/pull/7522))
    * Use `go env` to determine GOPATH in Makefile. ([#7542](https://github.com/containerd/containerd/pull/7542))
    * clean-up "nolint" comments, remove unused ones, update golangci-lint ([#7349](https://github.com/containerd/containerd/pull/7349))
    * Don't unmount on Darwin when deleting bundle ([#7534](https://github.com/containerd/containerd/pull/7534))
    * Add timeouts to all CI jobs ([#7538](https://github.com/containerd/containerd/pull/7538))
    * Vagrantfile: explicitly specify rsync as the shared folder driver ([#7539](https://github.com/containerd/containerd/pull/7539))
    * sys: remove unused IsAbs() (windows) ([#7527](https://github.com/containerd/containerd/pull/7527))
    * cri: PodSandboxStatus should tolerate missing task ([#7535](https://github.com/containerd/containerd/pull/7535))
    * CI: update GHA instances from Ubuntu 18.04 to 20.04 ([#7489](https://github.com/containerd/containerd/pull/7489))
    * fix the --no-pivot flag being ignored by `ctr tasks start` ([#7519](https://github.com/containerd/containerd/pull/7519))
    * Update the default seccomp to block socket calls to AF_VSOCK ([#7510](https://github.com/containerd/containerd/pull/7510))
    * cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() ([#7511](https://github.com/containerd/containerd/pull/7511))
    * Stats() shouldn't assume s.container is non-nil ([#7517](https://github.com/containerd/containerd/pull/7517))
    * Move up actions versions to prep for NodeJS 12 deprecation ([#7516](https://github.com/containerd/containerd/pull/7516))
    * cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() ([#7512](https://github.com/containerd/containerd/pull/7512))
    * Updates oci image config to support upstream ArgsEscaped ([#7483](https://github.com/containerd/containerd/pull/7483))
    * cmd/containerd: replace deprecated windows.IsAnInteractiveSession() ([#7497](https://github.com/containerd/containerd/pull/7497))
    * Update container with sandbox metadata after NetNS is created ([#7481](https://github.com/containerd/containerd/pull/7481))
    * archive: add WithSourceDateEpoch() for whiteouts ([#7478](https://github.com/containerd/containerd/pull/7478))
    * TestTaskResize must use a terminal ([#7492](https://github.com/containerd/containerd/pull/7492))
    * diff/apply.readCounter: check negative size ([#7494](https://github.com/containerd/containerd/pull/7494))
    * Add new ctr option for discarding unpacked layers ([#7425](https://github.com/containerd/containerd/pull/7425))
    * archive: windows: chtimes(): remove redundant conversion ([#7491](https://github.com/containerd/containerd/pull/7491))
    * archive: validate digests before use ([#7488](https://github.com/containerd/containerd/pull/7488))
    * vendor: github.com/opencontainers/selinux v1.10.2 ([#7482](https://github.com/containerd/containerd/pull/7482))
    * fuzzing: create structured tar bytes in archive fuzzer ([#7477](https://github.com/containerd/containerd/pull/7477))
    * Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 ([#7474](https://github.com/containerd/containerd/pull/7474))
    * use raw link to containerd.service config ([#7463](https://github.com/containerd/containerd/pull/7463))
    * cri doc: Update kata containers reference ([#7466](https://github.com/containerd/containerd/pull/7466))
    * Setup pod network after creating the sandbox container ([#5904](https://github.com/containerd/containerd/pull/5904))
    * Swap to net.ErrClosed checks for services ([#7446](https://github.com/containerd/containerd/pull/7446))
    * go.mod: Bump go-winio to v0.6.0 ([#7443](https://github.com/containerd/containerd/pull/7443))
    * fix retry when writer is reset on push ([#6995](https://github.com/containerd/containerd/pull/6995))
    * CI: Output a summary using GITHUB_SUMMARY ([#7192](https://github.com/containerd/containerd/pull/7192))
    * Fix missing close ([#7430](https://github.com/containerd/containerd/pull/7430))
    * Add test flag for skipping shim cgroup test ([#7424](https://github.com/containerd/containerd/pull/7424))
    * Refactor CRI fuzzers ([#7405](https://github.com/containerd/containerd/pull/7405))
    * Fix LogURIGenerator on Windows ([#7351](https://github.com/containerd/containerd/pull/7351))
    * Set grpc code for unimplemented cri-api methods ([#7417](https://github.com/containerd/containerd/pull/7417))
    * Add reader option to local content reader at ([#7414](https://github.com/containerd/containerd/pull/7414))
    * Sandbox API: implement Controller.Wait and Controller.Stop ([#7401](https://github.com/containerd/containerd/pull/7401))
    * remove stray .zuul.yaml ([#7416](https://github.com/containerd/containerd/pull/7416))
    * reference CDI configuration details ([#7408](https://github.com/containerd/containerd/pull/7408))
    * cri-integration: propagate ENABLE_CRI_SANDBOXES ([#7413](https://github.com/containerd/containerd/pull/7413))
    * Enable OpenSSF Scorecard Github Action ([#7404](https://github.com/containerd/containerd/pull/7404))
    * Add ext2 fs support to devmapper snapshotter ([#7402](https://github.com/containerd/containerd/pull/7402))
    * Fuzzing: Instrument with new sanitizers ([#7396](https://github.com/containerd/containerd/pull/7396))
    * Upgrade fuzzing-related packages to reduce dependencies ([#7397](https://github.com/containerd/containerd/pull/7397))
    * remotes/docker/config: Skipping TLS verification for localhost ([#7393](https://github.com/containerd/containerd/pull/7393))
    * Replace github.com/emicklei/go-restful package, versions <2.16.0 ([#7395](https://github.com/containerd/containerd/pull/7395))
    * Add NoSameOwner option when unpacking tars ([#7386](https://github.com/containerd/containerd/pull/7386))
    * ctr: add privileged-without-host-devices for run command ([#7328](https://github.com/containerd/containerd/pull/7328))
    * chore: matching the casing of other flags for ctr's pull command ([#7341](https://github.com/containerd/containerd/pull/7341))
    * windows: Add runhcs-wcow-hypervisor runtimeclass to the default config ([#6901](https://github.com/containerd/containerd/pull/6901))
    * Fix missing close ([#7370](https://github.com/containerd/containerd/pull/7370))
    * CRI: update cdi version to v0.5.1 ([#7374](https://github.com/containerd/containerd/pull/7374))
    * Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 ([#7372](https://github.com/containerd/containerd/pull/7372))
    * vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c ([#7373](https://github.com/containerd/containerd/pull/7373))
    * Remove unused variable from images action ([#7371](https://github.com/containerd/containerd/pull/7371))
    * feature: use client default namespace ([#7291](https://github.com/containerd/containerd/pull/7291))
    * integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment ([#7367](https://github.com/containerd/containerd/pull/7367))
    * feature: upgrade registry.k8s.io/pause version ([#7359](https://github.com/containerd/containerd/pull/7359))
    * metrics/cgroups/v1: Remove unused event parameter ([#7361](https://github.com/containerd/containerd/pull/7361))
    * .zuul: remove the zuul because it is offline ([#7369](https://github.com/containerd/containerd/pull/7369))
    * Update golangci-lint timeout to match config ([#7356](https://github.com/containerd/containerd/pull/7356))
    * delete redundent import alias and and type conversion ([#7345](https://github.com/containerd/containerd/pull/7345))
    * Make checkContainerTimestamps less strict on Windows ([#7350](https://github.com/containerd/containerd/pull/7350))
    * Make oss-fuzz mandatory ([#7346](https://github.com/containerd/containerd/pull/7346))
    * Add kubernetes v1.25 supported version as v1.24 ([#7326](https://github.com/containerd/containerd/pull/7326))
    * sys: move ForceRemoveAll to integration/client ([#7335](https://github.com/containerd/containerd/pull/7335))
    * chore: remove duplicate word in comments ([#7338](https://github.com/containerd/containerd/pull/7338))
    * Use ioctl helpers from x/sys/unix ([#7342](https://github.com/containerd/containerd/pull/7342))
    * archive: replace tarName() with filepath.ToSlash() ([#7344](https://github.com/containerd/containerd/pull/7344))
    * mount: remove unused ErrNotImplementOnWindows ([#7339](https://github.com/containerd/containerd/pull/7339))
    * replace sys Sequential funcs with moby/sys/sequential ([#7334](https://github.com/containerd/containerd/pull/7334))
    * Clarify containerd 1.5.0+ for k8s 1.20,1.21 ([#7324](https://github.com/containerd/containerd/pull/7324))
    * update runc binary to v1.1.4 ([#7315](https://github.com/containerd/containerd/pull/7315))
    * Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 ([#7325](https://github.com/containerd/containerd/pull/7325))
    * Update k8s.io/cri-api to v0.25.0 ([#7287](https://github.com/containerd/containerd/pull/7287))
    * script/setup: handle cnidir with SUDO ([#7322](https://github.com/containerd/containerd/pull/7322))
    * ContainerStatus to return container resources ([#6517](https://github.com/containerd/containerd/pull/6517))
    * migrate from k8s.gcr.io to registry.k8s.io ([#7038](https://github.com/containerd/containerd/pull/7038))
    * Do not rename test files on-the-fly to share functions ([#7309](https://github.com/containerd/containerd/pull/7309))
    * ctr import: strictly match platform ([#6906](https://github.com/containerd/containerd/pull/6906))
    * Revert "Downgrade MinGW to version 10.2.0" ([#7308](https://github.com/containerd/containerd/pull/7308))
    * Follow up #7254 (Switch to Go 1.19) ([#7286](https://github.com/containerd/containerd/pull/7286))
    * Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer ([#7304](https://github.com/containerd/containerd/pull/7304))
    * Adding support of CAP_BPF and CAP_PERFMON ([#7301](https://github.com/containerd/containerd/pull/7301))
    * go.mod: Bump hcsshim to v0.10.0-rc.1 ([#7284](https://github.com/containerd/containerd/pull/7284))
    * Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset ([#7306](https://github.com/containerd/containerd/pull/7306))
    * ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 ([#7293](https://github.com/containerd/containerd/pull/7293))
    * Runtime cleanup (Shim manager and task service) ([#7280](https://github.com/containerd/containerd/pull/7280))
    * containerd-stress: add support for running through CRI ([#6931](https://github.com/containerd/containerd/pull/6931))
    * Switch to Go 1.19 ([#7254](https://github.com/containerd/containerd/pull/7254))
    * Vagrantfile: dump containerd log after critest ([#7265](https://github.com/containerd/containerd/pull/7265))
    * oci: skip checking group id for WithAppendAdditionalGroups ([#7257](https://github.com/containerd/containerd/pull/7257))
    * release workflow: increase timeout to 30 minutes & remove Go setup action ([#7259](https://github.com/containerd/containerd/pull/7259))
    * release: rollback Ubuntu to 18.04 (except for riscv64) ([#7258](https://github.com/containerd/containerd/pull/7258))
    * Initial sandbox API CRI integration (implement Controller.Start) ([#7228](https://github.com/containerd/containerd/pull/7228))
    * Use environment variable to specify Go version on CI ([#7251](https://github.com/containerd/containerd/pull/7251))
    * Update golang to 1.18.5, 1.17.13 ([#7243](https://github.com/containerd/containerd/pull/7243))
    * Change os.Stderr reassign for Windows service ([#7023](https://github.com/containerd/containerd/pull/7023))
    * script/setup: fix protobuf for aarch64 ([#7237](https://github.com/containerd/containerd/pull/7237))
    * Fix cleanup in critest ([#7232](https://github.com/containerd/containerd/pull/7232))
    * fix: support simultaneous create diff for same parent snapshot ([#7204](https://github.com/containerd/containerd/pull/7204))
    * Windows HostProcess container CRI stats test ([#7223](https://github.com/containerd/containerd/pull/7223))
    * Regenerate protos with updated protoc-gen-go ([#7226](https://github.com/containerd/containerd/pull/7226))
    * test: error strings should not be capitalized ([#7195](https://github.com/containerd/containerd/pull/7195))
    * Add extra context to error when push unauthorized ([#7220](https://github.com/containerd/containerd/pull/7220))
    * replace with selinux label ([#7207](https://github.com/containerd/containerd/pull/7207))
    * Use `httputil.DumpRequestOut` for dumping client req ([#7221](https://github.com/containerd/containerd/pull/7221))
    * Fix CRI image pull timeout test for ppc64le ([#7215](https://github.com/containerd/containerd/pull/7215))
    * test: introduce failpoint control to runc-shimv2 and cni ([#7069](https://github.com/containerd/containerd/pull/7069))
    * chore: bump macos runner version ([#7206](https://github.com/containerd/containerd/pull/7206))
    * Use image lists form integration/client tests ([#7210](https://github.com/containerd/containerd/pull/7210))
    * go.mod: Bump hcsshim to v0.9.4 ([#7212](https://github.com/containerd/containerd/pull/7212))
    * Drop deprecated `ioutil` ([#7203](https://github.com/containerd/containerd/pull/7203))
    * Make getServicesOpts a helper ([#7201](https://github.com/containerd/containerd/pull/7201))
    * adds an env var commented out for sandboxed mode ([#7183](https://github.com/containerd/containerd/pull/7183))
    * cri_stats: handle missing cpu stats ([#7198](https://github.com/containerd/containerd/pull/7198))
    * using ContextDialer instead ([#7189](https://github.com/containerd/containerd/pull/7189))
    * test: Add ability to switch between  cgroupv1 or cgroupv2 for node e2e ([#7173](https://github.com/containerd/containerd/pull/7173))
    * code cleanup ([#7182](https://github.com/containerd/containerd/pull/7182))
    * Update k8s.io/cri-api to v0.25.0-alpha2 ([#7114](https://github.com/containerd/containerd/pull/7114))
    * Refactor usageNanoCores be to used for all OSes ([#7186](https://github.com/containerd/containerd/pull/7186))
    * adds support for using env file for systemd boot ([#7191](https://github.com/containerd/containerd/pull/7191))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#7185](https://github.com/containerd/containerd/pull/7185))
    * ctr: support --user for run/create ([#7145](https://github.com/containerd/containerd/pull/7145))
    * docs: Fix sample config.toml syntax ([#7174](https://github.com/containerd/containerd/pull/7174))
    * seccomp: seccomp: add syscalls related to PKU in default policy ([#7163](https://github.com/containerd/containerd/pull/7163))
    * Update and align golangci-lint version ([#7168](https://github.com/containerd/containerd/pull/7168))
    * adds a comment explaining how to disable experimental sbserver ([#7169](https://github.com/containerd/containerd/pull/7169))
    * ci: workaround Cirrus CI's INVALID_ARGUMENT ([#7177](https://github.com/containerd/containerd/pull/7177))
    * Update install-protobuf script  to install protobuf on Darwin ([#7153](https://github.com/containerd/containerd/pull/7153))
    * Fork CRI server for Sandbox API integration work ([#7164](https://github.com/containerd/containerd/pull/7164))
    * seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE ([#7167](https://github.com/containerd/containerd/pull/7167))
    * cri doc: fix formatting for CDI options ([#7158](https://github.com/containerd/containerd/pull/7158))
    * update golang to 1.18.4, 1.17.12 ([#7159](https://github.com/containerd/containerd/pull/7159))
    * Fix out of date comments for CRI store packages ([#7152](https://github.com/containerd/containerd/pull/7152))
    * update some devmapper docs ([#7124](https://github.com/containerd/containerd/pull/7124))
    * seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#7149](https://github.com/containerd/containerd/pull/7149))
    * Copy fuzzers from github.com/cncf/cncf-fuzzing ([#7123](https://github.com/containerd/containerd/pull/7123))
    * fix can't edit object by using ctr content edit command ([#6847](https://github.com/containerd/containerd/pull/6847))
    * integration/client: fix typo in export_test.go ([#7130](https://github.com/containerd/containerd/pull/7130))
    * Fix WWW-Authenticate parsing ([#7126](https://github.com/containerd/containerd/pull/7126))
    * LCOW differ return ErrNotImplemented for wrong mount type ([#7112](https://github.com/containerd/containerd/pull/7112))
    * Update go-restful/v3 to latest release ([#7117](https://github.com/containerd/containerd/pull/7117))
    * pkg/cri: use marshal wrapper for version convertor ([#7108](https://github.com/containerd/containerd/pull/7108))
    * Remove hacks around contrib/fuzz ([#7087](https://github.com/containerd/containerd/pull/7087))
    * Fix missing closed HTTP Body ([#7107](https://github.com/containerd/containerd/pull/7107))
    * Cleanup metadata tests ([#7105](https://github.com/containerd/containerd/pull/7105))
    * Downgrade MinGW to version 10.2.0 ([#7106](https://github.com/containerd/containerd/pull/7106))
    * ctr: Fix `ctr c create` fails to parse arguments ([#7098](https://github.com/containerd/containerd/pull/7098))
    * Fix Documentation Issue ([#7103](https://github.com/containerd/containerd/pull/7103))
    * refactor: reduce duplicate code ([#7100](https://github.com/containerd/containerd/pull/7100))
    * make xattr EPERM non-fatal in createTarFile ([#7094](https://github.com/containerd/containerd/pull/7094))
    * Move metadata plugin registration to seperate package ([#7096](https://github.com/containerd/containerd/pull/7096))
    * fix: missing sudo for devmapper doc ([#7092](https://github.com/containerd/containerd/pull/7092))
    * Ensure Windows Periodic workflow errors out while still uploading results. ([#7085](https://github.com/containerd/containerd/pull/7085))
    * Add snapshotter key to snapshot events ([#7084](https://github.com/containerd/containerd/pull/7084))
    * add WithAdditionalGIDs test ([#7072](https://github.com/containerd/containerd/pull/7072))
    * Forward ctr snapshotter flags on Windows ([#7086](https://github.com/containerd/containerd/pull/7086))
    * add WithAppendAdditionalGroups helper ([#7070](https://github.com/containerd/containerd/pull/7070))
    * Make CI Fuzz less noisy ([#7065](https://github.com/containerd/containerd/pull/7065))
    * ctr: add --hostname flag to create, run ([#7082](https://github.com/containerd/containerd/pull/7082))
    * improve content-flow ([#7077](https://github.com/containerd/containerd/pull/7077))
    * Make CI Fuzz optional ([#7067](https://github.com/containerd/containerd/pull/7067))
    * Use Go 1.18's testing.F on simple fuzzers ([#7056](https://github.com/containerd/containerd/pull/7056))
    * Downgrade MinGW in Windows setup scripts. ([#7062](https://github.com/containerd/containerd/pull/7062))
    * Make test path a constant ([#7057](https://github.com/containerd/containerd/pull/7057))
    * Run fuzzers in CI ([#7052](https://github.com/containerd/containerd/pull/7052))
    * CRI: Improve the /dev/shm mount options in Sandbox. ([#6913](https://github.com/containerd/containerd/pull/6913))
    * fix:userattr-unmount unexpected timeout ([#7008](https://github.com/containerd/containerd/pull/7008))
    * Port (some) unit tests to FreeBSD ([#7042](https://github.com/containerd/containerd/pull/7042))
    * Bump Golang and MinGW versions in Windows setup script. ([#6888](https://github.com/containerd/containerd/pull/6888))
    * Windows snapshotter touch ups and new functionality ([#6918](https://github.com/containerd/containerd/pull/6918))
    * Improve naming consistencies in comments in snapshotter.go ([#7032](https://github.com/containerd/containerd/pull/7032))
    * Make building static binaries simpler ([#7022](https://github.com/containerd/containerd/pull/7022))
    * Allow CRI on Darwin ([#7033](https://github.com/containerd/containerd/pull/7033))
    * update runc binary to v1.1.3 ([#7034](https://github.com/containerd/containerd/pull/7034))
    * Linux containers on FreeBSD ([#7000](https://github.com/containerd/containerd/pull/7000))
    * go.mod: github.com/moby/sys/mountinfo v0.6.2 ([#7026](https://github.com/containerd/containerd/pull/7026))
    * fix minor spelling mistake: lablel -> label ([#7031](https://github.com/containerd/containerd/pull/7031))
    * go.mod: github.com/containerd/cgroups v1.0.4 ([#7027](https://github.com/containerd/containerd/pull/7027))
    * go.mod: github.com/containerd/continuity v0.3.0 ([#7028](https://github.com/containerd/containerd/pull/7028))
    * Correct spelling mistake ("sanbdox" to "sandbox") ([#7029](https://github.com/containerd/containerd/pull/7029))
    * Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf)
    * Bump grpc to v1.47.0 ([#7018](https://github.com/containerd/containerd/pull/7018))
    * Bump k8s.io deps to v0.24.1 ([#7017](https://github.com/containerd/containerd/pull/7017))
    * Support runtime level snapshotter for issue 6657 ([#6899](https://github.com/containerd/containerd/pull/6899))
    * update golang to 1.18.3, 1.17.11 ([#7012](https://github.com/containerd/containerd/pull/7012))
    * Fix containerd-stress duration flag ([#7004](https://github.com/containerd/containerd/pull/7004))
    * update go-cni/for cni update fixing plugins that don't respond with version ([#7009](https://github.com/containerd/containerd/pull/7009))
    * Add validations for Windows HostProcess CRI configs ([#6996](https://github.com/containerd/containerd/pull/6996))
    * Move docker reference logic to reference/docker package ([#7007](https://github.com/containerd/containerd/pull/7007))
    * promote pause image to 3.7 (sync with kube v1.24) ([#7003](https://github.com/containerd/containerd/pull/7003))
    * Makefile: use urfave_cli_no_docs for binaries that don't need it ([#6998](https://github.com/containerd/containerd/pull/6998))
    * CRI: cleanup cri/store package ([#6993](https://github.com/containerd/containerd/pull/6993))
    * Use t.Run for /pkg/cri tests ([#7001](https://github.com/containerd/containerd/pull/7001))
    * vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script ([#6997](https://github.com/containerd/containerd/pull/6997))
    * sandbox: replace github.com/pkg/errors with native errors ([#6937](https://github.com/containerd/containerd/pull/6937))
    * build: Fix references to check-protos target in Makefile ([#6983](https://github.com/containerd/containerd/pull/6983))
    * ctr: fix label args used in NewContainer ([#6954](https://github.com/containerd/containerd/pull/6954))
    * ctr sandbox: handle sandbox config ([#6959](https://github.com/containerd/containerd/pull/6959))
    * Fix broken oss-fuzz build ([#6975](https://github.com/containerd/containerd/pull/6975))
    * archive: add human-readable hint to Lchown error ([#6982](https://github.com/containerd/containerd/pull/6982))
    * Fix tx closed error when upperdirlabel specified ([#6978](https://github.com/containerd/containerd/pull/6978))
    * config: improve config v1 deprecation message ([#6972](https://github.com/containerd/containerd/pull/6972))
    * Fix Windows install powershell script ([#6969](https://github.com/containerd/containerd/pull/6969))
    * fix comments on metadata schema and update namespace doc ([#6955](https://github.com/containerd/containerd/pull/6955))
    * adjust format in comment ([#6956](https://github.com/containerd/containerd/pull/6956))
    * Restore decompression benchmarks ([#6957](https://github.com/containerd/containerd/pull/6957))
    * cmd/ctr/commands/content: fix typo in fetch command usage ([#6960](https://github.com/containerd/containerd/pull/6960))
    * fix some confusing typos ([#6950](https://github.com/containerd/containerd/pull/6950))
    * update doc url about k8s ([#6952](https://github.com/containerd/containerd/pull/6952))
    * Separate windows-2019 and windows-2022 test results ([#6946](https://github.com/containerd/containerd/pull/6946))
    * shim: fix debug flag not working ([#6910](https://github.com/containerd/containerd/pull/6910))
    * Reverts removal of parallel run from critest ([#6938](https://github.com/containerd/containerd/pull/6938))
    * Bump OpenTelemetry dependencies ([#6932](https://github.com/containerd/containerd/pull/6932))
    * update runc binary and vendor to v1.1.2 ([#6934](https://github.com/containerd/containerd/pull/6934))
    * oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ([#6923](https://github.com/containerd/containerd/pull/6923))
    * update golang to 1.18.2, 1.17.10 ([#6926](https://github.com/containerd/containerd/pull/6926))
    * CI: update Fedora to 36 ([#6925](https://github.com/containerd/containerd/pull/6925))
    * Add `Wait` to `binaryProcessor` ([#6916](https://github.com/containerd/containerd/pull/6916))
    * go.mod: Bump k8s deps to v0.24.0 ([#6905](https://github.com/containerd/containerd/pull/6905))
    * (Vagrant CI) Enable git commands due to git CVE fix ([#6915](https://github.com/containerd/containerd/pull/6915))
    * Pass explicit JUnit outfile to critest.exe in Windows workflow. ([#6912](https://github.com/containerd/containerd/pull/6912))
    * Update critools to v1.24 ([#6894](https://github.com/containerd/containerd/pull/6894))
    * devmapper docs: small fixes ([#6904](https://github.com/containerd/containerd/pull/6904))
    * move report dir option to end of line for vagrant cri tests ([#6900](https://github.com/containerd/containerd/pull/6900))
    * Update Kubernetes version matrix in release docs ([#6892](https://github.com/containerd/containerd/pull/6892))
    * Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy ([#6889](https://github.com/containerd/containerd/pull/6889))
    * containerd 1.6.4 k8s 1.24 readme announce ([#6890](https://github.com/containerd/containerd/pull/6890))
    * Cleanup leaked shim process ([#6866](https://github.com/containerd/containerd/pull/6866))
    * Add collectible resources to metadata gc ([#6804](https://github.com/containerd/containerd/pull/6804))
    * Update k8 docurl in file ([#6881](https://github.com/containerd/containerd/pull/6881))
    * Support RISC-V 64 ([#6882](https://github.com/containerd/containerd/pull/6882))
    * docs: minor fixes in snapshots.Snapshotter comments ([#6885](https://github.com/containerd/containerd/pull/6885))
    * Officially deprecate Schema 1 ([#6884](https://github.com/containerd/containerd/pull/6884))
    * Make Cirrus CI tests more stable ([#6880](https://github.com/containerd/containerd/pull/6880))
    * docs: Adding windows installation steps to getting-started.md ([#6875](https://github.com/containerd/containerd/pull/6875))
    * Add ctr support for CPUMax and CPUShares ([#6809](https://github.com/containerd/containerd/pull/6809))
    * Support for cgroups blockio ([#5490](https://github.com/containerd/containerd/pull/5490))
    * Fix comment for metadata/db.go ([#6871](https://github.com/containerd/containerd/pull/6871))
    * Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies ([#6867](https://github.com/containerd/containerd/pull/6867))
    * Update go-cni to v1.1.5 ([#6868](https://github.com/containerd/containerd/pull/6868))
    * Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#6865](https://github.com/containerd/containerd/pull/6865))
    * Upgrade google.golang.org/grpc and google.golang.org/protobuf ([#6864](https://github.com/containerd/containerd/pull/6864))
    * Don't use "uname -a" as Cirrus CI's cache key ([#6863](https://github.com/containerd/containerd/pull/6863))
    * remove duplicate ([#6856](https://github.com/containerd/containerd/pull/6856))
    * Create ppc64le release ([#6858](https://github.com/containerd/containerd/pull/6858))
    * Move Vagrant-based tests from GitHub Actions to Cirrus CI ([#6854](https://github.com/containerd/containerd/pull/6854))
    * feature: support image pull progress timeout ([#6150](https://github.com/containerd/containerd/pull/6150))
    * Add unpack interface to be used by client ([#6749](https://github.com/containerd/containerd/pull/6749))
    * Fix undefined error in use of errors package ([#6855](https://github.com/containerd/containerd/pull/6855))
    * Migrate off from github.com/gogo/protobuf ([#6841](https://github.com/containerd/containerd/pull/6841))
    * images/image.go: typo ([#6851](https://github.com/containerd/containerd/pull/6851))
    * Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices ([#5686](https://github.com/containerd/containerd/pull/5686))
    * integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage ([#6180](https://github.com/containerd/containerd/pull/6180))
    * fix incorrect syntax in comments ([#6845](https://github.com/containerd/containerd/pull/6845))
    * cri: close fifos when container is deleted ([#6842](https://github.com/containerd/containerd/pull/6842))
    * diff: hide types.Any from clients ([#6832](https://github.com/containerd/containerd/pull/6832))
    * Add Container-Optimized OS into Adopters ([#6838](https://github.com/containerd/containerd/pull/6838))
    * Prepare for google.golang.org/protobuf ([#6835](https://github.com/containerd/containerd/pull/6835))
    * fix the restart desired to running when task not found ([#6833](https://github.com/containerd/containerd/pull/6833))
    * Remove all gogoproto extensions ([#6829](https://github.com/containerd/containerd/pull/6829))
    * fix nil pointer panic for monitor ([#6830](https://github.com/containerd/containerd/pull/6830))
    * remotes/docker: log registry URLs as info instead of debug ([#5681](https://github.com/containerd/containerd/pull/5681))
    * Rename runtime/v2/task to api/runtime ([#6827](https://github.com/containerd/containerd/pull/6827))
    * Fix protoc-gen-go-fieldpath ([#6828](https://github.com/containerd/containerd/pull/6828))
    * Consolidate gogo/protobuf dependencies under our own protobuf package ([#6826](https://github.com/containerd/containerd/pull/6826))
    * Add restart policy for enhanced restart manager ([#6744](https://github.com/containerd/containerd/pull/6744))
    * Remove gogoproto.stdtime ([#6821](https://github.com/containerd/containerd/pull/6821))
    * Set timeout when collecting metrics from shim's Stat ([#6781](https://github.com/containerd/containerd/pull/6781))
    * Fuzz filter package with Go 1.18's fuzzer ([#6819](https://github.com/containerd/containerd/pull/6819))
    * allow ptrace(2) by default for kernel >= 4.8 ([#6810](https://github.com/containerd/containerd/pull/6810))
    * Build bin/gen-manpages instead of using "go run" ([#6820](https://github.com/containerd/containerd/pull/6820))
    * update golang to 1.18.1, 1.17.9 ([#6822](https://github.com/containerd/containerd/pull/6822))
    * Sandbox API ([#6703](https://github.com/containerd/containerd/pull/6703))
    * Move lease manager plugin to separate package ([#6811](https://github.com/containerd/containerd/pull/6811))
    * fix pool_device_test ([#6807](https://github.com/containerd/containerd/pull/6807))
    * check for duplicate nspath possibilities ([#6806](https://github.com/containerd/containerd/pull/6806))
    * Do not append []string{""} to command to preserve Docker compatibility ([#6805](https://github.com/containerd/containerd/pull/6805))
    * tracing: fix panic on startup when configured ([#6789](https://github.com/containerd/containerd/pull/6789))
    * Optimize loading performance for cri recover ([#6680](https://github.com/containerd/containerd/pull/6680))
    * Change architecture path in README.md ([#6798](https://github.com/containerd/containerd/pull/6798))
    * make consistent for checkpoint path ([#6792](https://github.com/containerd/containerd/pull/6792))
    * metrics/cgroups: fix deadlock issue in Add during Collect ([#6788](https://github.com/containerd/containerd/pull/6788))
    * ADOPTERS: Update AKS Info ([#6794](https://github.com/containerd/containerd/pull/6794))
    * Pin upload-cloud-storage action to 0.8.0 in Windows workflow. ([#6790](https://github.com/containerd/containerd/pull/6790))
    * docs: add Deckhouse to the list of adopters ([#6785](https://github.com/containerd/containerd/pull/6785))
    * Add `docs/snapshotters`; simplify `docs/cri` ([#6778](https://github.com/containerd/containerd/pull/6778))
    * Turn paths from cmdline into absolute paths ([#6672](https://github.com/containerd/containerd/pull/6672))
    * CRI: add support for CDI device injection ([#6654](https://github.com/containerd/containerd/pull/6654))
    * Disable writing freelist to make the file robust against data corruptions ([#6761](https://github.com/containerd/containerd/pull/6761))
    * mv design docs/historical/design ([#6777](https://github.com/containerd/containerd/pull/6777))
    * CRI: improve image pulling performance ([#6702](https://github.com/containerd/containerd/pull/6702))
    * docs: remove runtime v1; migrate config v1 to v2 ([#6776](https://github.com/containerd/containerd/pull/6776))
    * Skip flaky test on Windows ([#6779](https://github.com/containerd/containerd/pull/6779))
    * docs/getting-started.md: typo ([#6775](https://github.com/containerd/containerd/pull/6775))
    * Add no_tracing tag ([#6750](https://github.com/containerd/containerd/pull/6750))
    * Move historical docs to `docs/historical` ([#6754](https://github.com/containerd/containerd/pull/6754))
    * Run go mod tidy in integration tests ([#6768](https://github.com/containerd/containerd/pull/6768))
    * go.mod: move indirects, and update integration go.mod to 1.18 ([#6765](https://github.com/containerd/containerd/pull/6765))
    * Drop gotest.tools ([#6762](https://github.com/containerd/containerd/pull/6762))
    * Use t.Setenv instead of os.Setenv ([#6760](https://github.com/containerd/containerd/pull/6760))
    * Upgrade to Go 1.18 ([#6709](https://github.com/containerd/containerd/pull/6709))
    * Adding multi-arch support for the configure.sh script ([#6751](https://github.com/containerd/containerd/pull/6751))
    * docs/getting-started.md: massive update ([#6758](https://github.com/containerd/containerd/pull/6758))
    * Remove unmaintained contrib/linuxkit ([#6755](https://github.com/containerd/containerd/pull/6755))
    * [Windows CI] Address some timeout issues ([#6757](https://github.com/containerd/containerd/pull/6757))
    * BUILDING.md: update supported Go versions ([#6756](https://github.com/containerd/containerd/pull/6756))
    * update runc to 1.1.1 ([#6753](https://github.com/containerd/containerd/pull/6753))
    * CI: add Rocky Linux 8 ([#6747](https://github.com/containerd/containerd/pull/6747))
    * CI: bump up crun to 1.4.4 ([#6748](https://github.com/containerd/containerd/pull/6748))
    * added make help for cri integration ([#6743](https://github.com/containerd/containerd/pull/6743))
    * Update README.md cncf landscape url ([#6740](https://github.com/containerd/containerd/pull/6740))
    * Fix error message in TestNewBinaryIO ([#6738](https://github.com/containerd/containerd/pull/6738))
    * Use typeurl.Any instead of github.com/gogo/protobuf/types.Any ([#6706](https://github.com/containerd/containerd/pull/6706))
    * Use cgroups.AddProc() for cgroups v1 ([#5738](https://github.com/containerd/containerd/pull/5738))
    * fix: ctr images mount with snapshotter option can't get snapshotter ([#6713](https://github.com/containerd/containerd/pull/6713))
    * cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6323](https://github.com/containerd/containerd/pull/6323))
    * moving up to go-cni v1.1.4 ([#6721](https://github.com/containerd/containerd/pull/6721))
    * native: fix deadlock from leaving transactions open ([#6722](https://github.com/containerd/containerd/pull/6722))
    * go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 ([#5390](https://github.com/containerd/containerd/pull/5390))
    * Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c)
    * runtime: deprecate runc --criu / -criu-path option ([#6496](https://github.com/containerd/containerd/pull/6496))
    * Bug fix for mount path handling ([#6651](https://github.com/containerd/containerd/pull/6651))
    * Upgrade containerd/imgcrypt and opencontainers/image-spec ([#6711](https://github.com/containerd/containerd/pull/6711))
    * Remove enumvalue_customname, goproto_enum_prefix and enum_customname ([#6708](https://github.com/containerd/containerd/pull/6708))
    * Remove gogoproto.customtype ([#6699](https://github.com/containerd/containerd/pull/6699))
    * Skip tty critest testcase on Windows Server 2022 ([#6698](https://github.com/containerd/containerd/pull/6698))
    * Build with Go 1.18 ([#6605](https://github.com/containerd/containerd/pull/6605))
    * Update prometheus client vendor ([#6690](https://github.com/containerd/containerd/pull/6690))
    * vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd ([#6687](https://github.com/containerd/containerd/pull/6687))
    * Make the temp mount as ready only in container WithVolumes ([#6593](https://github.com/containerd/containerd/pull/6593))
    * fix: `ctr run --cni` get failed ([#6670](https://github.com/containerd/containerd/pull/6670))
    * test: use `T.TempDir` to create temporary test directory ([#6681](https://github.com/containerd/containerd/pull/6681))
    * Make OpenLab's CI jobs blocking ([#6679](https://github.com/containerd/containerd/pull/6679))
    * document log level and format ([#6683](https://github.com/containerd/containerd/pull/6683))
    * Add shared content label to namespaces ([#6660](https://github.com/containerd/containerd/pull/6660))
    * Add protoc-gen-go-fieldpath ([#6562](https://github.com/containerd/containerd/pull/6562))
    * Enable gosec linter for golangci-lint ([#6669](https://github.com/containerd/containerd/pull/6669))
    * Make mkfs.xfs available on OpenLab's CI environment ([#6668](https://github.com/containerd/containerd/pull/6668))
    * ctr: improve error relative shim path error msg ([#6519](https://github.com/containerd/containerd/pull/6519))
    * typo fixes under cmd. ([#6674](https://github.com/containerd/containerd/pull/6674))
    * Handle CRI Device.HostPath on Windows ([#6618](https://github.com/containerd/containerd/pull/6618))
    * Upgrade golangci-lint and its GitHub Action ([#6666](https://github.com/containerd/containerd/pull/6666))
    * Don't build a second copy of containerd-shim-runhcs-v1.exe ([#6661](https://github.com/containerd/containerd/pull/6661))
    * Update TestNormalize to only test Windows platform ([#6569](https://github.com/containerd/containerd/pull/6569))
    * Fix link in getting-started.md ([#6663](https://github.com/containerd/containerd/pull/6663))
    * Fuzzing: refactor metadata fuzzers ([#6423](https://github.com/containerd/containerd/pull/6423))
    * Two xfs file systems with same UUID can not be mounted on the same sy… ([#6650](https://github.com/containerd/containerd/pull/6650))
    * [Windows] Fix deadline exceeded in daemon restart ([#6635](https://github.com/containerd/containerd/pull/6635))
    * Use temp file for export/import test ([#6658](https://github.com/containerd/containerd/pull/6658))
    * strip path-info from `-v` (version) output, and implement -v flag for containerd-shim  ([#6495](https://github.com/containerd/containerd/pull/6495))
    * Improve unexpected response error handling in resolver ([#6617](https://github.com/containerd/containerd/pull/6617))
    * Use the latest tag for azure images ([#6601](https://github.com/containerd/containerd/pull/6601))
    * Run CRI integration tests in GitHub Actions (Windows) ([#6626](https://github.com/containerd/containerd/pull/6626))
    * cri: fix integration test on cgroupsv2 system ([#6595](https://github.com/containerd/containerd/pull/6595))
    * Use version 2 configuration format in docs/PLUGINS.md ([#6613](https://github.com/containerd/containerd/pull/6613))
    * update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#6619](https://github.com/containerd/containerd/pull/6619))
    * Update status of 1.4 release ([#6614](https://github.com/containerd/containerd/pull/6614))
    * Update TestContainerSymlinkVolumes to use windows path ([#6568](https://github.com/containerd/containerd/pull/6568))
    * Add --user support for ctr run Windows ([#6603](https://github.com/containerd/containerd/pull/6603))
    * Update releases ([#6608](https://github.com/containerd/containerd/pull/6608))
    * Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7)
    * Adds support for Windows ArgsEscaped images ([#6479](https://github.com/containerd/containerd/pull/6479))
    * Do not use weak import ([#6558](https://github.com/containerd/containerd/pull/6558))
    * cri: relax test for system without hugetlb ([#6596](https://github.com/containerd/containerd/pull/6596))
    * Use containerd/protobuild instead of stevvooe/protobuild ([#6578](https://github.com/containerd/containerd/pull/6578))
    * integration: remove duplicated util pkg ([#6597](https://github.com/containerd/containerd/pull/6597))
    * go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 ([#6591](https://github.com/containerd/containerd/pull/6591))
    * Update Go version recommendation in getting started ([#6585](https://github.com/containerd/containerd/pull/6585))
    * go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 ([#6337](https://github.com/containerd/containerd/pull/6337))
    * fix Implicit memory aliasing in for loop ([#6331](https://github.com/containerd/containerd/pull/6331))
    * Fix build with gccgo ([#6579](https://github.com/containerd/containerd/pull/6579))
    * Replace golang.org/x/net/context with std library ([#6580](https://github.com/containerd/containerd/pull/6580))
    * containerd-shim-runc-v1: return init pid when clean dead shim ([#6571](https://github.com/containerd/containerd/pull/6571))
    * Use Windows matcher when on Windows platform in all code paths ([#6491](https://github.com/containerd/containerd/pull/6491))
    * containerd-shim-runc-v2: return init pid when clean dead shim ([#6452](https://github.com/containerd/containerd/pull/6452))
    * [Windows][Integration] Enable TestRestartMonitor ([#6515](https://github.com/containerd/containerd/pull/6515))
    * go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 ([#6554](https://github.com/containerd/containerd/pull/6554))
    </p>
    </details>
    
    ### Changes from containerd/cgroups
    <details><summary>49 commits</summary>
    <p>
    
    * Upgrade GitHub actions CI workflow ([#249](https://github.com/containerd/cgroups/pull/249))
    * Upgrade Go compiler to 1.19 ([#248](https://github.com/containerd/cgroups/pull/248))
    * Don't use ioutil ([#246](https://github.com/containerd/cgroups/pull/246))
    * Check that cgroup is empty before deleting ([#228](https://github.com/containerd/cgroups/pull/228))
    * Support cgroup.AddThread in cgroupv2 manager ([#243](https://github.com/containerd/cgroups/pull/243))
    * Support to handle more than 4 fields in cpuacct.stat ([#231](https://github.com/containerd/cgroups/pull/231))
    * typo shoulld -> should ([#236](https://github.com/containerd/cgroups/pull/236))
    * Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 ([#241](https://github.com/containerd/cgroups/pull/241))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#240](https://github.com/containerd/cgroups/pull/240))
    * .github: use ubuntu-22.04 to test cgroupv2 ([#237](https://github.com/containerd/cgroups/pull/237))
    * feat(v2): Support cgroup.MoveTo in cgroupv2 manager ([#235](https://github.com/containerd/cgroups/pull/235))
    * Update README to include usage examples of v2 client ([#233](https://github.com/containerd/cgroups/pull/233))
    * ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path ([#232](https://github.com/containerd/cgroups/pull/232))
    * Bump go version to 1.17 in go.mod ([#230](https://github.com/containerd/cgroups/pull/230))
    * make cmd/ a separate module (as it's only for testing) ([#226](https://github.com/containerd/cgroups/pull/226))
    * feat(v2): add Update method for v2.Manager ([#225](https://github.com/containerd/cgroups/pull/225))
    * feat: add memory.min param ([#211](https://github.com/containerd/cgroups/pull/211))
    * modified the dereference null pointer value. ([#218](https://github.com/containerd/cgroups/pull/218))
    * update readme for cpu cgroup demo ([#217](https://github.com/containerd/cgroups/pull/217))
    * Fix systemd full path ([#221](https://github.com/containerd/cgroups/pull/221))
    * Update Go version and fedora base ([#223](https://github.com/containerd/cgroups/pull/223))
    * Fix panic in NewSystemd on nil values ([#219](https://github.com/containerd/cgroups/pull/219))
    </p>
    </details>
    
    ### Changes from containerd/continuity
    <details><summary>28 commits</summary>
    <p>
    
    * go.mod: update dependencies (take 2) ([#204](https://github.com/containerd/continuity/pull/204))
    * Revert "go.mod: update dependencies" ([#205](https://github.com/containerd/continuity/pull/205))
    * Various small fix-ups ([#202](https://github.com/containerd/continuity/pull/202))
    * update authors and mailmap ([#201](https://github.com/containerd/continuity/pull/201))
    * move cmd/continuity to its own go module ([#200](https://github.com/containerd/continuity/pull/200))
    * CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir)  ([#198](https://github.com/containerd/continuity/pull/198))
    * fs.CopyDir: support sockets and pipes ([#197](https://github.com/containerd/continuity/pull/197))
    * Fix wrapping errors ([#196](https://github.com/containerd/continuity/pull/196))
    </p>
    </details>
    
    ### Changes from containerd/fifo
    <details><summary>26 commits</summary>
    <p>
    
    * Update Go vers, x/sys vendor ([#51](https://github.com/containerd/fifo/pull/51))
    * chore: cleanup old buildtags by `go fix` ([#49](https://github.com/containerd/fifo/pull/49))
    * Return nil when openFifo returns nil ([#47](https://github.com/containerd/fifo/pull/47))
    * Resolve golangci-lint-action package warnings ([#48](https://github.com/containerd/fifo/pull/48))
    * Remove references to io/ioutil package ([#45](https://github.com/containerd/fifo/pull/45))
    * Update GitHub actions CI workflow ([#46](https://github.com/containerd/fifo/pull/46))
    * go.mod: github.com/stretchr/testify v1.8.0, golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8, go 1.18 ([#44](https://github.com/containerd/fifo/pull/44))
    * fifo_test: Add 2 tests for closing after reading ([#42](https://github.com/containerd/fifo/pull/42))
    * replace pkg/errors ([#41](https://github.com/containerd/fifo/pull/41))
    * fifo.Close(): prevent possible panic if fifo is nil ([#32](https://github.com/containerd/fifo/pull/32))
    * Update branch name in GitHub Actions ([#40](https://github.com/containerd/fifo/pull/40))
    </p>
    </details>
    
    ### Changes from containerd/go-cni
    <details><summary>38 commits</summary>
    <p>
    
    * Add Go 1.20 support ([#111](https://github.com/containerd/go-cni/pull/111))
    * opts: add cgroupPath capability ([#110](https://github.com/containerd/go-cni/pull/110))
    * go.mod: github.com/containernetworking/cni v1.1.2 ([#109](https://github.com/containerd/go-cni/pull/109))
    * Remove references to io/ioutil package ([#106](https://github.com/containerd/go-cni/pull/106))
    * Update golangci/golangci-lint package ([#108](https://github.com/containerd/go-cni/pull/108))
    * Update GitHub actions CI workflow ([#107](https://github.com/containerd/go-cni/pull/107))
    * Add support for Windows default conf paths ([#103](https://github.com/containerd/go-cni/pull/103))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#104](https://github.com/containerd/go-cni/pull/104))
    * go.mod: update libcni to v1.1.1 ([#101](https://github.com/containerd/go-cni/pull/101))
    * add in some serial setup tests; a little make cleanup ([#100](https://github.com/containerd/go-cni/pull/100))
    * Re-introduce serial network setup ([#99](https://github.com/containerd/go-cni/pull/99))
    * bump github.com/containernetworking/cni v1.1.0 ([#98](https://github.com/containerd/go-cni/pull/98))
    * Revert "Update loopback version to support check" ([#96](https://github.com/containerd/go-cni/pull/96))
    * Use revive instead of golint ([#92](https://github.com/containerd/go-cni/pull/92))
    * Bump go verion to 1.17 ([#91](https://github.com/containerd/go-cni/pull/91))
    * moving up to latest CNI plugin release ([#90](https://github.com/containerd/go-cni/pull/90))
    * Fix Loopback Version ([#88](https://github.com/containerd/go-cni/pull/88))
    * Update comment for capabilities ([#89](https://github.com/containerd/go-cni/pull/89))
    * Add integration test for linux and update go version from 1.16 to 1.17 ([#84](https://github.com/containerd/go-cni/pull/84))
    </p>
    </details>
    
    ### Changes from containerd/imgcrypt
    <details><summary>49 commits</summary>
    <p>
    
    * CHANGES: Updated CHANGES document for 1.1.7 release ([#97](https://github.com/containerd/imgcrypt/pull/97))
    * Update to ocicrypt 1.1.6 and add support for zstd type of compressed layers  ([#96](https://github.com/containerd/imgcrypt/pull/96))
    * build(deps): Update to containerd 1.6.8 ([#92](https://github.com/containerd/imgcrypt/pull/92))
    * tests: Add -traditional to OpenSSL command line when OSSL v3 is used ([#90](https://github.com/containerd/imgcrypt/pull/90))
    * chore: fix readme typo ([#87](https://github.com/containerd/imgcrypt/pull/87))
    * Update to min golang 1.18 ([#88](https://github.com/containerd/imgcrypt/pull/88))
    * CHANGES: Updated CHANGES document for 1.1.6 release ([#85](https://github.com/containerd/imgcrypt/pull/85))
    * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.6 ([#83](https://github.com/containerd/imgcrypt/pull/83))
    * CI: Upgrade to golangci-lint v1.46.2 ([#84](https://github.com/containerd/imgcrypt/pull/84))
    * CICD: Rename master branch to main ([#79](https://github.com/containerd/imgcrypt/pull/79))
    * Rename any to pbAny ([#78](https://github.com/containerd/imgcrypt/pull/78))
    * Use reflect to support diff.ApplyConfig with/without gogo's types.Any ([#75](https://github.com/containerd/imgcrypt/pull/75))
    * Upgrade golangci-lint-action and golangci-lint ([#76](https://github.com/containerd/imgcrypt/pull/76))
    * CHANGES: Updated CHANGES document for 1.1.4 release ([#74](https://github.com/containerd/imgcrypt/pull/74))
    * Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#73](https://github.com/containerd/imgcrypt/pull/73))
    * images: prepare for typeurl.Any ([#72](https://github.com/containerd/imgcrypt/pull/72))
    * Bump ocicrypt to 1.1.3 ([#71](https://github.com/containerd/imgcrypt/pull/71))
    * Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#67](https://github.com/containerd/imgcrypt/pull/67))
    </p>
    </details>
    
    ### Changes from containerd/nri
    <details><summary>56 commits</summary>
    <p>
    
    * Add Go 1.20 support to CI ([#30](https://github.com/containerd/nri/pull/30))
    * Add CodeQL Security scan workflow ([#31](https://github.com/containerd/nri/pull/31))
    * fixes: sort final adjusted mount slice. ([#29](https://github.com/containerd/nri/pull/29))
    * fixes: fix resource adjustment to properly ignore unset/unadjusted fields. ([#28](https://github.com/containerd/nri/pull/28))
    * adaptation: fix mount and device adjustment. ([#27](https://github.com/containerd/nri/pull/27))
    * Make plugin timeouts configurable, adjust default socket path. ([#26](https://github.com/containerd/nri/pull/26))
    * pkg/adaptation: eliminate configuration file. ([#24](https://github.com/containerd/nri/pull/24))
    * stub: fix a potential plugin crash. ([#25](https://github.com/containerd/nri/pull/25))
    * adaptation: fix a panic for unsolicited updates. ([#23](https://github.com/containerd/nri/pull/23))
    * pkg/adaptaton: log errors with %v not %w. ([#22](https://github.com/containerd/nri/pull/22))
    * chore: cleanup old buildtags by `go fix` ([#21](https://github.com/containerd/nri/pull/21))
    * add back project info ([#20](https://github.com/containerd/nri/pull/20))
    * Extend scope to enable common pluggable runtime extensions. ([#16](https://github.com/containerd/nri/pull/16))
    * Update GitHub actions CI workflow ([#19](https://github.com/containerd/nri/pull/19))
    * replace pkg/errors ([#17](https://github.com/containerd/nri/pull/17))
    * Update the examples in README.md ([#15](https://github.com/containerd/nri/pull/15))
    * Rename branch from master to main ([#12](https://github.com/containerd/nri/pull/12))
    * Update to containerd 1.5.1 ([#11](https://github.com/containerd/nri/pull/11))
    </p>
    </details>
    
    ### Changes from containerd/ttrpc
    <details><summary>62 commits</summary>
    <p>
    
    * Rework deadline assertion logging to be more clear ([#132](https://github.com/containerd/ttrpc/pull/132))
    * Fix server shutdown logic ([#130](https://github.com/containerd/ttrpc/pull/130))
    * Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 ([#133](https://github.com/containerd/ttrpc/pull/133))
    * Make checkServerShutdown verbose ([#128](https://github.com/containerd/ttrpc/pull/128))
    * server: Fix connection issues when receiving ECONNRESET ([#123](https://github.com/containerd/ttrpc/pull/123))
    * README: protobuild is in containerd org now ([#125](https://github.com/containerd/ttrpc/pull/125))
    * stream: fix the map of streams leak ([#120](https://github.com/containerd/ttrpc/pull/120))
    * Regenerated pb.go files to fix mismatches ([#122](https://github.com/containerd/ttrpc/pull/122))
    * build: Fix references to check-protos target in Makefile ([#118](https://github.com/containerd/ttrpc/pull/118))
    * Add service prefix option to generator ([#116](https://github.com/containerd/ttrpc/pull/116))
    * doc: ttrpc supports stream ([#121](https://github.com/containerd/ttrpc/pull/121))
    * *: remove codecov ([#114](https://github.com/containerd/ttrpc/pull/114))
    * Only generate a Go file if the file has some services ([#112](https://github.com/containerd/ttrpc/pull/112))
    * *.go: organize errors to one spot ([#113](https://github.com/containerd/ttrpc/pull/113))
    * PROTOCOL: slight markdown touchup ([#111](https://github.com/containerd/ttrpc/pull/111))
    * Introduce streaming ([#107](https://github.com/containerd/ttrpc/pull/107))
    * Update checkout and lint actions ([#109](https://github.com/containerd/ttrpc/pull/109))
    * Add Makefile and update protobuf ([#106](https://github.com/containerd/ttrpc/pull/106))
    * Add ttrpc protocol definition ([#102](https://github.com/containerd/ttrpc/pull/102))
    * Enable Codecov again ([#105](https://github.com/containerd/ttrpc/pull/105))
    * Use CR+LF instead of LF regardless of OS ([#103](https://github.com/containerd/ttrpc/pull/103))
    * Log the error's underyling errno if there is ([#104](https://github.com/containerd/ttrpc/pull/104))
    * Use google.golang.org/protobuf instead of github.com/gogo/protobuf ([#99](https://github.com/containerd/ttrpc/pull/99))
    * Wrap correct error on unix.GetsockoptUcred failure ([#100](https://github.com/containerd/ttrpc/pull/100))
    * Update CI project checks to use containerd project action ([#101](https://github.com/containerd/ttrpc/pull/101))
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 -> 1f10f66a31bf
    * **github.com/AdamKorcz/go-118-fuzz-build**                                       5330a85ea652 **_new_**
    * **github.com/Microsoft/go-winio**                                                v0.5.1 -> v0.6.0
    * **github.com/Microsoft/hcsshim**                                                 v0.9.2 -> v0.10.0-rc.7
    * **github.com/blang/semver/v4**                                                   v4.0.0 **_new_**
    * **github.com/cenkalti/backoff/v4**                                               v4.1.2 -> v4.2.0
    * **github.com/cespare/xxhash/v2**                                                 v2.1.2 -> v2.2.0
    * **github.com/cilium/ebpf**                                                       v0.7.0 -> v0.9.1
    * **github.com/container-orchestrated-devices/container-device-interface**         v0.5.4 **_new_**
    * **github.com/containerd/btrfs/v2**                                               v2.0.0 **_new_**
    * **github.com/containerd/cgroups**                                                v1.0.3 -> v1.1.0
    * **github.com/containerd/cgroups/v3**                                             v3.0.1 **_new_**
    * **github.com/containerd/continuity**                                             v0.2.2 -> v0.3.0
    * **github.com/containerd/fifo**                                                   v1.0.0 -> v1.1.0
    * **github.com/containerd/go-cni**                                                 v1.1.3 -> v1.1.9
    * **github.com/containerd/imgcrypt**                                               v1.1.3 -> v1.1.7
    * **github.com/containerd/nri**                                                    v0.1.0 -> v0.3.0
    * **github.com/containerd/ttrpc**                                                  v1.1.0 -> v1.2.1
    * **github.com/containerd/typeurl/v2**                                             v2.1.0 **_new_**
    * **github.com/containernetworking/cni**                                           v1.0.1 -> v1.1.2
    * **github.com/containernetworking/plugins**                                       v1.0.1 -> v1.2.0
    * **github.com/containers/ocicrypt**                                               v1.1.2 -> v1.1.6
    * **github.com/coreos/go-systemd/v22**                                             v22.3.2 -> v22.5.0
    * **github.com/cpuguy83/go-md2man/v2**                                             v2.0.0 -> v2.0.2
    * **github.com/cyphar/filepath-securejoin**                                        v0.2.3 **_new_**
    * **github.com/docker/go-units**                                                   v0.4.0 -> v0.5.0
    * **github.com/emicklei/go-restful/v3**                                            v3.10.1 **_new_**
    * **github.com/fsnotify/fsnotify**                                                 v1.4.9 -> v1.6.0
    * **github.com/go-logr/logr**                                                      v1.2.2 -> v1.2.3
    * **github.com/godbus/dbus/v5**                                                    v5.0.6 -> v5.1.0
    * **github.com/google/go-cmp**                                                     v0.5.6 -> v0.5.9
    * **github.com/google/uuid**                                                       v1.2.0 -> v1.3.0
    * **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.7.0 **_new_**
    * **github.com/imdario/mergo**                                                     v0.3.12 -> v0.3.13
    * **github.com/intel/goresctrl**                                                   v0.2.0 -> v0.3.0
    * **github.com/klauspost/compress**                                                v1.11.13 -> v1.16.0
    * **github.com/klauspost/cpuid/v2**                                                v2.0.4 **_new_**
    * **github.com/miekg/pkcs11**                                                      v1.0.3 -> v1.1.1
    * **github.com/minio/sha256-simd**                                                 v1.0.0 **_new_**
    * **github.com/moby/sys/mountinfo**                                                v0.5.0 -> v0.6.2
    * **github.com/moby/sys/sequential**                                               v0.5.0 **_new_**
    * **github.com/moby/sys/signal**                                                   v0.6.0 -> v0.7.0
    * **github.com/opencontainers/image-spec**                                         693428a734f5 -> 3a7f492d3f1b
    * **github.com/opencontainers/runc**                                               v1.1.0 -> v1.1.4
    * **github.com/opencontainers/runtime-spec**                                       1c3f411f0417 -> v1.1.0-rc.1
    * **github.com/opencontainers/runtime-tools**                                      946c877fa809 **_new_**
    * **github.com/opencontainers/selinux**                                            v1.10.0 -> v1.11.0
    * **github.com/pelletier/go-toml**                                                 v1.9.3 -> v1.9.5
    * **github.com/prometheus/client_golang**                                          v1.11.0 -> v1.14.0
    * **github.com/prometheus/client_model**                                           v0.2.0 -> v0.3.0
    * **github.com/prometheus/common**                                                 v0.30.0 -> v0.37.0
    * **github.com/prometheus/procfs**                                                 v0.7.3 -> v0.8.0
    * **github.com/russross/blackfriday/v2**                                           v2.0.1 -> v2.1.0
    * **github.com/sirupsen/logrus**                                                   v1.8.1 -> v1.9.0
    * **github.com/stretchr/testify**                                                  v1.7.0 -> v1.8.2
    * **github.com/syndtr/gocapability**                                               42c35b437635 **_new_**
    * **github.com/tchap/go-patricia/v2**                                              v2.3.1 **_new_**
    * **github.com/urfave/cli**                                                        v1.22.1 -> v1.22.12
    * **github.com/vishvananda/netlink**                                               f5de75959ad5 -> v1.2.1-beta.2
    * **go.etcd.io/bbolt**                                                             v1.3.6 -> v1.3.7
    * **go.opencensus.io**                                                             v0.23.0 -> v0.24.0
    * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 -> v0.40.0
    * **go.opentelemetry.io/otel**                                                     v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/metric**                                              v0.37.0 **_new_**
    * **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/otel/trace**                                               v1.3.0 -> v1.14.0
    * **go.opentelemetry.io/proto/otlp**                                               v0.11.0 -> v0.19.0
    * **golang.org/x/crypto**                                                          32db794688a5 -> v0.1.0
    * **golang.org/x/mod**                                                             v0.7.0 **_new_**
    * **golang.org/x/net**                                                             fe4d6282115f -> v0.7.0
    * **golang.org/x/oauth2**                                                          2bc19b11175f -> v0.4.0
    * **golang.org/x/sync**                                                            036812b2e83c -> v0.1.0
    * **golang.org/x/sys**                                                             1d35b9e2eb4e -> v0.6.0
    * **golang.org/x/term**                                                            6886f2dfbf5b -> v0.5.0
    * **golang.org/x/text**                                                            v0.3.7 -> v0.7.0
    * **golang.org/x/time**                                                            1f47c861a9ac -> 90d013bbcef8
    * **golang.org/x/tools**                                                           v0.5.0 **_new_**
    * **google.golang.org/genproto**                                                   e50cd9704f63 -> 7f2fa6fef1f4
    * **google.golang.org/grpc**                                                       v1.43.0 -> v1.53.0
    * **google.golang.org/protobuf**                                                   v1.27.1 -> v1.28.1
    * **gopkg.in/yaml.v3**                                                             496545a6307b -> v3.0.1
    * **k8s.io/api**                                                                   v0.22.5 -> v0.26.2
    * **k8s.io/apimachinery**                                                          v0.22.5 -> v0.26.2
    * **k8s.io/apiserver**                                                             v0.22.5 -> v0.26.2
    * **k8s.io/client-go**                                                             v0.22.5 -> v0.26.2
    * **k8s.io/component-base**                                                        v0.22.5 -> v0.26.2
    * **k8s.io/cri-api**                                                               v0.23.1 -> v0.26.2
    * **k8s.io/klog/v2**                                                               v2.30.0 -> v2.90.1
    * **k8s.io/utils**                                                                 cb0fa318a74b -> a5ecb0141aa5
    * **sigs.k8s.io/json**                                                             f223a00ba0e2 **_new_**
    * **sigs.k8s.io/structured-merge-diff/v4**                                         v4.1.2 -> v4.2.3
    * **sigs.k8s.io/yaml**                                                             v1.2.0 -> v1.3.0
    
    Previous release can be found at [v1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0)
    ### Which file should I download?
    * `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
    * `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
    * `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:     (Deprecated)
    * `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated)
    
    In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
    and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
    
    See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.
    
    
  • v1.7.0-rc.2
    containerd 1.7.0-rc.2
    
    Welcome to the v1.7.0-rc.2 release of containerd!
    *This is a pre-release of containerd*
    
    The eighth major release of containerd includes new functionality alongside many improvements.
    This release is intended to be the last major release of containerd 1.x before 2.0.
    Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0.
    This release still adheres to our backwards compatibility guarantees and users who do not use or enable new functionality should use this release with the same stability expectations.
    The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality.
    
    ### Highlights
    
    #### Sandbox API _(experimental)_
    
    The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs.
    This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients.
    
    * **Sandbox API** ([#6703](https://github.com/containerd/containerd/pull/6703))
    * **CRI Sandbox API Implementation** ([#7228](https://github.com/containerd/containerd/pull/7228))
    
    #### Transfer Service _(experimental)_
    
    * **Transfer Service** ([#7320](https://github.com/containerd/containerd/pull/7320))
    
    The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for
    pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release
    to allow for further plugin development and integration into existing plugins.
    
    See the [Transfer Docs](https://github.com/containerd/containerd/blob/main/docs/transfer.md)
    
    #### NRI _(experimental)_
    
    * **Extend NRI scope** ([nri#16](https://github.com/containerd/nri/pull/16))
    * **Support for updated NRI** ([#6019](https://github.com/containerd/containerd/pull/6019))
    
    The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides
    basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration.
    
    This release introduces NRI v0.3.0 with an updated plugin interface to cover a wide range of use cases.
    
    See the [NRI Docs](https://github.com/containerd/containerd/blob/main/docs/NRI.md)
    
    #### Platform Support
    
    * **Linux containers on FreeBSD** ([#7000](https://github.com/containerd/containerd/pull/7000))
    
    #### Runtime Features
    
    * **Add support for CDI device injection** ([#6654](https://github.com/containerd/containerd/pull/6654))
    * **Support for cgroups blockio** ([#5490](https://github.com/containerd/containerd/pull/5490))
    * **Add restart policy for enhanced restart manager** ([#6744](https://github.com/containerd/containerd/pull/6744))
    
    #### gRPC Shim Support _(experimental)_
    
    * **Initial gRPC shim support** ([#8052](https://github.com/containerd/containerd/pull/8052))
    
    Adds support for shims to use gRPC in addition to ttrpc. Existing ttrpc shim support is not going
    away and will continue to be recommended for the best performance and lowest shim memory overhead.
    The gRPC support allows implementation of a wider range of shim implementations which may not
    have access to a stable ttrpc library in the implementation language. The shim protocol is also
    updated to allow the shims to specify the protocol which is supported.
    
    #### Road to 2.0
    
    ##### Refactoring
    
    There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points.
    
    The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality
    out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independently. The new sandbox and distribution interfaces provide one example of this,
    but it also being done for image and network management.
    
    The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc.
    Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability.
    
    * **Remove gogoproto.customtype** ([#6699](https://github.com/containerd/containerd/pull/6699))
    * **Remove enumvalue_customname, goproto_enum_prefix and enum_customname** ([#6708](https://github.com/containerd/containerd/pull/6708))
    * **Remove all gogoproto extensions** ([#6829](https://github.com/containerd/containerd/pull/6829))
    * **Migrate off from github.com/gogo/protobuf** ([#6841](https://github.com/containerd/containerd/pull/6841))
    * **ttrpc streaming** ([ttrpc#107](https://github.com/containerd/ttrpc/pull/107))
    * **Add unpack interface for client** ([#6749](https://github.com/containerd/containerd/pull/6749))
    * **Add collectible resources to metadata gc** ([#6804](https://github.com/containerd/containerd/pull/6804))
    * **Add version to shim protocol** ([#8177](https://github.com/containerd/containerd/pull/8177))
    
    ##### Configuration
    
    Existing CRI configurations will be supported until 2.0.
    Any functionality split out of CRI will have their configuration migrated to new plugins.
    Deprecated configuration versions and configurations for deprecated features will be removed in 2.0.
    
    ##### Deprecation
    
    The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include.
    
    * **Docker Schema 1 Image Deprecation** ([#6884](https://github.com/containerd/containerd/pull/6884))
    
    #### CRI Updates
    
    * **Fix CRI plugin to setup pod network after creating the sandbox container** ([#5904](https://github.com/containerd/containerd/pull/5904))
    * **Support image pull progress timeout** ([#6150](https://github.com/containerd/containerd/pull/6150))
    * **Add experimental support for runtime specific snapshotters** ([#6899](https://github.com/containerd/containerd/pull/6899))
    * **Pass all TOML runtime configuration options from CRI to the runtime** ([#7764](https://github.com/containerd/containerd/pull/7764))
    * **Support for user namespaces in stateless pods ([KEP-127](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/127-user-namespaces)) _(experimental)_** ([#7679](https://github.com/containerd/containerd/pull/7679))
    * **Add timeout option for drain exec io** ([#7832](https://github.com/containerd/containerd/pull/7832))
    * **Add network plugin metrics** ([#7858](https://github.com/containerd/containerd/pull/7858))
    * **CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23** ([#7863](https://github.com/containerd/containerd/pull/7863))
    
    #### Other
    
    * **Support shallow content copy by adding reader option to local content reader at** ([#7414](https://github.com/containerd/containerd/pull/7414))
    * **Add NoSameOwner option when unpacking tars** ([#7386](https://github.com/containerd/containerd/pull/7386))
    * **Add `FetcherByDigest` for fetching blobs without fetching a manifest** ([#7460](https://github.com/containerd/containerd/pull/7460))
    * **Update default seccomp profile to block socket calls to AF_VSOCK** ([#7510](https://github.com/containerd/containerd/pull/7510))
    * **Replace fork on mount logic with CLONE_FS** ([#7513](https://github.com/containerd/containerd/pull/7513))
    * **Add support for default registry host configuration** ([#7607](https://github.com/containerd/containerd/pull/7607))
    * **Use github.com/minio/sha256-simd for more efficient sha256 calculation** ([#7732](https://github.com/containerd/containerd/pull/7732))
    * **Make OCI options cross-platform** ([#7928](https://github.com/containerd/containerd/pull/7928))
    * **Update release builds to build from Ubuntu 20.04 with glibc 2.31** ([#8021](https://github.com/containerd/containerd/pull/8021))
    * **Use data field from OCI descriptor when provided for fetch** ([#8076](https://github.com/containerd/containerd/pull/8076))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Derek McGowan
    * Kazuyoshi Kato
    * Maksym Pavlenko
    * Wei Fu
    * Phil Estes
    * Akihiro Suda
    * Sebastiaan van Stijn
    * Samuel Karp
    * Krisztian Litkey
    * Mike Brown
    * Stefan Berger
    * Danny Canter
    * Daniel Canter
    * Austin Vazquez
    * yanggang
    * Iceber Gu
    * Ye Sijun
    * Ed Bartosh
    * Luca Comellini
    * Adam Korcz
    * Nashwan Azhari
    * Tony Fang
    * ruiwen-zhao
    * xin.li
    * Brian Goff
    * Gabriel Adrian Samfira
    * Paul "TBBle" Hampson
    * Henry Wang
    * Kevin Parsons
    * Rodrigo Campos
    * zounengren
    * Justin Terry
    * Paco Xu
    * Shengjing Zhu
    * Swagat Bora
    * wanglei
    * Gavin Inglis
    * Akhil Mohan
    * Zechun Chen
    * guodong
    * lengrongfu
    * Hsing-Yu (David) Chen
    * James Jenkins
    * James Sturtevant
    * Kirtana Ashok
    * Michael Crosby
    * Qiutong Song
    * Shiming Zhang
    * Vincent Batts
    * Antonio Ojea
    * Cameron Sparr
    * Casey Callendrello
    * Changwei Ge
    * Jian Zeng
    * Josh Seba
    * Junyu Liu
    * Kohei Tokunaga
    * Michael Zappa
    * Qasim Sarfraz
    * Tobias Klauser
    * dependabot[bot]
    * pigletfly
    * yaoyinnan
    * Abirdcfly
    * Aditi Sharma
    * Amit Barve
    * Bennett-White
    * Bjorn Neergaard
    * Cory Snider
    * Craig Ingram
    * Eng Zer Jun
    * Eric Lin
    * Ethan Lowman
    * Fabian Hoffmann
    * Jess
    * Jiongchi Yu
    * Jonny Stoten
    * Juan Hoyos
    * Kang.Zhang
    * Kay Yan
    * Markus Lehtonen
    * Mikko Ylinen
    * Mohit Sharma
    * Paul Cacheux
    * Paul S. Schweigert
    * Qian Zhang
    * Tõnis Tiigi
    * Yasin Turan
    * Zhang Tianyang
    * bin liu
    * helen
    * yulng
    * Aman Sharma
    * Anastassios Nanos
    * Andrew G. Morgan
    * Andrey Klimentyev
    * Aniruddha Basak
    * Anthony Nandaa
    * Antti Kervinen
    * Aviral Takkar
    * Baoshuo
    * Benjamin Elder
    * Benjamin Wang
    * Brandon Lum
    * Chao Dai
    * Chuanying Du
    * Claudiu Belu
    * Daniel Lenar
    * Danielle Lancashire
    * Dat Nguyen
    * Davanum Srinivas
    * Dave
    * David Leadbeater
    * David Porter
    * Dmitry Shurupov
    * Edgar Lee
    * Eric Ernst
    * Fahed Dorgaa
    * Gabriela Cervantes
    * Gijs Peskens
    * Hamza El-Saawy
    * Ikko Ashimine
    * Jeff Widman
    * Jeff Zvier
    * Jeremi Piotrowski
    * Jimmy Hsiao
    * Jin Dong
    * Jordan Karaze
    * Joseph Sheng
    * Joyce Brum
    * Jukka Rissanen
    * Justin Chadwell
    * Kate
    * Kathryn Baldauf
    * Kyle L Frisbie
    * LongtaoZhang
    * Manuel Alejandro de Brito Fontes
    * Marc Schwind
    * Mark Rossetti
    * Mark Zhang
    * Marvin Giessing
    * Mathis Michel
    * Merlin Ran
    * Nabeel Rana
    * Nathan
    * Nguyen Phan Huy
    * Nikita Rybak
    * Nobel Barakat
    * Oleg Atamanenko
    * Oleg Zhurakivskyy
    * Oliver Radwell
    * Quan Tian
    * Roy Yang
    * Samuel Ortiz
    * Serge Logvinov
    * Shane Jennings
    * Shaun Lawrie
    * Shinichi Morimoto
    * SilverSoldier
    * Sophie Liu
    * Su Fei
    * Taeho Nam
    * Takumasa Sakao
    * Tiger Kaovilai
    * Tom Godkin
    * Tomoya.Fujita
    * Xinlin Ma
    * Yakul Garg
    * Zhongming Chang
    * Zhuchen Wang
    * austinvazquez
    * cardy.tang
    * chaunceyjiang
    * dabaooline
    * guiyong.ou
    * huoqifeng
    * jianfei.zhang
    * liyuxuan.darfux
    * ningmingxiao
    * shi yixue
    * shuaichang
    * songjiang han
    * wen chen
    * wusong
    * xiaoyang zhu
    * yanghesong
    * yaozhenxiu
    * zhang he
    
    ### Changes
    <details><summary>1729 commits</summary>
    <p>
    
    * Add release notes for v1.7.0-rc.2 ([#8216](https://github.com/containerd/containerd/pull/8216))
    * go.mod: {hcsshim, containerd/*, go-restful/v3, mergo, klauspost/compress, opencontainers/*}@latest ([#8221](https://github.com/containerd/containerd/pull/8221))
    * Bump k8s.io deps ([#8131](https://github.com/containerd/containerd/pull/8131))
    * Update imgcrypt to v1.1.7 ([#8217](https://github.com/containerd/containerd/pull/8217))
    * Add ArgsEscaped support for CRI ([#8198](https://github.com/containerd/containerd/pull/8198))
    * Sandbox: Delete shim+shutdown sandbox on create failure ([#8204](https://github.com/containerd/containerd/pull/8204))
    * [Feature] Transfer tag image ([#8205](https://github.com/containerd/containerd/pull/8205))
    * docs: fix typo of shim.RunManager's function comment ([#8214](https://github.com/containerd/containerd/pull/8214))
    * [cri] Implement CRI Pod and Container stats for Windows ([#7099](https://github.com/containerd/containerd/pull/7099))
    * Sandbox: Fix/enhance error messages for Create ([#8203](https://github.com/containerd/containerd/pull/8203))
    * epoch: fix unit test when SOURCE_DATE_EPOCH is set ([#8202](https://github.com/containerd/containerd/pull/8202))
    * pkg/cri: add timeout to drain exec io ([#7832](https://github.com/containerd/containerd/pull/7832))
    * Prepare release notes for v1.7.0-rc.1 ([#8192](https://github.com/containerd/containerd/pull/8192))
    * Transfer export image ([#8191](https://github.com/containerd/containerd/pull/8191))
    * Create config struct to take user input ([#8193](https://github.com/containerd/containerd/pull/8193))
    * ctr/tasks: support remapped UID/GID ([#7864](https://github.com/containerd/containerd/pull/7864))
    * Add experimental section to RELEASES.md ([#8119](https://github.com/containerd/containerd/pull/8119))
    * Fix streaming manager deadlock on collection ([#8188](https://github.com/containerd/containerd/pull/8188))
    * Update CRI guide link ([#8190](https://github.com/containerd/containerd/pull/8190))
    * Add max shim version environment variable ([#8189](https://github.com/containerd/containerd/pull/8189))
    * Update README with location of security audits ([#8187](https://github.com/containerd/containerd/pull/8187))
    * docs: fix typos in historical/design/data-flow.md ([#8181](https://github.com/containerd/containerd/pull/8181))
    * Increase CI workflow timeout on Windows. ([#8183](https://github.com/containerd/containerd/pull/8183))
    * releases: mark 1.5 as EOL ([#8178](https://github.com/containerd/containerd/pull/8178))
    * Add version to shim protocol ([#8177](https://github.com/containerd/containerd/pull/8177))
    * Rework install-protobuf script and add new targets ([#8164](https://github.com/containerd/containerd/pull/8164))
    * bump go-cni to v1.1.9 ([#8173](https://github.com/containerd/containerd/pull/8173))
    * Treat sandboxes as root gc resources and scan referenced objects ([#8172](https://github.com/containerd/containerd/pull/8172))
    * update CDI version to v0.5.4 ([#8152](https://github.com/containerd/containerd/pull/8152))
    * Prepare release notes for v1.7.0-rc.0 ([#8162](https://github.com/containerd/containerd/pull/8162))
    * pkg/nri: pull in latest NRI, update NRI configuration. ([#8140](https://github.com/containerd/containerd/pull/8140))
    * [transfer]Config options followup ([#8165](https://github.com/containerd/containerd/pull/8165))
    * Add configuration options to local transfer service ([#8062](https://github.com/containerd/containerd/pull/8062))
    * docs: Show how to select GRPC for shims ([#8134](https://github.com/containerd/containerd/pull/8134))
    * CRI: remove duplicated snapshotters code ([#8154](https://github.com/containerd/containerd/pull/8154))
    * docs: add more comment to logging.LoggerFunc ([#8142](https://github.com/containerd/containerd/pull/8142))
    * contrib/apparmor: remove code related to apparmor_parser version ([#8069](https://github.com/containerd/containerd/pull/8069))
    * runtime/v2: Call onCloseWithShimLog for grpc shims ([#8120](https://github.com/containerd/containerd/pull/8120))
    * Add Fields type alias to log package ([#8143](https://github.com/containerd/containerd/pull/8143))
    * Migrate from k8s.gcr.io to registry.k8s.io ([#8125](https://github.com/containerd/containerd/pull/8125))
    * sandbox: start sandbox with options ([#8129](https://github.com/containerd/containerd/pull/8129))
    * Add macOS build note ([#8115](https://github.com/containerd/containerd/pull/8115))
    * Fix concurrent writes for UpdateContainerStats ([#8130](https://github.com/containerd/containerd/pull/8130))
    * dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8128](https://github.com/containerd/containerd/pull/8128))
    * runtime/v2: Log BootstrapParams ([#8124](https://github.com/containerd/containerd/pull/8124))
    * Prepare release notes for v1.7.0 beta.4 ([#8110](https://github.com/containerd/containerd/pull/8110))
    * Go 1.20.1 ([#8103](https://github.com/containerd/containerd/pull/8103))
    * ctr version: add args check ([#8096](https://github.com/containerd/containerd/pull/8096))
    * pkg/cri/config: fix Mirrors deprecation comment ([#8041](https://github.com/containerd/containerd/pull/8041))
    * docs: fix function names in fuzzing test documentation ([#8044](https://github.com/containerd/containerd/pull/8044))
    * fix: 'go routine' should be 'goroutine' ([#8051](https://github.com/containerd/containerd/pull/8051))
    * Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p)
    * Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2)
    * pkg/cri/sbserver: experimental NRI integration for CRI. ([#7954](https://github.com/containerd/containerd/pull/7954))
    * Clean up error strings that start with uppercase ([#8114](https://github.com/containerd/containerd/pull/8114))
    * Clean up repeated package import ([#8113](https://github.com/containerd/containerd/pull/8113))
    * Go 1.19.6 ([#8109](https://github.com/containerd/containerd/pull/8109))
    * Initial GRPC shims support ([#8052](https://github.com/containerd/containerd/pull/8052))
    * CRI: Pass sandbox annotations to _other platforms ([#8060](https://github.com/containerd/containerd/pull/8060))
    * cmd/ctr/commands/images: support usage subcommand ([#8105](https://github.com/containerd/containerd/pull/8105))
    * cni: pass in the cgroupPath capability argument ([#8067](https://github.com/containerd/containerd/pull/8067))
    * Add fallback for windows platforms without osversion ([#8101](https://github.com/containerd/containerd/pull/8101))
    * release: xx v1.2.1 ([#8104](https://github.com/containerd/containerd/pull/8104))
    * [transfer] update imagestore interface to support multiple references ([#7964](https://github.com/containerd/containerd/pull/7964))
    * [sandbox] Use options to pass PodSandboxConfig to shims ([#8100](https://github.com/containerd/containerd/pull/8100))
    * Send container events with nil PodSandboxStatus ([#8047](https://github.com/containerd/containerd/pull/8047))
    * test: add hostNetwork tests for both windows and linux ([#7984](https://github.com/containerd/containerd/pull/7984))
    * loadConfig pre-inspection in advance ([#8097](https://github.com/containerd/containerd/pull/8097))
    * contrib/apparmor: remove version-dependent rules ([#8068](https://github.com/containerd/containerd/pull/8068))
    * *: introduce wrapper pkgs for blockio and rdt ([#8066](https://github.com/containerd/containerd/pull/8066))
    * Extract CRI instrument into separate package ([#8093](https://github.com/containerd/containerd/pull/8093))
    * CRI: Mirror generic toml runtime config under server ([#8091](https://github.com/containerd/containerd/pull/8091))
    * go.mod: github.com/containerd/typeurl/v2 v2.1.0 ([#8092](https://github.com/containerd/containerd/pull/8092))
    * Revert `apparmor_parser` regression ([#8086](https://github.com/containerd/containerd/pull/8086))
    * [sandbox] refactor controller interface ([#7981](https://github.com/containerd/containerd/pull/7981))
    * btrfs: depend on kernel UAPI instead of libbtrfs ([#7933](https://github.com/containerd/containerd/pull/7933))
    * CI: skip some jobs when `repo != containerd/containerd` ([#8082](https://github.com/containerd/containerd/pull/8082))
    * chore: clean up repeated package import ([#8078](https://github.com/containerd/containerd/pull/8078))
    * fetch: Use data from descriptor when available. ([#8076](https://github.com/containerd/containerd/pull/8076))
    * chore: use http constants instead of string ([#8077](https://github.com/containerd/containerd/pull/8077))
    * Fix retry logic within devmapper device deactivation ([#8075](https://github.com/containerd/containerd/pull/8075))
    * Clean CI yaml ([#8071](https://github.com/containerd/containerd/pull/8071))
    * Add critest.exe in $PATH ([#8074](https://github.com/containerd/containerd/pull/8074))
    * keep the uppercase letter for flag info ([#7976](https://github.com/containerd/containerd/pull/7976))
    * go.mod: Bump hcsshim to v0.10.0-rc.5 ([#8049](https://github.com/containerd/containerd/pull/8049))
    * Fix sandbox exit monitor ([#8045](https://github.com/containerd/containerd/pull/8045))
    * Generate GRPC contracts for runtime APIs ([#7979](https://github.com/containerd/containerd/pull/7979))
    * Make argument validation of `mount.UnmountRecursive` compatible to `mount.UnmountAll` ([#8035](https://github.com/containerd/containerd/pull/8035))
    * Export remote snapshotter label handler ([#8036](https://github.com/containerd/containerd/pull/8036))
    * Adding support to run install hcsshim from local clone ([#7989](https://github.com/containerd/containerd/pull/7989))
    * go.mod: github.com/urfave/cli v1.22.12 ([#8040](https://github.com/containerd/containerd/pull/8040))
    * cmd/ctr/commands: clean up the func IntToInt32Array in utils.go ([#8039](https://github.com/containerd/containerd/pull/8039))
    * pkg/epoch: drop timezone ([#8037](https://github.com/containerd/containerd/pull/8037))
    * go.mod: update github.com/containerd/nri. ([#8034](https://github.com/containerd/containerd/pull/8034))
    * fix(docs): minor fix on the windows installation steps ([#8013](https://github.com/containerd/containerd/pull/8013))
    * Add integration test to opentelemetry tracing on image pull ([#7847](https://github.com/containerd/containerd/pull/7847))
    * Use mount.Target to specify subdirectory of rootfs mount ([#7840](https://github.com/containerd/containerd/pull/7840))
    * cri: mkdir /etc/cni with 0755, not 0700 ([#8020](https://github.com/containerd/containerd/pull/8020))
    * log/logtest: add `testcase` as debug field ([#8025](https://github.com/containerd/containerd/pull/8025))
    * go.mod: github.com/containerd/cgroups/v3 v3.0.0 ([#8027](https://github.com/containerd/containerd/pull/8027))
    * Update CNI plugins to 1.2.0 ([#7977](https://github.com/containerd/containerd/pull/7977))
    * go.mod: go.opentelemetry.io/otel v1.12.0 ([#8026](https://github.com/containerd/containerd/pull/8026))
    * Move PLEG events for pause container under podsandbox package ([#8007](https://github.com/containerd/containerd/pull/8007))
    * runtime docs: Clarify delete cwd behavior ([#8012](https://github.com/containerd/containerd/pull/8012))
    * release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles ([#8019](https://github.com/containerd/containerd/pull/8019))
    * RELEASES.md: update release status ([#8022](https://github.com/containerd/containerd/pull/8022))
    * deflake: TestContainerPids ([#8023](https://github.com/containerd/containerd/pull/8023))
    * release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) ([#8021](https://github.com/containerd/containerd/pull/8021))
    * Update the EOL date for 1.5 release ([#8015](https://github.com/containerd/containerd/pull/8015))
    * Prepare release notes for v1.7.0-beta.3 ([#8014](https://github.com/containerd/containerd/pull/8014))
    * Fix Memory Limit test ([#7959](https://github.com/containerd/containerd/pull/7959))
    * Reused package errdefs for not supported error ([#8005](https://github.com/containerd/containerd/pull/8005))
    * pkg/cri: optimize slice initialization ([#7994](https://github.com/containerd/containerd/pull/7994))
    * go.mod: update goresctrl to v0.3.0 ([#7987](https://github.com/containerd/containerd/pull/7987))
    * pushWriter: correctly propagate errors ([#7985](https://github.com/containerd/containerd/pull/7985))
    * CI: test release.yml on every PR ([#7968](https://github.com/containerd/containerd/pull/7968))
    * fix incorrect namespace of event when create/update namespace ([#7129](https://github.com/containerd/containerd/pull/7129))
    * Backport changes to sandboxed CRI ([#7973](https://github.com/containerd/containerd/pull/7973))
    * Fix syntax errors in the document ([#7970](https://github.com/containerd/containerd/pull/7970))
    * release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7969](https://github.com/containerd/containerd/pull/7969))
    * use local variable for rt when iterating collectors ([#7963](https://github.com/containerd/containerd/pull/7963))
    * Add basic spec and mounts for Darwin ([#7960](https://github.com/containerd/containerd/pull/7960))
    * go.mod: Bump hcsshim to v0.10.0-rc.4 ([#7810](https://github.com/containerd/containerd/pull/7810))
    * Use specs Platform instead of generated API ([#7958](https://github.com/containerd/containerd/pull/7958))
    * Make OCI options cross-platform ([#7928](https://github.com/containerd/containerd/pull/7928))
    * update to go1.19.5, go1.18.10 ([#7948](https://github.com/containerd/containerd/pull/7948))
    * fuzzing: improve archive fuzzer ([#7957](https://github.com/containerd/containerd/pull/7957))
    * shim: enable debug logging for delete ([#7943](https://github.com/containerd/containerd/pull/7943))
    * cri: Fix TestUpdateOCILinuxResource for host w/o swap controller ([#7946](https://github.com/containerd/containerd/pull/7946))
    * ctr/run: flags --detach and --rm cannot be specified together ([#7929](https://github.com/containerd/containerd/pull/7929))
    * Fix Flaky Windows CRI Integration test on TestContainerConsumedStats ([#7935](https://github.com/containerd/containerd/pull/7935))
    * Refactor snapshotters metastore transaction ([#7917](https://github.com/containerd/containerd/pull/7917))
    * mod: update github.com/pelletier/go-toml@v1.9.5 ([#7932](https://github.com/containerd/containerd/pull/7932))
    * archive: improve TestSourceDateEpoch ([#7927](https://github.com/containerd/containerd/pull/7927))
    * Add tracing plugin test ([#7883](https://github.com/containerd/containerd/pull/7883))
    * docs/content-flow: update the description of the content labels  ([#7925](https://github.com/containerd/containerd/pull/7925))
    * Add cleanup package for context management during cleanup ([#7861](https://github.com/containerd/containerd/pull/7861))
    * Fix race between stream registration and use ([#7886](https://github.com/containerd/containerd/pull/7886))
    * Prepare release notes for v1.7.0-beta.2 ([#7903](https://github.com/containerd/containerd/pull/7903))
    * Cirrus CI (Fedora 37, Rocky 8): enable cri-integration ([#7892](https://github.com/containerd/containerd/pull/7892))
    * contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages ([#7891](https://github.com/containerd/containerd/pull/7891))
    * docs: fix a typo in tracing documentation ([#7914](https://github.com/containerd/containerd/pull/7914))
    * CI: Pass GITHUB_TOKEN to containerd/project-checks ([#7913](https://github.com/containerd/containerd/pull/7913))
    * Enable dupword linter ([#7911](https://github.com/containerd/containerd/pull/7911))
    * ctr: Add platform flag to 'oci spec' command ([#7905](https://github.com/containerd/containerd/pull/7905))
    * Vagrantfile: fix disk resize error with VirtualBox ([#7907](https://github.com/containerd/containerd/pull/7907))
    * Vagrantfile: fix comments about SELinux ([#7908](https://github.com/containerd/containerd/pull/7908))
    * Use the const labels.LabelUncompressed ([#7906](https://github.com/containerd/containerd/pull/7906))
    * [sandbox] Add sandbox store plugin type ([#7850](https://github.com/containerd/containerd/pull/7850))
    * Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts ([#7893](https://github.com/containerd/containerd/pull/7893))
    * CRI: Comment cleanup/misc fixes ([#7904](https://github.com/containerd/containerd/pull/7904))
    * Move snapshot event publishing into metadata store ([#5674](https://github.com/containerd/containerd/pull/5674))
    * Vagrantfile: install-rootless-podman: remove `setenforce 0` ([#7887](https://github.com/containerd/containerd/pull/7887))
    * reused package errdefs for error ([#7894](https://github.com/containerd/containerd/pull/7894))
    * integration/images: switch away from Docker Hub to avoid rate limit ([#7888](https://github.com/containerd/containerd/pull/7888))
    * Validate userns container config is consistent with sandbox userns config ([#7882](https://github.com/containerd/containerd/pull/7882))
    * `ctr contents ls` sorts the labels of the content ([#7881](https://github.com/containerd/containerd/pull/7881))
    * chore: use `go fix` to cleanup old +build buildtag ([#7879](https://github.com/containerd/containerd/pull/7879))
    * cri: Shadow variables to avoid t.Parallel() issues ([#7880](https://github.com/containerd/containerd/pull/7880))
    * Add support for user namespaces in stateless pods (KEP-127) ([#7679](https://github.com/containerd/containerd/pull/7679))
    * Refactor metastore transaction ([#7529](https://github.com/containerd/containerd/pull/7529))
    * oci: appendOSMounts(): remove unused error, and move ([#7874](https://github.com/containerd/containerd/pull/7874))
    * add kube v1.26: remove v1alph2 cri support ([#7863](https://github.com/containerd/containerd/pull/7863))
    * make runc 1.1 for oss_fuzz_build.sh ([#7875](https://github.com/containerd/containerd/pull/7875))
    * CRI sbserver: Prevent server reuse after Shutdown ([#7872](https://github.com/containerd/containerd/pull/7872))
    * Fix incorrect defer usage and refactor judgement ([#7521](https://github.com/containerd/containerd/pull/7521))
    * oci: Add WithDomainname ([#7869](https://github.com/containerd/containerd/pull/7869))
    * Reused errdefs define error ([#7871](https://github.com/containerd/containerd/pull/7871))
    * fix `ctr tasks kill` does not remove cni network under windows ([#7866](https://github.com/containerd/containerd/pull/7866))
    * add network plugin metrics ([#7858](https://github.com/containerd/containerd/pull/7858))
    * Avoid using canceled context in unpacker cleanup ([#7859](https://github.com/containerd/containerd/pull/7859))
    * image/label: print more characters of label keys ([#7618](https://github.com/containerd/containerd/pull/7618))
    * prevent Server reuse after a Shutdown ([#7165](https://github.com/containerd/containerd/pull/7165))
    * Check containerd's readiness before calling critest ([#7851](https://github.com/containerd/containerd/pull/7851))
    * Fix grammatical errors in Readme ([#7837](https://github.com/containerd/containerd/pull/7837))
    * Fix cpu architecture detection issue on linux/arm ([#7636](https://github.com/containerd/containerd/pull/7636))
    * CRI: Fix no CNI info for pod sandbox on restart ([#7845](https://github.com/containerd/containerd/pull/7845))
    * Enable checkRename test ([#7081](https://github.com/containerd/containerd/pull/7081))
    * metastore: Add WithTransaction convenience method ([#7781](https://github.com/containerd/containerd/pull/7781))
    * Prevent a race condition in testHook ([#7831](https://github.com/containerd/containerd/pull/7831))
    * cri: fix `memory.memsw.limit_in_bytes: no such file or directory` ([#7836](https://github.com/containerd/containerd/pull/7836))
    * go.mod: update fuzz-headers and fuzz-build ([#7824](https://github.com/containerd/containerd/pull/7824))
    * Remove github.com/gogo/protobuf again ([#7825](https://github.com/containerd/containerd/pull/7825))
    * CRI: Add host networking helper ([#7814](https://github.com/containerd/containerd/pull/7814))
    * Support sandbox shutdown in shim runtimes ([#7792](https://github.com/containerd/containerd/pull/7792))
    * move up to CRI-TOOLS v1.26.0 ([#7818](https://github.com/containerd/containerd/pull/7818))
    * Minor fix when querying pod sandbox status ([#7812](https://github.com/containerd/containerd/pull/7812))
    * nil check to avoid panic on upgrade ([#7809](https://github.com/containerd/containerd/pull/7809))
    * Bump grpc to v1.51.0 ([#7709](https://github.com/containerd/containerd/pull/7709))
    * fatal error: concurrent map iteration and map write ([#7805](https://github.com/containerd/containerd/pull/7805))
    * Bump golangci-lint to v1.50.1 ([#7804](https://github.com/containerd/containerd/pull/7804))
    * cri: make swapping disabled with memory limit ([#7783](https://github.com/containerd/containerd/pull/7783))
    * add metrics for image pulling: error; in progress count; thoughput  ([#7313](https://github.com/containerd/containerd/pull/7313))
    * Prepare release notes for v1.7.0-beta.1 ([#7793](https://github.com/containerd/containerd/pull/7793))
    * support fetching containerd from non public GCS buckets ([#7771](https://github.com/containerd/containerd/pull/7771))
    * images: support specifying SourceDateEpoch via ctx ([#7651](https://github.com/containerd/containerd/pull/7651))
    * fuzzing: improve archive fuzzer ([#7718](https://github.com/containerd/containerd/pull/7718))
    * fix sdNotify func when debug level ([#7798](https://github.com/containerd/containerd/pull/7798))
    * Upgrade GitHub actions packages in release workflow ([#7794](https://github.com/containerd/containerd/pull/7794))
    * Enable GitHub Actions local Linux CI runs ([#7796](https://github.com/containerd/containerd/pull/7796))
    * integration: increase timeout in container_event_test.go ([#7791](https://github.com/containerd/containerd/pull/7791))
    * digest: use github.com/minio/sha256-simd ([#7732](https://github.com/containerd/containerd/pull/7732))
    * allow client to remove created tasks with PID 0 ([#7787](https://github.com/containerd/containerd/pull/7787))
    * Add container event support to containerd ([#7073](https://github.com/containerd/containerd/pull/7073))
    * docs: Authorizer.Authorize could return ErrUnexpectedStatus ([#7786](https://github.com/containerd/containerd/pull/7786))
    * fix: check for tmpfs when evaluating if userxattr is needed ([#7772](https://github.com/containerd/containerd/pull/7772))
    * Pass TOML configuration options for runtimes CRI is not aware of ([#7764](https://github.com/containerd/containerd/pull/7764))
    * Cleanup build constraints ([#7776](https://github.com/containerd/containerd/pull/7776))
    * There is no way to disable debug endpoint on Darwin ([#7775](https://github.com/containerd/containerd/pull/7775))
    * CI: Vagrant: pin rockylinux/8 to v5.0.0 ([#7777](https://github.com/containerd/containerd/pull/7777))
    * vendor: golang.org/x/net v0.4.0 ([#7774](https://github.com/containerd/containerd/pull/7774))
    * Fix context when waiting sandbox ([#7773](https://github.com/containerd/containerd/pull/7773))
    * Github Security Advisory [GHSA-2qjp-425j-52j9](https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9)
    * update to go1.19.4, go1.18.9 ([#7765](https://github.com/containerd/containerd/pull/7765))
    * Change PushContent to require only Provider ([#7763](https://github.com/containerd/containerd/pull/7763))
    * sbserver bug fixing ([#7768](https://github.com/containerd/containerd/pull/7768))
    * Add unit test to Opentelemetry tracing ([#7671](https://github.com/containerd/containerd/pull/7671))
    * remove some (aliases for) deprecated functions ([#7525](https://github.com/containerd/containerd/pull/7525))
    * Refactor ctr restore to allow for tty allocation ([#7673](https://github.com/containerd/containerd/pull/7673))
    * fix panic when containerd-stress density --count 0 ([#7748](https://github.com/containerd/containerd/pull/7748))
    * Unwrap proto errors in streaming client ([#7753](https://github.com/containerd/containerd/pull/7753))
    * Fix process_vm_* syscall names in seccomp ([#7755](https://github.com/containerd/containerd/pull/7755))
    * upgrade the ops.md output for current 1.7 version . ([#7747](https://github.com/containerd/containerd/pull/7747))
    * docs: Add extra security instructions ([#7743](https://github.com/containerd/containerd/pull/7743))
    * go.mod: re-vendor NRI from the official repo. ([#7744](https://github.com/containerd/containerd/pull/7744))
    * [Sandbox API] CRI status cleanup ([#7731](https://github.com/containerd/containerd/pull/7731))
    * Transfer service ([#7320](https://github.com/containerd/containerd/pull/7320))
    * NRI: add support for NRI with extended scope. ([#6019](https://github.com/containerd/containerd/pull/6019))
    * archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ([#7710](https://github.com/containerd/containerd/pull/7710))
    * Fix order of operations when setting lease labels ([#7702](https://github.com/containerd/containerd/pull/7702))
    * Add ctr image prune command ([#7730](https://github.com/containerd/containerd/pull/7730))
    * Check for nullptr before dereferencing ([#7708](https://github.com/containerd/containerd/pull/7708))
    * use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers ([#7736](https://github.com/containerd/containerd/pull/7736))
    * introspection: expose the daemon's PID and PIDNS ([#7694](https://github.com/containerd/containerd/pull/7694))
    * reference/docker: synchronize fork with upstream distribution/distribution ([#7635](https://github.com/containerd/containerd/pull/7635))
    * go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions ([#7721](https://github.com/containerd/containerd/pull/7721))
    * Add ptrace readby and tracedby to default AppArmor profile ([#7714](https://github.com/containerd/containerd/pull/7714))
    * Fix sandbox API when calling sandboxed shims ([#7684](https://github.com/containerd/containerd/pull/7684))
    * make status more readable and update easy. ([#7669](https://github.com/containerd/containerd/pull/7669))
    * integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 ([#7720](https://github.com/containerd/containerd/pull/7720))
    * Resolve warnings in Windows GitHub Actions periodic workflows ([#7706](https://github.com/containerd/containerd/pull/7706))
    * Sandbox API: implement Controller.Status for SandboxAPI ([#7470](https://github.com/containerd/containerd/pull/7470))
    * [port #5904 to sbserver] Setup pod network after creating the sandbox container ([#7426](https://github.com/containerd/containerd/pull/7426))
    * fix for OSS-Fuzz infra changes ([#7677](https://github.com/containerd/containerd/pull/7677))
    * runtime/v2/shim: clean up the use of containerdBinary ([#7499](https://github.com/containerd/containerd/pull/7499))
    * Add process_vm read and write calls to default seccomp profile ([#7693](https://github.com/containerd/containerd/pull/7693))
    * Resolve Scorecards GitHub Actions workflow warnings ([#7707](https://github.com/containerd/containerd/pull/7707))
    * cri: add pod uid annotation ([#7697](https://github.com/containerd/containerd/pull/7697))
    * Missed out `platform interface` when reused the conn for Client. ([#7699](https://github.com/containerd/containerd/pull/7699))
    * overlayfs: remove duplicated tx rollback ([#7700](https://github.com/containerd/containerd/pull/7700))
    * go.mod: update some dependencies ([#7704](https://github.com/containerd/containerd/pull/7704))
    * update github.com/cpuguy83/go-md2man/v2 to v2.0.2 ([#7705](https://github.com/containerd/containerd/pull/7705))
    * Fsnotify bump and change code ([#7703](https://github.com/containerd/containerd/pull/7703))
    * fix build containerd in centos9 ([#7683](https://github.com/containerd/containerd/pull/7683))
    * Bump urfave-cli to v1.22.10 ([#7701](https://github.com/containerd/containerd/pull/7701))
    * can set up the network serially by CNI plugins ([#7685](https://github.com/containerd/containerd/pull/7685))
    * Update cri-api dependency to v0.26.0-beta.0 ([#7656](https://github.com/containerd/containerd/pull/7656))
    * overlay: Remove unused method param ([#7696](https://github.com/containerd/containerd/pull/7696))
    * CI: update Fedora to 37 ([#7691](https://github.com/containerd/containerd/pull/7691))
    * tx rollback when GetInfo return error ([#7678](https://github.com/containerd/containerd/pull/7678))
    * Upgrade github.com/containerd/cgroups from v1 to v3 ([#7601](https://github.com/containerd/containerd/pull/7601))
    * Remove OpenTelementry imports from remotes/docker package ([#7675](https://github.com/containerd/containerd/pull/7675))
    * Expose Done and Err in Shutdown service ([#7686](https://github.com/containerd/containerd/pull/7686))
    * gotestsum match go version 1.19 ([#7688](https://github.com/containerd/containerd/pull/7688))
    * complement sub-command note for containerd-main ([#7670](https://github.com/containerd/containerd/pull/7670))
    * keep the lower case letter for flag info ([#7668](https://github.com/containerd/containerd/pull/7668))
    * bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a ([#7666](https://github.com/containerd/containerd/pull/7666))
    * Fix broken link for CRI plugin in docs ([#7667](https://github.com/containerd/containerd/pull/7667))
    * add option to resolve symlinks in WithLinuxDevice ([#7523](https://github.com/containerd/containerd/pull/7523))
    * Bump k8s.io deps to v0.25.4 ([#7663](https://github.com/containerd/containerd/pull/7663))
    * Release: add static binaries ([#7659](https://github.com/containerd/containerd/pull/7659))
    * Bump OpenTelemetry contrib to v0.36.4 ([#7662](https://github.com/containerd/containerd/pull/7662))
    * Fix slice append error (`spec.Linux.Resources.HugepageLimits`) ([#7661](https://github.com/containerd/containerd/pull/7661))
    * Bump OpenTelemetry to v1.11.1 ([#7660](https://github.com/containerd/containerd/pull/7660))
    * feature: add gc scheduler metrics collection count ([#5263](https://github.com/containerd/containerd/pull/5263))
    * Add `--debug` args to all subcommands of `ctr pprof` ([#7629](https://github.com/containerd/containerd/pull/7629))
    * Add a thin wrapper around otel Span object ([#7655](https://github.com/containerd/containerd/pull/7655))
    * Bump grpc to v1.50.1 ([#7643](https://github.com/containerd/containerd/pull/7643))
    * replace strings.Split(N) for strings.Cut() or alternatives ([#7631](https://github.com/containerd/containerd/pull/7631))
    * add oci.WithCPURT ([#7642](https://github.com/containerd/containerd/pull/7642))
    * Sandbox API: Add a new mode config for sandbox controller impls ([#7590](https://github.com/containerd/containerd/pull/7590))
    * fuzzing: bump go-fuzz-headers ([#7625](https://github.com/containerd/containerd/pull/7625))
    * Bump k8s.io deps to v0.25.3 ([#7637](https://github.com/containerd/containerd/pull/7637))
    * Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex ([#7641](https://github.com/containerd/containerd/pull/7641))
    * Extra documentation for content interfaces ([#7640](https://github.com/containerd/containerd/pull/7640))
    * Fix shim socket permissions on Darwin ([#7638](https://github.com/containerd/containerd/pull/7638))
    * s390x: build and package s390x bin in release assets ([#7614](https://github.com/containerd/containerd/pull/7614))
    * Replace mount fork hack with CLONE_FS ([#7513](https://github.com/containerd/containerd/pull/7513))
    * remotes: add `FetcherByDigest` for fetching blobs without foreknown descriptors (useful for general-purpose CAS) ([#7460](https://github.com/containerd/containerd/pull/7460))
    * Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 ([#7403](https://github.com/containerd/containerd/pull/7403))
    * Support default hosts.toml configuration ([#7607](https://github.com/containerd/containerd/pull/7607))
    * Add tracing spans in CRI image service and pull.go ([#7453](https://github.com/containerd/containerd/pull/7453))
    * Fix missing closed fifo ([#7604](https://github.com/containerd/containerd/pull/7604))
    * fix comments ([#7624](https://github.com/containerd/containerd/pull/7624))
    * docs: add additional info in backport process ([#7626](https://github.com/containerd/containerd/pull/7626))
    * go.mod: golang.org/x/*: use tagged versions ([#7621](https://github.com/containerd/containerd/pull/7621))
    * Bump go version to 1.19.3 ([#7620](https://github.com/containerd/containerd/pull/7620))
    * ctr export strictly matching ([#7615](https://github.com/containerd/containerd/pull/7615))
    * Fix ctr crash when pulling with --http-dump and --http-trace simultaneously ([#7617](https://github.com/containerd/containerd/pull/7617))
    * Harden GITHUB_TOKEN permissions for OSSF Scorecard ([#7599](https://github.com/containerd/containerd/pull/7599))
    * overlayutils: Add fastpath for userxattr check ([#7611](https://github.com/containerd/containerd/pull/7611))
    * Add sequence diagram for shim runtime v2 ([#7606](https://github.com/containerd/containerd/pull/7606))
    * Sandbox API: Move remote impls to /sandbox/proxy ([#7600](https://github.com/containerd/containerd/pull/7600))
    * fuzzing: improve archive fuzzer ([#7588](https://github.com/containerd/containerd/pull/7588))
    * Retry client connection in  waitForStart ([#7537](https://github.com/containerd/containerd/pull/7537))
    * Add Workflow for running critest with Hyper-V Containers on Windows. ([#7025](https://github.com/containerd/containerd/pull/7025))
    * Add release notes for v1.7.0-beta.0 ([#7575](https://github.com/containerd/containerd/pull/7575))
    * Cleanup sandbox interfaces ([#7576](https://github.com/containerd/containerd/pull/7576))
    * Update GitHub actions release workflow set output ([#7581](https://github.com/containerd/containerd/pull/7581))
    * Fix LogURI generation-related tests on Windows. ([#7569](https://github.com/containerd/containerd/pull/7569))
    * maintenance: Remove WithWindowsNetworkNamespace from pkg/cri ([#7577](https://github.com/containerd/containerd/pull/7577))
    * CRI: implement Controller.Delete for SandboxAPI ([#7457](https://github.com/containerd/containerd/pull/7457))
    * Configure CDI registry only on start ([#7419](https://github.com/containerd/containerd/pull/7419))
    * update codeql-action to v2 ([#7568](https://github.com/containerd/containerd/pull/7568))
    * Add logging related metrics to Containerd CRI plugin ([#7546](https://github.com/containerd/containerd/pull/7546))
    * sys: optimize and refactor MkdirAllWithACL() ([#7531](https://github.com/containerd/containerd/pull/7531))
    * fix install cni script ([#7484](https://github.com/containerd/containerd/pull/7484))
    * Update 1.5 release support timeframe ([#7560](https://github.com/containerd/containerd/pull/7560))
    * bump go-fuzz-headers ([#7503](https://github.com/containerd/containerd/pull/7503))
    * Add long term stable release branches ([#7454](https://github.com/containerd/containerd/pull/7454))
    * fix pusher concurrent close channel ([#7473](https://github.com/containerd/containerd/pull/7473))
    * Make tests on GitHub less noisy ([#7530](https://github.com/containerd/containerd/pull/7530))
    * containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded ([#7541](https://github.com/containerd/containerd/pull/7541))
    * Update required Go version in BUILDING.md ([#7544](https://github.com/containerd/containerd/pull/7544))
    * go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) ([#7522](https://github.com/containerd/containerd/pull/7522))
    * Use `go env` to determine GOPATH in Makefile. ([#7542](https://github.com/containerd/containerd/pull/7542))
    * clean-up "nolint" comments, remove unused ones, update golangci-lint ([#7349](https://github.com/containerd/containerd/pull/7349))
    * Don't unmount on Darwin when deleting bundle ([#7534](https://github.com/containerd/containerd/pull/7534))
    * Add timeouts to all CI jobs ([#7538](https://github.com/containerd/containerd/pull/7538))
    * Vagrantfile: explicitly specify rsync as the shared folder driver ([#7539](https://github.com/containerd/containerd/pull/7539))
    * sys: remove unused IsAbs() (windows) ([#7527](https://github.com/containerd/containerd/pull/7527))
    * cri: PodSandboxStatus should tolerate missing task ([#7535](https://github.com/containerd/containerd/pull/7535))
    * CI: update GHA instances from Ubuntu 18.04 to 20.04 ([#7489](https://github.com/containerd/containerd/pull/7489))
    * fix the --no-pivot flag being ignored by `ctr tasks start` ([#7519](https://github.com/containerd/containerd/pull/7519))
    * Update the default seccomp to block socket calls to AF_VSOCK ([#7510](https://github.com/containerd/containerd/pull/7510))
    * cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() ([#7511](https://github.com/containerd/containerd/pull/7511))
    * Stats() shouldn't assume s.container is non-nil ([#7517](https://github.com/containerd/containerd/pull/7517))
    * Move up actions versions to prep for NodeJS 12 deprecation ([#7516](https://github.com/containerd/containerd/pull/7516))
    * cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() ([#7512](https://github.com/containerd/containerd/pull/7512))
    * Updates oci image config to support upstream ArgsEscaped ([#7483](https://github.com/containerd/containerd/pull/7483))
    * cmd/containerd: replace deprecated windows.IsAnInteractiveSession() ([#7497](https://github.com/containerd/containerd/pull/7497))
    * Update container with sandbox metadata after NetNS is created ([#7481](https://github.com/containerd/containerd/pull/7481))
    * archive: add WithSourceDateEpoch() for whiteouts ([#7478](https://github.com/containerd/containerd/pull/7478))
    * TestTaskResize must use a terminal ([#7492](https://github.com/containerd/containerd/pull/7492))
    * diff/apply.readCounter: check negative size ([#7494](https://github.com/containerd/containerd/pull/7494))
    * Add new ctr option for discarding unpacked layers ([#7425](https://github.com/containerd/containerd/pull/7425))
    * archive: windows: chtimes(): remove redundant conversion ([#7491](https://github.com/containerd/containerd/pull/7491))
    * archive: validate digests before use ([#7488](https://github.com/containerd/containerd/pull/7488))
    * vendor: github.com/opencontainers/selinux v1.10.2 ([#7482](https://github.com/containerd/containerd/pull/7482))
    * fuzzing: create structured tar bytes in archive fuzzer ([#7477](https://github.com/containerd/containerd/pull/7477))
    * Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 ([#7474](https://github.com/containerd/containerd/pull/7474))
    * use raw link to containerd.service config ([#7463](https://github.com/containerd/containerd/pull/7463))
    * cri doc: Update kata containers reference ([#7466](https://github.com/containerd/containerd/pull/7466))
    * Setup pod network after creating the sandbox container ([#5904](https://github.com/containerd/containerd/pull/5904))
    * Swap to net.ErrClosed checks for services ([#7446](https://github.com/containerd/containerd/pull/7446))
    * go.mod: Bump go-winio to v0.6.0 ([#7443](https://github.com/containerd/containerd/pull/7443))
    * fix retry when writer is reset on push ([#6995](https://github.com/containerd/containerd/pull/6995))
    * CI: Output a summary using GITHUB_SUMMARY ([#7192](https://github.com/containerd/containerd/pull/7192))
    * Fix missing close ([#7430](https://github.com/containerd/containerd/pull/7430))
    * Add test flag for skipping shim cgroup test ([#7424](https://github.com/containerd/containerd/pull/7424))
    * Refactor CRI fuzzers ([#7405](https://github.com/containerd/containerd/pull/7405))
    * Fix LogURIGenerator on Windows ([#7351](https://github.com/containerd/containerd/pull/7351))
    * Set grpc code for unimplemented cri-api methods ([#7417](https://github.com/containerd/containerd/pull/7417))
    * Add reader option to local content reader at ([#7414](https://github.com/containerd/containerd/pull/7414))
    * Sandbox API: implement Controller.Wait and Controller.Stop ([#7401](https://github.com/containerd/containerd/pull/7401))
    * remove stray .zuul.yaml ([#7416](https://github.com/containerd/containerd/pull/7416))
    * reference CDI configuration details ([#7408](https://github.com/containerd/containerd/pull/7408))
    * cri-integration: propagate ENABLE_CRI_SANDBOXES ([#7413](https://github.com/containerd/containerd/pull/7413))
    * Enable OpenSSF Scorecard Github Action ([#7404](https://github.com/containerd/containerd/pull/7404))
    * Add ext2 fs support to devmapper snapshotter ([#7402](https://github.com/containerd/containerd/pull/7402))
    * Fuzzing: Instrument with new sanitizers ([#7396](https://github.com/containerd/containerd/pull/7396))
    * Upgrade fuzzing-related packages to reduce dependencies ([#7397](https://github.com/containerd/containerd/pull/7397))
    * remotes/docker/config: Skipping TLS verification for localhost ([#7393](https://github.com/containerd/containerd/pull/7393))
    * Replace github.com/emicklei/go-restful package, versions <2.16.0 ([#7395](https://github.com/containerd/containerd/pull/7395))
    * Add NoSameOwner option when unpacking tars ([#7386](https://github.com/containerd/containerd/pull/7386))
    * ctr: add privileged-without-host-devices for run command ([#7328](https://github.com/containerd/containerd/pull/7328))
    * chore: matching the casing of other flags for ctr's pull command ([#7341](https://github.com/containerd/containerd/pull/7341))
    * windows: Add runhcs-wcow-hypervisor runtimeclass to the default config ([#6901](https://github.com/containerd/containerd/pull/6901))
    * Fix missing close ([#7370](https://github.com/containerd/containerd/pull/7370))
    * CRI: update cdi version to v0.5.1 ([#7374](https://github.com/containerd/containerd/pull/7374))
    * Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 ([#7372](https://github.com/containerd/containerd/pull/7372))
    * vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c ([#7373](https://github.com/containerd/containerd/pull/7373))
    * Remove unused variable from images action ([#7371](https://github.com/containerd/containerd/pull/7371))
    * feature: use client default namespace ([#7291](https://github.com/containerd/containerd/pull/7291))
    * integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment ([#7367](https://github.com/containerd/containerd/pull/7367))
    * feature: upgrade registry.k8s.io/pause version ([#7359](https://github.com/containerd/containerd/pull/7359))
    * metrics/cgroups/v1: Remove unused event parameter ([#7361](https://github.com/containerd/containerd/pull/7361))
    * .zuul: remove the zuul because it is offline ([#7369](https://github.com/containerd/containerd/pull/7369))
    * Update golangci-lint timeout to match config ([#7356](https://github.com/containerd/containerd/pull/7356))
    * delete redundent import alias and and type conversion ([#7345](https://github.com/containerd/containerd/pull/7345))
    * Make checkContainerTimestamps less strict on Windows ([#7350](https://github.com/containerd/containerd/pull/7350))
    * Make oss-fuzz mandatory ([#7346](https://github.com/containerd/containerd/pull/7346))
    * Add kubernetes v1.25 supported version as v1.24 ([#7326](https://github.com/containerd/containerd/pull/7326))
    * sys: move ForceRemoveAll to integration/client ([#7335](https://github.com/containerd/containerd/pull/7335))
    * chore: remove duplicate word in comments ([#7338](https://github.com/containerd/containerd/pull/7338))
    * Use ioctl helpers from x/sys/unix ([#7342](https://github.com/containerd/containerd/pull/7342))
    * archive: replace tarName() with filepath.ToSlash() ([#7344](https://github.com/containerd/containerd/pull/7344))
    * mount: remove unused ErrNotImplementOnWindows ([#7339](https://github.com/containerd/containerd/pull/7339))
    * replace sys Sequential funcs with moby/sys/sequential ([#7334](https://github.com/containerd/containerd/pull/7334))
    * Clarify containerd 1.5.0+ for k8s 1.20,1.21 ([#7324](https://github.com/containerd/containerd/pull/7324))
    * update runc binary to v1.1.4 ([#7315](https://github.com/containerd/containerd/pull/7315))
    * Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 ([#7325](https://github.com/containerd/containerd/pull/7325))
    * Update k8s.io/cri-api to v0.25.0 ([#7287](https://github.com/containerd/containerd/pull/7287))
    * script/setup: handle cnidir with SUDO ([#7322](https://github.com/containerd/containerd/pull/7322))
    * ContainerStatus to return container resources ([#6517](https://github.com/containerd/containerd/pull/6517))
    * migrate from k8s.gcr.io to registry.k8s.io ([#7038](https://github.com/containerd/containerd/pull/7038))
    * Do not rename test files on-the-fly to share functions ([#7309](https://github.com/containerd/containerd/pull/7309))
    * ctr import: strictly match platform ([#6906](https://github.com/containerd/containerd/pull/6906))
    * Revert "Downgrade MinGW to version 10.2.0" ([#7308](https://github.com/containerd/containerd/pull/7308))
    * Follow up #7254 (Switch to Go 1.19) ([#7286](https://github.com/containerd/containerd/pull/7286))
    * Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer ([#7304](https://github.com/containerd/containerd/pull/7304))
    * Adding support of CAP_BPF and CAP_PERFMON ([#7301](https://github.com/containerd/containerd/pull/7301))
    * go.mod: Bump hcsshim to v0.10.0-rc.1 ([#7284](https://github.com/containerd/containerd/pull/7284))
    * Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset ([#7306](https://github.com/containerd/containerd/pull/7306))
    * ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 ([#7293](https://github.com/containerd/containerd/pull/7293))
    * Runtime cleanup (Shim manager and task service) ([#7280](https://github.com/containerd/containerd/pull/7280))
    * containerd-stress: add support for running through CRI ([#6931](https://github.com/containerd/containerd/pull/6931))
    * Switch to Go 1.19 ([#7254](https://github.com/containerd/containerd/pull/7254))
    * Vagrantfile: dump containerd log after critest ([#7265](https://github.com/containerd/containerd/pull/7265))
    * oci: skip checking group id for WithAppendAdditionalGroups ([#7257](https://github.com/containerd/containerd/pull/7257))
    * release workflow: increase timeout to 30 minutes & remove Go setup action ([#7259](https://github.com/containerd/containerd/pull/7259))
    * release: rollback Ubuntu to 18.04 (except for riscv64) ([#7258](https://github.com/containerd/containerd/pull/7258))
    * Initial sandbox API CRI integration (implement Controller.Start) ([#7228](https://github.com/containerd/containerd/pull/7228))
    * Use environment variable to specify Go version on CI ([#7251](https://github.com/containerd/containerd/pull/7251))
    * Update golang to 1.18.5, 1.17.13 ([#7243](https://github.com/containerd/containerd/pull/7243))
    * Change os.Stderr reassign for Windows service ([#7023](https://github.com/containerd/containerd/pull/7023))
    * script/setup: fix protobuf for aarch64 ([#7237](https://github.com/containerd/containerd/pull/7237))
    * Fix cleanup in critest ([#7232](https://github.com/containerd/containerd/pull/7232))
    * fix: support simultaneous create diff for same parent snapshot ([#7204](https://github.com/containerd/containerd/pull/7204))
    * Windows HostProcess container CRI stats test ([#7223](https://github.com/containerd/containerd/pull/7223))
    * Regenerate protos with updated protoc-gen-go ([#7226](https://github.com/containerd/containerd/pull/7226))
    * test: error strings should not be capitalized ([#7195](https://github.com/containerd/containerd/pull/7195))
    * Add extra context to error when push unauthorized ([#7220](https://github.com/containerd/containerd/pull/7220))
    * replace with selinux label ([#7207](https://github.com/containerd/containerd/pull/7207))
    * Use `httputil.DumpRequestOut` for dumping client req ([#7221](https://github.com/containerd/containerd/pull/7221))
    * Fix CRI image pull timeout test for ppc64le ([#7215](https://github.com/containerd/containerd/pull/7215))
    * test: introduce failpoint control to runc-shimv2 and cni ([#7069](https://github.com/containerd/containerd/pull/7069))
    * chore: bump macos runner version ([#7206](https://github.com/containerd/containerd/pull/7206))
    * Use image lists form integration/client tests ([#7210](https://github.com/containerd/containerd/pull/7210))
    * go.mod: Bump hcsshim to v0.9.4 ([#7212](https://github.com/containerd/containerd/pull/7212))
    * Drop deprecated `ioutil` ([#7203](https://github.com/containerd/containerd/pull/7203))
    * Make getServicesOpts a helper ([#7201](https://github.com/containerd/containerd/pull/7201))
    * adds an env var commented out for sandboxed mode ([#7183](https://github.com/containerd/containerd/pull/7183))
    * cri_stats: handle missing cpu stats ([#7198](https://github.com/containerd/containerd/pull/7198))
    * using ContextDialer instead ([#7189](https://github.com/containerd/containerd/pull/7189))
    * test: Add ability to switch between  cgroupv1 or cgroupv2 for node e2e ([#7173](https://github.com/containerd/containerd/pull/7173))
    * code cleanup ([#7182](https://github.com/containerd/containerd/pull/7182))
    * Update k8s.io/cri-api to v0.25.0-alpha2 ([#7114](https://github.com/containerd/containerd/pull/7114))
    * Refactor usageNanoCores be to used for all OSes ([#7186](https://github.com/containerd/containerd/pull/7186))
    * adds support for using env file for systemd boot ([#7191](https://github.com/containerd/containerd/pull/7191))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#7185](https://github.com/containerd/containerd/pull/7185))
    * ctr: support --user for run/create ([#7145](https://github.com/containerd/containerd/pull/7145))
    * docs: Fix sample config.toml syntax ([#7174](https://github.com/containerd/containerd/pull/7174))
    * seccomp: seccomp: add syscalls related to PKU in default policy ([#7163](https://github.com/containerd/containerd/pull/7163))
    * Update and align golangci-lint version ([#7168](https://github.com/containerd/containerd/pull/7168))
    * adds a comment explaining how to disable experimental sbserver ([#7169](https://github.com/containerd/containerd/pull/7169))
    * ci: workaround Cirrus CI's INVALID_ARGUMENT ([#7177](https://github.com/containerd/containerd/pull/7177))
    * Update install-protobuf script  to install protobuf on Darwin ([#7153](https://github.com/containerd/containerd/pull/7153))
    * Fork CRI server for Sandbox API integration work ([#7164](https://github.com/containerd/containerd/pull/7164))
    * seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE ([#7167](https://github.com/containerd/containerd/pull/7167))
    * cri doc: fix formatting for CDI options ([#7158](https://github.com/containerd/containerd/pull/7158))
    * update golang to 1.18.4, 1.17.12 ([#7159](https://github.com/containerd/containerd/pull/7159))
    * Fix out of date comments for CRI store packages ([#7152](https://github.com/containerd/containerd/pull/7152))
    * update some devmapper docs ([#7124](https://github.com/containerd/containerd/pull/7124))
    * seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#7149](https://github.com/containerd/containerd/pull/7149))
    * Copy fuzzers from github.com/cncf/cncf-fuzzing ([#7123](https://github.com/containerd/containerd/pull/7123))
    * fix can't edit object by using ctr content edit command ([#6847](https://github.com/containerd/containerd/pull/6847))
    * integration/client: fix typo in export_test.go ([#7130](https://github.com/containerd/containerd/pull/7130))
    * Fix WWW-Authenticate parsing ([#7126](https://github.com/containerd/containerd/pull/7126))
    * LCOW differ return ErrNotImplemented for wrong mount type ([#7112](https://github.com/containerd/containerd/pull/7112))
    * Update go-restful/v3 to latest release ([#7117](https://github.com/containerd/containerd/pull/7117))
    * pkg/cri: use marshal wrapper for version convertor ([#7108](https://github.com/containerd/containerd/pull/7108))
    * Remove hacks around contrib/fuzz ([#7087](https://github.com/containerd/containerd/pull/7087))
    * Fix missing closed HTTP Body ([#7107](https://github.com/containerd/containerd/pull/7107))
    * Cleanup metadata tests ([#7105](https://github.com/containerd/containerd/pull/7105))
    * Downgrade MinGW to version 10.2.0 ([#7106](https://github.com/containerd/containerd/pull/7106))
    * ctr: Fix `ctr c create` fails to parse arguments ([#7098](https://github.com/containerd/containerd/pull/7098))
    * Fix Documentation Issue ([#7103](https://github.com/containerd/containerd/pull/7103))
    * refactor: reduce duplicate code ([#7100](https://github.com/containerd/containerd/pull/7100))
    * make xattr EPERM non-fatal in createTarFile ([#7094](https://github.com/containerd/containerd/pull/7094))
    * Move metadata plugin registration to seperate package ([#7096](https://github.com/containerd/containerd/pull/7096))
    * fix: missing sudo for devmapper doc ([#7092](https://github.com/containerd/containerd/pull/7092))
    * Ensure Windows Periodic workflow errors out while still uploading results. ([#7085](https://github.com/containerd/containerd/pull/7085))
    * Add snapshotter key to snapshot events ([#7084](https://github.com/containerd/containerd/pull/7084))
    * add WithAdditionalGIDs test ([#7072](https://github.com/containerd/containerd/pull/7072))
    * Forward ctr snapshotter flags on Windows ([#7086](https://github.com/containerd/containerd/pull/7086))
    * add WithAppendAdditionalGroups helper ([#7070](https://github.com/containerd/containerd/pull/7070))
    * Make CI Fuzz less noisy ([#7065](https://github.com/containerd/containerd/pull/7065))
    * ctr: add --hostname flag to create, run ([#7082](https://github.com/containerd/containerd/pull/7082))
    * improve content-flow ([#7077](https://github.com/containerd/containerd/pull/7077))
    * Make CI Fuzz optional ([#7067](https://github.com/containerd/containerd/pull/7067))
    * Use Go 1.18's testing.F on simple fuzzers ([#7056](https://github.com/containerd/containerd/pull/7056))
    * Downgrade MinGW in Windows setup scripts. ([#7062](https://github.com/containerd/containerd/pull/7062))
    * Make test path a constant ([#7057](https://github.com/containerd/containerd/pull/7057))
    * Run fuzzers in CI ([#7052](https://github.com/containerd/containerd/pull/7052))
    * CRI: Improve the /dev/shm mount options in Sandbox. ([#6913](https://github.com/containerd/containerd/pull/6913))
    * fix:userattr-unmount unexpected timeout ([#7008](https://github.com/containerd/containerd/pull/7008))
    * Port (some) unit tests to FreeBSD ([#7042](https://github.com/containerd/containerd/pull/7042))
    * Bump Golang and MinGW versions in Windows setup script. ([#6888](https://github.com/containerd/containerd/pull/6888))
    * Windows snapshotter touch ups and new functionality ([#6918](https://github.com/containerd/containerd/pull/6918))
    * Improve naming consistencies in comments in snapshotter.go ([#7032](https://github.com/containerd/containerd/pull/7032))
    * Make building static binaries simpler ([#7022](https://github.com/containerd/containerd/pull/7022))
    * Allow CRI on Darwin ([#7033](https://github.com/containerd/containerd/pull/7033))
    * update runc binary to v1.1.3 ([#7034](https://github.com/containerd/containerd/pull/7034))
    * Linux containers on FreeBSD ([#7000](https://github.com/containerd/containerd/pull/7000))
    * go.mod: github.com/moby/sys/mountinfo v0.6.2 ([#7026](https://github.com/containerd/containerd/pull/7026))
    * fix minor spelling mistake: lablel -> label ([#7031](https://github.com/containerd/containerd/pull/7031))
    * go.mod: github.com/containerd/cgroups v1.0.4 ([#7027](https://github.com/containerd/containerd/pull/7027))
    * go.mod: github.com/containerd/continuity v0.3.0 ([#7028](https://github.com/containerd/containerd/pull/7028))
    * Correct spelling mistake ("sanbdox" to "sandbox") ([#7029](https://github.com/containerd/containerd/pull/7029))
    * Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf)
    * Bump grpc to v1.47.0 ([#7018](https://github.com/containerd/containerd/pull/7018))
    * Bump k8s.io deps to v0.24.1 ([#7017](https://github.com/containerd/containerd/pull/7017))
    * Support runtime level snapshotter for issue 6657 ([#6899](https://github.com/containerd/containerd/pull/6899))
    * update golang to 1.18.3, 1.17.11 ([#7012](https://github.com/containerd/containerd/pull/7012))
    * Fix containerd-stress duration flag ([#7004](https://github.com/containerd/containerd/pull/7004))
    * update go-cni/for cni update fixing plugins that don't respond with version ([#7009](https://github.com/containerd/containerd/pull/7009))
    * Add validations for Windows HostProcess CRI configs ([#6996](https://github.com/containerd/containerd/pull/6996))
    * Move docker reference logic to reference/docker package ([#7007](https://github.com/containerd/containerd/pull/7007))
    * promote pause image to 3.7 (sync with kube v1.24) ([#7003](https://github.com/containerd/containerd/pull/7003))
    * Makefile: use urfave_cli_no_docs for binaries that don't need it ([#6998](https://github.com/containerd/containerd/pull/6998))
    * CRI: cleanup cri/store package ([#6993](https://github.com/containerd/containerd/pull/6993))
    * Use t.Run for /pkg/cri tests ([#7001](https://github.com/containerd/containerd/pull/7001))
    * vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script ([#6997](https://github.com/containerd/containerd/pull/6997))
    * sandbox: replace github.com/pkg/errors with native errors ([#6937](https://github.com/containerd/containerd/pull/6937))
    * build: Fix references to check-protos target in Makefile ([#6983](https://github.com/containerd/containerd/pull/6983))
    * ctr: fix label args used in NewContainer ([#6954](https://github.com/containerd/containerd/pull/6954))
    * ctr sandbox: handle sandbox config ([#6959](https://github.com/containerd/containerd/pull/6959))
    * Fix broken oss-fuzz build ([#6975](https://github.com/containerd/containerd/pull/6975))
    * archive: add human-readable hint to Lchown error ([#6982](https://github.com/containerd/containerd/pull/6982))
    * Fix tx closed error when upperdirlabel specified ([#6978](https://github.com/containerd/containerd/pull/6978))
    * config: improve config v1 deprecation message ([#6972](https://github.com/containerd/containerd/pull/6972))
    * Fix Windows install powershell script ([#6969](https://github.com/containerd/containerd/pull/6969))
    * fix comments on metadata schema and update namespace doc ([#6955](https://github.com/containerd/containerd/pull/6955))
    * adjust format in comment ([#6956](https://github.com/containerd/containerd/pull/6956))
    * Restore decompression benchmarks ([#6957](https://github.com/containerd/containerd/pull/6957))
    * cmd/ctr/commands/content: fix typo in fetch command usage ([#6960](https://github.com/containerd/containerd/pull/6960))
    * fix some confusing typos ([#6950](https://github.com/containerd/containerd/pull/6950))
    * update doc url about k8s ([#6952](https://github.com/containerd/containerd/pull/6952))
    * Separate windows-2019 and windows-2022 test results ([#6946](https://github.com/containerd/containerd/pull/6946))
    * shim: fix debug flag not working ([#6910](https://github.com/containerd/containerd/pull/6910))
    * Reverts removal of parallel run from critest ([#6938](https://github.com/containerd/containerd/pull/6938))
    * Bump OpenTelemetry dependencies ([#6932](https://github.com/containerd/containerd/pull/6932))
    * update runc binary and vendor to v1.1.2 ([#6934](https://github.com/containerd/containerd/pull/6934))
    * oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ([#6923](https://github.com/containerd/containerd/pull/6923))
    * update golang to 1.18.2, 1.17.10 ([#6926](https://github.com/containerd/containerd/pull/6926))
    * CI: update Fedora to 36 ([#6925](https://github.com/containerd/containerd/pull/6925))
    * Add `Wait` to `binaryProcessor` ([#6916](https://github.com/containerd/containerd/pull/6916))
    * go.mod: Bump k8s deps to v0.24.0 ([#6905](https://github.com/containerd/containerd/pull/6905))
    * (Vagrant CI) Enable git commands due to git CVE fix ([#6915](https://github.com/containerd/containerd/pull/6915))
    * Pass explicit JUnit outfile to critest.exe in Windows workflow. ([#6912](https://github.com/containerd/containerd/pull/6912))
    * Update critools to v1.24 ([#6894](https://github.com/containerd/containerd/pull/6894))
    * devmapper docs: small fixes ([#6904](https://github.com/containerd/containerd/pull/6904))
    * move report dir option to end of line for vagrant cri tests ([#6900](https://github.com/containerd/containerd/pull/6900))
    * Update Kubernetes version matrix in release docs ([#6892](https://github.com/containerd/containerd/pull/6892))
    * Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy ([#6889](https://github.com/containerd/containerd/pull/6889))
    * containerd 1.6.4 k8s 1.24 readme announce ([#6890](https://github.com/containerd/containerd/pull/6890))
    * Cleanup leaked shim process ([#6866](https://github.com/containerd/containerd/pull/6866))
    * Add collectible resources to metadata gc ([#6804](https://github.com/containerd/containerd/pull/6804))
    * Update k8 docurl in file ([#6881](https://github.com/containerd/containerd/pull/6881))
    * Support RISC-V 64 ([#6882](https://github.com/containerd/containerd/pull/6882))
    * docs: minor fixes in snapshots.Snapshotter comments ([#6885](https://github.com/containerd/containerd/pull/6885))
    * Officially deprecate Schema 1 ([#6884](https://github.com/containerd/containerd/pull/6884))
    * Make Cirrus CI tests more stable ([#6880](https://github.com/containerd/containerd/pull/6880))
    * docs: Adding windows installation steps to getting-started.md ([#6875](https://github.com/containerd/containerd/pull/6875))
    * Add ctr support for CPUMax and CPUShares ([#6809](https://github.com/containerd/containerd/pull/6809))
    * Support for cgroups blockio ([#5490](https://github.com/containerd/containerd/pull/5490))
    * Fix comment for metadata/db.go ([#6871](https://github.com/containerd/containerd/pull/6871))
    * Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies ([#6867](https://github.com/containerd/containerd/pull/6867))
    * Update go-cni to v1.1.5 ([#6868](https://github.com/containerd/containerd/pull/6868))
    * Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#6865](https://github.com/containerd/containerd/pull/6865))
    * Upgrade google.golang.org/grpc and google.golang.org/protobuf ([#6864](https://github.com/containerd/containerd/pull/6864))
    * Don't use "uname -a" as Cirrus CI's cache key ([#6863](https://github.com/containerd/containerd/pull/6863))
    * remove duplicate ([#6856](https://github.com/containerd/containerd/pull/6856))
    * Create ppc64le release ([#6858](https://github.com/containerd/containerd/pull/6858))
    * Move Vagrant-based tests from GitHub Actions to Cirrus CI ([#6854](https://github.com/containerd/containerd/pull/6854))
    * feature: support image pull progress timeout ([#6150](https://github.com/containerd/containerd/pull/6150))
    * Add unpack interface to be used by client ([#6749](https://github.com/containerd/containerd/pull/6749))
    * Fix undefined error in use of errors package ([#6855](https://github.com/containerd/containerd/pull/6855))
    * Migrate off from github.com/gogo/protobuf ([#6841](https://github.com/containerd/containerd/pull/6841))
    * images/image.go: typo ([#6851](https://github.com/containerd/containerd/pull/6851))
    * Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices ([#5686](https://github.com/containerd/containerd/pull/5686))
    * integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage ([#6180](https://github.com/containerd/containerd/pull/6180))
    * fix incorrect syntax in comments ([#6845](https://github.com/containerd/containerd/pull/6845))
    * cri: close fifos when container is deleted ([#6842](https://github.com/containerd/containerd/pull/6842))
    * diff: hide types.Any from clients ([#6832](https://github.com/containerd/containerd/pull/6832))
    * Add Container-Optimized OS into Adopters ([#6838](https://github.com/containerd/containerd/pull/6838))
    * Prepare for google.golang.org/protobuf ([#6835](https://github.com/containerd/containerd/pull/6835))
    * fix the restart desired to running when task not found ([#6833](https://github.com/containerd/containerd/pull/6833))
    * Remove all gogoproto extensions ([#6829](https://github.com/containerd/containerd/pull/6829))
    * fix nil pointer panic for monitor ([#6830](https://github.com/containerd/containerd/pull/6830))
    * remotes/docker: log registry URLs as info instead of debug ([#5681](https://github.com/containerd/containerd/pull/5681))
    * Rename runtime/v2/task to api/runtime ([#6827](https://github.com/containerd/containerd/pull/6827))
    * Fix protoc-gen-go-fieldpath ([#6828](https://github.com/containerd/containerd/pull/6828))
    * Consolidate gogo/protobuf dependencies under our own protobuf package ([#6826](https://github.com/containerd/containerd/pull/6826))
    * Add restart policy for enhanced restart manager ([#6744](https://github.com/containerd/containerd/pull/6744))
    * Remove gogoproto.stdtime ([#6821](https://github.com/containerd/containerd/pull/6821))
    * Set timeout when collecting metrics from shim's Stat ([#6781](https://github.com/containerd/containerd/pull/6781))
    * Fuzz filter package with Go 1.18's fuzzer ([#6819](https://github.com/containerd/containerd/pull/6819))
    * allow ptrace(2) by default for kernel >= 4.8 ([#6810](https://github.com/containerd/containerd/pull/6810))
    * Build bin/gen-manpages instead of using "go run" ([#6820](https://github.com/containerd/containerd/pull/6820))
    * update golang to 1.18.1, 1.17.9 ([#6822](https://github.com/containerd/containerd/pull/6822))
    * Sandbox API ([#6703](https://github.com/containerd/containerd/pull/6703))
    * Move lease manager plugin to separate package ([#6811](https://github.com/containerd/containerd/pull/6811))
    * fix pool_device_test ([#6807](https://github.com/containerd/containerd/pull/6807))
    * check for duplicate nspath possibilities ([#6806](https://github.com/containerd/containerd/pull/6806))
    * Do not append []string{""} to command to preserve Docker compatibility ([#6805](https://github.com/containerd/containerd/pull/6805))
    * tracing: fix panic on startup when configured ([#6789](https://github.com/containerd/containerd/pull/6789))
    * Optimize loading performance for cri recover ([#6680](https://github.com/containerd/containerd/pull/6680))
    * Change architecture path in README.md ([#6798](https://github.com/containerd/containerd/pull/6798))
    * make consistent for checkpoint path ([#6792](https://github.com/containerd/containerd/pull/6792))
    * metrics/cgroups: fix deadlock issue in Add during Collect ([#6788](https://github.com/containerd/containerd/pull/6788))
    * ADOPTERS: Update AKS Info ([#6794](https://github.com/containerd/containerd/pull/6794))
    * Pin upload-cloud-storage action to 0.8.0 in Windows workflow. ([#6790](https://github.com/containerd/containerd/pull/6790))
    * docs: add Deckhouse to the list of adopters ([#6785](https://github.com/containerd/containerd/pull/6785))
    * Add `docs/snapshotters`; simplify `docs/cri` ([#6778](https://github.com/containerd/containerd/pull/6778))
    * Turn paths from cmdline into absolute paths ([#6672](https://github.com/containerd/containerd/pull/6672))
    * CRI: add support for CDI device injection ([#6654](https://github.com/containerd/containerd/pull/6654))
    * Disable writing freelist to make the file robust against data corruptions ([#6761](https://github.com/containerd/containerd/pull/6761))
    * mv design docs/historical/design ([#6777](https://github.com/containerd/containerd/pull/6777))
    * CRI: improve image pulling performance ([#6702](https://github.com/containerd/containerd/pull/6702))
    * docs: remove runtime v1; migrate config v1 to v2 ([#6776](https://github.com/containerd/containerd/pull/6776))
    * Skip flaky test on Windows ([#6779](https://github.com/containerd/containerd/pull/6779))
    * docs/getting-started.md: typo ([#6775](https://github.com/containerd/containerd/pull/6775))
    * Add no_tracing tag ([#6750](https://github.com/containerd/containerd/pull/6750))
    * Move historical docs to `docs/historical` ([#6754](https://github.com/containerd/containerd/pull/6754))
    * Run go mod tidy in integration tests ([#6768](https://github.com/containerd/containerd/pull/6768))
    * go.mod: move indirects, and update integration go.mod to 1.18 ([#6765](https://github.com/containerd/containerd/pull/6765))
    * Drop gotest.tools ([#6762](https://github.com/containerd/containerd/pull/6762))
    * Use t.Setenv instead of os.Setenv ([#6760](https://github.com/containerd/containerd/pull/6760))
    * Upgrade to Go 1.18 ([#6709](https://github.com/containerd/containerd/pull/6709))
    * Adding multi-arch support for the configure.sh script ([#6751](https://github.com/containerd/containerd/pull/6751))
    * docs/getting-started.md: massive update ([#6758](https://github.com/containerd/containerd/pull/6758))
    * Remove unmaintained contrib/linuxkit ([#6755](https://github.com/containerd/containerd/pull/6755))
    * [Windows CI] Address some timeout issues ([#6757](https://github.com/containerd/containerd/pull/6757))
    * BUILDING.md: update supported Go versions ([#6756](https://github.com/containerd/containerd/pull/6756))
    * update runc to 1.1.1 ([#6753](https://github.com/containerd/containerd/pull/6753))
    * CI: add Rocky Linux 8 ([#6747](https://github.com/containerd/containerd/pull/6747))
    * CI: bump up crun to 1.4.4 ([#6748](https://github.com/containerd/containerd/pull/6748))
    * added make help for cri integration ([#6743](https://github.com/containerd/containerd/pull/6743))
    * Update README.md cncf landscape url ([#6740](https://github.com/containerd/containerd/pull/6740))
    * Fix error message in TestNewBinaryIO ([#6738](https://github.com/containerd/containerd/pull/6738))
    * Use typeurl.Any instead of github.com/gogo/protobuf/types.Any ([#6706](https://github.com/containerd/containerd/pull/6706))
    * Use cgroups.AddProc() for cgroups v1 ([#5738](https://github.com/containerd/containerd/pull/5738))
    * fix: ctr images mount with snapshotter option can't get snapshotter ([#6713](https://github.com/containerd/containerd/pull/6713))
    * cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6323](https://github.com/containerd/containerd/pull/6323))
    * moving up to go-cni v1.1.4 ([#6721](https://github.com/containerd/containerd/pull/6721))
    * native: fix deadlock from leaving transactions open ([#6722](https://github.com/containerd/containerd/pull/6722))
    * go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 ([#5390](https://github.com/containerd/containerd/pull/5390))
    * Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c)
    * runtime: deprecate runc --criu / -criu-path option ([#6496](https://github.com/containerd/containerd/pull/6496))
    * Bug fix for mount path handling ([#6651](https://github.com/containerd/containerd/pull/6651))
    * Upgrade containerd/imgcrypt and opencontainers/image-spec ([#6711](https://github.com/containerd/containerd/pull/6711))
    * Remove enumvalue_customname, goproto_enum_prefix and enum_customname ([#6708](https://github.com/containerd/containerd/pull/6708))
    * Remove gogoproto.customtype ([#6699](https://github.com/containerd/containerd/pull/6699))
    * Skip tty critest testcase on Windows Server 2022 ([#6698](https://github.com/containerd/containerd/pull/6698))
    * Build with Go 1.18 ([#6605](https://github.com/containerd/containerd/pull/6605))
    * Update prometheus client vendor ([#6690](https://github.com/containerd/containerd/pull/6690))
    * vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd ([#6687](https://github.com/containerd/containerd/pull/6687))
    * Make the temp mount as ready only in container WithVolumes ([#6593](https://github.com/containerd/containerd/pull/6593))
    * fix: `ctr run --cni` get failed ([#6670](https://github.com/containerd/containerd/pull/6670))
    * test: use `T.TempDir` to create temporary test directory ([#6681](https://github.com/containerd/containerd/pull/6681))
    * Make OpenLab's CI jobs blocking ([#6679](https://github.com/containerd/containerd/pull/6679))
    * document log level and format ([#6683](https://github.com/containerd/containerd/pull/6683))
    * Add shared content label to namespaces ([#6660](https://github.com/containerd/containerd/pull/6660))
    * Add protoc-gen-go-fieldpath ([#6562](https://github.com/containerd/containerd/pull/6562))
    * Enable gosec linter for golangci-lint ([#6669](https://github.com/containerd/containerd/pull/6669))
    * Make mkfs.xfs available on OpenLab's CI environment ([#6668](https://github.com/containerd/containerd/pull/6668))
    * ctr: improve error relative shim path error msg ([#6519](https://github.com/containerd/containerd/pull/6519))
    * typo fixes under cmd. ([#6674](https://github.com/containerd/containerd/pull/6674))
    * Handle CRI Device.HostPath on Windows ([#6618](https://github.com/containerd/containerd/pull/6618))
    * Upgrade golangci-lint and its GitHub Action ([#6666](https://github.com/containerd/containerd/pull/6666))
    * Don't build a second copy of containerd-shim-runhcs-v1.exe ([#6661](https://github.com/containerd/containerd/pull/6661))
    * Update TestNormalize to only test Windows platform ([#6569](https://github.com/containerd/containerd/pull/6569))
    * Fix link in getting-started.md ([#6663](https://github.com/containerd/containerd/pull/6663))
    * Fuzzing: refactor metadata fuzzers ([#6423](https://github.com/containerd/containerd/pull/6423))
    * Two xfs file systems with same UUID can not be mounted on the same sy… ([#6650](https://github.com/containerd/containerd/pull/6650))
    * [Windows] Fix deadline exceeded in daemon restart ([#6635](https://github.com/containerd/containerd/pull/6635))
    * Use temp file for export/import test ([#6658](https://github.com/containerd/containerd/pull/6658))
    * strip path-info from `-v` (version) output, and implement -v flag for containerd-shim  ([#6495](https://github.com/containerd/containerd/pull/6495))
    * Improve unexpected response error handling in resolver ([#6617](https://github.com/containerd/containerd/pull/6617))
    * Use the latest tag for azure images ([#6601](https://github.com/containerd/containerd/pull/6601))
    * Run CRI integration tests in GitHub Actions (Windows) ([#6626](https://github.com/containerd/containerd/pull/6626))
    * cri: fix integration test on cgroupsv2 system ([#6595](https://github.com/containerd/containerd/pull/6595))
    * Use version 2 configuration format in docs/PLUGINS.md ([#6613](https://github.com/containerd/containerd/pull/6613))
    * update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#6619](https://github.com/containerd/containerd/pull/6619))
    * Update status of 1.4 release ([#6614](https://github.com/containerd/containerd/pull/6614))
    * Update TestContainerSymlinkVolumes to use windows path ([#6568](https://github.com/containerd/containerd/pull/6568))
    * Add --user support for ctr run Windows ([#6603](https://github.com/containerd/containerd/pull/6603))
    * Update releases ([#6608](https://github.com/containerd/containerd/pull/6608))
    * Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7)
    * Adds support for Windows ArgsEscaped images ([#6479](https://github.com/containerd/containerd/pull/6479))
    * Do not use weak import ([#6558](https://github.com/containerd/containerd/pull/6558))
    * cri: relax test for system without hugetlb ([#6596](https://github.com/containerd/containerd/pull/6596))
    * Use containerd/protobuild instead of stevvooe/protobuild ([#6578](https://github.com/containerd/containerd/pull/6578))
    * integration: remove duplicated util pkg ([#6597](https://github.com/containerd/containerd/pull/6597))
    * go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 ([#6591](https://github.com/containerd/containerd/pull/6591))
    * Update Go version recommendation in getting started ([#6585](https://github.com/containerd/containerd/pull/6585))
    * go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 ([#6337](https://github.com/containerd/containerd/pull/6337))
    * fix Implicit memory aliasing in for loop ([#6331](https://github.com/containerd/containerd/pull/6331))
    * Fix build with gccgo ([#6579](https://github.com/containerd/containerd/pull/6579))
    * Replace golang.org/x/net/context with std library ([#6580](https://github.com/containerd/containerd/pull/6580))
    * containerd-shim-runc-v1: return init pid when clean dead shim ([#6571](https://github.com/containerd/containerd/pull/6571))
    * Use Windows matcher when on Windows platform in all code paths ([#6491](https://github.com/containerd/containerd/pull/6491))
    * containerd-shim-runc-v2: return init pid when clean dead shim ([#6452](https://github.com/containerd/containerd/pull/6452))
    * [Windows][Integration] Enable TestRestartMonitor ([#6515](https://github.com/containerd/containerd/pull/6515))
    * go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 ([#6554](https://github.com/containerd/containerd/pull/6554))
    </p>
    </details>
    
    ### Changes from containerd/cgroups
    <details><summary>49 commits</summary>
    <p>
    
    * Upgrade GitHub actions CI workflow ([#249](https://github.com/containerd/cgroups/pull/249))
    * Upgrade Go compiler to 1.19 ([#248](https://github.com/containerd/cgroups/pull/248))
    * Don't use ioutil ([#246](https://github.com/containerd/cgroups/pull/246))
    * Check that cgroup is empty before deleting ([#228](https://github.com/containerd/cgroups/pull/228))
    * Support cgroup.AddThread in cgroupv2 manager ([#243](https://github.com/containerd/cgroups/pull/243))
    * Support to handle more than 4 fields in cpuacct.stat ([#231](https://github.com/containerd/cgroups/pull/231))
    * typo shoulld -> should ([#236](https://github.com/containerd/cgroups/pull/236))
    * Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 ([#241](https://github.com/containerd/cgroups/pull/241))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#240](https://github.com/containerd/cgroups/pull/240))
    * .github: use ubuntu-22.04 to test cgroupv2 ([#237](https://github.com/containerd/cgroups/pull/237))
    * feat(v2): Support cgroup.MoveTo in cgroupv2 manager ([#235](https://github.com/containerd/cgroups/pull/235))
    * Update README to include usage examples of v2 client ([#233](https://github.com/containerd/cgroups/pull/233))
    * ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path ([#232](https://github.com/containerd/cgroups/pull/232))
    * Bump go version to 1.17 in go.mod ([#230](https://github.com/containerd/cgroups/pull/230))
    * make cmd/ a separate module (as it's only for testing) ([#226](https://github.com/containerd/cgroups/pull/226))
    * feat(v2): add Update method for v2.Manager ([#225](https://github.com/containerd/cgroups/pull/225))
    * feat: add memory.min param ([#211](https://github.com/containerd/cgroups/pull/211))
    * modified the dereference null pointer value. ([#218](https://github.com/containerd/cgroups/pull/218))
    * update readme for cpu cgroup demo ([#217](https://github.com/containerd/cgroups/pull/217))
    * Fix systemd full path ([#221](https://github.com/containerd/cgroups/pull/221))
    * Update Go version and fedora base ([#223](https://github.com/containerd/cgroups/pull/223))
    * Fix panic in NewSystemd on nil values ([#219](https://github.com/containerd/cgroups/pull/219))
    </p>
    </details>
    
    ### Changes from containerd/continuity
    <details><summary>28 commits</summary>
    <p>
    
    * go.mod: update dependencies (take 2) ([#204](https://github.com/containerd/continuity/pull/204))
    * Revert "go.mod: update dependencies" ([#205](https://github.com/containerd/continuity/pull/205))
    * Various small fix-ups ([#202](https://github.com/containerd/continuity/pull/202))
    * update authors and mailmap ([#201](https://github.com/containerd/continuity/pull/201))
    * move cmd/continuity to its own go module ([#200](https://github.com/containerd/continuity/pull/200))
    * CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir)  ([#198](https://github.com/containerd/continuity/pull/198))
    * fs.CopyDir: support sockets and pipes ([#197](https://github.com/containerd/continuity/pull/197))
    * Fix wrapping errors ([#196](https://github.com/containerd/continuity/pull/196))
    </p>
    </details>
    
    ### Changes from containerd/fifo
    <details><summary>26 commits</summary>
    <p>
    
    * Update Go vers, x/sys vendor ([#51](https://github.com/containerd/fifo/pull/51))
    * chore: cleanup old buildtags by `go fix` ([#49](https://github.com/containerd/fifo/pull/49))
    * Return nil when openFifo returns nil ([#47](https://github.com/containerd/fifo/pull/47))
    * Resolve golangci-lint-action package warnings ([#48](https://github.com/containerd/fifo/pull/48))
    * Remove references to io/ioutil package ([#45](https://github.com/containerd/fifo/pull/45))
    * Update GitHub actions CI workflow ([#46](https://github.com/containerd/fifo/pull/46))
    * go.mod: github.com/stretchr/testify v1.8.0, golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8, go 1.18 ([#44](https://github.com/containerd/fifo/pull/44))
    * fifo_test: Add 2 tests for closing after reading ([#42](https://github.com/containerd/fifo/pull/42))
    * replace pkg/errors ([#41](https://github.com/containerd/fifo/pull/41))
    * fifo.Close(): prevent possible panic if fifo is nil ([#32](https://github.com/containerd/fifo/pull/32))
    * Update branch name in GitHub Actions ([#40](https://github.com/containerd/fifo/pull/40))
    </p>
    </details>
    
    ### Changes from containerd/go-cni
    <details><summary>38 commits</summary>
    <p>
    
    * Add Go 1.20 support ([#111](https://github.com/containerd/go-cni/pull/111))
    * opts: add cgroupPath capability ([#110](https://github.com/containerd/go-cni/pull/110))
    * go.mod: github.com/containernetworking/cni v1.1.2 ([#109](https://github.com/containerd/go-cni/pull/109))
    * Remove references to io/ioutil package ([#106](https://github.com/containerd/go-cni/pull/106))
    * Update golangci/golangci-lint package ([#108](https://github.com/containerd/go-cni/pull/108))
    * Update GitHub actions CI workflow ([#107](https://github.com/containerd/go-cni/pull/107))
    * Add support for Windows default conf paths ([#103](https://github.com/containerd/go-cni/pull/103))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#104](https://github.com/containerd/go-cni/pull/104))
    * go.mod: update libcni to v1.1.1 ([#101](https://github.com/containerd/go-cni/pull/101))
    * add in some serial setup tests; a little make cleanup ([#100](https://github.com/containerd/go-cni/pull/100))
    * Re-introduce serial network setup ([#99](https://github.com/containerd/go-cni/pull/99))
    * bump github.com/containernetworking/cni v1.1.0 ([#98](https://github.com/containerd/go-cni/pull/98))
    * Revert "Update loopback version to support check" ([#96](https://github.com/containerd/go-cni/pull/96))
    * Use revive instead of golint ([#92](https://github.com/containerd/go-cni/pull/92))
    * Bump go verion to 1.17 ([#91](https://github.com/containerd/go-cni/pull/91))
    * moving up to latest CNI plugin release ([#90](https://github.com/containerd/go-cni/pull/90))
    * Fix Loopback Version ([#88](https://github.com/containerd/go-cni/pull/88))
    * Update comment for capabilities ([#89](https://github.com/containerd/go-cni/pull/89))
    * Add integration test for linux and update go version from 1.16 to 1.17 ([#84](https://github.com/containerd/go-cni/pull/84))
    </p>
    </details>
    
    ### Changes from containerd/imgcrypt
    <details><summary>49 commits</summary>
    <p>
    
    * CHANGES: Updated CHANGES document for 1.1.7 release ([#97](https://github.com/containerd/imgcrypt/pull/97))
    * Update to ocicrypt 1.1.6 and add support for zstd type of compressed layers  ([#96](https://github.com/containerd/imgcrypt/pull/96))
    * build(deps): Update to containerd 1.6.8 ([#92](https://github.com/containerd/imgcrypt/pull/92))
    * tests: Add -traditional to OpenSSL command line when OSSL v3 is used ([#90](https://github.com/containerd/imgcrypt/pull/90))
    * chore: fix readme typo ([#87](https://github.com/containerd/imgcrypt/pull/87))
    * Update to min golang 1.18 ([#88](https://github.com/containerd/imgcrypt/pull/88))
    * CHANGES: Updated CHANGES document for 1.1.6 release ([#85](https://github.com/containerd/imgcrypt/pull/85))
    * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.6 ([#83](https://github.com/containerd/imgcrypt/pull/83))
    * CI: Upgrade to golangci-lint v1.46.2 ([#84](https://github.com/containerd/imgcrypt/pull/84))
    * CICD: Rename master branch to main ([#79](https://github.com/containerd/imgcrypt/pull/79))
    * Rename any to pbAny ([#78](https://github.com/containerd/imgcrypt/pull/78))
    * Use reflect to support diff.ApplyConfig with/without gogo's types.Any ([#75](https://github.com/containerd/imgcrypt/pull/75))
    * Upgrade golangci-lint-action and golangci-lint ([#76](https://github.com/containerd/imgcrypt/pull/76))
    * CHANGES: Updated CHANGES document for 1.1.4 release ([#74](https://github.com/containerd/imgcrypt/pull/74))
    * Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#73](https://github.com/containerd/imgcrypt/pull/73))
    * images: prepare for typeurl.Any ([#72](https://github.com/containerd/imgcrypt/pull/72))
    * Bump ocicrypt to 1.1.3 ([#71](https://github.com/containerd/imgcrypt/pull/71))
    * Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#67](https://github.com/containerd/imgcrypt/pull/67))
    </p>
    </details>
    
    ### Changes from containerd/nri
    <details><summary>56 commits</summary>
    <p>
    
    * Add Go 1.20 support to CI ([#30](https://github.com/containerd/nri/pull/30))
    * Add CodeQL Security scan workflow ([#31](https://github.com/containerd/nri/pull/31))
    * fixes: sort final adjusted mount slice. ([#29](https://github.com/containerd/nri/pull/29))
    * fixes: fix resource adjustment to properly ignore unset/unadjusted fields. ([#28](https://github.com/containerd/nri/pull/28))
    * adaptation: fix mount and device adjustment. ([#27](https://github.com/containerd/nri/pull/27))
    * Make plugin timeouts configurable, adjust default socket path. ([#26](https://github.com/containerd/nri/pull/26))
    * pkg/adaptation: eliminate configuration file. ([#24](https://github.com/containerd/nri/pull/24))
    * stub: fix a potential plugin crash. ([#25](https://github.com/containerd/nri/pull/25))
    * adaptation: fix a panic for unsolicited updates. ([#23](https://github.com/containerd/nri/pull/23))
    * pkg/adaptaton: log errors with %v not %w. ([#22](https://github.com/containerd/nri/pull/22))
    * chore: cleanup old buildtags by `go fix` ([#21](https://github.com/containerd/nri/pull/21))
    * add back project info ([#20](https://github.com/containerd/nri/pull/20))
    * Extend scope to enable common pluggable runtime extensions. ([#16](https://github.com/containerd/nri/pull/16))
    * Update GitHub actions CI workflow ([#19](https://github.com/containerd/nri/pull/19))
    * replace pkg/errors ([#17](https://github.com/containerd/nri/pull/17))
    * Update the examples in README.md ([#15](https://github.com/containerd/nri/pull/15))
    * Rename branch from master to main ([#12](https://github.com/containerd/nri/pull/12))
    * Update to containerd 1.5.1 ([#11](https://github.com/containerd/nri/pull/11))
    </p>
    </details>
    
    ### Changes from containerd/ttrpc
    <details><summary>56 commits</summary>
    <p>
    
    * Make checkServerShutdown verbose ([#128](https://github.com/containerd/ttrpc/pull/128))
    * server: Fix connection issues when receiving ECONNRESET ([#123](https://github.com/containerd/ttrpc/pull/123))
    * README: protobuild is in containerd org now ([#125](https://github.com/containerd/ttrpc/pull/125))
    * stream: fix the map of streams leak ([#120](https://github.com/containerd/ttrpc/pull/120))
    * Regenerated pb.go files to fix mismatches ([#122](https://github.com/containerd/ttrpc/pull/122))
    * build: Fix references to check-protos target in Makefile ([#118](https://github.com/containerd/ttrpc/pull/118))
    * Add service prefix option to generator ([#116](https://github.com/containerd/ttrpc/pull/116))
    * doc: ttrpc supports stream ([#121](https://github.com/containerd/ttrpc/pull/121))
    * *: remove codecov ([#114](https://github.com/containerd/ttrpc/pull/114))
    * Only generate a Go file if the file has some services ([#112](https://github.com/containerd/ttrpc/pull/112))
    * *.go: organize errors to one spot ([#113](https://github.com/containerd/ttrpc/pull/113))
    * PROTOCOL: slight markdown touchup ([#111](https://github.com/containerd/ttrpc/pull/111))
    * Introduce streaming ([#107](https://github.com/containerd/ttrpc/pull/107))
    * Update checkout and lint actions ([#109](https://github.com/containerd/ttrpc/pull/109))
    * Add Makefile and update protobuf ([#106](https://github.com/containerd/ttrpc/pull/106))
    * Add ttrpc protocol definition ([#102](https://github.com/containerd/ttrpc/pull/102))
    * Enable Codecov again ([#105](https://github.com/containerd/ttrpc/pull/105))
    * Use CR+LF instead of LF regardless of OS ([#103](https://github.com/containerd/ttrpc/pull/103))
    * Log the error's underyling errno if there is ([#104](https://github.com/containerd/ttrpc/pull/104))
    * Use google.golang.org/protobuf instead of github.com/gogo/protobuf ([#99](https://github.com/containerd/ttrpc/pull/99))
    * Wrap correct error on unix.GetsockoptUcred failure ([#100](https://github.com/containerd/ttrpc/pull/100))
    * Update CI project checks to use containerd project action ([#101](https://github.com/containerd/ttrpc/pull/101))
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 -> 1f10f66a31bf
    * **github.com/AdamKorcz/go-118-fuzz-build**                                       5330a85ea652 **_new_**
    * **github.com/Microsoft/go-winio**                                                v0.5.1 -> v0.6.0
    * **github.com/Microsoft/hcsshim**                                                 v0.9.2 -> v0.10.0-rc.7
    * **github.com/blang/semver/v4**                                                   v4.0.0 **_new_**
    * **github.com/cenkalti/backoff/v4**                                               v4.1.2 -> v4.2.0
    * **github.com/cespare/xxhash/v2**                                                 v2.1.2 -> v2.2.0
    * **github.com/cilium/ebpf**                                                       v0.7.0 -> v0.9.1
    * **github.com/container-orchestrated-devices/container-device-interface**         v0.5.4 **_new_**
    * **github.com/containerd/btrfs/v2**                                               v2.0.0 **_new_**
    * **github.com/containerd/cgroups**                                                v1.0.3 -> v1.1.0
    * **github.com/containerd/cgroups/v3**                                             v3.0.1 **_new_**
    * **github.com/containerd/continuity**                                             v0.2.2 -> v0.3.0
    * **github.com/containerd/fifo**                                                   v1.0.0 -> v1.1.0
    * **github.com/containerd/go-cni**                                                 v1.1.3 -> v1.1.9
    * **github.com/containerd/imgcrypt**                                               v1.1.3 -> v1.1.7
    * **github.com/containerd/nri**                                                    v0.1.0 -> v0.3.0
    * **github.com/containerd/ttrpc**                                                  v1.1.0 -> v1.2.0
    * **github.com/containerd/typeurl/v2**                                             v2.1.0 **_new_**
    * **github.com/containernetworking/cni**                                           v1.0.1 -> v1.1.2
    * **github.com/containernetworking/plugins**                                       v1.0.1 -> v1.2.0
    * **github.com/containers/ocicrypt**                                               v1.1.2 -> v1.1.6
    * **github.com/coreos/go-systemd/v22**                                             v22.3.2 -> v22.5.0
    * **github.com/cpuguy83/go-md2man/v2**                                             v2.0.0 -> v2.0.2
    * **github.com/cyphar/filepath-securejoin**                                        v0.2.3 **_new_**
    * **github.com/docker/go-units**                                                   v0.4.0 -> v0.5.0
    * **github.com/emicklei/go-restful/v3**                                            v3.10.1 **_new_**
    * **github.com/fsnotify/fsnotify**                                                 v1.4.9 -> v1.6.0
    * **github.com/go-logr/logr**                                                      v1.2.2 -> v1.2.3
    * **github.com/godbus/dbus/v5**                                                    v5.0.6 -> v5.1.0
    * **github.com/google/go-cmp**                                                     v0.5.6 -> v0.5.9
    * **github.com/google/uuid**                                                       v1.2.0 -> v1.3.0
    * **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.7.0 **_new_**
    * **github.com/imdario/mergo**                                                     v0.3.12 -> v0.3.13
    * **github.com/intel/goresctrl**                                                   v0.2.0 -> v0.3.0
    * **github.com/klauspost/compress**                                                v1.11.13 -> v1.16.0
    * **github.com/klauspost/cpuid/v2**                                                v2.0.4 **_new_**
    * **github.com/miekg/pkcs11**                                                      v1.0.3 -> v1.1.1
    * **github.com/minio/sha256-simd**                                                 v1.0.0 **_new_**
    * **github.com/moby/sys/mountinfo**                                                v0.5.0 -> v0.6.2
    * **github.com/moby/sys/sequential**                                               v0.5.0 **_new_**
    * **github.com/moby/sys/signal**                                                   v0.6.0 -> v0.7.0
    * **github.com/opencontainers/image-spec**                                         693428a734f5 -> 3a7f492d3f1b
    * **github.com/opencontainers/runc**                                               v1.1.0 -> v1.1.4
    * **github.com/opencontainers/runtime-spec**                                       1c3f411f0417 -> v1.1.0-rc.1
    * **github.com/opencontainers/runtime-tools**                                      946c877fa809 **_new_**
    * **github.com/opencontainers/selinux**                                            v1.10.0 -> v1.11.0
    * **github.com/pelletier/go-toml**                                                 v1.9.3 -> v1.9.5
    * **github.com/prometheus/client_golang**                                          v1.11.0 -> v1.14.0
    * **github.com/prometheus/client_model**                                           v0.2.0 -> v0.3.0
    * **github.com/prometheus/common**                                                 v0.30.0 -> v0.37.0
    * **github.com/prometheus/procfs**                                                 v0.7.3 -> v0.8.0
    * **github.com/russross/blackfriday/v2**                                           v2.0.1 -> v2.1.0
    * **github.com/sirupsen/logrus**                                                   v1.8.1 -> v1.9.0
    * **github.com/stretchr/testify**                                                  v1.7.0 -> v1.8.2
    * **github.com/syndtr/gocapability**                                               42c35b437635 **_new_**
    * **github.com/tchap/go-patricia/v2**                                              v2.3.1 **_new_**
    * **github.com/urfave/cli**                                                        v1.22.1 -> v1.22.12
    * **github.com/vishvananda/netlink**                                               f5de75959ad5 -> v1.2.1-beta.2
    * **go.etcd.io/bbolt**                                                             v1.3.6 -> v1.3.7
    * **go.opencensus.io**                                                             v0.23.0 -> v0.24.0
    * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 -> v0.37.0
    * **go.opentelemetry.io/otel**                                                     v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/metric**                                              v0.34.0 **_new_**
    * **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/trace**                                               v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/proto/otlp**                                               v0.11.0 -> v0.19.0
    * **golang.org/x/crypto**                                                          32db794688a5 -> v0.1.0
    * **golang.org/x/mod**                                                             v0.7.0 **_new_**
    * **golang.org/x/net**                                                             fe4d6282115f -> v0.7.0
    * **golang.org/x/oauth2**                                                          2bc19b11175f -> v0.4.0
    * **golang.org/x/sync**                                                            036812b2e83c -> v0.1.0
    * **golang.org/x/sys**                                                             1d35b9e2eb4e -> v0.6.0
    * **golang.org/x/term**                                                            6886f2dfbf5b -> v0.5.0
    * **golang.org/x/text**                                                            v0.3.7 -> v0.7.0
    * **golang.org/x/time**                                                            1f47c861a9ac -> 90d013bbcef8
    * **golang.org/x/tools**                                                           v0.5.0 **_new_**
    * **google.golang.org/genproto**                                                   e50cd9704f63 -> 7f2fa6fef1f4
    * **google.golang.org/grpc**                                                       v1.43.0 -> v1.53.0
    * **google.golang.org/protobuf**                                                   v1.27.1 -> v1.28.1
    * **gopkg.in/yaml.v3**                                                             496545a6307b -> v3.0.1
    * **k8s.io/api**                                                                   v0.22.5 -> v0.26.2
    * **k8s.io/apimachinery**                                                          v0.22.5 -> v0.26.2
    * **k8s.io/apiserver**                                                             v0.22.5 -> v0.26.2
    * **k8s.io/client-go**                                                             v0.22.5 -> v0.26.2
    * **k8s.io/component-base**                                                        v0.22.5 -> v0.26.2
    * **k8s.io/cri-api**                                                               v0.23.1 -> v0.26.2
    * **k8s.io/klog/v2**                                                               v2.30.0 -> v2.90.1
    * **k8s.io/utils**                                                                 cb0fa318a74b -> a5ecb0141aa5
    * **sigs.k8s.io/json**                                                             f223a00ba0e2 **_new_**
    * **sigs.k8s.io/structured-merge-diff/v4**                                         v4.1.2 -> v4.2.3
    * **sigs.k8s.io/yaml**                                                             v1.2.0 -> v1.3.0
    
    Previous release can be found at [v1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0)
    ### Which file should I download?
    * `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
    * `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
    * `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:     (Deprecated)
    * `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated)
    
    In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
    and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
    
    See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.
    
    
  • v1.7.0-rc.1
    containerd 1.7.0-rc.1
    
    Welcome to the v1.7.0-rc.1 release of containerd!
    *This is a pre-release of containerd*
    
    The eighth major release of containerd includes new functionality alongside many improvements.
    This release is intended to be the last major release of containerd 1.x before 2.0.
    Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0.
    This release still adheres to our backwards compability guarantees and users who do not use or enable new functionality should use this release with the same stability expectations.
    The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality.
    
    ### Highlights
    
    #### Sandbox API _(experimental)_
    
    The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs.
    This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients.
    
    * **Sandbox API** ([#6703](https://github.com/containerd/containerd/pull/6703))
    * **CRI Sandbox API Implementation** ([#7228](https://github.com/containerd/containerd/pull/7228))
    
    #### Transfer Service _(experimental)_
    
    * **Transfer Service** ([#7320](https://github.com/containerd/containerd/pull/7320))
    
    The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for
    pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release
    to allow for further plugin development and integration into existing plugins.
    
    See the [Transfer Docs](https://github.com/containerd/containerd/blob/main/docs/transfer.md)
    
    #### NRI _(experimental)_
    
    * **Extend NRI scope** ([nri#16](https://github.com/containerd/nri/pull/16))
    * **Support for updated NRI** ([#6019](https://github.com/containerd/containerd/pull/6019))
    
    The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides
    basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration.
    
    This release introduces NRI v0.3.0 with an updated plugin interface to cover a wide range of use cases.
    
    See the [NRI Docs](https://github.com/containerd/containerd/blob/main/docs/NRI.md)
    
    #### Platform Support
    
    * **Linux containers on FreeBSD** ([#7000](https://github.com/containerd/containerd/pull/7000))
    
    #### Runtime Features
    
    * **Add support for CDI device injection** ([#6654](https://github.com/containerd/containerd/pull/6654))
    * **Support for cgroups blockio** ([#5490](https://github.com/containerd/containerd/pull/5490))
    * **Add restart policy for enhanced restart manager** ([#6744](https://github.com/containerd/containerd/pull/6744))
    
    #### gRPC Shim Support _(experimental)_
    
    * **Initial gRPC shim support** ([#8052](https://github.com/containerd/containerd/pull/8052))
    
    Adds support for shims to use gRPC in addition to ttrpc. Existing ttrpc shim support is not going
    away and will continue to be recommended for the best performance and lowest shim memory overhead.
    The gRPC support allows implementation of a wider range of shim implementations which may not
    have access to a stable ttrpc library in the implementation language. The shim protocol is also
    updated to allow the shims to specify the protocol which is supported.
    
    #### Road to 2.0
    
    ##### Refactoring
    
    There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points.
    
    The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality
    out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independently. The new sandbox and distribution interfaces provide one example of this,
    but it also being done for image and network management.
    
    The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc.
    Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability.
    
    * **Remove gogoproto.customtype** ([#6699](https://github.com/containerd/containerd/pull/6699))
    * **Remove enumvalue_customname, goproto_enum_prefix and enum_customname** ([#6708](https://github.com/containerd/containerd/pull/6708))
    * **Remove all gogoproto extensions** ([#6829](https://github.com/containerd/containerd/pull/6829))
    * **Migrate off from github.com/gogo/protobuf** ([#6841](https://github.com/containerd/containerd/pull/6841))
    * **ttrpc streaming** ([ttrpc#107](https://github.com/containerd/ttrpc/pull/107))
    * **Add unpack interface for client** ([#6749](https://github.com/containerd/containerd/pull/6749))
    * **Add collectible resources to metadata gc** ([#6804](https://github.com/containerd/containerd/pull/6804))
    * **Add version to shim protocol** ([#8177](https://github.com/containerd/containerd/pull/8177))
    
    ##### Configuration
    
    Existing CRI configurations will be supported until 2.0.
    Any functionality split out of CRI will have their configuration migrated to new plugins.
    Deprecated configuration versions and configurations for deprecated features will be removed in 2.0.
    
    ##### Deprecation
    
    The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include.
    
    * **Docker Schema 1 Image Deprecation** ([#6884](https://github.com/containerd/containerd/pull/6884))
    
    #### CRI Updates
    
    * **Fix CRI plugin to setup pod network after creating the sandbox container** ([#5904](https://github.com/containerd/containerd/pull/5904))
    * **Support image pull progress timeout** ([#6150](https://github.com/containerd/containerd/pull/6150))
    * **Add experimental support for runtime specific snapshotters** ([#6899](https://github.com/containerd/containerd/pull/6899))
    * **Pass all TOML runtime configuration options from CRI to the runtime** ([#7764](https://github.com/containerd/containerd/pull/7764))
    * **Support for user namespaces in stateless pods ([KEP-127](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/127-user-namespaces)) _(experimental)_** ([#7679](https://github.com/containerd/containerd/pull/7679))
    * **Add network plugin metrics** ([#7858](https://github.com/containerd/containerd/pull/7858))
    * **CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23** ([#7863](https://github.com/containerd/containerd/pull/7863))
    
    #### Other
    
    * **Support shallow content copy by adding reader option to local content reader at** ([#7414](https://github.com/containerd/containerd/pull/7414))
    * **Add NoSameOwner option when unpacking tars** ([#7386](https://github.com/containerd/containerd/pull/7386))
    * **Add `FetcherByDigest` for fetching blobs without fetching a manifest** ([#7460](https://github.com/containerd/containerd/pull/7460))
    * **Update default seccomp profile to block socket calls to AF_VSOCK** ([#7510](https://github.com/containerd/containerd/pull/7510))
    * **Replace fork on mount logic with CLONE_FS** ([#7513](https://github.com/containerd/containerd/pull/7513))
    * **Add support for default registry host configuration** ([#7607](https://github.com/containerd/containerd/pull/7607))
    * **Use github.com/minio/sha256-simd for more efficient sha256 calculation** ([#7732](https://github.com/containerd/containerd/pull/7732))
    * **Make OCI options cross-platform** ([#7928](https://github.com/containerd/containerd/pull/7928))
    * **Update release builds to build from Ubuntu 20.04 with glibc 2.31** ([#8021](https://github.com/containerd/containerd/pull/8021))
    * **Use data field from OCI descriptor when provided for fetch** ([#8076](https://github.com/containerd/containerd/pull/8076))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Derek McGowan
    * Kazuyoshi Kato
    * Maksym Pavlenko
    * Phil Estes
    * Wei Fu
    * Akihiro Suda
    * Sebastiaan van Stijn
    * Samuel Karp
    * Krisztian Litkey
    * Mike Brown
    * Danny Canter
    * Daniel Canter
    * Austin Vazquez
    * yanggang
    * Iceber Gu
    * Ye Sijun
    * Ed Bartosh
    * Adam Korcz
    * Luca Comellini
    * Nashwan Azhari
    * Stefan Berger
    * Tony Fang
    * ruiwen-zhao
    * xin.li
    * Brian Goff
    * Gabriel Adrian Samfira
    * Paul "TBBle" Hampson
    * Henry Wang
    * Rodrigo Campos
    * Justin Terry
    * Kevin Parsons
    * Paco Xu
    * Shengjing Zhu
    * Swagat Bora
    * wanglei
    * zounengren
    * Gavin Inglis
    * Akhil Mohan
    * Zechun Chen
    * guodong
    * lengrongfu
    * James Jenkins
    * Michael Crosby
    * Qiutong Song
    * Shiming Zhang
    * Vincent Batts
    * Antonio Ojea
    * Cameron Sparr
    * Casey Callendrello
    * Changwei Ge
    * Hsing-Yu (David) Chen
    * Josh Seba
    * Junyu Liu
    * Kirtana Ashok
    * Kohei Tokunaga
    * Michael Zappa
    * Qasim Sarfraz
    * Tobias Klauser
    * pigletfly
    * yaoyinnan
    * Abirdcfly
    * Aditi Sharma
    * Amit Barve
    * Bennett-White
    * Bjorn Neergaard
    * Craig Ingram
    * Eng Zer Jun
    * Eric Lin
    * Ethan Lowman
    * Fabian Hoffmann
    * James Sturtevant
    * Jess
    * Jian Zeng
    * Jiongchi Yu
    * Jonny Stoten
    * Juan Hoyos
    * Kang.Zhang
    * Kay Yan
    * Markus Lehtonen
    * Mikko Ylinen
    * Mohit Sharma
    * Paul Cacheux
    * Paul S. Schweigert
    * Qian Zhang
    * Yasin Turan
    * Zhang Tianyang
    * bin liu
    * dependabot[bot]
    * helen
    * yulng
    * Aman Sharma
    * Anastassios Nanos
    * Andrew G. Morgan
    * Andrey Klimentyev
    * Aniruddha Basak
    * Anthony Nandaa
    * Antti Kervinen
    * Aviral Takkar
    * Baoshuo
    * Benjamin Elder
    * Benjamin Wang
    * Chao Dai
    * Chuanying Du
    * Claudiu Belu
    * Cory Snider
    * Daniel Lenar
    * Danielle Lancashire
    * Dat Nguyen
    * Davanum Srinivas
    * Dave
    * David Leadbeater
    * David Porter
    * Dmitry Shurupov
    * Edgar Lee
    * Eric Ernst
    * Fahed Dorgaa
    * Gabriela Cervantes
    * Gijs Peskens
    * Hamza El-Saawy
    * Ikko Ashimine
    * Jeff Widman
    * Jeff Zvier
    * Jeremi Piotrowski
    * Jin Dong
    * Jordan Karaze
    * Joseph Sheng
    * Joyce Brum
    * Jukka Rissanen
    * Justin Chadwell
    * Kate
    * Kathryn Baldauf
    * Kyle L Frisbie
    * LongtaoZhang
    * Manuel Alejandro de Brito Fontes
    * Marc Schwind
    * Mark Rossetti
    * Mark Zhang
    * Marvin Giessing
    * Mathis Michel
    * Merlin Ran
    * Nabeel Rana
    * Nathan
    * Nguyen Phan Huy
    * Nikita Rybak
    * Nobel Barakat
    * Oleg Atamanenko
    * Oleg Zhurakivskyy
    * Oliver Radwell
    * Quan Tian
    * Roy Yang
    * Serge Logvinov
    * Shane Jennings
    * Shaun Lawrie
    * Shinichi Morimoto
    * SilverSoldier
    * Sophie Liu
    * Su Fei
    * Taeho Nam
    * Takumasa Sakao
    * Tiger Kaovilai
    * Tom Godkin
    * Tomoya.Fujita
    * Tõnis Tiigi
    * Xinlin Ma
    * Yakul Garg
    * Zhongming Chang
    * Zhuchen Wang
    * austinvazquez
    * cardy.tang
    * chaunceyjiang
    * dabaooline
    * guiyong.ou
    * huoqifeng
    * jianfei.zhang
    * liyuxuan.darfux
    * ningmingxiao
    * shi yixue
    * shuaichang
    * songjiang han
    * wen chen
    * wusong
    * xiaoyang zhu
    * yanghesong
    * yaozhenxiu
    * zhang he
    
    ### Changes
    <details><summary>1685 commits</summary>
    <p>
    
    * Prepare release notes for v1.7.0-rc.1 ([#8192](https://github.com/containerd/containerd/pull/8192))
    * Transfer export image ([#8191](https://github.com/containerd/containerd/pull/8191))
    * Create config struct to take user input ([#8193](https://github.com/containerd/containerd/pull/8193))
    * ctr/tasks: support remapped UID/GID ([#7864](https://github.com/containerd/containerd/pull/7864))
    * Add experimental section to RELEASES.md ([#8119](https://github.com/containerd/containerd/pull/8119))
    * Fix streaming manager deadlock on collection ([#8188](https://github.com/containerd/containerd/pull/8188))
    * Update CRI guide link ([#8190](https://github.com/containerd/containerd/pull/8190))
    * Add max shim version environment variable ([#8189](https://github.com/containerd/containerd/pull/8189))
    * Update README with location of security audits ([#8187](https://github.com/containerd/containerd/pull/8187))
    * docs: fix typos in historical/design/data-flow.md ([#8181](https://github.com/containerd/containerd/pull/8181))
    * Increase CI workflow timeout on Windows. ([#8183](https://github.com/containerd/containerd/pull/8183))
    * releases: mark 1.5 as EOL ([#8178](https://github.com/containerd/containerd/pull/8178))
    * Add version to shim protocol ([#8177](https://github.com/containerd/containerd/pull/8177))
    * Rework install-protobuf script and add new targets ([#8164](https://github.com/containerd/containerd/pull/8164))
    * bump go-cni to v1.1.9 ([#8173](https://github.com/containerd/containerd/pull/8173))
    * Treat sandboxes as root gc resources and scan referenced objects ([#8172](https://github.com/containerd/containerd/pull/8172))
    * update CDI version to v0.5.4 ([#8152](https://github.com/containerd/containerd/pull/8152))
    * Prepare release notes for v1.7.0-rc.0 ([#8162](https://github.com/containerd/containerd/pull/8162))
    * pkg/nri: pull in latest NRI, update NRI configuration. ([#8140](https://github.com/containerd/containerd/pull/8140))
    * [transfer]Config options followup ([#8165](https://github.com/containerd/containerd/pull/8165))
    * Add configuration options to local transfer service ([#8062](https://github.com/containerd/containerd/pull/8062))
    * docs: Show how to select GRPC for shims ([#8134](https://github.com/containerd/containerd/pull/8134))
    * CRI: remove duplicated snapshotters code ([#8154](https://github.com/containerd/containerd/pull/8154))
    * docs: add more comment to logging.LoggerFunc ([#8142](https://github.com/containerd/containerd/pull/8142))
    * contrib/apparmor: remove code related to apparmor_parser version ([#8069](https://github.com/containerd/containerd/pull/8069))
    * runtime/v2: Call onCloseWithShimLog for grpc shims ([#8120](https://github.com/containerd/containerd/pull/8120))
    * Add Fields type alias to log package ([#8143](https://github.com/containerd/containerd/pull/8143))
    * Migrate from k8s.gcr.io to registry.k8s.io ([#8125](https://github.com/containerd/containerd/pull/8125))
    * sandbox: start sandbox with options ([#8129](https://github.com/containerd/containerd/pull/8129))
    * Add macOS build note ([#8115](https://github.com/containerd/containerd/pull/8115))
    * Fix concurrent writes for UpdateContainerStats ([#8130](https://github.com/containerd/containerd/pull/8130))
    * dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8128](https://github.com/containerd/containerd/pull/8128))
    * runtime/v2: Log BootstrapParams ([#8124](https://github.com/containerd/containerd/pull/8124))
    * Prepare release notes for v1.7.0 beta.4 ([#8110](https://github.com/containerd/containerd/pull/8110))
    * Go 1.20.1 ([#8103](https://github.com/containerd/containerd/pull/8103))
    * ctr version: add args check ([#8096](https://github.com/containerd/containerd/pull/8096))
    * pkg/cri/config: fix Mirrors deprecation comment ([#8041](https://github.com/containerd/containerd/pull/8041))
    * docs: fix function names in fuzzing test documentation ([#8044](https://github.com/containerd/containerd/pull/8044))
    * fix: 'go routine' should be 'goroutine' ([#8051](https://github.com/containerd/containerd/pull/8051))
    * Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p)
    * Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2)
    * pkg/cri/sbserver: experimental NRI integration for CRI. ([#7954](https://github.com/containerd/containerd/pull/7954))
    * Clean up error strings that start with uppercase ([#8114](https://github.com/containerd/containerd/pull/8114))
    * Clean up repeated package import ([#8113](https://github.com/containerd/containerd/pull/8113))
    * Go 1.19.6 ([#8109](https://github.com/containerd/containerd/pull/8109))
    * Initial GRPC shims support ([#8052](https://github.com/containerd/containerd/pull/8052))
    * CRI: Pass sandbox annotations to _other platforms ([#8060](https://github.com/containerd/containerd/pull/8060))
    * cmd/ctr/commands/images: support usage subcommand ([#8105](https://github.com/containerd/containerd/pull/8105))
    * cni: pass in the cgroupPath capability argument ([#8067](https://github.com/containerd/containerd/pull/8067))
    * Add fallback for windows platforms without osversion ([#8101](https://github.com/containerd/containerd/pull/8101))
    * release: xx v1.2.1 ([#8104](https://github.com/containerd/containerd/pull/8104))
    * [transfer] update imagestore interface to support multiple references ([#7964](https://github.com/containerd/containerd/pull/7964))
    * [sandbox] Use options to pass PodSandboxConfig to shims ([#8100](https://github.com/containerd/containerd/pull/8100))
    * Send container events with nil PodSandboxStatus ([#8047](https://github.com/containerd/containerd/pull/8047))
    * test: add hostNetwork tests for both windows and linux ([#7984](https://github.com/containerd/containerd/pull/7984))
    * loadConfig pre-inspection in advance ([#8097](https://github.com/containerd/containerd/pull/8097))
    * contrib/apparmor: remove version-dependent rules ([#8068](https://github.com/containerd/containerd/pull/8068))
    * *: introduce wrapper pkgs for blockio and rdt ([#8066](https://github.com/containerd/containerd/pull/8066))
    * Extract CRI instrument into separate package ([#8093](https://github.com/containerd/containerd/pull/8093))
    * CRI: Mirror generic toml runtime config under server ([#8091](https://github.com/containerd/containerd/pull/8091))
    * go.mod: github.com/containerd/typeurl/v2 v2.1.0 ([#8092](https://github.com/containerd/containerd/pull/8092))
    * Revert `apparmor_parser` regression ([#8086](https://github.com/containerd/containerd/pull/8086))
    * [sandbox] refactor controller interface ([#7981](https://github.com/containerd/containerd/pull/7981))
    * btrfs: depend on kernel UAPI instead of libbtrfs ([#7933](https://github.com/containerd/containerd/pull/7933))
    * CI: skip some jobs when `repo != containerd/containerd` ([#8082](https://github.com/containerd/containerd/pull/8082))
    * chore: clean up repeated package import ([#8078](https://github.com/containerd/containerd/pull/8078))
    * fetch: Use data from descriptor when available. ([#8076](https://github.com/containerd/containerd/pull/8076))
    * chore: use http constants instead of string ([#8077](https://github.com/containerd/containerd/pull/8077))
    * Fix retry logic within devmapper device deactivation ([#8075](https://github.com/containerd/containerd/pull/8075))
    * Clean CI yaml ([#8071](https://github.com/containerd/containerd/pull/8071))
    * Add critest.exe in $PATH ([#8074](https://github.com/containerd/containerd/pull/8074))
    * keep the uppercase letter for flag info ([#7976](https://github.com/containerd/containerd/pull/7976))
    * go.mod: Bump hcsshim to v0.10.0-rc.5 ([#8049](https://github.com/containerd/containerd/pull/8049))
    * Fix sandbox exit monitor ([#8045](https://github.com/containerd/containerd/pull/8045))
    * Generate GRPC contracts for runtime APIs ([#7979](https://github.com/containerd/containerd/pull/7979))
    * Make argument validation of `mount.UnmountRecursive` compatible to `mount.UnmountAll` ([#8035](https://github.com/containerd/containerd/pull/8035))
    * Export remote snapshotter label handler ([#8036](https://github.com/containerd/containerd/pull/8036))
    * Adding support to run install hcsshim from local clone ([#7989](https://github.com/containerd/containerd/pull/7989))
    * go.mod: github.com/urfave/cli v1.22.12 ([#8040](https://github.com/containerd/containerd/pull/8040))
    * cmd/ctr/commands: clean up the func IntToInt32Array in utils.go ([#8039](https://github.com/containerd/containerd/pull/8039))
    * pkg/epoch: drop timezone ([#8037](https://github.com/containerd/containerd/pull/8037))
    * go.mod: update github.com/containerd/nri. ([#8034](https://github.com/containerd/containerd/pull/8034))
    * fix(docs): minor fix on the windows installation steps ([#8013](https://github.com/containerd/containerd/pull/8013))
    * Add integration test to opentelemetry tracing on image pull ([#7847](https://github.com/containerd/containerd/pull/7847))
    * Use mount.Target to specify subdirectory of rootfs mount ([#7840](https://github.com/containerd/containerd/pull/7840))
    * cri: mkdir /etc/cni with 0755, not 0700 ([#8020](https://github.com/containerd/containerd/pull/8020))
    * log/logtest: add `testcase` as debug field ([#8025](https://github.com/containerd/containerd/pull/8025))
    * go.mod: github.com/containerd/cgroups/v3 v3.0.0 ([#8027](https://github.com/containerd/containerd/pull/8027))
    * Update CNI plugins to 1.2.0 ([#7977](https://github.com/containerd/containerd/pull/7977))
    * go.mod: go.opentelemetry.io/otel v1.12.0 ([#8026](https://github.com/containerd/containerd/pull/8026))
    * Move PLEG events for pause container under podsandbox package ([#8007](https://github.com/containerd/containerd/pull/8007))
    * runtime docs: Clarify delete cwd behavior ([#8012](https://github.com/containerd/containerd/pull/8012))
    * release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles ([#8019](https://github.com/containerd/containerd/pull/8019))
    * RELEASES.md: update release status ([#8022](https://github.com/containerd/containerd/pull/8022))
    * deflake: TestContainerPids ([#8023](https://github.com/containerd/containerd/pull/8023))
    * release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) ([#8021](https://github.com/containerd/containerd/pull/8021))
    * Update the EOL date for 1.5 release ([#8015](https://github.com/containerd/containerd/pull/8015))
    * Prepare release notes for v1.7.0-beta.3 ([#8014](https://github.com/containerd/containerd/pull/8014))
    * Fix Memory Limit test ([#7959](https://github.com/containerd/containerd/pull/7959))
    * Reused package errdefs for not supported error ([#8005](https://github.com/containerd/containerd/pull/8005))
    * pkg/cri: optimize slice initialization ([#7994](https://github.com/containerd/containerd/pull/7994))
    * go.mod: update goresctrl to v0.3.0 ([#7987](https://github.com/containerd/containerd/pull/7987))
    * pushWriter: correctly propagate errors ([#7985](https://github.com/containerd/containerd/pull/7985))
    * CI: test release.yml on every PR ([#7968](https://github.com/containerd/containerd/pull/7968))
    * fix incorrect namespace of event when create/update namespace ([#7129](https://github.com/containerd/containerd/pull/7129))
    * Backport changes to sandboxed CRI ([#7973](https://github.com/containerd/containerd/pull/7973))
    * Fix syntax errors in the document ([#7970](https://github.com/containerd/containerd/pull/7970))
    * release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7969](https://github.com/containerd/containerd/pull/7969))
    * use local variable for rt when iterating collectors ([#7963](https://github.com/containerd/containerd/pull/7963))
    * Add basic spec and mounts for Darwin ([#7960](https://github.com/containerd/containerd/pull/7960))
    * go.mod: Bump hcsshim to v0.10.0-rc.4 ([#7810](https://github.com/containerd/containerd/pull/7810))
    * Use specs Platform instead of generated API ([#7958](https://github.com/containerd/containerd/pull/7958))
    * Make OCI options cross-platform ([#7928](https://github.com/containerd/containerd/pull/7928))
    * update to go1.19.5, go1.18.10 ([#7948](https://github.com/containerd/containerd/pull/7948))
    * fuzzing: improve archive fuzzer ([#7957](https://github.com/containerd/containerd/pull/7957))
    * shim: enable debug logging for delete ([#7943](https://github.com/containerd/containerd/pull/7943))
    * cri: Fix TestUpdateOCILinuxResource for host w/o swap controller ([#7946](https://github.com/containerd/containerd/pull/7946))
    * ctr/run: flags --detach and --rm cannot be specified together ([#7929](https://github.com/containerd/containerd/pull/7929))
    * Fix Flaky Windows CRI Integration test on TestContainerConsumedStats ([#7935](https://github.com/containerd/containerd/pull/7935))
    * Refactor snapshotters metastore transaction ([#7917](https://github.com/containerd/containerd/pull/7917))
    * mod: update github.com/pelletier/go-toml@v1.9.5 ([#7932](https://github.com/containerd/containerd/pull/7932))
    * archive: improve TestSourceDateEpoch ([#7927](https://github.com/containerd/containerd/pull/7927))
    * Add tracing plugin test ([#7883](https://github.com/containerd/containerd/pull/7883))
    * docs/content-flow: update the description of the content labels  ([#7925](https://github.com/containerd/containerd/pull/7925))
    * Add cleanup package for context management during cleanup ([#7861](https://github.com/containerd/containerd/pull/7861))
    * Fix race between stream registration and use ([#7886](https://github.com/containerd/containerd/pull/7886))
    * Prepare release notes for v1.7.0-beta.2 ([#7903](https://github.com/containerd/containerd/pull/7903))
    * Cirrus CI (Fedora 37, Rocky 8): enable cri-integration ([#7892](https://github.com/containerd/containerd/pull/7892))
    * contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages ([#7891](https://github.com/containerd/containerd/pull/7891))
    * docs: fix a typo in tracing documentation ([#7914](https://github.com/containerd/containerd/pull/7914))
    * CI: Pass GITHUB_TOKEN to containerd/project-checks ([#7913](https://github.com/containerd/containerd/pull/7913))
    * Enable dupword linter ([#7911](https://github.com/containerd/containerd/pull/7911))
    * ctr: Add platform flag to 'oci spec' command ([#7905](https://github.com/containerd/containerd/pull/7905))
    * Vagrantfile: fix disk resize error with VirtualBox ([#7907](https://github.com/containerd/containerd/pull/7907))
    * Vagrantfile: fix comments about SELinux ([#7908](https://github.com/containerd/containerd/pull/7908))
    * Use the const labels.LabelUncompressed ([#7906](https://github.com/containerd/containerd/pull/7906))
    * [sandbox] Add sandbox store plugin type ([#7850](https://github.com/containerd/containerd/pull/7850))
    * Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts ([#7893](https://github.com/containerd/containerd/pull/7893))
    * CRI: Comment cleanup/misc fixes ([#7904](https://github.com/containerd/containerd/pull/7904))
    * Move snapshot event publishing into metadata store ([#5674](https://github.com/containerd/containerd/pull/5674))
    * Vagrantfile: install-rootless-podman: remove `setenforce 0` ([#7887](https://github.com/containerd/containerd/pull/7887))
    * reused package errdefs for error ([#7894](https://github.com/containerd/containerd/pull/7894))
    * integration/images: switch away from Docker Hub to avoid rate limit ([#7888](https://github.com/containerd/containerd/pull/7888))
    * Validate userns container config is consistent with sandbox userns config ([#7882](https://github.com/containerd/containerd/pull/7882))
    * `ctr contents ls` sorts the labels of the content ([#7881](https://github.com/containerd/containerd/pull/7881))
    * chore: use `go fix` to cleanup old +build buildtag ([#7879](https://github.com/containerd/containerd/pull/7879))
    * cri: Shadow variables to avoid t.Parallel() issues ([#7880](https://github.com/containerd/containerd/pull/7880))
    * Add support for user namespaces in stateless pods (KEP-127) ([#7679](https://github.com/containerd/containerd/pull/7679))
    * Refactor metastore transaction ([#7529](https://github.com/containerd/containerd/pull/7529))
    * oci: appendOSMounts(): remove unused error, and move ([#7874](https://github.com/containerd/containerd/pull/7874))
    * add kube v1.26: remove v1alph2 cri support ([#7863](https://github.com/containerd/containerd/pull/7863))
    * make runc 1.1 for oss_fuzz_build.sh ([#7875](https://github.com/containerd/containerd/pull/7875))
    * CRI sbserver: Prevent server reuse after Shutdown ([#7872](https://github.com/containerd/containerd/pull/7872))
    * Fix incorrect defer usage and refactor judgement ([#7521](https://github.com/containerd/containerd/pull/7521))
    * oci: Add WithDomainname ([#7869](https://github.com/containerd/containerd/pull/7869))
    * Reused errdefs define error ([#7871](https://github.com/containerd/containerd/pull/7871))
    * fix `ctr tasks kill` does not remove cni network under windows ([#7866](https://github.com/containerd/containerd/pull/7866))
    * add network plugin metrics ([#7858](https://github.com/containerd/containerd/pull/7858))
    * Avoid using canceled context in unpacker cleanup ([#7859](https://github.com/containerd/containerd/pull/7859))
    * image/label: print more characters of label keys ([#7618](https://github.com/containerd/containerd/pull/7618))
    * prevent Server reuse after a Shutdown ([#7165](https://github.com/containerd/containerd/pull/7165))
    * Check containerd's readiness before calling critest ([#7851](https://github.com/containerd/containerd/pull/7851))
    * Fix grammatical errors in Readme ([#7837](https://github.com/containerd/containerd/pull/7837))
    * Fix cpu architecture detection issue on linux/arm ([#7636](https://github.com/containerd/containerd/pull/7636))
    * CRI: Fix no CNI info for pod sandbox on restart ([#7845](https://github.com/containerd/containerd/pull/7845))
    * Enable checkRename test ([#7081](https://github.com/containerd/containerd/pull/7081))
    * metastore: Add WithTransaction convenience method ([#7781](https://github.com/containerd/containerd/pull/7781))
    * Prevent a race condition in testHook ([#7831](https://github.com/containerd/containerd/pull/7831))
    * cri: fix `memory.memsw.limit_in_bytes: no such file or directory` ([#7836](https://github.com/containerd/containerd/pull/7836))
    * go.mod: update fuzz-headers and fuzz-build ([#7824](https://github.com/containerd/containerd/pull/7824))
    * Remove github.com/gogo/protobuf again ([#7825](https://github.com/containerd/containerd/pull/7825))
    * CRI: Add host networking helper ([#7814](https://github.com/containerd/containerd/pull/7814))
    * Support sandbox shutdown in shim runtimes ([#7792](https://github.com/containerd/containerd/pull/7792))
    * move up to CRI-TOOLS v1.26.0 ([#7818](https://github.com/containerd/containerd/pull/7818))
    * Minor fix when querying pod sandbox status ([#7812](https://github.com/containerd/containerd/pull/7812))
    * nil check to avoid panic on upgrade ([#7809](https://github.com/containerd/containerd/pull/7809))
    * Bump grpc to v1.51.0 ([#7709](https://github.com/containerd/containerd/pull/7709))
    * fatal error: concurrent map iteration and map write ([#7805](https://github.com/containerd/containerd/pull/7805))
    * Bump golangci-lint to v1.50.1 ([#7804](https://github.com/containerd/containerd/pull/7804))
    * cri: make swapping disabled with memory limit ([#7783](https://github.com/containerd/containerd/pull/7783))
    * add metrics for image pulling: error; in progress count; thoughput  ([#7313](https://github.com/containerd/containerd/pull/7313))
    * Prepare release notes for v1.7.0-beta.1 ([#7793](https://github.com/containerd/containerd/pull/7793))
    * support fetching containerd from non public GCS buckets ([#7771](https://github.com/containerd/containerd/pull/7771))
    * images: support specifying SourceDateEpoch via ctx ([#7651](https://github.com/containerd/containerd/pull/7651))
    * fuzzing: improve archive fuzzer ([#7718](https://github.com/containerd/containerd/pull/7718))
    * fix sdNotify func when debug level ([#7798](https://github.com/containerd/containerd/pull/7798))
    * Upgrade GitHub actions packages in release workflow ([#7794](https://github.com/containerd/containerd/pull/7794))
    * Enable GitHub Actions local Linux CI runs ([#7796](https://github.com/containerd/containerd/pull/7796))
    * integration: increase timeout in container_event_test.go ([#7791](https://github.com/containerd/containerd/pull/7791))
    * digest: use github.com/minio/sha256-simd ([#7732](https://github.com/containerd/containerd/pull/7732))
    * allow client to remove created tasks with PID 0 ([#7787](https://github.com/containerd/containerd/pull/7787))
    * Add container event support to containerd ([#7073](https://github.com/containerd/containerd/pull/7073))
    * docs: Authorizer.Authorize could return ErrUnexpectedStatus ([#7786](https://github.com/containerd/containerd/pull/7786))
    * fix: check for tmpfs when evaluating if userxattr is needed ([#7772](https://github.com/containerd/containerd/pull/7772))
    * Pass TOML configuration options for runtimes CRI is not aware of ([#7764](https://github.com/containerd/containerd/pull/7764))
    * Cleanup build constraints ([#7776](https://github.com/containerd/containerd/pull/7776))
    * There is no way to disable debug endpoint on Darwin ([#7775](https://github.com/containerd/containerd/pull/7775))
    * CI: Vagrant: pin rockylinux/8 to v5.0.0 ([#7777](https://github.com/containerd/containerd/pull/7777))
    * vendor: golang.org/x/net v0.4.0 ([#7774](https://github.com/containerd/containerd/pull/7774))
    * Fix context when waiting sandbox ([#7773](https://github.com/containerd/containerd/pull/7773))
    * Github Security Advisory [GHSA-2qjp-425j-52j9](https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9)
    * update to go1.19.4, go1.18.9 ([#7765](https://github.com/containerd/containerd/pull/7765))
    * Change PushContent to require only Provider ([#7763](https://github.com/containerd/containerd/pull/7763))
    * sbserver bug fixing ([#7768](https://github.com/containerd/containerd/pull/7768))
    * Add unit test to Opentelemetry tracing ([#7671](https://github.com/containerd/containerd/pull/7671))
    * remove some (aliases for) deprecated functions ([#7525](https://github.com/containerd/containerd/pull/7525))
    * Refactor ctr restore to allow for tty allocation ([#7673](https://github.com/containerd/containerd/pull/7673))
    * fix panic when containerd-stress density --count 0 ([#7748](https://github.com/containerd/containerd/pull/7748))
    * Unwrap proto errors in streaming client ([#7753](https://github.com/containerd/containerd/pull/7753))
    * Fix process_vm_* syscall names in seccomp ([#7755](https://github.com/containerd/containerd/pull/7755))
    * upgrade the ops.md output for current 1.7 version . ([#7747](https://github.com/containerd/containerd/pull/7747))
    * docs: Add extra security instructions ([#7743](https://github.com/containerd/containerd/pull/7743))
    * go.mod: re-vendor NRI from the official repo. ([#7744](https://github.com/containerd/containerd/pull/7744))
    * [Sandbox API] CRI status cleanup ([#7731](https://github.com/containerd/containerd/pull/7731))
    * Transfer service ([#7320](https://github.com/containerd/containerd/pull/7320))
    * NRI: add support for NRI with extended scope. ([#6019](https://github.com/containerd/containerd/pull/6019))
    * archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ([#7710](https://github.com/containerd/containerd/pull/7710))
    * Fix order of operations when setting lease labels ([#7702](https://github.com/containerd/containerd/pull/7702))
    * Add ctr image prune command ([#7730](https://github.com/containerd/containerd/pull/7730))
    * Check for nullptr before dereferencing ([#7708](https://github.com/containerd/containerd/pull/7708))
    * use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers ([#7736](https://github.com/containerd/containerd/pull/7736))
    * introspection: expose the daemon's PID and PIDNS ([#7694](https://github.com/containerd/containerd/pull/7694))
    * reference/docker: synchronize fork with upstream distribution/distribution ([#7635](https://github.com/containerd/containerd/pull/7635))
    * go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions ([#7721](https://github.com/containerd/containerd/pull/7721))
    * Add ptrace readby and tracedby to default AppArmor profile ([#7714](https://github.com/containerd/containerd/pull/7714))
    * Fix sandbox API when calling sandboxed shims ([#7684](https://github.com/containerd/containerd/pull/7684))
    * make status more readable and update easy. ([#7669](https://github.com/containerd/containerd/pull/7669))
    * integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 ([#7720](https://github.com/containerd/containerd/pull/7720))
    * Resolve warnings in Windows GitHub Actions periodic workflows ([#7706](https://github.com/containerd/containerd/pull/7706))
    * Sandbox API: implement Controller.Status for SandboxAPI ([#7470](https://github.com/containerd/containerd/pull/7470))
    * [port #5904 to sbserver] Setup pod network after creating the sandbox container ([#7426](https://github.com/containerd/containerd/pull/7426))
    * fix for OSS-Fuzz infra changes ([#7677](https://github.com/containerd/containerd/pull/7677))
    * runtime/v2/shim: clean up the use of containerdBinary ([#7499](https://github.com/containerd/containerd/pull/7499))
    * Add process_vm read and write calls to default seccomp profile ([#7693](https://github.com/containerd/containerd/pull/7693))
    * Resolve Scorecards GitHub Actions workflow warnings ([#7707](https://github.com/containerd/containerd/pull/7707))
    * cri: add pod uid annotation ([#7697](https://github.com/containerd/containerd/pull/7697))
    * Missed out `platform interface` when reused the conn for Client. ([#7699](https://github.com/containerd/containerd/pull/7699))
    * overlayfs: remove duplicated tx rollback ([#7700](https://github.com/containerd/containerd/pull/7700))
    * go.mod: update some dependencies ([#7704](https://github.com/containerd/containerd/pull/7704))
    * update github.com/cpuguy83/go-md2man/v2 to v2.0.2 ([#7705](https://github.com/containerd/containerd/pull/7705))
    * Fsnotify bump and change code ([#7703](https://github.com/containerd/containerd/pull/7703))
    * fix build containerd in centos9 ([#7683](https://github.com/containerd/containerd/pull/7683))
    * Bump urfave-cli to v1.22.10 ([#7701](https://github.com/containerd/containerd/pull/7701))
    * can set up the network serially by CNI plugins ([#7685](https://github.com/containerd/containerd/pull/7685))
    * Update cri-api dependency to v0.26.0-beta.0 ([#7656](https://github.com/containerd/containerd/pull/7656))
    * overlay: Remove unused method param ([#7696](https://github.com/containerd/containerd/pull/7696))
    * CI: update Fedora to 37 ([#7691](https://github.com/containerd/containerd/pull/7691))
    * tx rollback when GetInfo return error ([#7678](https://github.com/containerd/containerd/pull/7678))
    * Upgrade github.com/containerd/cgroups from v1 to v3 ([#7601](https://github.com/containerd/containerd/pull/7601))
    * Remove OpenTelementry imports from remotes/docker package ([#7675](https://github.com/containerd/containerd/pull/7675))
    * Expose Done and Err in Shutdown service ([#7686](https://github.com/containerd/containerd/pull/7686))
    * gotestsum match go version 1.19 ([#7688](https://github.com/containerd/containerd/pull/7688))
    * complement sub-command note for containerd-main ([#7670](https://github.com/containerd/containerd/pull/7670))
    * keep the lower case letter for flag info ([#7668](https://github.com/containerd/containerd/pull/7668))
    * bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a ([#7666](https://github.com/containerd/containerd/pull/7666))
    * Fix broken link for CRI plugin in docs ([#7667](https://github.com/containerd/containerd/pull/7667))
    * add option to resolve symlinks in WithLinuxDevice ([#7523](https://github.com/containerd/containerd/pull/7523))
    * Bump k8s.io deps to v0.25.4 ([#7663](https://github.com/containerd/containerd/pull/7663))
    * Release: add static binaries ([#7659](https://github.com/containerd/containerd/pull/7659))
    * Bump OpenTelemetry contrib to v0.36.4 ([#7662](https://github.com/containerd/containerd/pull/7662))
    * Fix slice append error (`spec.Linux.Resources.HugepageLimits`) ([#7661](https://github.com/containerd/containerd/pull/7661))
    * Bump OpenTelemetry to v1.11.1 ([#7660](https://github.com/containerd/containerd/pull/7660))
    * feature: add gc scheduler metrics collection count ([#5263](https://github.com/containerd/containerd/pull/5263))
    * Add `--debug` args to all subcommands of `ctr pprof` ([#7629](https://github.com/containerd/containerd/pull/7629))
    * Add a thin wrapper around otel Span object ([#7655](https://github.com/containerd/containerd/pull/7655))
    * Bump grpc to v1.50.1 ([#7643](https://github.com/containerd/containerd/pull/7643))
    * replace strings.Split(N) for strings.Cut() or alternatives ([#7631](https://github.com/containerd/containerd/pull/7631))
    * add oci.WithCPURT ([#7642](https://github.com/containerd/containerd/pull/7642))
    * Sandbox API: Add a new mode config for sandbox controller impls ([#7590](https://github.com/containerd/containerd/pull/7590))
    * fuzzing: bump go-fuzz-headers ([#7625](https://github.com/containerd/containerd/pull/7625))
    * Bump k8s.io deps to v0.25.3 ([#7637](https://github.com/containerd/containerd/pull/7637))
    * Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex ([#7641](https://github.com/containerd/containerd/pull/7641))
    * Extra documentation for content interfaces ([#7640](https://github.com/containerd/containerd/pull/7640))
    * Fix shim socket permissions on Darwin ([#7638](https://github.com/containerd/containerd/pull/7638))
    * s390x: build and package s390x bin in release assets ([#7614](https://github.com/containerd/containerd/pull/7614))
    * Replace mount fork hack with CLONE_FS ([#7513](https://github.com/containerd/containerd/pull/7513))
    * remotes: add `FetcherByDigest` for fetching blobs without foreknown descriptors (useful for general-purpose CAS) ([#7460](https://github.com/containerd/containerd/pull/7460))
    * Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 ([#7403](https://github.com/containerd/containerd/pull/7403))
    * Support default hosts.toml configuration ([#7607](https://github.com/containerd/containerd/pull/7607))
    * Add tracing spans in CRI image service and pull.go ([#7453](https://github.com/containerd/containerd/pull/7453))
    * Fix missing closed fifo ([#7604](https://github.com/containerd/containerd/pull/7604))
    * fix comments ([#7624](https://github.com/containerd/containerd/pull/7624))
    * docs: add additional info in backport process ([#7626](https://github.com/containerd/containerd/pull/7626))
    * go.mod: golang.org/x/*: use tagged versions ([#7621](https://github.com/containerd/containerd/pull/7621))
    * Bump go version to 1.19.3 ([#7620](https://github.com/containerd/containerd/pull/7620))
    * ctr export strictly matching ([#7615](https://github.com/containerd/containerd/pull/7615))
    * Fix ctr crash when pulling with --http-dump and --http-trace simultaneously ([#7617](https://github.com/containerd/containerd/pull/7617))
    * Harden GITHUB_TOKEN permissions for OSSF Scorecard ([#7599](https://github.com/containerd/containerd/pull/7599))
    * overlayutils: Add fastpath for userxattr check ([#7611](https://github.com/containerd/containerd/pull/7611))
    * Add sequence diagram for shim runtime v2 ([#7606](https://github.com/containerd/containerd/pull/7606))
    * Sandbox API: Move remote impls to /sandbox/proxy ([#7600](https://github.com/containerd/containerd/pull/7600))
    * fuzzing: improve archive fuzzer ([#7588](https://github.com/containerd/containerd/pull/7588))
    * Retry client connection in  waitForStart ([#7537](https://github.com/containerd/containerd/pull/7537))
    * Add Workflow for running critest with Hyper-V Containers on Windows. ([#7025](https://github.com/containerd/containerd/pull/7025))
    * Add release notes for v1.7.0-beta.0 ([#7575](https://github.com/containerd/containerd/pull/7575))
    * Cleanup sandbox interfaces ([#7576](https://github.com/containerd/containerd/pull/7576))
    * Update GitHub actions release workflow set output ([#7581](https://github.com/containerd/containerd/pull/7581))
    * Fix LogURI generation-related tests on Windows. ([#7569](https://github.com/containerd/containerd/pull/7569))
    * maintenance: Remove WithWindowsNetworkNamespace from pkg/cri ([#7577](https://github.com/containerd/containerd/pull/7577))
    * CRI: implement Controller.Delete for SandboxAPI ([#7457](https://github.com/containerd/containerd/pull/7457))
    * Configure CDI registry only on start ([#7419](https://github.com/containerd/containerd/pull/7419))
    * update codeql-action to v2 ([#7568](https://github.com/containerd/containerd/pull/7568))
    * Add logging related metrics to Containerd CRI plugin ([#7546](https://github.com/containerd/containerd/pull/7546))
    * sys: optimize and refactor MkdirAllWithACL() ([#7531](https://github.com/containerd/containerd/pull/7531))
    * fix install cni script ([#7484](https://github.com/containerd/containerd/pull/7484))
    * Update 1.5 release support timeframe ([#7560](https://github.com/containerd/containerd/pull/7560))
    * bump go-fuzz-headers ([#7503](https://github.com/containerd/containerd/pull/7503))
    * Add long term stable release branches ([#7454](https://github.com/containerd/containerd/pull/7454))
    * fix pusher concurrent close channel ([#7473](https://github.com/containerd/containerd/pull/7473))
    * Make tests on GitHub less noisy ([#7530](https://github.com/containerd/containerd/pull/7530))
    * containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded ([#7541](https://github.com/containerd/containerd/pull/7541))
    * Update required Go version in BUILDING.md ([#7544](https://github.com/containerd/containerd/pull/7544))
    * go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) ([#7522](https://github.com/containerd/containerd/pull/7522))
    * Use `go env` to determine GOPATH in Makefile. ([#7542](https://github.com/containerd/containerd/pull/7542))
    * clean-up "nolint" comments, remove unused ones, update golangci-lint ([#7349](https://github.com/containerd/containerd/pull/7349))
    * Don't unmount on Darwin when deleting bundle ([#7534](https://github.com/containerd/containerd/pull/7534))
    * Add timeouts to all CI jobs ([#7538](https://github.com/containerd/containerd/pull/7538))
    * Vagrantfile: explicitly specify rsync as the shared folder driver ([#7539](https://github.com/containerd/containerd/pull/7539))
    * sys: remove unused IsAbs() (windows) ([#7527](https://github.com/containerd/containerd/pull/7527))
    * cri: PodSandboxStatus should tolerate missing task ([#7535](https://github.com/containerd/containerd/pull/7535))
    * CI: update GHA instances from Ubuntu 18.04 to 20.04 ([#7489](https://github.com/containerd/containerd/pull/7489))
    * fix the --no-pivot flag being ignored by `ctr tasks start` ([#7519](https://github.com/containerd/containerd/pull/7519))
    * Update the default seccomp to block socket calls to AF_VSOCK ([#7510](https://github.com/containerd/containerd/pull/7510))
    * cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() ([#7511](https://github.com/containerd/containerd/pull/7511))
    * Stats() shouldn't assume s.container is non-nil ([#7517](https://github.com/containerd/containerd/pull/7517))
    * Move up actions versions to prep for NodeJS 12 deprecation ([#7516](https://github.com/containerd/containerd/pull/7516))
    * cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() ([#7512](https://github.com/containerd/containerd/pull/7512))
    * Updates oci image config to support upstream ArgsEscaped ([#7483](https://github.com/containerd/containerd/pull/7483))
    * cmd/containerd: replace deprecated windows.IsAnInteractiveSession() ([#7497](https://github.com/containerd/containerd/pull/7497))
    * Update container with sandbox metadata after NetNS is created ([#7481](https://github.com/containerd/containerd/pull/7481))
    * archive: add WithSourceDateEpoch() for whiteouts ([#7478](https://github.com/containerd/containerd/pull/7478))
    * TestTaskResize must use a terminal ([#7492](https://github.com/containerd/containerd/pull/7492))
    * diff/apply.readCounter: check negative size ([#7494](https://github.com/containerd/containerd/pull/7494))
    * Add new ctr option for discarding unpacked layers ([#7425](https://github.com/containerd/containerd/pull/7425))
    * archive: windows: chtimes(): remove redundant conversion ([#7491](https://github.com/containerd/containerd/pull/7491))
    * archive: validate digests before use ([#7488](https://github.com/containerd/containerd/pull/7488))
    * vendor: github.com/opencontainers/selinux v1.10.2 ([#7482](https://github.com/containerd/containerd/pull/7482))
    * fuzzing: create structured tar bytes in archive fuzzer ([#7477](https://github.com/containerd/containerd/pull/7477))
    * Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 ([#7474](https://github.com/containerd/containerd/pull/7474))
    * use raw link to containerd.service config ([#7463](https://github.com/containerd/containerd/pull/7463))
    * cri doc: Update kata containers reference ([#7466](https://github.com/containerd/containerd/pull/7466))
    * Setup pod network after creating the sandbox container ([#5904](https://github.com/containerd/containerd/pull/5904))
    * Swap to net.ErrClosed checks for services ([#7446](https://github.com/containerd/containerd/pull/7446))
    * go.mod: Bump go-winio to v0.6.0 ([#7443](https://github.com/containerd/containerd/pull/7443))
    * fix retry when writer is reset on push ([#6995](https://github.com/containerd/containerd/pull/6995))
    * CI: Output a summary using GITHUB_SUMMARY ([#7192](https://github.com/containerd/containerd/pull/7192))
    * Fix missing close ([#7430](https://github.com/containerd/containerd/pull/7430))
    * Add test flag for skipping shim cgroup test ([#7424](https://github.com/containerd/containerd/pull/7424))
    * Refactor CRI fuzzers ([#7405](https://github.com/containerd/containerd/pull/7405))
    * Fix LogURIGenerator on Windows ([#7351](https://github.com/containerd/containerd/pull/7351))
    * Set grpc code for unimplemented cri-api methods ([#7417](https://github.com/containerd/containerd/pull/7417))
    * Add reader option to local content reader at ([#7414](https://github.com/containerd/containerd/pull/7414))
    * Sandbox API: implement Controller.Wait and Controller.Stop ([#7401](https://github.com/containerd/containerd/pull/7401))
    * remove stray .zuul.yaml ([#7416](https://github.com/containerd/containerd/pull/7416))
    * reference CDI configuration details ([#7408](https://github.com/containerd/containerd/pull/7408))
    * cri-integration: propagate ENABLE_CRI_SANDBOXES ([#7413](https://github.com/containerd/containerd/pull/7413))
    * Enable OpenSSF Scorecard Github Action ([#7404](https://github.com/containerd/containerd/pull/7404))
    * Add ext2 fs support to devmapper snapshotter ([#7402](https://github.com/containerd/containerd/pull/7402))
    * Fuzzing: Instrument with new sanitizers ([#7396](https://github.com/containerd/containerd/pull/7396))
    * Upgrade fuzzing-related packages to reduce dependencies ([#7397](https://github.com/containerd/containerd/pull/7397))
    * remotes/docker/config: Skipping TLS verification for localhost ([#7393](https://github.com/containerd/containerd/pull/7393))
    * Replace github.com/emicklei/go-restful package, versions <2.16.0 ([#7395](https://github.com/containerd/containerd/pull/7395))
    * Add NoSameOwner option when unpacking tars ([#7386](https://github.com/containerd/containerd/pull/7386))
    * ctr: add privileged-without-host-devices for run command ([#7328](https://github.com/containerd/containerd/pull/7328))
    * chore: matching the casing of other flags for ctr's pull command ([#7341](https://github.com/containerd/containerd/pull/7341))
    * windows: Add runhcs-wcow-hypervisor runtimeclass to the default config ([#6901](https://github.com/containerd/containerd/pull/6901))
    * Fix missing close ([#7370](https://github.com/containerd/containerd/pull/7370))
    * CRI: update cdi version to v0.5.1 ([#7374](https://github.com/containerd/containerd/pull/7374))
    * Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 ([#7372](https://github.com/containerd/containerd/pull/7372))
    * vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c ([#7373](https://github.com/containerd/containerd/pull/7373))
    * Remove unused variable from images action ([#7371](https://github.com/containerd/containerd/pull/7371))
    * feature: use client default namespace ([#7291](https://github.com/containerd/containerd/pull/7291))
    * integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment ([#7367](https://github.com/containerd/containerd/pull/7367))
    * feature: upgrade registry.k8s.io/pause version ([#7359](https://github.com/containerd/containerd/pull/7359))
    * metrics/cgroups/v1: Remove unused event parameter ([#7361](https://github.com/containerd/containerd/pull/7361))
    * .zuul: remove the zuul because it is offline ([#7369](https://github.com/containerd/containerd/pull/7369))
    * Update golangci-lint timeout to match config ([#7356](https://github.com/containerd/containerd/pull/7356))
    * delete redundent import alias and and type conversion ([#7345](https://github.com/containerd/containerd/pull/7345))
    * Make checkContainerTimestamps less strict on Windows ([#7350](https://github.com/containerd/containerd/pull/7350))
    * Make oss-fuzz mandatory ([#7346](https://github.com/containerd/containerd/pull/7346))
    * Add kubernetes v1.25 supported version as v1.24 ([#7326](https://github.com/containerd/containerd/pull/7326))
    * sys: move ForceRemoveAll to integration/client ([#7335](https://github.com/containerd/containerd/pull/7335))
    * chore: remove duplicate word in comments ([#7338](https://github.com/containerd/containerd/pull/7338))
    * Use ioctl helpers from x/sys/unix ([#7342](https://github.com/containerd/containerd/pull/7342))
    * archive: replace tarName() with filepath.ToSlash() ([#7344](https://github.com/containerd/containerd/pull/7344))
    * mount: remove unused ErrNotImplementOnWindows ([#7339](https://github.com/containerd/containerd/pull/7339))
    * replace sys Sequential funcs with moby/sys/sequential ([#7334](https://github.com/containerd/containerd/pull/7334))
    * Clarify containerd 1.5.0+ for k8s 1.20,1.21 ([#7324](https://github.com/containerd/containerd/pull/7324))
    * update runc binary to v1.1.4 ([#7315](https://github.com/containerd/containerd/pull/7315))
    * Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 ([#7325](https://github.com/containerd/containerd/pull/7325))
    * Update k8s.io/cri-api to v0.25.0 ([#7287](https://github.com/containerd/containerd/pull/7287))
    * script/setup: handle cnidir with SUDO ([#7322](https://github.com/containerd/containerd/pull/7322))
    * ContainerStatus to return container resources ([#6517](https://github.com/containerd/containerd/pull/6517))
    * migrate from k8s.gcr.io to registry.k8s.io ([#7038](https://github.com/containerd/containerd/pull/7038))
    * Do not rename test files on-the-fly to share functions ([#7309](https://github.com/containerd/containerd/pull/7309))
    * ctr import: strictly match platform ([#6906](https://github.com/containerd/containerd/pull/6906))
    * Revert "Downgrade MinGW to version 10.2.0" ([#7308](https://github.com/containerd/containerd/pull/7308))
    * Follow up #7254 (Switch to Go 1.19) ([#7286](https://github.com/containerd/containerd/pull/7286))
    * Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer ([#7304](https://github.com/containerd/containerd/pull/7304))
    * Adding support of CAP_BPF and CAP_PERFMON ([#7301](https://github.com/containerd/containerd/pull/7301))
    * go.mod: Bump hcsshim to v0.10.0-rc.1 ([#7284](https://github.com/containerd/containerd/pull/7284))
    * Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset ([#7306](https://github.com/containerd/containerd/pull/7306))
    * ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 ([#7293](https://github.com/containerd/containerd/pull/7293))
    * Runtime cleanup (Shim manager and task service) ([#7280](https://github.com/containerd/containerd/pull/7280))
    * containerd-stress: add support for running through CRI ([#6931](https://github.com/containerd/containerd/pull/6931))
    * Switch to Go 1.19 ([#7254](https://github.com/containerd/containerd/pull/7254))
    * Vagrantfile: dump containerd log after critest ([#7265](https://github.com/containerd/containerd/pull/7265))
    * oci: skip checking group id for WithAppendAdditionalGroups ([#7257](https://github.com/containerd/containerd/pull/7257))
    * release workflow: increase timeout to 30 minutes & remove Go setup action ([#7259](https://github.com/containerd/containerd/pull/7259))
    * release: rollback Ubuntu to 18.04 (except for riscv64) ([#7258](https://github.com/containerd/containerd/pull/7258))
    * Initial sandbox API CRI integration (implement Controller.Start) ([#7228](https://github.com/containerd/containerd/pull/7228))
    * Use environment variable to specify Go version on CI ([#7251](https://github.com/containerd/containerd/pull/7251))
    * Update golang to 1.18.5, 1.17.13 ([#7243](https://github.com/containerd/containerd/pull/7243))
    * Change os.Stderr reassign for Windows service ([#7023](https://github.com/containerd/containerd/pull/7023))
    * script/setup: fix protobuf for aarch64 ([#7237](https://github.com/containerd/containerd/pull/7237))
    * Fix cleanup in critest ([#7232](https://github.com/containerd/containerd/pull/7232))
    * fix: support simultaneous create diff for same parent snapshot ([#7204](https://github.com/containerd/containerd/pull/7204))
    * Windows HostProcess container CRI stats test ([#7223](https://github.com/containerd/containerd/pull/7223))
    * Regenerate protos with updated protoc-gen-go ([#7226](https://github.com/containerd/containerd/pull/7226))
    * test: error strings should not be capitalized ([#7195](https://github.com/containerd/containerd/pull/7195))
    * Add extra context to error when push unauthorized ([#7220](https://github.com/containerd/containerd/pull/7220))
    * replace with selinux label ([#7207](https://github.com/containerd/containerd/pull/7207))
    * Use `httputil.DumpRequestOut` for dumping client req ([#7221](https://github.com/containerd/containerd/pull/7221))
    * Fix CRI image pull timeout test for ppc64le ([#7215](https://github.com/containerd/containerd/pull/7215))
    * test: introduce failpoint control to runc-shimv2 and cni ([#7069](https://github.com/containerd/containerd/pull/7069))
    * chore: bump macos runner version ([#7206](https://github.com/containerd/containerd/pull/7206))
    * Use image lists form integration/client tests ([#7210](https://github.com/containerd/containerd/pull/7210))
    * go.mod: Bump hcsshim to v0.9.4 ([#7212](https://github.com/containerd/containerd/pull/7212))
    * Drop deprecated `ioutil` ([#7203](https://github.com/containerd/containerd/pull/7203))
    * Make getServicesOpts a helper ([#7201](https://github.com/containerd/containerd/pull/7201))
    * adds an env var commented out for sandboxed mode ([#7183](https://github.com/containerd/containerd/pull/7183))
    * cri_stats: handle missing cpu stats ([#7198](https://github.com/containerd/containerd/pull/7198))
    * using ContextDialer instead ([#7189](https://github.com/containerd/containerd/pull/7189))
    * test: Add ability to switch between  cgroupv1 or cgroupv2 for node e2e ([#7173](https://github.com/containerd/containerd/pull/7173))
    * code cleanup ([#7182](https://github.com/containerd/containerd/pull/7182))
    * Update k8s.io/cri-api to v0.25.0-alpha2 ([#7114](https://github.com/containerd/containerd/pull/7114))
    * Refactor usageNanoCores be to used for all OSes ([#7186](https://github.com/containerd/containerd/pull/7186))
    * adds support for using env file for systemd boot ([#7191](https://github.com/containerd/containerd/pull/7191))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#7185](https://github.com/containerd/containerd/pull/7185))
    * ctr: support --user for run/create ([#7145](https://github.com/containerd/containerd/pull/7145))
    * docs: Fix sample config.toml syntax ([#7174](https://github.com/containerd/containerd/pull/7174))
    * seccomp: seccomp: add syscalls related to PKU in default policy ([#7163](https://github.com/containerd/containerd/pull/7163))
    * Update and align golangci-lint version ([#7168](https://github.com/containerd/containerd/pull/7168))
    * adds a comment explaining how to disable experimental sbserver ([#7169](https://github.com/containerd/containerd/pull/7169))
    * ci: workaround Cirrus CI's INVALID_ARGUMENT ([#7177](https://github.com/containerd/containerd/pull/7177))
    * Update install-protobuf script  to install protobuf on Darwin ([#7153](https://github.com/containerd/containerd/pull/7153))
    * Fork CRI server for Sandbox API integration work ([#7164](https://github.com/containerd/containerd/pull/7164))
    * seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE ([#7167](https://github.com/containerd/containerd/pull/7167))
    * cri doc: fix formatting for CDI options ([#7158](https://github.com/containerd/containerd/pull/7158))
    * update golang to 1.18.4, 1.17.12 ([#7159](https://github.com/containerd/containerd/pull/7159))
    * Fix out of date comments for CRI store packages ([#7152](https://github.com/containerd/containerd/pull/7152))
    * update some devmapper docs ([#7124](https://github.com/containerd/containerd/pull/7124))
    * seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#7149](https://github.com/containerd/containerd/pull/7149))
    * Copy fuzzers from github.com/cncf/cncf-fuzzing ([#7123](https://github.com/containerd/containerd/pull/7123))
    * fix can't edit object by using ctr content edit command ([#6847](https://github.com/containerd/containerd/pull/6847))
    * integration/client: fix typo in export_test.go ([#7130](https://github.com/containerd/containerd/pull/7130))
    * Fix WWW-Authenticate parsing ([#7126](https://github.com/containerd/containerd/pull/7126))
    * LCOW differ return ErrNotImplemented for wrong mount type ([#7112](https://github.com/containerd/containerd/pull/7112))
    * Update go-restful/v3 to latest release ([#7117](https://github.com/containerd/containerd/pull/7117))
    * pkg/cri: use marshal wrapper for version convertor ([#7108](https://github.com/containerd/containerd/pull/7108))
    * Remove hacks around contrib/fuzz ([#7087](https://github.com/containerd/containerd/pull/7087))
    * Fix missing closed HTTP Body ([#7107](https://github.com/containerd/containerd/pull/7107))
    * Cleanup metadata tests ([#7105](https://github.com/containerd/containerd/pull/7105))
    * Downgrade MinGW to version 10.2.0 ([#7106](https://github.com/containerd/containerd/pull/7106))
    * ctr: Fix `ctr c create` fails to parse arguments ([#7098](https://github.com/containerd/containerd/pull/7098))
    * Fix Documentation Issue ([#7103](https://github.com/containerd/containerd/pull/7103))
    * refactor: reduce duplicate code ([#7100](https://github.com/containerd/containerd/pull/7100))
    * make xattr EPERM non-fatal in createTarFile ([#7094](https://github.com/containerd/containerd/pull/7094))
    * Move metadata plugin registration to seperate package ([#7096](https://github.com/containerd/containerd/pull/7096))
    * fix: missing sudo for devmapper doc ([#7092](https://github.com/containerd/containerd/pull/7092))
    * Ensure Windows Periodic workflow errors out while still uploading results. ([#7085](https://github.com/containerd/containerd/pull/7085))
    * Add snapshotter key to snapshot events ([#7084](https://github.com/containerd/containerd/pull/7084))
    * add WithAdditionalGIDs test ([#7072](https://github.com/containerd/containerd/pull/7072))
    * Forward ctr snapshotter flags on Windows ([#7086](https://github.com/containerd/containerd/pull/7086))
    * add WithAppendAdditionalGroups helper ([#7070](https://github.com/containerd/containerd/pull/7070))
    * Make CI Fuzz less noisy ([#7065](https://github.com/containerd/containerd/pull/7065))
    * ctr: add --hostname flag to create, run ([#7082](https://github.com/containerd/containerd/pull/7082))
    * improve content-flow ([#7077](https://github.com/containerd/containerd/pull/7077))
    * Make CI Fuzz optional ([#7067](https://github.com/containerd/containerd/pull/7067))
    * Use Go 1.18's testing.F on simple fuzzers ([#7056](https://github.com/containerd/containerd/pull/7056))
    * Downgrade MinGW in Windows setup scripts. ([#7062](https://github.com/containerd/containerd/pull/7062))
    * Make test path a constant ([#7057](https://github.com/containerd/containerd/pull/7057))
    * Run fuzzers in CI ([#7052](https://github.com/containerd/containerd/pull/7052))
    * CRI: Improve the /dev/shm mount options in Sandbox. ([#6913](https://github.com/containerd/containerd/pull/6913))
    * fix:userattr-unmount unexpected timeout ([#7008](https://github.com/containerd/containerd/pull/7008))
    * Port (some) unit tests to FreeBSD ([#7042](https://github.com/containerd/containerd/pull/7042))
    * Bump Golang and MinGW versions in Windows setup script. ([#6888](https://github.com/containerd/containerd/pull/6888))
    * Windows snapshotter touch ups and new functionality ([#6918](https://github.com/containerd/containerd/pull/6918))
    * Improve naming consistencies in comments in snapshotter.go ([#7032](https://github.com/containerd/containerd/pull/7032))
    * Make building static binaries simpler ([#7022](https://github.com/containerd/containerd/pull/7022))
    * Allow CRI on Darwin ([#7033](https://github.com/containerd/containerd/pull/7033))
    * update runc binary to v1.1.3 ([#7034](https://github.com/containerd/containerd/pull/7034))
    * Linux containers on FreeBSD ([#7000](https://github.com/containerd/containerd/pull/7000))
    * go.mod: github.com/moby/sys/mountinfo v0.6.2 ([#7026](https://github.com/containerd/containerd/pull/7026))
    * fix minor spelling mistake: lablel -> label ([#7031](https://github.com/containerd/containerd/pull/7031))
    * go.mod: github.com/containerd/cgroups v1.0.4 ([#7027](https://github.com/containerd/containerd/pull/7027))
    * go.mod: github.com/containerd/continuity v0.3.0 ([#7028](https://github.com/containerd/containerd/pull/7028))
    * Correct spelling mistake ("sanbdox" to "sandbox") ([#7029](https://github.com/containerd/containerd/pull/7029))
    * Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf)
    * Bump grpc to v1.47.0 ([#7018](https://github.com/containerd/containerd/pull/7018))
    * Bump k8s.io deps to v0.24.1 ([#7017](https://github.com/containerd/containerd/pull/7017))
    * Support runtime level snapshotter for issue 6657 ([#6899](https://github.com/containerd/containerd/pull/6899))
    * update golang to 1.18.3, 1.17.11 ([#7012](https://github.com/containerd/containerd/pull/7012))
    * Fix containerd-stress duration flag ([#7004](https://github.com/containerd/containerd/pull/7004))
    * update go-cni/for cni update fixing plugins that don't respond with version ([#7009](https://github.com/containerd/containerd/pull/7009))
    * Add validations for Windows HostProcess CRI configs ([#6996](https://github.com/containerd/containerd/pull/6996))
    * Move docker reference logic to reference/docker package ([#7007](https://github.com/containerd/containerd/pull/7007))
    * promote pause image to 3.7 (sync with kube v1.24) ([#7003](https://github.com/containerd/containerd/pull/7003))
    * Makefile: use urfave_cli_no_docs for binaries that don't need it ([#6998](https://github.com/containerd/containerd/pull/6998))
    * CRI: cleanup cri/store package ([#6993](https://github.com/containerd/containerd/pull/6993))
    * Use t.Run for /pkg/cri tests ([#7001](https://github.com/containerd/containerd/pull/7001))
    * vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script ([#6997](https://github.com/containerd/containerd/pull/6997))
    * sandbox: replace github.com/pkg/errors with native errors ([#6937](https://github.com/containerd/containerd/pull/6937))
    * build: Fix references to check-protos target in Makefile ([#6983](https://github.com/containerd/containerd/pull/6983))
    * ctr: fix label args used in NewContainer ([#6954](https://github.com/containerd/containerd/pull/6954))
    * ctr sandbox: handle sandbox config ([#6959](https://github.com/containerd/containerd/pull/6959))
    * Fix broken oss-fuzz build ([#6975](https://github.com/containerd/containerd/pull/6975))
    * archive: add human-readable hint to Lchown error ([#6982](https://github.com/containerd/containerd/pull/6982))
    * Fix tx closed error when upperdirlabel specified ([#6978](https://github.com/containerd/containerd/pull/6978))
    * config: improve config v1 deprecation message ([#6972](https://github.com/containerd/containerd/pull/6972))
    * Fix Windows install powershell script ([#6969](https://github.com/containerd/containerd/pull/6969))
    * fix comments on metadata schema and update namespace doc ([#6955](https://github.com/containerd/containerd/pull/6955))
    * adjust format in comment ([#6956](https://github.com/containerd/containerd/pull/6956))
    * Restore decompression benchmarks ([#6957](https://github.com/containerd/containerd/pull/6957))
    * cmd/ctr/commands/content: fix typo in fetch command usage ([#6960](https://github.com/containerd/containerd/pull/6960))
    * fix some confusing typos ([#6950](https://github.com/containerd/containerd/pull/6950))
    * update doc url about k8s ([#6952](https://github.com/containerd/containerd/pull/6952))
    * Separate windows-2019 and windows-2022 test results ([#6946](https://github.com/containerd/containerd/pull/6946))
    * shim: fix debug flag not working ([#6910](https://github.com/containerd/containerd/pull/6910))
    * Reverts removal of parallel run from critest ([#6938](https://github.com/containerd/containerd/pull/6938))
    * Bump OpenTelemetry dependencies ([#6932](https://github.com/containerd/containerd/pull/6932))
    * update runc binary and vendor to v1.1.2 ([#6934](https://github.com/containerd/containerd/pull/6934))
    * oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ([#6923](https://github.com/containerd/containerd/pull/6923))
    * update golang to 1.18.2, 1.17.10 ([#6926](https://github.com/containerd/containerd/pull/6926))
    * CI: update Fedora to 36 ([#6925](https://github.com/containerd/containerd/pull/6925))
    * Add `Wait` to `binaryProcessor` ([#6916](https://github.com/containerd/containerd/pull/6916))
    * go.mod: Bump k8s deps to v0.24.0 ([#6905](https://github.com/containerd/containerd/pull/6905))
    * (Vagrant CI) Enable git commands due to git CVE fix ([#6915](https://github.com/containerd/containerd/pull/6915))
    * Pass explicit JUnit outfile to critest.exe in Windows workflow. ([#6912](https://github.com/containerd/containerd/pull/6912))
    * Update critools to v1.24 ([#6894](https://github.com/containerd/containerd/pull/6894))
    * devmapper docs: small fixes ([#6904](https://github.com/containerd/containerd/pull/6904))
    * move report dir option to end of line for vagrant cri tests ([#6900](https://github.com/containerd/containerd/pull/6900))
    * Update Kubernetes version matrix in release docs ([#6892](https://github.com/containerd/containerd/pull/6892))
    * Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy ([#6889](https://github.com/containerd/containerd/pull/6889))
    * containerd 1.6.4 k8s 1.24 readme announce ([#6890](https://github.com/containerd/containerd/pull/6890))
    * Cleanup leaked shim process ([#6866](https://github.com/containerd/containerd/pull/6866))
    * Add collectible resources to metadata gc ([#6804](https://github.com/containerd/containerd/pull/6804))
    * Update k8 docurl in file ([#6881](https://github.com/containerd/containerd/pull/6881))
    * Support RISC-V 64 ([#6882](https://github.com/containerd/containerd/pull/6882))
    * docs: minor fixes in snapshots.Snapshotter comments ([#6885](https://github.com/containerd/containerd/pull/6885))
    * Officially deprecate Schema 1 ([#6884](https://github.com/containerd/containerd/pull/6884))
    * Make Cirrus CI tests more stable ([#6880](https://github.com/containerd/containerd/pull/6880))
    * docs: Adding windows installation steps to getting-started.md ([#6875](https://github.com/containerd/containerd/pull/6875))
    * Add ctr support for CPUMax and CPUShares ([#6809](https://github.com/containerd/containerd/pull/6809))
    * Support for cgroups blockio ([#5490](https://github.com/containerd/containerd/pull/5490))
    * Fix comment for metadata/db.go ([#6871](https://github.com/containerd/containerd/pull/6871))
    * Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies ([#6867](https://github.com/containerd/containerd/pull/6867))
    * Update go-cni to v1.1.5 ([#6868](https://github.com/containerd/containerd/pull/6868))
    * Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#6865](https://github.com/containerd/containerd/pull/6865))
    * Upgrade google.golang.org/grpc and google.golang.org/protobuf ([#6864](https://github.com/containerd/containerd/pull/6864))
    * Don't use "uname -a" as Cirrus CI's cache key ([#6863](https://github.com/containerd/containerd/pull/6863))
    * remove duplicate ([#6856](https://github.com/containerd/containerd/pull/6856))
    * Create ppc64le release ([#6858](https://github.com/containerd/containerd/pull/6858))
    * Move Vagrant-based tests from GitHub Actions to Cirrus CI ([#6854](https://github.com/containerd/containerd/pull/6854))
    * feature: support image pull progress timeout ([#6150](https://github.com/containerd/containerd/pull/6150))
    * Add unpack interface to be used by client ([#6749](https://github.com/containerd/containerd/pull/6749))
    * Fix undefined error in use of errors package ([#6855](https://github.com/containerd/containerd/pull/6855))
    * Migrate off from github.com/gogo/protobuf ([#6841](https://github.com/containerd/containerd/pull/6841))
    * images/image.go: typo ([#6851](https://github.com/containerd/containerd/pull/6851))
    * Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices ([#5686](https://github.com/containerd/containerd/pull/5686))
    * integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage ([#6180](https://github.com/containerd/containerd/pull/6180))
    * fix incorrect syntax in comments ([#6845](https://github.com/containerd/containerd/pull/6845))
    * cri: close fifos when container is deleted ([#6842](https://github.com/containerd/containerd/pull/6842))
    * diff: hide types.Any from clients ([#6832](https://github.com/containerd/containerd/pull/6832))
    * Add Container-Optimized OS into Adopters ([#6838](https://github.com/containerd/containerd/pull/6838))
    * Prepare for google.golang.org/protobuf ([#6835](https://github.com/containerd/containerd/pull/6835))
    * fix the restart desired to running when task not found ([#6833](https://github.com/containerd/containerd/pull/6833))
    * Remove all gogoproto extensions ([#6829](https://github.com/containerd/containerd/pull/6829))
    * fix nil pointer panic for monitor ([#6830](https://github.com/containerd/containerd/pull/6830))
    * remotes/docker: log registry URLs as info instead of debug ([#5681](https://github.com/containerd/containerd/pull/5681))
    * Rename runtime/v2/task to api/runtime ([#6827](https://github.com/containerd/containerd/pull/6827))
    * Fix protoc-gen-go-fieldpath ([#6828](https://github.com/containerd/containerd/pull/6828))
    * Consolidate gogo/protobuf dependencies under our own protobuf package ([#6826](https://github.com/containerd/containerd/pull/6826))
    * Add restart policy for enhanced restart manager ([#6744](https://github.com/containerd/containerd/pull/6744))
    * Remove gogoproto.stdtime ([#6821](https://github.com/containerd/containerd/pull/6821))
    * Set timeout when collecting metrics from shim's Stat ([#6781](https://github.com/containerd/containerd/pull/6781))
    * Fuzz filter package with Go 1.18's fuzzer ([#6819](https://github.com/containerd/containerd/pull/6819))
    * allow ptrace(2) by default for kernel >= 4.8 ([#6810](https://github.com/containerd/containerd/pull/6810))
    * Build bin/gen-manpages instead of using "go run" ([#6820](https://github.com/containerd/containerd/pull/6820))
    * update golang to 1.18.1, 1.17.9 ([#6822](https://github.com/containerd/containerd/pull/6822))
    * Sandbox API ([#6703](https://github.com/containerd/containerd/pull/6703))
    * Move lease manager plugin to separate package ([#6811](https://github.com/containerd/containerd/pull/6811))
    * fix pool_device_test ([#6807](https://github.com/containerd/containerd/pull/6807))
    * check for duplicate nspath possibilities ([#6806](https://github.com/containerd/containerd/pull/6806))
    * Do not append []string{""} to command to preserve Docker compatibility ([#6805](https://github.com/containerd/containerd/pull/6805))
    * tracing: fix panic on startup when configured ([#6789](https://github.com/containerd/containerd/pull/6789))
    * Optimize loading performance for cri recover ([#6680](https://github.com/containerd/containerd/pull/6680))
    * Change architecture path in README.md ([#6798](https://github.com/containerd/containerd/pull/6798))
    * make consistent for checkpoint path ([#6792](https://github.com/containerd/containerd/pull/6792))
    * metrics/cgroups: fix deadlock issue in Add during Collect ([#6788](https://github.com/containerd/containerd/pull/6788))
    * ADOPTERS: Update AKS Info ([#6794](https://github.com/containerd/containerd/pull/6794))
    * Pin upload-cloud-storage action to 0.8.0 in Windows workflow. ([#6790](https://github.com/containerd/containerd/pull/6790))
    * docs: add Deckhouse to the list of adopters ([#6785](https://github.com/containerd/containerd/pull/6785))
    * Add `docs/snapshotters`; simplify `docs/cri` ([#6778](https://github.com/containerd/containerd/pull/6778))
    * Turn paths from cmdline into absolute paths ([#6672](https://github.com/containerd/containerd/pull/6672))
    * CRI: add support for CDI device injection ([#6654](https://github.com/containerd/containerd/pull/6654))
    * Disable writing freelist to make the file robust against data corruptions ([#6761](https://github.com/containerd/containerd/pull/6761))
    * mv design docs/historical/design ([#6777](https://github.com/containerd/containerd/pull/6777))
    * CRI: improve image pulling performance ([#6702](https://github.com/containerd/containerd/pull/6702))
    * docs: remove runtime v1; migrate config v1 to v2 ([#6776](https://github.com/containerd/containerd/pull/6776))
    * Skip flaky test on Windows ([#6779](https://github.com/containerd/containerd/pull/6779))
    * docs/getting-started.md: typo ([#6775](https://github.com/containerd/containerd/pull/6775))
    * Add no_tracing tag ([#6750](https://github.com/containerd/containerd/pull/6750))
    * Move historical docs to `docs/historical` ([#6754](https://github.com/containerd/containerd/pull/6754))
    * Run go mod tidy in integration tests ([#6768](https://github.com/containerd/containerd/pull/6768))
    * go.mod: move indirects, and update integration go.mod to 1.18 ([#6765](https://github.com/containerd/containerd/pull/6765))
    * Drop gotest.tools ([#6762](https://github.com/containerd/containerd/pull/6762))
    * Use t.Setenv instead of os.Setenv ([#6760](https://github.com/containerd/containerd/pull/6760))
    * Upgrade to Go 1.18 ([#6709](https://github.com/containerd/containerd/pull/6709))
    * Adding multi-arch support for the configure.sh script ([#6751](https://github.com/containerd/containerd/pull/6751))
    * docs/getting-started.md: massive update ([#6758](https://github.com/containerd/containerd/pull/6758))
    * Remove unmaintained contrib/linuxkit ([#6755](https://github.com/containerd/containerd/pull/6755))
    * [Windows CI] Address some timeout issues ([#6757](https://github.com/containerd/containerd/pull/6757))
    * BUILDING.md: update supported Go versions ([#6756](https://github.com/containerd/containerd/pull/6756))
    * update runc to 1.1.1 ([#6753](https://github.com/containerd/containerd/pull/6753))
    * CI: add Rocky Linux 8 ([#6747](https://github.com/containerd/containerd/pull/6747))
    * CI: bump up crun to 1.4.4 ([#6748](https://github.com/containerd/containerd/pull/6748))
    * added make help for cri integration ([#6743](https://github.com/containerd/containerd/pull/6743))
    * Update README.md cncf landscape url ([#6740](https://github.com/containerd/containerd/pull/6740))
    * Fix error message in TestNewBinaryIO ([#6738](https://github.com/containerd/containerd/pull/6738))
    * Use typeurl.Any instead of github.com/gogo/protobuf/types.Any ([#6706](https://github.com/containerd/containerd/pull/6706))
    * Use cgroups.AddProc() for cgroups v1 ([#5738](https://github.com/containerd/containerd/pull/5738))
    * fix: ctr images mount with snapshotter option can't get snapshotter ([#6713](https://github.com/containerd/containerd/pull/6713))
    * cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6323](https://github.com/containerd/containerd/pull/6323))
    * moving up to go-cni v1.1.4 ([#6721](https://github.com/containerd/containerd/pull/6721))
    * native: fix deadlock from leaving transactions open ([#6722](https://github.com/containerd/containerd/pull/6722))
    * go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 ([#5390](https://github.com/containerd/containerd/pull/5390))
    * Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c)
    * runtime: deprecate runc --criu / -criu-path option ([#6496](https://github.com/containerd/containerd/pull/6496))
    * Bug fix for mount path handling ([#6651](https://github.com/containerd/containerd/pull/6651))
    * Upgrade containerd/imgcrypt and opencontainers/image-spec ([#6711](https://github.com/containerd/containerd/pull/6711))
    * Remove enumvalue_customname, goproto_enum_prefix and enum_customname ([#6708](https://github.com/containerd/containerd/pull/6708))
    * Remove gogoproto.customtype ([#6699](https://github.com/containerd/containerd/pull/6699))
    * Skip tty critest testcase on Windows Server 2022 ([#6698](https://github.com/containerd/containerd/pull/6698))
    * Build with Go 1.18 ([#6605](https://github.com/containerd/containerd/pull/6605))
    * Update prometheus client vendor ([#6690](https://github.com/containerd/containerd/pull/6690))
    * vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd ([#6687](https://github.com/containerd/containerd/pull/6687))
    * Make the temp mount as ready only in container WithVolumes ([#6593](https://github.com/containerd/containerd/pull/6593))
    * fix: `ctr run --cni` get failed ([#6670](https://github.com/containerd/containerd/pull/6670))
    * test: use `T.TempDir` to create temporary test directory ([#6681](https://github.com/containerd/containerd/pull/6681))
    * Make OpenLab's CI jobs blocking ([#6679](https://github.com/containerd/containerd/pull/6679))
    * document log level and format ([#6683](https://github.com/containerd/containerd/pull/6683))
    * Add shared content label to namespaces ([#6660](https://github.com/containerd/containerd/pull/6660))
    * Add protoc-gen-go-fieldpath ([#6562](https://github.com/containerd/containerd/pull/6562))
    * Enable gosec linter for golangci-lint ([#6669](https://github.com/containerd/containerd/pull/6669))
    * Make mkfs.xfs available on OpenLab's CI environment ([#6668](https://github.com/containerd/containerd/pull/6668))
    * ctr: improve error relative shim path error msg ([#6519](https://github.com/containerd/containerd/pull/6519))
    * typo fixes under cmd. ([#6674](https://github.com/containerd/containerd/pull/6674))
    * Handle CRI Device.HostPath on Windows ([#6618](https://github.com/containerd/containerd/pull/6618))
    * Upgrade golangci-lint and its GitHub Action ([#6666](https://github.com/containerd/containerd/pull/6666))
    * Don't build a second copy of containerd-shim-runhcs-v1.exe ([#6661](https://github.com/containerd/containerd/pull/6661))
    * Update TestNormalize to only test Windows platform ([#6569](https://github.com/containerd/containerd/pull/6569))
    * Fix link in getting-started.md ([#6663](https://github.com/containerd/containerd/pull/6663))
    * Fuzzing: refactor metadata fuzzers ([#6423](https://github.com/containerd/containerd/pull/6423))
    * Two xfs file systems with same UUID can not be mounted on the same sy… ([#6650](https://github.com/containerd/containerd/pull/6650))
    * [Windows] Fix deadline exceeded in daemon restart ([#6635](https://github.com/containerd/containerd/pull/6635))
    * Use temp file for export/import test ([#6658](https://github.com/containerd/containerd/pull/6658))
    * strip path-info from `-v` (version) output, and implement -v flag for containerd-shim  ([#6495](https://github.com/containerd/containerd/pull/6495))
    * Improve unexpected response error handling in resolver ([#6617](https://github.com/containerd/containerd/pull/6617))
    * Use the latest tag for azure images ([#6601](https://github.com/containerd/containerd/pull/6601))
    * Run CRI integration tests in GitHub Actions (Windows) ([#6626](https://github.com/containerd/containerd/pull/6626))
    * cri: fix integration test on cgroupsv2 system ([#6595](https://github.com/containerd/containerd/pull/6595))
    * Use version 2 configuration format in docs/PLUGINS.md ([#6613](https://github.com/containerd/containerd/pull/6613))
    * update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#6619](https://github.com/containerd/containerd/pull/6619))
    * Update status of 1.4 release ([#6614](https://github.com/containerd/containerd/pull/6614))
    * Update TestContainerSymlinkVolumes to use windows path ([#6568](https://github.com/containerd/containerd/pull/6568))
    * Add --user support for ctr run Windows ([#6603](https://github.com/containerd/containerd/pull/6603))
    * Update releases ([#6608](https://github.com/containerd/containerd/pull/6608))
    * Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7)
    * Adds support for Windows ArgsEscaped images ([#6479](https://github.com/containerd/containerd/pull/6479))
    * Do not use weak import ([#6558](https://github.com/containerd/containerd/pull/6558))
    * cri: relax test for system without hugetlb ([#6596](https://github.com/containerd/containerd/pull/6596))
    * Use containerd/protobuild instead of stevvooe/protobuild ([#6578](https://github.com/containerd/containerd/pull/6578))
    * integration: remove duplicated util pkg ([#6597](https://github.com/containerd/containerd/pull/6597))
    * go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 ([#6591](https://github.com/containerd/containerd/pull/6591))
    * Update Go version recommendation in getting started ([#6585](https://github.com/containerd/containerd/pull/6585))
    * go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 ([#6337](https://github.com/containerd/containerd/pull/6337))
    * fix Implicit memory aliasing in for loop ([#6331](https://github.com/containerd/containerd/pull/6331))
    * Fix build with gccgo ([#6579](https://github.com/containerd/containerd/pull/6579))
    * Replace golang.org/x/net/context with std library ([#6580](https://github.com/containerd/containerd/pull/6580))
    * containerd-shim-runc-v1: return init pid when clean dead shim ([#6571](https://github.com/containerd/containerd/pull/6571))
    * Use Windows matcher when on Windows platform in all code paths ([#6491](https://github.com/containerd/containerd/pull/6491))
    * containerd-shim-runc-v2: return init pid when clean dead shim ([#6452](https://github.com/containerd/containerd/pull/6452))
    * [Windows][Integration] Enable TestRestartMonitor ([#6515](https://github.com/containerd/containerd/pull/6515))
    * go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 ([#6554](https://github.com/containerd/containerd/pull/6554))
    </p>
    </details>
    
    ### Changes from containerd/cgroups
    <details><summary>49 commits</summary>
    <p>
    
    * Upgrade GitHub actions CI workflow ([#249](https://github.com/containerd/cgroups/pull/249))
    * Upgrade Go compiler to 1.19 ([#248](https://github.com/containerd/cgroups/pull/248))
    * Don't use ioutil ([#246](https://github.com/containerd/cgroups/pull/246))
    * Check that cgroup is empty before deleting ([#228](https://github.com/containerd/cgroups/pull/228))
    * Support cgroup.AddThread in cgroupv2 manager ([#243](https://github.com/containerd/cgroups/pull/243))
    * Support to handle more than 4 fields in cpuacct.stat ([#231](https://github.com/containerd/cgroups/pull/231))
    * typo shoulld -> should ([#236](https://github.com/containerd/cgroups/pull/236))
    * Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 ([#241](https://github.com/containerd/cgroups/pull/241))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#240](https://github.com/containerd/cgroups/pull/240))
    * .github: use ubuntu-22.04 to test cgroupv2 ([#237](https://github.com/containerd/cgroups/pull/237))
    * feat(v2): Support cgroup.MoveTo in cgroupv2 manager ([#235](https://github.com/containerd/cgroups/pull/235))
    * Update README to include usage examples of v2 client ([#233](https://github.com/containerd/cgroups/pull/233))
    * ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path ([#232](https://github.com/containerd/cgroups/pull/232))
    * Bump go version to 1.17 in go.mod ([#230](https://github.com/containerd/cgroups/pull/230))
    * make cmd/ a separate module (as it's only for testing) ([#226](https://github.com/containerd/cgroups/pull/226))
    * feat(v2): add Update method for v2.Manager ([#225](https://github.com/containerd/cgroups/pull/225))
    * feat: add memory.min param ([#211](https://github.com/containerd/cgroups/pull/211))
    * modified the dereference null pointer value. ([#218](https://github.com/containerd/cgroups/pull/218))
    * update readme for cpu cgroup demo ([#217](https://github.com/containerd/cgroups/pull/217))
    * Fix systemd full path ([#221](https://github.com/containerd/cgroups/pull/221))
    * Update Go version and fedora base ([#223](https://github.com/containerd/cgroups/pull/223))
    * Fix panic in NewSystemd on nil values ([#219](https://github.com/containerd/cgroups/pull/219))
    </p>
    </details>
    
    ### Changes from containerd/continuity
    <details><summary>28 commits</summary>
    <p>
    
    * go.mod: update dependencies (take 2) ([#204](https://github.com/containerd/continuity/pull/204))
    * Revert "go.mod: update dependencies" ([#205](https://github.com/containerd/continuity/pull/205))
    * Various small fix-ups ([#202](https://github.com/containerd/continuity/pull/202))
    * update authors and mailmap ([#201](https://github.com/containerd/continuity/pull/201))
    * move cmd/continuity to its own go module ([#200](https://github.com/containerd/continuity/pull/200))
    * CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir)  ([#198](https://github.com/containerd/continuity/pull/198))
    * fs.CopyDir: support sockets and pipes ([#197](https://github.com/containerd/continuity/pull/197))
    * Fix wrapping errors ([#196](https://github.com/containerd/continuity/pull/196))
    </p>
    </details>
    
    ### Changes from containerd/go-cni
    <details><summary>38 commits</summary>
    <p>
    
    * Add Go 1.20 support ([#111](https://github.com/containerd/go-cni/pull/111))
    * opts: add cgroupPath capability ([#110](https://github.com/containerd/go-cni/pull/110))
    * go.mod: github.com/containernetworking/cni v1.1.2 ([#109](https://github.com/containerd/go-cni/pull/109))
    * Remove references to io/ioutil package ([#106](https://github.com/containerd/go-cni/pull/106))
    * Update golangci/golangci-lint package ([#108](https://github.com/containerd/go-cni/pull/108))
    * Update GitHub actions CI workflow ([#107](https://github.com/containerd/go-cni/pull/107))
    * Add support for Windows default conf paths ([#103](https://github.com/containerd/go-cni/pull/103))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#104](https://github.com/containerd/go-cni/pull/104))
    * go.mod: update libcni to v1.1.1 ([#101](https://github.com/containerd/go-cni/pull/101))
    * add in some serial setup tests; a little make cleanup ([#100](https://github.com/containerd/go-cni/pull/100))
    * Re-introduce serial network setup ([#99](https://github.com/containerd/go-cni/pull/99))
    * bump github.com/containernetworking/cni v1.1.0 ([#98](https://github.com/containerd/go-cni/pull/98))
    * Revert "Update loopback version to support check" ([#96](https://github.com/containerd/go-cni/pull/96))
    * Use revive instead of golint ([#92](https://github.com/containerd/go-cni/pull/92))
    * Bump go verion to 1.17 ([#91](https://github.com/containerd/go-cni/pull/91))
    * moving up to latest CNI plugin release ([#90](https://github.com/containerd/go-cni/pull/90))
    * Fix Loopback Version ([#88](https://github.com/containerd/go-cni/pull/88))
    * Update comment for capabilities ([#89](https://github.com/containerd/go-cni/pull/89))
    * Add integration test for linux and update go version from 1.16 to 1.17 ([#84](https://github.com/containerd/go-cni/pull/84))
    </p>
    </details>
    
    ### Changes from containerd/imgcrypt
    <details><summary>18 commits</summary>
    <p>
    
    * Use reflect to support diff.ApplyConfig with/without gogo's types.Any ([#75](https://github.com/containerd/imgcrypt/pull/75))
    * Upgrade golangci-lint-action and golangci-lint ([#76](https://github.com/containerd/imgcrypt/pull/76))
    * CHANGES: Updated CHANGES document for 1.1.4 release ([#74](https://github.com/containerd/imgcrypt/pull/74))
    * Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#73](https://github.com/containerd/imgcrypt/pull/73))
    * images: prepare for typeurl.Any ([#72](https://github.com/containerd/imgcrypt/pull/72))
    * Bump ocicrypt to 1.1.3 ([#71](https://github.com/containerd/imgcrypt/pull/71))
    * Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#67](https://github.com/containerd/imgcrypt/pull/67))
    </p>
    </details>
    
    ### Changes from containerd/nri
    <details><summary>56 commits</summary>
    <p>
    
    * Add Go 1.20 support to CI ([#30](https://github.com/containerd/nri/pull/30))
    * Add CodeQL Security scan workflow ([#31](https://github.com/containerd/nri/pull/31))
    * fixes: sort final adjusted mount slice. ([#29](https://github.com/containerd/nri/pull/29))
    * fixes: fix resource adjustment to properly ignore unset/unadjusted fields. ([#28](https://github.com/containerd/nri/pull/28))
    * adaptation: fix mount and device adjustment. ([#27](https://github.com/containerd/nri/pull/27))
    * Make plugin timeouts configurable, adjust default socket path. ([#26](https://github.com/containerd/nri/pull/26))
    * pkg/adaptation: eliminate configuration file. ([#24](https://github.com/containerd/nri/pull/24))
    * stub: fix a potential plugin crash. ([#25](https://github.com/containerd/nri/pull/25))
    * adaptation: fix a panic for unsolicited updates. ([#23](https://github.com/containerd/nri/pull/23))
    * pkg/adaptaton: log errors with %v not %w. ([#22](https://github.com/containerd/nri/pull/22))
    * chore: cleanup old buildtags by `go fix` ([#21](https://github.com/containerd/nri/pull/21))
    * add back project info ([#20](https://github.com/containerd/nri/pull/20))
    * Extend scope to enable common pluggable runtime extensions. ([#16](https://github.com/containerd/nri/pull/16))
    * Update GitHub actions CI workflow ([#19](https://github.com/containerd/nri/pull/19))
    * replace pkg/errors ([#17](https://github.com/containerd/nri/pull/17))
    * Update the examples in README.md ([#15](https://github.com/containerd/nri/pull/15))
    * Rename branch from master to main ([#12](https://github.com/containerd/nri/pull/12))
    * Update to containerd 1.5.1 ([#11](https://github.com/containerd/nri/pull/11))
    </p>
    </details>
    
    ### Changes from containerd/ttrpc
    <details><summary>56 commits</summary>
    <p>
    
    * Make checkServerShutdown verbose ([#128](https://github.com/containerd/ttrpc/pull/128))
    * server: Fix connection issues when receiving ECONNRESET ([#123](https://github.com/containerd/ttrpc/pull/123))
    * README: protobuild is in containerd org now ([#125](https://github.com/containerd/ttrpc/pull/125))
    * stream: fix the map of streams leak ([#120](https://github.com/containerd/ttrpc/pull/120))
    * Regenerated pb.go files to fix mismatches ([#122](https://github.com/containerd/ttrpc/pull/122))
    * build: Fix references to check-protos target in Makefile ([#118](https://github.com/containerd/ttrpc/pull/118))
    * Add service prefix option to generator ([#116](https://github.com/containerd/ttrpc/pull/116))
    * doc: ttrpc supports stream ([#121](https://github.com/containerd/ttrpc/pull/121))
    * *: remove codecov ([#114](https://github.com/containerd/ttrpc/pull/114))
    * Only generate a Go file if the file has some services ([#112](https://github.com/containerd/ttrpc/pull/112))
    * *.go: organize errors to one spot ([#113](https://github.com/containerd/ttrpc/pull/113))
    * PROTOCOL: slight markdown touchup ([#111](https://github.com/containerd/ttrpc/pull/111))
    * Introduce streaming ([#107](https://github.com/containerd/ttrpc/pull/107))
    * Update checkout and lint actions ([#109](https://github.com/containerd/ttrpc/pull/109))
    * Add Makefile and update protobuf ([#106](https://github.com/containerd/ttrpc/pull/106))
    * Add ttrpc protocol definition ([#102](https://github.com/containerd/ttrpc/pull/102))
    * Enable Codecov again ([#105](https://github.com/containerd/ttrpc/pull/105))
    * Use CR+LF instead of LF regardless of OS ([#103](https://github.com/containerd/ttrpc/pull/103))
    * Log the error's underyling errno if there is ([#104](https://github.com/containerd/ttrpc/pull/104))
    * Use google.golang.org/protobuf instead of github.com/gogo/protobuf ([#99](https://github.com/containerd/ttrpc/pull/99))
    * Wrap correct error on unix.GetsockoptUcred failure ([#100](https://github.com/containerd/ttrpc/pull/100))
    * Update CI project checks to use containerd project action ([#101](https://github.com/containerd/ttrpc/pull/101))
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 -> 1f10f66a31bf
    * **github.com/AdamKorcz/go-118-fuzz-build**                                       5330a85ea652 **_new_**
    * **github.com/Microsoft/go-winio**                                                v0.5.1 -> v0.6.0
    * **github.com/Microsoft/hcsshim**                                                 v0.9.2 -> v0.10.0-rc.5
    * **github.com/blang/semver/v4**                                                   v4.0.0 **_new_**
    * **github.com/cenkalti/backoff/v4**                                               v4.1.2 -> v4.2.0
    * **github.com/cilium/ebpf**                                                       v0.7.0 -> v0.9.1
    * **github.com/container-orchestrated-devices/container-device-interface**         v0.5.4 **_new_**
    * **github.com/containerd/btrfs/v2**                                               v2.0.0 **_new_**
    * **github.com/containerd/cgroups**                                                v1.0.3 -> v1.1.0
    * **github.com/containerd/cgroups/v3**                                             v3.0.0 **_new_**
    * **github.com/containerd/continuity**                                             v0.2.2 -> v0.3.0
    * **github.com/containerd/go-cni**                                                 v1.1.3 -> v1.1.9
    * **github.com/containerd/imgcrypt**                                               v1.1.3 -> 8ba028dca028
    * **github.com/containerd/nri**                                                    v0.1.0 -> v0.3.0
    * **github.com/containerd/ttrpc**                                                  v1.1.0 -> 32fab2374638
    * **github.com/containerd/typeurl/v2**                                             v2.1.0 **_new_**
    * **github.com/containernetworking/cni**                                           v1.0.1 -> v1.1.2
    * **github.com/containernetworking/plugins**                                       v1.0.1 -> v1.2.0
    * **github.com/containers/ocicrypt**                                               v1.1.2 -> v1.1.3
    * **github.com/coreos/go-systemd/v22**                                             v22.3.2 -> v22.5.0
    * **github.com/cpuguy83/go-md2man/v2**                                             v2.0.0 -> v2.0.2
    * **github.com/cyphar/filepath-securejoin**                                        v0.2.3 **_new_**
    * **github.com/docker/go-units**                                                   v0.4.0 -> v0.5.0
    * **github.com/emicklei/go-restful/v3**                                            v3.8.0 **_new_**
    * **github.com/fsnotify/fsnotify**                                                 v1.4.9 -> v1.6.0
    * **github.com/go-logr/logr**                                                      v1.2.2 -> v1.2.3
    * **github.com/godbus/dbus/v5**                                                    v5.0.6 -> v5.1.0
    * **github.com/google/go-cmp**                                                     v0.5.6 -> v0.5.9
    * **github.com/google/uuid**                                                       v1.2.0 -> v1.3.0
    * **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.7.0 **_new_**
    * **github.com/intel/goresctrl**                                                   v0.2.0 -> v0.3.0
    * **github.com/klauspost/compress**                                                v1.11.13 -> v1.15.11
    * **github.com/klauspost/cpuid/v2**                                                v2.0.4 **_new_**
    * **github.com/miekg/pkcs11**                                                      v1.0.3 -> v1.1.1
    * **github.com/minio/sha256-simd**                                                 v1.0.0 **_new_**
    * **github.com/moby/sys/mountinfo**                                                v0.5.0 -> v0.6.2
    * **github.com/moby/sys/sequential**                                               v0.5.0 **_new_**
    * **github.com/moby/sys/signal**                                                   v0.6.0 -> v0.7.0
    * **github.com/opencontainers/image-spec**                                         693428a734f5 -> 3a7f492d3f1b
    * **github.com/opencontainers/runc**                                               v1.1.0 -> v1.1.4
    * **github.com/opencontainers/runtime-spec**                                       1c3f411f0417 -> 86290f6a00fb
    * **github.com/opencontainers/runtime-tools**                                      946c877fa809 **_new_**
    * **github.com/opencontainers/selinux**                                            v1.10.0 -> v1.10.2
    * **github.com/pelletier/go-toml**                                                 v1.9.3 -> v1.9.5
    * **github.com/prometheus/client_golang**                                          v1.11.0 -> v1.13.0
    * **github.com/prometheus/common**                                                 v0.30.0 -> v0.37.0
    * **github.com/prometheus/procfs**                                                 v0.7.3 -> v0.8.0
    * **github.com/russross/blackfriday/v2**                                           v2.0.1 -> v2.1.0
    * **github.com/sirupsen/logrus**                                                   v1.8.1 -> v1.9.0
    * **github.com/stretchr/testify**                                                  v1.7.0 -> v1.8.1
    * **github.com/syndtr/gocapability**                                               42c35b437635 **_new_**
    * **github.com/tchap/go-patricia/v2**                                              v2.3.1 **_new_**
    * **github.com/urfave/cli**                                                        v1.22.1 -> v1.22.12
    * **github.com/vishvananda/netlink**                                               f5de75959ad5 -> v1.2.1-beta.2
    * **go.etcd.io/bbolt**                                                             v1.3.6 -> v1.3.7
    * **go.opencensus.io**                                                             v0.23.0 -> v0.24.0
    * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 -> v0.37.0
    * **go.opentelemetry.io/otel**                                                     v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/metric**                                              v0.34.0 **_new_**
    * **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/trace**                                               v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/proto/otlp**                                               v0.11.0 -> v0.19.0
    * **golang.org/x/crypto**                                                          32db794688a5 -> v0.1.0
    * **golang.org/x/mod**                                                             v0.7.0 **_new_**
    * **golang.org/x/net**                                                             fe4d6282115f -> v0.5.0
    * **golang.org/x/oauth2**                                                          2bc19b11175f -> 6fdb5e3db783
    * **golang.org/x/sync**                                                            036812b2e83c -> v0.1.0
    * **golang.org/x/sys**                                                             1d35b9e2eb4e -> v0.5.0
    * **golang.org/x/term**                                                            6886f2dfbf5b -> v0.4.0
    * **golang.org/x/text**                                                            v0.3.7 -> v0.6.0
    * **golang.org/x/time**                                                            1f47c861a9ac -> 90d013bbcef8
    * **golang.org/x/tools**                                                           v0.5.0 **_new_**
    * **google.golang.org/genproto**                                                   e50cd9704f63 -> 1c016267d619
    * **google.golang.org/grpc**                                                       v1.43.0 -> v1.52.3
    * **google.golang.org/protobuf**                                                   v1.27.1 -> v1.28.1
    * **gopkg.in/yaml.v3**                                                             496545a6307b -> v3.0.1
    * **k8s.io/api**                                                                   v0.22.5 -> v0.25.4
    * **k8s.io/apimachinery**                                                          v0.22.5 -> v0.25.4
    * **k8s.io/apiserver**                                                             v0.22.5 -> v0.25.4
    * **k8s.io/client-go**                                                             v0.22.5 -> v0.25.4
    * **k8s.io/component-base**                                                        v0.22.5 -> v0.25.4
    * **k8s.io/cri-api**                                                               v0.23.1 -> v0.26.0-beta.0
    * **k8s.io/klog/v2**                                                               v2.30.0 -> v2.80.1
    * **k8s.io/utils**                                                                 cb0fa318a74b -> 8e77b1f39fe2
    * **sigs.k8s.io/json**                                                             f223a00ba0e2 **_new_**
    * **sigs.k8s.io/structured-merge-diff/v4**                                         v4.1.2 -> v4.2.3
    * **sigs.k8s.io/yaml**                                                             v1.2.0 -> v1.3.0
    
    Previous release can be found at [v1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0)
    ### Which file should I download?
    * `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
    * `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
    * `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:     (Deprecated)
    * `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated)
    
    In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
    and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
    
    See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.
    
    
  • v1.6.19
    containerd 1.6.19
    
    Welcome to the v1.6.19 release of containerd!
    
    The nineteenth patch release for containerd 1.6 contains runtime fixes and additions for Windows platforms
    
    ### Notable Updates
    
    * **Update hcsshim to v0.9.7 to include fix for graceful termination and pause containers ([#8153](https://github.com/containerd/containerd/pull/8153))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Kirtana Ashok
    * Derek McGowan
    * Wei Fu
    
    ### Changes
    <details><summary>4 commits</summary>
    <p>
    
    * [release/1.6] Prepare release notes for v1.6.19 ([#8157](https://github.com/containerd/containerd/pull/8157))
      * [`23e94075a`](https://github.com/containerd/containerd/commit/23e94075a5cf42c37c0854d976a5b9c50358f33f) Add release notes for v1.6.19
    * [release/1.6] go.mod: Bump hcsshim to v0.9.7 ([#8153](https://github.com/containerd/containerd/pull/8153))
      * [`f488a6241`](https://github.com/containerd/containerd/commit/f488a6241b7fa87746026de1a947c57d311751e8) Update hcsshim tag to v0.9.7
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/Microsoft/hcsshim**  v0.9.6 -> v0.9.7
    
    Previous release can be found at [v1.6.18](https://github.com/containerd/containerd/releases/tag/v1.6.18)
    
  • v1.7.0-rc.0
    containerd 1.7.0-rc.0
    
    Welcome to the v1.7.0-rc.0 release of containerd!
    *This is a pre-release of containerd*
    
    The eighth major release of containerd includes new functionality alongside many improvements.
    This release is intended to be the last major release of containerd 1.x before 2.0.
    Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0.
    This release still adheres to our backwards compability guarantees and users who do not use or enable new functionality should use this release with the same stability expectations.
    The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality.
    
    ### Highlights
    
    #### Sandbox API _(experimental)_
    
    The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs.
    This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients.
    
    * **Sandbox API** ([#6703](https://github.com/containerd/containerd/pull/6703))
    * **CRI Sandbox API Implementation** ([#7228](https://github.com/containerd/containerd/pull/7228))
    
    #### Transfer Service _(experimental)_
    
    * **Transfer Service** ([#7320](https://github.com/containerd/containerd/pull/7320))
    
    The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for
    pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release
    to allow for further plugin development and integration into existing plugins.
    
    See the [Transfer Docs](https://github.com/containerd/containerd/blob/main/docs/transfer.md)
    
    #### NRI _(experimental)_
    
    * **Extend NRI scope** ([nri#16](https://github.com/containerd/nri/pull/16))
    * **Support for updated NRI** ([#6019](https://github.com/containerd/containerd/pull/6019))
    
    The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides
    basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration.
    
    This release introduces NRI v0.3.0 with an updated plugin interface to cover a wide range of use cases.
    
    See the [NRI Docs](https://github.com/containerd/containerd/blob/main/docs/NRI.md)
    
    #### Platform Support
    
    * **Linux containers on FreeBSD** ([#7000](https://github.com/containerd/containerd/pull/7000))
    
    #### Runtime Features
    
    * **Add support for CDI device injection** ([#6654](https://github.com/containerd/containerd/pull/6654))
    * **Support for cgroups blockio** ([#5490](https://github.com/containerd/containerd/pull/5490))
    * **Add restart policy for enhanced restart manager** ([#6744](https://github.com/containerd/containerd/pull/6744))
    
    #### gRPC Shim Support _(experimental)_
    
    * **Initial gRPC shim support** ([#8052](https://github.com/containerd/containerd/pull/8052))
    
    Adds support for shims to use gRPC in addition to ttrpc. Existing ttrpc shim support is not going
    away and will continue to be recommended for the best performance and lowest shim memory overhead.
    The gRPC support allows implementation of a wider range of shim implementations which may not
    have access to a stable ttrpc library in the implementation language. The shim protocol is also
    updated to allow the shims to specify the protocol which is supported.
    
    #### Road to 2.0
    
    ##### Refactoring
    
    There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points.
    
    The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality
    out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independently. The new sandbox and distribution interfaces provide one example of this,
    but it also being done for image and network management.
    
    The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc.
    Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability.
    
    * **Remove gogoproto.customtype** ([#6699](https://github.com/containerd/containerd/pull/6699))
    * **Remove enumvalue_customname, goproto_enum_prefix and enum_customname** ([#6708](https://github.com/containerd/containerd/pull/6708))
    * **Remove all gogoproto extensions** ([#6829](https://github.com/containerd/containerd/pull/6829))
    * **Migrate off from github.com/gogo/protobuf** ([#6841](https://github.com/containerd/containerd/pull/6841))
    * **ttrpc streaming** ([ttrpc#107](https://github.com/containerd/ttrpc/pull/107))
    
    * **Add unpack interface for client** ([#6749](https://github.com/containerd/containerd/pull/6749))
    * **Add collectible resources to metadata gc** ([#6804](https://github.com/containerd/containerd/pull/6804))
    
    ##### Configuration
    
    Existing CRI configurations will be supported until 2.0.
    Any functionality split out of CRI will have their configuration migrated to new plugins.
    Deprecated configuration versions and configurations for deprecated features will be removed in 2.0.
    
    ##### Deprecation
    
    The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include.
    
    * **Docker Schema 1 Image Deprecation** ([#6884](https://github.com/containerd/containerd/pull/6884))
    
    #### CRI Updates
    
    * **Fix CRI plugin to setup pod network after creating the sandbox container** ([#5904](https://github.com/containerd/containerd/pull/5904))
    * **Support image pull progress timeout** ([#6150](https://github.com/containerd/containerd/pull/6150))
    * **Add experimental support for runtime specific snapshotters** ([#6899](https://github.com/containerd/containerd/pull/6899))
    * **Pass all TOML runtime configuration options from CRI to the runtime** ([#7764](https://github.com/containerd/containerd/pull/7764))
    * **Support for user namespaces in stateless pods ([KEP-127](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/127-user-namespaces)) _(experimental)_** ([#7679](https://github.com/containerd/containerd/pull/7679))
    * **Add network plugin metrics** ([#7858](https://github.com/containerd/containerd/pull/7858))
    * **CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23** ([#7863](https://github.com/containerd/containerd/pull/7863))
    
    #### Other
    
    * **Support shallow content copy by adding reader option to local content reader at** ([#7414](https://github.com/containerd/containerd/pull/7414))
    * **Add NoSameOwner option when unpacking tars** ([#7386](https://github.com/containerd/containerd/pull/7386))
    * **Add `FetcherByDigest` for fetching blobs without fetching a manifest** ([#7460](https://github.com/containerd/containerd/pull/7460))
    * **Update default seccomp profile to block socket calls to AF_VSOCK** ([#7510](https://github.com/containerd/containerd/pull/7510))
    * **Replace fork on mount logic with CLONE_FS** ([#7513](https://github.com/containerd/containerd/pull/7513))
    * **Add support for default registry host configuration** ([#7607](https://github.com/containerd/containerd/pull/7607))
    * **Use github.com/minio/sha256-simd for more efficient sha256 calculation** ([#7732](https://github.com/containerd/containerd/pull/7732))
    * **Make OCI options cross-platform** ([#7928](https://github.com/containerd/containerd/pull/7928))
    * **Update release builds to build from Ubuntu 20.04 with glibc 2.31** ([#8021](https://github.com/containerd/containerd/pull/8021))
    * **Use data field from OCI descriptor when provided for fetch** ([#8076](https://github.com/containerd/containerd/pull/8076))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Derek McGowan
    * Kazuyoshi Kato
    * Maksym Pavlenko
    * Phil Estes
    * Wei Fu
    * Akihiro Suda
    * Sebastiaan van Stijn
    * Samuel Karp
    * Krisztian Litkey
    * Mike Brown
    * Danny Canter
    * Daniel Canter
    * Austin Vazquez
    * yanggang
    * Ye Sijun
    * Iceber Gu
    * Adam Korcz
    * Ed Bartosh
    * Luca Comellini
    * Stefan Berger
    * ruiwen-zhao
    * xin.li
    * Brian Goff
    * Gabriel Adrian Samfira
    * Nashwan Azhari
    * Paul "TBBle" Hampson
    * Rodrigo Campos
    * Henry Wang
    * Justin Terry
    * Kevin Parsons
    * Paco Xu
    * Shengjing Zhu
    * Swagat Bora
    * wanglei
    * zounengren
    * Gavin Inglis
    * Tony Fang
    * Akhil Mohan
    * Zechun Chen
    * guodong
    * lengrongfu
    * James Jenkins
    * Michael Crosby
    * Qiutong Song
    * Shiming Zhang
    * Vincent Batts
    * Antonio Ojea
    * Cameron Sparr
    * Casey Callendrello
    * Changwei Ge
    * Josh Seba
    * Junyu Liu
    * Kirtana Ashok
    * Kohei Tokunaga
    * Michael Zappa
    * Qasim Sarfraz
    * Tobias Klauser
    * Tony Fang
    * pigletfly
    * yaoyinnan
    * Abirdcfly
    * Amit Barve
    * Bjorn Neergaard
    * Craig Ingram
    * Eng Zer Jun
    * Eric Lin
    * Ethan Lowman
    * Hsing-Yu (David) Chen
    * James Sturtevant
    * Jess
    * Jiongchi Yu
    * Jonny Stoten
    * Juan Hoyos
    * Kang.Zhang
    * Kay Yan
    * Markus Lehtonen
    * Mikko Ylinen
    * Mohit Sharma
    * Paul Cacheux
    * Paul S. Schweigert
    * Qian Zhang
    * Yasin Turan
    * Zhang Tianyang
    * bin liu
    * dependabot[bot]
    * helen
    * yulng
    * Aditi
    * Aditi Sharma
    * Aman Sharma
    * Anastassios Nanos
    * Andrew G. Morgan
    * Andrey Klimentyev
    * Aniruddha Basak
    * Anthony Nandaa
    * Antti Kervinen
    * Aviral Takkar
    * Baoshuo
    * Benjamin Elder
    * Benjamin Wang
    * Bennett-White
    * Chao Dai
    * Chuanying Du
    * Claudiu Belu
    * Cory Snider
    * Daniel Lenar
    * Danielle Lancashire
    * Dat Nguyen
    * Davanum Srinivas
    * Dave
    * David Leadbeater
    * David Porter
    * Dmitry Shurupov
    * Edgar Lee
    * Eric Ernst
    * Fabian Hoffman
    * Fabian Hoffmann
    * Fahed Dorgaa
    * Gabriela Cervantes
    * Gijs Peskens
    * Hamza El-Saawy
    * Ikko Ashimine
    * Jeff Widman
    * Jeff Zvier
    * Jeremi Piotrowski
    * Jin Dong
    * Jordan Karaze
    * Joseph Sheng
    * Joyce Brum
    * Jukka Rissanen
    * Justin Chadwell
    * Kate
    * Kathryn Baldauf
    * Kyle L Frisbie
    * LongtaoZhang
    * Manuel Alejandro de Brito Fontes
    * Marc Schwind
    * Mark Rossetti
    * Mark Zhang
    * Marvin Giessing
    * Mathis Michel
    * Merlin Ran
    * Nabeel Rana
    * Nathan
    * Nguyen Phan Huy
    * Nikita Rybak
    * Nobel Barakat
    * Oleg Atamanenko
    * Oleg Zhurakivskyy
    * Oliver Radwell
    * Quan Tian
    * Roy Yang
    * Serge Logvinov
    * Shane Jennings
    * Shaun Lawrie
    * Shinichi Morimoto
    * SilverSoldier
    * Sophie Liu
    * Su Fei
    * Taeho Nam
    * Takumasa Sakao
    * Tiger Kaovilai
    * Tom Godkin
    * Tomoya.Fujita
    * Tõnis Tiigi
    * Xinlin Ma
    * Yakul Garg
    * Zhongming Chang
    * Zhuchen Wang
    * austinvazquez
    * cardy.tang
    * chaunceyjiang
    * dabaooline
    * guiyong.ou
    * huoqifeng
    * jianfei.zhang
    * liyuxuan.darfux
    * ningmingxiao
    * shi yixue
    * shuaichang
    * songjiang han
    * wen chen
    * wusong
    * xiaoyang zhu
    * yanghesong
    * yaozhenxiu
    * zhang he
    
    ### Changes
    <details><summary>1644 commits</summary>
    <p>
    
    * Prepare release notes for v1.7.0-rc.0 ([#8162](https://github.com/containerd/containerd/pull/8162))
    * pkg/nri: pull in latest NRI, update NRI configuration. ([#8140](https://github.com/containerd/containerd/pull/8140))
    * [transfer]Config options followup ([#8165](https://github.com/containerd/containerd/pull/8165))
    * Add configuration options to local transfer service ([#8062](https://github.com/containerd/containerd/pull/8062))
    * docs: Show how to select GRPC for shims ([#8134](https://github.com/containerd/containerd/pull/8134))
    * CRI: remove duplicated snapshotters code ([#8154](https://github.com/containerd/containerd/pull/8154))
    * docs: add more comment to logging.LoggerFunc ([#8142](https://github.com/containerd/containerd/pull/8142))
    * contrib/apparmor: remove code related to apparmor_parser version ([#8069](https://github.com/containerd/containerd/pull/8069))
    * runtime/v2: Call onCloseWithShimLog for grpc shims ([#8120](https://github.com/containerd/containerd/pull/8120))
    * Add Fields type alias to log package ([#8143](https://github.com/containerd/containerd/pull/8143))
    * Migrate from k8s.gcr.io to registry.k8s.io ([#8125](https://github.com/containerd/containerd/pull/8125))
    * sandbox: start sandbox with options ([#8129](https://github.com/containerd/containerd/pull/8129))
    * Add macOS build note ([#8115](https://github.com/containerd/containerd/pull/8115))
    * Fix concurrent writes for UpdateContainerStats ([#8130](https://github.com/containerd/containerd/pull/8130))
    * dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8128](https://github.com/containerd/containerd/pull/8128))
    * runtime/v2: Log BootstrapParams ([#8124](https://github.com/containerd/containerd/pull/8124))
    * Prepare release notes for v1.7.0 beta.4 ([#8110](https://github.com/containerd/containerd/pull/8110))
    * Go 1.20.1 ([#8103](https://github.com/containerd/containerd/pull/8103))
    * ctr version: add args check ([#8096](https://github.com/containerd/containerd/pull/8096))
    * pkg/cri/config: fix Mirrors deprecation comment ([#8041](https://github.com/containerd/containerd/pull/8041))
    * docs: fix function names in fuzzing test documentation ([#8044](https://github.com/containerd/containerd/pull/8044))
    * fix: 'go routine' should be 'goroutine' ([#8051](https://github.com/containerd/containerd/pull/8051))
    * Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p)
    * Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2)
    * pkg/cri/sbserver: experimental NRI integration for CRI. ([#7954](https://github.com/containerd/containerd/pull/7954))
    * Clean up error strings that start with uppercase ([#8114](https://github.com/containerd/containerd/pull/8114))
    * Clean up repeated package import ([#8113](https://github.com/containerd/containerd/pull/8113))
    * Go 1.19.6 ([#8109](https://github.com/containerd/containerd/pull/8109))
    * Initial GRPC shims support ([#8052](https://github.com/containerd/containerd/pull/8052))
    * CRI: Pass sandbox annotations to _other platforms ([#8060](https://github.com/containerd/containerd/pull/8060))
    * cmd/ctr/commands/images: support usage subcommand ([#8105](https://github.com/containerd/containerd/pull/8105))
    * cni: pass in the cgroupPath capability argument ([#8067](https://github.com/containerd/containerd/pull/8067))
    * Add fallback for windows platforms without osversion ([#8101](https://github.com/containerd/containerd/pull/8101))
    * release: xx v1.2.1 ([#8104](https://github.com/containerd/containerd/pull/8104))
    * [transfer] update imagestore interface to support multiple references ([#7964](https://github.com/containerd/containerd/pull/7964))
    * [sandbox] Use options to pass PodSandboxConfig to shims ([#8100](https://github.com/containerd/containerd/pull/8100))
    * Send container events with nil PodSandboxStatus ([#8047](https://github.com/containerd/containerd/pull/8047))
    * test: add hostNetwork tests for both windows and linux ([#7984](https://github.com/containerd/containerd/pull/7984))
    * loadConfig pre-inspection in advance ([#8097](https://github.com/containerd/containerd/pull/8097))
    * contrib/apparmor: remove version-dependent rules ([#8068](https://github.com/containerd/containerd/pull/8068))
    * *: introduce wrapper pkgs for blockio and rdt ([#8066](https://github.com/containerd/containerd/pull/8066))
    * Extract CRI instrument into separate package ([#8093](https://github.com/containerd/containerd/pull/8093))
    * CRI: Mirror generic toml runtime config under server ([#8091](https://github.com/containerd/containerd/pull/8091))
    * go.mod: github.com/containerd/typeurl/v2 v2.1.0 ([#8092](https://github.com/containerd/containerd/pull/8092))
    * Revert `apparmor_parser` regression ([#8086](https://github.com/containerd/containerd/pull/8086))
    * [sandbox] refactor controller interface ([#7981](https://github.com/containerd/containerd/pull/7981))
    * btrfs: depend on kernel UAPI instead of libbtrfs ([#7933](https://github.com/containerd/containerd/pull/7933))
    * CI: skip some jobs when `repo != containerd/containerd` ([#8082](https://github.com/containerd/containerd/pull/8082))
    * chore: clean up repeated package import ([#8078](https://github.com/containerd/containerd/pull/8078))
    * fetch: Use data from descriptor when available. ([#8076](https://github.com/containerd/containerd/pull/8076))
    * chore: use http constants instead of string ([#8077](https://github.com/containerd/containerd/pull/8077))
    * Fix retry logic within devmapper device deactivation ([#8075](https://github.com/containerd/containerd/pull/8075))
    * Clean CI yaml ([#8071](https://github.com/containerd/containerd/pull/8071))
    * Add critest.exe in $PATH ([#8074](https://github.com/containerd/containerd/pull/8074))
    * keep the uppercase letter for flag info ([#7976](https://github.com/containerd/containerd/pull/7976))
    * go.mod: Bump hcsshim to v0.10.0-rc.5 ([#8049](https://github.com/containerd/containerd/pull/8049))
    * Fix sandbox exit monitor ([#8045](https://github.com/containerd/containerd/pull/8045))
    * Generate GRPC contracts for runtime APIs ([#7979](https://github.com/containerd/containerd/pull/7979))
    * Make argument validation of `mount.UnmountRecursive` compatible to `mount.UnmountAll` ([#8035](https://github.com/containerd/containerd/pull/8035))
    * Export remote snapshotter label handler ([#8036](https://github.com/containerd/containerd/pull/8036))
    * Adding support to run install hcsshim from local clone ([#7989](https://github.com/containerd/containerd/pull/7989))
    * go.mod: github.com/urfave/cli v1.22.12 ([#8040](https://github.com/containerd/containerd/pull/8040))
    * cmd/ctr/commands: clean up the func IntToInt32Array in utils.go ([#8039](https://github.com/containerd/containerd/pull/8039))
    * pkg/epoch: drop timezone ([#8037](https://github.com/containerd/containerd/pull/8037))
    * go.mod: update github.com/containerd/nri. ([#8034](https://github.com/containerd/containerd/pull/8034))
    * fix(docs): minor fix on the windows installation steps ([#8013](https://github.com/containerd/containerd/pull/8013))
    * Add integration test to opentelemetry tracing on image pull ([#7847](https://github.com/containerd/containerd/pull/7847))
    * Use mount.Target to specify subdirectory of rootfs mount ([#7840](https://github.com/containerd/containerd/pull/7840))
    * cri: mkdir /etc/cni with 0755, not 0700 ([#8020](https://github.com/containerd/containerd/pull/8020))
    * log/logtest: add `testcase` as debug field ([#8025](https://github.com/containerd/containerd/pull/8025))
    * go.mod: github.com/containerd/cgroups/v3 v3.0.0 ([#8027](https://github.com/containerd/containerd/pull/8027))
    * Update CNI plugins to 1.2.0 ([#7977](https://github.com/containerd/containerd/pull/7977))
    * go.mod: go.opentelemetry.io/otel v1.12.0 ([#8026](https://github.com/containerd/containerd/pull/8026))
    * Move PLEG events for pause container under podsandbox package ([#8007](https://github.com/containerd/containerd/pull/8007))
    * runtime docs: Clarify delete cwd behavior ([#8012](https://github.com/containerd/containerd/pull/8012))
    * release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles ([#8019](https://github.com/containerd/containerd/pull/8019))
    * RELEASES.md: update release status ([#8022](https://github.com/containerd/containerd/pull/8022))
    * deflake: TestContainerPids ([#8023](https://github.com/containerd/containerd/pull/8023))
    * release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) ([#8021](https://github.com/containerd/containerd/pull/8021))
    * Update the EOL date for 1.5 release ([#8015](https://github.com/containerd/containerd/pull/8015))
    * Prepare release notes for v1.7.0-beta.3 ([#8014](https://github.com/containerd/containerd/pull/8014))
    * Fix Memory Limit test ([#7959](https://github.com/containerd/containerd/pull/7959))
    * Reused package errdefs for not supported error ([#8005](https://github.com/containerd/containerd/pull/8005))
    * pkg/cri: optimize slice initialization ([#7994](https://github.com/containerd/containerd/pull/7994))
    * go.mod: update goresctrl to v0.3.0 ([#7987](https://github.com/containerd/containerd/pull/7987))
    * pushWriter: correctly propagate errors ([#7985](https://github.com/containerd/containerd/pull/7985))
    * CI: test release.yml on every PR ([#7968](https://github.com/containerd/containerd/pull/7968))
    * fix incorrect namespace of event when create/update namespace ([#7129](https://github.com/containerd/containerd/pull/7129))
    * Backport changes to sandboxed CRI ([#7973](https://github.com/containerd/containerd/pull/7973))
    * Fix syntax errors in the document ([#7970](https://github.com/containerd/containerd/pull/7970))
    * release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7969](https://github.com/containerd/containerd/pull/7969))
    * use local variable for rt when iterating collectors ([#7963](https://github.com/containerd/containerd/pull/7963))
    * Add basic spec and mounts for Darwin ([#7960](https://github.com/containerd/containerd/pull/7960))
    * go.mod: Bump hcsshim to v0.10.0-rc.4 ([#7810](https://github.com/containerd/containerd/pull/7810))
    * Use specs Platform instead of generated API ([#7958](https://github.com/containerd/containerd/pull/7958))
    * Make OCI options cross-platform ([#7928](https://github.com/containerd/containerd/pull/7928))
    * update to go1.19.5, go1.18.10 ([#7948](https://github.com/containerd/containerd/pull/7948))
    * fuzzing: improve archive fuzzer ([#7957](https://github.com/containerd/containerd/pull/7957))
    * shim: enable debug logging for delete ([#7943](https://github.com/containerd/containerd/pull/7943))
    * cri: Fix TestUpdateOCILinuxResource for host w/o swap controller ([#7946](https://github.com/containerd/containerd/pull/7946))
    * ctr/run: flags --detach and --rm cannot be specified together ([#7929](https://github.com/containerd/containerd/pull/7929))
    * Fix Flaky Windows CRI Integration test on TestContainerConsumedStats ([#7935](https://github.com/containerd/containerd/pull/7935))
    * Refactor snapshotters metastore transaction ([#7917](https://github.com/containerd/containerd/pull/7917))
    * mod: update github.com/pelletier/go-toml@v1.9.5 ([#7932](https://github.com/containerd/containerd/pull/7932))
    * archive: improve TestSourceDateEpoch ([#7927](https://github.com/containerd/containerd/pull/7927))
    * Add tracing plugin test ([#7883](https://github.com/containerd/containerd/pull/7883))
    * docs/content-flow: update the description of the content labels  ([#7925](https://github.com/containerd/containerd/pull/7925))
    * Add cleanup package for context management during cleanup ([#7861](https://github.com/containerd/containerd/pull/7861))
    * Fix race between stream registration and use ([#7886](https://github.com/containerd/containerd/pull/7886))
    * Prepare release notes for v1.7.0-beta.2 ([#7903](https://github.com/containerd/containerd/pull/7903))
    * Cirrus CI (Fedora 37, Rocky 8): enable cri-integration ([#7892](https://github.com/containerd/containerd/pull/7892))
    * contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages ([#7891](https://github.com/containerd/containerd/pull/7891))
    * docs: fix a typo in tracing documentation ([#7914](https://github.com/containerd/containerd/pull/7914))
    * CI: Pass GITHUB_TOKEN to containerd/project-checks ([#7913](https://github.com/containerd/containerd/pull/7913))
    * Enable dupword linter ([#7911](https://github.com/containerd/containerd/pull/7911))
    * ctr: Add platform flag to 'oci spec' command ([#7905](https://github.com/containerd/containerd/pull/7905))
    * Vagrantfile: fix disk resize error with VirtualBox ([#7907](https://github.com/containerd/containerd/pull/7907))
    * Vagrantfile: fix comments about SELinux ([#7908](https://github.com/containerd/containerd/pull/7908))
    * Use the const labels.LabelUncompressed ([#7906](https://github.com/containerd/containerd/pull/7906))
    * [sandbox] Add sandbox store plugin type ([#7850](https://github.com/containerd/containerd/pull/7850))
    * Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts ([#7893](https://github.com/containerd/containerd/pull/7893))
    * CRI: Comment cleanup/misc fixes ([#7904](https://github.com/containerd/containerd/pull/7904))
    * Move snapshot event publishing into metadata store ([#5674](https://github.com/containerd/containerd/pull/5674))
    * Vagrantfile: install-rootless-podman: remove `setenforce 0` ([#7887](https://github.com/containerd/containerd/pull/7887))
    * reused package errdefs for error ([#7894](https://github.com/containerd/containerd/pull/7894))
    * integration/images: switch away from Docker Hub to avoid rate limit ([#7888](https://github.com/containerd/containerd/pull/7888))
    * Validate userns container config is consistent with sandbox userns config ([#7882](https://github.com/containerd/containerd/pull/7882))
    * `ctr contents ls` sorts the labels of the content ([#7881](https://github.com/containerd/containerd/pull/7881))
    * chore: use `go fix` to cleanup old +build buildtag ([#7879](https://github.com/containerd/containerd/pull/7879))
    * cri: Shadow variables to avoid t.Parallel() issues ([#7880](https://github.com/containerd/containerd/pull/7880))
    * Add support for user namespaces in stateless pods (KEP-127) ([#7679](https://github.com/containerd/containerd/pull/7679))
    * Refactor metastore transaction ([#7529](https://github.com/containerd/containerd/pull/7529))
    * oci: appendOSMounts(): remove unused error, and move ([#7874](https://github.com/containerd/containerd/pull/7874))
    * add kube v1.26: remove v1alph2 cri support ([#7863](https://github.com/containerd/containerd/pull/7863))
    * make runc 1.1 for oss_fuzz_build.sh ([#7875](https://github.com/containerd/containerd/pull/7875))
    * CRI sbserver: Prevent server reuse after Shutdown ([#7872](https://github.com/containerd/containerd/pull/7872))
    * Fix incorrect defer usage and refactor judgement ([#7521](https://github.com/containerd/containerd/pull/7521))
    * oci: Add WithDomainname ([#7869](https://github.com/containerd/containerd/pull/7869))
    * Reused errdefs define error ([#7871](https://github.com/containerd/containerd/pull/7871))
    * fix `ctr tasks kill` does not remove cni network under windows ([#7866](https://github.com/containerd/containerd/pull/7866))
    * add network plugin metrics ([#7858](https://github.com/containerd/containerd/pull/7858))
    * Avoid using canceled context in unpacker cleanup ([#7859](https://github.com/containerd/containerd/pull/7859))
    * image/label: print more characters of label keys ([#7618](https://github.com/containerd/containerd/pull/7618))
    * prevent Server reuse after a Shutdown ([#7165](https://github.com/containerd/containerd/pull/7165))
    * Check containerd's readiness before calling critest ([#7851](https://github.com/containerd/containerd/pull/7851))
    * Fix grammatical errors in Readme ([#7837](https://github.com/containerd/containerd/pull/7837))
    * Fix cpu architecture detection issue on linux/arm ([#7636](https://github.com/containerd/containerd/pull/7636))
    * CRI: Fix no CNI info for pod sandbox on restart ([#7845](https://github.com/containerd/containerd/pull/7845))
    * Enable checkRename test ([#7081](https://github.com/containerd/containerd/pull/7081))
    * metastore: Add WithTransaction convenience method ([#7781](https://github.com/containerd/containerd/pull/7781))
    * Prevent a race condition in testHook ([#7831](https://github.com/containerd/containerd/pull/7831))
    * cri: fix `memory.memsw.limit_in_bytes: no such file or directory` ([#7836](https://github.com/containerd/containerd/pull/7836))
    * go.mod: update fuzz-headers and fuzz-build ([#7824](https://github.com/containerd/containerd/pull/7824))
    * Remove github.com/gogo/protobuf again ([#7825](https://github.com/containerd/containerd/pull/7825))
    * CRI: Add host networking helper ([#7814](https://github.com/containerd/containerd/pull/7814))
    * Support sandbox shutdown in shim runtimes ([#7792](https://github.com/containerd/containerd/pull/7792))
    * move up to CRI-TOOLS v1.26.0 ([#7818](https://github.com/containerd/containerd/pull/7818))
    * Minor fix when querying pod sandbox status ([#7812](https://github.com/containerd/containerd/pull/7812))
    * nil check to avoid panic on upgrade ([#7809](https://github.com/containerd/containerd/pull/7809))
    * Bump grpc to v1.51.0 ([#7709](https://github.com/containerd/containerd/pull/7709))
    * fatal error: concurrent map iteration and map write ([#7805](https://github.com/containerd/containerd/pull/7805))
    * Bump golangci-lint to v1.50.1 ([#7804](https://github.com/containerd/containerd/pull/7804))
    * cri: make swapping disabled with memory limit ([#7783](https://github.com/containerd/containerd/pull/7783))
    * add metrics for image pulling: error; in progress count; thoughput  ([#7313](https://github.com/containerd/containerd/pull/7313))
    * Prepare release notes for v1.7.0-beta.1 ([#7793](https://github.com/containerd/containerd/pull/7793))
    * support fetching containerd from non public GCS buckets ([#7771](https://github.com/containerd/containerd/pull/7771))
    * images: support specifying SourceDateEpoch via ctx ([#7651](https://github.com/containerd/containerd/pull/7651))
    * fuzzing: improve archive fuzzer ([#7718](https://github.com/containerd/containerd/pull/7718))
    * fix sdNotify func when debug level ([#7798](https://github.com/containerd/containerd/pull/7798))
    * Upgrade GitHub actions packages in release workflow ([#7794](https://github.com/containerd/containerd/pull/7794))
    * Enable GitHub Actions local Linux CI runs ([#7796](https://github.com/containerd/containerd/pull/7796))
    * integration: increase timeout in container_event_test.go ([#7791](https://github.com/containerd/containerd/pull/7791))
    * digest: use github.com/minio/sha256-simd ([#7732](https://github.com/containerd/containerd/pull/7732))
    * allow client to remove created tasks with PID 0 ([#7787](https://github.com/containerd/containerd/pull/7787))
    * Add container event support to containerd ([#7073](https://github.com/containerd/containerd/pull/7073))
    * docs: Authorizer.Authorize could return ErrUnexpectedStatus ([#7786](https://github.com/containerd/containerd/pull/7786))
    * fix: check for tmpfs when evaluating if userxattr is needed ([#7772](https://github.com/containerd/containerd/pull/7772))
    * Pass TOML configuration options for runtimes CRI is not aware of ([#7764](https://github.com/containerd/containerd/pull/7764))
    * Cleanup build constraints ([#7776](https://github.com/containerd/containerd/pull/7776))
    * There is no way to disable debug endpoint on Darwin ([#7775](https://github.com/containerd/containerd/pull/7775))
    * CI: Vagrant: pin rockylinux/8 to v5.0.0 ([#7777](https://github.com/containerd/containerd/pull/7777))
    * vendor: golang.org/x/net v0.4.0 ([#7774](https://github.com/containerd/containerd/pull/7774))
    * Fix context when waiting sandbox ([#7773](https://github.com/containerd/containerd/pull/7773))
    * Github Security Advisory [GHSA-2qjp-425j-52j9](https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9)
    * update to go1.19.4, go1.18.9 ([#7765](https://github.com/containerd/containerd/pull/7765))
    * Change PushContent to require only Provider ([#7763](https://github.com/containerd/containerd/pull/7763))
    * sbserver bug fixing ([#7768](https://github.com/containerd/containerd/pull/7768))
    * Add unit test to Opentelemetry tracing ([#7671](https://github.com/containerd/containerd/pull/7671))
    * remove some (aliases for) deprecated functions ([#7525](https://github.com/containerd/containerd/pull/7525))
    * Refactor ctr restore to allow for tty allocation ([#7673](https://github.com/containerd/containerd/pull/7673))
    * fix panic when containerd-stress density --count 0 ([#7748](https://github.com/containerd/containerd/pull/7748))
    * Unwrap proto errors in streaming client ([#7753](https://github.com/containerd/containerd/pull/7753))
    * Fix process_vm_* syscall names in seccomp ([#7755](https://github.com/containerd/containerd/pull/7755))
    * upgrade the ops.md output for current 1.7 version . ([#7747](https://github.com/containerd/containerd/pull/7747))
    * docs: Add extra security instructions ([#7743](https://github.com/containerd/containerd/pull/7743))
    * go.mod: re-vendor NRI from the official repo. ([#7744](https://github.com/containerd/containerd/pull/7744))
    * [Sandbox API] CRI status cleanup ([#7731](https://github.com/containerd/containerd/pull/7731))
    * Transfer service ([#7320](https://github.com/containerd/containerd/pull/7320))
    * NRI: add support for NRI with extended scope. ([#6019](https://github.com/containerd/containerd/pull/6019))
    * archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ([#7710](https://github.com/containerd/containerd/pull/7710))
    * Fix order of operations when setting lease labels ([#7702](https://github.com/containerd/containerd/pull/7702))
    * Add ctr image prune command ([#7730](https://github.com/containerd/containerd/pull/7730))
    * Check for nullptr before dereferencing ([#7708](https://github.com/containerd/containerd/pull/7708))
    * use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers ([#7736](https://github.com/containerd/containerd/pull/7736))
    * introspection: expose the daemon's PID and PIDNS ([#7694](https://github.com/containerd/containerd/pull/7694))
    * reference/docker: synchronize fork with upstream distribution/distribution ([#7635](https://github.com/containerd/containerd/pull/7635))
    * go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions ([#7721](https://github.com/containerd/containerd/pull/7721))
    * Add ptrace readby and tracedby to default AppArmor profile ([#7714](https://github.com/containerd/containerd/pull/7714))
    * Fix sandbox API when calling sandboxed shims ([#7684](https://github.com/containerd/containerd/pull/7684))
    * make status more readable and update easy. ([#7669](https://github.com/containerd/containerd/pull/7669))
    * integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 ([#7720](https://github.com/containerd/containerd/pull/7720))
    * Resolve warnings in Windows GitHub Actions periodic workflows ([#7706](https://github.com/containerd/containerd/pull/7706))
    * Sandbox API: implement Controller.Status for SandboxAPI ([#7470](https://github.com/containerd/containerd/pull/7470))
    * [port #5904 to sbserver] Setup pod network after creating the sandbox container ([#7426](https://github.com/containerd/containerd/pull/7426))
    * fix for OSS-Fuzz infra changes ([#7677](https://github.com/containerd/containerd/pull/7677))
    * runtime/v2/shim: clean up the use of containerdBinary ([#7499](https://github.com/containerd/containerd/pull/7499))
    * Add process_vm read and write calls to default seccomp profile ([#7693](https://github.com/containerd/containerd/pull/7693))
    * Resolve Scorecards GitHub Actions workflow warnings ([#7707](https://github.com/containerd/containerd/pull/7707))
    * cri: add pod uid annotation ([#7697](https://github.com/containerd/containerd/pull/7697))
    * Missed out `platform interface` when reused the conn for Client. ([#7699](https://github.com/containerd/containerd/pull/7699))
    * overlayfs: remove duplicated tx rollback ([#7700](https://github.com/containerd/containerd/pull/7700))
    * go.mod: update some dependencies ([#7704](https://github.com/containerd/containerd/pull/7704))
    * update github.com/cpuguy83/go-md2man/v2 to v2.0.2 ([#7705](https://github.com/containerd/containerd/pull/7705))
    * Fsnotify bump and change code ([#7703](https://github.com/containerd/containerd/pull/7703))
    * fix build containerd in centos9 ([#7683](https://github.com/containerd/containerd/pull/7683))
    * Bump urfave-cli to v1.22.10 ([#7701](https://github.com/containerd/containerd/pull/7701))
    * can set up the network serially by CNI plugins ([#7685](https://github.com/containerd/containerd/pull/7685))
    * Update cri-api dependency to v0.26.0-beta.0 ([#7656](https://github.com/containerd/containerd/pull/7656))
    * overlay: Remove unused method param ([#7696](https://github.com/containerd/containerd/pull/7696))
    * CI: update Fedora to 37 ([#7691](https://github.com/containerd/containerd/pull/7691))
    * tx rollback when GetInfo return error ([#7678](https://github.com/containerd/containerd/pull/7678))
    * Upgrade github.com/containerd/cgroups from v1 to v3 ([#7601](https://github.com/containerd/containerd/pull/7601))
    * Remove OpenTelementry imports from remotes/docker package ([#7675](https://github.com/containerd/containerd/pull/7675))
    * Expose Done and Err in Shutdown service ([#7686](https://github.com/containerd/containerd/pull/7686))
    * gotestsum match go version 1.19 ([#7688](https://github.com/containerd/containerd/pull/7688))
    * complement sub-command note for containerd-main ([#7670](https://github.com/containerd/containerd/pull/7670))
    * keep the lower case letter for flag info ([#7668](https://github.com/containerd/containerd/pull/7668))
    * bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a ([#7666](https://github.com/containerd/containerd/pull/7666))
    * Fix broken link for CRI plugin in docs ([#7667](https://github.com/containerd/containerd/pull/7667))
    * add option to resolve symlinks in WithLinuxDevice ([#7523](https://github.com/containerd/containerd/pull/7523))
    * Bump k8s.io deps to v0.25.4 ([#7663](https://github.com/containerd/containerd/pull/7663))
    * Release: add static binaries ([#7659](https://github.com/containerd/containerd/pull/7659))
    * Bump OpenTelemetry contrib to v0.36.4 ([#7662](https://github.com/containerd/containerd/pull/7662))
    * Fix slice append error (`spec.Linux.Resources.HugepageLimits`) ([#7661](https://github.com/containerd/containerd/pull/7661))
    * Bump OpenTelemetry to v1.11.1 ([#7660](https://github.com/containerd/containerd/pull/7660))
    * feature: add gc scheduler metrics collection count ([#5263](https://github.com/containerd/containerd/pull/5263))
    * Add `--debug` args to all subcommands of `ctr pprof` ([#7629](https://github.com/containerd/containerd/pull/7629))
    * Add a thin wrapper around otel Span object ([#7655](https://github.com/containerd/containerd/pull/7655))
    * Bump grpc to v1.50.1 ([#7643](https://github.com/containerd/containerd/pull/7643))
    * replace strings.Split(N) for strings.Cut() or alternatives ([#7631](https://github.com/containerd/containerd/pull/7631))
    * add oci.WithCPURT ([#7642](https://github.com/containerd/containerd/pull/7642))
    * Sandbox API: Add a new mode config for sandbox controller impls ([#7590](https://github.com/containerd/containerd/pull/7590))
    * fuzzing: bump go-fuzz-headers ([#7625](https://github.com/containerd/containerd/pull/7625))
    * Bump k8s.io deps to v0.25.3 ([#7637](https://github.com/containerd/containerd/pull/7637))
    * Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex ([#7641](https://github.com/containerd/containerd/pull/7641))
    * Extra documentation for content interfaces ([#7640](https://github.com/containerd/containerd/pull/7640))
    * Fix shim socket permissions on Darwin ([#7638](https://github.com/containerd/containerd/pull/7638))
    * s390x: build and package s390x bin in release assets ([#7614](https://github.com/containerd/containerd/pull/7614))
    * Replace mount fork hack with CLONE_FS ([#7513](https://github.com/containerd/containerd/pull/7513))
    * remotes: add `FetcherByDigest` for fetching blobs without foreknown descriptors (useful for general-purpose CAS) ([#7460](https://github.com/containerd/containerd/pull/7460))
    * Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 ([#7403](https://github.com/containerd/containerd/pull/7403))
    * Support default hosts.toml configuration ([#7607](https://github.com/containerd/containerd/pull/7607))
    * Add tracing spans in CRI image service and pull.go ([#7453](https://github.com/containerd/containerd/pull/7453))
    * Fix missing closed fifo ([#7604](https://github.com/containerd/containerd/pull/7604))
    * fix comments ([#7624](https://github.com/containerd/containerd/pull/7624))
    * docs: add additional info in backport process ([#7626](https://github.com/containerd/containerd/pull/7626))
    * go.mod: golang.org/x/*: use tagged versions ([#7621](https://github.com/containerd/containerd/pull/7621))
    * Bump go version to 1.19.3 ([#7620](https://github.com/containerd/containerd/pull/7620))
    * ctr export strictly matching ([#7615](https://github.com/containerd/containerd/pull/7615))
    * Fix ctr crash when pulling with --http-dump and --http-trace simultaneously ([#7617](https://github.com/containerd/containerd/pull/7617))
    * Harden GITHUB_TOKEN permissions for OSSF Scorecard ([#7599](https://github.com/containerd/containerd/pull/7599))
    * overlayutils: Add fastpath for userxattr check ([#7611](https://github.com/containerd/containerd/pull/7611))
    * Add sequence diagram for shim runtime v2 ([#7606](https://github.com/containerd/containerd/pull/7606))
    * Sandbox API: Move remote impls to /sandbox/proxy ([#7600](https://github.com/containerd/containerd/pull/7600))
    * fuzzing: improve archive fuzzer ([#7588](https://github.com/containerd/containerd/pull/7588))
    * Retry client connection in  waitForStart ([#7537](https://github.com/containerd/containerd/pull/7537))
    * Add Workflow for running critest with Hyper-V Containers on Windows. ([#7025](https://github.com/containerd/containerd/pull/7025))
    * Add release notes for v1.7.0-beta.0 ([#7575](https://github.com/containerd/containerd/pull/7575))
    * Cleanup sandbox interfaces ([#7576](https://github.com/containerd/containerd/pull/7576))
    * Update GitHub actions release workflow set output ([#7581](https://github.com/containerd/containerd/pull/7581))
    * Fix LogURI generation-related tests on Windows. ([#7569](https://github.com/containerd/containerd/pull/7569))
    * maintenance: Remove WithWindowsNetworkNamespace from pkg/cri ([#7577](https://github.com/containerd/containerd/pull/7577))
    * CRI: implement Controller.Delete for SandboxAPI ([#7457](https://github.com/containerd/containerd/pull/7457))
    * Configure CDI registry only on start ([#7419](https://github.com/containerd/containerd/pull/7419))
    * update codeql-action to v2 ([#7568](https://github.com/containerd/containerd/pull/7568))
    * Add logging related metrics to Containerd CRI plugin ([#7546](https://github.com/containerd/containerd/pull/7546))
    * sys: optimize and refactor MkdirAllWithACL() ([#7531](https://github.com/containerd/containerd/pull/7531))
    * fix install cni script ([#7484](https://github.com/containerd/containerd/pull/7484))
    * Update 1.5 release support timeframe ([#7560](https://github.com/containerd/containerd/pull/7560))
    * bump go-fuzz-headers ([#7503](https://github.com/containerd/containerd/pull/7503))
    * Add long term stable release branches ([#7454](https://github.com/containerd/containerd/pull/7454))
    * fix pusher concurrent close channel ([#7473](https://github.com/containerd/containerd/pull/7473))
    * Make tests on GitHub less noisy ([#7530](https://github.com/containerd/containerd/pull/7530))
    * containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded ([#7541](https://github.com/containerd/containerd/pull/7541))
    * Update required Go version in BUILDING.md ([#7544](https://github.com/containerd/containerd/pull/7544))
    * go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) ([#7522](https://github.com/containerd/containerd/pull/7522))
    * Use `go env` to determine GOPATH in Makefile. ([#7542](https://github.com/containerd/containerd/pull/7542))
    * clean-up "nolint" comments, remove unused ones, update golangci-lint ([#7349](https://github.com/containerd/containerd/pull/7349))
    * Don't unmount on Darwin when deleting bundle ([#7534](https://github.com/containerd/containerd/pull/7534))
    * Add timeouts to all CI jobs ([#7538](https://github.com/containerd/containerd/pull/7538))
    * Vagrantfile: explicitly specify rsync as the shared folder driver ([#7539](https://github.com/containerd/containerd/pull/7539))
    * sys: remove unused IsAbs() (windows) ([#7527](https://github.com/containerd/containerd/pull/7527))
    * cri: PodSandboxStatus should tolerate missing task ([#7535](https://github.com/containerd/containerd/pull/7535))
    * CI: update GHA instances from Ubuntu 18.04 to 20.04 ([#7489](https://github.com/containerd/containerd/pull/7489))
    * fix the --no-pivot flag being ignored by `ctr tasks start` ([#7519](https://github.com/containerd/containerd/pull/7519))
    * Update the default seccomp to block socket calls to AF_VSOCK ([#7510](https://github.com/containerd/containerd/pull/7510))
    * cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() ([#7511](https://github.com/containerd/containerd/pull/7511))
    * Stats() shouldn't assume s.container is non-nil ([#7517](https://github.com/containerd/containerd/pull/7517))
    * Move up actions versions to prep for NodeJS 12 deprecation ([#7516](https://github.com/containerd/containerd/pull/7516))
    * cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() ([#7512](https://github.com/containerd/containerd/pull/7512))
    * Updates oci image config to support upstream ArgsEscaped ([#7483](https://github.com/containerd/containerd/pull/7483))
    * cmd/containerd: replace deprecated windows.IsAnInteractiveSession() ([#7497](https://github.com/containerd/containerd/pull/7497))
    * Update container with sandbox metadata after NetNS is created ([#7481](https://github.com/containerd/containerd/pull/7481))
    * archive: add WithSourceDateEpoch() for whiteouts ([#7478](https://github.com/containerd/containerd/pull/7478))
    * TestTaskResize must use a terminal ([#7492](https://github.com/containerd/containerd/pull/7492))
    * diff/apply.readCounter: check negative size ([#7494](https://github.com/containerd/containerd/pull/7494))
    * Add new ctr option for discarding unpacked layers ([#7425](https://github.com/containerd/containerd/pull/7425))
    * archive: windows: chtimes(): remove redundant conversion ([#7491](https://github.com/containerd/containerd/pull/7491))
    * archive: validate digests before use ([#7488](https://github.com/containerd/containerd/pull/7488))
    * vendor: github.com/opencontainers/selinux v1.10.2 ([#7482](https://github.com/containerd/containerd/pull/7482))
    * fuzzing: create structured tar bytes in archive fuzzer ([#7477](https://github.com/containerd/containerd/pull/7477))
    * Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 ([#7474](https://github.com/containerd/containerd/pull/7474))
    * use raw link to containerd.service config ([#7463](https://github.com/containerd/containerd/pull/7463))
    * cri doc: Update kata containers reference ([#7466](https://github.com/containerd/containerd/pull/7466))
    * Setup pod network after creating the sandbox container ([#5904](https://github.com/containerd/containerd/pull/5904))
    * Swap to net.ErrClosed checks for services ([#7446](https://github.com/containerd/containerd/pull/7446))
    * go.mod: Bump go-winio to v0.6.0 ([#7443](https://github.com/containerd/containerd/pull/7443))
    * fix retry when writer is reset on push ([#6995](https://github.com/containerd/containerd/pull/6995))
    * CI: Output a summary using GITHUB_SUMMARY ([#7192](https://github.com/containerd/containerd/pull/7192))
    * Fix missing close ([#7430](https://github.com/containerd/containerd/pull/7430))
    * Add test flag for skipping shim cgroup test ([#7424](https://github.com/containerd/containerd/pull/7424))
    * Refactor CRI fuzzers ([#7405](https://github.com/containerd/containerd/pull/7405))
    * Fix LogURIGenerator on Windows ([#7351](https://github.com/containerd/containerd/pull/7351))
    * Set grpc code for unimplemented cri-api methods ([#7417](https://github.com/containerd/containerd/pull/7417))
    * Add reader option to local content reader at ([#7414](https://github.com/containerd/containerd/pull/7414))
    * Sandbox API: implement Controller.Wait and Controller.Stop ([#7401](https://github.com/containerd/containerd/pull/7401))
    * remove stray .zuul.yaml ([#7416](https://github.com/containerd/containerd/pull/7416))
    * reference CDI configuration details ([#7408](https://github.com/containerd/containerd/pull/7408))
    * cri-integration: propagate ENABLE_CRI_SANDBOXES ([#7413](https://github.com/containerd/containerd/pull/7413))
    * Enable OpenSSF Scorecard Github Action ([#7404](https://github.com/containerd/containerd/pull/7404))
    * Add ext2 fs support to devmapper snapshotter ([#7402](https://github.com/containerd/containerd/pull/7402))
    * Fuzzing: Instrument with new sanitizers ([#7396](https://github.com/containerd/containerd/pull/7396))
    * Upgrade fuzzing-related packages to reduce dependencies ([#7397](https://github.com/containerd/containerd/pull/7397))
    * remotes/docker/config: Skipping TLS verification for localhost ([#7393](https://github.com/containerd/containerd/pull/7393))
    * Replace github.com/emicklei/go-restful package, versions <2.16.0 ([#7395](https://github.com/containerd/containerd/pull/7395))
    * Add NoSameOwner option when unpacking tars ([#7386](https://github.com/containerd/containerd/pull/7386))
    * ctr: add privileged-without-host-devices for run command ([#7328](https://github.com/containerd/containerd/pull/7328))
    * chore: matching the casing of other flags for ctr's pull command ([#7341](https://github.com/containerd/containerd/pull/7341))
    * windows: Add runhcs-wcow-hypervisor runtimeclass to the default config ([#6901](https://github.com/containerd/containerd/pull/6901))
    * Fix missing close ([#7370](https://github.com/containerd/containerd/pull/7370))
    * CRI: update cdi version to v0.5.1 ([#7374](https://github.com/containerd/containerd/pull/7374))
    * Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 ([#7372](https://github.com/containerd/containerd/pull/7372))
    * vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c ([#7373](https://github.com/containerd/containerd/pull/7373))
    * Remove unused variable from images action ([#7371](https://github.com/containerd/containerd/pull/7371))
    * feature: use client default namespace ([#7291](https://github.com/containerd/containerd/pull/7291))
    * integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment ([#7367](https://github.com/containerd/containerd/pull/7367))
    * feature: upgrade registry.k8s.io/pause version ([#7359](https://github.com/containerd/containerd/pull/7359))
    * metrics/cgroups/v1: Remove unused event parameter ([#7361](https://github.com/containerd/containerd/pull/7361))
    * .zuul: remove the zuul because it is offline ([#7369](https://github.com/containerd/containerd/pull/7369))
    * Update golangci-lint timeout to match config ([#7356](https://github.com/containerd/containerd/pull/7356))
    * delete redundent import alias and and type conversion ([#7345](https://github.com/containerd/containerd/pull/7345))
    * Make checkContainerTimestamps less strict on Windows ([#7350](https://github.com/containerd/containerd/pull/7350))
    * Make oss-fuzz mandatory ([#7346](https://github.com/containerd/containerd/pull/7346))
    * Add kubernetes v1.25 supported version as v1.24 ([#7326](https://github.com/containerd/containerd/pull/7326))
    * sys: move ForceRemoveAll to integration/client ([#7335](https://github.com/containerd/containerd/pull/7335))
    * chore: remove duplicate word in comments ([#7338](https://github.com/containerd/containerd/pull/7338))
    * Use ioctl helpers from x/sys/unix ([#7342](https://github.com/containerd/containerd/pull/7342))
    * archive: replace tarName() with filepath.ToSlash() ([#7344](https://github.com/containerd/containerd/pull/7344))
    * mount: remove unused ErrNotImplementOnWindows ([#7339](https://github.com/containerd/containerd/pull/7339))
    * replace sys Sequential funcs with moby/sys/sequential ([#7334](https://github.com/containerd/containerd/pull/7334))
    * Clarify containerd 1.5.0+ for k8s 1.20,1.21 ([#7324](https://github.com/containerd/containerd/pull/7324))
    * update runc binary to v1.1.4 ([#7315](https://github.com/containerd/containerd/pull/7315))
    * Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 ([#7325](https://github.com/containerd/containerd/pull/7325))
    * Update k8s.io/cri-api to v0.25.0 ([#7287](https://github.com/containerd/containerd/pull/7287))
    * script/setup: handle cnidir with SUDO ([#7322](https://github.com/containerd/containerd/pull/7322))
    * ContainerStatus to return container resources ([#6517](https://github.com/containerd/containerd/pull/6517))
    * migrate from k8s.gcr.io to registry.k8s.io ([#7038](https://github.com/containerd/containerd/pull/7038))
    * Do not rename test files on-the-fly to share functions ([#7309](https://github.com/containerd/containerd/pull/7309))
    * ctr import: strictly match platform ([#6906](https://github.com/containerd/containerd/pull/6906))
    * Revert "Downgrade MinGW to version 10.2.0" ([#7308](https://github.com/containerd/containerd/pull/7308))
    * Follow up #7254 (Switch to Go 1.19) ([#7286](https://github.com/containerd/containerd/pull/7286))
    * Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer ([#7304](https://github.com/containerd/containerd/pull/7304))
    * Adding support of CAP_BPF and CAP_PERFMON ([#7301](https://github.com/containerd/containerd/pull/7301))
    * go.mod: Bump hcsshim to v0.10.0-rc.1 ([#7284](https://github.com/containerd/containerd/pull/7284))
    * Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset ([#7306](https://github.com/containerd/containerd/pull/7306))
    * ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 ([#7293](https://github.com/containerd/containerd/pull/7293))
    * Runtime cleanup (Shim manager and task service) ([#7280](https://github.com/containerd/containerd/pull/7280))
    * containerd-stress: add support for running through CRI ([#6931](https://github.com/containerd/containerd/pull/6931))
    * Switch to Go 1.19 ([#7254](https://github.com/containerd/containerd/pull/7254))
    * Vagrantfile: dump containerd log after critest ([#7265](https://github.com/containerd/containerd/pull/7265))
    * oci: skip checking group id for WithAppendAdditionalGroups ([#7257](https://github.com/containerd/containerd/pull/7257))
    * release workflow: increase timeout to 30 minutes & remove Go setup action ([#7259](https://github.com/containerd/containerd/pull/7259))
    * release: rollback Ubuntu to 18.04 (except for riscv64) ([#7258](https://github.com/containerd/containerd/pull/7258))
    * Initial sandbox API CRI integration (implement Controller.Start) ([#7228](https://github.com/containerd/containerd/pull/7228))
    * Use environment variable to specify Go version on CI ([#7251](https://github.com/containerd/containerd/pull/7251))
    * Update golang to 1.18.5, 1.17.13 ([#7243](https://github.com/containerd/containerd/pull/7243))
    * Change os.Stderr reassign for Windows service ([#7023](https://github.com/containerd/containerd/pull/7023))
    * script/setup: fix protobuf for aarch64 ([#7237](https://github.com/containerd/containerd/pull/7237))
    * Fix cleanup in critest ([#7232](https://github.com/containerd/containerd/pull/7232))
    * fix: support simultaneous create diff for same parent snapshot ([#7204](https://github.com/containerd/containerd/pull/7204))
    * Windows HostProcess container CRI stats test ([#7223](https://github.com/containerd/containerd/pull/7223))
    * Regenerate protos with updated protoc-gen-go ([#7226](https://github.com/containerd/containerd/pull/7226))
    * test: error strings should not be capitalized ([#7195](https://github.com/containerd/containerd/pull/7195))
    * Add extra context to error when push unauthorized ([#7220](https://github.com/containerd/containerd/pull/7220))
    * replace with selinux label ([#7207](https://github.com/containerd/containerd/pull/7207))
    * Use `httputil.DumpRequestOut` for dumping client req ([#7221](https://github.com/containerd/containerd/pull/7221))
    * Fix CRI image pull timeout test for ppc64le ([#7215](https://github.com/containerd/containerd/pull/7215))
    * test: introduce failpoint control to runc-shimv2 and cni ([#7069](https://github.com/containerd/containerd/pull/7069))
    * chore: bump macos runner version ([#7206](https://github.com/containerd/containerd/pull/7206))
    * Use image lists form integration/client tests ([#7210](https://github.com/containerd/containerd/pull/7210))
    * go.mod: Bump hcsshim to v0.9.4 ([#7212](https://github.com/containerd/containerd/pull/7212))
    * Drop deprecated `ioutil` ([#7203](https://github.com/containerd/containerd/pull/7203))
    * Make getServicesOpts a helper ([#7201](https://github.com/containerd/containerd/pull/7201))
    * adds an env var commented out for sandboxed mode ([#7183](https://github.com/containerd/containerd/pull/7183))
    * cri_stats: handle missing cpu stats ([#7198](https://github.com/containerd/containerd/pull/7198))
    * using ContextDialer instead ([#7189](https://github.com/containerd/containerd/pull/7189))
    * test: Add ability to switch between  cgroupv1 or cgroupv2 for node e2e ([#7173](https://github.com/containerd/containerd/pull/7173))
    * code cleanup ([#7182](https://github.com/containerd/containerd/pull/7182))
    * Update k8s.io/cri-api to v0.25.0-alpha2 ([#7114](https://github.com/containerd/containerd/pull/7114))
    * Refactor usageNanoCores be to used for all OSes ([#7186](https://github.com/containerd/containerd/pull/7186))
    * adds support for using env file for systemd boot ([#7191](https://github.com/containerd/containerd/pull/7191))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#7185](https://github.com/containerd/containerd/pull/7185))
    * ctr: support --user for run/create ([#7145](https://github.com/containerd/containerd/pull/7145))
    * docs: Fix sample config.toml syntax ([#7174](https://github.com/containerd/containerd/pull/7174))
    * seccomp: seccomp: add syscalls related to PKU in default policy ([#7163](https://github.com/containerd/containerd/pull/7163))
    * Update and align golangci-lint version ([#7168](https://github.com/containerd/containerd/pull/7168))
    * adds a comment explaining how to disable experimental sbserver ([#7169](https://github.com/containerd/containerd/pull/7169))
    * ci: workaround Cirrus CI's INVALID_ARGUMENT ([#7177](https://github.com/containerd/containerd/pull/7177))
    * Update install-protobuf script  to install protobuf on Darwin ([#7153](https://github.com/containerd/containerd/pull/7153))
    * Fork CRI server for Sandbox API integration work ([#7164](https://github.com/containerd/containerd/pull/7164))
    * seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE ([#7167](https://github.com/containerd/containerd/pull/7167))
    * cri doc: fix formatting for CDI options ([#7158](https://github.com/containerd/containerd/pull/7158))
    * update golang to 1.18.4, 1.17.12 ([#7159](https://github.com/containerd/containerd/pull/7159))
    * Fix out of date comments for CRI store packages ([#7152](https://github.com/containerd/containerd/pull/7152))
    * update some devmapper docs ([#7124](https://github.com/containerd/containerd/pull/7124))
    * seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#7149](https://github.com/containerd/containerd/pull/7149))
    * Copy fuzzers from github.com/cncf/cncf-fuzzing ([#7123](https://github.com/containerd/containerd/pull/7123))
    * fix can't edit object by using ctr content edit command ([#6847](https://github.com/containerd/containerd/pull/6847))
    * integration/client: fix typo in export_test.go ([#7130](https://github.com/containerd/containerd/pull/7130))
    * Fix WWW-Authenticate parsing ([#7126](https://github.com/containerd/containerd/pull/7126))
    * LCOW differ return ErrNotImplemented for wrong mount type ([#7112](https://github.com/containerd/containerd/pull/7112))
    * Update go-restful/v3 to latest release ([#7117](https://github.com/containerd/containerd/pull/7117))
    * pkg/cri: use marshal wrapper for version convertor ([#7108](https://github.com/containerd/containerd/pull/7108))
    * Remove hacks around contrib/fuzz ([#7087](https://github.com/containerd/containerd/pull/7087))
    * Fix missing closed HTTP Body ([#7107](https://github.com/containerd/containerd/pull/7107))
    * Cleanup metadata tests ([#7105](https://github.com/containerd/containerd/pull/7105))
    * Downgrade MinGW to version 10.2.0 ([#7106](https://github.com/containerd/containerd/pull/7106))
    * ctr: Fix `ctr c create` fails to parse arguments ([#7098](https://github.com/containerd/containerd/pull/7098))
    * Fix Documentation Issue ([#7103](https://github.com/containerd/containerd/pull/7103))
    * refactor: reduce duplicate code ([#7100](https://github.com/containerd/containerd/pull/7100))
    * make xattr EPERM non-fatal in createTarFile ([#7094](https://github.com/containerd/containerd/pull/7094))
    * Move metadata plugin registration to seperate package ([#7096](https://github.com/containerd/containerd/pull/7096))
    * fix: missing sudo for devmapper doc ([#7092](https://github.com/containerd/containerd/pull/7092))
    * Ensure Windows Periodic workflow errors out while still uploading results. ([#7085](https://github.com/containerd/containerd/pull/7085))
    * Add snapshotter key to snapshot events ([#7084](https://github.com/containerd/containerd/pull/7084))
    * add WithAdditionalGIDs test ([#7072](https://github.com/containerd/containerd/pull/7072))
    * Forward ctr snapshotter flags on Windows ([#7086](https://github.com/containerd/containerd/pull/7086))
    * add WithAppendAdditionalGroups helper ([#7070](https://github.com/containerd/containerd/pull/7070))
    * Make CI Fuzz less noisy ([#7065](https://github.com/containerd/containerd/pull/7065))
    * ctr: add --hostname flag to create, run ([#7082](https://github.com/containerd/containerd/pull/7082))
    * improve content-flow ([#7077](https://github.com/containerd/containerd/pull/7077))
    * Make CI Fuzz optional ([#7067](https://github.com/containerd/containerd/pull/7067))
    * Use Go 1.18's testing.F on simple fuzzers ([#7056](https://github.com/containerd/containerd/pull/7056))
    * Downgrade MinGW in Windows setup scripts. ([#7062](https://github.com/containerd/containerd/pull/7062))
    * Make test path a constant ([#7057](https://github.com/containerd/containerd/pull/7057))
    * Run fuzzers in CI ([#7052](https://github.com/containerd/containerd/pull/7052))
    * CRI: Improve the /dev/shm mount options in Sandbox. ([#6913](https://github.com/containerd/containerd/pull/6913))
    * fix:userattr-unmount unexpected timeout ([#7008](https://github.com/containerd/containerd/pull/7008))
    * Port (some) unit tests to FreeBSD ([#7042](https://github.com/containerd/containerd/pull/7042))
    * Bump Golang and MinGW versions in Windows setup script. ([#6888](https://github.com/containerd/containerd/pull/6888))
    * Windows snapshotter touch ups and new functionality ([#6918](https://github.com/containerd/containerd/pull/6918))
    * Improve naming consistencies in comments in snapshotter.go ([#7032](https://github.com/containerd/containerd/pull/7032))
    * Make building static binaries simpler ([#7022](https://github.com/containerd/containerd/pull/7022))
    * Allow CRI on Darwin ([#7033](https://github.com/containerd/containerd/pull/7033))
    * update runc binary to v1.1.3 ([#7034](https://github.com/containerd/containerd/pull/7034))
    * Linux containers on FreeBSD ([#7000](https://github.com/containerd/containerd/pull/7000))
    * go.mod: github.com/moby/sys/mountinfo v0.6.2 ([#7026](https://github.com/containerd/containerd/pull/7026))
    * fix minor spelling mistake: lablel -> label ([#7031](https://github.com/containerd/containerd/pull/7031))
    * go.mod: github.com/containerd/cgroups v1.0.4 ([#7027](https://github.com/containerd/containerd/pull/7027))
    * go.mod: github.com/containerd/continuity v0.3.0 ([#7028](https://github.com/containerd/containerd/pull/7028))
    * Correct spelling mistake ("sanbdox" to "sandbox") ([#7029](https://github.com/containerd/containerd/pull/7029))
    * Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf)
    * Bump grpc to v1.47.0 ([#7018](https://github.com/containerd/containerd/pull/7018))
    * Bump k8s.io deps to v0.24.1 ([#7017](https://github.com/containerd/containerd/pull/7017))
    * Support runtime level snapshotter for issue 6657 ([#6899](https://github.com/containerd/containerd/pull/6899))
    * update golang to 1.18.3, 1.17.11 ([#7012](https://github.com/containerd/containerd/pull/7012))
    * Fix containerd-stress duration flag ([#7004](https://github.com/containerd/containerd/pull/7004))
    * update go-cni/for cni update fixing plugins that don't respond with version ([#7009](https://github.com/containerd/containerd/pull/7009))
    * Add validations for Windows HostProcess CRI configs ([#6996](https://github.com/containerd/containerd/pull/6996))
    * Move docker reference logic to reference/docker package ([#7007](https://github.com/containerd/containerd/pull/7007))
    * promote pause image to 3.7 (sync with kube v1.24) ([#7003](https://github.com/containerd/containerd/pull/7003))
    * Makefile: use urfave_cli_no_docs for binaries that don't need it ([#6998](https://github.com/containerd/containerd/pull/6998))
    * CRI: cleanup cri/store package ([#6993](https://github.com/containerd/containerd/pull/6993))
    * Use t.Run for /pkg/cri tests ([#7001](https://github.com/containerd/containerd/pull/7001))
    * vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script ([#6997](https://github.com/containerd/containerd/pull/6997))
    * sandbox: replace github.com/pkg/errors with native errors ([#6937](https://github.com/containerd/containerd/pull/6937))
    * build: Fix references to check-protos target in Makefile ([#6983](https://github.com/containerd/containerd/pull/6983))
    * ctr: fix label args used in NewContainer ([#6954](https://github.com/containerd/containerd/pull/6954))
    * ctr sandbox: handle sandbox config ([#6959](https://github.com/containerd/containerd/pull/6959))
    * Fix broken oss-fuzz build ([#6975](https://github.com/containerd/containerd/pull/6975))
    * archive: add human-readable hint to Lchown error ([#6982](https://github.com/containerd/containerd/pull/6982))
    * Fix tx closed error when upperdirlabel specified ([#6978](https://github.com/containerd/containerd/pull/6978))
    * config: improve config v1 deprecation message ([#6972](https://github.com/containerd/containerd/pull/6972))
    * Fix Windows install powershell script ([#6969](https://github.com/containerd/containerd/pull/6969))
    * fix comments on metadata schema and update namespace doc ([#6955](https://github.com/containerd/containerd/pull/6955))
    * adjust format in comment ([#6956](https://github.com/containerd/containerd/pull/6956))
    * Restore decompression benchmarks ([#6957](https://github.com/containerd/containerd/pull/6957))
    * cmd/ctr/commands/content: fix typo in fetch command usage ([#6960](https://github.com/containerd/containerd/pull/6960))
    * fix some confusing typos ([#6950](https://github.com/containerd/containerd/pull/6950))
    * update doc url about k8s ([#6952](https://github.com/containerd/containerd/pull/6952))
    * Separate windows-2019 and windows-2022 test results ([#6946](https://github.com/containerd/containerd/pull/6946))
    * shim: fix debug flag not working ([#6910](https://github.com/containerd/containerd/pull/6910))
    * Reverts removal of parallel run from critest ([#6938](https://github.com/containerd/containerd/pull/6938))
    * Bump OpenTelemetry dependencies ([#6932](https://github.com/containerd/containerd/pull/6932))
    * update runc binary and vendor to v1.1.2 ([#6934](https://github.com/containerd/containerd/pull/6934))
    * oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ([#6923](https://github.com/containerd/containerd/pull/6923))
    * update golang to 1.18.2, 1.17.10 ([#6926](https://github.com/containerd/containerd/pull/6926))
    * CI: update Fedora to 36 ([#6925](https://github.com/containerd/containerd/pull/6925))
    * Add `Wait` to `binaryProcessor` ([#6916](https://github.com/containerd/containerd/pull/6916))
    * go.mod: Bump k8s deps to v0.24.0 ([#6905](https://github.com/containerd/containerd/pull/6905))
    * (Vagrant CI) Enable git commands due to git CVE fix ([#6915](https://github.com/containerd/containerd/pull/6915))
    * Pass explicit JUnit outfile to critest.exe in Windows workflow. ([#6912](https://github.com/containerd/containerd/pull/6912))
    * Update critools to v1.24 ([#6894](https://github.com/containerd/containerd/pull/6894))
    * devmapper docs: small fixes ([#6904](https://github.com/containerd/containerd/pull/6904))
    * move report dir option to end of line for vagrant cri tests ([#6900](https://github.com/containerd/containerd/pull/6900))
    * Update Kubernetes version matrix in release docs ([#6892](https://github.com/containerd/containerd/pull/6892))
    * Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy ([#6889](https://github.com/containerd/containerd/pull/6889))
    * containerd 1.6.4 k8s 1.24 readme announce ([#6890](https://github.com/containerd/containerd/pull/6890))
    * Cleanup leaked shim process ([#6866](https://github.com/containerd/containerd/pull/6866))
    * Add collectible resources to metadata gc ([#6804](https://github.com/containerd/containerd/pull/6804))
    * Update k8 docurl in file ([#6881](https://github.com/containerd/containerd/pull/6881))
    * Support RISC-V 64 ([#6882](https://github.com/containerd/containerd/pull/6882))
    * docs: minor fixes in snapshots.Snapshotter comments ([#6885](https://github.com/containerd/containerd/pull/6885))
    * Officially deprecate Schema 1 ([#6884](https://github.com/containerd/containerd/pull/6884))
    * Make Cirrus CI tests more stable ([#6880](https://github.com/containerd/containerd/pull/6880))
    * docs: Adding windows installation steps to getting-started.md ([#6875](https://github.com/containerd/containerd/pull/6875))
    * Add ctr support for CPUMax and CPUShares ([#6809](https://github.com/containerd/containerd/pull/6809))
    * Support for cgroups blockio ([#5490](https://github.com/containerd/containerd/pull/5490))
    * Fix comment for metadata/db.go ([#6871](https://github.com/containerd/containerd/pull/6871))
    * Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies ([#6867](https://github.com/containerd/containerd/pull/6867))
    * Update go-cni to v1.1.5 ([#6868](https://github.com/containerd/containerd/pull/6868))
    * Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#6865](https://github.com/containerd/containerd/pull/6865))
    * Upgrade google.golang.org/grpc and google.golang.org/protobuf ([#6864](https://github.com/containerd/containerd/pull/6864))
    * Don't use "uname -a" as Cirrus CI's cache key ([#6863](https://github.com/containerd/containerd/pull/6863))
    * remove duplicate ([#6856](https://github.com/containerd/containerd/pull/6856))
    * Create ppc64le release ([#6858](https://github.com/containerd/containerd/pull/6858))
    * Move Vagrant-based tests from GitHub Actions to Cirrus CI ([#6854](https://github.com/containerd/containerd/pull/6854))
    * feature: support image pull progress timeout ([#6150](https://github.com/containerd/containerd/pull/6150))
    * Add unpack interface to be used by client ([#6749](https://github.com/containerd/containerd/pull/6749))
    * Fix undefined error in use of errors package ([#6855](https://github.com/containerd/containerd/pull/6855))
    * Migrate off from github.com/gogo/protobuf ([#6841](https://github.com/containerd/containerd/pull/6841))
    * images/image.go: typo ([#6851](https://github.com/containerd/containerd/pull/6851))
    * Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices ([#5686](https://github.com/containerd/containerd/pull/5686))
    * integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage ([#6180](https://github.com/containerd/containerd/pull/6180))
    * fix incorrect syntax in comments ([#6845](https://github.com/containerd/containerd/pull/6845))
    * cri: close fifos when container is deleted ([#6842](https://github.com/containerd/containerd/pull/6842))
    * diff: hide types.Any from clients ([#6832](https://github.com/containerd/containerd/pull/6832))
    * Add Container-Optimized OS into Adopters ([#6838](https://github.com/containerd/containerd/pull/6838))
    * Prepare for google.golang.org/protobuf ([#6835](https://github.com/containerd/containerd/pull/6835))
    * fix the restart desired to running when task not found ([#6833](https://github.com/containerd/containerd/pull/6833))
    * Remove all gogoproto extensions ([#6829](https://github.com/containerd/containerd/pull/6829))
    * fix nil pointer panic for monitor ([#6830](https://github.com/containerd/containerd/pull/6830))
    * remotes/docker: log registry URLs as info instead of debug ([#5681](https://github.com/containerd/containerd/pull/5681))
    * Rename runtime/v2/task to api/runtime ([#6827](https://github.com/containerd/containerd/pull/6827))
    * Fix protoc-gen-go-fieldpath ([#6828](https://github.com/containerd/containerd/pull/6828))
    * Consolidate gogo/protobuf dependencies under our own protobuf package ([#6826](https://github.com/containerd/containerd/pull/6826))
    * Add restart policy for enhanced restart manager ([#6744](https://github.com/containerd/containerd/pull/6744))
    * Remove gogoproto.stdtime ([#6821](https://github.com/containerd/containerd/pull/6821))
    * Set timeout when collecting metrics from shim's Stat ([#6781](https://github.com/containerd/containerd/pull/6781))
    * Fuzz filter package with Go 1.18's fuzzer ([#6819](https://github.com/containerd/containerd/pull/6819))
    * allow ptrace(2) by default for kernel >= 4.8 ([#6810](https://github.com/containerd/containerd/pull/6810))
    * Build bin/gen-manpages instead of using "go run" ([#6820](https://github.com/containerd/containerd/pull/6820))
    * update golang to 1.18.1, 1.17.9 ([#6822](https://github.com/containerd/containerd/pull/6822))
    * Sandbox API ([#6703](https://github.com/containerd/containerd/pull/6703))
    * Move lease manager plugin to separate package ([#6811](https://github.com/containerd/containerd/pull/6811))
    * fix pool_device_test ([#6807](https://github.com/containerd/containerd/pull/6807))
    * check for duplicate nspath possibilities ([#6806](https://github.com/containerd/containerd/pull/6806))
    * Do not append []string{""} to command to preserve Docker compatibility ([#6805](https://github.com/containerd/containerd/pull/6805))
    * tracing: fix panic on startup when configured ([#6789](https://github.com/containerd/containerd/pull/6789))
    * Optimize loading performance for cri recover ([#6680](https://github.com/containerd/containerd/pull/6680))
    * Change architecture path in README.md ([#6798](https://github.com/containerd/containerd/pull/6798))
    * make consistent for checkpoint path ([#6792](https://github.com/containerd/containerd/pull/6792))
    * metrics/cgroups: fix deadlock issue in Add during Collect ([#6788](https://github.com/containerd/containerd/pull/6788))
    * ADOPTERS: Update AKS Info ([#6794](https://github.com/containerd/containerd/pull/6794))
    * Pin upload-cloud-storage action to 0.8.0 in Windows workflow. ([#6790](https://github.com/containerd/containerd/pull/6790))
    * docs: add Deckhouse to the list of adopters ([#6785](https://github.com/containerd/containerd/pull/6785))
    * Add `docs/snapshotters`; simplify `docs/cri` ([#6778](https://github.com/containerd/containerd/pull/6778))
    * Turn paths from cmdline into absolute paths ([#6672](https://github.com/containerd/containerd/pull/6672))
    * CRI: add support for CDI device injection ([#6654](https://github.com/containerd/containerd/pull/6654))
    * Disable writing freelist to make the file robust against data corruptions ([#6761](https://github.com/containerd/containerd/pull/6761))
    * mv design docs/historical/design ([#6777](https://github.com/containerd/containerd/pull/6777))
    * CRI: improve image pulling performance ([#6702](https://github.com/containerd/containerd/pull/6702))
    * docs: remove runtime v1; migrate config v1 to v2 ([#6776](https://github.com/containerd/containerd/pull/6776))
    * Skip flaky test on Windows ([#6779](https://github.com/containerd/containerd/pull/6779))
    * docs/getting-started.md: typo ([#6775](https://github.com/containerd/containerd/pull/6775))
    * Add no_tracing tag ([#6750](https://github.com/containerd/containerd/pull/6750))
    * Move historical docs to `docs/historical` ([#6754](https://github.com/containerd/containerd/pull/6754))
    * Run go mod tidy in integration tests ([#6768](https://github.com/containerd/containerd/pull/6768))
    * go.mod: move indirects, and update integration go.mod to 1.18 ([#6765](https://github.com/containerd/containerd/pull/6765))
    * Drop gotest.tools ([#6762](https://github.com/containerd/containerd/pull/6762))
    * Use t.Setenv instead of os.Setenv ([#6760](https://github.com/containerd/containerd/pull/6760))
    * Upgrade to Go 1.18 ([#6709](https://github.com/containerd/containerd/pull/6709))
    * Adding multi-arch support for the configure.sh script ([#6751](https://github.com/containerd/containerd/pull/6751))
    * docs/getting-started.md: massive update ([#6758](https://github.com/containerd/containerd/pull/6758))
    * Remove unmaintained contrib/linuxkit ([#6755](https://github.com/containerd/containerd/pull/6755))
    * [Windows CI] Address some timeout issues ([#6757](https://github.com/containerd/containerd/pull/6757))
    * BUILDING.md: update supported Go versions ([#6756](https://github.com/containerd/containerd/pull/6756))
    * update runc to 1.1.1 ([#6753](https://github.com/containerd/containerd/pull/6753))
    * CI: add Rocky Linux 8 ([#6747](https://github.com/containerd/containerd/pull/6747))
    * CI: bump up crun to 1.4.4 ([#6748](https://github.com/containerd/containerd/pull/6748))
    * added make help for cri integration ([#6743](https://github.com/containerd/containerd/pull/6743))
    * Update README.md cncf landscape url ([#6740](https://github.com/containerd/containerd/pull/6740))
    * Fix error message in TestNewBinaryIO ([#6738](https://github.com/containerd/containerd/pull/6738))
    * Use typeurl.Any instead of github.com/gogo/protobuf/types.Any ([#6706](https://github.com/containerd/containerd/pull/6706))
    * Use cgroups.AddProc() for cgroups v1 ([#5738](https://github.com/containerd/containerd/pull/5738))
    * fix: ctr images mount with snapshotter option can't get snapshotter ([#6713](https://github.com/containerd/containerd/pull/6713))
    * cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6323](https://github.com/containerd/containerd/pull/6323))
    * moving up to go-cni v1.1.4 ([#6721](https://github.com/containerd/containerd/pull/6721))
    * native: fix deadlock from leaving transactions open ([#6722](https://github.com/containerd/containerd/pull/6722))
    * go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 ([#5390](https://github.com/containerd/containerd/pull/5390))
    * Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c)
    * runtime: deprecate runc --criu / -criu-path option ([#6496](https://github.com/containerd/containerd/pull/6496))
    * Bug fix for mount path handling ([#6651](https://github.com/containerd/containerd/pull/6651))
    * Upgrade containerd/imgcrypt and opencontainers/image-spec ([#6711](https://github.com/containerd/containerd/pull/6711))
    * Remove enumvalue_customname, goproto_enum_prefix and enum_customname ([#6708](https://github.com/containerd/containerd/pull/6708))
    * Remove gogoproto.customtype ([#6699](https://github.com/containerd/containerd/pull/6699))
    * Skip tty critest testcase on Windows Server 2022 ([#6698](https://github.com/containerd/containerd/pull/6698))
    * Build with Go 1.18 ([#6605](https://github.com/containerd/containerd/pull/6605))
    * Update prometheus client vendor ([#6690](https://github.com/containerd/containerd/pull/6690))
    * vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd ([#6687](https://github.com/containerd/containerd/pull/6687))
    * Make the temp mount as ready only in container WithVolumes ([#6593](https://github.com/containerd/containerd/pull/6593))
    * fix: `ctr run --cni` get failed ([#6670](https://github.com/containerd/containerd/pull/6670))
    * test: use `T.TempDir` to create temporary test directory ([#6681](https://github.com/containerd/containerd/pull/6681))
    * Make OpenLab's CI jobs blocking ([#6679](https://github.com/containerd/containerd/pull/6679))
    * document log level and format ([#6683](https://github.com/containerd/containerd/pull/6683))
    * Add shared content label to namespaces ([#6660](https://github.com/containerd/containerd/pull/6660))
    * Add protoc-gen-go-fieldpath ([#6562](https://github.com/containerd/containerd/pull/6562))
    * Enable gosec linter for golangci-lint ([#6669](https://github.com/containerd/containerd/pull/6669))
    * Make mkfs.xfs available on OpenLab's CI environment ([#6668](https://github.com/containerd/containerd/pull/6668))
    * ctr: improve error relative shim path error msg ([#6519](https://github.com/containerd/containerd/pull/6519))
    * typo fixes under cmd. ([#6674](https://github.com/containerd/containerd/pull/6674))
    * Handle CRI Device.HostPath on Windows ([#6618](https://github.com/containerd/containerd/pull/6618))
    * Upgrade golangci-lint and its GitHub Action ([#6666](https://github.com/containerd/containerd/pull/6666))
    * Don't build a second copy of containerd-shim-runhcs-v1.exe ([#6661](https://github.com/containerd/containerd/pull/6661))
    * Update TestNormalize to only test Windows platform ([#6569](https://github.com/containerd/containerd/pull/6569))
    * Fix link in getting-started.md ([#6663](https://github.com/containerd/containerd/pull/6663))
    * Fuzzing: refactor metadata fuzzers ([#6423](https://github.com/containerd/containerd/pull/6423))
    * Two xfs file systems with same UUID can not be mounted on the same sy… ([#6650](https://github.com/containerd/containerd/pull/6650))
    * [Windows] Fix deadline exceeded in daemon restart ([#6635](https://github.com/containerd/containerd/pull/6635))
    * Use temp file for export/import test ([#6658](https://github.com/containerd/containerd/pull/6658))
    * strip path-info from `-v` (version) output, and implement -v flag for containerd-shim  ([#6495](https://github.com/containerd/containerd/pull/6495))
    * Improve unexpected response error handling in resolver ([#6617](https://github.com/containerd/containerd/pull/6617))
    * Use the latest tag for azure images ([#6601](https://github.com/containerd/containerd/pull/6601))
    * Run CRI integration tests in GitHub Actions (Windows) ([#6626](https://github.com/containerd/containerd/pull/6626))
    * cri: fix integration test on cgroupsv2 system ([#6595](https://github.com/containerd/containerd/pull/6595))
    * Use version 2 configuration format in docs/PLUGINS.md ([#6613](https://github.com/containerd/containerd/pull/6613))
    * update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#6619](https://github.com/containerd/containerd/pull/6619))
    * Update status of 1.4 release ([#6614](https://github.com/containerd/containerd/pull/6614))
    * Update TestContainerSymlinkVolumes to use windows path ([#6568](https://github.com/containerd/containerd/pull/6568))
    * Add --user support for ctr run Windows ([#6603](https://github.com/containerd/containerd/pull/6603))
    * Update releases ([#6608](https://github.com/containerd/containerd/pull/6608))
    * Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7)
    * Adds support for Windows ArgsEscaped images ([#6479](https://github.com/containerd/containerd/pull/6479))
    * Do not use weak import ([#6558](https://github.com/containerd/containerd/pull/6558))
    * cri: relax test for system without hugetlb ([#6596](https://github.com/containerd/containerd/pull/6596))
    * Use containerd/protobuild instead of stevvooe/protobuild ([#6578](https://github.com/containerd/containerd/pull/6578))
    * integration: remove duplicated util pkg ([#6597](https://github.com/containerd/containerd/pull/6597))
    * go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 ([#6591](https://github.com/containerd/containerd/pull/6591))
    * Update Go version recommendation in getting started ([#6585](https://github.com/containerd/containerd/pull/6585))
    * go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 ([#6337](https://github.com/containerd/containerd/pull/6337))
    * fix Implicit memory aliasing in for loop ([#6331](https://github.com/containerd/containerd/pull/6331))
    * Fix build with gccgo ([#6579](https://github.com/containerd/containerd/pull/6579))
    * Replace golang.org/x/net/context with std library ([#6580](https://github.com/containerd/containerd/pull/6580))
    * containerd-shim-runc-v1: return init pid when clean dead shim ([#6571](https://github.com/containerd/containerd/pull/6571))
    * Use Windows matcher when on Windows platform in all code paths ([#6491](https://github.com/containerd/containerd/pull/6491))
    * containerd-shim-runc-v2: return init pid when clean dead shim ([#6452](https://github.com/containerd/containerd/pull/6452))
    * [Windows][Integration] Enable TestRestartMonitor ([#6515](https://github.com/containerd/containerd/pull/6515))
    * go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 ([#6554](https://github.com/containerd/containerd/pull/6554))
    </p>
    </details>
    
    ### Changes from containerd/cgroups
    <details><summary>49 commits</summary>
    <p>
    
    * Upgrade GitHub actions CI workflow ([#249](https://github.com/containerd/cgroups/pull/249))
    * Upgrade Go compiler to 1.19 ([#248](https://github.com/containerd/cgroups/pull/248))
    * Don't use ioutil ([#246](https://github.com/containerd/cgroups/pull/246))
    * Check that cgroup is empty before deleting ([#228](https://github.com/containerd/cgroups/pull/228))
    * Support cgroup.AddThread in cgroupv2 manager ([#243](https://github.com/containerd/cgroups/pull/243))
    * Support to handle more than 4 fields in cpuacct.stat ([#231](https://github.com/containerd/cgroups/pull/231))
    * typo shoulld -> should ([#236](https://github.com/containerd/cgroups/pull/236))
    * Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 ([#241](https://github.com/containerd/cgroups/pull/241))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#240](https://github.com/containerd/cgroups/pull/240))
    * .github: use ubuntu-22.04 to test cgroupv2 ([#237](https://github.com/containerd/cgroups/pull/237))
    * feat(v2): Support cgroup.MoveTo in cgroupv2 manager ([#235](https://github.com/containerd/cgroups/pull/235))
    * Update README to include usage examples of v2 client ([#233](https://github.com/containerd/cgroups/pull/233))
    * ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path ([#232](https://github.com/containerd/cgroups/pull/232))
    * Bump go version to 1.17 in go.mod ([#230](https://github.com/containerd/cgroups/pull/230))
    * make cmd/ a separate module (as it's only for testing) ([#226](https://github.com/containerd/cgroups/pull/226))
    * feat(v2): add Update method for v2.Manager ([#225](https://github.com/containerd/cgroups/pull/225))
    * feat: add memory.min param ([#211](https://github.com/containerd/cgroups/pull/211))
    * modified the dereference null pointer value. ([#218](https://github.com/containerd/cgroups/pull/218))
    * update readme for cpu cgroup demo ([#217](https://github.com/containerd/cgroups/pull/217))
    * Fix systemd full path ([#221](https://github.com/containerd/cgroups/pull/221))
    * Update Go version and fedora base ([#223](https://github.com/containerd/cgroups/pull/223))
    * Fix panic in NewSystemd on nil values ([#219](https://github.com/containerd/cgroups/pull/219))
    </p>
    </details>
    
    ### Changes from containerd/continuity
    <details><summary>28 commits</summary>
    <p>
    
    * go.mod: update dependencies (take 2) ([#204](https://github.com/containerd/continuity/pull/204))
    * Revert "go.mod: update dependencies" ([#205](https://github.com/containerd/continuity/pull/205))
    * Various small fix-ups ([#202](https://github.com/containerd/continuity/pull/202))
    * update authors and mailmap ([#201](https://github.com/containerd/continuity/pull/201))
    * move cmd/continuity to its own go module ([#200](https://github.com/containerd/continuity/pull/200))
    * CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir)  ([#198](https://github.com/containerd/continuity/pull/198))
    * fs.CopyDir: support sockets and pipes ([#197](https://github.com/containerd/continuity/pull/197))
    * Fix wrapping errors ([#196](https://github.com/containerd/continuity/pull/196))
    </p>
    </details>
    
    ### Changes from containerd/go-cni
    <details><summary>38 commits</summary>
    <p>
    
    * Add Go 1.20 support ([#111](https://github.com/containerd/go-cni/pull/111))
    * opts: add cgroupPath capability ([#110](https://github.com/containerd/go-cni/pull/110))
    * go.mod: github.com/containernetworking/cni v1.1.2 ([#109](https://github.com/containerd/go-cni/pull/109))
    * Remove references to io/ioutil package ([#106](https://github.com/containerd/go-cni/pull/106))
    * Update golangci/golangci-lint package ([#108](https://github.com/containerd/go-cni/pull/108))
    * Update GitHub actions CI workflow ([#107](https://github.com/containerd/go-cni/pull/107))
    * Add support for Windows default conf paths ([#103](https://github.com/containerd/go-cni/pull/103))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#104](https://github.com/containerd/go-cni/pull/104))
    * go.mod: update libcni to v1.1.1 ([#101](https://github.com/containerd/go-cni/pull/101))
    * add in some serial setup tests; a little make cleanup ([#100](https://github.com/containerd/go-cni/pull/100))
    * Re-introduce serial network setup ([#99](https://github.com/containerd/go-cni/pull/99))
    * bump github.com/containernetworking/cni v1.1.0 ([#98](https://github.com/containerd/go-cni/pull/98))
    * Revert "Update loopback version to support check" ([#96](https://github.com/containerd/go-cni/pull/96))
    * Use revive instead of golint ([#92](https://github.com/containerd/go-cni/pull/92))
    * Bump go verion to 1.17 ([#91](https://github.com/containerd/go-cni/pull/91))
    * moving up to latest CNI plugin release ([#90](https://github.com/containerd/go-cni/pull/90))
    * Fix Loopback Version ([#88](https://github.com/containerd/go-cni/pull/88))
    * Update comment for capabilities ([#89](https://github.com/containerd/go-cni/pull/89))
    * Add integration test for linux and update go version from 1.16 to 1.17 ([#84](https://github.com/containerd/go-cni/pull/84))
    </p>
    </details>
    
    ### Changes from containerd/imgcrypt
    <details><summary>18 commits</summary>
    <p>
    
    * Use reflect to support diff.ApplyConfig with/without gogo's types.Any ([#75](https://github.com/containerd/imgcrypt/pull/75))
    * Upgrade golangci-lint-action and golangci-lint ([#76](https://github.com/containerd/imgcrypt/pull/76))
    * CHANGES: Updated CHANGES document for 1.1.4 release ([#74](https://github.com/containerd/imgcrypt/pull/74))
    * Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#73](https://github.com/containerd/imgcrypt/pull/73))
    * images: prepare for typeurl.Any ([#72](https://github.com/containerd/imgcrypt/pull/72))
    * Bump ocicrypt to 1.1.3 ([#71](https://github.com/containerd/imgcrypt/pull/71))
    * Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#67](https://github.com/containerd/imgcrypt/pull/67))
    </p>
    </details>
    
    ### Changes from containerd/nri
    <details><summary>56 commits</summary>
    <p>
    
    * Add Go 1.20 support to CI ([#30](https://github.com/containerd/nri/pull/30))
    * Add CodeQL Security scan workflow ([#31](https://github.com/containerd/nri/pull/31))
    * fixes: sort final adjusted mount slice. ([#29](https://github.com/containerd/nri/pull/29))
    * fixes: fix resource adjustment to properly ignore unset/unadjusted fields. ([#28](https://github.com/containerd/nri/pull/28))
    * adaptation: fix mount and device adjustment. ([#27](https://github.com/containerd/nri/pull/27))
    * Make plugin timeouts configurable, adjust default socket path. ([#26](https://github.com/containerd/nri/pull/26))
    * pkg/adaptation: eliminate configuration file. ([#24](https://github.com/containerd/nri/pull/24))
    * stub: fix a potential plugin crash. ([#25](https://github.com/containerd/nri/pull/25))
    * adaptation: fix a panic for unsolicited updates. ([#23](https://github.com/containerd/nri/pull/23))
    * pkg/adaptaton: log errors with %v not %w. ([#22](https://github.com/containerd/nri/pull/22))
    * chore: cleanup old buildtags by `go fix` ([#21](https://github.com/containerd/nri/pull/21))
    * add back project info ([#20](https://github.com/containerd/nri/pull/20))
    * Extend scope to enable common pluggable runtime extensions. ([#16](https://github.com/containerd/nri/pull/16))
    * Update GitHub actions CI workflow ([#19](https://github.com/containerd/nri/pull/19))
    * replace pkg/errors ([#17](https://github.com/containerd/nri/pull/17))
    * Update the examples in README.md ([#15](https://github.com/containerd/nri/pull/15))
    * Rename branch from master to main ([#12](https://github.com/containerd/nri/pull/12))
    * Update to containerd 1.5.1 ([#11](https://github.com/containerd/nri/pull/11))
    </p>
    </details>
    
    ### Changes from containerd/ttrpc
    <details><summary>56 commits</summary>
    <p>
    
    * Make checkServerShutdown verbose ([#128](https://github.com/containerd/ttrpc/pull/128))
    * server: Fix connection issues when receiving ECONNRESET ([#123](https://github.com/containerd/ttrpc/pull/123))
    * README: protobuild is in containerd org now ([#125](https://github.com/containerd/ttrpc/pull/125))
    * stream: fix the map of streams leak ([#120](https://github.com/containerd/ttrpc/pull/120))
    * Regenerated pb.go files to fix mismatches ([#122](https://github.com/containerd/ttrpc/pull/122))
    * build: Fix references to check-protos target in Makefile ([#118](https://github.com/containerd/ttrpc/pull/118))
    * Add service prefix option to generator ([#116](https://github.com/containerd/ttrpc/pull/116))
    * doc: ttrpc supports stream ([#121](https://github.com/containerd/ttrpc/pull/121))
    * *: remove codecov ([#114](https://github.com/containerd/ttrpc/pull/114))
    * Only generate a Go file if the file has some services ([#112](https://github.com/containerd/ttrpc/pull/112))
    * *.go: organize errors to one spot ([#113](https://github.com/containerd/ttrpc/pull/113))
    * PROTOCOL: slight markdown touchup ([#111](https://github.com/containerd/ttrpc/pull/111))
    * Introduce streaming ([#107](https://github.com/containerd/ttrpc/pull/107))
    * Update checkout and lint actions ([#109](https://github.com/containerd/ttrpc/pull/109))
    * Add Makefile and update protobuf ([#106](https://github.com/containerd/ttrpc/pull/106))
    * Add ttrpc protocol definition ([#102](https://github.com/containerd/ttrpc/pull/102))
    * Enable Codecov again ([#105](https://github.com/containerd/ttrpc/pull/105))
    * Use CR+LF instead of LF regardless of OS ([#103](https://github.com/containerd/ttrpc/pull/103))
    * Log the error's underyling errno if there is ([#104](https://github.com/containerd/ttrpc/pull/104))
    * Use google.golang.org/protobuf instead of github.com/gogo/protobuf ([#99](https://github.com/containerd/ttrpc/pull/99))
    * Wrap correct error on unix.GetsockoptUcred failure ([#100](https://github.com/containerd/ttrpc/pull/100))
    * Update CI project checks to use containerd project action ([#101](https://github.com/containerd/ttrpc/pull/101))
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 -> 1f10f66a31bf
    * **github.com/AdamKorcz/go-118-fuzz-build**                                       5330a85ea652 **_new_**
    * **github.com/Microsoft/go-winio**                                                v0.5.1 -> v0.6.0
    * **github.com/Microsoft/hcsshim**                                                 v0.9.2 -> v0.10.0-rc.5
    * **github.com/blang/semver/v4**                                                   v4.0.0 **_new_**
    * **github.com/cenkalti/backoff/v4**                                               v4.1.2 -> v4.2.0
    * **github.com/cilium/ebpf**                                                       v0.7.0 -> v0.9.1
    * **github.com/container-orchestrated-devices/container-device-interface**         v0.5.1 **_new_**
    * **github.com/containerd/btrfs/v2**                                               v2.0.0 **_new_**
    * **github.com/containerd/cgroups**                                                v1.0.3 -> v1.1.0
    * **github.com/containerd/cgroups/v3**                                             v3.0.0 **_new_**
    * **github.com/containerd/continuity**                                             v0.2.2 -> v0.3.0
    * **github.com/containerd/go-cni**                                                 v1.1.3 -> 6603d5bd8941
    * **github.com/containerd/imgcrypt**                                               v1.1.3 -> 8ba028dca028
    * **github.com/containerd/nri**                                                    v0.1.0 -> v0.3.0
    * **github.com/containerd/ttrpc**                                                  v1.1.0 -> 32fab2374638
    * **github.com/containerd/typeurl/v2**                                             v2.1.0 **_new_**
    * **github.com/containernetworking/cni**                                           v1.0.1 -> v1.1.2
    * **github.com/containernetworking/plugins**                                       v1.0.1 -> v1.2.0
    * **github.com/containers/ocicrypt**                                               v1.1.2 -> v1.1.3
    * **github.com/coreos/go-systemd/v22**                                             v22.3.2 -> v22.5.0
    * **github.com/cpuguy83/go-md2man/v2**                                             v2.0.0 -> v2.0.2
    * **github.com/cyphar/filepath-securejoin**                                        v0.2.3 **_new_**
    * **github.com/docker/go-units**                                                   v0.4.0 -> v0.5.0
    * **github.com/emicklei/go-restful/v3**                                            v3.8.0 **_new_**
    * **github.com/fsnotify/fsnotify**                                                 v1.4.9 -> v1.6.0
    * **github.com/go-logr/logr**                                                      v1.2.2 -> v1.2.3
    * **github.com/godbus/dbus/v5**                                                    v5.0.6 -> v5.1.0
    * **github.com/google/go-cmp**                                                     v0.5.6 -> v0.5.9
    * **github.com/google/uuid**                                                       v1.2.0 -> v1.3.0
    * **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.7.0 **_new_**
    * **github.com/intel/goresctrl**                                                   v0.2.0 -> v0.3.0
    * **github.com/klauspost/compress**                                                v1.11.13 -> v1.15.11
    * **github.com/klauspost/cpuid/v2**                                                v2.0.4 **_new_**
    * **github.com/miekg/pkcs11**                                                      v1.0.3 -> v1.1.1
    * **github.com/minio/sha256-simd**                                                 v1.0.0 **_new_**
    * **github.com/moby/sys/mountinfo**                                                v0.5.0 -> v0.6.2
    * **github.com/moby/sys/sequential**                                               v0.5.0 **_new_**
    * **github.com/moby/sys/signal**                                                   v0.6.0 -> v0.7.0
    * **github.com/opencontainers/image-spec**                                         693428a734f5 -> 3a7f492d3f1b
    * **github.com/opencontainers/runc**                                               v1.1.0 -> v1.1.4
    * **github.com/opencontainers/runtime-spec**                                       1c3f411f0417 -> 86290f6a00fb
    * **github.com/opencontainers/runtime-tools**                                      946c877fa809 **_new_**
    * **github.com/opencontainers/selinux**                                            v1.10.0 -> v1.10.2
    * **github.com/pelletier/go-toml**                                                 v1.9.3 -> v1.9.5
    * **github.com/prometheus/client_golang**                                          v1.11.0 -> v1.13.0
    * **github.com/prometheus/common**                                                 v0.30.0 -> v0.37.0
    * **github.com/prometheus/procfs**                                                 v0.7.3 -> v0.8.0
    * **github.com/russross/blackfriday/v2**                                           v2.0.1 -> v2.1.0
    * **github.com/sirupsen/logrus**                                                   v1.8.1 -> v1.9.0
    * **github.com/stretchr/testify**                                                  v1.7.0 -> v1.8.1
    * **github.com/syndtr/gocapability**                                               42c35b437635 **_new_**
    * **github.com/tchap/go-patricia/v2**                                              v2.3.1 **_new_**
    * **github.com/urfave/cli**                                                        v1.22.1 -> v1.22.12
    * **github.com/vishvananda/netlink**                                               f5de75959ad5 -> v1.2.1-beta.2
    * **go.etcd.io/bbolt**                                                             v1.3.6 -> v1.3.7
    * **go.opencensus.io**                                                             v0.23.0 -> v0.24.0
    * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 -> v0.37.0
    * **go.opentelemetry.io/otel**                                                     v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/metric**                                              v0.34.0 **_new_**
    * **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/trace**                                               v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/proto/otlp**                                               v0.11.0 -> v0.19.0
    * **golang.org/x/crypto**                                                          32db794688a5 -> v0.1.0
    * **golang.org/x/mod**                                                             v0.7.0 **_new_**
    * **golang.org/x/net**                                                             fe4d6282115f -> v0.5.0
    * **golang.org/x/oauth2**                                                          2bc19b11175f -> 6fdb5e3db783
    * **golang.org/x/sync**                                                            036812b2e83c -> v0.1.0
    * **golang.org/x/sys**                                                             1d35b9e2eb4e -> v0.5.0
    * **golang.org/x/term**                                                            6886f2dfbf5b -> v0.4.0
    * **golang.org/x/text**                                                            v0.3.7 -> v0.6.0
    * **golang.org/x/time**                                                            1f47c861a9ac -> 90d013bbcef8
    * **golang.org/x/tools**                                                           v0.5.0 **_new_**
    * **google.golang.org/genproto**                                                   e50cd9704f63 -> 1c016267d619
    * **google.golang.org/grpc**                                                       v1.43.0 -> v1.52.3
    * **google.golang.org/protobuf**                                                   v1.27.1 -> v1.28.1
    * **gopkg.in/yaml.v3**                                                             496545a6307b -> v3.0.1
    * **k8s.io/api**                                                                   v0.22.5 -> v0.25.4
    * **k8s.io/apimachinery**                                                          v0.22.5 -> v0.25.4
    * **k8s.io/apiserver**                                                             v0.22.5 -> v0.25.4
    * **k8s.io/client-go**                                                             v0.22.5 -> v0.25.4
    * **k8s.io/component-base**                                                        v0.22.5 -> v0.25.4
    * **k8s.io/cri-api**                                                               v0.23.1 -> v0.26.0-beta.0
    * **k8s.io/klog/v2**                                                               v2.30.0 -> v2.80.1
    * **k8s.io/utils**                                                                 cb0fa318a74b -> 8e77b1f39fe2
    * **sigs.k8s.io/json**                                                             f223a00ba0e2 **_new_**
    * **sigs.k8s.io/structured-merge-diff/v4**                                         v4.1.2 -> v4.2.3
    * **sigs.k8s.io/yaml**                                                             v1.2.0 -> v1.3.0
    
    Previous release can be found at [v1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0)
    ### Which file should I download?
    * `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
    * `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
    * `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:     (Deprecated)
    * `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated)
    
    In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
    and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
    
    See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.
    
    
  • v1.7.0-beta.4
    containerd 1.7.0-beta.4
    
    Welcome to the v1.7.0-beta.4 release of containerd!
    *This is a pre-release of containerd*
    
    The eighth major release of containerd includes new functionality alongside many improvements.
    This release is intended to be the last major release of containerd 1.x before 2.0.
    Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0.
    This release still adheres to our backwards compability guarantees and users who do not use or enable new functionality should use this release with the same stability expectations.
    The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality.
    
    _This is a beta release and includes some functionality which is not yet complete. While most APIs are finalized before merge, they are subject to change until the official release._
    
    ### Highlights
    
    #### Sandbox API _(experimental)_
    
    The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs.
    This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients.
    
    * **Sandbox API** ([#6703](https://github.com/containerd/containerd/pull/6703))
    * **CRI Sandbox API Implementation** ([#7228](https://github.com/containerd/containerd/pull/7228))
    
    #### Transfer Service _(experimental)_
    
    * **Transfer Service** ([#7320](https://github.com/containerd/containerd/pull/7320))
    
    The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for
    pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release
    to allow for further plugin development and integration into existing plugins.
    
    See the [Transfer Docs](https://github.com/containerd/containerd/blob/main/docs/transfer.md)
    
    #### NRI _(experimental)_
    
    * **Extend NRI scope** ([nri#16](https://github.com/containerd/nri/pull/16))
    * **Support for updated NRI** ([#6019](https://github.com/containerd/containerd/pull/6019))
    
    The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides
    basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration.
    
    This release introduces NRI v0.2.0 with an updated plugin interface to cover a wide range of use cases.
    
    See the [NRI Docs](https://github.com/containerd/containerd/blob/main/docs/NRI.md)
    
    #### Platform Support
    
    * **Linux containers on FreeBSD** ([#7000](https://github.com/containerd/containerd/pull/7000))
    
    #### Runtime Features
    
    * **Add support for CDI device injection** ([#6654](https://github.com/containerd/containerd/pull/6654))
    * **Support for cgroups blockio** ([#5490](https://github.com/containerd/containerd/pull/5490))
    * **Add restart policy for enhanced restart manager** ([#6744](https://github.com/containerd/containerd/pull/6744))
    
    #### gRPC Shim Support _(experimental)_
    
    * **Initial gRPC shim support** ([#8052](https://github.com/containerd/containerd/pull/8052))
    
    Adds support for shims to use gRPC in addition to ttrpc. Existing ttrpc shim support is not going
    away and will continue to be recommended for the best performance and lowest shim memory overhead.
    The gRPC support allows implementation of a wider range of shim implementations which may not
    have access to a stable ttrpc library in the implementation language. The shim protocol is also
    updated to allow the shims to specify the protocol which is supported.
    
    #### Road to 2.0
    
    ##### Refactoring
    
    There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points.
    
    The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality
    out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independently. The new sandbox and distribution interfaces provide one example of this,
    but it also being done for image and network management.
    
    The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc.
    Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability.
    
    * **Remove gogoproto.customtype** ([#6699](https://github.com/containerd/containerd/pull/6699))
    * **Remove enumvalue_customname, goproto_enum_prefix and enum_customname** ([#6708](https://github.com/containerd/containerd/pull/6708))
    * **Remove all gogoproto extensions** ([#6829](https://github.com/containerd/containerd/pull/6829))
    * **Migrate off from github.com/gogo/protobuf** ([#6841](https://github.com/containerd/containerd/pull/6841))
    * **ttrpc streaming** ([ttrpc#107](https://github.com/containerd/ttrpc/pull/107))
    
    * **Add unpack interface for client** ([#6749](https://github.com/containerd/containerd/pull/6749))
    * **Add collectible resources to metadata gc** ([#6804](https://github.com/containerd/containerd/pull/6804))
    
    ##### Configuration
    
    Existing CRI configurations will be supported until 2.0.
    Any functionality split out of CRI will have their configuration migrated to new plugins.
    Deprecated configuration versions and configurations for deprecated features will be removed in 2.0.
    
    ##### Deprecation
    
    The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include.
    
    * **Docker Schema 1 Image Deprecation** ([#6884](https://github.com/containerd/containerd/pull/6884))
    
    #### CRI Updates
    
    * **Fix CRI plugin to setup pod network after creating the sandbox container** ([#5904](https://github.com/containerd/containerd/pull/5904))
    * **Support image pull progress timeout** ([#6150](https://github.com/containerd/containerd/pull/6150))
    * **Add experimental support for runtime specific snapshotters** ([#6899](https://github.com/containerd/containerd/pull/6899))
    * **Pass all TOML runtime configuration options from CRI to the runtime** ([#7764](https://github.com/containerd/containerd/pull/7764))
    * **Support for user namespaces in stateless pods ([KEP-127](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/127-user-namespaces)) _(experimental)_** ([#7679](https://github.com/containerd/containerd/pull/7679))
    * **Add network plugin metrics** ([#7858](https://github.com/containerd/containerd/pull/7858))
    * **CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23** ([#7863](https://github.com/containerd/containerd/pull/7863))
    
    #### Other
    
    * **Support shallow content copy by adding reader option to local content reader at** ([#7414](https://github.com/containerd/containerd/pull/7414))
    * **Add NoSameOwner option when unpacking tars** ([#7386](https://github.com/containerd/containerd/pull/7386))
    * **Add `FetcherByDigest` for fetching blobs without fetching a manifest** ([#7460](https://github.com/containerd/containerd/pull/7460))
    * **Update default seccomp profile to block socket calls to AF_VSOCK** ([#7510](https://github.com/containerd/containerd/pull/7510))
    * **Replace fork on mount logic with CLONE_FS** ([#7513](https://github.com/containerd/containerd/pull/7513))
    * **Add support for default registry host configuration** ([#7607](https://github.com/containerd/containerd/pull/7607))
    * **Use github.com/minio/sha256-simd for more efficient sha256 calculation** ([#7732](https://github.com/containerd/containerd/pull/7732))
    * **Make OCI options cross-platform** ([#7928](https://github.com/containerd/containerd/pull/7928))
    * **Update release builds to build from Ubuntu 20.04 with glibc 2.31** ([#8021](https://github.com/containerd/containerd/pull/8021))
    * **Use data field from OCI descriptor when provided for fetch** ([#8076](https://github.com/containerd/containerd/pull/8076))
    
    See the changelog for complete list of changes
    
    Please try out the release binaries and report any issues at
    https://github.com/containerd/containerd/issues.
    
    ### Contributors
    
    * Derek McGowan
    * Kazuyoshi Kato
    * Maksym Pavlenko
    * Phil Estes
    * Wei Fu
    * Akihiro Suda
    * Sebastiaan van Stijn
    * Samuel Karp
    * Mike Brown
    * Krisztian Litkey
    * Daniel Canter
    * Danny Canter
    * yanggang
    * Austin Vazquez
    * Ye Sijun
    * Iceber Gu
    * Adam Korcz
    * Ed Bartosh
    * Luca Comellini
    * Stefan Berger
    * ruiwen-zhao
    * xin.li
    * Brian Goff
    * Gabriel Adrian Samfira
    * Nashwan Azhari
    * Paul "TBBle" Hampson
    * Rodrigo Campos
    * Henry Wang
    * Justin Terry
    * Kevin Parsons
    * Paco Xu
    * Shengjing Zhu
    * Swagat Bora
    * wanglei
    * zounengren
    * Gavin Inglis
    * Tony Fang
    * Akhil Mohan
    * Zechun Chen
    * guodong
    * lengrongfu
    * James Jenkins
    * Michael Crosby
    * Qiutong Song
    * Shiming Zhang
    * Vincent Batts
    * Antonio Ojea
    * Cameron Sparr
    * Casey Callendrello
    * Josh Seba
    * Junyu Liu
    * Kirtana Ashok
    * Kohei Tokunaga
    * Michael Zappa
    * Qasim Sarfraz
    * Tobias Klauser
    * pigletfly
    * yaoyinnan
    * Abirdcfly
    * Amit Barve
    * Bjorn Neergaard
    * Changwei Ge
    * Craig Ingram
    * Eng Zer Jun
    * Eric Lin
    * Ethan Lowman
    * James Sturtevant
    * Jess
    * Jonny Stoten
    * Juan Hoyos
    * Kang.Zhang
    * Kay Yan
    * Markus Lehtonen
    * Mikko Ylinen
    * Mohit Sharma
    * Paul Cacheux
    * Paul S. Schweigert
    * Qian Zhang
    * TTFISH
    * Yasin Turan
    * bin liu
    * dependabot[bot]
    * helen
    * yulng
    * Aditi
    * Aditi Sharma
    * Aman Sharma
    * Anastassios Nanos
    * Andrew G. Morgan
    * Andrey Klimentyev
    * Anthony Nandaa
    * Antti Kervinen
    * Aviral Takkar
    * Baoshuo
    * Benjamin Elder
    * Chao Dai
    * Chuanying Du
    * Claudiu Belu
    * Cory Snider
    * Danielle Lancashire
    * Dat Nguyen
    * Davanum Srinivas
    * Dave
    * David Leadbeater
    * David Porter
    * Dmitry Shurupov
    * Edgar Lee
    * Eric Ernst
    * Fabian Hoffman
    * Fabian Hoffmann
    * Fahed Dorgaa
    * Gabriela Cervantes
    * Gijs Peskens
    * Hamza El-Saawy
    * Hsing-Yu (David) Chen
    * Ikko Ashimine
    * Jeff Widman
    * Jeff Zvier
    * Jeremi Piotrowski
    * Jin Dong
    * Jordan Karaze
    * Joseph Sheng
    * Joyce Brum
    * Jukka Rissanen
    * Justin Chadwell
    * Kate
    * Kathryn Baldauf
    * Kyle L Frisbie
    * LongtaoZhang
    * Manuel Alejandro de Brito Fontes
    * Marc Schwind
    * Mark Rossetti
    * Mark Zhang
    * Marvin Giessing
    * Mathis Michel
    * Merlin Ran
    * Nabeel Rana
    * Nathan
    * Nguyen Phan Huy
    * Nikita Rybak
    * Nobel Barakat
    * Oleg Atamanenko
    * Oleg Zhurakivskyy
    * Oliver Radwell
    * Quan Tian
    * Roy Yang
    * Serge Logvinov
    * Shane Jennings
    * Shaun Lawrie
    * Shinichi Morimoto
    * SilverSoldier
    * Sophie Liu
    * Su Fei
    * Taeho Nam
    * Takumasa Sakao
    * Tiger Kaovilai
    * Tom Godkin
    * Tomoya.Fujita
    * Tõnis Tiigi
    * Xinlin Ma
    * Yakul Garg
    * Zhang Tianyang
    * Zhongming Chang
    * Zhuchen Wang
    * austinvazquez
    * cardy.tang
    * chaunceyjiang
    * dabaooline
    * guiyong.ou
    * huoqifeng
    * jianfei.zhang
    * liyuxuan.darfux
    * ningmingxiao
    * shi yixue
    * shuaichang
    * songjiang han
    * wen chen
    * wusong
    * xiaoyang zhu
    * yanghesong
    * yaozhenxiu
    * zhang he
    
    ### Changes
    <details><summary>1609 commits</summary>
    <p>
    
    * Prepare release notes for v1.7.0 beta.4 ([#8110](https://github.com/containerd/containerd/pull/8110))
    * Go 1.20.1 ([#8103](https://github.com/containerd/containerd/pull/8103))
    * ctr version: add args check ([#8096](https://github.com/containerd/containerd/pull/8096))
    * pkg/cri/config: fix Mirrors deprecation comment ([#8041](https://github.com/containerd/containerd/pull/8041))
    * docs: fix function names in fuzzing test documentation ([#8044](https://github.com/containerd/containerd/pull/8044))
    * fix: 'go routine' should be 'goroutine' ([#8051](https://github.com/containerd/containerd/pull/8051))
    * Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p)
    * Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2)
    * pkg/cri/sbserver: experimental NRI integration for CRI. ([#7954](https://github.com/containerd/containerd/pull/7954))
    * Clean up error strings that start with uppercase ([#8114](https://github.com/containerd/containerd/pull/8114))
    * Clean up repeated package import ([#8113](https://github.com/containerd/containerd/pull/8113))
    * Go 1.19.6 ([#8109](https://github.com/containerd/containerd/pull/8109))
    * Initial GRPC shims support ([#8052](https://github.com/containerd/containerd/pull/8052))
    * CRI: Pass sandbox annotations to _other platforms ([#8060](https://github.com/containerd/containerd/pull/8060))
    * cmd/ctr/commands/images: support usage subcommand ([#8105](https://github.com/containerd/containerd/pull/8105))
    * cni: pass in the cgroupPath capability argument ([#8067](https://github.com/containerd/containerd/pull/8067))
    * Add fallback for windows platforms without osversion ([#8101](https://github.com/containerd/containerd/pull/8101))
    * release: xx v1.2.1 ([#8104](https://github.com/containerd/containerd/pull/8104))
    * [transfer] update imagestore interface to support multiple references ([#7964](https://github.com/containerd/containerd/pull/7964))
    * [sandbox] Use options to pass PodSandboxConfig to shims ([#8100](https://github.com/containerd/containerd/pull/8100))
    * Send container events with nil PodSandboxStatus ([#8047](https://github.com/containerd/containerd/pull/8047))
    * test: add hostNetwork tests for both windows and linux ([#7984](https://github.com/containerd/containerd/pull/7984))
    * loadConfig pre-inspection in advance ([#8097](https://github.com/containerd/containerd/pull/8097))
    * contrib/apparmor: remove version-dependent rules ([#8068](https://github.com/containerd/containerd/pull/8068))
    * *: introduce wrapper pkgs for blockio and rdt ([#8066](https://github.com/containerd/containerd/pull/8066))
    * Extract CRI instrument into separate package ([#8093](https://github.com/containerd/containerd/pull/8093))
    * CRI: Mirror generic toml runtime config under server ([#8091](https://github.com/containerd/containerd/pull/8091))
    * go.mod: github.com/containerd/typeurl/v2 v2.1.0 ([#8092](https://github.com/containerd/containerd/pull/8092))
    * Revert `apparmor_parser` regression ([#8086](https://github.com/containerd/containerd/pull/8086))
    * [sandbox] refactor controller interface ([#7981](https://github.com/containerd/containerd/pull/7981))
    * btrfs: depend on kernel UAPI instead of libbtrfs ([#7933](https://github.com/containerd/containerd/pull/7933))
    * CI: skip some jobs when `repo != containerd/containerd` ([#8082](https://github.com/containerd/containerd/pull/8082))
    * chore: clean up repeated package import ([#8078](https://github.com/containerd/containerd/pull/8078))
    * fetch: Use data from descriptor when available. ([#8076](https://github.com/containerd/containerd/pull/8076))
    * chore: use http constants instead of string ([#8077](https://github.com/containerd/containerd/pull/8077))
    * Fix retry logic within devmapper device deactivation ([#8075](https://github.com/containerd/containerd/pull/8075))
    * Clean CI yaml ([#8071](https://github.com/containerd/containerd/pull/8071))
    * Add critest.exe in $PATH ([#8074](https://github.com/containerd/containerd/pull/8074))
    * keep the uppercase letter for flag info ([#7976](https://github.com/containerd/containerd/pull/7976))
    * go.mod: Bump hcsshim to v0.10.0-rc.5 ([#8049](https://github.com/containerd/containerd/pull/8049))
    * Fix sandbox exit monitor ([#8045](https://github.com/containerd/containerd/pull/8045))
    * Generate GRPC contracts for runtime APIs ([#7979](https://github.com/containerd/containerd/pull/7979))
    * Make argument validation of `mount.UnmountRecursive` compatible to `mount.UnmountAll` ([#8035](https://github.com/containerd/containerd/pull/8035))
    * Export remote snapshotter label handler ([#8036](https://github.com/containerd/containerd/pull/8036))
    * Adding support to run install hcsshim from local clone ([#7989](https://github.com/containerd/containerd/pull/7989))
    * go.mod: github.com/urfave/cli v1.22.12 ([#8040](https://github.com/containerd/containerd/pull/8040))
    * cmd/ctr/commands: clean up the func IntToInt32Array in utils.go ([#8039](https://github.com/containerd/containerd/pull/8039))
    * pkg/epoch: drop timezone ([#8037](https://github.com/containerd/containerd/pull/8037))
    * go.mod: update github.com/containerd/nri. ([#8034](https://github.com/containerd/containerd/pull/8034))
    * fix(docs): minor fix on the windows installation steps ([#8013](https://github.com/containerd/containerd/pull/8013))
    * Add integration test to opentelemetry tracing on image pull ([#7847](https://github.com/containerd/containerd/pull/7847))
    * Use mount.Target to specify subdirectory of rootfs mount ([#7840](https://github.com/containerd/containerd/pull/7840))
    * cri: mkdir /etc/cni with 0755, not 0700 ([#8020](https://github.com/containerd/containerd/pull/8020))
    * log/logtest: add `testcase` as debug field ([#8025](https://github.com/containerd/containerd/pull/8025))
    * go.mod: github.com/containerd/cgroups/v3 v3.0.0 ([#8027](https://github.com/containerd/containerd/pull/8027))
    * Update CNI plugins to 1.2.0 ([#7977](https://github.com/containerd/containerd/pull/7977))
    * go.mod: go.opentelemetry.io/otel v1.12.0 ([#8026](https://github.com/containerd/containerd/pull/8026))
    * Move PLEG events for pause container under podsandbox package ([#8007](https://github.com/containerd/containerd/pull/8007))
    * runtime docs: Clarify delete cwd behavior ([#8012](https://github.com/containerd/containerd/pull/8012))
    * release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles ([#8019](https://github.com/containerd/containerd/pull/8019))
    * RELEASES.md: update release status ([#8022](https://github.com/containerd/containerd/pull/8022))
    * deflake: TestContainerPids ([#8023](https://github.com/containerd/containerd/pull/8023))
    * release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) ([#8021](https://github.com/containerd/containerd/pull/8021))
    * Update the EOL date for 1.5 release ([#8015](https://github.com/containerd/containerd/pull/8015))
    * Prepare release notes for v1.7.0-beta.3 ([#8014](https://github.com/containerd/containerd/pull/8014))
    * Fix Memory Limit test ([#7959](https://github.com/containerd/containerd/pull/7959))
    * Reused package errdefs for not supported error ([#8005](https://github.com/containerd/containerd/pull/8005))
    * pkg/cri: optimize slice initialization ([#7994](https://github.com/containerd/containerd/pull/7994))
    * go.mod: update goresctrl to v0.3.0 ([#7987](https://github.com/containerd/containerd/pull/7987))
    * pushWriter: correctly propagate errors ([#7985](https://github.com/containerd/containerd/pull/7985))
    * CI: test release.yml on every PR ([#7968](https://github.com/containerd/containerd/pull/7968))
    * fix incorrect namespace of event when create/update namespace ([#7129](https://github.com/containerd/containerd/pull/7129))
    * Backport changes to sandboxed CRI ([#7973](https://github.com/containerd/containerd/pull/7973))
    * Fix syntax errors in the document ([#7970](https://github.com/containerd/containerd/pull/7970))
    * release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7969](https://github.com/containerd/containerd/pull/7969))
    * use local variable for rt when iterating collectors ([#7963](https://github.com/containerd/containerd/pull/7963))
    * Add basic spec and mounts for Darwin ([#7960](https://github.com/containerd/containerd/pull/7960))
    * go.mod: Bump hcsshim to v0.10.0-rc.4 ([#7810](https://github.com/containerd/containerd/pull/7810))
    * Use specs Platform instead of generated API ([#7958](https://github.com/containerd/containerd/pull/7958))
    * Make OCI options cross-platform ([#7928](https://github.com/containerd/containerd/pull/7928))
    * update to go1.19.5, go1.18.10 ([#7948](https://github.com/containerd/containerd/pull/7948))
    * fuzzing: improve archive fuzzer ([#7957](https://github.com/containerd/containerd/pull/7957))
    * shim: enable debug logging for delete ([#7943](https://github.com/containerd/containerd/pull/7943))
    * cri: Fix TestUpdateOCILinuxResource for host w/o swap controller ([#7946](https://github.com/containerd/containerd/pull/7946))
    * ctr/run: flags --detach and --rm cannot be specified together ([#7929](https://github.com/containerd/containerd/pull/7929))
    * Fix Flaky Windows CRI Integration test on TestContainerConsumedStats ([#7935](https://github.com/containerd/containerd/pull/7935))
    * Refactor snapshotters metastore transaction ([#7917](https://github.com/containerd/containerd/pull/7917))
    * mod: update github.com/pelletier/go-toml@v1.9.5 ([#7932](https://github.com/containerd/containerd/pull/7932))
    * archive: improve TestSourceDateEpoch ([#7927](https://github.com/containerd/containerd/pull/7927))
    * Add tracing plugin test ([#7883](https://github.com/containerd/containerd/pull/7883))
    * docs/content-flow: update the description of the content labels  ([#7925](https://github.com/containerd/containerd/pull/7925))
    * Add cleanup package for context management during cleanup ([#7861](https://github.com/containerd/containerd/pull/7861))
    * Fix race between stream registration and use ([#7886](https://github.com/containerd/containerd/pull/7886))
    * Prepare release notes for v1.7.0-beta.2 ([#7903](https://github.com/containerd/containerd/pull/7903))
    * Cirrus CI (Fedora 37, Rocky 8): enable cri-integration ([#7892](https://github.com/containerd/containerd/pull/7892))
    * contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages ([#7891](https://github.com/containerd/containerd/pull/7891))
    * docs: fix a typo in tracing documentation ([#7914](https://github.com/containerd/containerd/pull/7914))
    * CI: Pass GITHUB_TOKEN to containerd/project-checks ([#7913](https://github.com/containerd/containerd/pull/7913))
    * Enable dupword linter ([#7911](https://github.com/containerd/containerd/pull/7911))
    * ctr: Add platform flag to 'oci spec' command ([#7905](https://github.com/containerd/containerd/pull/7905))
    * Vagrantfile: fix disk resize error with VirtualBox ([#7907](https://github.com/containerd/containerd/pull/7907))
    * Vagrantfile: fix comments about SELinux ([#7908](https://github.com/containerd/containerd/pull/7908))
    * Use the const labels.LabelUncompressed ([#7906](https://github.com/containerd/containerd/pull/7906))
    * [sandbox] Add sandbox store plugin type ([#7850](https://github.com/containerd/containerd/pull/7850))
    * Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts ([#7893](https://github.com/containerd/containerd/pull/7893))
    * CRI: Comment cleanup/misc fixes ([#7904](https://github.com/containerd/containerd/pull/7904))
    * Move snapshot event publishing into metadata store ([#5674](https://github.com/containerd/containerd/pull/5674))
    * Vagrantfile: install-rootless-podman: remove `setenforce 0` ([#7887](https://github.com/containerd/containerd/pull/7887))
    * reused package errdefs for error ([#7894](https://github.com/containerd/containerd/pull/7894))
    * integration/images: switch away from Docker Hub to avoid rate limit ([#7888](https://github.com/containerd/containerd/pull/7888))
    * Validate userns container config is consistent with sandbox userns config ([#7882](https://github.com/containerd/containerd/pull/7882))
    * `ctr contents ls` sorts the labels of the content ([#7881](https://github.com/containerd/containerd/pull/7881))
    * chore: use `go fix` to cleanup old +build buildtag ([#7879](https://github.com/containerd/containerd/pull/7879))
    * cri: Shadow variables to avoid t.Parallel() issues ([#7880](https://github.com/containerd/containerd/pull/7880))
    * Add support for user namespaces in stateless pods (KEP-127) ([#7679](https://github.com/containerd/containerd/pull/7679))
    * Refactor metastore transaction ([#7529](https://github.com/containerd/containerd/pull/7529))
    * oci: appendOSMounts(): remove unused error, and move ([#7874](https://github.com/containerd/containerd/pull/7874))
    * add kube v1.26: remove v1alph2 cri support ([#7863](https://github.com/containerd/containerd/pull/7863))
    * make runc 1.1 for oss_fuzz_build.sh ([#7875](https://github.com/containerd/containerd/pull/7875))
    * CRI sbserver: Prevent server reuse after Shutdown ([#7872](https://github.com/containerd/containerd/pull/7872))
    * Fix incorrect defer usage and refactor judgement ([#7521](https://github.com/containerd/containerd/pull/7521))
    * oci: Add WithDomainname ([#7869](https://github.com/containerd/containerd/pull/7869))
    * Reused errdefs define error ([#7871](https://github.com/containerd/containerd/pull/7871))
    * fix `ctr tasks kill` does not remove cni network under windows ([#7866](https://github.com/containerd/containerd/pull/7866))
    * add network plugin metrics ([#7858](https://github.com/containerd/containerd/pull/7858))
    * Avoid using canceled context in unpacker cleanup ([#7859](https://github.com/containerd/containerd/pull/7859))
    * image/label: print more characters of label keys ([#7618](https://github.com/containerd/containerd/pull/7618))
    * prevent Server reuse after a Shutdown ([#7165](https://github.com/containerd/containerd/pull/7165))
    * Check containerd's readiness before calling critest ([#7851](https://github.com/containerd/containerd/pull/7851))
    * Fix grammatical errors in Readme ([#7837](https://github.com/containerd/containerd/pull/7837))
    * Fix cpu architecture detection issue on linux/arm ([#7636](https://github.com/containerd/containerd/pull/7636))
    * CRI: Fix no CNI info for pod sandbox on restart ([#7845](https://github.com/containerd/containerd/pull/7845))
    * Enable checkRename test ([#7081](https://github.com/containerd/containerd/pull/7081))
    * metastore: Add WithTransaction convenience method ([#7781](https://github.com/containerd/containerd/pull/7781))
    * Prevent a race condition in testHook ([#7831](https://github.com/containerd/containerd/pull/7831))
    * cri: fix `memory.memsw.limit_in_bytes: no such file or directory` ([#7836](https://github.com/containerd/containerd/pull/7836))
    * go.mod: update fuzz-headers and fuzz-build ([#7824](https://github.com/containerd/containerd/pull/7824))
    * Remove github.com/gogo/protobuf again ([#7825](https://github.com/containerd/containerd/pull/7825))
    * CRI: Add host networking helper ([#7814](https://github.com/containerd/containerd/pull/7814))
    * Support sandbox shutdown in shim runtimes ([#7792](https://github.com/containerd/containerd/pull/7792))
    * move up to CRI-TOOLS v1.26.0 ([#7818](https://github.com/containerd/containerd/pull/7818))
    * Minor fix when querying pod sandbox status ([#7812](https://github.com/containerd/containerd/pull/7812))
    * nil check to avoid panic on upgrade ([#7809](https://github.com/containerd/containerd/pull/7809))
    * Bump grpc to v1.51.0 ([#7709](https://github.com/containerd/containerd/pull/7709))
    * fatal error: concurrent map iteration and map write ([#7805](https://github.com/containerd/containerd/pull/7805))
    * Bump golangci-lint to v1.50.1 ([#7804](https://github.com/containerd/containerd/pull/7804))
    * cri: make swapping disabled with memory limit ([#7783](https://github.com/containerd/containerd/pull/7783))
    * add metrics for image pulling: error; in progress count; thoughput  ([#7313](https://github.com/containerd/containerd/pull/7313))
    * Prepare release notes for v1.7.0-beta.1 ([#7793](https://github.com/containerd/containerd/pull/7793))
    * support fetching containerd from non public GCS buckets ([#7771](https://github.com/containerd/containerd/pull/7771))
    * images: support specifying SourceDateEpoch via ctx ([#7651](https://github.com/containerd/containerd/pull/7651))
    * fuzzing: improve archive fuzzer ([#7718](https://github.com/containerd/containerd/pull/7718))
    * fix sdNotify func when debug level ([#7798](https://github.com/containerd/containerd/pull/7798))
    * Upgrade GitHub actions packages in release workflow ([#7794](https://github.com/containerd/containerd/pull/7794))
    * Enable GitHub Actions local Linux CI runs ([#7796](https://github.com/containerd/containerd/pull/7796))
    * integration: increase timeout in container_event_test.go ([#7791](https://github.com/containerd/containerd/pull/7791))
    * digest: use github.com/minio/sha256-simd ([#7732](https://github.com/containerd/containerd/pull/7732))
    * allow client to remove created tasks with PID 0 ([#7787](https://github.com/containerd/containerd/pull/7787))
    * Add container event support to containerd ([#7073](https://github.com/containerd/containerd/pull/7073))
    * docs: Authorizer.Authorize could return ErrUnexpectedStatus ([#7786](https://github.com/containerd/containerd/pull/7786))
    * fix: check for tmpfs when evaluating if userxattr is needed ([#7772](https://github.com/containerd/containerd/pull/7772))
    * Pass TOML configuration options for runtimes CRI is not aware of ([#7764](https://github.com/containerd/containerd/pull/7764))
    * Cleanup build constraints ([#7776](https://github.com/containerd/containerd/pull/7776))
    * There is no way to disable debug endpoint on Darwin ([#7775](https://github.com/containerd/containerd/pull/7775))
    * CI: Vagrant: pin rockylinux/8 to v5.0.0 ([#7777](https://github.com/containerd/containerd/pull/7777))
    * vendor: golang.org/x/net v0.4.0 ([#7774](https://github.com/containerd/containerd/pull/7774))
    * Fix context when waiting sandbox ([#7773](https://github.com/containerd/containerd/pull/7773))
    * Github Security Advisory [GHSA-2qjp-425j-52j9](https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9)
    * update to go1.19.4, go1.18.9 ([#7765](https://github.com/containerd/containerd/pull/7765))
    * Change PushContent to require only Provider ([#7763](https://github.com/containerd/containerd/pull/7763))
    * sbserver bug fixing ([#7768](https://github.com/containerd/containerd/pull/7768))
    * Add unit test to Opentelemetry tracing ([#7671](https://github.com/containerd/containerd/pull/7671))
    * remove some (aliases for) deprecated functions ([#7525](https://github.com/containerd/containerd/pull/7525))
    * Refactor ctr restore to allow for tty allocation ([#7673](https://github.com/containerd/containerd/pull/7673))
    * fix panic when containerd-stress density --count 0 ([#7748](https://github.com/containerd/containerd/pull/7748))
    * Unwrap proto errors in streaming client ([#7753](https://github.com/containerd/containerd/pull/7753))
    * Fix process_vm_* syscall names in seccomp ([#7755](https://github.com/containerd/containerd/pull/7755))
    * upgrade the ops.md output for current 1.7 version . ([#7747](https://github.com/containerd/containerd/pull/7747))
    * docs: Add extra security instructions ([#7743](https://github.com/containerd/containerd/pull/7743))
    * go.mod: re-vendor NRI from the official repo. ([#7744](https://github.com/containerd/containerd/pull/7744))
    * [Sandbox API] CRI status cleanup ([#7731](https://github.com/containerd/containerd/pull/7731))
    * Transfer service ([#7320](https://github.com/containerd/containerd/pull/7320))
    * NRI: add support for NRI with extended scope. ([#6019](https://github.com/containerd/containerd/pull/6019))
    * archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ([#7710](https://github.com/containerd/containerd/pull/7710))
    * Fix order of operations when setting lease labels ([#7702](https://github.com/containerd/containerd/pull/7702))
    * Add ctr image prune command ([#7730](https://github.com/containerd/containerd/pull/7730))
    * Check for nullptr before dereferencing ([#7708](https://github.com/containerd/containerd/pull/7708))
    * use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers ([#7736](https://github.com/containerd/containerd/pull/7736))
    * introspection: expose the daemon's PID and PIDNS ([#7694](https://github.com/containerd/containerd/pull/7694))
    * reference/docker: synchronize fork with upstream distribution/distribution ([#7635](https://github.com/containerd/containerd/pull/7635))
    * go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions ([#7721](https://github.com/containerd/containerd/pull/7721))
    * Add ptrace readby and tracedby to default AppArmor profile ([#7714](https://github.com/containerd/containerd/pull/7714))
    * Fix sandbox API when calling sandboxed shims ([#7684](https://github.com/containerd/containerd/pull/7684))
    * make status more readable and update easy. ([#7669](https://github.com/containerd/containerd/pull/7669))
    * integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 ([#7720](https://github.com/containerd/containerd/pull/7720))
    * Resolve warnings in Windows GitHub Actions periodic workflows ([#7706](https://github.com/containerd/containerd/pull/7706))
    * Sandbox API: implement Controller.Status for SandboxAPI ([#7470](https://github.com/containerd/containerd/pull/7470))
    * [port #5904 to sbserver] Setup pod network after creating the sandbox container ([#7426](https://github.com/containerd/containerd/pull/7426))
    * fix for OSS-Fuzz infra changes ([#7677](https://github.com/containerd/containerd/pull/7677))
    * runtime/v2/shim: clean up the use of containerdBinary ([#7499](https://github.com/containerd/containerd/pull/7499))
    * Add process_vm read and write calls to default seccomp profile ([#7693](https://github.com/containerd/containerd/pull/7693))
    * Resolve Scorecards GitHub Actions workflow warnings ([#7707](https://github.com/containerd/containerd/pull/7707))
    * cri: add pod uid annotation ([#7697](https://github.com/containerd/containerd/pull/7697))
    * Missed out `platform interface` when reused the conn for Client. ([#7699](https://github.com/containerd/containerd/pull/7699))
    * overlayfs: remove duplicated tx rollback ([#7700](https://github.com/containerd/containerd/pull/7700))
    * go.mod: update some dependencies ([#7704](https://github.com/containerd/containerd/pull/7704))
    * update github.com/cpuguy83/go-md2man/v2 to v2.0.2 ([#7705](https://github.com/containerd/containerd/pull/7705))
    * Fsnotify bump and change code ([#7703](https://github.com/containerd/containerd/pull/7703))
    * fix build containerd in centos9 ([#7683](https://github.com/containerd/containerd/pull/7683))
    * Bump urfave-cli to v1.22.10 ([#7701](https://github.com/containerd/containerd/pull/7701))
    * can set up the network serially by CNI plugins ([#7685](https://github.com/containerd/containerd/pull/7685))
    * Update cri-api dependency to v0.26.0-beta.0 ([#7656](https://github.com/containerd/containerd/pull/7656))
    * overlay: Remove unused method param ([#7696](https://github.com/containerd/containerd/pull/7696))
    * CI: update Fedora to 37 ([#7691](https://github.com/containerd/containerd/pull/7691))
    * tx rollback when GetInfo return error ([#7678](https://github.com/containerd/containerd/pull/7678))
    * Upgrade github.com/containerd/cgroups from v1 to v3 ([#7601](https://github.com/containerd/containerd/pull/7601))
    * Remove OpenTelementry imports from remotes/docker package ([#7675](https://github.com/containerd/containerd/pull/7675))
    * Expose Done and Err in Shutdown service ([#7686](https://github.com/containerd/containerd/pull/7686))
    * gotestsum match go version 1.19 ([#7688](https://github.com/containerd/containerd/pull/7688))
    * complement sub-command note for containerd-main ([#7670](https://github.com/containerd/containerd/pull/7670))
    * keep the lower case letter for flag info ([#7668](https://github.com/containerd/containerd/pull/7668))
    * bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a ([#7666](https://github.com/containerd/containerd/pull/7666))
    * Fix broken link for CRI plugin in docs ([#7667](https://github.com/containerd/containerd/pull/7667))
    * add option to resolve symlinks in WithLinuxDevice ([#7523](https://github.com/containerd/containerd/pull/7523))
    * Bump k8s.io deps to v0.25.4 ([#7663](https://github.com/containerd/containerd/pull/7663))
    * Release: add static binaries ([#7659](https://github.com/containerd/containerd/pull/7659))
    * Bump OpenTelemetry contrib to v0.36.4 ([#7662](https://github.com/containerd/containerd/pull/7662))
    * Fix slice append error (`spec.Linux.Resources.HugepageLimits`) ([#7661](https://github.com/containerd/containerd/pull/7661))
    * Bump OpenTelemetry to v1.11.1 ([#7660](https://github.com/containerd/containerd/pull/7660))
    * feature: add gc scheduler metrics collection count ([#5263](https://github.com/containerd/containerd/pull/5263))
    * Add `--debug` args to all subcommands of `ctr pprof` ([#7629](https://github.com/containerd/containerd/pull/7629))
    * Add a thin wrapper around otel Span object ([#7655](https://github.com/containerd/containerd/pull/7655))
    * Bump grpc to v1.50.1 ([#7643](https://github.com/containerd/containerd/pull/7643))
    * replace strings.Split(N) for strings.Cut() or alternatives ([#7631](https://github.com/containerd/containerd/pull/7631))
    * add oci.WithCPURT ([#7642](https://github.com/containerd/containerd/pull/7642))
    * Sandbox API: Add a new mode config for sandbox controller impls ([#7590](https://github.com/containerd/containerd/pull/7590))
    * fuzzing: bump go-fuzz-headers ([#7625](https://github.com/containerd/containerd/pull/7625))
    * Bump k8s.io deps to v0.25.3 ([#7637](https://github.com/containerd/containerd/pull/7637))
    * Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex ([#7641](https://github.com/containerd/containerd/pull/7641))
    * Extra documentation for content interfaces ([#7640](https://github.com/containerd/containerd/pull/7640))
    * Fix shim socket permissions on Darwin ([#7638](https://github.com/containerd/containerd/pull/7638))
    * s390x: build and package s390x bin in release assets ([#7614](https://github.com/containerd/containerd/pull/7614))
    * Replace mount fork hack with CLONE_FS ([#7513](https://github.com/containerd/containerd/pull/7513))
    * remotes: add `FetcherByDigest` for fetching blobs without foreknown descriptors (useful for general-purpose CAS) ([#7460](https://github.com/containerd/containerd/pull/7460))
    * Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 ([#7403](https://github.com/containerd/containerd/pull/7403))
    * Support default hosts.toml configuration ([#7607](https://github.com/containerd/containerd/pull/7607))
    * Add tracing spans in CRI image service and pull.go ([#7453](https://github.com/containerd/containerd/pull/7453))
    * Fix missing closed fifo ([#7604](https://github.com/containerd/containerd/pull/7604))
    * fix comments ([#7624](https://github.com/containerd/containerd/pull/7624))
    * docs: add additional info in backport process ([#7626](https://github.com/containerd/containerd/pull/7626))
    * go.mod: golang.org/x/*: use tagged versions ([#7621](https://github.com/containerd/containerd/pull/7621))
    * Bump go version to 1.19.3 ([#7620](https://github.com/containerd/containerd/pull/7620))
    * ctr export strictly matching ([#7615](https://github.com/containerd/containerd/pull/7615))
    * Fix ctr crash when pulling with --http-dump and --http-trace simultaneously ([#7617](https://github.com/containerd/containerd/pull/7617))
    * Harden GITHUB_TOKEN permissions for OSSF Scorecard ([#7599](https://github.com/containerd/containerd/pull/7599))
    * overlayutils: Add fastpath for userxattr check ([#7611](https://github.com/containerd/containerd/pull/7611))
    * Add sequence diagram for shim runtime v2 ([#7606](https://github.com/containerd/containerd/pull/7606))
    * Sandbox API: Move remote impls to /sandbox/proxy ([#7600](https://github.com/containerd/containerd/pull/7600))
    * fuzzing: improve archive fuzzer ([#7588](https://github.com/containerd/containerd/pull/7588))
    * Retry client connection in  waitForStart ([#7537](https://github.com/containerd/containerd/pull/7537))
    * Add Workflow for running critest with Hyper-V Containers on Windows. ([#7025](https://github.com/containerd/containerd/pull/7025))
    * Add release notes for v1.7.0-beta.0 ([#7575](https://github.com/containerd/containerd/pull/7575))
    * Cleanup sandbox interfaces ([#7576](https://github.com/containerd/containerd/pull/7576))
    * Update GitHub actions release workflow set output ([#7581](https://github.com/containerd/containerd/pull/7581))
    * Fix LogURI generation-related tests on Windows. ([#7569](https://github.com/containerd/containerd/pull/7569))
    * maintenance: Remove WithWindowsNetworkNamespace from pkg/cri ([#7577](https://github.com/containerd/containerd/pull/7577))
    * CRI: implement Controller.Delete for SandboxAPI ([#7457](https://github.com/containerd/containerd/pull/7457))
    * Configure CDI registry only on start ([#7419](https://github.com/containerd/containerd/pull/7419))
    * update codeql-action to v2 ([#7568](https://github.com/containerd/containerd/pull/7568))
    * Add logging related metrics to Containerd CRI plugin ([#7546](https://github.com/containerd/containerd/pull/7546))
    * sys: optimize and refactor MkdirAllWithACL() ([#7531](https://github.com/containerd/containerd/pull/7531))
    * fix install cni script ([#7484](https://github.com/containerd/containerd/pull/7484))
    * Update 1.5 release support timeframe ([#7560](https://github.com/containerd/containerd/pull/7560))
    * bump go-fuzz-headers ([#7503](https://github.com/containerd/containerd/pull/7503))
    * Add long term stable release branches ([#7454](https://github.com/containerd/containerd/pull/7454))
    * fix pusher concurrent close channel ([#7473](https://github.com/containerd/containerd/pull/7473))
    * Make tests on GitHub less noisy ([#7530](https://github.com/containerd/containerd/pull/7530))
    * containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded ([#7541](https://github.com/containerd/containerd/pull/7541))
    * Update required Go version in BUILDING.md ([#7544](https://github.com/containerd/containerd/pull/7544))
    * go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) ([#7522](https://github.com/containerd/containerd/pull/7522))
    * Use `go env` to determine GOPATH in Makefile. ([#7542](https://github.com/containerd/containerd/pull/7542))
    * clean-up "nolint" comments, remove unused ones, update golangci-lint ([#7349](https://github.com/containerd/containerd/pull/7349))
    * Don't unmount on Darwin when deleting bundle ([#7534](https://github.com/containerd/containerd/pull/7534))
    * Add timeouts to all CI jobs ([#7538](https://github.com/containerd/containerd/pull/7538))
    * Vagrantfile: explicitly specify rsync as the shared folder driver ([#7539](https://github.com/containerd/containerd/pull/7539))
    * sys: remove unused IsAbs() (windows) ([#7527](https://github.com/containerd/containerd/pull/7527))
    * cri: PodSandboxStatus should tolerate missing task ([#7535](https://github.com/containerd/containerd/pull/7535))
    * CI: update GHA instances from Ubuntu 18.04 to 20.04 ([#7489](https://github.com/containerd/containerd/pull/7489))
    * fix the --no-pivot flag being ignored by `ctr tasks start` ([#7519](https://github.com/containerd/containerd/pull/7519))
    * Update the default seccomp to block socket calls to AF_VSOCK ([#7510](https://github.com/containerd/containerd/pull/7510))
    * cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() ([#7511](https://github.com/containerd/containerd/pull/7511))
    * Stats() shouldn't assume s.container is non-nil ([#7517](https://github.com/containerd/containerd/pull/7517))
    * Move up actions versions to prep for NodeJS 12 deprecation ([#7516](https://github.com/containerd/containerd/pull/7516))
    * cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() ([#7512](https://github.com/containerd/containerd/pull/7512))
    * Updates oci image config to support upstream ArgsEscaped ([#7483](https://github.com/containerd/containerd/pull/7483))
    * cmd/containerd: replace deprecated windows.IsAnInteractiveSession() ([#7497](https://github.com/containerd/containerd/pull/7497))
    * Update container with sandbox metadata after NetNS is created ([#7481](https://github.com/containerd/containerd/pull/7481))
    * archive: add WithSourceDateEpoch() for whiteouts ([#7478](https://github.com/containerd/containerd/pull/7478))
    * TestTaskResize must use a terminal ([#7492](https://github.com/containerd/containerd/pull/7492))
    * diff/apply.readCounter: check negative size ([#7494](https://github.com/containerd/containerd/pull/7494))
    * Add new ctr option for discarding unpacked layers ([#7425](https://github.com/containerd/containerd/pull/7425))
    * archive: windows: chtimes(): remove redundant conversion ([#7491](https://github.com/containerd/containerd/pull/7491))
    * archive: validate digests before use ([#7488](https://github.com/containerd/containerd/pull/7488))
    * vendor: github.com/opencontainers/selinux v1.10.2 ([#7482](https://github.com/containerd/containerd/pull/7482))
    * fuzzing: create structured tar bytes in archive fuzzer ([#7477](https://github.com/containerd/containerd/pull/7477))
    * Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 ([#7474](https://github.com/containerd/containerd/pull/7474))
    * use raw link to containerd.service config ([#7463](https://github.com/containerd/containerd/pull/7463))
    * cri doc: Update kata containers reference ([#7466](https://github.com/containerd/containerd/pull/7466))
    * Setup pod network after creating the sandbox container ([#5904](https://github.com/containerd/containerd/pull/5904))
    * Swap to net.ErrClosed checks for services ([#7446](https://github.com/containerd/containerd/pull/7446))
    * go.mod: Bump go-winio to v0.6.0 ([#7443](https://github.com/containerd/containerd/pull/7443))
    * fix retry when writer is reset on push ([#6995](https://github.com/containerd/containerd/pull/6995))
    * CI: Output a summary using GITHUB_SUMMARY ([#7192](https://github.com/containerd/containerd/pull/7192))
    * Fix missing close ([#7430](https://github.com/containerd/containerd/pull/7430))
    * Add test flag for skipping shim cgroup test ([#7424](https://github.com/containerd/containerd/pull/7424))
    * Refactor CRI fuzzers ([#7405](https://github.com/containerd/containerd/pull/7405))
    * Fix LogURIGenerator on Windows ([#7351](https://github.com/containerd/containerd/pull/7351))
    * Set grpc code for unimplemented cri-api methods ([#7417](https://github.com/containerd/containerd/pull/7417))
    * Add reader option to local content reader at ([#7414](https://github.com/containerd/containerd/pull/7414))
    * Sandbox API: implement Controller.Wait and Controller.Stop ([#7401](https://github.com/containerd/containerd/pull/7401))
    * remove stray .zuul.yaml ([#7416](https://github.com/containerd/containerd/pull/7416))
    * reference CDI configuration details ([#7408](https://github.com/containerd/containerd/pull/7408))
    * cri-integration: propagate ENABLE_CRI_SANDBOXES ([#7413](https://github.com/containerd/containerd/pull/7413))
    * Enable OpenSSF Scorecard Github Action ([#7404](https://github.com/containerd/containerd/pull/7404))
    * Add ext2 fs support to devmapper snapshotter ([#7402](https://github.com/containerd/containerd/pull/7402))
    * Fuzzing: Instrument with new sanitizers ([#7396](https://github.com/containerd/containerd/pull/7396))
    * Upgrade fuzzing-related packages to reduce dependencies ([#7397](https://github.com/containerd/containerd/pull/7397))
    * remotes/docker/config: Skipping TLS verification for localhost ([#7393](https://github.com/containerd/containerd/pull/7393))
    * Replace github.com/emicklei/go-restful package, versions <2.16.0 ([#7395](https://github.com/containerd/containerd/pull/7395))
    * Add NoSameOwner option when unpacking tars ([#7386](https://github.com/containerd/containerd/pull/7386))
    * ctr: add privileged-without-host-devices for run command ([#7328](https://github.com/containerd/containerd/pull/7328))
    * chore: matching the casing of other flags for ctr's pull command ([#7341](https://github.com/containerd/containerd/pull/7341))
    * windows: Add runhcs-wcow-hypervisor runtimeclass to the default config ([#6901](https://github.com/containerd/containerd/pull/6901))
    * Fix missing close ([#7370](https://github.com/containerd/containerd/pull/7370))
    * CRI: update cdi version to v0.5.1 ([#7374](https://github.com/containerd/containerd/pull/7374))
    * Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 ([#7372](https://github.com/containerd/containerd/pull/7372))
    * vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c ([#7373](https://github.com/containerd/containerd/pull/7373))
    * Remove unused variable from images action ([#7371](https://github.com/containerd/containerd/pull/7371))
    * feature: use client default namespace ([#7291](https://github.com/containerd/containerd/pull/7291))
    * integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment ([#7367](https://github.com/containerd/containerd/pull/7367))
    * feature: upgrade registry.k8s.io/pause version ([#7359](https://github.com/containerd/containerd/pull/7359))
    * metrics/cgroups/v1: Remove unused event parameter ([#7361](https://github.com/containerd/containerd/pull/7361))
    * .zuul: remove the zuul because it is offline ([#7369](https://github.com/containerd/containerd/pull/7369))
    * Update golangci-lint timeout to match config ([#7356](https://github.com/containerd/containerd/pull/7356))
    * delete redundent import alias and and type conversion ([#7345](https://github.com/containerd/containerd/pull/7345))
    * Make checkContainerTimestamps less strict on Windows ([#7350](https://github.com/containerd/containerd/pull/7350))
    * Make oss-fuzz mandatory ([#7346](https://github.com/containerd/containerd/pull/7346))
    * Add kubernetes v1.25 supported version as v1.24 ([#7326](https://github.com/containerd/containerd/pull/7326))
    * sys: move ForceRemoveAll to integration/client ([#7335](https://github.com/containerd/containerd/pull/7335))
    * chore: remove duplicate word in comments ([#7338](https://github.com/containerd/containerd/pull/7338))
    * Use ioctl helpers from x/sys/unix ([#7342](https://github.com/containerd/containerd/pull/7342))
    * archive: replace tarName() with filepath.ToSlash() ([#7344](https://github.com/containerd/containerd/pull/7344))
    * mount: remove unused ErrNotImplementOnWindows ([#7339](https://github.com/containerd/containerd/pull/7339))
    * replace sys Sequential funcs with moby/sys/sequential ([#7334](https://github.com/containerd/containerd/pull/7334))
    * Clarify containerd 1.5.0+ for k8s 1.20,1.21 ([#7324](https://github.com/containerd/containerd/pull/7324))
    * update runc binary to v1.1.4 ([#7315](https://github.com/containerd/containerd/pull/7315))
    * Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 ([#7325](https://github.com/containerd/containerd/pull/7325))
    * Update k8s.io/cri-api to v0.25.0 ([#7287](https://github.com/containerd/containerd/pull/7287))
    * script/setup: handle cnidir with SUDO ([#7322](https://github.com/containerd/containerd/pull/7322))
    * ContainerStatus to return container resources ([#6517](https://github.com/containerd/containerd/pull/6517))
    * migrate from k8s.gcr.io to registry.k8s.io ([#7038](https://github.com/containerd/containerd/pull/7038))
    * Do not rename test files on-the-fly to share functions ([#7309](https://github.com/containerd/containerd/pull/7309))
    * ctr import: strictly match platform ([#6906](https://github.com/containerd/containerd/pull/6906))
    * Revert "Downgrade MinGW to version 10.2.0" ([#7308](https://github.com/containerd/containerd/pull/7308))
    * Follow up #7254 (Switch to Go 1.19) ([#7286](https://github.com/containerd/containerd/pull/7286))
    * Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer ([#7304](https://github.com/containerd/containerd/pull/7304))
    * Adding support of CAP_BPF and CAP_PERFMON ([#7301](https://github.com/containerd/containerd/pull/7301))
    * go.mod: Bump hcsshim to v0.10.0-rc.1 ([#7284](https://github.com/containerd/containerd/pull/7284))
    * Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset ([#7306](https://github.com/containerd/containerd/pull/7306))
    * ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 ([#7293](https://github.com/containerd/containerd/pull/7293))
    * Runtime cleanup (Shim manager and task service) ([#7280](https://github.com/containerd/containerd/pull/7280))
    * containerd-stress: add support for running through CRI ([#6931](https://github.com/containerd/containerd/pull/6931))
    * Switch to Go 1.19 ([#7254](https://github.com/containerd/containerd/pull/7254))
    * Vagrantfile: dump containerd log after critest ([#7265](https://github.com/containerd/containerd/pull/7265))
    * oci: skip checking group id for WithAppendAdditionalGroups ([#7257](https://github.com/containerd/containerd/pull/7257))
    * release workflow: increase timeout to 30 minutes & remove Go setup action ([#7259](https://github.com/containerd/containerd/pull/7259))
    * release: rollback Ubuntu to 18.04 (except for riscv64) ([#7258](https://github.com/containerd/containerd/pull/7258))
    * Initial sandbox API CRI integration (implement Controller.Start) ([#7228](https://github.com/containerd/containerd/pull/7228))
    * Use environment variable to specify Go version on CI ([#7251](https://github.com/containerd/containerd/pull/7251))
    * Update golang to 1.18.5, 1.17.13 ([#7243](https://github.com/containerd/containerd/pull/7243))
    * Change os.Stderr reassign for Windows service ([#7023](https://github.com/containerd/containerd/pull/7023))
    * script/setup: fix protobuf for aarch64 ([#7237](https://github.com/containerd/containerd/pull/7237))
    * Fix cleanup in critest ([#7232](https://github.com/containerd/containerd/pull/7232))
    * fix: support simultaneous create diff for same parent snapshot ([#7204](https://github.com/containerd/containerd/pull/7204))
    * Windows HostProcess container CRI stats test ([#7223](https://github.com/containerd/containerd/pull/7223))
    * Regenerate protos with updated protoc-gen-go ([#7226](https://github.com/containerd/containerd/pull/7226))
    * test: error strings should not be capitalized ([#7195](https://github.com/containerd/containerd/pull/7195))
    * Add extra context to error when push unauthorized ([#7220](https://github.com/containerd/containerd/pull/7220))
    * replace with selinux label ([#7207](https://github.com/containerd/containerd/pull/7207))
    * Use `httputil.DumpRequestOut` for dumping client req ([#7221](https://github.com/containerd/containerd/pull/7221))
    * Fix CRI image pull timeout test for ppc64le ([#7215](https://github.com/containerd/containerd/pull/7215))
    * test: introduce failpoint control to runc-shimv2 and cni ([#7069](https://github.com/containerd/containerd/pull/7069))
    * chore: bump macos runner version ([#7206](https://github.com/containerd/containerd/pull/7206))
    * Use image lists form integration/client tests ([#7210](https://github.com/containerd/containerd/pull/7210))
    * go.mod: Bump hcsshim to v0.9.4 ([#7212](https://github.com/containerd/containerd/pull/7212))
    * Drop deprecated `ioutil` ([#7203](https://github.com/containerd/containerd/pull/7203))
    * Make getServicesOpts a helper ([#7201](https://github.com/containerd/containerd/pull/7201))
    * adds an env var commented out for sandboxed mode ([#7183](https://github.com/containerd/containerd/pull/7183))
    * cri_stats: handle missing cpu stats ([#7198](https://github.com/containerd/containerd/pull/7198))
    * using ContextDialer instead ([#7189](https://github.com/containerd/containerd/pull/7189))
    * test: Add ability to switch between  cgroupv1 or cgroupv2 for node e2e ([#7173](https://github.com/containerd/containerd/pull/7173))
    * code cleanup ([#7182](https://github.com/containerd/containerd/pull/7182))
    * Update k8s.io/cri-api to v0.25.0-alpha2 ([#7114](https://github.com/containerd/containerd/pull/7114))
    * Refactor usageNanoCores be to used for all OSes ([#7186](https://github.com/containerd/containerd/pull/7186))
    * adds support for using env file for systemd boot ([#7191](https://github.com/containerd/containerd/pull/7191))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#7185](https://github.com/containerd/containerd/pull/7185))
    * ctr: support --user for run/create ([#7145](https://github.com/containerd/containerd/pull/7145))
    * docs: Fix sample config.toml syntax ([#7174](https://github.com/containerd/containerd/pull/7174))
    * seccomp: seccomp: add syscalls related to PKU in default policy ([#7163](https://github.com/containerd/containerd/pull/7163))
    * Update and align golangci-lint version ([#7168](https://github.com/containerd/containerd/pull/7168))
    * adds a comment explaining how to disable experimental sbserver ([#7169](https://github.com/containerd/containerd/pull/7169))
    * ci: workaround Cirrus CI's INVALID_ARGUMENT ([#7177](https://github.com/containerd/containerd/pull/7177))
    * Update install-protobuf script  to install protobuf on Darwin ([#7153](https://github.com/containerd/containerd/pull/7153))
    * Fork CRI server for Sandbox API integration work ([#7164](https://github.com/containerd/containerd/pull/7164))
    * seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE ([#7167](https://github.com/containerd/containerd/pull/7167))
    * cri doc: fix formatting for CDI options ([#7158](https://github.com/containerd/containerd/pull/7158))
    * update golang to 1.18.4, 1.17.12 ([#7159](https://github.com/containerd/containerd/pull/7159))
    * Fix out of date comments for CRI store packages ([#7152](https://github.com/containerd/containerd/pull/7152))
    * update some devmapper docs ([#7124](https://github.com/containerd/containerd/pull/7124))
    * seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#7149](https://github.com/containerd/containerd/pull/7149))
    * Copy fuzzers from github.com/cncf/cncf-fuzzing ([#7123](https://github.com/containerd/containerd/pull/7123))
    * fix can't edit object by using ctr content edit command ([#6847](https://github.com/containerd/containerd/pull/6847))
    * integration/client: fix typo in export_test.go ([#7130](https://github.com/containerd/containerd/pull/7130))
    * Fix WWW-Authenticate parsing ([#7126](https://github.com/containerd/containerd/pull/7126))
    * LCOW differ return ErrNotImplemented for wrong mount type ([#7112](https://github.com/containerd/containerd/pull/7112))
    * Update go-restful/v3 to latest release ([#7117](https://github.com/containerd/containerd/pull/7117))
    * pkg/cri: use marshal wrapper for version convertor ([#7108](https://github.com/containerd/containerd/pull/7108))
    * Remove hacks around contrib/fuzz ([#7087](https://github.com/containerd/containerd/pull/7087))
    * Fix missing closed HTTP Body ([#7107](https://github.com/containerd/containerd/pull/7107))
    * Cleanup metadata tests ([#7105](https://github.com/containerd/containerd/pull/7105))
    * Downgrade MinGW to version 10.2.0 ([#7106](https://github.com/containerd/containerd/pull/7106))
    * ctr: Fix `ctr c create` fails to parse arguments ([#7098](https://github.com/containerd/containerd/pull/7098))
    * Fix Documentation Issue ([#7103](https://github.com/containerd/containerd/pull/7103))
    * refactor: reduce duplicate code ([#7100](https://github.com/containerd/containerd/pull/7100))
    * make xattr EPERM non-fatal in createTarFile ([#7094](https://github.com/containerd/containerd/pull/7094))
    * Move metadata plugin registration to seperate package ([#7096](https://github.com/containerd/containerd/pull/7096))
    * fix: missing sudo for devmapper doc ([#7092](https://github.com/containerd/containerd/pull/7092))
    * Ensure Windows Periodic workflow errors out while still uploading results. ([#7085](https://github.com/containerd/containerd/pull/7085))
    * Add snapshotter key to snapshot events ([#7084](https://github.com/containerd/containerd/pull/7084))
    * add WithAdditionalGIDs test ([#7072](https://github.com/containerd/containerd/pull/7072))
    * Forward ctr snapshotter flags on Windows ([#7086](https://github.com/containerd/containerd/pull/7086))
    * add WithAppendAdditionalGroups helper ([#7070](https://github.com/containerd/containerd/pull/7070))
    * Make CI Fuzz less noisy ([#7065](https://github.com/containerd/containerd/pull/7065))
    * ctr: add --hostname flag to create, run ([#7082](https://github.com/containerd/containerd/pull/7082))
    * improve content-flow ([#7077](https://github.com/containerd/containerd/pull/7077))
    * Make CI Fuzz optional ([#7067](https://github.com/containerd/containerd/pull/7067))
    * Use Go 1.18's testing.F on simple fuzzers ([#7056](https://github.com/containerd/containerd/pull/7056))
    * Downgrade MinGW in Windows setup scripts. ([#7062](https://github.com/containerd/containerd/pull/7062))
    * Make test path a constant ([#7057](https://github.com/containerd/containerd/pull/7057))
    * Run fuzzers in CI ([#7052](https://github.com/containerd/containerd/pull/7052))
    * CRI: Improve the /dev/shm mount options in Sandbox. ([#6913](https://github.com/containerd/containerd/pull/6913))
    * fix:userattr-unmount unexpected timeout ([#7008](https://github.com/containerd/containerd/pull/7008))
    * Port (some) unit tests to FreeBSD ([#7042](https://github.com/containerd/containerd/pull/7042))
    * Bump Golang and MinGW versions in Windows setup script. ([#6888](https://github.com/containerd/containerd/pull/6888))
    * Windows snapshotter touch ups and new functionality ([#6918](https://github.com/containerd/containerd/pull/6918))
    * Improve naming consistencies in comments in snapshotter.go ([#7032](https://github.com/containerd/containerd/pull/7032))
    * Make building static binaries simpler ([#7022](https://github.com/containerd/containerd/pull/7022))
    * Allow CRI on Darwin ([#7033](https://github.com/containerd/containerd/pull/7033))
    * update runc binary to v1.1.3 ([#7034](https://github.com/containerd/containerd/pull/7034))
    * Linux containers on FreeBSD ([#7000](https://github.com/containerd/containerd/pull/7000))
    * go.mod: github.com/moby/sys/mountinfo v0.6.2 ([#7026](https://github.com/containerd/containerd/pull/7026))
    * fix minor spelling mistake: lablel -> label ([#7031](https://github.com/containerd/containerd/pull/7031))
    * go.mod: github.com/containerd/cgroups v1.0.4 ([#7027](https://github.com/containerd/containerd/pull/7027))
    * go.mod: github.com/containerd/continuity v0.3.0 ([#7028](https://github.com/containerd/containerd/pull/7028))
    * Correct spelling mistake ("sanbdox" to "sandbox") ([#7029](https://github.com/containerd/containerd/pull/7029))
    * Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf)
    * Bump grpc to v1.47.0 ([#7018](https://github.com/containerd/containerd/pull/7018))
    * Bump k8s.io deps to v0.24.1 ([#7017](https://github.com/containerd/containerd/pull/7017))
    * Support runtime level snapshotter for issue 6657 ([#6899](https://github.com/containerd/containerd/pull/6899))
    * update golang to 1.18.3, 1.17.11 ([#7012](https://github.com/containerd/containerd/pull/7012))
    * Fix containerd-stress duration flag ([#7004](https://github.com/containerd/containerd/pull/7004))
    * update go-cni/for cni update fixing plugins that don't respond with version ([#7009](https://github.com/containerd/containerd/pull/7009))
    * Add validations for Windows HostProcess CRI configs ([#6996](https://github.com/containerd/containerd/pull/6996))
    * Move docker reference logic to reference/docker package ([#7007](https://github.com/containerd/containerd/pull/7007))
    * promote pause image to 3.7 (sync with kube v1.24) ([#7003](https://github.com/containerd/containerd/pull/7003))
    * Makefile: use urfave_cli_no_docs for binaries that don't need it ([#6998](https://github.com/containerd/containerd/pull/6998))
    * CRI: cleanup cri/store package ([#6993](https://github.com/containerd/containerd/pull/6993))
    * Use t.Run for /pkg/cri tests ([#7001](https://github.com/containerd/containerd/pull/7001))
    * vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script ([#6997](https://github.com/containerd/containerd/pull/6997))
    * sandbox: replace github.com/pkg/errors with native errors ([#6937](https://github.com/containerd/containerd/pull/6937))
    * build: Fix references to check-protos target in Makefile ([#6983](https://github.com/containerd/containerd/pull/6983))
    * ctr: fix label args used in NewContainer ([#6954](https://github.com/containerd/containerd/pull/6954))
    * ctr sandbox: handle sandbox config ([#6959](https://github.com/containerd/containerd/pull/6959))
    * Fix broken oss-fuzz build ([#6975](https://github.com/containerd/containerd/pull/6975))
    * archive: add human-readable hint to Lchown error ([#6982](https://github.com/containerd/containerd/pull/6982))
    * Fix tx closed error when upperdirlabel specified ([#6978](https://github.com/containerd/containerd/pull/6978))
    * config: improve config v1 deprecation message ([#6972](https://github.com/containerd/containerd/pull/6972))
    * Fix Windows install powershell script ([#6969](https://github.com/containerd/containerd/pull/6969))
    * fix comments on metadata schema and update namespace doc ([#6955](https://github.com/containerd/containerd/pull/6955))
    * adjust format in comment ([#6956](https://github.com/containerd/containerd/pull/6956))
    * Restore decompression benchmarks ([#6957](https://github.com/containerd/containerd/pull/6957))
    * cmd/ctr/commands/content: fix typo in fetch command usage ([#6960](https://github.com/containerd/containerd/pull/6960))
    * fix some confusing typos ([#6950](https://github.com/containerd/containerd/pull/6950))
    * update doc url about k8s ([#6952](https://github.com/containerd/containerd/pull/6952))
    * Separate windows-2019 and windows-2022 test results ([#6946](https://github.com/containerd/containerd/pull/6946))
    * shim: fix debug flag not working ([#6910](https://github.com/containerd/containerd/pull/6910))
    * Reverts removal of parallel run from critest ([#6938](https://github.com/containerd/containerd/pull/6938))
    * Bump OpenTelemetry dependencies ([#6932](https://github.com/containerd/containerd/pull/6932))
    * update runc binary and vendor to v1.1.2 ([#6934](https://github.com/containerd/containerd/pull/6934))
    * oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ([#6923](https://github.com/containerd/containerd/pull/6923))
    * update golang to 1.18.2, 1.17.10 ([#6926](https://github.com/containerd/containerd/pull/6926))
    * CI: update Fedora to 36 ([#6925](https://github.com/containerd/containerd/pull/6925))
    * Add `Wait` to `binaryProcessor` ([#6916](https://github.com/containerd/containerd/pull/6916))
    * go.mod: Bump k8s deps to v0.24.0 ([#6905](https://github.com/containerd/containerd/pull/6905))
    * (Vagrant CI) Enable git commands due to git CVE fix ([#6915](https://github.com/containerd/containerd/pull/6915))
    * Pass explicit JUnit outfile to critest.exe in Windows workflow. ([#6912](https://github.com/containerd/containerd/pull/6912))
    * Update critools to v1.24 ([#6894](https://github.com/containerd/containerd/pull/6894))
    * devmapper docs: small fixes ([#6904](https://github.com/containerd/containerd/pull/6904))
    * move report dir option to end of line for vagrant cri tests ([#6900](https://github.com/containerd/containerd/pull/6900))
    * Update Kubernetes version matrix in release docs ([#6892](https://github.com/containerd/containerd/pull/6892))
    * Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy ([#6889](https://github.com/containerd/containerd/pull/6889))
    * containerd 1.6.4 k8s 1.24 readme announce ([#6890](https://github.com/containerd/containerd/pull/6890))
    * Cleanup leaked shim process ([#6866](https://github.com/containerd/containerd/pull/6866))
    * Add collectible resources to metadata gc ([#6804](https://github.com/containerd/containerd/pull/6804))
    * Update k8 docurl in file ([#6881](https://github.com/containerd/containerd/pull/6881))
    * Support RISC-V 64 ([#6882](https://github.com/containerd/containerd/pull/6882))
    * docs: minor fixes in snapshots.Snapshotter comments ([#6885](https://github.com/containerd/containerd/pull/6885))
    * Officially deprecate Schema 1 ([#6884](https://github.com/containerd/containerd/pull/6884))
    * Make Cirrus CI tests more stable ([#6880](https://github.com/containerd/containerd/pull/6880))
    * docs: Adding windows installation steps to getting-started.md ([#6875](https://github.com/containerd/containerd/pull/6875))
    * Add ctr support for CPUMax and CPUShares ([#6809](https://github.com/containerd/containerd/pull/6809))
    * Support for cgroups blockio ([#5490](https://github.com/containerd/containerd/pull/5490))
    * Fix comment for metadata/db.go ([#6871](https://github.com/containerd/containerd/pull/6871))
    * Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies ([#6867](https://github.com/containerd/containerd/pull/6867))
    * Update go-cni to v1.1.5 ([#6868](https://github.com/containerd/containerd/pull/6868))
    * Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#6865](https://github.com/containerd/containerd/pull/6865))
    * Upgrade google.golang.org/grpc and google.golang.org/protobuf ([#6864](https://github.com/containerd/containerd/pull/6864))
    * Don't use "uname -a" as Cirrus CI's cache key ([#6863](https://github.com/containerd/containerd/pull/6863))
    * remove duplicate ([#6856](https://github.com/containerd/containerd/pull/6856))
    * Create ppc64le release ([#6858](https://github.com/containerd/containerd/pull/6858))
    * Move Vagrant-based tests from GitHub Actions to Cirrus CI ([#6854](https://github.com/containerd/containerd/pull/6854))
    * feature: support image pull progress timeout ([#6150](https://github.com/containerd/containerd/pull/6150))
    * Add unpack interface to be used by client ([#6749](https://github.com/containerd/containerd/pull/6749))
    * Fix undefined error in use of errors package ([#6855](https://github.com/containerd/containerd/pull/6855))
    * Migrate off from github.com/gogo/protobuf ([#6841](https://github.com/containerd/containerd/pull/6841))
    * images/image.go: typo ([#6851](https://github.com/containerd/containerd/pull/6851))
    * Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices ([#5686](https://github.com/containerd/containerd/pull/5686))
    * integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage ([#6180](https://github.com/containerd/containerd/pull/6180))
    * fix incorrect syntax in comments ([#6845](https://github.com/containerd/containerd/pull/6845))
    * cri: close fifos when container is deleted ([#6842](https://github.com/containerd/containerd/pull/6842))
    * diff: hide types.Any from clients ([#6832](https://github.com/containerd/containerd/pull/6832))
    * Add Container-Optimized OS into Adopters ([#6838](https://github.com/containerd/containerd/pull/6838))
    * Prepare for google.golang.org/protobuf ([#6835](https://github.com/containerd/containerd/pull/6835))
    * fix the restart desired to running when task not found ([#6833](https://github.com/containerd/containerd/pull/6833))
    * Remove all gogoproto extensions ([#6829](https://github.com/containerd/containerd/pull/6829))
    * fix nil pointer panic for monitor ([#6830](https://github.com/containerd/containerd/pull/6830))
    * remotes/docker: log registry URLs as info instead of debug ([#5681](https://github.com/containerd/containerd/pull/5681))
    * Rename runtime/v2/task to api/runtime ([#6827](https://github.com/containerd/containerd/pull/6827))
    * Fix protoc-gen-go-fieldpath ([#6828](https://github.com/containerd/containerd/pull/6828))
    * Consolidate gogo/protobuf dependencies under our own protobuf package ([#6826](https://github.com/containerd/containerd/pull/6826))
    * Add restart policy for enhanced restart manager ([#6744](https://github.com/containerd/containerd/pull/6744))
    * Remove gogoproto.stdtime ([#6821](https://github.com/containerd/containerd/pull/6821))
    * Set timeout when collecting metrics from shim's Stat ([#6781](https://github.com/containerd/containerd/pull/6781))
    * Fuzz filter package with Go 1.18's fuzzer ([#6819](https://github.com/containerd/containerd/pull/6819))
    * allow ptrace(2) by default for kernel >= 4.8 ([#6810](https://github.com/containerd/containerd/pull/6810))
    * Build bin/gen-manpages instead of using "go run" ([#6820](https://github.com/containerd/containerd/pull/6820))
    * update golang to 1.18.1, 1.17.9 ([#6822](https://github.com/containerd/containerd/pull/6822))
    * Sandbox API ([#6703](https://github.com/containerd/containerd/pull/6703))
    * Move lease manager plugin to separate package ([#6811](https://github.com/containerd/containerd/pull/6811))
    * fix pool_device_test ([#6807](https://github.com/containerd/containerd/pull/6807))
    * check for duplicate nspath possibilities ([#6806](https://github.com/containerd/containerd/pull/6806))
    * Do not append []string{""} to command to preserve Docker compatibility ([#6805](https://github.com/containerd/containerd/pull/6805))
    * tracing: fix panic on startup when configured ([#6789](https://github.com/containerd/containerd/pull/6789))
    * Optimize loading performance for cri recover ([#6680](https://github.com/containerd/containerd/pull/6680))
    * Change architecture path in README.md ([#6798](https://github.com/containerd/containerd/pull/6798))
    * make consistent for checkpoint path ([#6792](https://github.com/containerd/containerd/pull/6792))
    * metrics/cgroups: fix deadlock issue in Add during Collect ([#6788](https://github.com/containerd/containerd/pull/6788))
    * ADOPTERS: Update AKS Info ([#6794](https://github.com/containerd/containerd/pull/6794))
    * Pin upload-cloud-storage action to 0.8.0 in Windows workflow. ([#6790](https://github.com/containerd/containerd/pull/6790))
    * docs: add Deckhouse to the list of adopters ([#6785](https://github.com/containerd/containerd/pull/6785))
    * Add `docs/snapshotters`; simplify `docs/cri` ([#6778](https://github.com/containerd/containerd/pull/6778))
    * Turn paths from cmdline into absolute paths ([#6672](https://github.com/containerd/containerd/pull/6672))
    * CRI: add support for CDI device injection ([#6654](https://github.com/containerd/containerd/pull/6654))
    * Disable writing freelist to make the file robust against data corruptions ([#6761](https://github.com/containerd/containerd/pull/6761))
    * mv design docs/historical/design ([#6777](https://github.com/containerd/containerd/pull/6777))
    * CRI: improve image pulling performance ([#6702](https://github.com/containerd/containerd/pull/6702))
    * docs: remove runtime v1; migrate config v1 to v2 ([#6776](https://github.com/containerd/containerd/pull/6776))
    * Skip flaky test on Windows ([#6779](https://github.com/containerd/containerd/pull/6779))
    * docs/getting-started.md: typo ([#6775](https://github.com/containerd/containerd/pull/6775))
    * Add no_tracing tag ([#6750](https://github.com/containerd/containerd/pull/6750))
    * Move historical docs to `docs/historical` ([#6754](https://github.com/containerd/containerd/pull/6754))
    * Run go mod tidy in integration tests ([#6768](https://github.com/containerd/containerd/pull/6768))
    * go.mod: move indirects, and update integration go.mod to 1.18 ([#6765](https://github.com/containerd/containerd/pull/6765))
    * Drop gotest.tools ([#6762](https://github.com/containerd/containerd/pull/6762))
    * Use t.Setenv instead of os.Setenv ([#6760](https://github.com/containerd/containerd/pull/6760))
    * Upgrade to Go 1.18 ([#6709](https://github.com/containerd/containerd/pull/6709))
    * Adding multi-arch support for the configure.sh script ([#6751](https://github.com/containerd/containerd/pull/6751))
    * docs/getting-started.md: massive update ([#6758](https://github.com/containerd/containerd/pull/6758))
    * Remove unmaintained contrib/linuxkit ([#6755](https://github.com/containerd/containerd/pull/6755))
    * [Windows CI] Address some timeout issues ([#6757](https://github.com/containerd/containerd/pull/6757))
    * BUILDING.md: update supported Go versions ([#6756](https://github.com/containerd/containerd/pull/6756))
    * update runc to 1.1.1 ([#6753](https://github.com/containerd/containerd/pull/6753))
    * CI: add Rocky Linux 8 ([#6747](https://github.com/containerd/containerd/pull/6747))
    * CI: bump up crun to 1.4.4 ([#6748](https://github.com/containerd/containerd/pull/6748))
    * added make help for cri integration ([#6743](https://github.com/containerd/containerd/pull/6743))
    * Update README.md cncf landscape url ([#6740](https://github.com/containerd/containerd/pull/6740))
    * Fix error message in TestNewBinaryIO ([#6738](https://github.com/containerd/containerd/pull/6738))
    * Use typeurl.Any instead of github.com/gogo/protobuf/types.Any ([#6706](https://github.com/containerd/containerd/pull/6706))
    * Use cgroups.AddProc() for cgroups v1 ([#5738](https://github.com/containerd/containerd/pull/5738))
    * fix: ctr images mount with snapshotter option can't get snapshotter ([#6713](https://github.com/containerd/containerd/pull/6713))
    * cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6323](https://github.com/containerd/containerd/pull/6323))
    * moving up to go-cni v1.1.4 ([#6721](https://github.com/containerd/containerd/pull/6721))
    * native: fix deadlock from leaving transactions open ([#6722](https://github.com/containerd/containerd/pull/6722))
    * go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 ([#5390](https://github.com/containerd/containerd/pull/5390))
    * Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c)
    * runtime: deprecate runc --criu / -criu-path option ([#6496](https://github.com/containerd/containerd/pull/6496))
    * Bug fix for mount path handling ([#6651](https://github.com/containerd/containerd/pull/6651))
    * Upgrade containerd/imgcrypt and opencontainers/image-spec ([#6711](https://github.com/containerd/containerd/pull/6711))
    * Remove enumvalue_customname, goproto_enum_prefix and enum_customname ([#6708](https://github.com/containerd/containerd/pull/6708))
    * Remove gogoproto.customtype ([#6699](https://github.com/containerd/containerd/pull/6699))
    * Skip tty critest testcase on Windows Server 2022 ([#6698](https://github.com/containerd/containerd/pull/6698))
    * Build with Go 1.18 ([#6605](https://github.com/containerd/containerd/pull/6605))
    * Update prometheus client vendor ([#6690](https://github.com/containerd/containerd/pull/6690))
    * vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd ([#6687](https://github.com/containerd/containerd/pull/6687))
    * Make the temp mount as ready only in container WithVolumes ([#6593](https://github.com/containerd/containerd/pull/6593))
    * fix: `ctr run --cni` get failed ([#6670](https://github.com/containerd/containerd/pull/6670))
    * test: use `T.TempDir` to create temporary test directory ([#6681](https://github.com/containerd/containerd/pull/6681))
    * Make OpenLab's CI jobs blocking ([#6679](https://github.com/containerd/containerd/pull/6679))
    * document log level and format ([#6683](https://github.com/containerd/containerd/pull/6683))
    * Add shared content label to namespaces ([#6660](https://github.com/containerd/containerd/pull/6660))
    * Add protoc-gen-go-fieldpath ([#6562](https://github.com/containerd/containerd/pull/6562))
    * Enable gosec linter for golangci-lint ([#6669](https://github.com/containerd/containerd/pull/6669))
    * Make mkfs.xfs available on OpenLab's CI environment ([#6668](https://github.com/containerd/containerd/pull/6668))
    * ctr: improve error relative shim path error msg ([#6519](https://github.com/containerd/containerd/pull/6519))
    * typo fixes under cmd. ([#6674](https://github.com/containerd/containerd/pull/6674))
    * Handle CRI Device.HostPath on Windows ([#6618](https://github.com/containerd/containerd/pull/6618))
    * Upgrade golangci-lint and its GitHub Action ([#6666](https://github.com/containerd/containerd/pull/6666))
    * Don't build a second copy of containerd-shim-runhcs-v1.exe ([#6661](https://github.com/containerd/containerd/pull/6661))
    * Update TestNormalize to only test Windows platform ([#6569](https://github.com/containerd/containerd/pull/6569))
    * Fix link in getting-started.md ([#6663](https://github.com/containerd/containerd/pull/6663))
    * Fuzzing: refactor metadata fuzzers ([#6423](https://github.com/containerd/containerd/pull/6423))
    * Two xfs file systems with same UUID can not be mounted on the same sy… ([#6650](https://github.com/containerd/containerd/pull/6650))
    * [Windows] Fix deadline exceeded in daemon restart ([#6635](https://github.com/containerd/containerd/pull/6635))
    * Use temp file for export/import test ([#6658](https://github.com/containerd/containerd/pull/6658))
    * strip path-info from `-v` (version) output, and implement -v flag for containerd-shim  ([#6495](https://github.com/containerd/containerd/pull/6495))
    * Improve unexpected response error handling in resolver ([#6617](https://github.com/containerd/containerd/pull/6617))
    * Use the latest tag for azure images ([#6601](https://github.com/containerd/containerd/pull/6601))
    * Run CRI integration tests in GitHub Actions (Windows) ([#6626](https://github.com/containerd/containerd/pull/6626))
    * cri: fix integration test on cgroupsv2 system ([#6595](https://github.com/containerd/containerd/pull/6595))
    * Use version 2 configuration format in docs/PLUGINS.md ([#6613](https://github.com/containerd/containerd/pull/6613))
    * update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#6619](https://github.com/containerd/containerd/pull/6619))
    * Update status of 1.4 release ([#6614](https://github.com/containerd/containerd/pull/6614))
    * Update TestContainerSymlinkVolumes to use windows path ([#6568](https://github.com/containerd/containerd/pull/6568))
    * Add --user support for ctr run Windows ([#6603](https://github.com/containerd/containerd/pull/6603))
    * Update releases ([#6608](https://github.com/containerd/containerd/pull/6608))
    * Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7)
    * Adds support for Windows ArgsEscaped images ([#6479](https://github.com/containerd/containerd/pull/6479))
    * Do not use weak import ([#6558](https://github.com/containerd/containerd/pull/6558))
    * cri: relax test for system without hugetlb ([#6596](https://github.com/containerd/containerd/pull/6596))
    * Use containerd/protobuild instead of stevvooe/protobuild ([#6578](https://github.com/containerd/containerd/pull/6578))
    * integration: remove duplicated util pkg ([#6597](https://github.com/containerd/containerd/pull/6597))
    * go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 ([#6591](https://github.com/containerd/containerd/pull/6591))
    * Update Go version recommendation in getting started ([#6585](https://github.com/containerd/containerd/pull/6585))
    * go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 ([#6337](https://github.com/containerd/containerd/pull/6337))
    * fix Implicit memory aliasing in for loop ([#6331](https://github.com/containerd/containerd/pull/6331))
    * Fix build with gccgo ([#6579](https://github.com/containerd/containerd/pull/6579))
    * Replace golang.org/x/net/context with std library ([#6580](https://github.com/containerd/containerd/pull/6580))
    * containerd-shim-runc-v1: return init pid when clean dead shim ([#6571](https://github.com/containerd/containerd/pull/6571))
    * Use Windows matcher when on Windows platform in all code paths ([#6491](https://github.com/containerd/containerd/pull/6491))
    * containerd-shim-runc-v2: return init pid when clean dead shim ([#6452](https://github.com/containerd/containerd/pull/6452))
    * [Windows][Integration] Enable TestRestartMonitor ([#6515](https://github.com/containerd/containerd/pull/6515))
    * go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 ([#6554](https://github.com/containerd/containerd/pull/6554))
    </p>
    </details>
    
    ### Changes from containerd/cgroups
    <details><summary>49 commits</summary>
    <p>
    
    * Upgrade GitHub actions CI workflow ([#249](https://github.com/containerd/cgroups/pull/249))
    * Upgrade Go compiler to 1.19 ([#248](https://github.com/containerd/cgroups/pull/248))
    * Don't use ioutil ([#246](https://github.com/containerd/cgroups/pull/246))
    * Check that cgroup is empty before deleting ([#228](https://github.com/containerd/cgroups/pull/228))
    * Support cgroup.AddThread in cgroupv2 manager ([#243](https://github.com/containerd/cgroups/pull/243))
    * Support to handle more than 4 fields in cpuacct.stat ([#231](https://github.com/containerd/cgroups/pull/231))
    * typo shoulld -> should ([#236](https://github.com/containerd/cgroups/pull/236))
    * Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 ([#241](https://github.com/containerd/cgroups/pull/241))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#240](https://github.com/containerd/cgroups/pull/240))
    * .github: use ubuntu-22.04 to test cgroupv2 ([#237](https://github.com/containerd/cgroups/pull/237))
    * feat(v2): Support cgroup.MoveTo in cgroupv2 manager ([#235](https://github.com/containerd/cgroups/pull/235))
    * Update README to include usage examples of v2 client ([#233](https://github.com/containerd/cgroups/pull/233))
    * ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path ([#232](https://github.com/containerd/cgroups/pull/232))
    * Bump go version to 1.17 in go.mod ([#230](https://github.com/containerd/cgroups/pull/230))
    * make cmd/ a separate module (as it's only for testing) ([#226](https://github.com/containerd/cgroups/pull/226))
    * feat(v2): add Update method for v2.Manager ([#225](https://github.com/containerd/cgroups/pull/225))
    * feat: add memory.min param ([#211](https://github.com/containerd/cgroups/pull/211))
    * modified the dereference null pointer value. ([#218](https://github.com/containerd/cgroups/pull/218))
    * update readme for cpu cgroup demo ([#217](https://github.com/containerd/cgroups/pull/217))
    * Fix systemd full path ([#221](https://github.com/containerd/cgroups/pull/221))
    * Update Go version and fedora base ([#223](https://github.com/containerd/cgroups/pull/223))
    * Fix panic in NewSystemd on nil values ([#219](https://github.com/containerd/cgroups/pull/219))
    </p>
    </details>
    
    ### Changes from containerd/continuity
    <details><summary>28 commits</summary>
    <p>
    
    * go.mod: update dependencies (take 2) ([#204](https://github.com/containerd/continuity/pull/204))
    * Revert "go.mod: update dependencies" ([#205](https://github.com/containerd/continuity/pull/205))
    * Various small fix-ups ([#202](https://github.com/containerd/continuity/pull/202))
    * update authors and mailmap ([#201](https://github.com/containerd/continuity/pull/201))
    * move cmd/continuity to its own go module ([#200](https://github.com/containerd/continuity/pull/200))
    * CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir)  ([#198](https://github.com/containerd/continuity/pull/198))
    * fs.CopyDir: support sockets and pipes ([#197](https://github.com/containerd/continuity/pull/197))
    * Fix wrapping errors ([#196](https://github.com/containerd/continuity/pull/196))
    </p>
    </details>
    
    ### Changes from containerd/go-cni
    <details><summary>38 commits</summary>
    <p>
    
    * Add Go 1.20 support ([#111](https://github.com/containerd/go-cni/pull/111))
    * opts: add cgroupPath capability ([#110](https://github.com/containerd/go-cni/pull/110))
    * go.mod: github.com/containernetworking/cni v1.1.2 ([#109](https://github.com/containerd/go-cni/pull/109))
    * Remove references to io/ioutil package ([#106](https://github.com/containerd/go-cni/pull/106))
    * Update golangci/golangci-lint package ([#108](https://github.com/containerd/go-cni/pull/108))
    * Update GitHub actions CI workflow ([#107](https://github.com/containerd/go-cni/pull/107))
    * Add support for Windows default conf paths ([#103](https://github.com/containerd/go-cni/pull/103))
    * go.mod: github.com/stretchr/testify v1.8.0 ([#104](https://github.com/containerd/go-cni/pull/104))
    * go.mod: update libcni to v1.1.1 ([#101](https://github.com/containerd/go-cni/pull/101))
    * add in some serial setup tests; a little make cleanup ([#100](https://github.com/containerd/go-cni/pull/100))
    * Re-introduce serial network setup ([#99](https://github.com/containerd/go-cni/pull/99))
    * bump github.com/containernetworking/cni v1.1.0 ([#98](https://github.com/containerd/go-cni/pull/98))
    * Revert "Update loopback version to support check" ([#96](https://github.com/containerd/go-cni/pull/96))
    * Use revive instead of golint ([#92](https://github.com/containerd/go-cni/pull/92))
    * Bump go verion to 1.17 ([#91](https://github.com/containerd/go-cni/pull/91))
    * moving up to latest CNI plugin release ([#90](https://github.com/containerd/go-cni/pull/90))
    * Fix Loopback Version ([#88](https://github.com/containerd/go-cni/pull/88))
    * Update comment for capabilities ([#89](https://github.com/containerd/go-cni/pull/89))
    * Add integration test for linux and update go version from 1.16 to 1.17 ([#84](https://github.com/containerd/go-cni/pull/84))
    </p>
    </details>
    
    ### Changes from containerd/imgcrypt
    <details><summary>18 commits</summary>
    <p>
    
    * Use reflect to support diff.ApplyConfig with/without gogo's types.Any ([#75](https://github.com/containerd/imgcrypt/pull/75))
    * Upgrade golangci-lint-action and golangci-lint ([#76](https://github.com/containerd/imgcrypt/pull/76))
    * CHANGES: Updated CHANGES document for 1.1.4 release ([#74](https://github.com/containerd/imgcrypt/pull/74))
    * Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#73](https://github.com/containerd/imgcrypt/pull/73))
    * images: prepare for typeurl.Any ([#72](https://github.com/containerd/imgcrypt/pull/72))
    * Bump ocicrypt to 1.1.3 ([#71](https://github.com/containerd/imgcrypt/pull/71))
    * Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#67](https://github.com/containerd/imgcrypt/pull/67))
    </p>
    </details>
    
    ### Changes from containerd/nri
    <details><summary>37 commits</summary>
    <p>
    
    * adaptation: fix a panic for unsolicited updates. ([#23](https://github.com/containerd/nri/pull/23))
    * pkg/adaptaton: log errors with %v not %w. ([#22](https://github.com/containerd/nri/pull/22))
    * chore: cleanup old buildtags by `go fix` ([#21](https://github.com/containerd/nri/pull/21))
    * add back project info ([#20](https://github.com/containerd/nri/pull/20))
    * Extend scope to enable common pluggable runtime extensions. ([#16](https://github.com/containerd/nri/pull/16))
    * Update GitHub actions CI workflow ([#19](https://github.com/containerd/nri/pull/19))
    * replace pkg/errors ([#17](https://github.com/containerd/nri/pull/17))
    * Update the examples in README.md ([#15](https://github.com/containerd/nri/pull/15))
    * Rename branch from master to main ([#12](https://github.com/containerd/nri/pull/12))
    * Update to containerd 1.5.1 ([#11](https://github.com/containerd/nri/pull/11))
    </p>
    </details>
    
    ### Changes from containerd/ttrpc
    <details><summary>56 commits</summary>
    <p>
    
    * Make checkServerShutdown verbose ([#128](https://github.com/containerd/ttrpc/pull/128))
    * server: Fix connection issues when receiving ECONNRESET ([#123](https://github.com/containerd/ttrpc/pull/123))
    * README: protobuild is in containerd org now ([#125](https://github.com/containerd/ttrpc/pull/125))
    * stream: fix the map of streams leak ([#120](https://github.com/containerd/ttrpc/pull/120))
    * Regenerated pb.go files to fix mismatches ([#122](https://github.com/containerd/ttrpc/pull/122))
    * build: Fix references to check-protos target in Makefile ([#118](https://github.com/containerd/ttrpc/pull/118))
    * Add service prefix option to generator ([#116](https://github.com/containerd/ttrpc/pull/116))
    * doc: ttrpc supports stream ([#121](https://github.com/containerd/ttrpc/pull/121))
    * *: remove codecov ([#114](https://github.com/containerd/ttrpc/pull/114))
    * Only generate a Go file if the file has some services ([#112](https://github.com/containerd/ttrpc/pull/112))
    * *.go: organize errors to one spot ([#113](https://github.com/containerd/ttrpc/pull/113))
    * PROTOCOL: slight markdown touchup ([#111](https://github.com/containerd/ttrpc/pull/111))
    * Introduce streaming ([#107](https://github.com/containerd/ttrpc/pull/107))
    * Update checkout and lint actions ([#109](https://github.com/containerd/ttrpc/pull/109))
    * Add Makefile and update protobuf ([#106](https://github.com/containerd/ttrpc/pull/106))
    * Add ttrpc protocol definition ([#102](https://github.com/containerd/ttrpc/pull/102))
    * Enable Codecov again ([#105](https://github.com/containerd/ttrpc/pull/105))
    * Use CR+LF instead of LF regardless of OS ([#103](https://github.com/containerd/ttrpc/pull/103))
    * Log the error's underyling errno if there is ([#104](https://github.com/containerd/ttrpc/pull/104))
    * Use google.golang.org/protobuf instead of github.com/gogo/protobuf ([#99](https://github.com/containerd/ttrpc/pull/99))
    * Wrap correct error on unix.GetsockoptUcred failure ([#100](https://github.com/containerd/ttrpc/pull/100))
    * Update CI project checks to use containerd project action ([#101](https://github.com/containerd/ttrpc/pull/101))
    </p>
    </details>
    
    ### Dependency Changes
    
    * **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 -> 1f10f66a31bf
    * **github.com/AdamKorcz/go-118-fuzz-build**                                       5330a85ea652 **_new_**
    * **github.com/Microsoft/go-winio**                                                v0.5.1 -> v0.6.0
    * **github.com/Microsoft/hcsshim**                                                 v0.9.2 -> v0.10.0-rc.5
    * **github.com/blang/semver/v4**                                                   v4.0.0 **_new_**
    * **github.com/cenkalti/backoff/v4**                                               v4.1.2 -> v4.2.0
    * **github.com/cilium/ebpf**                                                       v0.7.0 -> v0.9.1
    * **github.com/container-orchestrated-devices/container-device-interface**         v0.5.1 **_new_**
    * **github.com/containerd/btrfs/v2**                                               v2.0.0 **_new_**
    * **github.com/containerd/cgroups**                                                v1.0.3 -> v1.1.0
    * **github.com/containerd/cgroups/v3**                                             v3.0.0 **_new_**
    * **github.com/containerd/continuity**                                             v0.2.2 -> v0.3.0
    * **github.com/containerd/go-cni**                                                 v1.1.3 -> 6603d5bd8941
    * **github.com/containerd/imgcrypt**                                               v1.1.3 -> 8ba028dca028
    * **github.com/containerd/nri**                                                    v0.1.0 -> b3cabdec0657
    * **github.com/containerd/ttrpc**                                                  v1.1.0 -> 32fab2374638
    * **github.com/containerd/typeurl/v2**                                             v2.1.0 **_new_**
    * **github.com/containernetworking/cni**                                           v1.0.1 -> v1.1.2
    * **github.com/containernetworking/plugins**                                       v1.0.1 -> v1.2.0
    * **github.com/containers/ocicrypt**                                               v1.1.2 -> v1.1.3
    * **github.com/coreos/go-systemd/v22**                                             v22.3.2 -> v22.5.0
    * **github.com/cpuguy83/go-md2man/v2**                                             v2.0.0 -> v2.0.2
    * **github.com/cyphar/filepath-securejoin**                                        v0.2.3 **_new_**
    * **github.com/docker/go-units**                                                   v0.4.0 -> v0.5.0
    * **github.com/emicklei/go-restful/v3**                                            v3.8.0 **_new_**
    * **github.com/fsnotify/fsnotify**                                                 v1.4.9 -> v1.6.0
    * **github.com/go-logr/logr**                                                      v1.2.2 -> v1.2.3
    * **github.com/godbus/dbus/v5**                                                    v5.0.6 -> v5.1.0
    * **github.com/google/go-cmp**                                                     v0.5.6 -> v0.5.9
    * **github.com/google/uuid**                                                       v1.2.0 -> v1.3.0
    * **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.7.0 **_new_**
    * **github.com/intel/goresctrl**                                                   v0.2.0 -> v0.3.0
    * **github.com/klauspost/compress**                                                v1.11.13 -> v1.15.11
    * **github.com/klauspost/cpuid/v2**                                                v2.0.4 **_new_**
    * **github.com/miekg/pkcs11**                                                      v1.0.3 -> v1.1.1
    * **github.com/minio/sha256-simd**                                                 v1.0.0 **_new_**
    * **github.com/moby/sys/mountinfo**                                                v0.5.0 -> v0.6.2
    * **github.com/moby/sys/sequential**                                               v0.5.0 **_new_**
    * **github.com/moby/sys/signal**                                                   v0.6.0 -> v0.7.0
    * **github.com/opencontainers/image-spec**                                         693428a734f5 -> 3a7f492d3f1b
    * **github.com/opencontainers/runc**                                               v1.1.0 -> v1.1.4
    * **github.com/opencontainers/runtime-spec**                                       1c3f411f0417 -> 86290f6a00fb
    * **github.com/opencontainers/runtime-tools**                                      946c877fa809 **_new_**
    * **github.com/opencontainers/selinux**                                            v1.10.0 -> v1.10.2
    * **github.com/pelletier/go-toml**                                                 v1.9.3 -> v1.9.5
    * **github.com/prometheus/client_golang**                                          v1.11.0 -> v1.13.0
    * **github.com/prometheus/common**                                                 v0.30.0 -> v0.37.0
    * **github.com/prometheus/procfs**                                                 v0.7.3 -> v0.8.0
    * **github.com/russross/blackfriday/v2**                                           v2.0.1 -> v2.1.0
    * **github.com/sirupsen/logrus**                                                   v1.8.1 -> v1.9.0
    * **github.com/stretchr/testify**                                                  v1.7.0 -> v1.8.1
    * **github.com/syndtr/gocapability**                                               42c35b437635 **_new_**
    * **github.com/tchap/go-patricia/v2**                                              v2.3.1 **_new_**
    * **github.com/urfave/cli**                                                        v1.22.1 -> v1.22.12
    * **github.com/vishvananda/netlink**                                               f5de75959ad5 -> v1.2.1-beta.2
    * **go.opencensus.io**                                                             v0.23.0 -> v0.24.0
    * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 -> v0.37.0
    * **go.opentelemetry.io/otel**                                                     v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/metric**                                              v0.34.0 **_new_**
    * **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/otel/trace**                                               v1.3.0 -> v1.12.0
    * **go.opentelemetry.io/proto/otlp**                                               v0.11.0 -> v0.19.0
    * **golang.org/x/crypto**                                                          32db794688a5 -> v0.1.0
    * **golang.org/x/mod**                                                             v0.7.0 **_new_**
    * **golang.org/x/net**                                                             fe4d6282115f -> v0.5.0
    * **golang.org/x/oauth2**                                                          2bc19b11175f -> 6fdb5e3db783
    * **golang.org/x/sync**                                                            036812b2e83c -> v0.1.0
    * **golang.org/x/sys**                                                             1d35b9e2eb4e -> v0.5.0
    * **golang.org/x/term**                                                            6886f2dfbf5b -> v0.4.0
    * **golang.org/x/text**                                                            v0.3.7 -> v0.6.0
    * **golang.org/x/time**                                                            1f47c861a9ac -> 90d013bbcef8
    * **golang.org/x/tools**                                                           v0.5.0 **_new_**
    * **google.golang.org/genproto**                                                   e50cd9704f63 -> 1c016267d619
    * **google.golang.org/grpc**                                                       v1.43.0 -> v1.52.3
    * **google.golang.org/protobuf**                                                   v1.27.1 -> v1.28.1
    * **gopkg.in/yaml.v3**                                                             496545a6307b -> v3.0.1
    * **k8s.io/api**                                                                   v0.22.5 -> v0.25.4
    * **k8s.io/apimachinery**                                                          v0.22.5 -> v0.25.4
    * **k8s.io/apiserver**                                                             v0.22.5 -> v0.25.4
    * **k8s.io/client-go**                                                             v0.22.5 -> v0.25.4
    * **k8s.io/component-base**                                                        v0.22.5 -> v0.25.4
    * **k8s.io/cri-api**                                                               v0.23.1 -> v0.26.0-beta.0
    * **k8s.io/klog/v2**                                                               v2.30.0 -> v2.80.1
    * **k8s.io/utils**                                                                 cb0fa318a74b -> 8e77b1f39fe2
    * **sigs.k8s.io/json**                                                             f223a00ba0e2 **_new_**
    * **sigs.k8s.io/structured-merge-diff/v4**                                         v4.1.2 -> v4.2.3
    * **sigs.k8s.io/yaml**                                                             v1.2.0 -> v1.3.0
    
    Previous release can be found at [v1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0)
    ### Which file should I download?
    * `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
    * `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
    * `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:     (Deprecated)
    * `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated)
    
    In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
    and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.
    
    See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.