containerd 1.6.0-rc.3

Welcome to the v1.6.0-rc.3 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

### Highlights

#### Runtime

* **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744))
* **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813))
* **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817))
* **Handle sigint and sigterm in shimv2** ([#5828](https://github.com/containerd/containerd/pull/5828))
* **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918))
* **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011))
* **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031))
* **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206))
* **Update runc to v1.1.0** ([#6375](https://github.com/containerd/containerd/pull/6375))

#### Windows

* **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131))
* **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778))

#### CRI

* **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695))
* **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439))
* **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619))
* **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627))
* **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964))
* **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113))
* **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111))
* **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130))
* **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170))
* **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320))

#### Other

* **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606))
* **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610))
* **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965))
* **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122))
* **Update introspection service to show GRPC plugins** ([#6432](https://github.com/containerd/containerd/pull/6432))

#### Client

* **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709))
* **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Phil Estes
* Akihiro Suda
* Wei Fu
* Maksym Pavlenko
* Sebastiaan van Stijn
* Michael Crosby
* Kazuyoshi Kato
* Mike Brown
* Claudiu Belu
* Daniel Canter
* haoyun
* Brian Goff
* Gabriel Adrian Samfira
* Stefan Berger
* zounengren
* AdamKorcz
* Adelina Tuvenie
* Kohei Tokunaga
* Davanum Srinivas
* Nashwan Azhari
* Samuel Karp
* Shiming Zhang
* Markus Lehtonen
* Enrico Weigelt, metux IT consult
* Alakesh Haloi
* Hajime Tazaki
* Iceber Gu
* Kevin Parsons
* Aditi Sharma
* Jeremi Piotrowski
* David Porter
* Gijs Peskens
* ningmingxiao
* Brandon Lum
* Cody Roseborough
* Danielle Lancashire
* Jacob MacElroy
* Tõnis Tiigi
* dependabot[bot]
* wanglei
* Alexandre Peixoto Ferreira
* Eric Ernst
* Fabiano Fidêncio
* Furkan Türkal
* Jiaming Xu
* Kir Kolyshkin
* Miao Wang
* Neil Johnson
* Paul "TBBle" Hampson
* Priyanka Saggu
* Romain Aviolat
* Samuel Ortiz
* Sunghoon Kang
* Takumasa Sakao
* Tobias Klauser
* Zhiyu Li
* ye.sijun
* Alexander Minbaev
* Alexey Ivanov
* Andrey Smirnov
* Artem Khramov
* Aurelien Lun-Sin
* Ben Hutchings
* Cory Bennett
* Da McGrady
* Dan Williams
* Eng Zer Jun
* Ethan Chen
* Fupan Li
* Gaurav Gahlot
* Gunju Kim
* Henry Wang
* Jacob Blain Christen
* James Gordon
* James Sturtevant
* Jan Klippel
* Jayme Howard
* Jiajun Jiang
* Jintao Zhang
* Justin Terry
* Kaijie Chen
* Kante
* Kern Walster
* Kitt Hsu
* Lantao Liu
* Ma Xinjian
* Manabu Sugimoto
* Manuel Alejandro de Brito Fontes
* Mark Rossetti
* Markus Lippert
* Mikko Ylinen
* Ng Yang
* Nicolas Chariglione
* Ning Li
* Olli Janatuinen
* Peri Thompson
* Quan Tian
* Radostin Stoyanov
* Rui Lopes
* Sambhav Kothari
* Sebastian Hasler
* Sergey Kanzhelev
* Sören Tempel
* Yang Yang
* Yifan Yuan
* Zilong Wang
* Zufar Dhiyaulhaq
* botieking98
* chenxiaoyu
* jayonlau
* jerryzhuang
* linrunlong
* scuzhanglei
* wangzhan
* Étienne Guesnet

### Changes
<details><summary>1038 commits</summary>
<p>

* Prepare release notes for v1.6.0-rc.3 ([#6524](https://github.com/containerd/containerd/pull/6524))
  * Prepare release notes for v1.6.0-rc.3
* Use white logo in github dark mode ([#6529](https://github.com/containerd/containerd/pull/6529))
  * Use white logo in github dark mode
* cri: fix handling of ignore_rdt_not_enabled_errors config option ([#6514](https://github.com/containerd/containerd/pull/6514))
  * cri: fix handling of ignore_rdt_not_enabled_errors config option
* pkg/oom/v2: handle EventChan routine shutdown quietly ([#6504](https://github.com/containerd/containerd/pull/6504))
  * pkg/oom/v2: handle EventChan routine shutdown quietly
* fix: .dockerignore make git working tree dirty ([#6523](https://github.com/containerd/containerd/pull/6523))
  * fix: .dockerignore makes git working tree dirty
* containerd-stress: start task ctr before starting execs ([#6518](https://github.com/containerd/containerd/pull/6518))
  * containerd-stress: start task ctr before starting execs
* Document fs_type and fs_options in snapshots/devmapper/README.md ([#6501](https://github.com/containerd/containerd/pull/6501))
  * Document fs_type and fs_options in snapshots/devmapper/README.md
* docs: add Talos Linux to the list of adopters ([#6510](https://github.com/containerd/containerd/pull/6510))
  * docs: add Talos Linux to the list of adopters
* Prepare 1.6.0-rc.2 ([#6502](https://github.com/containerd/containerd/pull/6502))
  * Prepare release notes for v1.6.0-rc.2
  * Update releases document
* platforms.Normalize(): do not reset OSVersion and OSFeatures ([#6497](https://github.com/containerd/containerd/pull/6497))
  * platforms.Normalize(): do not reset OSVersion and OSFeatures
* tracing: use OTLP/HTTP in addition to OTLP/gRPC ([#6457](https://github.com/containerd/containerd/pull/6457))
  * tracing: return (ctx, span) from StartSpan
  * tracing: support OTLP/HTTP in addition to gRPC
* Update cgroups to v1.0.3 ([#6498](https://github.com/containerd/containerd/pull/6498))
  * Update cgroups to v1.0.3
* seccomp: kernel 5.11 -> 5.16 ([#6494](https://github.com/containerd/containerd/pull/6494))
  * seccomp: kernel 5.16 (futex_waitv)
  * seccomp: kernel 5.15 (process_mrelease)
  * seccomp: kernel 5.14 (quotactl_fd, memfd_secret)
  * seccomp: kernel 5.13 (landlock_{add_rule,create_ruleset,restrict_self})
  * seccomp: kernel 5.12 (mount_setattr)
* remotes: fix dockerPusher to handle abort correctly ([#6243](https://github.com/containerd/containerd/pull/6243))
  * remotes: fix dockerPusher to handle abort correctly
* seccomp: add support for "swapcontext" syscall in default policy ([#6411](https://github.com/containerd/containerd/pull/6411))
  * seccomp: add support for "swapcontext" syscall in default policy
* oci: use readonly mount to read user/group info ([#6478](https://github.com/containerd/containerd/pull/6478))
  * oci: use readonly mount to read user/group info
* Fix possibly incorrect media type default on import ([#6475](https://github.com/containerd/containerd/pull/6475))
  * Fix possibly incorrect media type default on import
* shimv2: handle sigint/sigterm ([#5828](https://github.com/containerd/containerd/pull/5828))
  * shimv2: handle sigint/sigterm
* Fix acr fetch token 400 ([#6481](https://github.com/containerd/containerd/pull/6481))
  * fix acr fetch token 400
* platforms: add support for matching amd64 variants ([#6455](https://github.com/containerd/containerd/pull/6455))
  * platforms: add support for matching amd64 variants
* Fix windows periodic workflow ([#6476](https://github.com/containerd/containerd/pull/6476))
  * Fix windows periodic workflow
* docs: add doc-comments on GC-related methods ([#6473](https://github.com/containerd/containerd/pull/6473))
  * docs: add doc-comments on GC-related methods
* fix: should not send 137 code event if cmd is notfound ([#6465](https://github.com/containerd/containerd/pull/6465))
  * fix: should not send 137 code event if cmd is notfound
* Fix empty scopes return ([#6463](https://github.com/containerd/containerd/pull/6463))
  * fix empty scopes return
* Prepare release notes for v1.6.0-rc.1 ([#6462](https://github.com/containerd/containerd/pull/6462))
  * Prepare release notes for v1.6.0-rc.1
* Add support for skipping non-dist blob push ([#6424](https://github.com/containerd/containerd/pull/6424))
  * ctr: flag to toggle non-distributable blob push
  * Add image handler to skip non-distributable blobs.
* Compile binaries for go1.16 and go1.17 in CI ([#6461](https://github.com/containerd/containerd/pull/6461))
  * Compile binaries for go1.16 and go1.17 in CI
* services/introspection: fix plugin caching to show grpc plugins ([#6432](https://github.com/containerd/containerd/pull/6432))
  * Update caching logic to avoid map access
  * services/introspection: support to show introspection grpc service
* Integration: Change to Windows Server 2022 build number constant ([#6458](https://github.com/containerd/containerd/pull/6458))
  * Integration: Change to Windows Server 2022 build number constant
* Update kubernetes vendor to 0.22.5 ([#6460](https://github.com/containerd/containerd/pull/6460))
  * Update kubernetes vendor to 0.22.5
* Fix rdt build tags for go 1.16 ([#6459](https://github.com/containerd/containerd/pull/6459))
  * Fix rdt build tags for go 1.16
* Remove submodule go mod ([#6439](https://github.com/containerd/containerd/pull/6439))
  * Remove api go submodule
  * Update makefile to remove API submodule
* go.mod: Update hcsshim to v0.9.2 ([#6453](https://github.com/containerd/containerd/pull/6453))
  * go.mod: Update hcsshim to v0.9.2
* update runc to v1.1.0 ([#6375](https://github.com/containerd/containerd/pull/6375))
  * go.mod: github.com/opencontainers/runc v1.1.0
  * update runc binary to v1.1.0
* tracing: fix OTLP tracer's initialization ([#6443](https://github.com/containerd/containerd/pull/6443))
  * tracing: fix OTLP tracer's initialization
* gha: run CodeQL scan on pull requests ([#6386](https://github.com/containerd/containerd/pull/6386))
  * gha: run CodeQL scan on pull requests
* Do not automatically inject client traces ([#6445](https://github.com/containerd/containerd/pull/6445))
  * Do not automatically inject client traces
* [containerd-stress] delete useless code ([#6451](https://github.com/containerd/containerd/pull/6451))
  * delete useless code
* Revert "Add shared content label to namespaces" ([#6440](https://github.com/containerd/containerd/pull/6440))
  * Revert "Add shared content label to namespaces"
* Add ppc64 support for test images ([#6435](https://github.com/containerd/containerd/pull/6435))
  * Add ppc64 support for test images
* ctr: Unify the delete subcommand alias ([#6427](https://github.com/containerd/containerd/pull/6427))
  * ctr: Unify the delete subcommand alias
* Prepare release notes for v1.6.0-rc.0 ([#6431](https://github.com/containerd/containerd/pull/6431))
  * Prepare release notes for v1.6.0-rc.0
* Integration: Switch to using `auth` Gcloud action in Windows workflow. ([#6397](https://github.com/containerd/containerd/pull/6397))
  * Integration: Switch to `upload-cloud-storage` Gcloud action.
  * Integration: Switch to using `auth` Gcloud action in Windows workflow.
* remove io/ioutil ([#6426](https://github.com/containerd/containerd/pull/6426))
  * remove io/ioutil
* test: e2e node COS cgroupv2 script ([#6418](https://github.com/containerd/containerd/pull/6418))
  * test: e2e node COS cgroupv2 script
* Integration: Enable CRITest on Windows 2022. ([#6378](https://github.com/containerd/containerd/pull/6378))
  * Enable critest tests on Windows Server 2022.
  * Parametrize CRITest test images in Windows Periodic workflow.
* Update error message for apparmor parser ([#6415](https://github.com/containerd/containerd/pull/6415))
  * Update error message for apparmor parser
* Fix wrong log message ([#6419](https://github.com/containerd/containerd/pull/6419))
  * Fix wrong log message
* Followup errors change ([#6414](https://github.com/containerd/containerd/pull/6414))
  * Fix incorrect error wrapped when closing ingest file
  * Fix seek error used without nil check
  * Fix followup items from errors replacement
* Updates CRI API & Kubernetes to 1.23 ([#6351](https://github.com/containerd/containerd/pull/6351))
  * Update k/k to 1.23.0
* Updating adoption of containerd for AKS ([#6416](https://github.com/containerd/containerd/pull/6416))
  * Updating adoption of containerd for AKS
* update the adoption status of containerd in GKE ([#6413](https://github.com/containerd/containerd/pull/6413))
  * update the adoption status of containerd in GKE
*  go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} ([#6410](https://github.com/containerd/containerd/pull/6410))
  * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt}
* replace github.com/pkg/errors with native errors ([#6366](https://github.com/containerd/containerd/pull/6366))
  * feat: replace github.com/pkg/errors to errors
* corrected link in cri architecture documentation ([#6412](https://github.com/containerd/containerd/pull/6412))
  * corrected link in cri architecture documentation
* remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token") ([#6396](https://github.com/containerd/containerd/pull/6396))
  * remotes/docker: allow fetching "refresh token" (aka "identity token")
  * remotes/docker/config: allow setting custom AuthorizerOpts
* Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407))
  * Prepare release notes for v1.6.0-beta.5
* Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292))
  * Integration: Check GCP secrets on Windows CI artifact upload.
* Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c)
  * only relabel cri managed host mounts
* Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439))
  * cri: add ignore_rdt_not_enabled_errors config option
  * Update dependencies
  * cri: annotations for controlling RDT class
  * tasks: add Linux rdt support
  * cmd: add --rdt-class command line option
  * oci: implement WithRdt
* fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391))
  * fix: use _ for consistency
* content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403))
  * content/local: use syscall.Timespec.Unix
* docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207))
  * docs: document the runtime shim plugin config options
  * docs: use proper markdown lists in containerd-config.toml.5.md
* fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304))
  * fix(ctr): enable networking for Windows containers
* Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394))
  * Fix $(PWD) issue for Windows makefile
* only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395))
  * fix: only test abstract unix socket on linux
* Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390))
  * Expect ErrorNotFound on Windows after Kill()
  * Replace tskill with taskkill
* fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291))
  * fix when kernel version < 4.13rc1 by using index=off cause overlay test error
* Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384))
  * Fix no-daemon flag for integration/client tests
* Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122))
  * Enable lazy init for ext4 with devicemapper
* Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385))
  * Fix flakiness on Windows for list stats
* cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347))
  * cri-integration: Add Windows default paths
* Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383))
  * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0
  * Use insecure.NewCredentials instead of grpc.WithInsecure
  * Upgrade OpenTelemetry dependencies
* Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322))
  * Fix default makefile target for windows
* Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379))
  * Disable TestContainerHook on Windows
* seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372))
  * seutil: Fix setting the "container_kvm_t" label
* Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350))
  * Remove Windows integration testing for 2004.
* OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308))
  * OCI: Mount (accessible) host devices in privileged rootless containers
  * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch
* cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320))
  * fixup: check for swap accounting
  * fixup: handle diff between cgroupsv1 and v2
  * cri: add support for configuring swap
* Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275))
  * Replace find with native Go code
  * Enable TestVolumeOwnership on Windows
* Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296))
  * Prepare release notes for v1.6.0-beta.4
* refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358))
  * feat: Errorf usage
* Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021))
  * Use task plugin for runc shim
  * Seperate shim manager and task service
  * Split runc shim into plugin components
  * Add shutdown package
* CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155))
  * cri, sandbox: pass sandbox resource details if available, applicable
* medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354))
  * medatada: make namespaces' deletion error less cryptic
* ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373))
  * add-list-stat: return container list if filter is nil
* integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369))
  * integration: deflake TestContainerdRestart
* feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225))
  * feat: support custom timeout for blot open
* Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333))
  * Update Go to 1.17.5
* cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332))
  * cri/server: use consistent alias for pkg/ioutil
* Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364))
  * Disable restart monitor test in Windows
* Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338))
  * Don't fail-fast on Windows integration tests
* Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355))
  * Run windows parallel integration test as short
  * Update restart monitor test to output daemon logs on failure
* go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263))
  * images/converter: remove deprecated types
  * go.mod: update image-spec to latest (v1.0.3-dev)
* Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353))
  * Skip WithAdditionalGIDs on Darwin
* Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303))
  * Use RFC3339 format so rg cleanup works
* update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330))
  * go.mod: github.com/opencontainers/runc v1.0.3
  * update runc binary to v1.0.3
* Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329))
  * Allow native snapshotter on Darwin
* Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328))
  * Do not use `go get` to install executables
* Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326))
  * Include runtime v2 in default builtins
* Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314))
  * Add Windows Server 2022 CI runs
* Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324))
  * Use a single RUN command
  * Set explicit ACL on test files
* integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311))
  * integration: align tags of test images
* Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325))
  * Set CONTAINERD_ROOT in Windows cri-integration
* export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312))
  * export oci.DeviceFromPath()
* Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321))
  * Update continuity dependency
  * Update volume test images
* Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201))
  * Add error logging on cleanup
  * Update TestRestartMonitor expected time check
* Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319))
  * Move volume images from gcr to ghcr
* Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301))
  * Revert shim plugin migration
* Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317))
  * Add permissions
  * Authenticate against ghcr.io
* oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306))
  * oci/deviceFromPath(): correctly check device types
* Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315))
  * Skip TestExportAndImportMultiLayer on Windows
* Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290))
  * Add image build workflow
* Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286))
  * Integration: Separate Windows Periodic Tests workflow trigger.
* Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274))
  * Build volume test images on Windows
* Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297))
  * Add VMware TKG & TCE to Containerd adopters
* Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293))
  * Vagrantfile: update to Fedora 35
* Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269))
  * Update README.md repo->org
* Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278))
  * Fix executable file not found when restoring shims
* ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271))
  * ctr/snapshots/diff: don't show the media-type in output
* ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289))
  * ctr: Add Linux Capabilities control flags
* integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270))
  * integration: add stats result in error message
* releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287))
  * docs: mark 1.4 as Extended
  * docs: fix RELEASES.md gRPC API anchor
* feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284))
  * feat: skip ci for fork
* content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280))
  * content/local: Close the file if Seek fails
* Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268))
  * Integration: Remove explicit version passing to `azure/CLI`.
* Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276))
  * Fix wrong make target on documentation
* fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272))
  * fix: server error return
* Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267))
  * Prepare release notes for v1.6.0-beta.3
  * Update API version in go.mod
  * Update release name to use consistent format
* feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254))
  * fix: make max recv/send msg size setting default
  * feat:support custom callopts on client side
* [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258))
  * [CRI] Fix panic when registry.mirrors use localhost
* Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241))
  * Add support for TMP override on toml
* CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170))
  * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options
* Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35)
  * schema1: reject ambiguous documents
  * images: validate document type before unmarshal
* [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111))
  * [cri] add sandbox and container latency metrics
* Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255))
  * Generalize Windows CI setup script for any user.
  * Standardize cmdlet capitalization in Windows CI scripts.
* feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253))
  * feat: use rwmutex instead
* Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206))
  * Fix package alias
  * Support custom runtime path when launching tasks
  * Add runtime path in CreateTaskRequest
* Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246))
  * Close file if permission modification fails
* release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250))
  * release: change tar name to match prior releases
* Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237))
  * Fix wrong error returned for image index lookup
* Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221))
  * Fix containerd fails to pull OCI image with non-`http(s)://` urls
* Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223))
  * Prepare release notes for v1.6.0-beta.2
* Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196))
  * Rename release dockerfile to omit distro name
  * release: improve dockerfile
  * Add arm64 to releases
* use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236))
  * use write lock when updating container stats
* go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230))
  * go.mod: Bump hcsshim to v0.9.1
* go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228))
  * go.mod: Bump ttrpc to 1.1.0
* go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213))
  * go.mod: github.com/moby/sys/mountinfo v0.5.0
  * go.mod: github.com/moby/sys/signal v0.6.0
  * go.mod: github.com/moby/sys/symlink v0.2.0
  * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
* cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222))
  * cleanup: add more description on comment
* Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211))
  * Update Go to 1.17.3
* CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214))
  * CI: bump up crun: 1.0 -> 1.3
* Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205))
  * Pin az CLI version
* Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918))
  * Address PR comments
  * Fix build after rebase
  * Migrate task directory
  * Expose shim process interface
  * Fix after rebase
  * Cleanup shim loading
  * Move shim restore to a separate file
  * Fix backward compatibility with old task shims
  * Add plugin dependency between shim and shim services
  * Rework task create and cleanup flow
  * Add task manager
  * Rename task manager to shim manager
* [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113))
  * Implement CRI container and pods stats
  * Vendor latest k8s.io/cri-api and netlink
* test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200))
  * test: Add grace period for restart monitor test
* integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179))
  * integration: Enables TestRuntimeHandler for Windows
* Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171))
  * Add mkdir on Dockerfile
* sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189))
  * sys/reaper: avoid leaky goroutine when exec timeout
* adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184))
  * adds additional debug out to timebox cni setup
* converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176))
  * converter: Allow hooks during image conversion
* compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177))
  * compression: support zstd with skippable frame
* integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182))
  * integration: Enables TestVolumeCopyUp for Windows
*  integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121))
  * integration: Enable some tests for Windows (part 2)
* integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085))
  * integration: Enable some tests for Windows
* Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125))
  * feat(doc): update to version 2 syntax
* fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166))
  * fix shim reaper wait command execute blocked
* content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145))
  * content: close stream after commit request
* Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165))
  * Adding scope tests for ParseAuthHeader
  * Adding tests for GenerateTokenOptions
  * Generate token options with each scope as a separate string.
* vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167))
  * vendor: Updates go-cni
* commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159))
  * commands: Enables task metrics for Windows
* vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149))
  * vendor: update moby/sys for darwin support
* Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144))
  * Prepare release notes for v1.6.0-beta.1
  * Update mailmap
  * Update api vendor
* bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136))
  * bump CNI to spec v1.0.0
* Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992))
  * Inject otel traces to grpc client.
* client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142))
  * client: expose (*image).platform
* Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128))
  * feat(doc): add Core Scheduling documentation
* Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130))
  * Ensure namespace is proxied to grpc/ttrpc plugins
* fix #6054  MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109))
  * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
* Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124))
  * Output a warning for label image labels instead of erroring
* Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132))
  * Fix spelling mistake in Windows snapshotter
* Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126))
  * Windows: Cleanup rm- prefixed layers
* cleanup deprecated package  `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118))
  * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
* close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115))
  * close Writer after use which may leak mem
* Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778))
  * Adds Windows resource limits support
* Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098))
  * Prepare release notes for v1.6.0-beta.0
* Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105))
  * Add error message to in TestContainerdRestart integration test
* Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110))
  * Fix typo in the NewContainer function documentation
* Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104))
  * Update cgroups to v1.0.2
* btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100))
  * test: check file content after mount
* Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107))
  * Update test timeout based on recent cancellations
* Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106))
  * Remove extra test_teardown
  * Check the pid in cri test teardown
* add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011))
  * fix integration client vendor
  * add runc shim support for sched core
* integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579))
  * integration: Enables Windows containerd restart test
* vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099))
  * vendor: Bump hcsshim to 0.9.0
* [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695))
  * Add CNI conf based on runtime class
* Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102))
  * Update Go to 1.17.2
* integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933))
  * integration: Adds test for multilayer image import
* runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031))
  * runtime: should fail fast if dial error on shim
* Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034))
  * Windows: Fixes Windows containers with image volumes
* run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094))
  * run `gofmt` with Go 1.17
* pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088))
  * pkg/cap: remove an outdated comment
* Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066))
  * Update go otel 1.0.1
* Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086))
  * Update ADOPTERS.md with additional uses
* modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082))
  * modify the way for checking cos
* Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915))
  * Fuzzing: Add 4 fuzzers + small modifications
* Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081))
  * Pin mingw to version 10.2.0
  * Update to golang 1.17.1
  * Install nssm
* Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq)
  * btrfs: reduce permissions on plugin directories
  * v1 runtime: reduce permissions for bundle dir
  * v2 runtime: reduce permissions for bundle dir
* task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079))
  * task service: return known error type
* refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973))
  * refactor: move from io/ioutil to io and os package
* fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076))
  * fix: update vendor
  * cleanup: import from k8s.io/utils/clock/testing instead
  * cleanup: import from k8s.io/utils/clock instead
* feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069))
  * feat: enable cri remote client to call with grpc calloptions
* cleanup k8s ansible yaml (carry for #5713)  ([#6074](https://github.com/containerd/containerd/pull/6074))
  * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>)
* feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070))
  * fix: wrong flag type
  * feat: support import image for specific platform
* Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065))
  * Update mirror images to take target image name
* fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059))
  * fix: make exec-id flag required in exec command
* images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052))
  * images: enable converter to uncompress zstd
* replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922))
  * replace deprecated function
* integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853))
  * integration: Adds Windows HostProcess tests
* Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047))
  * Fix main branch build is broken
* Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003))
  * Add open telemetry logging hook for logrus
* Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023))
  * Change oci.WithUser behavior for LCOW
* switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946))
  * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
* import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926))
  * import: Raise error if the imported image is filtered out
* Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043))
  * Fix panic in metadata content writer on copy error
* Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001))
  * Move tracing to plugin
* ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916))
  * ctr: Fixes Windows image import
* update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017))
  * go.mod: update opentelemetry modules to v1.0.0
* fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979))
  * fix error string format
* Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036))
  * Add github action to mirror image
* add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027))
  * add current process state to the error message
*  FreeBSD: fix tar headers & the nil check on getxattr  ([#5991](https://github.com/containerd/containerd/pull/5991))
  * FreeBSD: fix tar headers & the nil check on getxattr
* gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035))
  * gha: collect Vagrant VMs' IP addresses
* bump continuity and console version  that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033))
  * bump continuity and console version that remove pkg/errors
* import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997))
  * import: Add option to skip creating digest image
* ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998))
  * ctr namespaces: improve usage string
* bump console version to v1.0.3 that remove pkg/errors  ([#6028](https://github.com/containerd/containerd/pull/6028))
  * bump console version to v1.0.3 that remove pkg/errors
* Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032))
  * Use github images for integration tests
* Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995))
  * Fix typo
* Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012))
  * Enable image config labels in ctr and CRI container creation
* Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970))
  * Make sure exit signals trigger an exit during init
* task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974))
  * task delete: Closes task IO before waiting
* CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985))
  * CI: bump up crun to 1.0
* seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982))
  * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990))
  * Update to Go 1.17.1
* CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987))
  * CI: Switch to available latest images
* add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610))
  * add xfs support to devicemapper snapshotter
* Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956))
  * Fixes task kill --force on Windows
* Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817))
  * Add support for shim plugins
* vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976))
  * vendor: update continuity for darwin support
* replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906))
  * replace uses of os/exec with golang.org/x/sys/execabs
* complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972))
  * Additional integration tests for pulling image with labels
* Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966))
  * Fix content copy to not ignore unexpected EOF
* add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964))
  * add ip_pref CNI options for primary pod ip
* cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939))
  * cri: add devices for privileged container
* sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954))
  * sandbox: Allows the sandbox to be deleted in NotReady state
* pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969))
  * pin protobuild version to tag
* Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965))
  * use a const metric for build_info
  * Add metric exposing build version&revision
* Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627))
  * add cri test case
  * feature: add field LinuxContainerResources.Unified on cri
* integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861))
  * integration: investigate TestRestartMonitor's failure
* Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917))
  * Address issue forms feedback
  * Use issue forms for bug reporting
* cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945))
  * cri: patch update image labels
* darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936))
  * darwin: runtime support
  * darwin: use the default values for socketRoot variable
* Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858))
  * Update RELEASES.md
* archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949))
  * archive: Add WriteDiff error logs
* replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958))
  * replace deprecated Dail with DailContext
* Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951))
  * Add WS2022 support in Windows Periodic tests
* Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943))
  * content fuzzer: Clean up tempdir
* using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944))
  * using Hosts replace deprecated field
* fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947))
  * fix document non-synchronous in crictl.md
* go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929))
  * go.mod: Update hcsshim to v0.8.21
* Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937))
  * Makefile.linux: build on riscv with PIE
* Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932))
  * Fix cwd flag for `ctr tasks exec`
* Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927))
  * Update Pause image in tests & config
* cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122))
  * cri: Devices ownership from SecurityContext
* Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921))
  * Fix pull fails on unexpected EOF
* Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845))
  * Adding testing of two devices
  * Fix dir support for devices V3 (#4847)
* windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914))
  * windows: The DefaultSpec platform should match the Default matcher
* Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865))
  * Add RunAsUserName functionality for the Windows Pod Sandbox Container
* bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899))
  * go.mod: update runc to v1.0.2
  * update runc binary to v1.0.2
* Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903))
  * Run `go fmt` with Go 1.17
* go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905))
  * go.mod: github.com/pelletier/go-toml v1.9.3
* cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902))
  * cri: filter selinux xattr for image volumes
* Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131))
  * Added windows hostProcess cni skip
* script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897))
  * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
* Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889))
  * Bump integration timeout to 35 min
  * Update to Go 1.17
* integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896))
  * integration: fix TestContainerPids
* [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891))
  * [ctr] add HOSTNAME env for host network
* Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886))
  * Fuzzing: Add fuzzer
* Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884))
  * Add env for SystemdCgroup driver
* Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878))
  * Allow expanded DNS configuration
* Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863))
  * Fuzzing: Add 4 fuzzers
* Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813))
  * Cleanup v2 shim
* Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840))
  * Use http.Get to download binaries instead of exec.Command
  * Fuzzing: Add experimental version of container fuzzer
* add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846))
  * add cpu-shares to ctr
* docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847))
  * docs: rename main to master
* content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849))
  * content: return the error with its timestamp
* Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857))
  * Fix bad `make protos` failure
* replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851))
  * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
* docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856))
  * docs: remove FOSSA's badge
* BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850))
  * BUILDING.md: remove some bits about building runc
  * BUILDING.md: markdown fixes
* go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836))
  * go.mod: update kubernetes to v1.22.0
* [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852))
  * Add trap to cri-integration test script
* docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848))
  * docs: list all snapshotter-related build flags
* Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835))
  * Move plugin context events into separate plugin
* Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839))
  * Fix Linux CI Linter using go 1.15.14
* Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842))
  * Update Go to 1.16.7
* Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838))
  * Cleanup CI
* Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834))
  * Remove redundant build tags
* Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830))
  * Change default directories on Darwin
* [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731))
  * [otel-tracing] vendor and go modules changes
  * [otel-tracing] Initial opentelemetry support
  * remove go 1.13 from containerd
* Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829))
  * Fuzzing: Fix for OSS-fuzz issue 36825
* Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825))
  * Fuzzing: Add two more fuzzers
* scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760))
  * scripts: declare ROOT closer to where it's used, and some DRY changes
  * scripts: add missing quotes, and minor linting issues
  * test/build-utils.sh: remove support for Debian Jessie
* platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821))
  * platforms: Format(): use path.Join() instead of joinNotEmpty()
* Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823))
  * Fuzzing: Remove panics of container_fuzzer
* Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785))
  * Change protoc link
  * Split fuzzer to two fuzzers
  * Fuzzing: Add container fuzzer
* runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746))
  * runtime: fix the issue of create new socket with abstract address
* mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809))
  * mergo: Upgrade to 0.3.12 to fix panic
* ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802))
  * ci: install criu from PPA
* Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144))
  * Split release steps into multiple tasks
  * Update release workflow to upload binary without CNI
* Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725))
  * Enable critest on Windows
* Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792))
  * Script to check if entries in go.mod files are in sync
* Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043))
  * Add shared content label to namespaces
* platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784))
  * platforms: add "ios" as known OS, "loong64" as known ARCH
* Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804))
  * Updates the location of protobuf downloads in docs
* Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803))
  * Update protobuf install to use correct repository
* overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624))
  * overlay: add an optional label of upperdir location of each snapshot
* Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693))
  * Support SIGRTMIN+n signals
* respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800))
  * respect context timeout in shim binary call
* Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716))
  * Introduce a new go module - containerd/api for use in standalone clients
* grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606))
  * grpc config add options tcp_tls_ca
* integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162))
  * integration: Windows volume-copy-up images
* add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795))
  * add CRI support matrix to RELEASES.md
* adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794))
  * adding a little more clarity
* update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793))
  * update gotestsum to v1.7.0
* Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756))
  * Discard blocks when removing a thin device
* Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590))
  * Makefile: pass build tags to manpage build process
  * Makefile: fix tags parameter computation
* Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744))
  * Add runtime label to metrics
* interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745))
  * interface about shim build check
* integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775))
  * integration: log all processes to investigate the test failure
* Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779))
  * Fuzzing: Add archive fuzzer
* Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687))
  * Add docker fetch fuzzer
* Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735))
  * Support custom compressor for walking differ
* remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770))
  * remotes/docker/pusher.go: Fix missing Close()
* remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769))
  * remotes/docker/fetcher.go: Fix missing Close()
* Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771))
  * Update cpuguy83/go-md2man binary to v2.0.1
* Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750))
  * Dockerfile.test: build containerd in separate stage
  * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
  * Dockerfile.test: clean up apt indexes after installing
  * Dockerfile.test: build critools in a separate stage
  * Dockerfile.test: build cni in a separate stage
  * Dockerfile.test: standard directory to collect build aftifacts
  * Dockerfile.test: split dev stage, and optimize order
  * Dockerfile.test: skip curl, gcc, git and make install
  * install-critools: make sure DESTDIR exists
* update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754))
  * update gotestsum to current master
* Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w)
  * Add test for archive breakout test for lchmod
* Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755))
  * Use systemd cgroup driver for cgroupv2 tests
* update runc  to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751))
  * go.mod: runc v1.0.1
  * update runc binary to v1.0.1
* runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737))
  * runtime: runc v2: remove redundant validation
* Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727))
  * Move loop check to before sleep
  * Add timestamp to flaky restart monitor test
* Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722))
  * integration/client: go mod tidy
  * Update Go to 1.16.6
* client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447))
  * client: surface a connection error more clearly
* Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712))
  * Fix missing Body.Close() calls on push to docker remote
* remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710))
  * remove pkg/cri/platforms package
* Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709))
  * Allow WithServices to use custom implementations
* [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673))
  * [Vendor] Update hcsshim to 0.8.18
* test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578))
  * test integration: Adds a test that restarts a failed container
* [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619))
  * use fu wei's suggeted interface pick for marshaling
  * add alpha version
  * move up to CRI v1 and support v1alpha in parallel
* gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682))
  * gha: make release workflow work in forks
* Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666))
  * Add unit test for plugin
* Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700))
  * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
* Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676))
  * Add support for registry host path override
  * Update documenation for OCI distribution 1.0
* archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702))
  * Cleanup lchmod logic in archive
* Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571))
  * Install specific golang version in Windows CI.
* Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660))
  * feat: Add snapshotter label to the new snapshot for container.
* snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655))
  * snapshot/devmapper: log exported methods correctly
* Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662))
  * Makefile: fix DESTDIR and PREFIX concatenation
* Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287))
  * tests: Use EnsureImageExists for image pulling
  * tests: Refactors PodSandbox creation
* move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641))
  * un-export mount.FMountat
  * move sys.FMountat() into mount package
* sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640))
  * sandbox: send pod UID to CNI plugins as K8S_POD_UID
* sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639))
  * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
* content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633))
  * content/local: inline sys.StatATimeAsTime()
* allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636))
  * allow multi gpu to be specified via ctr
  * go.mod: runc v1.0.0
  * update runc binary to v1.0.0 GA
* fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629))
  * fixing some doc links
* Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623))
  * Sync integration/go.mod with root go.mod
* archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615))
  * archive: Expose ChangeWriter to allow customized diff computing
* CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625))
  * CI: Switch to available latest images
  * fix deprecation config for default runtime
* Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614))
  * Re-enable criu in main integration runs
* runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617))
  * runtime,v2: Enable debug when containerd is on debug+ log level
  * github.com/golang/protobuf/proto is deprecated
  * Update github.com/golang/protobuf from v1.3.5 to v1.4.3
  * Update google.golang.org/grpc from v1.27.1 to v1.38.0
  * Increase golangci-lint timeout
* ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611))
  * command line flags of setting container rootfs propagation
  * add cgroupv2 setup for cos with a flag
* Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612))
  * Update gotestsum to add timestamps to junit output
* Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604))
  * Allow to pass --no-cgroup option to nvidia-container-cli
* Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577))
  * Makefile: FHS conformant manpage installation pathes
* Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594))
  * Add proper Go version before project checks
* Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580))
  * Enable cri-integration in Windows Periodic Tests
* adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573))
  * adds explanation for seccomp unset/unconfined default vs runtime default
* Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569))
  * Fix cleanup context of teardownPodNetwork
* update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572))
  * update integration/client go.sum
* Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566))
  * Revert diff/walking error change
* Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562))
  * Update opencontainers/selinux to v1.8.2
* fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565))
  * fix invalid validation error checking
* diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551))
  * diff/walking: fix defer cleanup
* Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559))
  * Add creation timestamp to RG
* Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328))
  * Fix error case in Windows layer cleanup
* Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422))
  * Small typo fix "reimporst"
  * Use DeactivateLayer to recover layers that we cannot rename
* tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284))
  * tests: Symlink volume tests
* Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535))
  * Makefile: fix DESTDIR environment variable behaviour
* Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560))
  * Change Wrapf of non-error to an actual error
  * Install apparmor parser for arm64 environment
* scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536))
  * scrub the stale TODO
* docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554))
  * docs: explicitly mention containerd's Prometheus path
* integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553))
  * integration: Cleanup containerd on test teardown
* docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548))
  * docs/cri: update ocicrypt link
  * docs/cri: fix broken links
* Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544))
  * Update Windows periodic tests
* Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165))
  * Schedule Windows job daily after midnight.
  * Update windows-periodic.yml
  * Add CI periodic Windows Jobs.
* Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273))
  * Rename atomicWrite to writeToCompletion
* Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539))
  * Do not run btrfs tests if btrfs kernel module is not loaded
* Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533))
  * Fix incorrect UA used for registry authentication
* ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531))
  * ctr: parse mount options with embedded = character
* Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472))
  * Add ruleset=4 option
  * Remove mountpoints not commonly mounted on FreeBSD
  * Add copyright header & make sure compilation succeeds on all platforms
  * Fix mounts for FreeBSD
* ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527))
  * ctr: exec handle pty resize after Start
  * ctr: exec setup IO with console
* Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534))
  * Makefile: use $@ for target file names
* Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528))
  * Fix small typo
* Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519))
  * update the link
  * Don't check for apparmor_parser to be present
* Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520))
  * Remove useless lines
* Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509))
  * fixed typos
* Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275))
  * Try next mirror in case of non-404 errors, too
* bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514))
  * bump runc version to v1.0.0-rc95
* update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511))
  * update runc binary to v1.0.0-rc95
* Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508))
  * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0
* Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507))
  * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
* Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493))
  * Makefile: allow overriding install command via environment
* tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163))
  * tests: Adds support for Windows cri-integration tests
* Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504))
  * Update docker resolver to authorize redirects
* bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505))
  * bump hcsshim version to v0.8.17
* Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498))
  * just release ctd-decoder not ctr-enc
  * Merge remote-tracking branch 'upstream/master'
  * Pin integration test image for alpine
* cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313))
  * tests: Prepull images used in tests
* plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440))
  * plugin: optimize the check for the last registration
* metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465))
  * metadata: modify NewLeaseManager to return leases.Manager
* Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100))
  * Skip TLS verification for localhost
  * Merge remote-tracking branch 'upstream/master'
* Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492))
  * Makefile: make sure manpages are built before install-man
* adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309))
  * adds credentials description
  * adds description for hosts.toml
* Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459))
  * Prepare default branch rename
  * Merge remote-tracking branch 'upstream/master'
* Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473))
  * Update vendored runc to v1.0.0.0-rc94
  * Update the runc binary used with containerd to runc v1.0.0-rc94
* Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468))
  * Fix content.ReaderAt close
* Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466))
  * Update releases doc with updated support timeline
* tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452))
  * tests: add test for adaptor
* Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450))
  * Makefile: allow overriding go command by environment
* update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462))
  * update to new cri-tools make install
* Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461))
  * Update Go to 1.16.4
  * Merge remote-tracking branch 'upstream/release/1.5'
* [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457))
  * go.mod: cut circular dependency on github.com/containerd/containerd
  * integration/client: go mod tidy
* oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063))
  * oci: fix WithDevShmSize
* [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454))
  * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411))
  * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448))
  * doc: add missing namespaces package
* update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445))
  * update seccomp version
* Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436))
  * Update golang.org/x/sys to add linux/ppc support
* go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441))
  * go.mod: cut circular dependency on github.com/containerd/containerd
  * integration/client: go mod tidy
* Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446))
  * Fix different registry hosts referencing the same auth config.
</p>
</details>

### Changes from containerd/cgroups
<details><summary>33 commits</summary>
<p>

* v2: Fix inotify fd leak when cgroup is deleted ([#212](https://github.com/containerd/cgroups/pull/212))
  * v2: add test case for Manager.EventChan() behavior
  * v2: flip error handling for readKVStat("memory.events") to reduce indentation
  * v2: manager: factor out memory.events parsing
  * v2: Fix inotify leak when cgroup is deleted
* fix Implicit memory aliasing in for loop ([#214](https://github.com/containerd/cgroups/pull/214))
  * fix Implicit memory aliasing in for loop
* Fix potential dirfd leak. ([#210](https://github.com/containerd/cgroups/pull/210))
  * Fix potential dirfd leak.
* cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203))
  * cgroup: Optionally add process and task to a subsystems subset
* replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208))
  * replace pkg/errors from vendor
* cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207))
  * cgroup.go: avoid panic on nil interface
* Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204))
  * cgroupv2: reset lastErr to nil when subtree control is successfully written
  * cgroupv2: enable controllers before setting resources in NewChild()
* v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201))
  * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
  * v2: remove errors that are never returned
* v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202))
  * v1: reduce duplicated code
* cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200))
  * cgroup v1: implement AddProc()
* Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199))
  * Rename branch from master to main
* utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197))
  * utils: export ParseCgroupFile()
* go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194))
  * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
* Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195))
  * Use /proc/partitions to get device names
</p>
</details>

### Changes from containerd/console
<details><summary>6 commits</summary>
<p>

* Fix CI ([#55](https://github.com/containerd/console/pull/55))
  * Fix CI
  * Stop using pkg/errors
* Add support for z/OS ([#46](https://github.com/containerd/console/pull/46))
  * Console test on z/OS
  * Add support for z/OS
</p>
</details>

### Changes from containerd/continuity
<details><summary>28 commits</summary>
<p>

* fs: use syscall.Timespec.Unix ([#193](https://github.com/containerd/continuity/pull/193))
  * fs: use syscall.Timespec.Unix
* Update CI Go version to 1.17 ([#192](https://github.com/containerd/continuity/pull/192))
  * Update CI Go version to 1.17
* Build containerd/continuity on multiple Unix OSes ([#190](https://github.com/containerd/continuity/pull/190))
  * Build containerd/continuity on multiple Unix OSes
* Do not log errors before returning them ([#191](https://github.com/containerd/continuity/pull/191))
  * Do not log errors before returning them
* Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188))
  * Copy Windows file metadata
* fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187))
  * fix fmt.Errorf("%w", err) on err == nil
* Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185))
  * run gofmt with Go 1.17
  * remove direct dependency on github.com/pkg/errors
* Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186))
  * update AUTHORS
  * darwin: use utimensat syscall instead of utimes
  * fix darwin usage of du command
* go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161))
  * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
* fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184))
  * reformat nolint comments
  * fs/stat: add FreeBSD
* Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182))
  * Rename branch from master to main
* testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180))
  * testutil/loopback: print more debug info
</p>
</details>

### Changes from containerd/go-cni
<details><summary>18 commits</summary>
<p>

* run setup on networks in parallel ([#76](https://github.com/containerd/go-cni/pull/76))
  * switch to direct index
  * run setup on networks in parallel
* remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74))
  * remove: Continue on "not found" errors
* go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72))
  * go.mod: github.com/containernetworking/cni v1.0.1
* remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71))
  * remove direct dependency on github.com/pkg/errors
* update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70))
  * test: add TestLibCNIType100
  * update CNI to v1.0.0
* Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69))
  * Rename branch from master to main
* result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68))
  * result: change Raw from a struct field to a method
* result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67))
  * result: expose raw result
</p>
</details>

### Changes from containerd/imgcrypt
<details><summary>32 commits</summary>
<p>

* CHANGES: Updated CHANGES document for 1.1.3 release ([#64](https://github.com/containerd/imgcrypt/pull/64))
  * CHANGES: Updated CHANGES document for 1.1.3 release
* docs: update project branch to main ([#63](https://github.com/containerd/imgcrypt/pull/63))
  * docs: update project branch to main
* Update linter to match containerd repo ([#61](https://github.com/containerd/imgcrypt/pull/61))
  * Update linter to match containerd repo
  * update CI golang version
* Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 ([#59](https://github.com/containerd/imgcrypt/pull/59))
  * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8
* maint: Update to ocicrypt v1.1.2 ([#57](https://github.com/containerd/imgcrypt/pull/57))
  * maint: Update to ocicrypt v1.1.2
* Decouple CreateCryptoConfig() from github.com/urfave/cli ([#56](https://github.com/containerd/imgcrypt/pull/56))
  * Decouple CreateCryptoConfig() from github.com/urfave/cli
* Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 ([#55](https://github.com/containerd/imgcrypt/pull/55))
  * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7
  * replace pkg/errors and bump related library
* README: Fix CRI decryption document URL ([#53](https://github.com/containerd/imgcrypt/pull/53))
  * README: Fix CRI decryption document URL
* Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#52](https://github.com/containerd/imgcrypt/pull/52))
  * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
* Bump containerd to 1.5.2 ([#51](https://github.com/containerd/imgcrypt/pull/51))
  * Bump containerd to 1.5.2
* images: Implement ConvertFunc for image en- and decryption ([#49](https://github.com/containerd/imgcrypt/pull/49))
  * images: Implement ConvertFunc for image en- and decryption
* Add containerd-release to makefile ([#48](https://github.com/containerd/imgcrypt/pull/48))
  * Remove ctr-enc from installation
* vendor sync up with containerd 1.5 ga, and runc94 ([#47](https://github.com/containerd/imgcrypt/pull/47))
  * sync up with containerd 1.5 ga, and runc94
* Sync ctr-enc with containerd's ctr v1.5.0-rc.3 ([#46](https://github.com/containerd/imgcrypt/pull/46))
  * CICD: Run 'apt update' before pulling packages
  * ctr-enc: Set the version for ctr-enc when linking
  * Sync ctr-enc with containerd's ctr v1.5.0-rc.3
</p>
</details>

### Changes from containerd/ttrpc
<details><summary>34 commits</summary>
<p>

* Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96))
  * Add protoc-gen-go-ttrpc
* client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94))
  * client: Handle sending/receiving in separate goroutines
* Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95))
  * Run Protobuild in GitHub Actions
  * Re-generate example.pb.go
* replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93))
  * replace pkg/errors from vendor
* Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86))
  * Rename branch from master to main
* Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85))
  * Make the example command buildable on macOS
  * Run GitHub Actions on macOS
  * Make "go test" work on macOS
* Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83))
  * Return Unimplemented when services or methods are not implemented
* Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84))
  * Remove "Very new" and checked TODO items
* removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82))
  * removing glide from ignore
* go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79))
  * go.mod: github.com/prometheus/procfs v0.6.0
  * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63
  * go.mod: google.golang.org/grpc v1.27.1
  * go.mod: github.com/gogo/protobuf v1.3.2
* remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78))
  * CI: add codecov badge to readme
  * CI: remove travis
* Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77))
  * Use GitHub Actions for CI
* go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76))
  * go.mod: sirupsen/logrus v1.7.0
  * go mod tidy
</p>
</details>

### Dependency Changes

* **cloud.google.com/go**                                                          v0.81.0 **_new_**
* **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 **_new_**
* **github.com/Microsoft/go-winio**                                                v0.4.17 -> v0.5.1
* **github.com/Microsoft/hcsshim**                                                 v0.8.16 -> v0.9.2
* **github.com/blang/semver**                                                      v3.5.1 **_new_**
* **github.com/cenkalti/backoff/v4**                                               v4.1.2 **_new_**
* **github.com/cespare/xxhash/v2**                                                 v2.1.1 -> v2.1.2
* **github.com/cilium/ebpf**                                                       v0.4.0 -> v0.7.0
* **github.com/containerd/cgroups**                                                v1.0.1 -> v1.0.3
* **github.com/containerd/console**                                                v1.0.2 -> v1.0.3
* **github.com/containerd/continuity**                                             v0.1.0 -> v0.2.2
* **github.com/containerd/go-cni**                                                 v1.0.2 -> v1.1.1
* **github.com/containerd/imgcrypt**                                               v1.1.1 -> v1.1.3
* **github.com/containerd/ttrpc**                                                  v1.0.2 -> v1.1.0
* **github.com/containernetworking/cni**                                           v0.8.1 -> v1.0.1
* **github.com/containernetworking/plugins**                                       v0.9.1 -> v1.0.1
* **github.com/containers/ocicrypt**                                               v1.1.1 -> v1.1.2
* **github.com/coreos/go-systemd/v22**                                             v22.1.0 -> v22.3.2
* **github.com/go-logr/logr**                                                      v0.2.0 -> v1.2.2
* **github.com/go-logr/stdr**                                                      v1.2.2 **_new_**
* **github.com/godbus/dbus/v5**                                                    v5.0.3 -> v5.0.6
* **github.com/golang/groupcache**                                                 8c9f03a8e57e -> 41bb18bfe9da
* **github.com/golang/protobuf**                                                   v1.3.5 -> v1.5.2
* **github.com/google/go-cmp**                                                     v0.5.4 -> v0.5.6
* **github.com/google/gofuzz**                                                     v1.1.0 -> v1.2.0
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 **_new_**
* **github.com/grpc-ecosystem/grpc-gateway**                                       v1.16.0 **_new_**
* **github.com/hashicorp/errwrap**                                                 v1.0.0 -> v1.1.0
* **github.com/hashicorp/go-multierror**                                           v1.0.0 -> v1.1.1
* **github.com/imdario/mergo**                                                     v0.3.11 -> v0.3.12
* **github.com/intel/goresctrl**                                                   v0.2.0 **_new_**
* **github.com/json-iterator/go**                                                  v1.1.10 -> v1.1.12
* **github.com/moby/spdystream**                                                   v0.2.0 **_new_**
* **github.com/moby/sys/mountinfo**                                                v0.4.1 -> v0.5.0
* **github.com/moby/sys/signal**                                                   v0.6.0 **_new_**
* **github.com/moby/sys/symlink**                                                  v0.1.0 -> v0.2.0
* **github.com/modern-go/reflect2**                                                v1.0.1 -> v1.0.2
* **github.com/opencontainers/image-spec**                                         v1.0.1 -> 693428a734f5
* **github.com/opencontainers/runc**                                               v1.0.0-rc93 -> v1.1.0
* **github.com/opencontainers/runtime-spec**                                       e6143ca7d51d -> 1c3f411f0417
* **github.com/opencontainers/selinux**                                            v1.8.0 -> v1.10.0
* **github.com/pelletier/go-toml**                                                 v1.8.1 -> v1.9.3
* **github.com/prometheus/client_golang**                                          v1.7.1 -> v1.11.0
* **github.com/prometheus/common**                                                 v0.10.0 -> v0.30.0
* **github.com/prometheus/procfs**                                                 v0.6.0 -> v0.7.3
* **github.com/satori/go.uuid**                                                    v1.2.0 **_new_**
* **github.com/sirupsen/logrus**                                                   v1.7.0 -> v1.8.1
* **github.com/spf13/pflag**                                                       v1.0.5 **_new_**
* **github.com/stretchr/testify**                                                  v1.6.1 -> v1.7.0
* **github.com/vishvananda/netlink**                                               f5de75959ad5 **_new_**
* **github.com/vishvananda/netns**                                                 2eb08e3e575f **_new_**
* **go.etcd.io/bbolt**                                                             v1.3.5 -> v1.3.6
* **go.opencensus.io**                                                             v0.22.3 -> v0.23.0
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.3.0 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 **_new_**
* **go.opentelemetry.io/otel/trace**                                               v1.3.0 **_new_**
* **go.opentelemetry.io/proto/otlp**                                               v0.11.0 **_new_**
* **golang.org/x/crypto**                                                          0c34fe9e7dc2 -> 32db794688a5
* **golang.org/x/net**                                                             e18ecbb05110 -> fe4d6282115f
* **golang.org/x/oauth2**                                                          bf48bf16ab8d -> 2bc19b11175f
* **golang.org/x/sync**                                                            09787c993a3a -> 036812b2e83c
* **golang.org/x/sys**                                                             47abb6519492 -> 1d35b9e2eb4e
* **golang.org/x/term**                                                            7de9c90e9dd1 -> 6886f2dfbf5b
* **golang.org/x/text**                                                            v0.3.4 -> v0.3.7
* **golang.org/x/time**                                                            3af7569d3a1e -> 1f47c861a9ac
* **google.golang.org/appengine**                                                  v1.6.5 -> v1.6.7
* **google.golang.org/grpc**                                                       v1.27.1 -> v1.43.0
* **google.golang.org/protobuf**                                                   v1.27.1 **_new_**
* **gopkg.in/yaml.v3**                                                             9f266ea9e77c -> 496545a6307b
* **k8s.io/api**                                                                   v0.20.6 -> v0.22.5
* **k8s.io/apimachinery**                                                          v0.20.6 -> v0.22.5
* **k8s.io/apiserver**                                                             v0.20.6 -> v0.22.5
* **k8s.io/client-go**                                                             v0.20.6 -> v0.22.5
* **k8s.io/component-base**                                                        v0.20.6 -> v0.22.5
* **k8s.io/cri-api**                                                               v0.20.6 -> v0.23.1
* **k8s.io/klog/v2**                                                               v2.4.0 -> v2.30.0
* **k8s.io/utils**                                                                 67b214c5f920 -> cb0fa318a74b
* **sigs.k8s.io/structured-merge-diff/v4**                                         v4.0.3 -> v4.1.2

Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)

containerd 1.6.0-rc.1

Welcome to the v1.6.0-rc.1 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

### Highlights

#### Runtime

* **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744))
* **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813))
* **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817))
* **Handle sigint and sigterm in shimv2** ([#5828](https://github.com/containerd/containerd/pull/5828))
* **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918))
* **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011))
* **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031))
* **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206))
* **Update runc to v1.1.0** ([#6375](https://github.com/containerd/containerd/pull/6375))

#### Windows

* **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131))
* **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778))

#### CRI

* **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695))
* **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439))
* **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619))
* **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627))
* **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964))
* **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113))
* **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111))
* **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130))
* **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170))
* **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320))

#### Other

* **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606))
* **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610))
* **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965))
* **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122))
* **Update introspection service to show GRPC plugins** ([#6432](https://github.com/containerd/containerd/pull/6432))

#### Client

* **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709))
* **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Phil Estes
* Akihiro Suda
* Wei Fu
* Maksym Pavlenko
* Sebastiaan van Stijn
* Michael Crosby
* Kazuyoshi Kato
* Mike Brown
* Claudiu Belu
* Daniel Canter
* haoyun
* Brian Goff
* Gabriel Adrian Samfira
* Stefan Berger
* zounengren
* AdamKorcz
* Adelina Tuvenie
* Kohei Tokunaga
* Davanum Srinivas
* Nashwan Azhari
* Samuel Karp
* Shiming Zhang
* Enrico Weigelt, metux IT consult
* Markus Lehtonen
* Alakesh Haloi
* Hajime Tazaki
* Iceber Gu
* Kevin Parsons
* Aditi Sharma
* David Porter
* Gijs Peskens
* Jeremi Piotrowski
* ningmingxiao
* Brandon Lum
* Cody Roseborough
* Danielle Lancashire
* Jacob MacElroy
* Tõnis Tiigi
* dependabot[bot]
* wanglei
* Alexandre Peixoto Ferreira
* Fabiano Fidêncio
* Furkan Türkal
* Jiaming Xu
* Kir Kolyshkin
* Miao Wang
* Neil Johnson
* Paul "TBBle" Hampson
* Priyanka Saggu
* Romain Aviolat
* Samuel Ortiz
* Sunghoon Kang
* Takumasa Sakao
* Tobias Klauser
* Zhiyu Li
* ye.sijun
* Alexander Minbaev
* Alexey Ivanov
* Artem Khramov
* Aurelien Lun-Sin
* Ben Hutchings
* Cory Bennett
* Da McGrady
* Dan Williams
* Eng Zer Jun
* Eric Ernst
* Ethan Chen
* Fupan Li
* Gaurav Gahlot
* Gunju Kim
* Jacob Blain Christen
* James Sturtevant
* Jan Klippel
* Jayme Howard
* Jiajun Jiang
* Jintao Zhang
* Justin Terry
* Kaijie Chen
* Kante
* Kern Walster
* Kitt Hsu
* Lantao Liu
* Ma Xinjian
* Manabu Sugimoto
* Manuel Alejandro de Brito Fontes
* Mark Rossetti
* Markus Lippert
* Mikko Ylinen
* Ng Yang
* Nicolas Chariglione
* Ning Li
* Olli Janatuinen
* Peri Thompson
* Quan Tian
* Radostin Stoyanov
* Rui Lopes
* Sambhav Kothari
* Sebastian Hasler
* Sergey Kanzhelev
* Sören Tempel
* Yang Yang
* Yifan Yuan
* Zilong Wang
* Zufar Dhiyaulhaq
* botieking98
* chenxiaoyu
* jayonlau
* jerryzhuang
* linrunlong
* scuzhanglei
* wangzhan
* Étienne Guesnet

### Changes
<details><summary>1022 commits</summary>
<p>

* Prepare 1.6.0-rc.2 ([#6502](https://github.com/containerd/containerd/pull/6502))
  * Prepare release notes for v1.6.0-rc.2
  * Update releases document
* platforms.Normalize(): do not reset OSVersion and OSFeatures ([#6497](https://github.com/containerd/containerd/pull/6497))
  * platforms.Normalize(): do not reset OSVersion and OSFeatures
* tracing: use OTLP/HTTP in addition to OTLP/gRPC ([#6457](https://github.com/containerd/containerd/pull/6457))
  * tracing: return (ctx, span) from StartSpan
  * tracing: support OTLP/HTTP in addition to gRPC
* Update cgroups to v1.0.3 ([#6498](https://github.com/containerd/containerd/pull/6498))
  * Update cgroups to v1.0.3
* seccomp: kernel 5.11 -> 5.16 ([#6494](https://github.com/containerd/containerd/pull/6494))
  * seccomp: kernel 5.16 (futex_waitv)
  * seccomp: kernel 5.15 (process_mrelease)
  * seccomp: kernel 5.14 (quotactl_fd, memfd_secret)
  * seccomp: kernel 5.13 (landlock_{add_rule,create_ruleset,restrict_self})
  * seccomp: kernel 5.12 (mount_setattr)
* remotes: fix dockerPusher to handle abort correctly ([#6243](https://github.com/containerd/containerd/pull/6243))
  * remotes: fix dockerPusher to handle abort correctly
* seccomp: add support for "swapcontext" syscall in default policy ([#6411](https://github.com/containerd/containerd/pull/6411))
  * seccomp: add support for "swapcontext" syscall in default policy
* oci: use readonly mount to read user/group info ([#6478](https://github.com/containerd/containerd/pull/6478))
  * oci: use readonly mount to read user/group info
* Fix possibly incorrect media type default on import ([#6475](https://github.com/containerd/containerd/pull/6475))
  * Fix possibly incorrect media type default on import
* shimv2: handle sigint/sigterm ([#5828](https://github.com/containerd/containerd/pull/5828))
  * shimv2: handle sigint/sigterm
* Fix acr fetch token 400 ([#6481](https://github.com/containerd/containerd/pull/6481))
  * fix acr fetch token 400
* platforms: add support for matching amd64 variants ([#6455](https://github.com/containerd/containerd/pull/6455))
  * platforms: add support for matching amd64 variants
* Fix windows periodic workflow ([#6476](https://github.com/containerd/containerd/pull/6476))
  * Fix windows periodic workflow
* docs: add doc-comments on GC-related methods ([#6473](https://github.com/containerd/containerd/pull/6473))
  * docs: add doc-comments on GC-related methods
* fix: should not send 137 code event if cmd is notfound ([#6465](https://github.com/containerd/containerd/pull/6465))
  * fix: should not send 137 code event if cmd is notfound
* Fix empty scopes return ([#6463](https://github.com/containerd/containerd/pull/6463))
  * fix empty scopes return
* Prepare release notes for v1.6.0-rc.1 ([#6462](https://github.com/containerd/containerd/pull/6462))
  * Prepare release notes for v1.6.0-rc.1
* Add support for skipping non-dist blob push ([#6424](https://github.com/containerd/containerd/pull/6424))
  * ctr: flag to toggle non-distributable blob push
  * Add image handler to skip non-distributable blobs.
* Compile binaries for go1.16 and go1.17 in CI ([#6461](https://github.com/containerd/containerd/pull/6461))
  * Compile binaries for go1.16 and go1.17 in CI
* services/introspection: fix plugin caching to show grpc plugins ([#6432](https://github.com/containerd/containerd/pull/6432))
  * Update caching logic to avoid map access
  * services/introspection: support to show introspection grpc service
* Integration: Change to Windows Server 2022 build number constant ([#6458](https://github.com/containerd/containerd/pull/6458))
  * Integration: Change to Windows Server 2022 build number constant
* Update kubernetes vendor to 0.22.5 ([#6460](https://github.com/containerd/containerd/pull/6460))
  * Update kubernetes vendor to 0.22.5
* Fix rdt build tags for go 1.16 ([#6459](https://github.com/containerd/containerd/pull/6459))
  * Fix rdt build tags for go 1.16
* Remove submodule go mod ([#6439](https://github.com/containerd/containerd/pull/6439))
  * Remove api go submodule
  * Update makefile to remove API submodule
* go.mod: Update hcsshim to v0.9.2 ([#6453](https://github.com/containerd/containerd/pull/6453))
  * go.mod: Update hcsshim to v0.9.2
* update runc to v1.1.0 ([#6375](https://github.com/containerd/containerd/pull/6375))
  * go.mod: github.com/opencontainers/runc v1.1.0
  * update runc binary to v1.1.0
* tracing: fix OTLP tracer's initialization ([#6443](https://github.com/containerd/containerd/pull/6443))
  * tracing: fix OTLP tracer's initialization
* gha: run CodeQL scan on pull requests ([#6386](https://github.com/containerd/containerd/pull/6386))
  * gha: run CodeQL scan on pull requests
* Do not automatically inject client traces ([#6445](https://github.com/containerd/containerd/pull/6445))
  * Do not automatically inject client traces
* [containerd-stress] delete useless code ([#6451](https://github.com/containerd/containerd/pull/6451))
  * delete useless code
* Revert "Add shared content label to namespaces" ([#6440](https://github.com/containerd/containerd/pull/6440))
  * Revert "Add shared content label to namespaces"
* Add ppc64 support for test images ([#6435](https://github.com/containerd/containerd/pull/6435))
  * Add ppc64 support for test images
* ctr: Unify the delete subcommand alias ([#6427](https://github.com/containerd/containerd/pull/6427))
  * ctr: Unify the delete subcommand alias
* Prepare release notes for v1.6.0-rc.0 ([#6431](https://github.com/containerd/containerd/pull/6431))
  * Prepare release notes for v1.6.0-rc.0
* Integration: Switch to using `auth` Gcloud action in Windows workflow. ([#6397](https://github.com/containerd/containerd/pull/6397))
  * Integration: Switch to `upload-cloud-storage` Gcloud action.
  * Integration: Switch to using `auth` Gcloud action in Windows workflow.
* remove io/ioutil ([#6426](https://github.com/containerd/containerd/pull/6426))
  * remove io/ioutil
* test: e2e node COS cgroupv2 script ([#6418](https://github.com/containerd/containerd/pull/6418))
  * test: e2e node COS cgroupv2 script
* Integration: Enable CRITest on Windows 2022. ([#6378](https://github.com/containerd/containerd/pull/6378))
  * Enable critest tests on Windows Server 2022.
  * Parametrize CRITest test images in Windows Periodic workflow.
* Update error message for apparmor parser ([#6415](https://github.com/containerd/containerd/pull/6415))
  * Update error message for apparmor parser
* Fix wrong log message ([#6419](https://github.com/containerd/containerd/pull/6419))
  * Fix wrong log message
* Followup errors change ([#6414](https://github.com/containerd/containerd/pull/6414))
  * Fix incorrect error wrapped when closing ingest file
  * Fix seek error used without nil check
  * Fix followup items from errors replacement
* Updates CRI API & Kubernetes to 1.23 ([#6351](https://github.com/containerd/containerd/pull/6351))
  * Update k/k to 1.23.0
* Updating adoption of containerd for AKS ([#6416](https://github.com/containerd/containerd/pull/6416))
  * Updating adoption of containerd for AKS
* update the adoption status of containerd in GKE ([#6413](https://github.com/containerd/containerd/pull/6413))
  * update the adoption status of containerd in GKE
*  go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} ([#6410](https://github.com/containerd/containerd/pull/6410))
  * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt}
* replace github.com/pkg/errors with native errors ([#6366](https://github.com/containerd/containerd/pull/6366))
  * feat: replace github.com/pkg/errors to errors
* corrected link in cri architecture documentation ([#6412](https://github.com/containerd/containerd/pull/6412))
  * corrected link in cri architecture documentation
* remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token") ([#6396](https://github.com/containerd/containerd/pull/6396))
  * remotes/docker: allow fetching "refresh token" (aka "identity token")
  * remotes/docker/config: allow setting custom AuthorizerOpts
* Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407))
  * Prepare release notes for v1.6.0-beta.5
* Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292))
  * Integration: Check GCP secrets on Windows CI artifact upload.
* Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c)
  * only relabel cri managed host mounts
* Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439))
  * cri: add ignore_rdt_not_enabled_errors config option
  * Update dependencies
  * cri: annotations for controlling RDT class
  * tasks: add Linux rdt support
  * cmd: add --rdt-class command line option
  * oci: implement WithRdt
* fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391))
  * fix: use _ for consistency
* content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403))
  * content/local: use syscall.Timespec.Unix
* docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207))
  * docs: document the runtime shim plugin config options
  * docs: use proper markdown lists in containerd-config.toml.5.md
* fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304))
  * fix(ctr): enable networking for Windows containers
* Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394))
  * Fix $(PWD) issue for Windows makefile
* only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395))
  * fix: only test abstract unix socket on linux
* Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390))
  * Expect ErrorNotFound on Windows after Kill()
  * Replace tskill with taskkill
* fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291))
  * fix when kernel version < 4.13rc1 by using index=off cause overlay test error
* Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384))
  * Fix no-daemon flag for integration/client tests
* Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122))
  * Enable lazy init for ext4 with devicemapper
* Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385))
  * Fix flakiness on Windows for list stats
* cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347))
  * cri-integration: Add Windows default paths
* Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383))
  * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0
  * Use insecure.NewCredentials instead of grpc.WithInsecure
  * Upgrade OpenTelemetry dependencies
* Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322))
  * Fix default makefile target for windows
* Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379))
  * Disable TestContainerHook on Windows
* seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372))
  * seutil: Fix setting the "container_kvm_t" label
* Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350))
  * Remove Windows integration testing for 2004.
* OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308))
  * OCI: Mount (accessible) host devices in privileged rootless containers
  * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch
* cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320))
  * fixup: check for swap accounting
  * fixup: handle diff between cgroupsv1 and v2
  * cri: add support for configuring swap
* Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275))
  * Replace find with native Go code
  * Enable TestVolumeOwnership on Windows
* Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296))
  * Prepare release notes for v1.6.0-beta.4
* refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358))
  * feat: Errorf usage
* Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021))
  * Use task plugin for runc shim
  * Seperate shim manager and task service
  * Split runc shim into plugin components
  * Add shutdown package
* CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155))
  * cri, sandbox: pass sandbox resource details if available, applicable
* medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354))
  * medatada: make namespaces' deletion error less cryptic
* ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373))
  * add-list-stat: return container list if filter is nil
* integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369))
  * integration: deflake TestContainerdRestart
* feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225))
  * feat: support custom timeout for blot open
* Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333))
  * Update Go to 1.17.5
* cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332))
  * cri/server: use consistent alias for pkg/ioutil
* Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364))
  * Disable restart monitor test in Windows
* Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338))
  * Don't fail-fast on Windows integration tests
* Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355))
  * Run windows parallel integration test as short
  * Update restart monitor test to output daemon logs on failure
* go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263))
  * images/converter: remove deprecated types
  * go.mod: update image-spec to latest (v1.0.3-dev)
* Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353))
  * Skip WithAdditionalGIDs on Darwin
* Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303))
  * Use RFC3339 format so rg cleanup works
* update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330))
  * go.mod: github.com/opencontainers/runc v1.0.3
  * update runc binary to v1.0.3
* Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329))
  * Allow native snapshotter on Darwin
* Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328))
  * Do not use `go get` to install executables
* Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326))
  * Include runtime v2 in default builtins
* Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314))
  * Add Windows Server 2022 CI runs
* Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324))
  * Use a single RUN command
  * Set explicit ACL on test files
* integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311))
  * integration: align tags of test images
* Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325))
  * Set CONTAINERD_ROOT in Windows cri-integration
* export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312))
  * export oci.DeviceFromPath()
* Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321))
  * Update continuity dependency
  * Update volume test images
* Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201))
  * Add error logging on cleanup
  * Update TestRestartMonitor expected time check
* Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319))
  * Move volume images from gcr to ghcr
* Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301))
  * Revert shim plugin migration
* Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317))
  * Add permissions
  * Authenticate against ghcr.io
* oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306))
  * oci/deviceFromPath(): correctly check device types
* Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315))
  * Skip TestExportAndImportMultiLayer on Windows
* Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290))
  * Add image build workflow
* Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286))
  * Integration: Separate Windows Periodic Tests workflow trigger.
* Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274))
  * Build volume test images on Windows
* Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297))
  * Add VMware TKG & TCE to Containerd adopters
* Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293))
  * Vagrantfile: update to Fedora 35
* Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269))
  * Update README.md repo->org
* Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278))
  * Fix executable file not found when restoring shims
* ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271))
  * ctr/snapshots/diff: don't show the media-type in output
* ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289))
  * ctr: Add Linux Capabilities control flags
* integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270))
  * integration: add stats result in error message
* releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287))
  * docs: mark 1.4 as Extended
  * docs: fix RELEASES.md gRPC API anchor
* feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284))
  * feat: skip ci for fork
* content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280))
  * content/local: Close the file if Seek fails
* Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268))
  * Integration: Remove explicit version passing to `azure/CLI`.
* Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276))
  * Fix wrong make target on documentation
* fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272))
  * fix: server error return
* Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267))
  * Prepare release notes for v1.6.0-beta.3
  * Update API version in go.mod
  * Update release name to use consistent format
* feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254))
  * fix: make max recv/send msg size setting default
  * feat:support custom callopts on client side
* [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258))
  * [CRI] Fix panic when registry.mirrors use localhost
* Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241))
  * Add support for TMP override on toml
* CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170))
  * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options
* Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35)
  * schema1: reject ambiguous documents
  * images: validate document type before unmarshal
* [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111))
  * [cri] add sandbox and container latency metrics
* Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255))
  * Generalize Windows CI setup script for any user.
  * Standardize cmdlet capitalization in Windows CI scripts.
* feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253))
  * feat: use rwmutex instead
* Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206))
  * Fix package alias
  * Support custom runtime path when launching tasks
  * Add runtime path in CreateTaskRequest
* Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246))
  * Close file if permission modification fails
* release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250))
  * release: change tar name to match prior releases
* Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237))
  * Fix wrong error returned for image index lookup
* Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221))
  * Fix containerd fails to pull OCI image with non-`http(s)://` urls
* Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223))
  * Prepare release notes for v1.6.0-beta.2
* Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196))
  * Rename release dockerfile to omit distro name
  * release: improve dockerfile
  * Add arm64 to releases
* use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236))
  * use write lock when updating container stats
* go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230))
  * go.mod: Bump hcsshim to v0.9.1
* go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228))
  * go.mod: Bump ttrpc to 1.1.0
* go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213))
  * go.mod: github.com/moby/sys/mountinfo v0.5.0
  * go.mod: github.com/moby/sys/signal v0.6.0
  * go.mod: github.com/moby/sys/symlink v0.2.0
  * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
* cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222))
  * cleanup: add more description on comment
* Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211))
  * Update Go to 1.17.3
* CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214))
  * CI: bump up crun: 1.0 -> 1.3
* Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205))
  * Pin az CLI version
* Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918))
  * Address PR comments
  * Fix build after rebase
  * Migrate task directory
  * Expose shim process interface
  * Fix after rebase
  * Cleanup shim loading
  * Move shim restore to a separate file
  * Fix backward compatibility with old task shims
  * Add plugin dependency between shim and shim services
  * Rework task create and cleanup flow
  * Add task manager
  * Rename task manager to shim manager
* [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113))
  * Implement CRI container and pods stats
  * Vendor latest k8s.io/cri-api and netlink
* test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200))
  * test: Add grace period for restart monitor test
* integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179))
  * integration: Enables TestRuntimeHandler for Windows
* Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171))
  * Add mkdir on Dockerfile
* sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189))
  * sys/reaper: avoid leaky goroutine when exec timeout
* adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184))
  * adds additional debug out to timebox cni setup
* converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176))
  * converter: Allow hooks during image conversion
* compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177))
  * compression: support zstd with skippable frame
* integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182))
  * integration: Enables TestVolumeCopyUp for Windows
*  integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121))
  * integration: Enable some tests for Windows (part 2)
* integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085))
  * integration: Enable some tests for Windows
* Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125))
  * feat(doc): update to version 2 syntax
* fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166))
  * fix shim reaper wait command execute blocked
* content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145))
  * content: close stream after commit request
* Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165))
  * Adding scope tests for ParseAuthHeader
  * Adding tests for GenerateTokenOptions
  * Generate token options with each scope as a separate string.
* vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167))
  * vendor: Updates go-cni
* commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159))
  * commands: Enables task metrics for Windows
* vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149))
  * vendor: update moby/sys for darwin support
* Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144))
  * Prepare release notes for v1.6.0-beta.1
  * Update mailmap
  * Update api vendor
* bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136))
  * bump CNI to spec v1.0.0
* Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992))
  * Inject otel traces to grpc client.
* client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142))
  * client: expose (*image).platform
* Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128))
  * feat(doc): add Core Scheduling documentation
* Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130))
  * Ensure namespace is proxied to grpc/ttrpc plugins
* fix #6054  MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109))
  * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
* Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124))
  * Output a warning for label image labels instead of erroring
* Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132))
  * Fix spelling mistake in Windows snapshotter
* Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126))
  * Windows: Cleanup rm- prefixed layers
* cleanup deprecated package  `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118))
  * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
* close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115))
  * close Writer after use which may leak mem
* Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778))
  * Adds Windows resource limits support
* Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098))
  * Prepare release notes for v1.6.0-beta.0
* Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105))
  * Add error message to in TestContainerdRestart integration test
* Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110))
  * Fix typo in the NewContainer function documentation
* Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104))
  * Update cgroups to v1.0.2
* btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100))
  * test: check file content after mount
* Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107))
  * Update test timeout based on recent cancellations
* Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106))
  * Remove extra test_teardown
  * Check the pid in cri test teardown
* add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011))
  * fix integration client vendor
  * add runc shim support for sched core
* integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579))
  * integration: Enables Windows containerd restart test
* vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099))
  * vendor: Bump hcsshim to 0.9.0
* [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695))
  * Add CNI conf based on runtime class
* Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102))
  * Update Go to 1.17.2
* integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933))
  * integration: Adds test for multilayer image import
* runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031))
  * runtime: should fail fast if dial error on shim
* Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034))
  * Windows: Fixes Windows containers with image volumes
* run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094))
  * run `gofmt` with Go 1.17
* pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088))
  * pkg/cap: remove an outdated comment
* Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066))
  * Update go otel 1.0.1
* Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086))
  * Update ADOPTERS.md with additional uses
* modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082))
  * modify the way for checking cos
* Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915))
  * Fuzzing: Add 4 fuzzers + small modifications
* Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081))
  * Pin mingw to version 10.2.0
  * Update to golang 1.17.1
  * Install nssm
* Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq)
  * btrfs: reduce permissions on plugin directories
  * v1 runtime: reduce permissions for bundle dir
  * v2 runtime: reduce permissions for bundle dir
* task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079))
  * task service: return known error type
* refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973))
  * refactor: move from io/ioutil to io and os package
* fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076))
  * fix: update vendor
  * cleanup: import from k8s.io/utils/clock/testing instead
  * cleanup: import from k8s.io/utils/clock instead
* feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069))
  * feat: enable cri remote client to call with grpc calloptions
* cleanup k8s ansible yaml (carry for #5713)  ([#6074](https://github.com/containerd/containerd/pull/6074))
  * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>)
* feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070))
  * fix: wrong flag type
  * feat: support import image for specific platform
* Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065))
  * Update mirror images to take target image name
* fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059))
  * fix: make exec-id flag required in exec command
* images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052))
  * images: enable converter to uncompress zstd
* replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922))
  * replace deprecated function
* integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853))
  * integration: Adds Windows HostProcess tests
* Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047))
  * Fix main branch build is broken
* Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003))
  * Add open telemetry logging hook for logrus
* Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023))
  * Change oci.WithUser behavior for LCOW
* switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946))
  * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
* import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926))
  * import: Raise error if the imported image is filtered out
* Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043))
  * Fix panic in metadata content writer on copy error
* Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001))
  * Move tracing to plugin
* ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916))
  * ctr: Fixes Windows image import
* update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017))
  * go.mod: update opentelemetry modules to v1.0.0
* fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979))
  * fix error string format
* Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036))
  * Add github action to mirror image
* add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027))
  * add current process state to the error message
*  FreeBSD: fix tar headers & the nil check on getxattr  ([#5991](https://github.com/containerd/containerd/pull/5991))
  * FreeBSD: fix tar headers & the nil check on getxattr
* gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035))
  * gha: collect Vagrant VMs' IP addresses
* bump continuity and console version  that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033))
  * bump continuity and console version that remove pkg/errors
* import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997))
  * import: Add option to skip creating digest image
* ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998))
  * ctr namespaces: improve usage string
* bump console version to v1.0.3 that remove pkg/errors  ([#6028](https://github.com/containerd/containerd/pull/6028))
  * bump console version to v1.0.3 that remove pkg/errors
* Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032))
  * Use github images for integration tests
* Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995))
  * Fix typo
* Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012))
  * Enable image config labels in ctr and CRI container creation
* Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970))
  * Make sure exit signals trigger an exit during init
* task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974))
  * task delete: Closes task IO before waiting
* CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985))
  * CI: bump up crun to 1.0
* seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982))
  * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990))
  * Update to Go 1.17.1
* CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987))
  * CI: Switch to available latest images
* add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610))
  * add xfs support to devicemapper snapshotter
* Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956))
  * Fixes task kill --force on Windows
* Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817))
  * Add support for shim plugins
* vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976))
  * vendor: update continuity for darwin support
* replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906))
  * replace uses of os/exec with golang.org/x/sys/execabs
* complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972))
  * Additional integration tests for pulling image with labels
* Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966))
  * Fix content copy to not ignore unexpected EOF
* add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964))
  * add ip_pref CNI options for primary pod ip
* cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939))
  * cri: add devices for privileged container
* sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954))
  * sandbox: Allows the sandbox to be deleted in NotReady state
* pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969))
  * pin protobuild version to tag
* Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965))
  * use a const metric for build_info
  * Add metric exposing build version&revision
* Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627))
  * add cri test case
  * feature: add field LinuxContainerResources.Unified on cri
* integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861))
  * integration: investigate TestRestartMonitor's failure
* Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917))
  * Address issue forms feedback
  * Use issue forms for bug reporting
* cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945))
  * cri: patch update image labels
* darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936))
  * darwin: runtime support
  * darwin: use the default values for socketRoot variable
* Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858))
  * Update RELEASES.md
* archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949))
  * archive: Add WriteDiff error logs
* replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958))
  * replace deprecated Dail with DailContext
* Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951))
  * Add WS2022 support in Windows Periodic tests
* Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943))
  * content fuzzer: Clean up tempdir
* using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944))
  * using Hosts replace deprecated field
* fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947))
  * fix document non-synchronous in crictl.md
* go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929))
  * go.mod: Update hcsshim to v0.8.21
* Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937))
  * Makefile.linux: build on riscv with PIE
* Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932))
  * Fix cwd flag for `ctr tasks exec`
* Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927))
  * Update Pause image in tests & config
* cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122))
  * cri: Devices ownership from SecurityContext
* Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921))
  * Fix pull fails on unexpected EOF
* Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845))
  * Adding testing of two devices
  * Fix dir support for devices V3 (#4847)
* windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914))
  * windows: The DefaultSpec platform should match the Default matcher
* Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865))
  * Add RunAsUserName functionality for the Windows Pod Sandbox Container
* bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899))
  * go.mod: update runc to v1.0.2
  * update runc binary to v1.0.2
* Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903))
  * Run `go fmt` with Go 1.17
* go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905))
  * go.mod: github.com/pelletier/go-toml v1.9.3
* cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902))
  * cri: filter selinux xattr for image volumes
* Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131))
  * Added windows hostProcess cni skip
* script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897))
  * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
* Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889))
  * Bump integration timeout to 35 min
  * Update to Go 1.17
* integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896))
  * integration: fix TestContainerPids
* [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891))
  * [ctr] add HOSTNAME env for host network
* Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886))
  * Fuzzing: Add fuzzer
* Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884))
  * Add env for SystemdCgroup driver
* Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878))
  * Allow expanded DNS configuration
* Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863))
  * Fuzzing: Add 4 fuzzers
* Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813))
  * Cleanup v2 shim
* Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840))
  * Use http.Get to download binaries instead of exec.Command
  * Fuzzing: Add experimental version of container fuzzer
* add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846))
  * add cpu-shares to ctr
* docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847))
  * docs: rename main to master
* content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849))
  * content: return the error with its timestamp
* Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857))
  * Fix bad `make protos` failure
* replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851))
  * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
* docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856))
  * docs: remove FOSSA's badge
* BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850))
  * BUILDING.md: remove some bits about building runc
  * BUILDING.md: markdown fixes
* go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836))
  * go.mod: update kubernetes to v1.22.0
* [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852))
  * Add trap to cri-integration test script
* docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848))
  * docs: list all snapshotter-related build flags
* Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835))
  * Move plugin context events into separate plugin
* Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839))
  * Fix Linux CI Linter using go 1.15.14
* Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842))
  * Update Go to 1.16.7
* Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838))
  * Cleanup CI
* Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834))
  * Remove redundant build tags
* Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830))
  * Change default directories on Darwin
* [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731))
  * [otel-tracing] vendor and go modules changes
  * [otel-tracing] Initial opentelemetry support
  * remove go 1.13 from containerd
* Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829))
  * Fuzzing: Fix for OSS-fuzz issue 36825
* Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825))
  * Fuzzing: Add two more fuzzers
* scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760))
  * scripts: declare ROOT closer to where it's used, and some DRY changes
  * scripts: add missing quotes, and minor linting issues
  * test/build-utils.sh: remove support for Debian Jessie
* platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821))
  * platforms: Format(): use path.Join() instead of joinNotEmpty()
* Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823))
  * Fuzzing: Remove panics of container_fuzzer
* Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785))
  * Change protoc link
  * Split fuzzer to two fuzzers
  * Fuzzing: Add container fuzzer
* runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746))
  * runtime: fix the issue of create new socket with abstract address
* mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809))
  * mergo: Upgrade to 0.3.12 to fix panic
* ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802))
  * ci: install criu from PPA
* Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144))
  * Split release steps into multiple tasks
  * Update release workflow to upload binary without CNI
* Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725))
  * Enable critest on Windows
* Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792))
  * Script to check if entries in go.mod files are in sync
* Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043))
  * Add shared content label to namespaces
* platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784))
  * platforms: add "ios" as known OS, "loong64" as known ARCH
* Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804))
  * Updates the location of protobuf downloads in docs
* Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803))
  * Update protobuf install to use correct repository
* overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624))
  * overlay: add an optional label of upperdir location of each snapshot
* Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693))
  * Support SIGRTMIN+n signals
* respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800))
  * respect context timeout in shim binary call
* Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716))
  * Introduce a new go module - containerd/api for use in standalone clients
* grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606))
  * grpc config add options tcp_tls_ca
* integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162))
  * integration: Windows volume-copy-up images
* add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795))
  * add CRI support matrix to RELEASES.md
* adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794))
  * adding a little more clarity
* update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793))
  * update gotestsum to v1.7.0
* Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756))
  * Discard blocks when removing a thin device
* Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590))
  * Makefile: pass build tags to manpage build process
  * Makefile: fix tags parameter computation
* Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744))
  * Add runtime label to metrics
* interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745))
  * interface about shim build check
* integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775))
  * integration: log all processes to investigate the test failure
* Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779))
  * Fuzzing: Add archive fuzzer
* Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687))
  * Add docker fetch fuzzer
* Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735))
  * Support custom compressor for walking differ
* remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770))
  * remotes/docker/pusher.go: Fix missing Close()
* remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769))
  * remotes/docker/fetcher.go: Fix missing Close()
* Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771))
  * Update cpuguy83/go-md2man binary to v2.0.1
* Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750))
  * Dockerfile.test: build containerd in separate stage
  * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
  * Dockerfile.test: clean up apt indexes after installing
  * Dockerfile.test: build critools in a separate stage
  * Dockerfile.test: build cni in a separate stage
  * Dockerfile.test: standard directory to collect build aftifacts
  * Dockerfile.test: split dev stage, and optimize order
  * Dockerfile.test: skip curl, gcc, git and make install
  * install-critools: make sure DESTDIR exists
* update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754))
  * update gotestsum to current master
* Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w)
  * Add test for archive breakout test for lchmod
* Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755))
  * Use systemd cgroup driver for cgroupv2 tests
* update runc  to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751))
  * go.mod: runc v1.0.1
  * update runc binary to v1.0.1
* runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737))
  * runtime: runc v2: remove redundant validation
* Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727))
  * Move loop check to before sleep
  * Add timestamp to flaky restart monitor test
* Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722))
  * integration/client: go mod tidy
  * Update Go to 1.16.6
* client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447))
  * client: surface a connection error more clearly
* Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712))
  * Fix missing Body.Close() calls on push to docker remote
* remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710))
  * remove pkg/cri/platforms package
* Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709))
  * Allow WithServices to use custom implementations
* [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673))
  * [Vendor] Update hcsshim to 0.8.18
* test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578))
  * test integration: Adds a test that restarts a failed container
* [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619))
  * use fu wei's suggeted interface pick for marshaling
  * add alpha version
  * move up to CRI v1 and support v1alpha in parallel
* gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682))
  * gha: make release workflow work in forks
* Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666))
  * Add unit test for plugin
* Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700))
  * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
* Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676))
  * Add support for registry host path override
  * Update documenation for OCI distribution 1.0
* archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702))
  * Cleanup lchmod logic in archive
* Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571))
  * Install specific golang version in Windows CI.
* Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660))
  * feat: Add snapshotter label to the new snapshot for container.
* snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655))
  * snapshot/devmapper: log exported methods correctly
* Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662))
  * Makefile: fix DESTDIR and PREFIX concatenation
* Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287))
  * tests: Use EnsureImageExists for image pulling
  * tests: Refactors PodSandbox creation
* move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641))
  * un-export mount.FMountat
  * move sys.FMountat() into mount package
* sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640))
  * sandbox: send pod UID to CNI plugins as K8S_POD_UID
* sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639))
  * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
* content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633))
  * content/local: inline sys.StatATimeAsTime()
* allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636))
  * allow multi gpu to be specified via ctr
  * go.mod: runc v1.0.0
  * update runc binary to v1.0.0 GA
* fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629))
  * fixing some doc links
* Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623))
  * Sync integration/go.mod with root go.mod
* archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615))
  * archive: Expose ChangeWriter to allow customized diff computing
* CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625))
  * CI: Switch to available latest images
  * fix deprecation config for default runtime
* Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614))
  * Re-enable criu in main integration runs
* runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617))
  * runtime,v2: Enable debug when containerd is on debug+ log level
  * github.com/golang/protobuf/proto is deprecated
  * Update github.com/golang/protobuf from v1.3.5 to v1.4.3
  * Update google.golang.org/grpc from v1.27.1 to v1.38.0
  * Increase golangci-lint timeout
* ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611))
  * command line flags of setting container rootfs propagation
  * add cgroupv2 setup for cos with a flag
* Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612))
  * Update gotestsum to add timestamps to junit output
* Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604))
  * Allow to pass --no-cgroup option to nvidia-container-cli
* Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577))
  * Makefile: FHS conformant manpage installation pathes
* Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594))
  * Add proper Go version before project checks
* Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580))
  * Enable cri-integration in Windows Periodic Tests
* adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573))
  * adds explanation for seccomp unset/unconfined default vs runtime default
* Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569))
  * Fix cleanup context of teardownPodNetwork
* update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572))
  * update integration/client go.sum
* Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566))
  * Revert diff/walking error change
* Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562))
  * Update opencontainers/selinux to v1.8.2
* fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565))
  * fix invalid validation error checking
* diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551))
  * diff/walking: fix defer cleanup
* Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559))
  * Add creation timestamp to RG
* Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328))
  * Fix error case in Windows layer cleanup
* Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422))
  * Small typo fix "reimporst"
  * Use DeactivateLayer to recover layers that we cannot rename
* tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284))
  * tests: Symlink volume tests
* Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535))
  * Makefile: fix DESTDIR environment variable behaviour
* Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560))
  * Change Wrapf of non-error to an actual error
  * Install apparmor parser for arm64 environment
* scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536))
  * scrub the stale TODO
* docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554))
  * docs: explicitly mention containerd's Prometheus path
* integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553))
  * integration: Cleanup containerd on test teardown
* docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548))
  * docs/cri: update ocicrypt link
  * docs/cri: fix broken links
* Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544))
  * Update Windows periodic tests
* Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165))
  * Schedule Windows job daily after midnight.
  * Update windows-periodic.yml
  * Add CI periodic Windows Jobs.
* Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273))
  * Rename atomicWrite to writeToCompletion
* Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539))
  * Do not run btrfs tests if btrfs kernel module is not loaded
* Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533))
  * Fix incorrect UA used for registry authentication
* ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531))
  * ctr: parse mount options with embedded = character
* Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472))
  * Add ruleset=4 option
  * Remove mountpoints not commonly mounted on FreeBSD
  * Add copyright header & make sure compilation succeeds on all platforms
  * Fix mounts for FreeBSD
* ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527))
  * ctr: exec handle pty resize after Start
  * ctr: exec setup IO with console
* Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534))
  * Makefile: use $@ for target file names
* Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528))
  * Fix small typo
* Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519))
  * update the link
  * Don't check for apparmor_parser to be present
* Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520))
  * Remove useless lines
* Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509))
  * fixed typos
* Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275))
  * Try next mirror in case of non-404 errors, too
* bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514))
  * bump runc version to v1.0.0-rc95
* update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511))
  * update runc binary to v1.0.0-rc95
* Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508))
  * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0
* Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507))
  * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
* Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493))
  * Makefile: allow overriding install command via environment
* tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163))
  * tests: Adds support for Windows cri-integration tests
* Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504))
  * Update docker resolver to authorize redirects
* bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505))
  * bump hcsshim version to v0.8.17
* Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498))
  * just release ctd-decoder not ctr-enc
  * Merge remote-tracking branch 'upstream/master'
  * Pin integration test image for alpine
* cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313))
  * tests: Prepull images used in tests
* plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440))
  * plugin: optimize the check for the last registration
* metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465))
  * metadata: modify NewLeaseManager to return leases.Manager
* Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100))
  * Skip TLS verification for localhost
  * Merge remote-tracking branch 'upstream/master'
* Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492))
  * Makefile: make sure manpages are built before install-man
* adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309))
  * adds credentials description
  * adds description for hosts.toml
* Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459))
  * Prepare default branch rename
  * Merge remote-tracking branch 'upstream/master'
* Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473))
  * Update vendored runc to v1.0.0.0-rc94
  * Update the runc binary used with containerd to runc v1.0.0-rc94
* Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468))
  * Fix content.ReaderAt close
* Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466))
  * Update releases doc with updated support timeline
* tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452))
  * tests: add test for adaptor
* Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450))
  * Makefile: allow overriding go command by environment
* update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462))
  * update to new cri-tools make install
* Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461))
  * Update Go to 1.16.4
  * Merge remote-tracking branch 'upstream/release/1.5'
* [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457))
  * go.mod: cut circular dependency on github.com/containerd/containerd
  * integration/client: go mod tidy
* oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063))
  * oci: fix WithDevShmSize
* [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454))
  * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411))
  * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448))
  * doc: add missing namespaces package
* update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445))
  * update seccomp version
* Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436))
  * Update golang.org/x/sys to add linux/ppc support
* go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441))
  * go.mod: cut circular dependency on github.com/containerd/containerd
  * integration/client: go mod tidy
* Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446))
  * Fix different registry hosts referencing the same auth config.
</p>
</details>

### Changes from containerd/cgroups
<details><summary>33 commits</summary>
<p>

* v2: Fix inotify fd leak when cgroup is deleted ([#212](https://github.com/containerd/cgroups/pull/212))
  * v2: add test case for Manager.EventChan() behavior
  * v2: flip error handling for readKVStat("memory.events") to reduce indentation
  * v2: manager: factor out memory.events parsing
  * v2: Fix inotify leak when cgroup is deleted
* fix Implicit memory aliasing in for loop ([#214](https://github.com/containerd/cgroups/pull/214))
  * fix Implicit memory aliasing in for loop
* Fix potential dirfd leak. ([#210](https://github.com/containerd/cgroups/pull/210))
  * Fix potential dirfd leak.
* cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203))
  * cgroup: Optionally add process and task to a subsystems subset
* replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208))
  * replace pkg/errors from vendor
* cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207))
  * cgroup.go: avoid panic on nil interface
* Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204))
  * cgroupv2: reset lastErr to nil when subtree control is successfully written
  * cgroupv2: enable controllers before setting resources in NewChild()
* v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201))
  * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
  * v2: remove errors that are never returned
* v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202))
  * v1: reduce duplicated code
* cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200))
  * cgroup v1: implement AddProc()
* Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199))
  * Rename branch from master to main
* utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197))
  * utils: export ParseCgroupFile()
* go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194))
  * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
* Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195))
  * Use /proc/partitions to get device names
</p>
</details>

### Changes from containerd/console
<details><summary>6 commits</summary>
<p>

* Fix CI ([#55](https://github.com/containerd/console/pull/55))
  * Fix CI
  * Stop using pkg/errors
* Add support for z/OS ([#46](https://github.com/containerd/console/pull/46))
  * Console test on z/OS
  * Add support for z/OS
</p>
</details>

### Changes from containerd/continuity
<details><summary>28 commits</summary>
<p>

* fs: use syscall.Timespec.Unix ([#193](https://github.com/containerd/continuity/pull/193))
  * fs: use syscall.Timespec.Unix
* Update CI Go version to 1.17 ([#192](https://github.com/containerd/continuity/pull/192))
  * Update CI Go version to 1.17
* Build containerd/continuity on multiple Unix OSes ([#190](https://github.com/containerd/continuity/pull/190))
  * Build containerd/continuity on multiple Unix OSes
* Do not log errors before returning them ([#191](https://github.com/containerd/continuity/pull/191))
  * Do not log errors before returning them
* Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188))
  * Copy Windows file metadata
* fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187))
  * fix fmt.Errorf("%w", err) on err == nil
* Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185))
  * run gofmt with Go 1.17
  * remove direct dependency on github.com/pkg/errors
* Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186))
  * update AUTHORS
  * darwin: use utimensat syscall instead of utimes
  * fix darwin usage of du command
* go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161))
  * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
* fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184))
  * reformat nolint comments
  * fs/stat: add FreeBSD
* Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182))
  * Rename branch from master to main
* testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180))
  * testutil/loopback: print more debug info
</p>
</details>

### Changes from containerd/go-cni
<details><summary>18 commits</summary>
<p>

* run setup on networks in parallel ([#76](https://github.com/containerd/go-cni/pull/76))
  * switch to direct index
  * run setup on networks in parallel
* remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74))
  * remove: Continue on "not found" errors
* go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72))
  * go.mod: github.com/containernetworking/cni v1.0.1
* remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71))
  * remove direct dependency on github.com/pkg/errors
* update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70))
  * test: add TestLibCNIType100
  * update CNI to v1.0.0
* Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69))
  * Rename branch from master to main
* result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68))
  * result: change Raw from a struct field to a method
* result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67))
  * result: expose raw result
</p>
</details>

### Changes from containerd/imgcrypt
<details><summary>32 commits</summary>
<p>

* CHANGES: Updated CHANGES document for 1.1.3 release ([#64](https://github.com/containerd/imgcrypt/pull/64))
  * CHANGES: Updated CHANGES document for 1.1.3 release
* docs: update project branch to main ([#63](https://github.com/containerd/imgcrypt/pull/63))
  * docs: update project branch to main
* Update linter to match containerd repo ([#61](https://github.com/containerd/imgcrypt/pull/61))
  * Update linter to match containerd repo
  * update CI golang version
* Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 ([#59](https://github.com/containerd/imgcrypt/pull/59))
  * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8
* maint: Update to ocicrypt v1.1.2 ([#57](https://github.com/containerd/imgcrypt/pull/57))
  * maint: Update to ocicrypt v1.1.2
* Decouple CreateCryptoConfig() from github.com/urfave/cli ([#56](https://github.com/containerd/imgcrypt/pull/56))
  * Decouple CreateCryptoConfig() from github.com/urfave/cli
* Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 ([#55](https://github.com/containerd/imgcrypt/pull/55))
  * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7
  * replace pkg/errors and bump related library
* README: Fix CRI decryption document URL ([#53](https://github.com/containerd/imgcrypt/pull/53))
  * README: Fix CRI decryption document URL
* Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#52](https://github.com/containerd/imgcrypt/pull/52))
  * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
* Bump containerd to 1.5.2 ([#51](https://github.com/containerd/imgcrypt/pull/51))
  * Bump containerd to 1.5.2
* images: Implement ConvertFunc for image en- and decryption ([#49](https://github.com/containerd/imgcrypt/pull/49))
  * images: Implement ConvertFunc for image en- and decryption
* Add containerd-release to makefile ([#48](https://github.com/containerd/imgcrypt/pull/48))
  * Remove ctr-enc from installation
* vendor sync up with containerd 1.5 ga, and runc94 ([#47](https://github.com/containerd/imgcrypt/pull/47))
  * sync up with containerd 1.5 ga, and runc94
* Sync ctr-enc with containerd's ctr v1.5.0-rc.3 ([#46](https://github.com/containerd/imgcrypt/pull/46))
  * CICD: Run 'apt update' before pulling packages
  * ctr-enc: Set the version for ctr-enc when linking
  * Sync ctr-enc with containerd's ctr v1.5.0-rc.3
</p>
</details>

### Changes from containerd/ttrpc
<details><summary>34 commits</summary>
<p>

* Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96))
  * Add protoc-gen-go-ttrpc
* client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94))
  * client: Handle sending/receiving in separate goroutines
* Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95))
  * Run Protobuild in GitHub Actions
  * Re-generate example.pb.go
* replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93))
  * replace pkg/errors from vendor
* Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86))
  * Rename branch from master to main
* Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85))
  * Make the example command buildable on macOS
  * Run GitHub Actions on macOS
  * Make "go test" work on macOS
* Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83))
  * Return Unimplemented when services or methods are not implemented
* Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84))
  * Remove "Very new" and checked TODO items
* removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82))
  * removing glide from ignore
* go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79))
  * go.mod: github.com/prometheus/procfs v0.6.0
  * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63
  * go.mod: google.golang.org/grpc v1.27.1
  * go.mod: github.com/gogo/protobuf v1.3.2
* remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78))
  * CI: add codecov badge to readme
  * CI: remove travis
* Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77))
  * Use GitHub Actions for CI
* go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76))
  * go.mod: sirupsen/logrus v1.7.0
  * go mod tidy
</p>
</details>

### Dependency Changes

* **cloud.google.com/go**                                                          v0.81.0 **_new_**
* **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 **_new_**
* **github.com/Microsoft/go-winio**                                                v0.4.17 -> v0.5.1
* **github.com/Microsoft/hcsshim**                                                 v0.8.16 -> v0.9.2
* **github.com/blang/semver**                                                      v3.5.1 **_new_**
* **github.com/cenkalti/backoff/v4**                                               v4.1.2 **_new_**
* **github.com/cespare/xxhash/v2**                                                 v2.1.1 -> v2.1.2
* **github.com/cilium/ebpf**                                                       v0.4.0 -> v0.7.0
* **github.com/containerd/cgroups**                                                v1.0.1 -> v1.0.3
* **github.com/containerd/console**                                                v1.0.2 -> v1.0.3
* **github.com/containerd/continuity**                                             v0.1.0 -> v0.2.2
* **github.com/containerd/go-cni**                                                 v1.0.2 -> v1.1.1
* **github.com/containerd/imgcrypt**                                               v1.1.1 -> v1.1.3
* **github.com/containerd/ttrpc**                                                  v1.0.2 -> v1.1.0
* **github.com/containernetworking/cni**                                           v0.8.1 -> v1.0.1
* **github.com/containernetworking/plugins**                                       v0.9.1 -> v1.0.1
* **github.com/containers/ocicrypt**                                               v1.1.1 -> v1.1.2
* **github.com/coreos/go-systemd/v22**                                             v22.1.0 -> v22.3.2
* **github.com/go-logr/logr**                                                      v0.2.0 -> v1.2.2
* **github.com/go-logr/stdr**                                                      v1.2.2 **_new_**
* **github.com/godbus/dbus/v5**                                                    v5.0.3 -> v5.0.6
* **github.com/golang/groupcache**                                                 8c9f03a8e57e -> 41bb18bfe9da
* **github.com/golang/protobuf**                                                   v1.3.5 -> v1.5.2
* **github.com/google/go-cmp**                                                     v0.5.4 -> v0.5.6
* **github.com/google/gofuzz**                                                     v1.1.0 -> v1.2.0
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 **_new_**
* **github.com/grpc-ecosystem/grpc-gateway**                                       v1.16.0 **_new_**
* **github.com/hashicorp/errwrap**                                                 v1.0.0 -> v1.1.0
* **github.com/hashicorp/go-multierror**                                           v1.0.0 -> v1.1.1
* **github.com/imdario/mergo**                                                     v0.3.11 -> v0.3.12
* **github.com/intel/goresctrl**                                                   v0.2.0 **_new_**
* **github.com/json-iterator/go**                                                  v1.1.10 -> v1.1.12
* **github.com/moby/spdystream**                                                   v0.2.0 **_new_**
* **github.com/moby/sys/mountinfo**                                                v0.4.1 -> v0.5.0
* **github.com/moby/sys/signal**                                                   v0.6.0 **_new_**
* **github.com/moby/sys/symlink**                                                  v0.1.0 -> v0.2.0
* **github.com/modern-go/reflect2**                                                v1.0.1 -> v1.0.2
* **github.com/opencontainers/image-spec**                                         v1.0.1 -> 693428a734f5
* **github.com/opencontainers/runc**                                               v1.0.0-rc93 -> v1.1.0
* **github.com/opencontainers/runtime-spec**                                       e6143ca7d51d -> 1c3f411f0417
* **github.com/opencontainers/selinux**                                            v1.8.0 -> v1.10.0
* **github.com/pelletier/go-toml**                                                 v1.8.1 -> v1.9.3
* **github.com/prometheus/client_golang**                                          v1.7.1 -> v1.11.0
* **github.com/prometheus/common**                                                 v0.10.0 -> v0.30.0
* **github.com/prometheus/procfs**                                                 v0.6.0 -> v0.7.3
* **github.com/satori/go.uuid**                                                    v1.2.0 **_new_**
* **github.com/sirupsen/logrus**                                                   v1.7.0 -> v1.8.1
* **github.com/spf13/pflag**                                                       v1.0.5 **_new_**
* **github.com/stretchr/testify**                                                  v1.6.1 -> v1.7.0
* **github.com/vishvananda/netlink**                                               f5de75959ad5 **_new_**
* **github.com/vishvananda/netns**                                                 2eb08e3e575f **_new_**
* **go.etcd.io/bbolt**                                                             v1.3.5 -> v1.3.6
* **go.opencensus.io**                                                             v0.22.3 -> v0.23.0
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.3.0 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 **_new_**
* **go.opentelemetry.io/otel/trace**                                               v1.3.0 **_new_**
* **go.opentelemetry.io/proto/otlp**                                               v0.11.0 **_new_**
* **golang.org/x/crypto**                                                          0c34fe9e7dc2 -> 32db794688a5
* **golang.org/x/net**                                                             e18ecbb05110 -> fe4d6282115f
* **golang.org/x/oauth2**                                                          bf48bf16ab8d -> 2bc19b11175f
* **golang.org/x/sync**                                                            09787c993a3a -> 036812b2e83c
* **golang.org/x/sys**                                                             47abb6519492 -> 1d35b9e2eb4e
* **golang.org/x/term**                                                            7de9c90e9dd1 -> 6886f2dfbf5b
* **golang.org/x/text**                                                            v0.3.4 -> v0.3.7
* **golang.org/x/time**                                                            3af7569d3a1e -> 1f47c861a9ac
* **google.golang.org/appengine**                                                  v1.6.5 -> v1.6.7
* **google.golang.org/grpc**                                                       v1.27.1 -> v1.43.0
* **google.golang.org/protobuf**                                                   v1.27.1 **_new_**
* **gopkg.in/yaml.v3**                                                             9f266ea9e77c -> 496545a6307b
* **k8s.io/api**                                                                   v0.20.6 -> v0.22.5
* **k8s.io/apimachinery**                                                          v0.20.6 -> v0.22.5
* **k8s.io/apiserver**                                                             v0.20.6 -> v0.22.5
* **k8s.io/client-go**                                                             v0.20.6 -> v0.22.5
* **k8s.io/component-base**                                                        v0.20.6 -> v0.22.5
* **k8s.io/cri-api**                                                               v0.20.6 -> v0.23.1
* **k8s.io/klog/v2**                                                               v2.4.0 -> v2.30.0
* **k8s.io/utils**                                                                 67b214c5f920 -> cb0fa318a74b
* **sigs.k8s.io/structured-merge-diff/v4**                                         v4.0.3 -> v4.1.2

Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)

containerd 1.6.0-rc.1

Welcome to the v1.6.0-rc.1 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

### Highlights

#### Runtime

* **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744))
* **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813))
* **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817))
* **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918))
* **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011))
* **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031))
* **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206))
* **Update runc to v1.1.0** ([#6375](https://github.com/containerd/containerd/pull/6375))

#### Windows

* **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131))
* **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778))

#### CRI

* **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695))
* **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439))
* **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619))
* **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627))
* **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964))
* **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113))
* **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111))
* **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130))
* **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170))
* **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320))

#### Other

* **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606))
* **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610))
* **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965))
* **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122))
* **Update introspection service to show GRPC plugins** ([#6432](https://github.com/containerd/containerd/pull/6432))

#### Client

* **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709))
* **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Phil Estes
* Akihiro Suda
* Wei Fu
* Maksym Pavlenko
* Sebastiaan van Stijn
* Kazuyoshi Kato
* Mike Brown
* Michael Crosby
* Claudiu Belu
* Daniel Canter
* haoyun
* Stefan Berger
* Gabriel Adrian Samfira
* Brian Goff
* zounengren
* AdamKorcz
* Adelina Tuvenie
* Kohei Tokunaga
* Davanum Srinivas
* Nashwan Azhari
* Samuel Karp
* Shiming Zhang
* Enrico Weigelt, metux IT consult
* Markus Lehtonen
* Alakesh Haloi
* Hajime Tazaki
* Iceber Gu
* Kevin Parsons
* Aditi Sharma
* David Porter
* Gijs Peskens
* Brandon Lum
* Cody Roseborough
* Danielle Lancashire
* Jacob MacElroy
* dependabot[bot]
* ningmingxiao
* wanglei
* Alexandre Peixoto Ferreira
* Fabiano Fidêncio
* Furkan Türkal
* Jiaming Xu
* Kir Kolyshkin
* Miao Wang
* Neil Johnson
* Paul "TBBle" Hampson
* Priyanka Saggu
* Romain Aviolat
* Samuel Ortiz
* Sunghoon Kang
* Takumasa Sakao
* Tobias Klauser
* Tõnis Tiigi
* Zhiyu Li
* Alexander Minbaev
* Alexey Ivanov
* Artem Khramov
* Aurelien Lun-Sin
* Ben Hutchings
* Cory Bennett
* Da McGrady
* Dan Williams
* Eng Zer Jun
* Eric Ernst
* Ethan Chen
* Fupan Li
* Gaurav Gahlot
* Gunju Kim
* Jacob Blain Christen
* James Sturtevant
* Jan Klippel
* Jayme Howard
* Jiajun Jiang
* Jintao Zhang
* Justin Terry
* Kaijie Chen
* Kante
* Kern Walster
* Kitt Hsu
* Lantao Liu
* Ma Xinjian
* Manabu Sugimoto
* Manuel Alejandro de Brito Fontes
* Mark Rossetti
* Markus Lippert
* Mikko Ylinen
* Ng Yang
* Nicolas Chariglione
* Ning Li
* Olli Janatuinen
* Peri Thompson
* Quan Tian
* Radostin Stoyanov
* Rui Lopes
* Sambhav Kothari
* Sebastian Hasler
* Sergey Kanzhelev
* Yang Yang
* Yifan Yuan
* Zilong Wang
* Zufar Dhiyaulhaq
* botieking98
* chenxiaoyu
* jayonlau
* jerryzhuang
* linrunlong
* scuzhanglei
* wangzhan
* Étienne Guesnet

### Changes
<details><summary>984 commits</summary>
<p>

* Prepare release notes for v1.6.0-rc.1 ([#6462](https://github.com/containerd/containerd/pull/6462))
  * Prepare release notes for v1.6.0-rc.1
* Add support for skipping non-dist blob push ([#6424](https://github.com/containerd/containerd/pull/6424))
  * ctr: flag to toggle non-distributable blob push
  * Add image handler to skip non-distributable blobs.
* Compile binaries for go1.16 and go1.17 in CI ([#6461](https://github.com/containerd/containerd/pull/6461))
  * Compile binaries for go1.16 and go1.17 in CI
* services/introspection: fix plugin caching to show grpc plugins ([#6432](https://github.com/containerd/containerd/pull/6432))
  * Update caching logic to avoid map access
  * services/introspection: support to show introspection grpc service
* Integration: Change to Windows Server 2022 build number constant ([#6458](https://github.com/containerd/containerd/pull/6458))
  * Integration: Change to Windows Server 2022 build number constant
* Update kubernetes vendor to 0.22.5 ([#6460](https://github.com/containerd/containerd/pull/6460))
  * Update kubernetes vendor to 0.22.5
* Fix rdt build tags for go 1.16 ([#6459](https://github.com/containerd/containerd/pull/6459))
  * Fix rdt build tags for go 1.16
* Remove submodule go mod ([#6439](https://github.com/containerd/containerd/pull/6439))
  * Remove api go submodule
  * Update makefile to remove API submodule
* go.mod: Update hcsshim to v0.9.2 ([#6453](https://github.com/containerd/containerd/pull/6453))
  * go.mod: Update hcsshim to v0.9.2
* update runc to v1.1.0 ([#6375](https://github.com/containerd/containerd/pull/6375))
  * go.mod: github.com/opencontainers/runc v1.1.0
  * update runc binary to v1.1.0
* tracing: fix OTLP tracer's initialization ([#6443](https://github.com/containerd/containerd/pull/6443))
  * tracing: fix OTLP tracer's initialization
* gha: run CodeQL scan on pull requests ([#6386](https://github.com/containerd/containerd/pull/6386))
  * gha: run CodeQL scan on pull requests
* Do not automatically inject client traces ([#6445](https://github.com/containerd/containerd/pull/6445))
  * Do not automatically inject client traces
* [containerd-stress] delete useless code ([#6451](https://github.com/containerd/containerd/pull/6451))
  * delete useless code
* Revert "Add shared content label to namespaces" ([#6440](https://github.com/containerd/containerd/pull/6440))
  * Revert "Add shared content label to namespaces"
* Add ppc64 support for test images ([#6435](https://github.com/containerd/containerd/pull/6435))
  * Add ppc64 support for test images
* ctr: Unify the delete subcommand alias ([#6427](https://github.com/containerd/containerd/pull/6427))
  * ctr: Unify the delete subcommand alias
* Prepare release notes for v1.6.0-rc.0 ([#6431](https://github.com/containerd/containerd/pull/6431))
  * Prepare release notes for v1.6.0-rc.0
* Integration: Switch to using `auth` Gcloud action in Windows workflow. ([#6397](https://github.com/containerd/containerd/pull/6397))
  * Integration: Switch to `upload-cloud-storage` Gcloud action.
  * Integration: Switch to using `auth` Gcloud action in Windows workflow.
* remove io/ioutil ([#6426](https://github.com/containerd/containerd/pull/6426))
  * remove io/ioutil
* test: e2e node COS cgroupv2 script ([#6418](https://github.com/containerd/containerd/pull/6418))
  * test: e2e node COS cgroupv2 script
* Integration: Enable CRITest on Windows 2022. ([#6378](https://github.com/containerd/containerd/pull/6378))
  * Enable critest tests on Windows Server 2022.
  * Parametrize CRITest test images in Windows Periodic workflow.
* Update error message for apparmor parser ([#6415](https://github.com/containerd/containerd/pull/6415))
  * Update error message for apparmor parser
* Fix wrong log message ([#6419](https://github.com/containerd/containerd/pull/6419))
  * Fix wrong log message
* Followup errors change ([#6414](https://github.com/containerd/containerd/pull/6414))
  * Fix incorrect error wrapped when closing ingest file
  * Fix seek error used without nil check
  * Fix followup items from errors replacement
* Updates CRI API & Kubernetes to 1.23 ([#6351](https://github.com/containerd/containerd/pull/6351))
  * Update k/k to 1.23.0
* Updating adoption of containerd for AKS ([#6416](https://github.com/containerd/containerd/pull/6416))
  * Updating adoption of containerd for AKS
* update the adoption status of containerd in GKE ([#6413](https://github.com/containerd/containerd/pull/6413))
  * update the adoption status of containerd in GKE
*  go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} ([#6410](https://github.com/containerd/containerd/pull/6410))
  * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt}
* replace github.com/pkg/errors with native errors ([#6366](https://github.com/containerd/containerd/pull/6366))
  * feat: replace github.com/pkg/errors to errors
* corrected link in cri architecture documentation ([#6412](https://github.com/containerd/containerd/pull/6412))
  * corrected link in cri architecture documentation
* remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token") ([#6396](https://github.com/containerd/containerd/pull/6396))
  * remotes/docker: allow fetching "refresh token" (aka "identity token")
  * remotes/docker/config: allow setting custom AuthorizerOpts
* Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407))
  * Prepare release notes for v1.6.0-beta.5
* Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292))
  * Integration: Check GCP secrets on Windows CI artifact upload.
* Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c)
  * only relabel cri managed host mounts
* Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439))
  * cri: add ignore_rdt_not_enabled_errors config option
  * Update dependencies
  * cri: annotations for controlling RDT class
  * tasks: add Linux rdt support
  * cmd: add --rdt-class command line option
  * oci: implement WithRdt
* fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391))
  * fix: use _ for consistency
* content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403))
  * content/local: use syscall.Timespec.Unix
* docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207))
  * docs: document the runtime shim plugin config options
  * docs: use proper markdown lists in containerd-config.toml.5.md
* fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304))
  * fix(ctr): enable networking for Windows containers
* Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394))
  * Fix $(PWD) issue for Windows makefile
* only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395))
  * fix: only test abstract unix socket on linux
* Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390))
  * Expect ErrorNotFound on Windows after Kill()
  * Replace tskill with taskkill
* fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291))
  * fix when kernel version < 4.13rc1 by using index=off cause overlay test error
* Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384))
  * Fix no-daemon flag for integration/client tests
* Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122))
  * Enable lazy init for ext4 with devicemapper
* Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385))
  * Fix flakiness on Windows for list stats
* cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347))
  * cri-integration: Add Windows default paths
* Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383))
  * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0
  * Use insecure.NewCredentials instead of grpc.WithInsecure
  * Upgrade OpenTelemetry dependencies
* Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322))
  * Fix default makefile target for windows
* Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379))
  * Disable TestContainerHook on Windows
* seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372))
  * seutil: Fix setting the "container_kvm_t" label
* Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350))
  * Remove Windows integration testing for 2004.
* OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308))
  * OCI: Mount (accessible) host devices in privileged rootless containers
  * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch
* cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320))
  * fixup: check for swap accounting
  * fixup: handle diff between cgroupsv1 and v2
  * cri: add support for configuring swap
* Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275))
  * Replace find with native Go code
  * Enable TestVolumeOwnership on Windows
* Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296))
  * Prepare release notes for v1.6.0-beta.4
* refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358))
  * feat: Errorf usage
* Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021))
  * Use task plugin for runc shim
  * Seperate shim manager and task service
  * Split runc shim into plugin components
  * Add shutdown package
* CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155))
  * cri, sandbox: pass sandbox resource details if available, applicable
* medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354))
  * medatada: make namespaces' deletion error less cryptic
* ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373))
  * add-list-stat: return container list if filter is nil
* integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369))
  * integration: deflake TestContainerdRestart
* feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225))
  * feat: support custom timeout for blot open
* Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333))
  * Update Go to 1.17.5
* cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332))
  * cri/server: use consistent alias for pkg/ioutil
* Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364))
  * Disable restart monitor test in Windows
* Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338))
  * Don't fail-fast on Windows integration tests
* Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355))
  * Run windows parallel integration test as short
  * Update restart monitor test to output daemon logs on failure
* go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263))
  * images/converter: remove deprecated types
  * go.mod: update image-spec to latest (v1.0.3-dev)
* Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353))
  * Skip WithAdditionalGIDs on Darwin
* Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303))
  * Use RFC3339 format so rg cleanup works
* update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330))
  * go.mod: github.com/opencontainers/runc v1.0.3
  * update runc binary to v1.0.3
* Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329))
  * Allow native snapshotter on Darwin
* Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328))
  * Do not use `go get` to install executables
* Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326))
  * Include runtime v2 in default builtins
* Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314))
  * Add Windows Server 2022 CI runs
* Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324))
  * Use a single RUN command
  * Set explicit ACL on test files
* integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311))
  * integration: align tags of test images
* Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325))
  * Set CONTAINERD_ROOT in Windows cri-integration
* export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312))
  * export oci.DeviceFromPath()
* Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321))
  * Update continuity dependency
  * Update volume test images
* Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201))
  * Add error logging on cleanup
  * Update TestRestartMonitor expected time check
* Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319))
  * Move volume images from gcr to ghcr
* Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301))
  * Revert shim plugin migration
* Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317))
  * Add permissions
  * Authenticate against ghcr.io
* oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306))
  * oci/deviceFromPath(): correctly check device types
* Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315))
  * Skip TestExportAndImportMultiLayer on Windows
* Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290))
  * Add image build workflow
* Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286))
  * Integration: Separate Windows Periodic Tests workflow trigger.
* Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274))
  * Build volume test images on Windows
* Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297))
  * Add VMware TKG & TCE to Containerd adopters
* Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293))
  * Vagrantfile: update to Fedora 35
* Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269))
  * Update README.md repo->org
* Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278))
  * Fix executable file not found when restoring shims
* ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271))
  * ctr/snapshots/diff: don't show the media-type in output
* ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289))
  * ctr: Add Linux Capabilities control flags
* integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270))
  * integration: add stats result in error message
* releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287))
  * docs: mark 1.4 as Extended
  * docs: fix RELEASES.md gRPC API anchor
* feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284))
  * feat: skip ci for fork
* content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280))
  * content/local: Close the file if Seek fails
* Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268))
  * Integration: Remove explicit version passing to `azure/CLI`.
* Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276))
  * Fix wrong make target on documentation
* fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272))
  * fix: server error return
* Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267))
  * Prepare release notes for v1.6.0-beta.3
  * Update API version in go.mod
  * Update release name to use consistent format
* feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254))
  * fix: make max recv/send msg size setting default
  * feat:support custom callopts on client side
* [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258))
  * [CRI] Fix panic when registry.mirrors use localhost
* Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241))
  * Add support for TMP override on toml
* CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170))
  * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options
* Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35)
  * schema1: reject ambiguous documents
  * images: validate document type before unmarshal
* [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111))
  * [cri] add sandbox and container latency metrics
* Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255))
  * Generalize Windows CI setup script for any user.
  * Standardize cmdlet capitalization in Windows CI scripts.
* feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253))
  * feat: use rwmutex instead
* Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206))
  * Fix package alias
  * Support custom runtime path when launching tasks
  * Add runtime path in CreateTaskRequest
* Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246))
  * Close file if permission modification fails
* release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250))
  * release: change tar name to match prior releases
* Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237))
  * Fix wrong error returned for image index lookup
* Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221))
  * Fix containerd fails to pull OCI image with non-`http(s)://` urls
* Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223))
  * Prepare release notes for v1.6.0-beta.2
* Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196))
  * Rename release dockerfile to omit distro name
  * release: improve dockerfile
  * Add arm64 to releases
* use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236))
  * use write lock when updating container stats
* go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230))
  * go.mod: Bump hcsshim to v0.9.1
* go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228))
  * go.mod: Bump ttrpc to 1.1.0
* go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213))
  * go.mod: github.com/moby/sys/mountinfo v0.5.0
  * go.mod: github.com/moby/sys/signal v0.6.0
  * go.mod: github.com/moby/sys/symlink v0.2.0
  * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
* cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222))
  * cleanup: add more description on comment
* Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211))
  * Update Go to 1.17.3
* CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214))
  * CI: bump up crun: 1.0 -> 1.3
* Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205))
  * Pin az CLI version
* Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918))
  * Address PR comments
  * Fix build after rebase
  * Migrate task directory
  * Expose shim process interface
  * Fix after rebase
  * Cleanup shim loading
  * Move shim restore to a separate file
  * Fix backward compatibility with old task shims
  * Add plugin dependency between shim and shim services
  * Rework task create and cleanup flow
  * Add task manager
  * Rename task manager to shim manager
* [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113))
  * Implement CRI container and pods stats
  * Vendor latest k8s.io/cri-api and netlink
* test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200))
  * test: Add grace period for restart monitor test
* integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179))
  * integration: Enables TestRuntimeHandler for Windows
* Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171))
  * Add mkdir on Dockerfile
* sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189))
  * sys/reaper: avoid leaky goroutine when exec timeout
* adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184))
  * adds additional debug out to timebox cni setup
* converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176))
  * converter: Allow hooks during image conversion
* compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177))
  * compression: support zstd with skippable frame
* integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182))
  * integration: Enables TestVolumeCopyUp for Windows
*  integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121))
  * integration: Enable some tests for Windows (part 2)
* integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085))
  * integration: Enable some tests for Windows
* Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125))
  * feat(doc): update to version 2 syntax
* fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166))
  * fix shim reaper wait command execute blocked
* content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145))
  * content: close stream after commit request
* Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165))
  * Adding scope tests for ParseAuthHeader
  * Adding tests for GenerateTokenOptions
  * Generate token options with each scope as a separate string.
* vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167))
  * vendor: Updates go-cni
* commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159))
  * commands: Enables task metrics for Windows
* vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149))
  * vendor: update moby/sys for darwin support
* Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144))
  * Prepare release notes for v1.6.0-beta.1
  * Update mailmap
  * Update api vendor
* bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136))
  * bump CNI to spec v1.0.0
* Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992))
  * Inject otel traces to grpc client.
* client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142))
  * client: expose (*image).platform
* Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128))
  * feat(doc): add Core Scheduling documentation
* Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130))
  * Ensure namespace is proxied to grpc/ttrpc plugins
* fix #6054  MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109))
  * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
* Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124))
  * Output a warning for label image labels instead of erroring
* Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132))
  * Fix spelling mistake in Windows snapshotter
* Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126))
  * Windows: Cleanup rm- prefixed layers
* cleanup deprecated package  `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118))
  * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
* close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115))
  * close Writer after use which may leak mem
* Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778))
  * Adds Windows resource limits support
* Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098))
  * Prepare release notes for v1.6.0-beta.0
* Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105))
  * Add error message to in TestContainerdRestart integration test
* Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110))
  * Fix typo in the NewContainer function documentation
* Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104))
  * Update cgroups to v1.0.2
* btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100))
  * test: check file content after mount
* Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107))
  * Update test timeout based on recent cancellations
* Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106))
  * Remove extra test_teardown
  * Check the pid in cri test teardown
* add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011))
  * fix integration client vendor
  * add runc shim support for sched core
* integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579))
  * integration: Enables Windows containerd restart test
* vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099))
  * vendor: Bump hcsshim to 0.9.0
* [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695))
  * Add CNI conf based on runtime class
* Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102))
  * Update Go to 1.17.2
* integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933))
  * integration: Adds test for multilayer image import
* runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031))
  * runtime: should fail fast if dial error on shim
* Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034))
  * Windows: Fixes Windows containers with image volumes
* run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094))
  * run `gofmt` with Go 1.17
* pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088))
  * pkg/cap: remove an outdated comment
* Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066))
  * Update go otel 1.0.1
* Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086))
  * Update ADOPTERS.md with additional uses
* modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082))
  * modify the way for checking cos
* Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915))
  * Fuzzing: Add 4 fuzzers + small modifications
* Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081))
  * Pin mingw to version 10.2.0
  * Update to golang 1.17.1
  * Install nssm
* Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq)
  * btrfs: reduce permissions on plugin directories
  * v1 runtime: reduce permissions for bundle dir
  * v2 runtime: reduce permissions for bundle dir
* task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079))
  * task service: return known error type
* refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973))
  * refactor: move from io/ioutil to io and os package
* fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076))
  * fix: update vendor
  * cleanup: import from k8s.io/utils/clock/testing instead
  * cleanup: import from k8s.io/utils/clock instead
* feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069))
  * feat: enable cri remote client to call with grpc calloptions
* cleanup k8s ansible yaml (carry for #5713)  ([#6074](https://github.com/containerd/containerd/pull/6074))
  * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>)
* feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070))
  * fix: wrong flag type
  * feat: support import image for specific platform
* Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065))
  * Update mirror images to take target image name
* fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059))
  * fix: make exec-id flag required in exec command
* images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052))
  * images: enable converter to uncompress zstd
* replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922))
  * replace deprecated function
* integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853))
  * integration: Adds Windows HostProcess tests
* Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047))
  * Fix main branch build is broken
* Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003))
  * Add open telemetry logging hook for logrus
* Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023))
  * Change oci.WithUser behavior for LCOW
* switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946))
  * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
* import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926))
  * import: Raise error if the imported image is filtered out
* Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043))
  * Fix panic in metadata content writer on copy error
* Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001))
  * Move tracing to plugin
* ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916))
  * ctr: Fixes Windows image import
* update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017))
  * go.mod: update opentelemetry modules to v1.0.0
* fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979))
  * fix error string format
* Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036))
  * Add github action to mirror image
* add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027))
  * add current process state to the error message
*  FreeBSD: fix tar headers & the nil check on getxattr  ([#5991](https://github.com/containerd/containerd/pull/5991))
  * FreeBSD: fix tar headers & the nil check on getxattr
* gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035))
  * gha: collect Vagrant VMs' IP addresses
* bump continuity and console version  that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033))
  * bump continuity and console version that remove pkg/errors
* import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997))
  * import: Add option to skip creating digest image
* ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998))
  * ctr namespaces: improve usage string
* bump console version to v1.0.3 that remove pkg/errors  ([#6028](https://github.com/containerd/containerd/pull/6028))
  * bump console version to v1.0.3 that remove pkg/errors
* Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032))
  * Use github images for integration tests
* Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995))
  * Fix typo
* Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012))
  * Enable image config labels in ctr and CRI container creation
* Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970))
  * Make sure exit signals trigger an exit during init
* task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974))
  * task delete: Closes task IO before waiting
* CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985))
  * CI: bump up crun to 1.0
* seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982))
  * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990))
  * Update to Go 1.17.1
* CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987))
  * CI: Switch to available latest images
* add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610))
  * add xfs support to devicemapper snapshotter
* Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956))
  * Fixes task kill --force on Windows
* Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817))
  * Add support for shim plugins
* vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976))
  * vendor: update continuity for darwin support
* replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906))
  * replace uses of os/exec with golang.org/x/sys/execabs
* complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972))
  * Additional integration tests for pulling image with labels
* Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966))
  * Fix content copy to not ignore unexpected EOF
* add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964))
  * add ip_pref CNI options for primary pod ip
* cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939))
  * cri: add devices for privileged container
* sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954))
  * sandbox: Allows the sandbox to be deleted in NotReady state
* pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969))
  * pin protobuild version to tag
* Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965))
  * use a const metric for build_info
  * Add metric exposing build version&revision
* Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627))
  * add cri test case
  * feature: add field LinuxContainerResources.Unified on cri
* integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861))
  * integration: investigate TestRestartMonitor's failure
* Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917))
  * Address issue forms feedback
  * Use issue forms for bug reporting
* cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945))
  * cri: patch update image labels
* darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936))
  * darwin: runtime support
  * darwin: use the default values for socketRoot variable
* Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858))
  * Update RELEASES.md
* archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949))
  * archive: Add WriteDiff error logs
* replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958))
  * replace deprecated Dail with DailContext
* Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951))
  * Add WS2022 support in Windows Periodic tests
* Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943))
  * content fuzzer: Clean up tempdir
* using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944))
  * using Hosts replace deprecated field
* fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947))
  * fix document non-synchronous in crictl.md
* go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929))
  * go.mod: Update hcsshim to v0.8.21
* Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937))
  * Makefile.linux: build on riscv with PIE
* Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932))
  * Fix cwd flag for `ctr tasks exec`
* Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927))
  * Update Pause image in tests & config
* cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122))
  * cri: Devices ownership from SecurityContext
* Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921))
  * Fix pull fails on unexpected EOF
* Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845))
  * Adding testing of two devices
  * Fix dir support for devices V3 (#4847)
* windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914))
  * windows: The DefaultSpec platform should match the Default matcher
* Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865))
  * Add RunAsUserName functionality for the Windows Pod Sandbox Container
* bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899))
  * go.mod: update runc to v1.0.2
  * update runc binary to v1.0.2
* Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903))
  * Run `go fmt` with Go 1.17
* go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905))
  * go.mod: github.com/pelletier/go-toml v1.9.3
* cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902))
  * cri: filter selinux xattr for image volumes
* Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131))
  * Added windows hostProcess cni skip
* script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897))
  * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
* Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889))
  * Bump integration timeout to 35 min
  * Update to Go 1.17
* integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896))
  * integration: fix TestContainerPids
* [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891))
  * [ctr] add HOSTNAME env for host network
* Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886))
  * Fuzzing: Add fuzzer
* Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884))
  * Add env for SystemdCgroup driver
* Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878))
  * Allow expanded DNS configuration
* Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863))
  * Fuzzing: Add 4 fuzzers
* Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813))
  * Cleanup v2 shim
* Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840))
  * Use http.Get to download binaries instead of exec.Command
  * Fuzzing: Add experimental version of container fuzzer
* add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846))
  * add cpu-shares to ctr
* docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847))
  * docs: rename main to master
* content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849))
  * content: return the error with its timestamp
* Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857))
  * Fix bad `make protos` failure
* replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851))
  * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
* docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856))
  * docs: remove FOSSA's badge
* BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850))
  * BUILDING.md: remove some bits about building runc
  * BUILDING.md: markdown fixes
* go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836))
  * go.mod: update kubernetes to v1.22.0
* [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852))
  * Add trap to cri-integration test script
* docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848))
  * docs: list all snapshotter-related build flags
* Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835))
  * Move plugin context events into separate plugin
* Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839))
  * Fix Linux CI Linter using go 1.15.14
* Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842))
  * Update Go to 1.16.7
* Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838))
  * Cleanup CI
* Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834))
  * Remove redundant build tags
* Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830))
  * Change default directories on Darwin
* [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731))
  * [otel-tracing] vendor and go modules changes
  * [otel-tracing] Initial opentelemetry support
  * remove go 1.13 from containerd
* Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829))
  * Fuzzing: Fix for OSS-fuzz issue 36825
* Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825))
  * Fuzzing: Add two more fuzzers
* scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760))
  * scripts: declare ROOT closer to where it's used, and some DRY changes
  * scripts: add missing quotes, and minor linting issues
  * test/build-utils.sh: remove support for Debian Jessie
* platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821))
  * platforms: Format(): use path.Join() instead of joinNotEmpty()
* Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823))
  * Fuzzing: Remove panics of container_fuzzer
* Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785))
  * Change protoc link
  * Split fuzzer to two fuzzers
  * Fuzzing: Add container fuzzer
* runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746))
  * runtime: fix the issue of create new socket with abstract address
* mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809))
  * mergo: Upgrade to 0.3.12 to fix panic
* ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802))
  * ci: install criu from PPA
* Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144))
  * Split release steps into multiple tasks
  * Update release workflow to upload binary without CNI
* Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725))
  * Enable critest on Windows
* Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792))
  * Script to check if entries in go.mod files are in sync
* Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043))
  * Add shared content label to namespaces
* platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784))
  * platforms: add "ios" as known OS, "loong64" as known ARCH
* Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804))
  * Updates the location of protobuf downloads in docs
* Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803))
  * Update protobuf install to use correct repository
* overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624))
  * overlay: add an optional label of upperdir location of each snapshot
* Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693))
  * Support SIGRTMIN+n signals
* respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800))
  * respect context timeout in shim binary call
* Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716))
  * Introduce a new go module - containerd/api for use in standalone clients
* grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606))
  * grpc config add options tcp_tls_ca
* integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162))
  * integration: Windows volume-copy-up images
* add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795))
  * add CRI support matrix to RELEASES.md
* adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794))
  * adding a little more clarity
* update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793))
  * update gotestsum to v1.7.0
* Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756))
  * Discard blocks when removing a thin device
* Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590))
  * Makefile: pass build tags to manpage build process
  * Makefile: fix tags parameter computation
* Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744))
  * Add runtime label to metrics
* interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745))
  * interface about shim build check
* integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775))
  * integration: log all processes to investigate the test failure
* Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779))
  * Fuzzing: Add archive fuzzer
* Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687))
  * Add docker fetch fuzzer
* Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735))
  * Support custom compressor for walking differ
* remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770))
  * remotes/docker/pusher.go: Fix missing Close()
* remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769))
  * remotes/docker/fetcher.go: Fix missing Close()
* Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771))
  * Update cpuguy83/go-md2man binary to v2.0.1
* Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750))
  * Dockerfile.test: build containerd in separate stage
  * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
  * Dockerfile.test: clean up apt indexes after installing
  * Dockerfile.test: build critools in a separate stage
  * Dockerfile.test: build cni in a separate stage
  * Dockerfile.test: standard directory to collect build aftifacts
  * Dockerfile.test: split dev stage, and optimize order
  * Dockerfile.test: skip curl, gcc, git and make install
  * install-critools: make sure DESTDIR exists
* update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754))
  * update gotestsum to current master
* Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w)
  * Add test for archive breakout test for lchmod
* Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755))
  * Use systemd cgroup driver for cgroupv2 tests
* update runc  to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751))
  * go.mod: runc v1.0.1
  * update runc binary to v1.0.1
* runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737))
  * runtime: runc v2: remove redundant validation
* Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727))
  * Move loop check to before sleep
  * Add timestamp to flaky restart monitor test
* Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722))
  * integration/client: go mod tidy
  * Update Go to 1.16.6
* client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447))
  * client: surface a connection error more clearly
* Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712))
  * Fix missing Body.Close() calls on push to docker remote
* remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710))
  * remove pkg/cri/platforms package
* Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709))
  * Allow WithServices to use custom implementations
* [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673))
  * [Vendor] Update hcsshim to 0.8.18
* test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578))
  * test integration: Adds a test that restarts a failed container
* [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619))
  * use fu wei's suggeted interface pick for marshaling
  * add alpha version
  * move up to CRI v1 and support v1alpha in parallel
* gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682))
  * gha: make release workflow work in forks
* Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666))
  * Add unit test for plugin
* Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700))
  * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
* Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676))
  * Add support for registry host path override
  * Update documenation for OCI distribution 1.0
* archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702))
  * Cleanup lchmod logic in archive
* Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571))
  * Install specific golang version in Windows CI.
* Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660))
  * feat: Add snapshotter label to the new snapshot for container.
* snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655))
  * snapshot/devmapper: log exported methods correctly
* Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662))
  * Makefile: fix DESTDIR and PREFIX concatenation
* Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287))
  * tests: Use EnsureImageExists for image pulling
  * tests: Refactors PodSandbox creation
* move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641))
  * un-export mount.FMountat
  * move sys.FMountat() into mount package
* sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640))
  * sandbox: send pod UID to CNI plugins as K8S_POD_UID
* sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639))
  * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
* content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633))
  * content/local: inline sys.StatATimeAsTime()
* allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636))
  * allow multi gpu to be specified via ctr
  * go.mod: runc v1.0.0
  * update runc binary to v1.0.0 GA
* fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629))
  * fixing some doc links
* Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623))
  * Sync integration/go.mod with root go.mod
* archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615))
  * archive: Expose ChangeWriter to allow customized diff computing
* CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625))
  * CI: Switch to available latest images
  * fix deprecation config for default runtime
* Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614))
  * Re-enable criu in main integration runs
* runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617))
  * runtime,v2: Enable debug when containerd is on debug+ log level
  * github.com/golang/protobuf/proto is deprecated
  * Update github.com/golang/protobuf from v1.3.5 to v1.4.3
  * Update google.golang.org/grpc from v1.27.1 to v1.38.0
  * Increase golangci-lint timeout
* ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611))
  * command line flags of setting container rootfs propagation
  * add cgroupv2 setup for cos with a flag
* Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612))
  * Update gotestsum to add timestamps to junit output
* Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604))
  * Allow to pass --no-cgroup option to nvidia-container-cli
* Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577))
  * Makefile: FHS conformant manpage installation pathes
* Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594))
  * Add proper Go version before project checks
* Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580))
  * Enable cri-integration in Windows Periodic Tests
* adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573))
  * adds explanation for seccomp unset/unconfined default vs runtime default
* Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569))
  * Fix cleanup context of teardownPodNetwork
* update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572))
  * update integration/client go.sum
* Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566))
  * Revert diff/walking error change
* Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562))
  * Update opencontainers/selinux to v1.8.2
* fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565))
  * fix invalid validation error checking
* diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551))
  * diff/walking: fix defer cleanup
* Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559))
  * Add creation timestamp to RG
* Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328))
  * Fix error case in Windows layer cleanup
* Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422))
  * Small typo fix "reimporst"
  * Use DeactivateLayer to recover layers that we cannot rename
* tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284))
  * tests: Symlink volume tests
* Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535))
  * Makefile: fix DESTDIR environment variable behaviour
* Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560))
  * Change Wrapf of non-error to an actual error
  * Install apparmor parser for arm64 environment
* scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536))
  * scrub the stale TODO
* docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554))
  * docs: explicitly mention containerd's Prometheus path
* integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553))
  * integration: Cleanup containerd on test teardown
* docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548))
  * docs/cri: update ocicrypt link
  * docs/cri: fix broken links
* Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544))
  * Update Windows periodic tests
* Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165))
  * Schedule Windows job daily after midnight.
  * Update windows-periodic.yml
  * Add CI periodic Windows Jobs.
* Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273))
  * Rename atomicWrite to writeToCompletion
* Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539))
  * Do not run btrfs tests if btrfs kernel module is not loaded
* Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533))
  * Fix incorrect UA used for registry authentication
* ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531))
  * ctr: parse mount options with embedded = character
* Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472))
  * Add ruleset=4 option
  * Remove mountpoints not commonly mounted on FreeBSD
  * Add copyright header & make sure compilation succeeds on all platforms
  * Fix mounts for FreeBSD
* ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527))
  * ctr: exec handle pty resize after Start
  * ctr: exec setup IO with console
* Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534))
  * Makefile: use $@ for target file names
* Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528))
  * Fix small typo
* Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519))
  * update the link
  * Don't check for apparmor_parser to be present
* Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520))
  * Remove useless lines
* Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509))
  * fixed typos
* Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275))
  * Try next mirror in case of non-404 errors, too
* bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514))
  * bump runc version to v1.0.0-rc95
* update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511))
  * update runc binary to v1.0.0-rc95
* Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508))
  * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0
* Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507))
  * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
* Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493))
  * Makefile: allow overriding install command via environment
* tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163))
  * tests: Adds support for Windows cri-integration tests
* Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504))
  * Update docker resolver to authorize redirects
* bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505))
  * bump hcsshim version to v0.8.17
* Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498))
  * just release ctd-decoder not ctr-enc
  * Merge remote-tracking branch 'upstream/master'
  * Pin integration test image for alpine
* cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313))
  * tests: Prepull images used in tests
* plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440))
  * plugin: optimize the check for the last registration
* metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465))
  * metadata: modify NewLeaseManager to return leases.Manager
* Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100))
  * Skip TLS verification for localhost
  * Merge remote-tracking branch 'upstream/master'
* Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492))
  * Makefile: make sure manpages are built before install-man
* adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309))
  * adds credentials description
  * adds description for hosts.toml
* Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459))
  * Prepare default branch rename
  * Merge remote-tracking branch 'upstream/master'
* Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473))
  * Update vendored runc to v1.0.0.0-rc94
  * Update the runc binary used with containerd to runc v1.0.0-rc94
* Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468))
  * Fix content.ReaderAt close
* Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466))
  * Update releases doc with updated support timeline
* tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452))
  * tests: add test for adaptor
* Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450))
  * Makefile: allow overriding go command by environment
* update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462))
  * update to new cri-tools make install
* Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461))
  * Update Go to 1.16.4
  * Merge remote-tracking branch 'upstream/release/1.5'
* [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457))
  * go.mod: cut circular dependency on github.com/containerd/containerd
  * integration/client: go mod tidy
* oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063))
  * oci: fix WithDevShmSize
* [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454))
  * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411))
  * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448))
  * doc: add missing namespaces package
* update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445))
  * update seccomp version
* Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436))
  * Update golang.org/x/sys to add linux/ppc support
* go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441))
  * go.mod: cut circular dependency on github.com/containerd/containerd
  * integration/client: go mod tidy
* Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446))
  * Fix different registry hosts referencing the same auth config.
</p>
</details>

### Changes from containerd/cgroups
<details><summary>24 commits</summary>
<p>

* cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203))
  * cgroup: Optionally add process and task to a subsystems subset
* replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208))
  * replace pkg/errors from vendor
* cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207))
  * cgroup.go: avoid panic on nil interface
* Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204))
  * cgroupv2: reset lastErr to nil when subtree control is successfully written
  * cgroupv2: enable controllers before setting resources in NewChild()
* v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201))
  * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
  * v2: remove errors that are never returned
* v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202))
  * v1: reduce duplicated code
* cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200))
  * cgroup v1: implement AddProc()
* Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199))
  * Rename branch from master to main
* utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197))
  * utils: export ParseCgroupFile()
* go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194))
  * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
* Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195))
  * Use /proc/partitions to get device names
</p>
</details>

### Changes from containerd/console
<details><summary>6 commits</summary>
<p>

* Fix CI ([#55](https://github.com/containerd/console/pull/55))
  * Fix CI
  * Stop using pkg/errors
* Add support for z/OS ([#46](https://github.com/containerd/console/pull/46))
  * Console test on z/OS
  * Add support for z/OS
</p>
</details>

### Changes from containerd/continuity
<details><summary>28 commits</summary>
<p>

* fs: use syscall.Timespec.Unix ([#193](https://github.com/containerd/continuity/pull/193))
  * fs: use syscall.Timespec.Unix
* Update CI Go version to 1.17 ([#192](https://github.com/containerd/continuity/pull/192))
  * Update CI Go version to 1.17
* Build containerd/continuity on multiple Unix OSes ([#190](https://github.com/containerd/continuity/pull/190))
  * Build containerd/continuity on multiple Unix OSes
* Do not log errors before returning them ([#191](https://github.com/containerd/continuity/pull/191))
  * Do not log errors before returning them
* Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188))
  * Copy Windows file metadata
* fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187))
  * fix fmt.Errorf("%w", err) on err == nil
* Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185))
  * run gofmt with Go 1.17
  * remove direct dependency on github.com/pkg/errors
* Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186))
  * update AUTHORS
  * darwin: use utimensat syscall instead of utimes
  * fix darwin usage of du command
* go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161))
  * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
* fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184))
  * reformat nolint comments
  * fs/stat: add FreeBSD
* Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182))
  * Rename branch from master to main
* testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180))
  * testutil/loopback: print more debug info
</p>
</details>

### Changes from containerd/go-cni
<details><summary>18 commits</summary>
<p>

* run setup on networks in parallel ([#76](https://github.com/containerd/go-cni/pull/76))
  * switch to direct index
  * run setup on networks in parallel
* remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74))
  * remove: Continue on "not found" errors
* go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72))
  * go.mod: github.com/containernetworking/cni v1.0.1
* remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71))
  * remove direct dependency on github.com/pkg/errors
* update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70))
  * test: add TestLibCNIType100
  * update CNI to v1.0.0
* Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69))
  * Rename branch from master to main
* result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68))
  * result: change Raw from a struct field to a method
* result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67))
  * result: expose raw result
</p>
</details>

### Changes from containerd/imgcrypt
<details><summary>32 commits</summary>
<p>

* CHANGES: Updated CHANGES document for 1.1.3 release ([#64](https://github.com/containerd/imgcrypt/pull/64))
  * CHANGES: Updated CHANGES document for 1.1.3 release
* docs: update project branch to main ([#63](https://github.com/containerd/imgcrypt/pull/63))
  * docs: update project branch to main
* Update linter to match containerd repo ([#61](https://github.com/containerd/imgcrypt/pull/61))
  * Update linter to match containerd repo
  * update CI golang version
* Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 ([#59](https://github.com/containerd/imgcrypt/pull/59))
  * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8
* maint: Update to ocicrypt v1.1.2 ([#57](https://github.com/containerd/imgcrypt/pull/57))
  * maint: Update to ocicrypt v1.1.2
* Decouple CreateCryptoConfig() from github.com/urfave/cli ([#56](https://github.com/containerd/imgcrypt/pull/56))
  * Decouple CreateCryptoConfig() from github.com/urfave/cli
* Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 ([#55](https://github.com/containerd/imgcrypt/pull/55))
  * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7
  * replace pkg/errors and bump related library
* README: Fix CRI decryption document URL ([#53](https://github.com/containerd/imgcrypt/pull/53))
  * README: Fix CRI decryption document URL
* Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#52](https://github.com/containerd/imgcrypt/pull/52))
  * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
* Bump containerd to 1.5.2 ([#51](https://github.com/containerd/imgcrypt/pull/51))
  * Bump containerd to 1.5.2
* images: Implement ConvertFunc for image en- and decryption ([#49](https://github.com/containerd/imgcrypt/pull/49))
  * images: Implement ConvertFunc for image en- and decryption
* Add containerd-release to makefile ([#48](https://github.com/containerd/imgcrypt/pull/48))
  * Remove ctr-enc from installation
* vendor sync up with containerd 1.5 ga, and runc94 ([#47](https://github.com/containerd/imgcrypt/pull/47))
  * sync up with containerd 1.5 ga, and runc94
* Sync ctr-enc with containerd's ctr v1.5.0-rc.3 ([#46](https://github.com/containerd/imgcrypt/pull/46))
  * CICD: Run 'apt update' before pulling packages
  * ctr-enc: Set the version for ctr-enc when linking
  * Sync ctr-enc with containerd's ctr v1.5.0-rc.3
</p>
</details>

### Changes from containerd/ttrpc
<details><summary>34 commits</summary>
<p>

* Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96))
  * Add protoc-gen-go-ttrpc
* client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94))
  * client: Handle sending/receiving in separate goroutines
* Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95))
  * Run Protobuild in GitHub Actions
  * Re-generate example.pb.go
* replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93))
  * replace pkg/errors from vendor
* Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86))
  * Rename branch from master to main
* Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85))
  * Make the example command buildable on macOS
  * Run GitHub Actions on macOS
  * Make "go test" work on macOS
* Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83))
  * Return Unimplemented when services or methods are not implemented
* Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84))
  * Remove "Very new" and checked TODO items
* removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82))
  * removing glide from ignore
* go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79))
  * go.mod: github.com/prometheus/procfs v0.6.0
  * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63
  * go.mod: google.golang.org/grpc v1.27.1
  * go.mod: github.com/gogo/protobuf v1.3.2
* remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78))
  * CI: add codecov badge to readme
  * CI: remove travis
* Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77))
  * Use GitHub Actions for CI
* go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76))
  * go.mod: sirupsen/logrus v1.7.0
  * go mod tidy
</p>
</details>

### Dependency Changes

* **cloud.google.com/go**                                                          v0.81.0 **_new_**
* **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 **_new_**
* **github.com/Microsoft/go-winio**                                                v0.4.17 -> v0.5.1
* **github.com/Microsoft/hcsshim**                                                 v0.8.16 -> v0.9.2
* **github.com/blang/semver**                                                      v3.5.1 **_new_**
* **github.com/cenkalti/backoff/v4**                                               v4.1.2 **_new_**
* **github.com/cespare/xxhash/v2**                                                 v2.1.1 -> v2.1.2
* **github.com/cilium/ebpf**                                                       v0.4.0 -> v0.7.0
* **github.com/containerd/cgroups**                                                v1.0.1 -> v1.0.2
* **github.com/containerd/console**                                                v1.0.2 -> v1.0.3
* **github.com/containerd/continuity**                                             v0.1.0 -> v0.2.2
* **github.com/containerd/go-cni**                                                 v1.0.2 -> v1.1.1
* **github.com/containerd/imgcrypt**                                               v1.1.1 -> v1.1.3
* **github.com/containerd/ttrpc**                                                  v1.0.2 -> v1.1.0
* **github.com/containernetworking/cni**                                           v0.8.1 -> v1.0.1
* **github.com/containernetworking/plugins**                                       v0.9.1 -> v1.0.1
* **github.com/containers/ocicrypt**                                               v1.1.1 -> v1.1.2
* **github.com/coreos/go-systemd/v22**                                             v22.1.0 -> v22.3.2
* **github.com/go-logr/logr**                                                      v0.2.0 -> v1.2.2
* **github.com/go-logr/stdr**                                                      v1.2.2 **_new_**
* **github.com/godbus/dbus/v5**                                                    v5.0.3 -> v5.0.6
* **github.com/golang/groupcache**                                                 8c9f03a8e57e -> 41bb18bfe9da
* **github.com/golang/protobuf**                                                   v1.3.5 -> v1.5.2
* **github.com/google/go-cmp**                                                     v0.5.4 -> v0.5.6
* **github.com/google/gofuzz**                                                     v1.1.0 -> v1.2.0
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 **_new_**
* **github.com/grpc-ecosystem/grpc-gateway**                                       v1.16.0 **_new_**
* **github.com/hashicorp/errwrap**                                                 v1.0.0 -> v1.1.0
* **github.com/hashicorp/go-multierror**                                           v1.0.0 -> v1.1.1
* **github.com/imdario/mergo**                                                     v0.3.11 -> v0.3.12
* **github.com/intel/goresctrl**                                                   v0.2.0 **_new_**
* **github.com/json-iterator/go**                                                  v1.1.10 -> v1.1.12
* **github.com/moby/spdystream**                                                   v0.2.0 **_new_**
* **github.com/moby/sys/mountinfo**                                                v0.4.1 -> v0.5.0
* **github.com/moby/sys/signal**                                                   v0.6.0 **_new_**
* **github.com/moby/sys/symlink**                                                  v0.1.0 -> v0.2.0
* **github.com/modern-go/reflect2**                                                v1.0.1 -> v1.0.2
* **github.com/opencontainers/image-spec**                                         v1.0.1 -> 693428a734f5
* **github.com/opencontainers/runc**                                               v1.0.0-rc93 -> v1.1.0
* **github.com/opencontainers/runtime-spec**                                       e6143ca7d51d -> 1c3f411f0417
* **github.com/opencontainers/selinux**                                            v1.8.0 -> v1.10.0
* **github.com/pelletier/go-toml**                                                 v1.8.1 -> v1.9.3
* **github.com/prometheus/client_golang**                                          v1.7.1 -> v1.11.0
* **github.com/prometheus/common**                                                 v0.10.0 -> v0.30.0
* **github.com/prometheus/procfs**                                                 v0.6.0 -> v0.7.3
* **github.com/satori/go.uuid**                                                    v1.2.0 **_new_**
* **github.com/sirupsen/logrus**                                                   v1.7.0 -> v1.8.1
* **github.com/spf13/pflag**                                                       v1.0.5 **_new_**
* **github.com/stretchr/testify**                                                  v1.6.1 -> v1.7.0
* **github.com/vishvananda/netlink**                                               f5de75959ad5 **_new_**
* **github.com/vishvananda/netns**                                                 2eb08e3e575f **_new_**
* **go.etcd.io/bbolt**                                                             v1.3.5 -> v1.3.6
* **go.opencensus.io**                                                             v0.22.3 -> v0.23.0
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 **_new_**
* **go.opentelemetry.io/otel/trace**                                               v1.3.0 **_new_**
* **go.opentelemetry.io/proto/otlp**                                               v0.11.0 **_new_**
* **golang.org/x/crypto**                                                          0c34fe9e7dc2 -> 32db794688a5
* **golang.org/x/net**                                                             e18ecbb05110 -> fe4d6282115f
* **golang.org/x/oauth2**                                                          bf48bf16ab8d -> 2bc19b11175f
* **golang.org/x/sync**                                                            09787c993a3a -> 036812b2e83c
* **golang.org/x/sys**                                                             47abb6519492 -> 1d35b9e2eb4e
* **golang.org/x/term**                                                            7de9c90e9dd1 -> 6886f2dfbf5b
* **golang.org/x/text**                                                            v0.3.4 -> v0.3.7
* **golang.org/x/time**                                                            3af7569d3a1e -> 1f47c861a9ac
* **google.golang.org/appengine**                                                  v1.6.5 -> v1.6.7
* **google.golang.org/grpc**                                                       v1.27.1 -> v1.43.0
* **google.golang.org/protobuf**                                                   v1.27.1 **_new_**
* **gopkg.in/yaml.v3**                                                             9f266ea9e77c -> 496545a6307b
* **k8s.io/api**                                                                   v0.20.6 -> v0.22.5
* **k8s.io/apimachinery**                                                          v0.20.6 -> v0.22.5
* **k8s.io/apiserver**                                                             v0.20.6 -> v0.22.5
* **k8s.io/client-go**                                                             v0.20.6 -> v0.22.5
* **k8s.io/component-base**                                                        v0.20.6 -> v0.22.5
* **k8s.io/cri-api**                                                               v0.20.6 -> v0.23.1
* **k8s.io/klog/v2**                                                               v2.4.0 -> v2.30.0
* **k8s.io/utils**                                                                 67b214c5f920 -> cb0fa318a74b
* **sigs.k8s.io/structured-merge-diff/v4**                                         v4.0.3 -> v4.1.2

Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)

containerd 1.6.0-rc.0

Welcome to the v1.6.0-rc.0 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

### Highlights

#### Runtime

* **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744))
* **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813))
* **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817))
* **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918))
* **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011))
* **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031))
* **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206))

#### Windows

* **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131))
* **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778))

#### CRI

* **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695))
* **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439))
* **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619))
* **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627))
* **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964))
* **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113))
* **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111))
* **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130))
* **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170))
* **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320))

#### Other

* **Add a shared namespace label for cross-namespace content sharing** ([#5043](https://github.com/containerd/containerd/pull/5043))
* **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606))
* **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610))
* **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965))
* **Add OpenTelemetry trace injection to grpc client** ([#5992](https://github.com/containerd/containerd/pull/5992))
* **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122))

#### Client

* **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709))
* **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Phil Estes
* Wei Fu
* Akihiro Suda
* Maksym Pavlenko
* Sebastiaan van Stijn
* Mike Brown
* Kazuyoshi Kato
* Michael Crosby
* Claudiu Belu
* haoyun
* Stefan Berger
* Daniel Canter
* Gabriel Adrian Samfira
* zounengren
* AdamKorcz
* Adelina Tuvenie
* Brian Goff
* Kohei Tokunaga
* Davanum Srinivas
* Nashwan Azhari
* Samuel Karp
* Shiming Zhang
* Enrico Weigelt, metux IT consult
* Markus Lehtonen
* Alakesh Haloi
* Hajime Tazaki
* Kevin Parsons
* Iceber Gu
* Aditi Sharma
* David Porter
* Gijs Peskens
* Brandon Lum
* Danielle Lancashire
* Jacob MacElroy
* dependabot[bot]
* wanglei
* Alexandre Peixoto Ferreira
* Cody Roseborough
* Fabiano Fidêncio
* Furkan Türkal
* Jiaming Xu
* Kir Kolyshkin
* Miao Wang
* Neil Johnson
* Paul "TBBle" Hampson
* Priyanka Saggu
* Romain Aviolat
* Samuel Ortiz
* Sunghoon Kang
* Takumasa Sakao
* Tobias Klauser
* Tõnis Tiigi
* Zhiyu Li
* ningmingxiao
* Alexander Minbaev
* Alexey Ivanov
* Artem Khramov
* Ben Hutchings
* Cory Bennett
* Da McGrady
* Dan Williams
* Eng Zer Jun
* Eric Ernst
* Ethan Chen
* Fupan Li
* Gaurav Gahlot
* Gunju Kim
* Jacob Blain Christen
* James Sturtevant
* Jan Klippel
* Jayme Howard
* Jiajun Jiang
* Jintao Zhang
* Justin Terry
* Kaijie Chen
* Kante
* Kern Walster
* Kitt Hsu
* Lantao Liu
* Ma Xinjian
* Manabu Sugimoto
* Manuel Alejandro de Brito Fontes
* Mark Rossetti
* Markus Lippert
* Mikko Ylinen
* Ng Yang
* Nicolas Chariglione
* Olli Janatuinen
* Peri Thompson
* Quan Tian
* Radostin Stoyanov
* Rui Lopes
* Sambhav Kothari
* Sebastian Hasler
* Sergey Kanzhelev
* Yang Yang
* Yifan Yuan
* Zilong Wang
* Zufar Dhiyaulhaq
* botieking98
* chenxiaoyu
* jayonlau
* jerryzhuang
* linrunlong
* scuzhanglei
* wangzhan
* Étienne Guesnet

### Changes
<details><summary>946 commits</summary>
<p>

* Prepare release notes for v1.6.0-rc.0 ([#6431](https://github.com/containerd/containerd/pull/6431))
  * Prepare release notes for v1.6.0-rc.0
* Integration: Switch to using `auth` Gcloud action in Windows workflow. ([#6397](https://github.com/containerd/containerd/pull/6397))
  * Integration: Switch to `upload-cloud-storage` Gcloud action.
  * Integration: Switch to using `auth` Gcloud action in Windows workflow.
* remove io/ioutil ([#6426](https://github.com/containerd/containerd/pull/6426))
  * remove io/ioutil
* test: e2e node COS cgroupv2 script ([#6418](https://github.com/containerd/containerd/pull/6418))
  * test: e2e node COS cgroupv2 script
* Integration: Enable CRITest on Windows 2022. ([#6378](https://github.com/containerd/containerd/pull/6378))
  * Enable critest tests on Windows Server 2022.
  * Parametrize CRITest test images in Windows Periodic workflow.
* Update error message for apparmor parser ([#6415](https://github.com/containerd/containerd/pull/6415))
  * Update error message for apparmor parser
* Fix wrong log message ([#6419](https://github.com/containerd/containerd/pull/6419))
  * Fix wrong log message
* Followup errors change ([#6414](https://github.com/containerd/containerd/pull/6414))
  * Fix incorrect error wrapped when closing ingest file
  * Fix seek error used without nil check
  * Fix followup items from errors replacement
* Updates CRI API & Kubernetes to 1.23 ([#6351](https://github.com/containerd/containerd/pull/6351))
  * Update k/k to 1.23.0
* Updating adoption of containerd for AKS ([#6416](https://github.com/containerd/containerd/pull/6416))
  * Updating adoption of containerd for AKS
* update the adoption status of containerd in GKE ([#6413](https://github.com/containerd/containerd/pull/6413))
  * update the adoption status of containerd in GKE
*  go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} ([#6410](https://github.com/containerd/containerd/pull/6410))
  * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt}
* replace github.com/pkg/errors with native errors ([#6366](https://github.com/containerd/containerd/pull/6366))
  * feat: replace github.com/pkg/errors to errors
* corrected link in cri architecture documentation ([#6412](https://github.com/containerd/containerd/pull/6412))
  * corrected link in cri architecture documentation
* remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token") ([#6396](https://github.com/containerd/containerd/pull/6396))
  * remotes/docker: allow fetching "refresh token" (aka "identity token")
  * remotes/docker/config: allow setting custom AuthorizerOpts
* Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407))
  * Prepare release notes for v1.6.0-beta.5
* Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292))
  * Integration: Check GCP secrets on Windows CI artifact upload.
* Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c)
  * only relabel cri managed host mounts
* Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439))
  * cri: add ignore_rdt_not_enabled_errors config option
  * Update dependencies
  * cri: annotations for controlling RDT class
  * tasks: add Linux rdt support
  * cmd: add --rdt-class command line option
  * oci: implement WithRdt
* fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391))
  * fix: use _ for consistency
* content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403))
  * content/local: use syscall.Timespec.Unix
* docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207))
  * docs: document the runtime shim plugin config options
  * docs: use proper markdown lists in containerd-config.toml.5.md
* fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304))
  * fix(ctr): enable networking for Windows containers
* Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394))
  * Fix $(PWD) issue for Windows makefile
* only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395))
  * fix: only test abstract unix socket on linux
* Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390))
  * Expect ErrorNotFound on Windows after Kill()
  * Replace tskill with taskkill
* fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291))
  * fix when kernel version < 4.13rc1 by using index=off cause overlay test error
* Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384))
  * Fix no-daemon flag for integration/client tests
* Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122))
  * Enable lazy init for ext4 with devicemapper
* Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385))
  * Fix flakiness on Windows for list stats
* cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347))
  * cri-integration: Add Windows default paths
* Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383))
  * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0
  * Use insecure.NewCredentials instead of grpc.WithInsecure
  * Upgrade OpenTelemetry dependencies
* Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322))
  * Fix default makefile target for windows
* Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379))
  * Disable TestContainerHook on Windows
* seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372))
  * seutil: Fix setting the "container_kvm_t" label
* Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350))
  * Remove Windows integration testing for 2004.
* OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308))
  * OCI: Mount (accessible) host devices in privileged rootless containers
  * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch
* cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320))
  * fixup: check for swap accounting
  * fixup: handle diff between cgroupsv1 and v2
  * cri: add support for configuring swap
* Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275))
  * Replace find with native Go code
  * Enable TestVolumeOwnership on Windows
* Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296))
  * Prepare release notes for v1.6.0-beta.4
* refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358))
  * feat: Errorf usage
* Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021))
  * Use task plugin for runc shim
  * Seperate shim manager and task service
  * Split runc shim into plugin components
  * Add shutdown package
* CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155))
  * cri, sandbox: pass sandbox resource details if available, applicable
* medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354))
  * medatada: make namespaces' deletion error less cryptic
* ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373))
  * add-list-stat: return container list if filter is nil
* integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369))
  * integration: deflake TestContainerdRestart
* feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225))
  * feat: support custom timeout for blot open
* Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333))
  * Update Go to 1.17.5
* cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332))
  * cri/server: use consistent alias for pkg/ioutil
* Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364))
  * Disable restart monitor test in Windows
* Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338))
  * Don't fail-fast on Windows integration tests
* Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355))
  * Run windows parallel integration test as short
  * Update restart monitor test to output daemon logs on failure
* go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263))
  * images/converter: remove deprecated types
  * go.mod: update image-spec to latest (v1.0.3-dev)
* Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353))
  * Skip WithAdditionalGIDs on Darwin
* Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303))
  * Use RFC3339 format so rg cleanup works
* update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330))
  * go.mod: github.com/opencontainers/runc v1.0.3
  * update runc binary to v1.0.3
* Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329))
  * Allow native snapshotter on Darwin
* Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328))
  * Do not use `go get` to install executables
* Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326))
  * Include runtime v2 in default builtins
* Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314))
  * Add Windows Server 2022 CI runs
* Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324))
  * Use a single RUN command
  * Set explicit ACL on test files
* integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311))
  * integration: align tags of test images
* Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325))
  * Set CONTAINERD_ROOT in Windows cri-integration
* export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312))
  * export oci.DeviceFromPath()
* Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321))
  * Update continuity dependency
  * Update volume test images
* Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201))
  * Add error logging on cleanup
  * Update TestRestartMonitor expected time check
* Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319))
  * Move volume images from gcr to ghcr
* Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301))
  * Revert shim plugin migration
* Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317))
  * Add permissions
  * Authenticate against ghcr.io
* oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306))
  * oci/deviceFromPath(): correctly check device types
* Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315))
  * Skip TestExportAndImportMultiLayer on Windows
* Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290))
  * Add image build workflow
* Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286))
  * Integration: Separate Windows Periodic Tests workflow trigger.
* Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274))
  * Build volume test images on Windows
* Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297))
  * Add VMware TKG & TCE to Containerd adopters
* Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293))
  * Vagrantfile: update to Fedora 35
* Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269))
  * Update README.md repo->org
* Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278))
  * Fix executable file not found when restoring shims
* ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271))
  * ctr/snapshots/diff: don't show the media-type in output
* ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289))
  * ctr: Add Linux Capabilities control flags
* integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270))
  * integration: add stats result in error message
* releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287))
  * docs: mark 1.4 as Extended
  * docs: fix RELEASES.md gRPC API anchor
* feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284))
  * feat: skip ci for fork
* content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280))
  * content/local: Close the file if Seek fails
* Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268))
  * Integration: Remove explicit version passing to `azure/CLI`.
* Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276))
  * Fix wrong make target on documentation
* fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272))
  * fix: server error return
* Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267))
  * Prepare release notes for v1.6.0-beta.3
  * Update API version in go.mod
  * Update release name to use consistent format
* feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254))
  * fix: make max recv/send msg size setting default
  * feat:support custom callopts on client side
* [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258))
  * [CRI] Fix panic when registry.mirrors use localhost
* Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241))
  * Add support for TMP override on toml
* CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170))
  * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options
* Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35)
  * schema1: reject ambiguous documents
  * images: validate document type before unmarshal
* [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111))
  * [cri] add sandbox and container latency metrics
* Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255))
  * Generalize Windows CI setup script for any user.
  * Standardize cmdlet capitalization in Windows CI scripts.
* feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253))
  * feat: use rwmutex instead
* Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206))
  * Fix package alias
  * Support custom runtime path when launching tasks
  * Add runtime path in CreateTaskRequest
* Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246))
  * Close file if permission modification fails
* release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250))
  * release: change tar name to match prior releases
* Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237))
  * Fix wrong error returned for image index lookup
* Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221))
  * Fix containerd fails to pull OCI image with non-`http(s)://` urls
* Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223))
  * Prepare release notes for v1.6.0-beta.2
* Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196))
  * Rename release dockerfile to omit distro name
  * release: improve dockerfile
  * Add arm64 to releases
* use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236))
  * use write lock when updating container stats
* go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230))
  * go.mod: Bump hcsshim to v0.9.1
* go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228))
  * go.mod: Bump ttrpc to 1.1.0
* go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213))
  * go.mod: github.com/moby/sys/mountinfo v0.5.0
  * go.mod: github.com/moby/sys/signal v0.6.0
  * go.mod: github.com/moby/sys/symlink v0.2.0
  * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
* cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222))
  * cleanup: add more description on comment
* Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211))
  * Update Go to 1.17.3
* CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214))
  * CI: bump up crun: 1.0 -> 1.3
* Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205))
  * Pin az CLI version
* Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918))
  * Address PR comments
  * Fix build after rebase
  * Migrate task directory
  * Expose shim process interface
  * Fix after rebase
  * Cleanup shim loading
  * Move shim restore to a separate file
  * Fix backward compatibility with old task shims
  * Add plugin dependency between shim and shim services
  * Rework task create and cleanup flow
  * Add task manager
  * Rename task manager to shim manager
* [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113))
  * Implement CRI container and pods stats
  * Vendor latest k8s.io/cri-api and netlink
* test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200))
  * test: Add grace period for restart monitor test
* integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179))
  * integration: Enables TestRuntimeHandler for Windows
* Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171))
  * Add mkdir on Dockerfile
* sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189))
  * sys/reaper: avoid leaky goroutine when exec timeout
* adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184))
  * adds additional debug out to timebox cni setup
* converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176))
  * converter: Allow hooks during image conversion
* compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177))
  * compression: support zstd with skippable frame
* integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182))
  * integration: Enables TestVolumeCopyUp for Windows
*  integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121))
  * integration: Enable some tests for Windows (part 2)
* integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085))
  * integration: Enable some tests for Windows
* Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125))
  * feat(doc): update to version 2 syntax
* fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166))
  * fix shim reaper wait command execute blocked
* content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145))
  * content: close stream after commit request
* Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165))
  * Adding scope tests for ParseAuthHeader
  * Adding tests for GenerateTokenOptions
  * Generate token options with each scope as a separate string.
* vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167))
  * vendor: Updates go-cni
* commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159))
  * commands: Enables task metrics for Windows
* vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149))
  * vendor: update moby/sys for darwin support
* Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144))
  * Prepare release notes for v1.6.0-beta.1
  * Update mailmap
  * Update api vendor
* bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136))
  * bump CNI to spec v1.0.0
* Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992))
  * Inject otel traces to grpc client.
* client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142))
  * client: expose (*image).platform
* Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128))
  * feat(doc): add Core Scheduling documentation
* Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130))
  * Ensure namespace is proxied to grpc/ttrpc plugins
* fix #6054  MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109))
  * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
* Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124))
  * Output a warning for label image labels instead of erroring
* Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132))
  * Fix spelling mistake in Windows snapshotter
* Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126))
  * Windows: Cleanup rm- prefixed layers
* cleanup deprecated package  `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118))
  * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
* close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115))
  * close Writer after use which may leak mem
* Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778))
  * Adds Windows resource limits support
* Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098))
  * Prepare release notes for v1.6.0-beta.0
* Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105))
  * Add error message to in TestContainerdRestart integration test
* Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110))
  * Fix typo in the NewContainer function documentation
* Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104))
  * Update cgroups to v1.0.2
* btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100))
  * test: check file content after mount
* Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107))
  * Update test timeout based on recent cancellations
* Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106))
  * Remove extra test_teardown
  * Check the pid in cri test teardown
* add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011))
  * fix integration client vendor
  * add runc shim support for sched core
* integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579))
  * integration: Enables Windows containerd restart test
* vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099))
  * vendor: Bump hcsshim to 0.9.0
* [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695))
  * Add CNI conf based on runtime class
* Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102))
  * Update Go to 1.17.2
* integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933))
  * integration: Adds test for multilayer image import
* runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031))
  * runtime: should fail fast if dial error on shim
* Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034))
  * Windows: Fixes Windows containers with image volumes
* run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094))
  * run `gofmt` with Go 1.17
* pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088))
  * pkg/cap: remove an outdated comment
* Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066))
  * Update go otel 1.0.1
* Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086))
  * Update ADOPTERS.md with additional uses
* modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082))
  * modify the way for checking cos
* Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915))
  * Fuzzing: Add 4 fuzzers + small modifications
* Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081))
  * Pin mingw to version 10.2.0
  * Update to golang 1.17.1
  * Install nssm
* Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq)
  * btrfs: reduce permissions on plugin directories
  * v1 runtime: reduce permissions for bundle dir
  * v2 runtime: reduce permissions for bundle dir
* task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079))
  * task service: return known error type
* refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973))
  * refactor: move from io/ioutil to io and os package
* fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076))
  * fix: update vendor
  * cleanup: import from k8s.io/utils/clock/testing instead
  * cleanup: import from k8s.io/utils/clock instead
* feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069))
  * feat: enable cri remote client to call with grpc calloptions
* cleanup k8s ansible yaml (carry for #5713)  ([#6074](https://github.com/containerd/containerd/pull/6074))
  * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>)
* feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070))
  * fix: wrong flag type
  * feat: support import image for specific platform
* Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065))
  * Update mirror images to take target image name
* fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059))
  * fix: make exec-id flag required in exec command
* images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052))
  * images: enable converter to uncompress zstd
* replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922))
  * replace deprecated function
* integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853))
  * integration: Adds Windows HostProcess tests
* Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047))
  * Fix main branch build is broken
* Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003))
  * Add open telemetry logging hook for logrus
* Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023))
  * Change oci.WithUser behavior for LCOW
* switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946))
  * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
* import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926))
  * import: Raise error if the imported image is filtered out
* Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043))
  * Fix panic in metadata content writer on copy error
* Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001))
  * Move tracing to plugin
* ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916))
  * ctr: Fixes Windows image import
* update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017))
  * go.mod: update opentelemetry modules to v1.0.0
* fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979))
  * fix error string format
* Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036))
  * Add github action to mirror image
* add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027))
  * add current process state to the error message
*  FreeBSD: fix tar headers & the nil check on getxattr  ([#5991](https://github.com/containerd/containerd/pull/5991))
  * FreeBSD: fix tar headers & the nil check on getxattr
* gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035))
  * gha: collect Vagrant VMs' IP addresses
* bump continuity and console version  that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033))
  * bump continuity and console version that remove pkg/errors
* import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997))
  * import: Add option to skip creating digest image
* ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998))
  * ctr namespaces: improve usage string
* bump console version to v1.0.3 that remove pkg/errors  ([#6028](https://github.com/containerd/containerd/pull/6028))
  * bump console version to v1.0.3 that remove pkg/errors
* Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032))
  * Use github images for integration tests
* Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995))
  * Fix typo
* Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012))
  * Enable image config labels in ctr and CRI container creation
* Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970))
  * Make sure exit signals trigger an exit during init
* task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974))
  * task delete: Closes task IO before waiting
* CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985))
  * CI: bump up crun to 1.0
* seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982))
  * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990))
  * Update to Go 1.17.1
* CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987))
  * CI: Switch to available latest images
* add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610))
  * add xfs support to devicemapper snapshotter
* Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956))
  * Fixes task kill --force on Windows
* Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817))
  * Add support for shim plugins
* vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976))
  * vendor: update continuity for darwin support
* replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906))
  * replace uses of os/exec with golang.org/x/sys/execabs
* complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972))
  * Additional integration tests for pulling image with labels
* Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966))
  * Fix content copy to not ignore unexpected EOF
* add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964))
  * add ip_pref CNI options for primary pod ip
* cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939))
  * cri: add devices for privileged container
* sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954))
  * sandbox: Allows the sandbox to be deleted in NotReady state
* pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969))
  * pin protobuild version to tag
* Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965))
  * use a const metric for build_info
  * Add metric exposing build version&revision
* Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627))
  * add cri test case
  * feature: add field LinuxContainerResources.Unified on cri
* integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861))
  * integration: investigate TestRestartMonitor's failure
* Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917))
  * Address issue forms feedback
  * Use issue forms for bug reporting
* cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945))
  * cri: patch update image labels
* darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936))
  * darwin: runtime support
  * darwin: use the default values for socketRoot variable
* Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858))
  * Update RELEASES.md
* archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949))
  * archive: Add WriteDiff error logs
* replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958))
  * replace deprecated Dail with DailContext
* Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951))
  * Add WS2022 support in Windows Periodic tests
* Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943))
  * content fuzzer: Clean up tempdir
* using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944))
  * using Hosts replace deprecated field
* fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947))
  * fix document non-synchronous in crictl.md
* go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929))
  * go.mod: Update hcsshim to v0.8.21
* Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937))
  * Makefile.linux: build on riscv with PIE
* Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932))
  * Fix cwd flag for `ctr tasks exec`
* Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927))
  * Update Pause image in tests & config
* cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122))
  * cri: Devices ownership from SecurityContext
* Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921))
  * Fix pull fails on unexpected EOF
* Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845))
  * Adding testing of two devices
  * Fix dir support for devices V3 (#4847)
* windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914))
  * windows: The DefaultSpec platform should match the Default matcher
* Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865))
  * Add RunAsUserName functionality for the Windows Pod Sandbox Container
* bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899))
  * go.mod: update runc to v1.0.2
  * update runc binary to v1.0.2
* Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903))
  * Run `go fmt` with Go 1.17
* go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905))
  * go.mod: github.com/pelletier/go-toml v1.9.3
* cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902))
  * cri: filter selinux xattr for image volumes
* Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131))
  * Added windows hostProcess cni skip
* script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897))
  * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
* Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889))
  * Bump integration timeout to 35 min
  * Update to Go 1.17
* integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896))
  * integration: fix TestContainerPids
* [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891))
  * [ctr] add HOSTNAME env for host network
* Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886))
  * Fuzzing: Add fuzzer
* Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884))
  * Add env for SystemdCgroup driver
* Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878))
  * Allow expanded DNS configuration
* Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863))
  * Fuzzing: Add 4 fuzzers
* Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813))
  * Cleanup v2 shim
* Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840))
  * Use http.Get to download binaries instead of exec.Command
  * Fuzzing: Add experimental version of container fuzzer
* add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846))
  * add cpu-shares to ctr
* docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847))
  * docs: rename main to master
* content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849))
  * content: return the error with its timestamp
* Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857))
  * Fix bad `make protos` failure
* replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851))
  * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
* docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856))
  * docs: remove FOSSA's badge
* BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850))
  * BUILDING.md: remove some bits about building runc
  * BUILDING.md: markdown fixes
* go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836))
  * go.mod: update kubernetes to v1.22.0
* [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852))
  * Add trap to cri-integration test script
* docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848))
  * docs: list all snapshotter-related build flags
* Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835))
  * Move plugin context events into separate plugin
* Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839))
  * Fix Linux CI Linter using go 1.15.14
* Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842))
  * Update Go to 1.16.7
* Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838))
  * Cleanup CI
* Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834))
  * Remove redundant build tags
* Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830))
  * Change default directories on Darwin
* [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731))
  * [otel-tracing] vendor and go modules changes
  * [otel-tracing] Initial opentelemetry support
  * remove go 1.13 from containerd
* Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829))
  * Fuzzing: Fix for OSS-fuzz issue 36825
* Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825))
  * Fuzzing: Add two more fuzzers
* scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760))
  * scripts: declare ROOT closer to where it's used, and some DRY changes
  * scripts: add missing quotes, and minor linting issues
  * test/build-utils.sh: remove support for Debian Jessie
* platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821))
  * platforms: Format(): use path.Join() instead of joinNotEmpty()
* Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823))
  * Fuzzing: Remove panics of container_fuzzer
* Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785))
  * Change protoc link
  * Split fuzzer to two fuzzers
  * Fuzzing: Add container fuzzer
* runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746))
  * runtime: fix the issue of create new socket with abstract address
* mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809))
  * mergo: Upgrade to 0.3.12 to fix panic
* ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802))
  * ci: install criu from PPA
* Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144))
  * Split release steps into multiple tasks
  * Update release workflow to upload binary without CNI
* Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725))
  * Enable critest on Windows
* Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792))
  * Script to check if entries in go.mod files are in sync
* Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043))
  * Add shared content label to namespaces
* platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784))
  * platforms: add "ios" as known OS, "loong64" as known ARCH
* Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804))
  * Updates the location of protobuf downloads in docs
* Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803))
  * Update protobuf install to use correct repository
* overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624))
  * overlay: add an optional label of upperdir location of each snapshot
* Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693))
  * Support SIGRTMIN+n signals
* respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800))
  * respect context timeout in shim binary call
* Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716))
  * Introduce a new go module - containerd/api for use in standalone clients
* grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606))
  * grpc config add options tcp_tls_ca
* integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162))
  * integration: Windows volume-copy-up images
* add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795))
  * add CRI support matrix to RELEASES.md
* adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794))
  * adding a little more clarity
* update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793))
  * update gotestsum to v1.7.0
* Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756))
  * Discard blocks when removing a thin device
* Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590))
  * Makefile: pass build tags to manpage build process
  * Makefile: fix tags parameter computation
* Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744))
  * Add runtime label to metrics
* interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745))
  * interface about shim build check
* integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775))
  * integration: log all processes to investigate the test failure
* Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779))
  * Fuzzing: Add archive fuzzer
* Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687))
  * Add docker fetch fuzzer
* Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735))
  * Support custom compressor for walking differ
* remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770))
  * remotes/docker/pusher.go: Fix missing Close()
* remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769))
  * remotes/docker/fetcher.go: Fix missing Close()
* Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771))
  * Update cpuguy83/go-md2man binary to v2.0.1
* Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750))
  * Dockerfile.test: build containerd in separate stage
  * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
  * Dockerfile.test: clean up apt indexes after installing
  * Dockerfile.test: build critools in a separate stage
  * Dockerfile.test: build cni in a separate stage
  * Dockerfile.test: standard directory to collect build aftifacts
  * Dockerfile.test: split dev stage, and optimize order
  * Dockerfile.test: skip curl, gcc, git and make install
  * install-critools: make sure DESTDIR exists
* update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754))
  * update gotestsum to current master
* Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w)
  * Add test for archive breakout test for lchmod
* Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755))
  * Use systemd cgroup driver for cgroupv2 tests
* update runc  to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751))
  * go.mod: runc v1.0.1
  * update runc binary to v1.0.1
* runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737))
  * runtime: runc v2: remove redundant validation
* Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727))
  * Move loop check to before sleep
  * Add timestamp to flaky restart monitor test
* Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722))
  * integration/client: go mod tidy
  * Update Go to 1.16.6
* client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447))
  * client: surface a connection error more clearly
* Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712))
  * Fix missing Body.Close() calls on push to docker remote
* remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710))
  * remove pkg/cri/platforms package
* Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709))
  * Allow WithServices to use custom implementations
* [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673))
  * [Vendor] Update hcsshim to 0.8.18
* test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578))
  * test integration: Adds a test that restarts a failed container
* [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619))
  * use fu wei's suggeted interface pick for marshaling
  * add alpha version
  * move up to CRI v1 and support v1alpha in parallel
* gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682))
  * gha: make release workflow work in forks
* Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666))
  * Add unit test for plugin
* Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700))
  * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
* Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676))
  * Add support for registry host path override
  * Update documenation for OCI distribution 1.0
* archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702))
  * Cleanup lchmod logic in archive
* Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571))
  * Install specific golang version in Windows CI.
* Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660))
  * feat: Add snapshotter label to the new snapshot for container.
* snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655))
  * snapshot/devmapper: log exported methods correctly
* Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662))
  * Makefile: fix DESTDIR and PREFIX concatenation
* Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287))
  * tests: Use EnsureImageExists for image pulling
  * tests: Refactors PodSandbox creation
* move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641))
  * un-export mount.FMountat
  * move sys.FMountat() into mount package
* sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640))
  * sandbox: send pod UID to CNI plugins as K8S_POD_UID
* sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639))
  * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
* content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633))
  * content/local: inline sys.StatATimeAsTime()
* allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636))
  * allow multi gpu to be specified via ctr
  * go.mod: runc v1.0.0
  * update runc binary to v1.0.0 GA
* fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629))
  * fixing some doc links
* Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623))
  * Sync integration/go.mod with root go.mod
* archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615))
  * archive: Expose ChangeWriter to allow customized diff computing
* CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625))
  * CI: Switch to available latest images
  * fix deprecation config for default runtime
* Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614))
  * Re-enable criu in main integration runs
* runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617))
  * runtime,v2: Enable debug when containerd is on debug+ log level
  * github.com/golang/protobuf/proto is deprecated
  * Update github.com/golang/protobuf from v1.3.5 to v1.4.3
  * Update google.golang.org/grpc from v1.27.1 to v1.38.0
  * Increase golangci-lint timeout
* ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611))
  * command line flags of setting container rootfs propagation
  * add cgroupv2 setup for cos with a flag
* Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612))
  * Update gotestsum to add timestamps to junit output
* Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604))
  * Allow to pass --no-cgroup option to nvidia-container-cli
* Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577))
  * Makefile: FHS conformant manpage installation pathes
* Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594))
  * Add proper Go version before project checks
* Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580))
  * Enable cri-integration in Windows Periodic Tests
* adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573))
  * adds explanation for seccomp unset/unconfined default vs runtime default
* Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569))
  * Fix cleanup context of teardownPodNetwork
* update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572))
  * update integration/client go.sum
* Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566))
  * Revert diff/walking error change
* Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562))
  * Update opencontainers/selinux to v1.8.2
* fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565))
  * fix invalid validation error checking
* diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551))
  * diff/walking: fix defer cleanup
* Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559))
  * Add creation timestamp to RG
* Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328))
  * Fix error case in Windows layer cleanup
* Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422))
  * Small typo fix "reimporst"
  * Use DeactivateLayer to recover layers that we cannot rename
* tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284))
  * tests: Symlink volume tests
* Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535))
  * Makefile: fix DESTDIR environment variable behaviour
* Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560))
  * Change Wrapf of non-error to an actual error
  * Install apparmor parser for arm64 environment
* scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536))
  * scrub the stale TODO
* docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554))
  * docs: explicitly mention containerd's Prometheus path
* integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553))
  * integration: Cleanup containerd on test teardown
* docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548))
  * docs/cri: update ocicrypt link
  * docs/cri: fix broken links
* Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544))
  * Update Windows periodic tests
* Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165))
  * Schedule Windows job daily after midnight.
  * Update windows-periodic.yml
  * Add CI periodic Windows Jobs.
* Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273))
  * Rename atomicWrite to writeToCompletion
* Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539))
  * Do not run btrfs tests if btrfs kernel module is not loaded
* Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533))
  * Fix incorrect UA used for registry authentication
* ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531))
  * ctr: parse mount options with embedded = character
* Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472))
  * Add ruleset=4 option
  * Remove mountpoints not commonly mounted on FreeBSD
  * Add copyright header & make sure compilation succeeds on all platforms
  * Fix mounts for FreeBSD
* ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527))
  * ctr: exec handle pty resize after Start
  * ctr: exec setup IO with console
* Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534))
  * Makefile: use $@ for target file names
* Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528))
  * Fix small typo
* Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519))
  * update the link
  * Don't check for apparmor_parser to be present
* Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520))
  * Remove useless lines
* Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509))
  * fixed typos
* Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275))
  * Try next mirror in case of non-404 errors, too
* bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514))
  * bump runc version to v1.0.0-rc95
* update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511))
  * update runc binary to v1.0.0-rc95
* Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508))
  * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0
* Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507))
  * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
* Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493))
  * Makefile: allow overriding install command via environment
* tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163))
  * tests: Adds support for Windows cri-integration tests
* Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504))
  * Update docker resolver to authorize redirects
* bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505))
  * bump hcsshim version to v0.8.17
* Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498))
  * just release ctd-decoder not ctr-enc
  * Merge remote-tracking branch 'upstream/master'
  * Pin integration test image for alpine
* cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313))
  * tests: Prepull images used in tests
* plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440))
  * plugin: optimize the check for the last registration
* metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465))
  * metadata: modify NewLeaseManager to return leases.Manager
* Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100))
  * Skip TLS verification for localhost
  * Merge remote-tracking branch 'upstream/master'
* Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492))
  * Makefile: make sure manpages are built before install-man
* adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309))
  * adds credentials description
  * adds description for hosts.toml
* Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459))
  * Prepare default branch rename
  * Merge remote-tracking branch 'upstream/master'
* Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473))
  * Update vendored runc to v1.0.0.0-rc94
  * Update the runc binary used with containerd to runc v1.0.0-rc94
* Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468))
  * Fix content.ReaderAt close
* Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466))
  * Update releases doc with updated support timeline
* tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452))
  * tests: add test for adaptor
* Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450))
  * Makefile: allow overriding go command by environment
* update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462))
  * update to new cri-tools make install
* Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461))
  * Update Go to 1.16.4
  * Merge remote-tracking branch 'upstream/release/1.5'
* [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457))
  * go.mod: cut circular dependency on github.com/containerd/containerd
  * integration/client: go mod tidy
* oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063))
  * oci: fix WithDevShmSize
* [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454))
  * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411))
  * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448))
  * doc: add missing namespaces package
* update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445))
  * update seccomp version
* Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436))
  * Update golang.org/x/sys to add linux/ppc support
* go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441))
  * go.mod: cut circular dependency on github.com/containerd/containerd
  * integration/client: go mod tidy
* Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446))
  * Fix different registry hosts referencing the same auth config.
</p>
</details>

### Changes from containerd/cgroups
<details><summary>24 commits</summary>
<p>

* cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203))
  * cgroup: Optionally add process and task to a subsystems subset
* replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208))
  * replace pkg/errors from vendor
* cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207))
  * cgroup.go: avoid panic on nil interface
* Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204))
  * cgroupv2: reset lastErr to nil when subtree control is successfully written
  * cgroupv2: enable controllers before setting resources in NewChild()
* v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201))
  * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
  * v2: remove errors that are never returned
* v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202))
  * v1: reduce duplicated code
* cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200))
  * cgroup v1: implement AddProc()
* Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199))
  * Rename branch from master to main
* utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197))
  * utils: export ParseCgroupFile()
* go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194))
  * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
* Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195))
  * Use /proc/partitions to get device names
</p>
</details>

### Changes from containerd/console
<details><summary>6 commits</summary>
<p>

* Fix CI ([#55](https://github.com/containerd/console/pull/55))
  * Fix CI
  * Stop using pkg/errors
* Add support for z/OS ([#46](https://github.com/containerd/console/pull/46))
  * Console test on z/OS
  * Add support for z/OS
</p>
</details>

### Changes from containerd/continuity
<details><summary>28 commits</summary>
<p>

* fs: use syscall.Timespec.Unix ([#193](https://github.com/containerd/continuity/pull/193))
  * fs: use syscall.Timespec.Unix
* Update CI Go version to 1.17 ([#192](https://github.com/containerd/continuity/pull/192))
  * Update CI Go version to 1.17
* Build containerd/continuity on multiple Unix OSes ([#190](https://github.com/containerd/continuity/pull/190))
  * Build containerd/continuity on multiple Unix OSes
* Do not log errors before returning them ([#191](https://github.com/containerd/continuity/pull/191))
  * Do not log errors before returning them
* Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188))
  * Copy Windows file metadata
* fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187))
  * fix fmt.Errorf("%w", err) on err == nil
* Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185))
  * run gofmt with Go 1.17
  * remove direct dependency on github.com/pkg/errors
* Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186))
  * update AUTHORS
  * darwin: use utimensat syscall instead of utimes
  * fix darwin usage of du command
* go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161))
  * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
* fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184))
  * reformat nolint comments
  * fs/stat: add FreeBSD
* Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182))
  * Rename branch from master to main
* testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180))
  * testutil/loopback: print more debug info
</p>
</details>

### Changes from containerd/go-cni
<details><summary>18 commits</summary>
<p>

* run setup on networks in parallel ([#76](https://github.com/containerd/go-cni/pull/76))
  * switch to direct index
  * run setup on networks in parallel
* remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74))
  * remove: Continue on "not found" errors
* go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72))
  * go.mod: github.com/containernetworking/cni v1.0.1
* remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71))
  * remove direct dependency on github.com/pkg/errors
* update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70))
  * test: add TestLibCNIType100
  * update CNI to v1.0.0
* Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69))
  * Rename branch from master to main
* result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68))
  * result: change Raw from a struct field to a method
* result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67))
  * result: expose raw result
</p>
</details>

### Changes from containerd/imgcrypt
<details><summary>32 commits</summary>
<p>

* CHANGES: Updated CHANGES document for 1.1.3 release ([#64](https://github.com/containerd/imgcrypt/pull/64))
  * CHANGES: Updated CHANGES document for 1.1.3 release
* docs: update project branch to main ([#63](https://github.com/containerd/imgcrypt/pull/63))
  * docs: update project branch to main
* Update linter to match containerd repo ([#61](https://github.com/containerd/imgcrypt/pull/61))
  * Update linter to match containerd repo
  * update CI golang version
* Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 ([#59](https://github.com/containerd/imgcrypt/pull/59))
  * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8
* maint: Update to ocicrypt v1.1.2 ([#57](https://github.com/containerd/imgcrypt/pull/57))
  * maint: Update to ocicrypt v1.1.2
* Decouple CreateCryptoConfig() from github.com/urfave/cli ([#56](https://github.com/containerd/imgcrypt/pull/56))
  * Decouple CreateCryptoConfig() from github.com/urfave/cli
* Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 ([#55](https://github.com/containerd/imgcrypt/pull/55))
  * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7
  * replace pkg/errors and bump related library
* README: Fix CRI decryption document URL ([#53](https://github.com/containerd/imgcrypt/pull/53))
  * README: Fix CRI decryption document URL
* Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#52](https://github.com/containerd/imgcrypt/pull/52))
  * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
* Bump containerd to 1.5.2 ([#51](https://github.com/containerd/imgcrypt/pull/51))
  * Bump containerd to 1.5.2
* images: Implement ConvertFunc for image en- and decryption ([#49](https://github.com/containerd/imgcrypt/pull/49))
  * images: Implement ConvertFunc for image en- and decryption
* Add containerd-release to makefile ([#48](https://github.com/containerd/imgcrypt/pull/48))
  * Remove ctr-enc from installation
* vendor sync up with containerd 1.5 ga, and runc94 ([#47](https://github.com/containerd/imgcrypt/pull/47))
  * sync up with containerd 1.5 ga, and runc94
* Sync ctr-enc with containerd's ctr v1.5.0-rc.3 ([#46](https://github.com/containerd/imgcrypt/pull/46))
  * CICD: Run 'apt update' before pulling packages
  * ctr-enc: Set the version for ctr-enc when linking
  * Sync ctr-enc with containerd's ctr v1.5.0-rc.3
</p>
</details>

### Changes from containerd/ttrpc
<details><summary>34 commits</summary>
<p>

* Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96))
  * Add protoc-gen-go-ttrpc
* client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94))
  * client: Handle sending/receiving in separate goroutines
* Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95))
  * Run Protobuild in GitHub Actions
  * Re-generate example.pb.go
* replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93))
  * replace pkg/errors from vendor
* Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86))
  * Rename branch from master to main
* Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85))
  * Make the example command buildable on macOS
  * Run GitHub Actions on macOS
  * Make "go test" work on macOS
* Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83))
  * Return Unimplemented when services or methods are not implemented
* Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84))
  * Remove "Very new" and checked TODO items
* removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82))
  * removing glide from ignore
* go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79))
  * go.mod: github.com/prometheus/procfs v0.6.0
  * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63
  * go.mod: google.golang.org/grpc v1.27.1
  * go.mod: github.com/gogo/protobuf v1.3.2
* remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78))
  * CI: add codecov badge to readme
  * CI: remove travis
* Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77))
  * Use GitHub Actions for CI
* go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76))
  * go.mod: sirupsen/logrus v1.7.0
  * go mod tidy
</p>
</details>

### Dependency Changes

* **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 **_new_**
* **github.com/Microsoft/go-winio**                                                v0.4.17 -> v0.5.1
* **github.com/Microsoft/hcsshim**                                                 v0.8.16 -> v0.9.1
* **github.com/bits-and-blooms/bitset**                                            v1.2.0 **_new_**
* **github.com/blang/semver**                                                      v3.5.1 **_new_**
* **github.com/cenkalti/backoff/v4**                                               v4.1.2 **_new_**
* **github.com/cilium/ebpf**                                                       v0.4.0 -> v0.6.2
* **github.com/containerd/cgroups**                                                v1.0.1 -> v1.0.2
* **github.com/containerd/console**                                                v1.0.2 -> v1.0.3
* **github.com/containerd/continuity**                                             v0.1.0 -> v0.2.2
* **github.com/containerd/go-cni**                                                 v1.0.2 -> v1.1.1
* **github.com/containerd/imgcrypt**                                               v1.1.1 -> v1.1.3
* **github.com/containerd/ttrpc**                                                  v1.0.2 -> v1.1.0
* **github.com/containernetworking/cni**                                           v0.8.1 -> v1.0.1
* **github.com/containernetworking/plugins**                                       v0.9.1 -> v1.0.1
* **github.com/containers/ocicrypt**                                               v1.1.1 -> v1.1.2
* **github.com/go-logr/logr**                                                      v0.2.0 -> v1.2.2
* **github.com/go-logr/stdr**                                                      v1.2.2 **_new_**
* **github.com/golang/groupcache**                                                 8c9f03a8e57e -> 41bb18bfe9da
* **github.com/golang/protobuf**                                                   v1.3.5 -> v1.5.2
* **github.com/google/go-cmp**                                                     v0.5.4 -> v0.5.6
* **github.com/google/gofuzz**                                                     v1.1.0 -> v1.2.0
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 **_new_**
* **github.com/grpc-ecosystem/grpc-gateway**                                       v1.16.0 **_new_**
* **github.com/hashicorp/errwrap**                                                 v1.0.0 -> v1.1.0
* **github.com/hashicorp/go-multierror**                                           v1.0.0 -> v1.1.1
* **github.com/imdario/mergo**                                                     v0.3.11 -> v0.3.12
* **github.com/intel/goresctrl**                                                   v0.2.0 **_new_**
* **github.com/json-iterator/go**                                                  v1.1.10 -> v1.1.12
* **github.com/moby/spdystream**                                                   v0.2.0 **_new_**
* **github.com/moby/sys/signal**                                                   v0.6.0 **_new_**
* **github.com/modern-go/reflect2**                                                v1.0.1 -> v1.0.2
* **github.com/opencontainers/image-spec**                                         v1.0.1 -> 693428a734f5
* **github.com/opencontainers/runc**                                               v1.0.0-rc93 -> v1.0.3
* **github.com/opencontainers/runtime-spec**                                       e6143ca7d51d -> 1c3f411f0417
* **github.com/opencontainers/selinux**                                            v1.8.0 -> v1.8.2
* **github.com/pelletier/go-toml**                                                 v1.8.1 -> v1.9.3
* **github.com/prometheus/client_golang**                                          v1.7.1 -> v1.11.0
* **github.com/prometheus/common**                                                 v0.10.0 -> v0.30.0
* **github.com/prometheus/procfs**                                                 v0.6.0 -> v0.7.3
* **github.com/satori/go.uuid**                                                    v1.2.0 **_new_**
* **github.com/sirupsen/logrus**                                                   v1.7.0 -> v1.8.1
* **github.com/spf13/pflag**                                                       v1.0.5 **_new_**
* **github.com/stretchr/testify**                                                  v1.6.1 -> v1.7.0
* **github.com/vishvananda/netlink**                                               f5de75959ad5 **_new_**
* **github.com/vishvananda/netns**                                                 2eb08e3e575f **_new_**
* **go.etcd.io/bbolt**                                                             v1.3.5 -> v1.3.6
* **go.opencensus.io**                                                             v0.22.3 -> v0.23.0
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 **_new_**
* **go.opentelemetry.io/otel/trace**                                               v1.3.0 **_new_**
* **go.opentelemetry.io/proto/otlp**                                               v0.11.0 **_new_**
* **golang.org/x/crypto**                                                          0c34fe9e7dc2 -> 32db794688a5
* **golang.org/x/net**                                                             e18ecbb05110 -> fe4d6282115f
* **golang.org/x/oauth2**                                                          bf48bf16ab8d -> 2bc19b11175f
* **golang.org/x/sync**                                                            09787c993a3a -> 036812b2e83c
* **golang.org/x/sys**                                                             47abb6519492 -> 1d35b9e2eb4e
* **golang.org/x/term**                                                            7de9c90e9dd1 -> 6886f2dfbf5b
* **golang.org/x/text**                                                            v0.3.4 -> v0.3.7
* **golang.org/x/time**                                                            3af7569d3a1e -> 1f47c861a9ac
* **google.golang.org/appengine**                                                  v1.6.5 -> v1.6.7
* **google.golang.org/grpc**                                                       v1.27.1 -> v1.43.0
* **google.golang.org/protobuf**                                                   v1.27.1 **_new_**
* **gopkg.in/yaml.v3**                                                             9f266ea9e77c -> 496545a6307b
* **k8s.io/api**                                                                   v0.20.6 -> v0.23.0
* **k8s.io/apimachinery**                                                          v0.20.6 -> v0.23.0
* **k8s.io/apiserver**                                                             v0.20.6 -> v0.23.0
* **k8s.io/client-go**                                                             v0.20.6 -> v0.23.0
* **k8s.io/component-base**                                                        v0.20.6 -> v0.23.0
* **k8s.io/cri-api**                                                               v0.20.6 -> v0.23.0
* **k8s.io/utils**                                                                 67b214c5f920 -> cb0fa318a74b
* **sigs.k8s.io/json**                                                             c049b76a60c6 **_new_**

Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)

containerd 1.6.0-beta.5

Welcome to the v1.6.0-beta.5 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

### Highlights

#### Runtime

* **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744))
* **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813))
* **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817))
* **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918))
* **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011))
* **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031))
* **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206))

#### Windows

* **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131))
* **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778))

#### CRI

* **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695))
* **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439))
* **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619))
* **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627))
* **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964))
* **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113))
* **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111))
* **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130))
* **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170))
* **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320))

#### Other

* **Add a shared namespace label for cross-namespace content sharing** ([#5043](https://github.com/containerd/containerd/pull/5043))
* **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606))
* **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610))
* **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965))
* **Add OpenTelemetry trace injection to grpc client** ([#5992](https://github.com/containerd/containerd/pull/5992))
* **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122))

#### Client

* **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709))
* **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Phil Estes
* Wei Fu
* Akihiro Suda
* Maksym Pavlenko
* Sebastiaan van Stijn
* Kazuyoshi Kato
* Michael Crosby
* Mike Brown
* Claudiu Belu
* haoyun
* Daniel Canter
* Gabriel Adrian Samfira
* zounengren
* AdamKorcz
* Adelina Tuvenie
* Brian Goff
* Kohei Tokunaga
* Davanum Srinivas
* Shiming Zhang
* Samuel Karp
* Enrico Weigelt, metux IT consult
* Markus Lehtonen
* Alakesh Haloi
* Hajime Tazaki
* Kevin Parsons
* Iceber Gu
* Nashwan Azhari
* Aditi Sharma
* Gijs Peskens
* Danielle Lancashire
* David Porter
* Jacob MacElroy
* wanglei
* Alexandre Peixoto Ferreira
* Cody Roseborough
* Furkan
* Jiaming Xu
* Kir Kolyshkin
* Miao Wang
* Neil Johnson
* Paul "TBBle" Hampson
* Priyanka Saggu
* Romain Aviolat
* Sunghoon Kang
* Tõnis Tiigi
* Zhiyu Li
* Alexander Minbaev
* Alexey Ivanov
* Artem Khramov
* Ben Hutchings
* Cory Bennett
* Da McGrady
* Dan Williams
* Eng Zer Jun
* Eric Ernst
* Ethan Chen
* Fabiano Fidêncio
* Fabiano Fidêncio
* Fupan Li
* Gaurav Gahlot
* Gunju Kim
* Jacob Blain Christen
* James Sturtevant
* Jayme Howard
* Jintao Zhang
* Justin Terry
* Kaijie Chen
* Kern Walster
* Kitt Hsu
* Lantao Liu
* Ma Xinjian
* Manabu Sugimoto
* Markus Lippert
* Mikko Ylinen
* Ng Yang
* Nicolas Chariglione
* Olli Janatuinen
* Peri Thompson
* Quan Tian
* Radostin Stoyanov
* Rui Lopes
* Sambhav Kothari
* Samuel Ortiz
* Sebastian Hasler
* Takumasa Sakao
* Tobias Klauser
* Yang Yang
* Yifan Yuan
* Zilong Wang
* Zufar Dhiyaulhaq
* botieking98
* chenxiaoyu
* jayonlau
* jerryzhuang
* kerthcet
* levinxo
* linrunlong
* ningmingxiao
* scuzhanglei
* wangzhan
* Étienne Guesnet

### Changes
<details><summary>911 commits</summary>
<p>

* Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407))
  * Prepare release notes for v1.6.0-beta.5
* Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292))
  * Integration: Check GCP secrets on Windows CI artifact upload.
* Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c)
  * only relabel cri managed host mounts
* Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439))
  * cri: add ignore_rdt_not_enabled_errors config option
  * Update dependencies
  * cri: annotations for controlling RDT class
  * tasks: add Linux rdt support
  * cmd: add --rdt-class command line option
  * oci: implement WithRdt
* fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391))
  * fix: use _ for consistency
* content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403))
  * content/local: use syscall.Timespec.Unix
* docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207))
  * docs: document the runtime shim plugin config options
  * docs: use proper markdown lists in containerd-config.toml.5.md
* fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304))
  * fix(ctr): enable networking for Windows containers
* Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394))
  * Fix $(PWD) issue for Windows makefile
* only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395))
  * fix: only test abstract unix socket on linux
* Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390))
  * Expect ErrorNotFound on Windows after Kill()
  * Replace tskill with taskkill
* fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291))
  * fix when kernel version < 4.13rc1 by using index=off cause overlay test error
* Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384))
  * Fix no-daemon flag for integration/client tests
* Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122))
  * Enable lazy init for ext4 with devicemapper
* Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385))
  * Fix flakiness on Windows for list stats
* cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347))
  * cri-integration: Add Windows default paths
* Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383))
  * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0
  * Use insecure.NewCredentials instead of grpc.WithInsecure
  * Upgrade OpenTelemetry dependencies
* Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322))
  * Fix default makefile target for windows
* Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379))
  * Disable TestContainerHook on Windows
* seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372))
  * seutil: Fix setting the "container_kvm_t" label
* Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350))
  * Remove Windows integration testing for 2004.
* OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308))
  * OCI: Mount (accessible) host devices in privileged rootless containers
  * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch
* cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320))
  * fixup: check for swap accounting
  * fixup: handle diff between cgroupsv1 and v2
  * cri: add support for configuring swap
* Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275))
  * Replace find with native Go code
  * Enable TestVolumeOwnership on Windows
* Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296))
  * Prepare release notes for v1.6.0-beta.4
* refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358))
  * feat: Errorf usage
* Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021))
  * Use task plugin for runc shim
  * Seperate shim manager and task service
  * Split runc shim into plugin components
  * Add shutdown package
* CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155))
  * cri, sandbox: pass sandbox resource details if available, applicable
* medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354))
  * medatada: make namespaces' deletion error less cryptic
* ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373))
  * add-list-stat: return container list if filter is nil
* integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369))
  * integration: deflake TestContainerdRestart
* feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225))
  * feat: support custom timeout for blot open
* Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333))
  * Update Go to 1.17.5
* cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332))
  * cri/server: use consistent alias for pkg/ioutil
* Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364))
  * Disable restart monitor test in Windows
* Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338))
  * Don't fail-fast on Windows integration tests
* Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355))
  * Run windows parallel integration test as short
  * Update restart monitor test to output daemon logs on failure
* go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263))
  * images/converter: remove deprecated types
  * go.mod: update image-spec to latest (v1.0.3-dev)
* Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353))
  * Skip WithAdditionalGIDs on Darwin
* Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303))
  * Use RFC3339 format so rg cleanup works
* update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330))
  * go.mod: github.com/opencontainers/runc v1.0.3
  * update runc binary to v1.0.3
* Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329))
  * Allow native snapshotter on Darwin
* Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328))
  * Do not use `go get` to install executables
* Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326))
  * Include runtime v2 in default builtins
* Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314))
  * Add Windows Server 2022 CI runs
* Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324))
  * Use a single RUN command
  * Set explicit ACL on test files
* integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311))
  * integration: align tags of test images
* Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325))
  * Set CONTAINERD_ROOT in Windows cri-integration
* export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312))
  * export oci.DeviceFromPath()
* Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321))
  * Update continuity dependency
  * Update volume test images
* Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201))
  * Add error logging on cleanup
  * Update TestRestartMonitor expected time check
* Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319))
  * Move volume images from gcr to ghcr
* Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301))
  * Revert shim plugin migration
* Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317))
  * Add permissions
  * Authenticate against ghcr.io
* oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306))
  * oci/deviceFromPath(): correctly check device types
* Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315))
  * Skip TestExportAndImportMultiLayer on Windows
* Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290))
  * Add image build workflow
* Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286))
  * Integration: Separate Windows Periodic Tests workflow trigger.
* Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274))
  * Build volume test images on Windows
* Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297))
  * Add VMware TKG & TCE to Containerd adopters
* Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293))
  * Vagrantfile: update to Fedora 35
* Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269))
  * Update README.md repo->org
* Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278))
  * Fix executable file not found when restoring shims
* ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271))
  * ctr/snapshots/diff: don't show the media-type in output
* ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289))
  * ctr: Add Linux Capabilities control flags
* integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270))
  * integration: add stats result in error message
* releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287))
  * docs: mark 1.4 as Extended
  * docs: fix RELEASES.md gRPC API anchor
* feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284))
  * feat: skip ci for fork
* content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280))
  * content/local: Close the file if Seek fails
* Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268))
  * Integration: Remove explicit version passing to `azure/CLI`.
* Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276))
  * Fix wrong make target on documentation
* fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272))
  * fix: server error return
* Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267))
  * Prepare release notes for v1.6.0-beta.3
  * Update API version in go.mod
  * Update release name to use consistent format
* feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254))
  * fix: make max recv/send msg size setting default
  * feat:support custom callopts on client side
* [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258))
  * [CRI] Fix panic when registry.mirrors use localhost
* Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241))
  * Add support for TMP override on toml
* CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170))
  * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options
* Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35)
  * schema1: reject ambiguous documents
  * images: validate document type before unmarshal
* [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111))
  * [cri] add sandbox and container latency metrics
* Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255))
  * Generalize Windows CI setup script for any user.
  * Standardize cmdlet capitalization in Windows CI scripts.
* feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253))
  * feat: use rwmutex instead
* Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206))
  * Fix package alias
  * Support custom runtime path when launching tasks
  * Add runtime path in CreateTaskRequest
* Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246))
  * Close file if permission modification fails
* release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250))
  * release: change tar name to match prior releases
* Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237))
  * Fix wrong error returned for image index lookup
* Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221))
  * Fix containerd fails to pull OCI image with non-`http(s)://` urls
* Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223))
  * Prepare release notes for v1.6.0-beta.2
* Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196))
  * Rename release dockerfile to omit distro name
  * release: improve dockerfile
  * Add arm64 to releases
* use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236))
  * use write lock when updating container stats
* go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230))
  * go.mod: Bump hcsshim to v0.9.1
* go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228))
  * go.mod: Bump ttrpc to 1.1.0
* go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213))
  * go.mod: github.com/moby/sys/mountinfo v0.5.0
  * go.mod: github.com/moby/sys/signal v0.6.0
  * go.mod: github.com/moby/sys/symlink v0.2.0
  * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
* cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222))
  * cleanup: add more description on comment
* Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211))
  * Update Go to 1.17.3
* CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214))
  * CI: bump up crun: 1.0 -> 1.3
* Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205))
  * Pin az CLI version
* Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918))
  * Address PR comments
  * Fix build after rebase
  * Migrate task directory
  * Expose shim process interface
  * Fix after rebase
  * Cleanup shim loading
  * Move shim restore to a separate file
  * Fix backward compatibility with old task shims
  * Add plugin dependency between shim and shim services
  * Rework task create and cleanup flow
  * Add task manager
  * Rename task manager to shim manager
* [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113))
  * Implement CRI container and pods stats
  * Vendor latest k8s.io/cri-api and netlink
* test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200))
  * test: Add grace period for restart monitor test
* integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179))
  * integration: Enables TestRuntimeHandler for Windows
* Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171))
  * Add mkdir on Dockerfile
* sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189))
  * sys/reaper: avoid leaky goroutine when exec timeout
* adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184))
  * adds additional debug out to timebox cni setup
* converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176))
  * converter: Allow hooks during image conversion
* compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177))
  * compression: support zstd with skippable frame
* integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182))
  * integration: Enables TestVolumeCopyUp for Windows
*  integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121))
  * integration: Enable some tests for Windows (part 2)
* integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085))
  * integration: Enable some tests for Windows
* Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125))
  * feat(doc): update to version 2 syntax
* fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166))
  * fix shim reaper wait command execute blocked
* content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145))
  * content: close stream after commit request
* Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165))
  * Adding scope tests for ParseAuthHeader
  * Adding tests for GenerateTokenOptions
  * Generate token options with each scope as a separate string.
* vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167))
  * vendor: Updates go-cni
* commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159))
  * commands: Enables task metrics for Windows
* vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149))
  * vendor: update moby/sys for darwin support
* Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144))
  * Prepare release notes for v1.6.0-beta.1
  * Update mailmap
  * Update api vendor
* bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136))
  * bump CNI to spec v1.0.0
* Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992))
  * Inject otel traces to grpc client.
* client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142))
  * client: expose (*image).platform
* Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128))
  * feat(doc): add Core Scheduling documentation
* Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130))
  * Ensure namespace is proxied to grpc/ttrpc plugins
* fix #6054  MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109))
  * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
* Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124))
  * Output a warning for label image labels instead of erroring
* Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132))
  * Fix spelling mistake in Windows snapshotter
* Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126))
  * Windows: Cleanup rm- prefixed layers
* cleanup deprecated package  `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118))
  * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
* close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115))
  * close Writer after use which may leak mem
* Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778))
  * Adds Windows resource limits support
* Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098))
  * Prepare release notes for v1.6.0-beta.0
* Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105))
  * Add error message to in TestContainerdRestart integration test
* Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110))
  * Fix typo in the NewContainer function documentation
* Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104))
  * Update cgroups to v1.0.2
* btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100))
  * test: check file content after mount
* Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107))
  * Update test timeout based on recent cancellations
* Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106))
  * Remove extra test_teardown
  * Check the pid in cri test teardown
* add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011))
  * fix integration client vendor
  * add runc shim support for sched core
* integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579))
  * integration: Enables Windows containerd restart test
* vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099))
  * vendor: Bump hcsshim to 0.9.0
* [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695))
  * Add CNI conf based on runtime class
* Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102))
  * Update Go to 1.17.2
* integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933))
  * integration: Adds test for multilayer image import
* runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031))
  * runtime: should fail fast if dial error on shim
* Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034))
  * Windows: Fixes Windows containers with image volumes
* run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094))
  * run `gofmt` with Go 1.17
* pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088))
  * pkg/cap: remove an outdated comment
* Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066))
  * Update go otel 1.0.1
* Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086))
  * Update ADOPTERS.md with additional uses
* modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082))
  * modify the way for checking cos
* Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915))
  * Fuzzing: Add 4 fuzzers + small modifications
* Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081))
  * Pin mingw to version 10.2.0
  * Update to golang 1.17.1
  * Install nssm
* Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq)
  * btrfs: reduce permissions on plugin directories
  * v1 runtime: reduce permissions for bundle dir
  * v2 runtime: reduce permissions for bundle dir
* task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079))
  * task service: return known error type
* refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973))
  * refactor: move from io/ioutil to io and os package
* fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076))
  * fix: update vendor
  * cleanup: import from k8s.io/utils/clock/testing instead
  * cleanup: import from k8s.io/utils/clock instead
* feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069))
  * feat: enable cri remote client to call with grpc calloptions
* cleanup k8s ansible yaml (carry for #5713)  ([#6074](https://github.com/containerd/containerd/pull/6074))
  * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>)
* feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070))
  * fix: wrong flag type
  * feat: support import image for specific platform
* Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065))
  * Update mirror images to take target image name
* fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059))
  * fix: make exec-id flag required in exec command
* images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052))
  * images: enable converter to uncompress zstd
* replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922))
  * replace deprecated function
* integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853))
  * integration: Adds Windows HostProcess tests
* Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047))
  * Fix main branch build is broken
* Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003))
  * Add open telemetry logging hook for logrus
* Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023))
  * Change oci.WithUser behavior for LCOW
* switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946))
  * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
* import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926))
  * import: Raise error if the imported image is filtered out
* Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043))
  * Fix panic in metadata content writer on copy error
* Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001))
  * Move tracing to plugin
* ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916))
  * ctr: Fixes Windows image import
* update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017))
  * go.mod: update opentelemetry modules to v1.0.0
* fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979))
  * fix error string format
* Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036))
  * Add github action to mirror image
* add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027))
  * add current process state to the error message
*  FreeBSD: fix tar headers & the nil check on getxattr  ([#5991](https://github.com/containerd/containerd/pull/5991))
  * FreeBSD: fix tar headers & the nil check on getxattr
* gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035))
  * gha: collect Vagrant VMs' IP addresses
* bump continuity and console version  that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033))
  * bump continuity and console version that remove pkg/errors
* import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997))
  * import: Add option to skip creating digest image
* ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998))
  * ctr namespaces: improve usage string
* bump console version to v1.0.3 that remove pkg/errors  ([#6028](https://github.com/containerd/containerd/pull/6028))
  * bump console version to v1.0.3 that remove pkg/errors
* Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032))
  * Use github images for integration tests
* Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995))
  * Fix typo
* Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012))
  * Enable image config labels in ctr and CRI container creation
* Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970))
  * Make sure exit signals trigger an exit during init
* task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974))
  * task delete: Closes task IO before waiting
* CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985))
  * CI: bump up crun to 1.0
* seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982))
  * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990))
  * Update to Go 1.17.1
* CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987))
  * CI: Switch to available latest images
* add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610))
  * add xfs support to devicemapper snapshotter
* Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956))
  * Fixes task kill --force on Windows
* Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817))
  * Add support for shim plugins
* vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976))
  * vendor: update continuity for darwin support
* replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906))
  * replace uses of os/exec with golang.org/x/sys/execabs
* complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972))
  * Additional integration tests for pulling image with labels
* Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966))
  * Fix content copy to not ignore unexpected EOF
* add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964))
  * add ip_pref CNI options for primary pod ip
* cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939))
  * cri: add devices for privileged container
* sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954))
  * sandbox: Allows the sandbox to be deleted in NotReady state
* pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969))
  * pin protobuild version to tag
* Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965))
  * use a const metric for build_info
  * Add metric exposing build version&revision
* Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627))
  * add cri test case
  * feature: add field LinuxContainerResources.Unified on cri
* integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861))
  * integration: investigate TestRestartMonitor's failure
* Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917))
  * Address issue forms feedback
  * Use issue forms for bug reporting
* cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945))
  * cri: patch update image labels
* darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936))
  * darwin: runtime support
  * darwin: use the default values for socketRoot variable
* Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858))
  * Update RELEASES.md
* archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949))
  * archive: Add WriteDiff error logs
* replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958))
  * replace deprecated Dail with DailContext
* Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951))
  * Add WS2022 support in Windows Periodic tests
* Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943))
  * content fuzzer: Clean up tempdir
* using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944))
  * using Hosts replace deprecated field
* fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947))
  * fix document non-synchronous in crictl.md
* go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929))
  * go.mod: Update hcsshim to v0.8.21
* Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937))
  * Makefile.linux: build on riscv with PIE
* Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932))
  * Fix cwd flag for `ctr tasks exec`
* Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927))
  * Update Pause image in tests & config
* cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122))
  * cri: Devices ownership from SecurityContext
* Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921))
  * Fix pull fails on unexpected EOF
* Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845))
  * Adding testing of two devices
  * Fix dir support for devices V3 (#4847)
* windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914))
  * windows: The DefaultSpec platform should match the Default matcher
* Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865))
  * Add RunAsUserName functionality for the Windows Pod Sandbox Container
* bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899))
  * go.mod: update runc to v1.0.2
  * update runc binary to v1.0.2
* Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903))
  * Run `go fmt` with Go 1.17
* go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905))
  * go.mod: github.com/pelletier/go-toml v1.9.3
* cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902))
  * cri: filter selinux xattr for image volumes
* Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131))
  * Added windows hostProcess cni skip
* script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897))
  * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
* Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889))
  * Bump integration timeout to 35 min
  * Update to Go 1.17
* integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896))
  * integration: fix TestContainerPids
* [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891))
  * [ctr] add HOSTNAME env for host network
* Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886))
  * Fuzzing: Add fuzzer
* Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884))
  * Add env for SystemdCgroup driver
* Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878))
  * Allow expanded DNS configuration
* Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863))
  * Fuzzing: Add 4 fuzzers
* Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813))
  * Cleanup v2 shim
* Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840))
  * Use http.Get to download binaries instead of exec.Command
  * Fuzzing: Add experimental version of container fuzzer
* add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846))
  * add cpu-shares to ctr
* docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847))
  * docs: rename main to master
* content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849))
  * content: return the error with its timestamp
* Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857))
  * Fix bad `make protos` failure
* replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851))
  * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
* docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856))
  * docs: remove FOSSA's badge
* BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850))
  * BUILDING.md: remove some bits about building runc
  * BUILDING.md: markdown fixes
* go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836))
  * go.mod: update kubernetes to v1.22.0
* [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852))
  * Add trap to cri-integration test script
* docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848))
  * docs: list all snapshotter-related build flags
* Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835))
  * Move plugin context events into separate plugin
* Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839))
  * Fix Linux CI Linter using go 1.15.14
* Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842))
  * Update Go to 1.16.7
* Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838))
  * Cleanup CI
* Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834))
  * Remove redundant build tags
* Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830))
  * Change default directories on Darwin
* [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731))
  * [otel-tracing] vendor and go modules changes
  * [otel-tracing] Initial opentelemetry support
  * remove go 1.13 from containerd
* Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829))
  * Fuzzing: Fix for OSS-fuzz issue 36825
* Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825))
  * Fuzzing: Add two more fuzzers
* scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760))
  * scripts: declare ROOT closer to where it's used, and some DRY changes
  * scripts: add missing quotes, and minor linting issues
  * test/build-utils.sh: remove support for Debian Jessie
* platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821))
  * platforms: Format(): use path.Join() instead of joinNotEmpty()
* Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823))
  * Fuzzing: Remove panics of container_fuzzer
* Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785))
  * Change protoc link
  * Split fuzzer to two fuzzers
  * Fuzzing: Add container fuzzer
* runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746))
  * runtime: fix the issue of create new socket with abstract address
* mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809))
  * mergo: Upgrade to 0.3.12 to fix panic
* ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802))
  * ci: install criu from PPA
* Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144))
  * Split release steps into multiple tasks
  * Update release workflow to upload binary without CNI
* Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725))
  * Enable critest on Windows
* Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792))
  * Script to check if entries in go.mod files are in sync
* Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043))
  * Add shared content label to namespaces
* platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784))
  * platforms: add "ios" as known OS, "loong64" as known ARCH
* Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804))
  * Updates the location of protobuf downloads in docs
* Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803))
  * Update protobuf install to use correct repository
* overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624))
  * overlay: add an optional label of upperdir location of each snapshot
* Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693))
  * Support SIGRTMIN+n signals
* respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800))
  * respect context timeout in shim binary call
* Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716))
  * Introduce a new go module - containerd/api for use in standalone clients
* grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606))
  * grpc config add options tcp_tls_ca
* integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162))
  * integration: Windows volume-copy-up images
* add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795))
  * add CRI support matrix to RELEASES.md
* adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794))
  * adding a little more clarity
* update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793))
  * update gotestsum to v1.7.0
* Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756))
  * Discard blocks when removing a thin device
* Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590))
  * Makefile: pass build tags to manpage build process
  * Makefile: fix tags parameter computation
* Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744))
  * Add runtime label to metrics
* interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745))
  * interface about shim build check
* integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775))
  * integration: log all processes to investigate the test failure
* Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779))
  * Fuzzing: Add archive fuzzer
* Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687))
  * Add docker fetch fuzzer
* Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735))
  * Support custom compressor for walking differ
* remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770))
  * remotes/docker/pusher.go: Fix missing Close()
* remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769))
  * remotes/docker/fetcher.go: Fix missing Close()
* Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771))
  * Update cpuguy83/go-md2man binary to v2.0.1
* Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750))
  * Dockerfile.test: build containerd in separate stage
  * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
  * Dockerfile.test: clean up apt indexes after installing
  * Dockerfile.test: build critools in a separate stage
  * Dockerfile.test: build cni in a separate stage
  * Dockerfile.test: standard directory to collect build aftifacts
  * Dockerfile.test: split dev stage, and optimize order
  * Dockerfile.test: skip curl, gcc, git and make install
  * install-critools: make sure DESTDIR exists
* update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754))
  * update gotestsum to current master
* Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w)
  * Add test for archive breakout test for lchmod
* Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755))
  * Use systemd cgroup driver for cgroupv2 tests
* update runc  to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751))
  * go.mod: runc v1.0.1
  * update runc binary to v1.0.1
* runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737))
  * runtime: runc v2: remove redundant validation
* Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727))
  * Move loop check to before sleep
  * Add timestamp to flaky restart monitor test
* Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722))
  * integration/client: go mod tidy
  * Update Go to 1.16.6
* client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447))
  * client: surface a connection error more clearly
* Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712))
  * Fix missing Body.Close() calls on push to docker remote
* remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710))
  * remove pkg/cri/platforms package
* Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709))
  * Allow WithServices to use custom implementations
* [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673))
  * [Vendor] Update hcsshim to 0.8.18
* test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578))
  * test integration: Adds a test that restarts a failed container
* [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619))
  * use fu wei's suggeted interface pick for marshaling
  * add alpha version
  * move up to CRI v1 and support v1alpha in parallel
* gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682))
  * gha: make release workflow work in forks
* Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666))
  * Add unit test for plugin
* Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700))
  * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
* Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676))
  * Add support for registry host path override
  * Update documenation for OCI distribution 1.0
* archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702))
  * Cleanup lchmod logic in archive
* Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571))
  * Install specific golang version in Windows CI.
* Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660))
  * feat: Add snapshotter label to the new snapshot for container.
* snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655))
  * snapshot/devmapper: log exported methods correctly
* Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662))
  * Makefile: fix DESTDIR and PREFIX concatenation
* Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287))
  * tests: Use EnsureImageExists for image pulling
  * tests: Refactors PodSandbox creation
* move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641))
  * un-export mount.FMountat
  * move sys.FMountat() into mount package
* sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640))
  * sandbox: send pod UID to CNI plugins as K8S_POD_UID
* sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639))
  * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
* content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633))
  * content/local: inline sys.StatATimeAsTime()
* allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636))
  * allow multi gpu to be specified via ctr
  * go.mod: runc v1.0.0
  * update runc binary to v1.0.0 GA
* fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629))
  * fixing some doc links
* Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623))
  * Sync integration/go.mod with root go.mod
* archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615))
  * archive: Expose ChangeWriter to allow customized diff computing
* CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625))
  * CI: Switch to available latest images
  * fix deprecation config for default runtime
* Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614))
  * Re-enable criu in main integration runs
* runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617))
  * runtime,v2: Enable debug when containerd is on debug+ log level
  * github.com/golang/protobuf/proto is deprecated
  * Update github.com/golang/protobuf from v1.3.5 to v1.4.3
  * Update google.golang.org/grpc from v1.27.1 to v1.38.0
  * Increase golangci-lint timeout
* ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611))
  * command line flags of setting container rootfs propagation
  * add cgroupv2 setup for cos with a flag
* Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612))
  * Update gotestsum to add timestamps to junit output
* Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604))
  * Allow to pass --no-cgroup option to nvidia-container-cli
* Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577))
  * Makefile: FHS conformant manpage installation pathes
* Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594))
  * Add proper Go version before project checks
* Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580))
  * Enable cri-integration in Windows Periodic Tests
* adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573))
  * adds explanation for seccomp unset/unconfined default vs runtime default
* Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569))
  * Fix cleanup context of teardownPodNetwork
* update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572))
  * update integration/client go.sum
* Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566))
  * Revert diff/walking error change
* Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562))
  * Update opencontainers/selinux to v1.8.2
* fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565))
  * fix invalid validation error checking
* diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551))
  * diff/walking: fix defer cleanup
* Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559))
  * Add creation timestamp to RG
* Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328))
  * Fix error case in Windows layer cleanup
* Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422))
  * Small typo fix "reimporst"
  * Use DeactivateLayer to recover layers that we cannot rename
* tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284))
  * tests: Symlink volume tests
* Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535))
  * Makefile: fix DESTDIR environment variable behaviour
* Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560))
  * Change Wrapf of non-error to an actual error
  * Install apparmor parser for arm64 environment
* scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536))
  * scrub the stale TODO
* docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554))
  * docs: explicitly mention containerd's Prometheus path
* integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553))
  * integration: Cleanup containerd on test teardown
* docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548))
  * docs/cri: update ocicrypt link
  * docs/cri: fix broken links
* Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544))
  * Update Windows periodic tests
* Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165))
  * Schedule Windows job daily after midnight.
  * Update windows-periodic.yml
  * Add CI periodic Windows Jobs.
* Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273))
  * Rename atomicWrite to writeToCompletion
* Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539))
  * Do not run btrfs tests if btrfs kernel module is not loaded
* Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533))
  * Fix incorrect UA used for registry authentication
* ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531))
  * ctr: parse mount options with embedded = character
* Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472))
  * Add ruleset=4 option
  * Remove mountpoints not commonly mounted on FreeBSD
  * Add copyright header & make sure compilation succeeds on all platforms
  * Fix mounts for FreeBSD
* ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527))
  * ctr: exec handle pty resize after Start
  * ctr: exec setup IO with console
* Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534))
  * Makefile: use $@ for target file names
* Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528))
  * Fix small typo
* Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519))
  * update the link
  * Don't check for apparmor_parser to be present
* Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520))
  * Remove useless lines
* Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509))
  * fixed typos
* Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275))
  * Try next mirror in case of non-404 errors, too
* bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514))
  * bump runc version to v1.0.0-rc95
* update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511))
  * update runc binary to v1.0.0-rc95
* Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508))
  * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0
* Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507))
  * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
* Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493))
  * Makefile: allow overriding install command via environment
* tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163))
  * tests: Adds support for Windows cri-integration tests
* Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504))
  * Update docker resolver to authorize redirects
* bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505))
  * bump hcsshim version to v0.8.17
* Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498))
  * just release ctd-decoder not ctr-enc
  * Merge remote-tracking branch 'upstream/master'
  * Pin integration test image for alpine
* cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313))
  * tests: Prepull images used in tests
* plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440))
  * plugin: optimize the check for the last registration
* metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465))
  * metadata: modify NewLeaseManager to return leases.Manager
* Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100))
  * Skip TLS verification for localhost
  * Merge remote-tracking branch 'upstream/master'
* Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492))
  * Makefile: make sure manpages are built before install-man
* adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309))
  * adds credentials description
  * adds description for hosts.toml
* Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459))
  * Prepare default branch rename
  * Merge remote-tracking branch 'upstream/master'
* Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473))
  * Update vendored runc to v1.0.0.0-rc94
  * Update the runc binary used with containerd to runc v1.0.0-rc94
* Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468))
  * Fix content.ReaderAt close
* Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466))
  * Update releases doc with updated support timeline
* tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452))
  * tests: add test for adaptor
* Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450))
  * Makefile: allow overriding go command by environment
* update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462))
  * update to new cri-tools make install
* Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461))
  * Update Go to 1.16.4
  * Merge remote-tracking branch 'upstream/release/1.5'
* [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457))
  * go.mod: cut circular dependency on github.com/containerd/containerd
  * integration/client: go mod tidy
* oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063))
  * oci: fix WithDevShmSize
* [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454))
  * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411))
  * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448))
  * doc: add missing namespaces package
* update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445))
  * update seccomp version
* Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436))
  * Update golang.org/x/sys to add linux/ppc support
* go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441))
  * go.mod: cut circular dependency on github.com/containerd/containerd
  * integration/client: go mod tidy
* Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446))
  * Fix different registry hosts referencing the same auth config.
</p>
</details>

### Changes from containerd/cgroups
<details><summary>24 commits</summary>
<p>

* cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203))
  * cgroup: Optionally add process and task to a subsystems subset
* replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208))
  * replace pkg/errors from vendor
* cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207))
  * cgroup.go: avoid panic on nil interface
* Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204))
  * cgroupv2: reset lastErr to nil when subtree control is successfully written
  * cgroupv2: enable controllers before setting resources in NewChild()
* v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201))
  * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
  * v2: remove errors that are never returned
* v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202))
  * v1: reduce duplicated code
* cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200))
  * cgroup v1: implement AddProc()
* Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199))
  * Rename branch from master to main
* utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197))
  * utils: export ParseCgroupFile()
* go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194))
  * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
* Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195))
  * Use /proc/partitions to get device names
</p>
</details>

### Changes from containerd/console
<details><summary>6 commits</summary>
<p>

* Fix CI ([#55](https://github.com/containerd/console/pull/55))
  * Fix CI
  * Stop using pkg/errors
* Add support for z/OS ([#46](https://github.com/containerd/console/pull/46))
  * Console test on z/OS
  * Add support for z/OS
</p>
</details>

### Changes from containerd/continuity
<details><summary>20 commits</summary>
<p>

* Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188))
  * Copy Windows file metadata
* fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187))
  * fix fmt.Errorf("%w", err) on err == nil
* Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185))
  * run gofmt with Go 1.17
  * remove direct dependency on github.com/pkg/errors
* Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186))
  * update AUTHORS
  * darwin: use utimensat syscall instead of utimes
  * fix darwin usage of du command
* go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161))
  * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
* fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184))
  * reformat nolint comments
  * fs/stat: add FreeBSD
* Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182))
  * Rename branch from master to main
* testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180))
  * testutil/loopback: print more debug info
</p>
</details>

### Changes from containerd/go-cni
<details><summary>15 commits</summary>
<p>

* remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74))
  * remove: Continue on "not found" errors
* go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72))
  * go.mod: github.com/containernetworking/cni v1.0.1
* remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71))
  * remove direct dependency on github.com/pkg/errors
* update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70))
  * test: add TestLibCNIType100
  * update CNI to v1.0.0
* Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69))
  * Rename branch from master to main
* result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68))
  * result: change Raw from a struct field to a method
* result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67))
  * result: expose raw result
</p>
</details>

### Changes from containerd/ttrpc
<details><summary>34 commits</summary>
<p>

* Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96))
  * Add protoc-gen-go-ttrpc
* client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94))
  * client: Handle sending/receiving in separate goroutines
* Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95))
  * Run Protobuild in GitHub Actions
  * Re-generate example.pb.go
* replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93))
  * replace pkg/errors from vendor
* Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86))
  * Rename branch from master to main
* Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85))
  * Make the example command buildable on macOS
  * Run GitHub Actions on macOS
  * Make "go test" work on macOS
* Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83))
  * Return Unimplemented when services or methods are not implemented
* Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84))
  * Remove "Very new" and checked TODO items
* removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82))
  * removing glide from ignore
* go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79))
  * go.mod: github.com/prometheus/procfs v0.6.0
  * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63
  * go.mod: google.golang.org/grpc v1.27.1
  * go.mod: github.com/gogo/protobuf v1.3.2
* remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78))
  * CI: add codecov badge to readme
  * CI: remove travis
* Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77))
  * Use GitHub Actions for CI
* go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76))
  * go.mod: sirupsen/logrus v1.7.0
  * go mod tidy
</p>
</details>

### Dependency Changes

* **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 **_new_**
* **github.com/Microsoft/go-winio**                                                v0.4.17 -> v0.5.1
* **github.com/Microsoft/hcsshim**                                                 v0.8.16 -> v0.9.1
* **github.com/bits-and-blooms/bitset**                                            v1.2.0 **_new_**
* **github.com/blang/semver**                                                      v3.5.1 **_new_**
* **github.com/cenkalti/backoff/v4**                                               v4.1.2 **_new_**
* **github.com/cilium/ebpf**                                                       v0.4.0 -> v0.6.2
* **github.com/containerd/cgroups**                                                v1.0.1 -> v1.0.2
* **github.com/containerd/console**                                                v1.0.2 -> v1.0.3
* **github.com/containerd/continuity**                                             v0.1.0 -> 8e53e7cac79d
* **github.com/containerd/go-cni**                                                 v1.0.2 -> aa8bf14323a5
* **github.com/containerd/ttrpc**                                                  v1.0.2 -> v1.1.0
* **github.com/containernetworking/cni**                                           v0.8.1 -> v1.0.1
* **github.com/containernetworking/plugins**                                       v0.9.1 -> v1.0.1
* **github.com/go-logr/logr**                                                      v0.2.0 -> v1.2.2
* **github.com/go-logr/stdr**                                                      v1.2.2 **_new_**
* **github.com/golang/groupcache**                                                 8c9f03a8e57e -> 41bb18bfe9da
* **github.com/golang/protobuf**                                                   v1.3.5 -> v1.5.2
* **github.com/google/go-cmp**                                                     v0.5.4 -> v0.5.6
* **github.com/google/gofuzz**                                                     v1.1.0 -> v1.2.0
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 **_new_**
* **github.com/grpc-ecosystem/grpc-gateway**                                       v1.16.0 **_new_**
* **github.com/hashicorp/errwrap**                                                 v1.0.0 -> v1.1.0
* **github.com/hashicorp/go-multierror**                                           v1.0.0 -> v1.1.1
* **github.com/imdario/mergo**                                                     v0.3.11 -> v0.3.12
* **github.com/intel/goresctrl**                                                   v0.2.0 **_new_**
* **github.com/json-iterator/go**                                                  v1.1.10 -> v1.1.11
* **github.com/moby/spdystream**                                                   v0.2.0 **_new_**
* **github.com/moby/sys/signal**                                                   v0.6.0 **_new_**
* **github.com/opencontainers/image-spec**                                         v1.0.1 -> 693428a734f5
* **github.com/opencontainers/runc**                                               v1.0.0-rc93 -> v1.0.3
* **github.com/opencontainers/runtime-spec**                                       e6143ca7d51d -> 1c3f411f0417
* **github.com/opencontainers/selinux**                                            v1.8.0 -> v1.8.2
* **github.com/pelletier/go-toml**                                                 v1.8.1 -> v1.9.3
* **github.com/prometheus/client_golang**                                          v1.7.1 -> v1.11.0
* **github.com/prometheus/common**                                                 v0.10.0 -> v0.30.0
* **github.com/prometheus/procfs**                                                 v0.6.0 -> v0.7.3
* **github.com/satori/go.uuid**                                                    v1.2.0 **_new_**
* **github.com/sirupsen/logrus**                                                   v1.7.0 -> v1.8.1
* **github.com/spf13/pflag**                                                       v1.0.5 **_new_**
* **github.com/stretchr/testify**                                                  v1.6.1 -> v1.7.0
* **github.com/vishvananda/netlink**                                               f5de75959ad5 **_new_**
* **github.com/vishvananda/netns**                                                 2eb08e3e575f **_new_**
* **go.etcd.io/bbolt**                                                             v1.3.5 -> v1.3.6
* **go.opencensus.io**                                                             v0.22.3 -> v0.22.4
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 **_new_**
* **go.opentelemetry.io/otel/trace**                                               v1.3.0 **_new_**
* **go.opentelemetry.io/proto/otlp**                                               v0.11.0 **_new_**
* **golang.org/x/net**                                                             e18ecbb05110 -> fe4d6282115f
* **golang.org/x/oauth2**                                                          bf48bf16ab8d -> f6687ab2804c
* **golang.org/x/sync**                                                            09787c993a3a -> 036812b2e83c
* **golang.org/x/sys**                                                             47abb6519492 -> 1d35b9e2eb4e
* **golang.org/x/term**                                                            7de9c90e9dd1 -> 6a3ed077a48d
* **golang.org/x/text**                                                            v0.3.4 -> v0.3.7
* **golang.org/x/time**                                                            3af7569d3a1e -> 1f47c861a9ac
* **google.golang.org/appengine**                                                  v1.6.5 -> v1.6.6
* **google.golang.org/grpc**                                                       v1.27.1 -> v1.43.0
* **google.golang.org/protobuf**                                                   v1.27.1 **_new_**
* **gopkg.in/yaml.v3**                                                             9f266ea9e77c -> 496545a6307b
* **k8s.io/api**                                                                   v0.20.6 -> v0.22.0
* **k8s.io/apimachinery**                                                          v0.20.6 -> v0.22.1
* **k8s.io/apiserver**                                                             v0.20.6 -> v0.22.0
* **k8s.io/client-go**                                                             v0.20.6 -> v0.22.0
* **k8s.io/component-base**                                                        v0.20.6 -> v0.22.0
* **k8s.io/cri-api**                                                               v0.20.6 -> v0.23.0-alpha.4
* **k8s.io/utils**                                                                 67b214c5f920 -> cb0fa318a74b

Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)

containerd 1.5.9

Welcome to the v1.5.9 release of containerd!

The ninth patch release for containerd 1.5 is a security release to fix CVE-2021-43816.

### Notable Updates
* **Fix unprivileged pod using 'hostPath' bypassing SELinux labels** ([GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c))
* **Fix setting the "container_kvm_t" SELinux label** ([#6381](https://github.com/containerd/containerd/pull/6381))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Sebastiaan van Stijn
* Michael Crosby
* Phil Estes
* Akihiro Suda
* Fabiano Fidêncio
* Samuel Karp
* Wei Fu

### Changes
<details><summary>13 commits</summary>
<p>

* Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c)
  * [`e4b62aaa5`](https://github.com/containerd/containerd/commit/e4b62aaa50d95213c5ea11be1fae24ede7077dcc) Prepare release notes for v1.5.9
  * [`a41213fed`](https://github.com/containerd/containerd/commit/a41213fedbbf6436e8c2b647e72b3c2fc33f53b7) only relabel cri managed host mounts
* [release/1.5] seutil: Fix setting the "container_kvm_t" label ([#6381](https://github.com/containerd/containerd/pull/6381))
  * [`da5749b67`](https://github.com/containerd/containerd/commit/da5749b670823abd3fa03298c2e89cd22c8bfb6d) seutil: Fix setting the "container_kvm_t" label
* [release/1.5] Update Go to 1.16.12 ([#6367](https://github.com/containerd/containerd/pull/6367))
  * [`8c24a6199`](https://github.com/containerd/containerd/commit/8c24a619938d0060e1e64d5c7258ac2765e7d384) [release/1.5] Update Go to 1.16.12
* [release/1.5] go.mod github.com/opencontainers/image-spec v1.0.2 ([#6264](https://github.com/containerd/containerd/pull/6264))
  * [`7ab52528b`](https://github.com/containerd/containerd/commit/7ab52528b41e57e7f1f2b3a69f599cb13d566a5e) [release/1.5] go.mod github.com/opencontainers/image-spec v1.0.2
* [release/1.5] update runc binary to v1.0.3 ([#6343](https://github.com/containerd/containerd/pull/6343))
  * [`16b5aa2c8`](https://github.com/containerd/containerd/commit/16b5aa2c812208af1db6115b9a84482f0ab7a5ae) update runc binary to v1.0.3
* [release/1.5] Update Go to 1.16.11 ([#6334](https://github.com/containerd/containerd/pull/6334))
  * [`3ff8be2d9`](https://github.com/containerd/containerd/commit/3ff8be2d9875d5bae92a98beabc909e833d619f8) [release/1.5] Update Go to 1.16.11
</p>
</details>

### Dependency Changes

* **github.com/opencontainers/image-spec**  v1.0.1 -> v1.0.2

Previous release can be found at [v1.5.8](https://github.com/containerd/containerd/releases/tag/v1.5.8)

containerd 1.6.0-beta.4

Welcome to the v1.6.0-beta.4 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

### Highlights

#### Runtime

* **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744))
* **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813))
* **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817))
* **Split task manager into shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918))
* **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011))
* **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031))
* **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206))

#### Windows

* **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131))
* **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778))

#### CRI

* **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695))
* **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619))
* **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627))
* **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964))
* **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113))
* **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111))
* **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130))
* **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170))

#### Other

* **Add a shared namespace label for cross-namespace content sharing** ([#5043](https://github.com/containerd/containerd/pull/5043))
* **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606))
* **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610))
* **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965))
* **Add OpenTelemetry trace injection to grpc client** ([#5992](https://github.com/containerd/containerd/pull/5992))

#### Client

* **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709))
* **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Phil Estes
* Derek McGowan
* Wei Fu
* Maksym Pavlenko
* Akihiro Suda
* Sebastiaan van Stijn
* Mike Brown
* Kazuyoshi Kato
* Claudiu Belu
* Michael Crosby
* haoyun
* zounengren
* AdamKorcz
* Adelina Tuvenie
* Brian Goff
* Daniel Canter
* Kohei Tokunaga
* Davanum Srinivas
* Gabriel Adrian Samfira
* Shiming Zhang
* Samuel Karp
* Enrico Weigelt, metux IT consult
* Hajime Tazaki
* Alakesh Haloi
* Iceber Gu
* Kevin Parsons
* Aditi Sharma
* Gijs Peskens
* Nashwan Azhari
* David Porter
* Jacob MacElroy
* wanglei
* Alexandre Peixoto Ferreira
* Cody Roseborough
* Furkan
* Jiaming Xu
* Kir Kolyshkin
* Miao Wang
* Neil Johnson
* Paul "TBBle" Hampson
* Priyanka Saggu
* Romain Aviolat
* Sunghoon Kang
* Tõnis Tiigi
* Zhiyu Li
* Alexander Minbaev
* Alexey Ivanov
* Artem Khramov
* Ben Hutchings
* Cory Bennett
* Da McGrady
* Dan Williams
* Eng Zer Jun
* Eric Ernst
* Ethan Chen
* Fabiano Fidêncio
* Fupan Li
* Gaurav Gahlot
* Gunju Kim
* Jacob Blain Christen
* James Sturtevant
* Jayme Howard
* Jintao Zhang
* Justin Terry
* Kaijie Chen
* Kern Walster
* Kitt Hsu
* Lantao Liu
* Ma Xinjian
* Manabu Sugimoto
* Mikko Ylinen
* Ng Yang
* Nicolas Chariglione
* Olli Janatuinen
* Peri Thompson
* Quan Tian
* Radostin Stoyanov
* Rui Lopes
* Sambhav Kothari
* Samuel Ortiz
* Sebastian Hasler
* Takumasa Sakao
* Yang Yang
* Yifan Yuan
* Zilong Wang
* Zufar Dhiyaulhaq
* botieking98
* chenxiaoyu
* jayonlau
* jerryzhuang
* kerthcet
* levinxo
* linrunlong
* scuzhanglei
* wangzhan
* Étienne Guesnet

### Changes
<details><summary>850 commits</summary>
<p>

* Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296))
  * [`569042e6d`](https://github.com/containerd/containerd/commit/569042e6dfe2dcf338cb5d584e4d9b7c170af669) Prepare release notes for v1.6.0-beta.4
* refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358))
  * [`c0d07094b`](https://github.com/containerd/containerd/commit/c0d07094beaee66978a8ef0dc8d8c0f876cf887f) feat: Errorf usage
* Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021))
  * [`f83ab813d`](https://github.com/containerd/containerd/commit/f83ab813d24ff83f755e35b838cf7d6df2ff358b) Use task plugin for runc shim
  * [`04e57d71b`](https://github.com/containerd/containerd/commit/04e57d71b2397489bd961f8f63f1e8f8b6ce59fd) Seperate shim manager and task service
  * [`6835a9470`](https://github.com/containerd/containerd/commit/6835a94707c3e9da641a65d31dfc3bed2daf6be8) Split runc shim into plugin components
  * [`6eea8f3f6`](https://github.com/containerd/containerd/commit/6eea8f3f627672e05afc340902b3bd2931d596a2) Add shutdown package
* CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155))
  * [`20419feaa`](https://github.com/containerd/containerd/commit/20419feaac1963de082d0bfad9eb76c93c782df0) cri, sandbox: pass sandbox resource details if available, applicable
* medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354))
  * [`44b28b61f`](https://github.com/containerd/containerd/commit/44b28b61ffa450d8e5956409f9a5386cff0fdd49) medatada: make namespaces' deletion error less cryptic
* ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373))
  * [`c8a009d18`](https://github.com/containerd/containerd/commit/c8a009d18cd667c0a8b13e454a110b4fa5baba03) add-list-stat: return container list if filter is nil
* integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369))
  * [`9e9ee66bf`](https://github.com/containerd/containerd/commit/9e9ee66bfd6622270db757aafa17466668b40807) integration: deflake TestContainerdRestart
* feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225))
  * [`dd26d3d09`](https://github.com/containerd/containerd/commit/dd26d3d09295707f58915098420382cdca6b1da4) feat: support custom timeout for blot open
* Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333))
  * [`0e472420b`](https://github.com/containerd/containerd/commit/0e472420bf73f7841839648e5b0bc23cf7f85e9e) Update Go to 1.17.5
* cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332))
  * [`2d3009038`](https://github.com/containerd/containerd/commit/2d3009038cd2f9ddf12a60b9b0a5e9e93398b71b) cri/server: use consistent alias for pkg/ioutil
* Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364))
  * [`552a27081`](https://github.com/containerd/containerd/commit/552a27081c5df96766f6cd13ab02638ea81e5823) Disable restart monitor test in Windows
* Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338))
  * [`4c1e26cd5`](https://github.com/containerd/containerd/commit/4c1e26cd5b01bf5f6516e15783243389ed51122b) Don't fail-fast on Windows integration tests
* Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355))
  * [`2c96d5b06`](https://github.com/containerd/containerd/commit/2c96d5b0672db14cca36a0fed86334634e20339d) Run windows parallel integration test as short
  * [`807213fd3`](https://github.com/containerd/containerd/commit/807213fd325e334a3acadc733775cc0103d7b29c) Update restart monitor test to output daemon logs on failure
* go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263))
  * [`90cdc6c9a`](https://github.com/containerd/containerd/commit/90cdc6c9a60b3960776d3a844577af5ebc8e1cb3) images/converter: remove deprecated types
  * [`fc8138468`](https://github.com/containerd/containerd/commit/fc8138468fc5d1407fec31ba362de0a7e69c2234) go.mod: update image-spec to latest (v1.0.3-dev)
* Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353))
  * [`441bcb56d`](https://github.com/containerd/containerd/commit/441bcb56d7705590465a8e4d1e5d6d7645dadb0b) Skip WithAdditionalGIDs on Darwin
* Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303))
  * [`68dabdcc6`](https://github.com/containerd/containerd/commit/68dabdcc694f5041f8d9c110254634adbbd7a3ff) Use RFC3339 format so rg cleanup works
* update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330))
  * [`c9d1e155c`](https://github.com/containerd/containerd/commit/c9d1e155c7a4d806b9a587cfb92605d227e2650d) go.mod: github.com/opencontainers/runc v1.0.3
  * [`44995d483`](https://github.com/containerd/containerd/commit/44995d4831c58adc60610d81a425844a8a0e6e05) update runc binary to v1.0.3
* Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329))
  * [`416899fc8`](https://github.com/containerd/containerd/commit/416899fc8e81a80a4b09b59c801f98d36ddc0e74) Allow native snapshotter on Darwin
* Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328))
  * [`6b0e2414c`](https://github.com/containerd/containerd/commit/6b0e2414c8326554b4c0a1e959d498b7202e17fc) Do not use `go get` to install executables
* Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326))
  * [`d2f1dda0f`](https://github.com/containerd/containerd/commit/d2f1dda0f1e6eef141538ff691e9db43a75cdad0) Include runtime v2 in default builtins
* Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314))
  * [`ff77dd112`](https://github.com/containerd/containerd/commit/ff77dd11213c31b990e874638e1f3947e5e61478) Add Windows Server 2022 CI runs
* Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324))
  * [`392f604eb`](https://github.com/containerd/containerd/commit/392f604ebae8fbac8e5012752ea669e5e4d5506f) Use a single RUN command
  * [`9cc0d1f07`](https://github.com/containerd/containerd/commit/9cc0d1f07364d10c1240262c9d6b1b8ff298baf9) Set explicit ACL on test files
* integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311))
  * [`f33d38c7c`](https://github.com/containerd/containerd/commit/f33d38c7cbc63e092368d69f1470e11906266f67) integration: align tags of test images
* Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325))
  * [`4ccf287da`](https://github.com/containerd/containerd/commit/4ccf287da779ce032d67bea69c995fe0c8346e33) Set CONTAINERD_ROOT in Windows cri-integration
* export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312))
  * [`f3195b3b5`](https://github.com/containerd/containerd/commit/f3195b3b51adfc8c2389e3c914cf3c21d2dc67a5) export oci.DeviceFromPath()
* Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321))
  * [`fd0850e9e`](https://github.com/containerd/containerd/commit/fd0850e9ef8771ff6c01e635661ca134f307c644) Update continuity dependency
  * [`ff9d7aef3`](https://github.com/containerd/containerd/commit/ff9d7aef328e0b9128c293c9ba2c501c1443f646) Update volume test images
* Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201))
  * [`bae0d88ae`](https://github.com/containerd/containerd/commit/bae0d88ae7f1a3d02346246aa260f1e7b5d75cb4) Add error logging on cleanup
  * [`54c0cdae6`](https://github.com/containerd/containerd/commit/54c0cdae60023a826b35db58b3467db5d8baebfd) Update TestRestartMonitor expected time check
* Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319))
  * [`665877a5b`](https://github.com/containerd/containerd/commit/665877a5bfcd05e6177091ad702202e933f18860) Move volume images from gcr to ghcr
* Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301))
  * [`6bccd67e8`](https://github.com/containerd/containerd/commit/6bccd67e84506b3c2c8eaf8e0268ff8dd2045bae) Revert shim plugin migration
* Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317))
  * [`323a62d7b`](https://github.com/containerd/containerd/commit/323a62d7b9da1a2901385c1455cd67fecfa9198d) Add permissions
  * [`c6d26f0d3`](https://github.com/containerd/containerd/commit/c6d26f0d379136f9e4a011f1f07319ed2f347f2b) Authenticate against ghcr.io
* oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306))
  * [`94462d8f5`](https://github.com/containerd/containerd/commit/94462d8f5d9d2537e82762234365df78f2c6fb56) oci/deviceFromPath(): correctly check device types
* Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315))
  * [`2a6857d06`](https://github.com/containerd/containerd/commit/2a6857d060b1ac9941a23e9000cf2eb3ab7958b5) Skip TestExportAndImportMultiLayer on Windows
* Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290))
  * [`7ccd733d2`](https://github.com/containerd/containerd/commit/7ccd733d255e5817108d1fed98ce9286e78db27a) Add image build workflow
* Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286))
  * [`0a25bc1aa`](https://github.com/containerd/containerd/commit/0a25bc1aacb3949a6dce861201601fea25f69d8b) Integration: Separate Windows Periodic Tests workflow trigger.
* Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274))
  * [`1698d061c`](https://github.com/containerd/containerd/commit/1698d061c3ef933ec23a8c0b3923f5eb713c9e39) Build volume test images on Windows
* Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297))
  * [`7a4415dd5`](https://github.com/containerd/containerd/commit/7a4415dd574d660aeeba3d0ec27fc83509569976) Add VMware TKG & TCE to Containerd adopters
* Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293))
  * [`46892d340`](https://github.com/containerd/containerd/commit/46892d34080e51b56eb1b2d638f88ed8bc570472) Vagrantfile: update to Fedora 35
* Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269))
  * [`5e4b033ec`](https://github.com/containerd/containerd/commit/5e4b033ecd6c0505cbcf84c48ec33915bd050183) Update README.md repo->org
* Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278))
  * [`5015130f7`](https://github.com/containerd/containerd/commit/5015130f7a499a6d982ff53ef6612382279d4f46) Fix executable file not found when restoring shims
* ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271))
  * [`6681cc4b9`](https://github.com/containerd/containerd/commit/6681cc4b943439bb788d6ac968d875cf93bc8b84) ctr/snapshots/diff: don't show the media-type in output
* ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289))
  * [`95b3ab2a4`](https://github.com/containerd/containerd/commit/95b3ab2a4ac7707044e5cb9d53835434a642c375) ctr: Add Linux Capabilities control flags
* integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270))
  * [`8de1117c9`](https://github.com/containerd/containerd/commit/8de1117c99fd35b13c6c5105f52f4adca6114717) integration: add stats result in error message
* releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287))
  * [`3d318b3bb`](https://github.com/containerd/containerd/commit/3d318b3bb42c81b20e1643dd2265146c1e728fec) docs: mark 1.4 as Extended
  * [`9a994877c`](https://github.com/containerd/containerd/commit/9a994877cc6e380cff6793a0b0d8c134eb37a1e4) docs: fix RELEASES.md gRPC API anchor
* feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284))
  * [`507bfc91b`](https://github.com/containerd/containerd/commit/507bfc91ba5537c7275633cdca49326540d80e49) feat: skip ci for fork
* content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280))
  * [`9dfbcbbc4`](https://github.com/containerd/containerd/commit/9dfbcbbc481076a8ae8d81c654ff452334e049fb) content/local: Close the file if Seek fails
* Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268))
  * [`cb1359fa8`](https://github.com/containerd/containerd/commit/cb1359fa8b129778db5f1fa339b588f86734b02b) Integration: Remove explicit version passing to `azure/CLI`.
* Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276))
  * [`2b28dd363`](https://github.com/containerd/containerd/commit/2b28dd363bfd1d83c8aa43cd989731058f7a1a52) Fix wrong make target on documentation
* fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272))
  * [`fa6759ae5`](https://github.com/containerd/containerd/commit/fa6759ae5378e5332f4ef5d4f2baca2bdef48115) fix: server error return
* Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267))
  * [`674b94c42`](https://github.com/containerd/containerd/commit/674b94c42bc0bf43c12cd90f5673e0639de063da) Prepare release notes for v1.6.0-beta.3
  * [`f5863e22f`](https://github.com/containerd/containerd/commit/f5863e22f419f9c59ed11e3919863b6cbabce085) Update API version in go.mod
  * [`5df9ec366`](https://github.com/containerd/containerd/commit/5df9ec366595f8fdd9c0220b8c8a7a3247e1602e) Update release name to use consistent format
* feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254))
  * [`f8d734e40`](https://github.com/containerd/containerd/commit/f8d734e406c3f7cf84b3689486a07f31df8152e8) fix: make max recv/send msg size setting default
  * [`547040cd5`](https://github.com/containerd/containerd/commit/547040cd5b7df652e8af46e5034adbe2130a01f1) feat:support custom callopts on client side
* [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258))
  * [`5f293d9ac`](https://github.com/containerd/containerd/commit/5f293d9ac42a645e50d21ea2e872de9b1e823e64) [CRI] Fix panic when registry.mirrors use localhost
* Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241))
  * [`63895de45`](https://github.com/containerd/containerd/commit/63895de45578272b1c7bca89c2b1265070f113b9) Add support for TMP override on toml
* CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170))
  * [`2a81c9f67`](https://github.com/containerd/containerd/commit/2a81c9f6771eb8c94c7979cc8f2683e2b780d432) CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options
* Merge Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35)
  * [`70c88f507`](https://github.com/containerd/containerd/commit/70c88f507579277ab7af23b06666e3b57d4b4f2d) schema1: reject ambiguous documents
  * [`eb9ba7ed8`](https://github.com/containerd/containerd/commit/eb9ba7ed8d46d48fb22362f9d91fff6fb837e37e) images: validate document type before unmarshal
* [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111))
  * [`91bbaf679`](https://github.com/containerd/containerd/commit/91bbaf67993d2602aa9efee574234160b5768c04) [cri] add sandbox and container latency metrics
* Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255))
  * [`444ef2f6d`](https://github.com/containerd/containerd/commit/444ef2f6d772085d6da9fe7bacecab3a714b334e) Generalize Windows CI setup script for any user.
  * [`3d6bfa3f5`](https://github.com/containerd/containerd/commit/3d6bfa3f5582d03df18b12dd565ea404f15e6099) Standardize cmdlet capitalization in Windows CI scripts.
* feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253))
  * [`bef792b96`](https://github.com/containerd/containerd/commit/bef792b962de720237c9e3be5f083cca717a9d2b) feat: use rwmutex instead
* Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206))
  * [`e17fe37e0`](https://github.com/containerd/containerd/commit/e17fe37e0158ef225930373707e3552c2888a61a) Fix package alias
  * [`6870f3b1b`](https://github.com/containerd/containerd/commit/6870f3b1b8fa0cb90bab11bfac3a57940cdf3648) Support custom runtime path when launching tasks
  * [`d4f4c1380`](https://github.com/containerd/containerd/commit/d4f4c1380a65746a4c51631a7dfa112f5a9b9dbc) Add runtime path in CreateTaskRequest
* Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246))
  * [`db124c560`](https://github.com/containerd/containerd/commit/db124c560ccadaa5ea5ce6e478cc141a764d2589) Close file if permission modification fails
* release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250))
  * [`2f31dcda7`](https://github.com/containerd/containerd/commit/2f31dcda7f579527132e3ae1c9eb19483f2144e7) release: change tar name to match prior releases
* Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237))
  * [`89eebc4c0`](https://github.com/containerd/containerd/commit/89eebc4c0fcbdef9b75440de25ce51b1cece6dc6) Fix wrong error returned for image index lookup
* Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221))
  * [`526defb57`](https://github.com/containerd/containerd/commit/526defb5715f481e501e6e42307b3c469d48d5d2) Fix containerd fails to pull OCI image with non-`http(s)://` urls
* Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223))
  * [`a3b756ce1`](https://github.com/containerd/containerd/commit/a3b756ce18d45a7e3db1e244e741d35d0f885388) Prepare release notes for v1.6.0-beta.2
* Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196))
  * [`be84932e1`](https://github.com/containerd/containerd/commit/be84932e117ed503d28f7fdf15f852f90c0a779d) Rename release dockerfile to omit distro name
  * [`28126fd60`](https://github.com/containerd/containerd/commit/28126fd605a8cf279f6b9e5b89fd0698b3e67b9c) release: improve dockerfile
  * [`27d7c5038`](https://github.com/containerd/containerd/commit/27d7c50384b11d6a3c5982c7e20e89ec360d542a) Add arm64 to releases
* use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236))
  * [`6765524b7`](https://github.com/containerd/containerd/commit/6765524b73beac359ca43520faaf74347d94b6b5) use write lock when updating container stats
* go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230))
  * [`b103bee4c`](https://github.com/containerd/containerd/commit/b103bee4cc1b0aa5e622b3cc54fc984f453afe63) go.mod: Bump hcsshim to v0.9.1
* go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228))
  * [`920b24793`](https://github.com/containerd/containerd/commit/920b24793d8e4c8902891ad9965945390d4d6712) go.mod: Bump ttrpc to 1.1.0
* go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213))
  * [`97073c943`](https://github.com/containerd/containerd/commit/97073c9437b299ce528c21080950491d095d3778) go.mod: github.com/moby/sys/mountinfo v0.5.0
  * [`19d9d0d2a`](https://github.com/containerd/containerd/commit/19d9d0d2a564311311b3e2751f2811a5bb67b6bd) go.mod: github.com/moby/sys/signal v0.6.0
  * [`9c455ded6`](https://github.com/containerd/containerd/commit/9c455ded6115e3f8c20c914322a272f0cf6959d6) go.mod: github.com/moby/sys/symlink v0.2.0
  * [`fa12f4e69`](https://github.com/containerd/containerd/commit/fa12f4e6964528067690045a0838c0e3dc73b13c) go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
* cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222))
  * [`574800633`](https://github.com/containerd/containerd/commit/57480063373747b4206cb7cc4277958d54d5aaa9) cleanup: add more description on comment
* Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211))
  * [`869ccc01c`](https://github.com/containerd/containerd/commit/869ccc01c173ead832ceb07f9084b492b6e5c8a1) Update Go to 1.17.3
* CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214))
  * [`a22346622`](https://github.com/containerd/containerd/commit/a22346622b730e7f291ffd9b7d8a952060953133) CI: bump up crun: 1.0 -> 1.3
* Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205))
  * [`548579d0e`](https://github.com/containerd/containerd/commit/548579d0e2ffa220a7062262c28bd5f4e7567a28) Pin az CLI version
* Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918))
  * [`d022fbe78`](https://github.com/containerd/containerd/commit/d022fbe789b22d7e2773eeb1e01949f356b32efe) Address PR comments
  * [`6fa1bb4a5`](https://github.com/containerd/containerd/commit/6fa1bb4a5c48fbb971084d38ce4dea43995ad3e9) Fix build after rebase
  * [`2cec3a34b`](https://github.com/containerd/containerd/commit/2cec3a34b18a95205c7632f37b4686e982b1aa48) Migrate task directory
  * [`8b788d9df`](https://github.com/containerd/containerd/commit/8b788d9dfee9e330e65949f8e8e6704bbf9049e0) Expose shim process interface
  * [`733519677`](https://github.com/containerd/containerd/commit/733519677f9b266314db5d9c20df821120477769) Fix after rebase
  * [`df8c206a9`](https://github.com/containerd/containerd/commit/df8c206a927986a6953586c556b01f594b951821) Cleanup shim loading
  * [`b554b577b`](https://github.com/containerd/containerd/commit/b554b577b05b1663931fcc3c792d60fb1a157020) Move shim restore to a separate file
  * [`a3d298193`](https://github.com/containerd/containerd/commit/a3d298193c816386b7a939d6cf7259e0afa3001d) Fix backward compatibility with old task shims
  * [`33786ee4d`](https://github.com/containerd/containerd/commit/33786ee4d279864b42e639056e64d18bfcd6da40) Add plugin dependency between shim and shim services
  * [`fb5f6ce3c`](https://github.com/containerd/containerd/commit/fb5f6ce3c9f9fd8b7d18df55b066703fb1ab4ce2) Rework task create and cleanup flow
  * [`7c4ead285`](https://github.com/containerd/containerd/commit/7c4ead285dbab56357c3c5411612b5032661f1f5) Add task manager
  * [`2d5d3541e`](https://github.com/containerd/containerd/commit/2d5d3541e6260718e951f002fe31b4ae6d237199) Rename task manager to shim manager
* [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113))
  * [`2e6d5709e`](https://github.com/containerd/containerd/commit/2e6d5709e32253c3c98956f07c71cb9b6b1d5fd4) Implement CRI container and pods stats
  * [`b69bbe25a`](https://github.com/containerd/containerd/commit/b69bbe25acc10a805b8459bb4e79880ad781727f) Vendor latest k8s.io/cri-api and netlink
* test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200))
  * [`9bfec3980`](https://github.com/containerd/containerd/commit/9bfec3980b66aa05f0e94475af7911736f1275fb) test: Add grace period for restart monitor test
* integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179))
  * [`0ba3532f5`](https://github.com/containerd/containerd/commit/0ba3532f547d901505361d1fddea3bb0de5b0f66) integration: Enables TestRuntimeHandler for Windows
* Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171))
  * [`82cb0a63e`](https://github.com/containerd/containerd/commit/82cb0a63e1494b7e0cfcf4fdd8d19741a233bbcc) Add mkdir on Dockerfile
* sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189))
  * [`6ee8577e5`](https://github.com/containerd/containerd/commit/6ee8577e54fb15730effb7e44340eed2e70ed42f) sys/reaper: avoid leaky goroutine when exec timeout
* adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184))
  * [`ea8978810`](https://github.com/containerd/containerd/commit/ea89788105aeb926d1609b0b98c509322c4d37c4) adds additional debug out to timebox cni setup
* converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176))
  * [`f0d3ea96c`](https://github.com/containerd/containerd/commit/f0d3ea96cf8cc39a185c77d01423efcfd72c876e) converter: Allow hooks during image conversion
* compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177))
  * [`6fa9f22fa`](https://github.com/containerd/containerd/commit/6fa9f22fa3e20493625d3a100b9c1e9279a00503) compression: support zstd with skippable frame
* integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182))
  * [`fb4432c24`](https://github.com/containerd/containerd/commit/fb4432c24a9ec1a3f3db9e8c9d2fd29c48b177e6) integration: Enables TestVolumeCopyUp for Windows
*  integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121))
  * [`830b3c26e`](https://github.com/containerd/containerd/commit/830b3c26ec0fcf7fb2755aece1ed7abece76aa1f) integration: Enable some tests for Windows (part 2)
* integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085))
  * [`602018900`](https://github.com/containerd/containerd/commit/60201890038061d270b9a643144a534456cb150e) integration: Enable some tests for Windows
* Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125))
  * [`ebc5cf19a`](https://github.com/containerd/containerd/commit/ebc5cf19acfb770ef12730d2ed0776b39769aa84) feat(doc): update to version 2 syntax
* fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166))
  * [`3e51312a6`](https://github.com/containerd/containerd/commit/3e51312a61ea9d727d082818e487b76a7739385a) fix shim reaper wait command execute blocked
* content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145))
  * [`010a9e2bc`](https://github.com/containerd/containerd/commit/010a9e2bca7f8ebd587505392abbbd0c1766c17a) content: close stream after commit request
* Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165))
  * [`88fc5cf2d`](https://github.com/containerd/containerd/commit/88fc5cf2d00239d235e4efaee18e2628d97e8e30) Adding scope tests for ParseAuthHeader
  * [`7438edc7e`](https://github.com/containerd/containerd/commit/7438edc7ed976fd38d3b4051acf45874ec611330) Adding tests for GenerateTokenOptions
  * [`9b4a6f129`](https://github.com/containerd/containerd/commit/9b4a6f129517e353de70b824d78c755605eb84f6) Generate token options with each scope as a separate string.
* vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167))
  * [`96018b7db`](https://github.com/containerd/containerd/commit/96018b7db99e8e009e6f78ca3f506f1be23eb2a9) vendor: Updates go-cni
* commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159))
  * [`5b222d54a`](https://github.com/containerd/containerd/commit/5b222d54ad75c6f29a566d8f83e5c47c28584bfe) commands: Enables task metrics for Windows
* vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149))
  * [`b8f3ebb03`](https://github.com/containerd/containerd/commit/b8f3ebb03ba33ffe1ed87d314598f21d077ed698) vendor: update moby/sys for darwin support
* Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144))
  * [`0ccc386c8`](https://github.com/containerd/containerd/commit/0ccc386c86d94314f3c0460be395caadaa69ed49) Prepare release notes for v1.6.0-beta.1
  * [`e5fc3b38e`](https://github.com/containerd/containerd/commit/e5fc3b38ee9f4e1788cac279e56966819f7af920) Update mailmap
  * [`37720fc6f`](https://github.com/containerd/containerd/commit/37720fc6fdae4daf3c79794ad68f0e2c821f617c) Update api vendor
* bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136))
  * [`a217b5ac8`](https://github.com/containerd/containerd/commit/a217b5ac8f66cfdbffd730f16b63f13e313013b8) bump CNI to spec v1.0.0
* Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992))
  * [`294143bf3`](https://github.com/containerd/containerd/commit/294143bf380dbbc706e85387148c02fc2afa496d) Inject otel traces to grpc client.
* client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142))
  * [`cd2f2b0af`](https://github.com/containerd/containerd/commit/cd2f2b0af60f27aff9e7074a1ea523549c2ff47f) client: expose (*image).platform
* Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128))
  * [`3b73922fb`](https://github.com/containerd/containerd/commit/3b73922fba02afef924986309679873996e0654f) feat(doc): add Core Scheduling documentation
* Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130))
  * [`130a9c7dd`](https://github.com/containerd/containerd/commit/130a9c7ddbdd33a95a4b531ff25506d2d1651b20) Ensure namespace is proxied to grpc/ttrpc plugins
* fix #6054  MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109))
  * [`535191abf`](https://github.com/containerd/containerd/commit/535191abf3b3f6a41fe63fc7952f1f72690b2d70) fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
* Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124))
  * [`2a8dac12a`](https://github.com/containerd/containerd/commit/2a8dac12a7629c1c9f1be66c40e6cd5d25d9c70b) Output a warning for label image labels instead of erroring
* Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132))
  * [`c18c2e735`](https://github.com/containerd/containerd/commit/c18c2e73565bbfc7fde6c8462230c4afba33818d) Fix spelling mistake in Windows snapshotter
* Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126))
  * [`ca35f4e82`](https://github.com/containerd/containerd/commit/ca35f4e820b11d329e1824314480b15a2be0d08d) Windows: Cleanup rm- prefixed layers
* cleanup deprecated package  `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118))
  * [`1f1cad391`](https://github.com/containerd/containerd/commit/1f1cad39122548611c82ab3cada8099a0d70a6f6) io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
* close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115))
  * [`46be06937`](https://github.com/containerd/containerd/commit/46be069379bb8b439b05b9e10d01631b097cedb9) close Writer after use which may leak mem
* Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778))
  * [`2bc77b8a2`](https://github.com/containerd/containerd/commit/2bc77b8a2865efe83bc50225223555a919191f54) Adds Windows resource limits support
* Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098))
  * [`1abe50512`](https://github.com/containerd/containerd/commit/1abe5051210ab80d1451fcb19a54efa372d29f4b) Prepare release notes for v1.6.0-beta.0
* Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105))
  * [`c5947557d`](https://github.com/containerd/containerd/commit/c5947557d89e4b1e0a4a89e207f8943af8075f70) Add error message to in TestContainerdRestart integration test
* Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110))
  * [`072a7074b`](https://github.com/containerd/containerd/commit/072a7074b4897aa3b086ce1bae0459eefa13dbd1) Fix typo in the NewContainer function documentation
* Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104))
  * [`18d483b23`](https://github.com/containerd/containerd/commit/18d483b236b2bf999441c2324b70ae52a48a7cb7) Update cgroups to v1.0.2
* btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100))
  * [`ac2df3ba9`](https://github.com/containerd/containerd/commit/ac2df3ba9ad2d26da08395d294abb7c0fa0105e5) test: check file content after mount
* Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107))
  * [`4ed3c524c`](https://github.com/containerd/containerd/commit/4ed3c524cf6d01cf31538b20848675285e6538cd) Update test timeout based on recent cancellations
* Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106))
  * [`d252a293d`](https://github.com/containerd/containerd/commit/d252a293df3d8fc76cb5b141e33d59fc55b94b5a) Remove extra test_teardown
  * [`4a569c889`](https://github.com/containerd/containerd/commit/4a569c8894029c858cbdad2920a85541bc89e35b) Check the pid in cri test teardown
* add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011))
  * [`f1054dbbd`](https://github.com/containerd/containerd/commit/f1054dbbdeb0eac096ba91b7ae892b7104be7c5e) fix integration client vendor
  * [`e48bbe839`](https://github.com/containerd/containerd/commit/e48bbe83949a43dedd3e2727452259f99dd81635) add runc shim support for sched core
* integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579))
  * [`abf4de498`](https://github.com/containerd/containerd/commit/abf4de4985fdf8edf0220a055ff14b9c33c5547c) integration: Enables Windows containerd restart test
* vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099))
  * [`46b152f81`](https://github.com/containerd/containerd/commit/46b152f81be2580e726e478a198b290770225ed7) vendor: Bump hcsshim to 0.9.0
* [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695))
  * [`55893b9be`](https://github.com/containerd/containerd/commit/55893b9be729b7473a717682d6bf99a154c36422) Add CNI conf based on runtime class
* Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102))
  * [`de1a39bf3`](https://github.com/containerd/containerd/commit/de1a39bf32caf2cfb6b8967a3f23cde44ee83992) Update Go to 1.17.2
* integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933))
  * [`7a7a9a282`](https://github.com/containerd/containerd/commit/7a7a9a282c42b6cdfa26f5c515e238d2e782b446) integration: Adds test for multilayer image import
* runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031))
  * [`f7658e37d`](https://github.com/containerd/containerd/commit/f7658e37d94674b8bfaf3206d425f102c5d9b552) runtime: should fail fast if dial error on shim
* Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034))
  * [`791e175c7`](https://github.com/containerd/containerd/commit/791e175c79930a34cfbb2048fbcaa8493fd2c86b) Windows: Fixes Windows containers with image volumes
* run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094))
  * [`3a713811b`](https://github.com/containerd/containerd/commit/3a713811bee3bd813853a0c87763ddf2d804adee) run `gofmt` with Go 1.17
* pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088))
  * [`703b86533`](https://github.com/containerd/containerd/commit/703b86533b3348584124f42e3e39524d3f911121) pkg/cap: remove an outdated comment
* Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066))
  * [`1ee2bff0e`](https://github.com/containerd/containerd/commit/1ee2bff0e02136099cb49c08dab25830e7778535) Update go otel 1.0.1
* Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086))
  * [`c528d2c39`](https://github.com/containerd/containerd/commit/c528d2c39f1c1d6430f7faccc7e6cf8b2938132d) Update ADOPTERS.md with additional uses
* modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082))
  * [`b9a0c5080`](https://github.com/containerd/containerd/commit/b9a0c5080a50e177726c2fdf6eb7cf377d25bfc9) modify the way for checking cos
* Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915))
  * [`65f6a896c`](https://github.com/containerd/containerd/commit/65f6a896c3ec892e4342a117e8dea7250986a098) Fuzzing: Add 4 fuzzers + small modifications
* Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081))
  * [`9734b4039`](https://github.com/containerd/containerd/commit/9734b403939841528f3cee5e057270a49ff153a2) Pin mingw to version 10.2.0
  * [`d19af5afb`](https://github.com/containerd/containerd/commit/d19af5afbfcf91bdd420b0978b48d9f348247739) Update to golang 1.17.1
  * [`3cb0ec01e`](https://github.com/containerd/containerd/commit/3cb0ec01ec86a289aa24ba8979720dc3c91593c3) Install nssm
* Merge Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq)
  * [`7c621e1fc`](https://github.com/containerd/containerd/commit/7c621e1fcc08bcf5a1a48b837342cc22eada1685) btrfs: reduce permissions on plugin directories
  * [`6886c6a2e`](https://github.com/containerd/containerd/commit/6886c6a2ec0c70dde1aa64e77b64a5ad47b983c3) v1 runtime: reduce permissions for bundle dir
  * [`7d56b24f1`](https://github.com/containerd/containerd/commit/7d56b24f1a9af82dfaa10ff55a4e3c36a7efd943) v2 runtime: reduce permissions for bundle dir
* task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079))
  * [`02e77bcdc`](https://github.com/containerd/containerd/commit/02e77bcdc1e48fb4089dab02d6b67955d48df4ad) task service: return known error type
* refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973))
  * [`50da67359`](https://github.com/containerd/containerd/commit/50da6735923837519d7b8ec0ba997ce890b6de29) refactor: move from io/ioutil to io and os package
* fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076))
  * [`049042382`](https://github.com/containerd/containerd/commit/049042382c1ac5e451e9d1ca24c7f622270609d6) fix: update vendor
  * [`5c2426a7b`](https://github.com/containerd/containerd/commit/5c2426a7b23d209a3ba46bce5ab81ec280e5b3ae) cleanup: import from k8s.io/utils/clock/testing instead
  * [`6484fab1e`](https://github.com/containerd/containerd/commit/6484fab1e020c6cb946e5e82ecd5eb24a9b3ffc6) cleanup: import from k8s.io/utils/clock instead
* feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069))
  * [`d16942cf1`](https://github.com/containerd/containerd/commit/d16942cf16391ddcc17ca06e3fba94af743d05b7) feat: enable cri remote client to call with grpc calloptions
* cleanup k8s ansible yaml (carry for #5713)  ([#6074](https://github.com/containerd/containerd/pull/6074))
  * [`f6b7e07fd`](https://github.com/containerd/containerd/commit/f6b7e07fd318bded1da10bc05d691ad1ae42d522) cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>)
* feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070))
  * [`933ddaa6f`](https://github.com/containerd/containerd/commit/933ddaa6f870e10b1164d7a4a442c0e026ba7975) fix: wrong flag type
  * [`da16d492c`](https://github.com/containerd/containerd/commit/da16d492cd07ee7089aa8b000ba48f494f193147) feat: support import image for specific platform
* Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065))
  * [`67b883146`](https://github.com/containerd/containerd/commit/67b88314619dae55465057fe39b43586bf3b6df7) Update mirror images to take target image name
* fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059))
  * [`e6ddffc2a`](https://github.com/containerd/containerd/commit/e6ddffc2af90ce4fad3db6510911bce849b8c578) fix: make exec-id flag required in exec command
* images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052))
  * [`09c9270fe`](https://github.com/containerd/containerd/commit/09c9270feee1d81044e29c47c3609fb0c1e4d7f5) images: enable converter to uncompress zstd
* replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922))
  * [`694a00754`](https://github.com/containerd/containerd/commit/694a007543fafe751cbfab07093ba1b3ae58f1b6) replace deprecated function
* integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853))
  * [`f42513112`](https://github.com/containerd/containerd/commit/f42513112f65b24668a46a1cae9480f06edfdaec) integration: Adds Windows HostProcess tests
* Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047))
  * [`224454062`](https://github.com/containerd/containerd/commit/2244540628f10d68efa5ac2a8dd80cb667c438b7) Fix main branch build is broken
* Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003))
  * [`45c3453a7`](https://github.com/containerd/containerd/commit/45c3453a7cd997fed9d6d4ea998135e532b5428a) Add open telemetry logging hook for logrus
* Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023))
  * [`50a568595`](https://github.com/containerd/containerd/commit/50a56859514011d35b603b13a264aa217e12cab8) Change oci.WithUser behavior for LCOW
* switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946))
  * [`fcffe0c83`](https://github.com/containerd/containerd/commit/fcffe0c83acea4d201425de763782dfef74c7204) switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
* import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926))
  * [`e087b47e9`](https://github.com/containerd/containerd/commit/e087b47e98d4768085d3ee5c9ceb1aaa7038ec72) import: Raise error if the imported image is filtered out
* Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043))
  * [`b9cf0d75a`](https://github.com/containerd/containerd/commit/b9cf0d75a9f4a8a09ab55caa1983a8988ba4834d) Fix panic in metadata content writer on copy error
* Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001))
  * [`084387e0b`](https://github.com/containerd/containerd/commit/084387e0b4d860b264dfddc62d556b6f0ec702a4) Move tracing to plugin
* ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916))
  * [`6b0b64a51`](https://github.com/containerd/containerd/commit/6b0b64a51a5112954355cc2cb1809bd410e53855) ctr: Fixes Windows image import
* update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017))
  * [`483d2e947`](https://github.com/containerd/containerd/commit/483d2e947fbb3b50339509962200f5e5e1965f7b) go.mod: update opentelemetry modules to v1.0.0
* fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979))
  * [`498e5b27f`](https://github.com/containerd/containerd/commit/498e5b27f7928eab29756f674a161737fe36cabf) fix error string format
* Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036))
  * [`407d60694`](https://github.com/containerd/containerd/commit/407d6069412d7fc563ea45ff46dfcc13e71338e5) Add github action to mirror image
* add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027))
  * [`16f3d67b5`](https://github.com/containerd/containerd/commit/16f3d67b5a804b3a32a5df6318531768a654ef8c) add current process state to the error message
*  FreeBSD: fix tar headers & the nil check on getxattr  ([#5991](https://github.com/containerd/containerd/pull/5991))
  * [`2bffb5f9b`](https://github.com/containerd/containerd/commit/2bffb5f9b234bff72739f48f7d027b47a178a9ae) FreeBSD: fix tar headers & the nil check on getxattr
* gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035))
  * [`97df73004`](https://github.com/containerd/containerd/commit/97df73004e4b9d7c632f4889f889fd6b330a9e40) gha: collect Vagrant VMs' IP addresses
* bump continuity and console version  that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033))
  * [`7854e0bff`](https://github.com/containerd/containerd/commit/7854e0bffe7e95fc8002f2150caef96f4d858a48) bump continuity and console version that remove pkg/errors
* import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997))
  * [`6875aa5d3`](https://github.com/containerd/containerd/commit/6875aa5d3737d7ff87220ffd53275ef37d323d0e) import: Add option to skip creating digest image
* ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998))
  * [`16d3f48a2`](https://github.com/containerd/containerd/commit/16d3f48a2e13fa820431d09825e5b8a566b11360) ctr namespaces: improve usage string
* bump console version to v1.0.3 that remove pkg/errors  ([#6028](https://github.com/containerd/containerd/pull/6028))
  * [`a68fb7add`](https://github.com/containerd/containerd/commit/a68fb7addb79c31602fd2cbcad3c29cb1333aa66) bump console version to v1.0.3 that remove pkg/errors
* Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032))
  * [`3e72e335f`](https://github.com/containerd/containerd/commit/3e72e335fe6e03aecdc93e07d0162090319c4156) Use github images for integration tests
* Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995))
  * [`8596d1188`](https://github.com/containerd/containerd/commit/8596d11886b4afe4323b24e645858bc48753f18e) Fix typo
* Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012))
  * [`f40df3d72`](https://github.com/containerd/containerd/commit/f40df3d72ba85700c737aca2cb21212d8f0caaed) Enable image config labels in ctr and CRI container creation
* Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970))
  * [`2fecf5b02`](https://github.com/containerd/containerd/commit/2fecf5b02e95cdf4ee5babd065b2c52d6aadbe18) Make sure exit signals trigger an exit during init
* task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974))
  * [`55faa5e93`](https://github.com/containerd/containerd/commit/55faa5e93d7fdacc7d9b28ee79a0972ec18e3471) task delete: Closes task IO before waiting
* CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985))
  * [`f700ae873`](https://github.com/containerd/containerd/commit/f700ae8732c42cad41cf5628884610b3f95a464d) CI: bump up crun to 1.0
* seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982))
  * [`55923daa9`](https://github.com/containerd/containerd/commit/55923daa9f56c8a890875f1e111201d918b382e2) seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990))
  * [`73dbbf5bf`](https://github.com/containerd/containerd/commit/73dbbf5bfa4ff2c9a2f6c91dc7c4dc29ace5fa4c) Update to Go 1.17.1
* CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987))
  * [`6d961f967`](https://github.com/containerd/containerd/commit/6d961f96736d7b471b3cdc47c76bd8bd58a6e3a9) CI: Switch to available latest images
* add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610))
  * [`91b64c58b`](https://github.com/containerd/containerd/commit/91b64c58b128a8268fdbb3f03b2f238766be55cf) add xfs support to devicemapper snapshotter
* Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956))
  * [`57e10439d`](https://github.com/containerd/containerd/commit/57e10439d9d1d66492ae55e48af713d9a7a4c6f8) Fixes task kill --force on Windows
* Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817))
  * [`8d135d284`](https://github.com/containerd/containerd/commit/8d135d28420a1f8aa7ce8bb2f56103555f380a5f) Add support for shim plugins
* vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976))
  * [`8ff8b1b82`](https://github.com/containerd/containerd/commit/8ff8b1b8236329457345350e6123cf0ef865a30f) vendor: update continuity for darwin support
* replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906))
  * [`2ac996840`](https://github.com/containerd/containerd/commit/2ac996840187b2e42fdbe4e4c9b6b55a7c775c43) replace uses of os/exec with golang.org/x/sys/execabs
* complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972))
  * [`16cd6ed13`](https://github.com/containerd/containerd/commit/16cd6ed137d8f6397def9e63a15ac8761a8c1cda) Additional integration tests for pulling image with labels
* Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966))
  * [`2458afeb1`](https://github.com/containerd/containerd/commit/2458afeb131b8942907b1c62a9b1751387e2ed08) Fix content copy to not ignore unexpected EOF
* add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964))
  * [`1efed4309`](https://github.com/containerd/containerd/commit/1efed43090fcb24eb138acf318b9edef91d22007) add ip_pref CNI options for primary pod ip
* cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939))
  * [`756f4a314`](https://github.com/containerd/containerd/commit/756f4a3147d6fde2f69077ae1805dacde886bf89) cri: add devices for privileged container
* sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954))
  * [`24cec9be5`](https://github.com/containerd/containerd/commit/24cec9be560c44bf7ab3135836ebf9caddbf7c61) sandbox: Allows the sandbox to be deleted in NotReady state
* pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969))
  * [`9954147c0`](https://github.com/containerd/containerd/commit/9954147c0343639c538cc77416022e263090be80) pin protobuild version to tag
* Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965))
  * [`6bec0d39b`](https://github.com/containerd/containerd/commit/6bec0d39b043c8cc9de3df9d7a8b6c8611fe348e) use a const metric for build_info
  * [`ae27a6b05`](https://github.com/containerd/containerd/commit/ae27a6b05ce42bd0c3e794ae46e9a1d9f0cb37f0) Add metric exposing build version&revision
* Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627))
  * [`f8dfbee17`](https://github.com/containerd/containerd/commit/f8dfbee17888240616a57a724fa34bef4357092d) add cri test case
  * [`9a8bf1315`](https://github.com/containerd/containerd/commit/9a8bf13158e469e284757bc9f88796439817423b) feature: add field LinuxContainerResources.Unified on cri
* integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861))
  * [`f7b1ceb9f`](https://github.com/containerd/containerd/commit/f7b1ceb9f666c7a142f139a3306c8163866a280e) integration: investigate TestRestartMonitor's failure
* Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917))
  * [`278176db1`](https://github.com/containerd/containerd/commit/278176db151b3559a73ffa5bcdfe3b025a5abae6) Address issue forms feedback
  * [`11ab3cba0`](https://github.com/containerd/containerd/commit/11ab3cba0e161f66f5d5bfdf680055c9b82533ce) Use issue forms for bug reporting
* cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945))
  * [`2bcd6a4e8`](https://github.com/containerd/containerd/commit/2bcd6a4e8837d14a7b980349281c7508a701e4ab) cri: patch update image labels
* darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936))
  * [`a43fa9f28`](https://github.com/containerd/containerd/commit/a43fa9f284e5f0a4c50f65f80a88a3a91d3e5f75) darwin: runtime support
  * [`5dd38792a`](https://github.com/containerd/containerd/commit/5dd38792a82e1f7bb0579263e8854a8b373371e4) darwin: use the default values for socketRoot variable
* Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858))
  * [`7826a21ac`](https://github.com/containerd/containerd/commit/7826a21ac6319a033fdf7573f2a17d2507a69f2f) Update RELEASES.md
* archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949))
  * [`ccc5ee303`](https://github.com/containerd/containerd/commit/ccc5ee303892023081a880ffc32bbd8ebf56461d) archive: Add WriteDiff error logs
* replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958))
  * [`8e850bc0f`](https://github.com/containerd/containerd/commit/8e850bc0feeba4910bf6e8f079b6c5ca5f34d199) replace deprecated Dail with DailContext
* Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951))
  * [`aeea697d8`](https://github.com/containerd/containerd/commit/aeea697d84f214ab99b542fa5e695b9369e3ca0b) Add WS2022 support in Windows Periodic tests
* Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943))
  * [`96ec0b6f3`](https://github.com/containerd/containerd/commit/96ec0b6f34c05d26de4d9433b45a3493e16fc28e) content fuzzer: Clean up tempdir
* using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944))
  * [`789abc936`](https://github.com/containerd/containerd/commit/789abc9367b27506f6559f60448018134881630f) using Hosts replace deprecated field
* fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947))
  * [`820bd9269`](https://github.com/containerd/containerd/commit/820bd926906f60e19a62b7eb809053fe3e75818c) fix document non-synchronous in crictl.md
* go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929))
  * [`1dd0d59b7`](https://github.com/containerd/containerd/commit/1dd0d59b7386d9f2ae44fdcabcce21f8bf3b4900) go.mod: Update hcsshim to v0.8.21
* Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937))
  * [`eb2530be8`](https://github.com/containerd/containerd/commit/eb2530be8434a63e5358b6aa52cd3b76054bc31a) Makefile.linux: build on riscv with PIE
* Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932))
  * [`27046a9e0`](https://github.com/containerd/containerd/commit/27046a9e06de44ecc4b1662ca43977cc2d6c789e) Fix cwd flag for `ctr tasks exec`
* Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927))
  * [`6d3d34b85`](https://github.com/containerd/containerd/commit/6d3d34b85d5aa4c32e350f36693507d6e0c1c0fc) Update Pause image in tests & config
* cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122))
  * [`e0f8c04da`](https://github.com/containerd/containerd/commit/e0f8c04dad213975bf55dcfa71986be6d8b489e2) cri: Devices ownership from SecurityContext
* Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921))
  * [`7bc5aa74c`](https://github.com/containerd/containerd/commit/7bc5aa74c2cf054b8e5a7982cad073c252fb5f4a) Fix pull fails on unexpected EOF
* Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845))
  * [`838afd211`](https://github.com/containerd/containerd/commit/838afd21161c0c43fbb28f3b71b8ad1e37fe63fd) Adding testing of two devices
  * [`7fba86264`](https://github.com/containerd/containerd/commit/7fba862648b2ee70a351441f0e910274937ea04b) Fix dir support for devices V3 (#4847)
* windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914))
  * [`e2c769d6f`](https://github.com/containerd/containerd/commit/e2c769d6fb17391df70bd658e1573360d4ccbb7b) windows: The DefaultSpec platform should match the Default matcher
* Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865))
  * [`25644b461`](https://github.com/containerd/containerd/commit/25644b4614d607199befa3c83c86540496a6e4f9) Add RunAsUserName functionality for the Windows Pod Sandbox Container
* bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899))
  * [`e18516767`](https://github.com/containerd/containerd/commit/e185167677649b751fd04c18c71ea39f4deda114) go.mod: update runc to v1.0.2
  * [`3f8ea1b6a`](https://github.com/containerd/containerd/commit/3f8ea1b6a1755a7c09addbcdabceb9b2eecc2ff7) update runc binary to v1.0.2
* Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903))
  * [`d3aa7ee9f`](https://github.com/containerd/containerd/commit/d3aa7ee9f065d5d8773b4b38124ad6e3d6634dc2) Run `go fmt` with Go 1.17
* go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905))
  * [`429296910`](https://github.com/containerd/containerd/commit/429296910658a0b4c892fd01c65df7d3f1202b3e) go.mod: github.com/pelletier/go-toml v1.9.3
* cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902))
  * [`c3609ff4c`](https://github.com/containerd/containerd/commit/c3609ff4ca0c1e2c4b713db65a63faefca5786db) cri: filter selinux xattr for image volumes
* Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131))
  * [`79b369a0b`](https://github.com/containerd/containerd/commit/79b369a0bb9d79bf2c397d2bed771fca9144b46e) Added windows hostProcess cni skip
* script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897))
  * [`4dd5ca70f`](https://github.com/containerd/containerd/commit/4dd5ca70fb0948299d52fddc115e999ce8fc143b) script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
* Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889))
  * [`9fe7bc938`](https://github.com/containerd/containerd/commit/9fe7bc938b1264844e3434e501c7c817c1956ea4) Bump integration timeout to 35 min
  * [`f8602c372`](https://github.com/containerd/containerd/commit/f8602c3725c55938c6b4ca3440ef07e6c3f28ba4) Update to Go 1.17
* integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896))
  * [`acb81bbda`](https://github.com/containerd/containerd/commit/acb81bbdaf35524ea020d81607ab62dd8bb718ed) integration: fix TestContainerPids
* [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891))
  * [`6f60b3016`](https://github.com/containerd/containerd/commit/6f60b3016f126d06717cd296b86dce0679b61d2c) [ctr] add HOSTNAME env for host network
* Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886))
  * [`c9b1b2fd5`](https://github.com/containerd/containerd/commit/c9b1b2fd5b6ec9d434a4baf3c091a31bfa039934) Fuzzing: Add fuzzer
* Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884))
  * [`9e1b57ca0`](https://github.com/containerd/containerd/commit/9e1b57ca0161c4081bbc899db32b665d3d38bc94) Add env for SystemdCgroup driver
* Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878))
  * [`1224060f8`](https://github.com/containerd/containerd/commit/1224060f8928ef58c8d480bc7763a09b19427413) Allow expanded DNS configuration
* Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863))
  * [`538d93d2f`](https://github.com/containerd/containerd/commit/538d93d2fcab530f525687a90521d30c00965df8) Fuzzing: Add 4 fuzzers
* Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813))
  * [`d30d897ef`](https://github.com/containerd/containerd/commit/d30d897ef93e7838f0c0828e0e85619b93331131) Cleanup v2 shim
* Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840))
  * [`5e49ec27d`](https://github.com/containerd/containerd/commit/5e49ec27dc4ff4f619453578a624d8cc35b21630) Use http.Get to download binaries instead of exec.Command
  * [`11a90c7ff`](https://github.com/containerd/containerd/commit/11a90c7ff4b59ba4a0d639c74fe8eb0fa0761f85) Fuzzing: Add experimental version of container fuzzer
* add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846))
  * [`d2f3b7146`](https://github.com/containerd/containerd/commit/d2f3b71468f385e535e6db31b430bfeeb973dead) add cpu-shares to ctr
* docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847))
  * [`bc4cea4e4`](https://github.com/containerd/containerd/commit/bc4cea4e44d5d219a5f6bba0654e6918ccd2a2bb) docs: rename main to master
* content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849))
  * [`a3d6edc0e`](https://github.com/containerd/containerd/commit/a3d6edc0eddeb380dceed84884a78b5dc621023b) content: return the error with its timestamp
* Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857))
  * [`82fe0db9a`](https://github.com/containerd/containerd/commit/82fe0db9aa83d94c04761ee9907befb5d1e61597) Fix bad `make protos` failure
* replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851))
  * [`30b832e49`](https://github.com/containerd/containerd/commit/30b832e494ebaa244d2321299dc0d3072eae4044) archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
* docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856))
  * [`1c47fb17f`](https://github.com/containerd/containerd/commit/1c47fb17f3b0c3da9ff45960487f93fc03ba1bf4) docs: remove FOSSA's badge
* BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850))
  * [`9cc179aa7`](https://github.com/containerd/containerd/commit/9cc179aa773b3aa09de03934c8850a770d7aa71b) BUILDING.md: remove some bits about building runc
  * [`42b57cc73`](https://github.com/containerd/containerd/commit/42b57cc730e6283b5f64563e90a7201d47d9a354) BUILDING.md: markdown fixes
* go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836))
  * [`e634f04d8`](https://github.com/containerd/containerd/commit/e634f04d8cdb6c2f96eea2e4e66d0e4500a46282) go.mod: update kubernetes to v1.22.0
* [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852))
  * [`e6538b8bc`](https://github.com/containerd/containerd/commit/e6538b8bce1814471af2cd3467d5f4c6e863cb08) Add trap to cri-integration test script
* docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848))
  * [`a5468852f`](https://github.com/containerd/containerd/commit/a5468852f8123ada3757db9b608cd6648285d835) docs: list all snapshotter-related build flags
* Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835))
  * [`0a0621bb4`](https://github.com/containerd/containerd/commit/0a0621bb47d48d8cbcbb614ee38422ce8b98a340) Move plugin context events into separate plugin
* Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839))
  * [`534685f95`](https://github.com/containerd/containerd/commit/534685f9558cc67125156ba2fbdd0e0ade74cc33) Fix Linux CI Linter using go 1.15.14
* Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842))
  * [`42a28ad2c`](https://github.com/containerd/containerd/commit/42a28ad2ca7faecfa3e2024952781136211c1fbf) Update Go to 1.16.7
* Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838))
  * [`10eab21a4`](https://github.com/containerd/containerd/commit/10eab21a4d4f47b2eb63a83e3675d151277a430a) Cleanup CI
* Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834))
  * [`6f027e38a`](https://github.com/containerd/containerd/commit/6f027e38a8e705a05ccc7031afb39b53a358b958) Remove redundant build tags
* Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830))
  * [`7917da764`](https://github.com/containerd/containerd/commit/7917da764c6d6b0851f3adf1ef2346d62c88a1d0) Change default directories on Darwin
* [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731))
  * [`3c5424454`](https://github.com/containerd/containerd/commit/3c5424454b60e775829c2e9b56be53a6af42fa90) [otel-tracing] vendor and go modules changes
  * [`3597ac859`](https://github.com/containerd/containerd/commit/3597ac859d3fc79f250e5d0f1664fb9db9143898) [otel-tracing] Initial opentelemetry support
  * [`10824eaf2`](https://github.com/containerd/containerd/commit/10824eaf2ea46e3be7e4ac29a9ae6de11ec21093) remove go 1.13 from containerd
* Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829))
  * [`c3c276ae1`](https://github.com/containerd/containerd/commit/c3c276ae1c3c322b192539980ce4973f452fd0a2) Fuzzing: Fix for OSS-fuzz issue 36825
* Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825))
  * [`41a04246f`](https://github.com/containerd/containerd/commit/41a04246f414f43080c9f0c9944516bd5855b209) Fuzzing: Add two more fuzzers
* scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760))
  * [`6c257552a`](https://github.com/containerd/containerd/commit/6c257552a72a49f75114c01401d3703f880ac054) scripts: declare ROOT closer to where it's used, and some DRY changes
  * [`dba0ef4eb`](https://github.com/containerd/containerd/commit/dba0ef4eb58e87cd3c6ab5a0e93f39ff1703b6eb) scripts: add missing quotes, and minor linting issues
  * [`0cb656860`](https://github.com/containerd/containerd/commit/0cb656860fabd4ad4d4ac93b4b0e2d88270fd231) test/build-utils.sh: remove support for Debian Jessie
* platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821))
  * [`f2c3122e9`](https://github.com/containerd/containerd/commit/f2c3122e9c6470c052318497899b290a5afc74a5) platforms: Format(): use path.Join() instead of joinNotEmpty()
* Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823))
  * [`2c699cc35`](https://github.com/containerd/containerd/commit/2c699cc35095476ddae077a459cbcf8962b51050) Fuzzing: Remove panics of container_fuzzer
* Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785))
  * [`acecd6603`](https://github.com/containerd/containerd/commit/acecd660311216c91d13435d561a854eb5e4c580) Change protoc link
  * [`cc88f8e0a`](https://github.com/containerd/containerd/commit/cc88f8e0ae82d08ccf821f9f1de4c180afb8e6ca) Split fuzzer to two fuzzers
  * [`6294235d8`](https://github.com/containerd/containerd/commit/6294235d8137424862def12cf3cf6267b3597dfc) Fuzzing: Add container fuzzer
* runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746))
  * [`4ab3e7a53`](https://github.com/containerd/containerd/commit/4ab3e7a53a15cf0bc311179994f339760365dd97) runtime: fix the issue of create new socket with abstract address
* mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809))
  * [`ce437864b`](https://github.com/containerd/containerd/commit/ce437864b2e7e2f9b94e02ba564e010a5ea2248d) mergo: Upgrade to 0.3.12 to fix panic
* ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802))
  * [`d1e868c83`](https://github.com/containerd/containerd/commit/d1e868c832d42f443dbd55118b2eff9aa92b021a) ci: install criu from PPA
* Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144))
  * [`d62d6c11d`](https://github.com/containerd/containerd/commit/d62d6c11dc381f9a4b3301329a20ccf3babcc604) Split release steps into multiple tasks
  * [`b4807122d`](https://github.com/containerd/containerd/commit/b4807122d29370c79272f8d982e9c408736a4932) Update release workflow to upload binary without CNI
* Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725))
  * [`23bc3db91`](https://github.com/containerd/containerd/commit/23bc3db914c30b133e5fa037fc2a3242f7329fc7) Enable critest on Windows
* Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792))
  * [`43117cf91`](https://github.com/containerd/containerd/commit/43117cf9193ab81fc3c178c0bef1d4ca49259c94) Script to check if entries in go.mod files are in sync
* Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043))
  * [`e692a0192`](https://github.com/containerd/containerd/commit/e692a01926cd296f3b77ee7f6ba1308b5ecd6aca) Add shared content label to namespaces
* platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784))
  * [`2405671d4`](https://github.com/containerd/containerd/commit/2405671d4089626f224473936e793fee19905d90) platforms: add "ios" as known OS, "loong64" as known ARCH
* Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804))
  * [`3a8622e30`](https://github.com/containerd/containerd/commit/3a8622e309d9f75e0c12fd43a31d95127ff341be) Updates the location of protobuf downloads in docs
* Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803))
  * [`0d9393650`](https://github.com/containerd/containerd/commit/0d939365079d91e82549c808fde1ba70cf0cdea3) Update protobuf install to use correct repository
* overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624))
  * [`67406b373`](https://github.com/containerd/containerd/commit/67406b3732b3139ea2f825541e5c84d46ffd5e04) overlay: add an optional label of upperdir location of each snapshot
* Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693))
  * [`1d3d08026`](https://github.com/containerd/containerd/commit/1d3d08026d25797b81ec1d385119dffa04a2ad46) Support SIGRTMIN+n signals
* respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800))
  * [`7a10fd4fc`](https://github.com/containerd/containerd/commit/7a10fd4fccb93a04b80352fea71fc1095d742b7f) respect context timeout in shim binary call
* Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716))
  * [`494b940f1`](https://github.com/containerd/containerd/commit/494b940f1475cb393d8f6ec8474eaeb50d022231) Introduce a new go module - containerd/api for use in standalone clients
* grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606))
  * [`63fe34add`](https://github.com/containerd/containerd/commit/63fe34add6997ba54d9bb0c6b2d7066efa2453c1) grpc config add options tcp_tls_ca
* integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162))
  * [`16deba098`](https://github.com/containerd/containerd/commit/16deba098c90a99e7948f16ffd4a49a5bbe9526d) integration: Windows volume-copy-up images
* add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795))
  * [`4fdb88464`](https://github.com/containerd/containerd/commit/4fdb884644ecdd6a4b4b0d1bd85b8f6ccc1995c6) add CRI support matrix to RELEASES.md
* adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794))
  * [`b5fc7846c`](https://github.com/containerd/containerd/commit/b5fc7846c465c10d9dfd4f0c150571c78e1a12b2) adding a little more clarity
* update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793))
  * [`18d6cc1b0`](https://github.com/containerd/containerd/commit/18d6cc1b06ad1ff8fb7def3a667f8bfe68e83e70) update gotestsum to v1.7.0
* Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756))
  * [`f1d79d33b`](https://github.com/containerd/containerd/commit/f1d79d33b8479ddfa741e61b83dffda259fa16aa) Discard blocks when removing a thin device
* Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590))
  * [`2bb8ad7c9`](https://github.com/containerd/containerd/commit/2bb8ad7c9ea4f626527a33dce51b89d3278194a2) Makefile: pass build tags to manpage build process
  * [`f60d447c1`](https://github.com/containerd/containerd/commit/f60d447c16991a183853cce58d21d88351cb0f16) Makefile: fix tags parameter computation
* Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744))
  * [`efa8ab715`](https://github.com/containerd/containerd/commit/efa8ab7158ea806e5ef2c9460187ec75eabab06e) Add runtime label to metrics
* interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745))
  * [`0d45ac14e`](https://github.com/containerd/containerd/commit/0d45ac14e92a9b63f7e31dab5a9325b26e8a3e12) interface about shim build check
* integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775))
  * [`00d52bb15`](https://github.com/containerd/containerd/commit/00d52bb159e091d1dee79e7b4c809662fe8f4e4d) integration: log all processes to investigate the test failure
* Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779))
  * [`2556aac67`](https://github.com/containerd/containerd/commit/2556aac6751829f7f219c4ddc3f5d4630c1dda07) Fuzzing: Add archive fuzzer
* Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687))
  * [`0789a0c02`](https://github.com/containerd/containerd/commit/0789a0c02b78d70cc06c9c8f86d9a128f2b9d46c) Add docker fetch fuzzer
* Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735))
  * [`b483177ee`](https://github.com/containerd/containerd/commit/b483177ee2089fd8284258840e2526370c15eab3) Support custom compressor for walking differ
* remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770))
  * [`53ec1abec`](https://github.com/containerd/containerd/commit/53ec1abec228e5121d5de4acaab08ed26ad70b9c) remotes/docker/pusher.go: Fix missing Close()
* remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769))
  * [`67d07fe5c`](https://github.com/containerd/containerd/commit/67d07fe5cf4f165396872499b3d36ee5cba6774d) remotes/docker/fetcher.go: Fix missing Close()
* Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771))
  * [`d2b6d192d`](https://github.com/containerd/containerd/commit/d2b6d192db18655e0930bd3c8051947873ed39b1) Update cpuguy83/go-md2man binary to v2.0.1
* Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750))
  * [`9537bc265`](https://github.com/containerd/containerd/commit/9537bc2654869bbc6fc4b740a674acfbcec9ab00) Dockerfile.test: build containerd in separate stage
  * [`36be5ef3a`](https://github.com/containerd/containerd/commit/36be5ef3a26d5db8f487514e06179a17d7771b49) Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
  * [`8faacfca1`](https://github.com/containerd/containerd/commit/8faacfca1647e6b8d2d37e35f11d0cf9bd5d42f6) Dockerfile.test: clean up apt indexes after installing
  * [`9f7e6335c`](https://github.com/containerd/containerd/commit/9f7e6335c46f9a46cfe2f0955759842b095addc4) Dockerfile.test: build critools in a separate stage
  * [`7ec8e2d36`](https://github.com/containerd/containerd/commit/7ec8e2d369606e870875f52a116ca2bf32e7317d) Dockerfile.test: build cni in a separate stage
  * [`f9f423c07`](https://github.com/containerd/containerd/commit/f9f423c078f3b106fe1a87fd60c86eb2d606e2bf) Dockerfile.test: standard directory to collect build aftifacts
  * [`e9f26eb87`](https://github.com/containerd/containerd/commit/e9f26eb877faf37dd0b6f33fe1292970b6183fd1) Dockerfile.test: split dev stage, and optimize order
  * [`25fada0cc`](https://github.com/containerd/containerd/commit/25fada0cc7082d3f6c2e54e58e1794234a605daf) Dockerfile.test: skip curl, gcc, git and make install
  * [`546538971`](https://github.com/containerd/containerd/commit/546538971cbde5c9fd95da32d0d77daba63c72ad) install-critools: make sure DESTDIR exists
* update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754))
  * [`603962bc8`](https://github.com/containerd/containerd/commit/603962bc81deb197350ee5144dad862d062eb964) update gotestsum to current master
* Merge Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w)
  * [`bc4e416c8`](https://github.com/containerd/containerd/commit/bc4e416c88670e4409917a18bc3da50e48b401de) Add test for archive breakout test for lchmod
* Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755))
  * [`150e07b64`](https://github.com/containerd/containerd/commit/150e07b648e7766ca862ee868bf99544d0836e89) Use systemd cgroup driver for cgroupv2 tests
* update runc  to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751))
  * [`a12c7bd1c`](https://github.com/containerd/containerd/commit/a12c7bd1cf18b719416932bbdcbb6e6219b1f1d4) go.mod: runc v1.0.1
  * [`43e0594ae`](https://github.com/containerd/containerd/commit/43e0594ae93be1b4629da91d25c4a830c91924a2) update runc binary to v1.0.1
* runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737))
  * [`dbef1d56d`](https://github.com/containerd/containerd/commit/dbef1d56d7ebc05bc4553d72c419ed5ce025b05d) runtime: runc v2: remove redundant validation
* Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727))
  * [`18321f539`](https://github.com/containerd/containerd/commit/18321f539ce5f78e5db034ce0af73076ea4f11b0) Move loop check to before sleep
  * [`2e8a572df`](https://github.com/containerd/containerd/commit/2e8a572dfd6cc170ed60a45d7d1180d56958eb12) Add timestamp to flaky restart monitor test
* Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722))
  * [`55fd2ab5d`](https://github.com/containerd/containerd/commit/55fd2ab5d6efe01fd12e3ff58bece7ea358b18d3) integration/client: go mod tidy
  * [`e72046f86`](https://github.com/containerd/containerd/commit/e72046f86bc54dfda54fdd9b17955ecae4232cca) Update Go to 1.16.6
* client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447))
  * [`73d28ddeb`](https://github.com/containerd/containerd/commit/73d28ddeb27a5532df084035199c9ad5ed2f69fe) client: surface a connection error more clearly
* Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712))
  * [`894b6ae39`](https://github.com/containerd/containerd/commit/894b6ae39b9266411d0d4e6325235390c06fc0ab) Fix missing Body.Close() calls on push to docker remote
* remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710))
  * [`ac75071b4`](https://github.com/containerd/containerd/commit/ac75071b49cbc69dc4eb7734316e5129b01562e4) remove pkg/cri/platforms package
* Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709))
  * [`0a8802df6`](https://github.com/containerd/containerd/commit/0a8802df67c3e2770ba787c9a0f6bcd41de6b34d) Allow WithServices to use custom implementations
* [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673))
  * [`a81f05f36`](https://github.com/containerd/containerd/commit/a81f05f3602a2b1eee9bff12ce9b985d16aadb60) [Vendor] Update hcsshim to 0.8.18
* test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578))
  * [`04ab4418f`](https://github.com/containerd/containerd/commit/04ab4418fdac4f85cc3b510bc297e06550175c90) test integration: Adds a test that restarts a failed container
* [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619))
  * [`d1c105192`](https://github.com/containerd/containerd/commit/d1c10519278560bbdf220dc72843e344d1a05743) use fu wei's suggeted interface pick for marshaling
  * [`14962dcbd`](https://github.com/containerd/containerd/commit/14962dcbd23790681431838f1efc8b7fe7012157) add alpha version
  * [`a5c417ac0`](https://github.com/containerd/containerd/commit/a5c417ac060f29dad343573674f879d59fc0b9ef) move up to CRI v1 and support v1alpha in parallel
* gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682))
  * [`4c6e4a06f`](https://github.com/containerd/containerd/commit/4c6e4a06ff8f7ef1ab28c67a97fe6bd0f79d73a8) gha: make release workflow work in forks
* Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666))
  * [`3a0b9ec6b`](https://github.com/containerd/containerd/commit/3a0b9ec6bbabeab2f2cb962f62a52d875365793a) Add unit test for plugin
* Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700))
  * [`aefabe546`](https://github.com/containerd/containerd/commit/aefabe5462a0080fa3e7817d33db6dd9a8e95d2d) Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
* Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676))
  * [`a7ad6b3be`](https://github.com/containerd/containerd/commit/a7ad6b3be5bfad7ab77b2801e52663a2eb43e270) Add support for registry host path override
  * [`95c708572`](https://github.com/containerd/containerd/commit/95c708572f2d65b85ebbb3648f34fd531c7b6f36) Update documenation for OCI distribution 1.0
* archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702))
  * [`53835221f`](https://github.com/containerd/containerd/commit/53835221f6b8fc496dbd2332fd48cd58a79f6f2b) Cleanup lchmod logic in archive
* Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571))
  * [`419d616fe`](https://github.com/containerd/containerd/commit/419d616fec5f24ee61a0a113a899e78a6e49a850) Install specific golang version in Windows CI.
* Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660))
  * [`bda7b5866`](https://github.com/containerd/containerd/commit/bda7b58666b9b8e01342a36317cffe9fdf1f7aa3) feat: Add snapshotter label to the new snapshot for container.
* snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655))
  * [`03ee45006`](https://github.com/containerd/containerd/commit/03ee450060dff5440fc02e8c88752c8314a8714f) snapshot/devmapper: log exported methods correctly
* Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662))
  * [`2019a1e68`](https://github.com/containerd/containerd/commit/2019a1e68f7488bdc0975062cbbd933b53595714) Makefile: fix DESTDIR and PREFIX concatenation
* Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287))
  * [`cabe67736`](https://github.com/containerd/containerd/commit/cabe67736941fa4fa1a6fc54b0045891ecc28733) tests: Use EnsureImageExists for image pulling
  * [`a78bdf22d`](https://github.com/containerd/containerd/commit/a78bdf22df22b0904e843e579f3088472cb52685) tests: Refactors PodSandbox creation
* move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641))
  * [`a964cf0cc`](https://github.com/containerd/containerd/commit/a964cf0cc4beabfd5cc50e970581d79f195ca4c0) un-export mount.FMountat
  * [`21f532d51`](https://github.com/containerd/containerd/commit/21f532d51891087f850ef3a7ed7e737c8c95b88a) move sys.FMountat() into mount package
* sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640))
  * [`dac2543a0`](https://github.com/containerd/containerd/commit/dac2543a07b788f908cde037a133902bebf605d2) sandbox: send pod UID to CNI plugins as K8S_POD_UID
* sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639))
  * [`5a0beaefb`](https://github.com/containerd/containerd/commit/5a0beaefbb64190696f8e634d037bc9047e6f4ac) sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
* content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633))
  * [`63c185da9`](https://github.com/containerd/containerd/commit/63c185da9ad38fabb842aee2fbdefae2f4e5b946) content/local: inline sys.StatATimeAsTime()
* allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636))
  * [`09d78bb6b`](https://github.com/containerd/containerd/commit/09d78bb6b9e8b173f44f5ba3abaee0de416b0ee0) allow multi gpu to be specified via ctr
  * [`f913a4275`](https://github.com/containerd/containerd/commit/f913a42755663e4e7f855dcfe37bad64887a9058) go.mod: runc v1.0.0
  * [`28bb59c08`](https://github.com/containerd/containerd/commit/28bb59c080ce671c8e89829844f95c871eb41393) update runc binary to v1.0.0 GA
* fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629))
  * [`560e7d479`](https://github.com/containerd/containerd/commit/560e7d479923dd7b1b0249375abf202054bf7ed4) fixing some doc links
* Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623))
  * [`d9694b297`](https://github.com/containerd/containerd/commit/d9694b2976a5181121f54690867a53c29dde6552) Sync integration/go.mod with root go.mod
* archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615))
  * [`4a46ea2f4`](https://github.com/containerd/containerd/commit/4a46ea2f4b55a2e4e694ecc6f93389421053dc6a) archive: Expose ChangeWriter to allow customized diff computing
* CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625))
  * [`cd33c007c`](https://github.com/containerd/containerd/commit/cd33c007cecdee2c8e5333190cad1bbce4ade13d) CI: Switch to available latest images
  * [`75b4c83f0`](https://github.com/containerd/containerd/commit/75b4c83f04d5f4fb148b5f498584af8854581083) fix deprecation config for default runtime
* Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614))
  * [`394f86475`](https://github.com/containerd/containerd/commit/394f864750ed0ffea980d713b179a53e070a9d78) Re-enable criu in main integration runs
* runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617))
  * [`87a2e0b2a`](https://github.com/containerd/containerd/commit/87a2e0b2a2d58c19e26d96ebcefc982505316081) runtime,v2: Enable debug when containerd is on debug+ log level
  * [`1bbee573a`](https://github.com/containerd/containerd/commit/1bbee573af72ee63ec67483a836f6e5cdcf9850d) github.com/golang/protobuf/proto is deprecated
  * [`91c8fa452`](https://github.com/containerd/containerd/commit/91c8fa4529f335c34dffc56e15c54054e97ac69e) Update github.com/golang/protobuf from v1.3.5 to v1.4.3
  * [`b7e79dc5a`](https://github.com/containerd/containerd/commit/b7e79dc5ab1084d2db3562c77896489674d9486f) Update google.golang.org/grpc from v1.27.1 to v1.38.0
  * [`8d2e156dd`](https://github.com/containerd/containerd/commit/8d2e156ddbd63e58d18048fd9960c586178fdc58) Increase golangci-lint timeout
* ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611))
  * [`05e51539a`](https://github.com/containerd/containerd/commit/05e51539a95f739c8963ab5184b8bda540e34e36) command line flags of setting container rootfs propagation
  * [`1dada3fc2`](https://github.com/containerd/containerd/commit/1dada3fc2a76ea1298f924bf404928c0f37796c4) add cgroupv2 setup for cos with a flag
* Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612))
  * [`bfbebf02b`](https://github.com/containerd/containerd/commit/bfbebf02b7c413c7afc9c253fb2199803c9e7c69) Update gotestsum to add timestamps to junit output
* Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604))
  * [`9c01fe20d`](https://github.com/containerd/containerd/commit/9c01fe20d31d3120c8bd2e0e68c411a3ebeabc64) Allow to pass --no-cgroup option to nvidia-container-cli
* Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577))
  * [`77374e8b3`](https://github.com/containerd/containerd/commit/77374e8b35900cc4cffd719282d29b43b729b58e) Makefile: FHS conformant manpage installation pathes
* Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594))
  * [`3ab974433`](https://github.com/containerd/containerd/commit/3ab97443360775ff3fb13a7be2efedb875805824) Add proper Go version before project checks
* Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580))
  * [`af5a130bc`](https://github.com/containerd/containerd/commit/af5a130bc94b91729114a502bf52f729f76638e4) Enable cri-integration in Windows Periodic Tests
* adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573))
  * [`7a2b04758`](https://github.com/containerd/containerd/commit/7a2b04758bfb52c17e1780dc432cff586b714839) adds explanation for seccomp unset/unconfined default vs runtime default
* Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569))
  * [`728743eb2`](https://github.com/containerd/containerd/commit/728743eb2858764df05fbb012cb03eb7c6cb0423) Fix cleanup context of teardownPodNetwork
* update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572))
  * [`01585595a`](https://github.com/containerd/containerd/commit/01585595a5934773aec184fc893b3db03e02628d) update integration/client go.sum
* Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566))
  * [`69f43d458`](https://github.com/containerd/containerd/commit/69f43d4589c50a8e64afac7cd5dda99433112ab8) Revert diff/walking error change
* Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562))
  * [`9a451d103`](https://github.com/containerd/containerd/commit/9a451d103c9b2d4791e22e5acdb7098c37bbec55) Update opencontainers/selinux to v1.8.2
* fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565))
  * [`014748bc0`](https://github.com/containerd/containerd/commit/014748bc04623346725d2a1330d7a2292563a4df) fix invalid validation error checking
* diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551))
  * [`558fdc680`](https://github.com/containerd/containerd/commit/558fdc6808dc2c15645e8bccf500a93df78432b6) diff/walking: fix defer cleanup
* Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559))
  * [`5f0fc4893`](https://github.com/containerd/containerd/commit/5f0fc4893da618651a67f44b80f6b47392d1d727) Add creation timestamp to RG
* Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328))
  * [`f8538b5e1`](https://github.com/containerd/containerd/commit/f8538b5e12b0977904bb810e3eae234a8ab1e48c) Fix error case in Windows layer cleanup
* Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422))
* tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284))
* Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535))
* Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560))
* scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536))
* docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554))
* integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553))
* docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548))
* Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544))
* Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165))
* Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273))
* Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539))
* Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533))
* ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531))
* Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472))
* ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527))
* Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534))
* Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528))
* Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519))
* Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520))
* Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509))
* Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275))
* bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514))
* update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511))
* Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508))
* Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507))
* Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493))
* tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163))
* Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504))
* bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505))
* Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498))
* cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313))
* plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440))
* metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465))
* Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100))
* Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492))
* adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309))
* Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459))
* Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473))
* Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468))
* Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466))
* tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452))
* Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450))
* update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462))
* Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461))
* [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457))
* oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063))
* [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454))
* windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411))
* doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448))
* update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445))
* Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436))
* go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441))
* Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446))
</p>
</details>

### Changes from containerd/cgroups
<details><summary>24 commits</summary>
<p>

* cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203))
  * [`80a7821`](https://github.com/containerd/cgroups/commit/80a7821536fc82757f390f8d65693074bd3ef8e4) cgroup: Optionally add process and task to a subsystems subset
* replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208))
  * [`0072297`](https://github.com/containerd/cgroups/commit/0072297e4547d623094fc68b0df41eef364d1747) replace pkg/errors from vendor
* cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207))
  * [`d55de5d`](https://github.com/containerd/cgroups/commit/d55de5d2af9a3616eb758e393a2170a1421155c1) cgroup.go: avoid panic on nil interface
* Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204))
  * [`73a8516`](https://github.com/containerd/cgroups/commit/73a8516e7f0f45fe9931d02cc57ff6059202f553) cgroupv2: reset lastErr to nil when subtree control is successfully written
  * [`2ca92c5`](https://github.com/containerd/cgroups/commit/2ca92c515038c7a30c1998dbe29a87873b98a3b3) cgroupv2: enable controllers before setting resources in NewChild()
* v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201))
  * [`db173a8`](https://github.com/containerd/cgroups/commit/db173a86bea843700360e7061c6f8d3869d13363) v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
  * [`b19a60d`](https://github.com/containerd/cgroups/commit/b19a60d64d89b858b3c2bee4a04fb7f70642ffce) v2: remove errors that are never returned
* v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202))
  * [`4fe70f3`](https://github.com/containerd/cgroups/commit/4fe70f3edc256fc2345d5f8f8a54e2f4e96f271e) v1: reduce duplicated code
* cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200))
  * [`6659093`](https://github.com/containerd/cgroups/commit/66590933215fb7b0c9f9ffd39e9946ab510d7679) cgroup v1: implement AddProc()
* Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199))
  * [`7254c12`](https://github.com/containerd/cgroups/commit/7254c1242cee46d1c37bf3da2151eed571879b5c) Rename branch from master to main
* utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197))
  * [`23b5120`](https://github.com/containerd/cgroups/commit/23b51209bf7bd11941d5613119309b11029e8373) utils: export ParseCgroupFile()
* go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194))
  * [`f8918cf`](https://github.com/containerd/cgroups/commit/f8918cf2d923b7003970ce99bb29545f2f34b531) go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
* Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195))
  * [`1a4509d`](https://github.com/containerd/cgroups/commit/1a4509dd06454dc765aed7f62cb26531416ffce3) Use /proc/partitions to get device names
</p>
</details>

### Changes from containerd/console
<details><summary>6 commits</summary>
<p>

* Fix CI ([#55](https://github.com/containerd/console/pull/55))
  * [`e700792`](https://github.com/containerd/console/commit/e7007923e8658f863a85c34aa029c394918fed19) Fix CI
  * [`05dadd9`](https://github.com/containerd/console/commit/05dadd92d21fc51f0bf56eadcb4201955cfc98d8) Stop using pkg/errors
* Add support for z/OS ([#46](https://github.com/containerd/console/pull/46))
  * [`7097449`](https://github.com/containerd/console/commit/70974496a6a52dc828ed9eeaaf451485a7598d53) Console test on z/OS
  * [`c4672c3`](https://github.com/containerd/console/commit/c4672c3a84f944113a124e5c1d401ff7ce932675) Add support for z/OS
</p>
</details>

### Changes from containerd/continuity
<details><summary>20 commits</summary>
<p>

* Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188))
  * [`2cd7d24`](https://github.com/containerd/continuity/commit/2cd7d24c426a4948a97cc1d3619de5099507642a) Copy Windows file metadata
* fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187))
  * [`23a11df`](https://github.com/containerd/continuity/commit/23a11df3824c0e2868cff8775369f3cbd3430226) fix fmt.Errorf("%w", err) on err == nil
* Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185))
  * [`849cf06`](https://github.com/containerd/continuity/commit/849cf06982a4a69ccb3c1cfa81f2aca763ad9877) run gofmt with Go 1.17
  * [`7b4650c`](https://github.com/containerd/continuity/commit/7b4650cc28941dc385d93521d532e6abbd923ed6) remove direct dependency on github.com/pkg/errors
* Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186))
  * [`16556d0`](https://github.com/containerd/continuity/commit/16556d050e667b37fa349d76de4bca0d8a225a33) update AUTHORS
  * [`b80f086`](https://github.com/containerd/continuity/commit/b80f08663090d91b0316074edca48bdd4fdbe0fa) darwin: use utimensat syscall instead of utimes
  * [`c666a35`](https://github.com/containerd/continuity/commit/c666a3535003db8bc2b1a8e6e40a693b3643aa3e) fix darwin usage of du command
* go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161))
  * [`c7d2029`](https://github.com/containerd/continuity/commit/c7d202952681f94836fad4d45d7b829f32fb9e9c) go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
* fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184))
  * [`fa7d162`](https://github.com/containerd/continuity/commit/fa7d1622372f1a787bfe51d59183b598813ce9d9) reformat nolint comments
  * [`a780d6d`](https://github.com/containerd/continuity/commit/a780d6dfbb58807abd3118add4e567017a0931f9) fs/stat: add FreeBSD
* Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182))
  * [`0175d70`](https://github.com/containerd/continuity/commit/0175d7070de291971f80576e74cd3ca2c5ab611c) Rename branch from master to main
* testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180))
  * [`e10d519`](https://github.com/containerd/continuity/commit/e10d519aaa7d4883e622e170239be4189336871d) testutil/loopback: print more debug info
</p>
</details>

### Changes from containerd/go-cni
<details><summary>15 commits</summary>
<p>

* remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74))
  * [`eff9f5b`](https://github.com/containerd/go-cni/commit/eff9f5bf31bf2228e257e6a9bf7d259e7c4626b9) remove: Continue on "not found" errors
* go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72))
  * [`9cfa666`](https://github.com/containerd/go-cni/commit/9cfa666e12c79b68bdc474d3808edf557b6af36c) go.mod: github.com/containernetworking/cni v1.0.1
* remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71))
  * [`b6c559f`](https://github.com/containerd/go-cni/commit/b6c559f04b1d93c5eed8cf9dfaf5025d75d4c348) remove direct dependency on github.com/pkg/errors
* update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70))
  * [`786c2bc`](https://github.com/containerd/go-cni/commit/786c2bcd455ebdf69321c7d613052a1d49bf0165) test: add TestLibCNIType100
  * [`e3fccc2`](https://github.com/containerd/go-cni/commit/e3fccc24058924b8bfa5e4d265defca6964a251f) update CNI to v1.0.0
* Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69))
  * [`591b0b6`](https://github.com/containerd/go-cni/commit/591b0b69153fc04bb2f27c9e7d8af70f184e17d3) Rename branch from master to main
* result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68))
  * [`6c993c3`](https://github.com/containerd/go-cni/commit/6c993c3feefaf407e41f65ac0a66b6817fa00c81) result: change Raw from a struct field to a method
* result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67))
  * [`bc7198b`](https://github.com/containerd/go-cni/commit/bc7198b2c67b9a4ee960b3097822379908560b0c) result: expose raw result
</p>
</details>

### Changes from containerd/ttrpc
<details><summary>34 commits</summary>
<p>

* Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96))
  * [`6eabacc`](https://github.com/containerd/ttrpc/commit/6eabacc9bc8e71d09834cce051ec9115ba36b1e1) Add protoc-gen-go-ttrpc
* client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94))
  * [`4f0aeb5`](https://github.com/containerd/ttrpc/commit/4f0aeb590b0add2bb19d199e7db4a487afde4581) client: Handle sending/receiving in separate goroutines
* Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95))
  * [`e621cd1`](https://github.com/containerd/ttrpc/commit/e621cd13e4495f2d3673ef9409ab69d1054b5c10) Run Protobuild in GitHub Actions
  * [`35cd240`](https://github.com/containerd/ttrpc/commit/35cd24038aee70ed64d7814c06eb4c7c805cddde) Re-generate example.pb.go
* replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93))
  * [`81faa3e`](https://github.com/containerd/ttrpc/commit/81faa3ee80c4384ec3ee9022efc2a9fc8c46361a) replace pkg/errors from vendor
* Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86))
  * [`a143311`](https://github.com/containerd/ttrpc/commit/a1433112ec1ce559f5a81564937ba583702b48c8) Rename branch from master to main
* Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85))
  * [`2368990`](https://github.com/containerd/ttrpc/commit/236899069c6f7d7bd857b9deac1197143ec99862) Make the example command buildable on macOS
  * [`616d54c`](https://github.com/containerd/ttrpc/commit/616d54c531e0a32f0efeee3b6770daef5ed4a13f) Run GitHub Actions on macOS
  * [`a4b18e0`](https://github.com/containerd/ttrpc/commit/a4b18e0db831b76114a7a8b166697ed4788838da) Make "go test" work on macOS
* Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83))
  * [`fede9db`](https://github.com/containerd/ttrpc/commit/fede9db17c4440a840e9e7e3f4ed49d76743dc33) Return Unimplemented when services or methods are not implemented
* Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84))
  * [`dcc7d39`](https://github.com/containerd/ttrpc/commit/dcc7d39848621e8b22b1ef74095d94908559db98) Remove "Very new" and checked TODO items
* removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82))
  * [`2776d3f`](https://github.com/containerd/ttrpc/commit/2776d3f8573226f4947bf982ecf4e28c1e121825) removing glide from ignore
* go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79))
  * [`849845f`](https://github.com/containerd/ttrpc/commit/849845f63b953af9caddd3186954bffebf722d8e) go.mod: github.com/prometheus/procfs v0.6.0
  * [`3ea5780`](https://github.com/containerd/ttrpc/commit/3ea578089caa347c6a4a539d041f437f719e5ecc) go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63
  * [`4640e27`](https://github.com/containerd/ttrpc/commit/4640e2792cb2f461ff719f82ce5609ba2bbc2e62) go.mod: google.golang.org/grpc v1.27.1
  * [`7c78be3`](https://github.com/containerd/ttrpc/commit/7c78be300bb630a5d8dafbbd8837d05034da6ee9) go.mod: github.com/gogo/protobuf v1.3.2
* remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78))
  * [`88f2525`](https://github.com/containerd/ttrpc/commit/88f25256c07a1b20caf0b36d2417c335f2a8a2d7) CI: add codecov badge to readme
  * [`6773702`](https://github.com/containerd/ttrpc/commit/6773702961f0c431811490d03076f2b5f4d8971c) CI: remove travis
* Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77))
  * [`5bab91b`](https://github.com/containerd/ttrpc/commit/5bab91b0d034bdabcc34b69b0927fecb948ec7c6) Use GitHub Actions for CI
* go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76))
  * [`a2f306d`](https://github.com/containerd/ttrpc/commit/a2f306d78905538a59862cf5a097fbf1ca26d026) go.mod: sirupsen/logrus v1.7.0
  * [`f0fad07`](https://github.com/containerd/ttrpc/commit/f0fad07cf1dc560a74e62ead1c9faac48a1a9662) go mod tidy
</p>
</details>

### Dependency Changes

* **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 **_new_**
* **github.com/Microsoft/go-winio**                                                v0.4.17 -> v0.5.1
* **github.com/Microsoft/hcsshim**                                                 v0.8.16 -> v0.9.1
* **github.com/bits-and-blooms/bitset**                                            v1.2.0 **_new_**
* **github.com/blang/semver**                                                      v3.5.1 **_new_**
* **github.com/cenkalti/backoff/v4**                                               v4.1.1 **_new_**
* **github.com/cilium/ebpf**                                                       v0.4.0 -> v0.6.2
* **github.com/containerd/cgroups**                                                v1.0.1 -> v1.0.2
* **github.com/containerd/console**                                                v1.0.2 -> v1.0.3
* **github.com/containerd/continuity**                                             v0.1.0 -> 8e53e7cac79d
* **github.com/containerd/go-cni**                                                 v1.0.2 -> aa8bf14323a5
* **github.com/containerd/ttrpc**                                                  v1.0.2 -> v1.1.0
* **github.com/containernetworking/cni**                                           v0.8.1 -> v1.0.1
* **github.com/containernetworking/plugins**                                       v0.9.1 -> v1.0.1
* **github.com/go-logr/logr**                                                      v0.2.0 -> v0.4.0
* **github.com/golang/groupcache**                                                 8c9f03a8e57e -> 41bb18bfe9da
* **github.com/golang/protobuf**                                                   v1.3.5 -> v1.5.2
* **github.com/google/go-cmp**                                                     v0.5.4 -> v0.5.6
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 **_new_**
* **github.com/grpc-ecosystem/grpc-gateway**                                       v1.16.0 **_new_**
* **github.com/imdario/mergo**                                                     v0.3.11 -> v0.3.12
* **github.com/json-iterator/go**                                                  v1.1.10 -> v1.1.11
* **github.com/moby/spdystream**                                                   v0.2.0 **_new_**
* **github.com/moby/sys/signal**                                                   v0.6.0 **_new_**
* **github.com/opencontainers/image-spec**                                         v1.0.1 -> 693428a734f5
* **github.com/opencontainers/runc**                                               v1.0.0-rc93 -> v1.0.3
* **github.com/opencontainers/runtime-spec**                                       e6143ca7d51d -> 1c3f411f0417
* **github.com/opencontainers/selinux**                                            v1.8.0 -> v1.8.2
* **github.com/pelletier/go-toml**                                                 v1.8.1 -> v1.9.3
* **github.com/prometheus/client_golang**                                          v1.7.1 -> v1.11.0
* **github.com/prometheus/common**                                                 v0.10.0 -> v0.26.0
* **github.com/satori/go.uuid**                                                    v1.2.0 **_new_**
* **github.com/sirupsen/logrus**                                                   v1.7.0 -> v1.8.1
* **github.com/spf13/pflag**                                                       v1.0.5 **_new_**
* **github.com/stretchr/testify**                                                  v1.6.1 -> v1.7.0
* **github.com/vishvananda/netlink**                                               f5de75959ad5 **_new_**
* **github.com/vishvananda/netns**                                                 2eb08e3e575f **_new_**
* **go.etcd.io/bbolt**                                                             v1.3.5 -> v1.3.6
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.24.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.0.1 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.0.1 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.0.1 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.0.1 **_new_**
* **go.opentelemetry.io/otel/trace**                                               v1.0.1 **_new_**
* **go.opentelemetry.io/proto/otlp**                                               v0.9.0 **_new_**
* **golang.org/x/net**                                                             e18ecbb05110 -> e898025ed96a
* **golang.org/x/sync**                                                            09787c993a3a -> 036812b2e83c
* **golang.org/x/sys**                                                             47abb6519492 -> 69cdffdb9359
* **golang.org/x/term**                                                            7de9c90e9dd1 -> 6a3ed077a48d
* **golang.org/x/text**                                                            v0.3.4 -> v0.3.6
* **golang.org/x/time**                                                            3af7569d3a1e -> 1f47c861a9ac
* **google.golang.org/appengine**                                                  v1.6.5 -> v1.6.6
* **google.golang.org/grpc**                                                       v1.27.1 -> v1.41.0
* **google.golang.org/protobuf**                                                   v1.27.1 **_new_**
* **gopkg.in/yaml.v3**                                                             9f266ea9e77c -> 496545a6307b
* **k8s.io/api**                                                                   v0.20.6 -> v0.22.0
* **k8s.io/apimachinery**                                                          v0.20.6 -> v0.22.0
* **k8s.io/apiserver**                                                             v0.20.6 -> v0.22.0
* **k8s.io/client-go**                                                             v0.20.6 -> v0.22.0
* **k8s.io/component-base**                                                        v0.20.6 -> v0.22.0
* **k8s.io/cri-api**                                                               v0.20.6 -> v0.23.0-alpha.4
* **k8s.io/utils**                                                                 67b214c5f920 -> cb0fa318a74b

Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)

containerd 1.6.0-beta.3

Welcome to the v1.6.0-beta.3 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

### Highlights

#### Runtime

* **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744))
* **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813))
* **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817))
* **Split task manager into shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918))
* **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011))
* **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031))
* **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206))

#### Windows

* **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131))
* **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778))

#### CRI

* **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695))
* **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619))
* **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627))
* **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964))
* **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113))
* **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111))
* **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130))
* **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170))

#### Other

* **Add a shared namespace label for cross-namespace content sharing** ([#5043](https://github.com/containerd/containerd/pull/5043))
* **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606))
* **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610))
* **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965))
* **Add OpenTelemetry trace injection to grpc client** ([#5992](https://github.com/containerd/containerd/pull/5992))

#### Client

* **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709))
* **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Phil Estes
* Derek McGowan
* Wei Fu
* Akihiro Suda
* Sebastiaan van Stijn
* Maksym Pavlenko
* Mike Brown
* Claudiu Belu
* Michael Crosby
* Kazuyoshi Kato
* zounengren
* AdamKorcz
* Adelina Tuvenie
* Brian Goff
* Kohei Tokunaga
* haoyun
* Daniel Canter
* Davanum Srinivas
* Shiming Zhang
* Enrico Weigelt, metux IT consult
* Hajime Tazaki
* Samuel Karp
* Alakesh Haloi
* Iceber Gu
* Kevin Parsons
* Gijs Peskens
* Aditi Sharma
* David Porter
* Jacob MacElroy
* wanglei
* Alexandre Peixoto Ferreira
* Cody Roseborough
* Furkan
* Jiaming Xu
* Kir Kolyshkin
* Miao Wang
* Nashwan Azhari
* Neil Johnson
* Paul "TBBle" Hampson
* Priyanka Saggu
* Romain Aviolat
* Sunghoon Kang
* Tõnis Tiigi
* Zhiyu Li
* Alexey Ivanov
* Artem Khramov
* Ben Hutchings
* Cory Bennett
* Da McGrady
* Dan Williams
* Eng Zer Jun
* Ethan Chen
* Fabiano Fidêncio
* Fupan Li
* Gabriel Adrian Samfira
* Gaurav Gahlot
* Gunju Kim
* Jacob Blain Christen
* Jayme Howard
* Jintao Zhang
* Justin Terry
* Kaijie Chen
* Kern Walster
* Kitt Hsu
* Lantao Liu
* Ma Xinjian
* Mikko Ylinen
* Ng Yang
* Nicolas Chariglione
* Olli Janatuinen
* Peri Thompson
* Quan Tian
* Radostin Stoyanov
* Rui Lopes
* Sambhav Kothari
* Samuel Ortiz
* Sebastian Hasler
* Yang Yang
* Yifan Yuan
* Zilong Wang
* Zufar Dhiyaulhaq
* botieking98
* chenxiaoyu
* jayonlau
* jerryzhuang
* kerthcet
* levinxo
* linrunlong
* scuzhanglei
* wangzhan
* Étienne Guesnet

### Changes
<details><summary>743 commits</summary>
<p>

* Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267))
  * [`674b94c42`](https://github.com/containerd/containerd/commit/674b94c42bc0bf43c12cd90f5673e0639de063da) Prepare release notes for v1.6.0-beta.3
  * [`f5863e22f`](https://github.com/containerd/containerd/commit/f5863e22f419f9c59ed11e3919863b6cbabce085) Update API version in go.mod
  * [`5df9ec366`](https://github.com/containerd/containerd/commit/5df9ec366595f8fdd9c0220b8c8a7a3247e1602e) Update release name to use consistent format
* feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254))
  * [`f8d734e40`](https://github.com/containerd/containerd/commit/f8d734e406c3f7cf84b3689486a07f31df8152e8) fix: make max recv/send msg size setting default
  * [`547040cd5`](https://github.com/containerd/containerd/commit/547040cd5b7df652e8af46e5034adbe2130a01f1) feat:support custom callopts on client side
* [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258))
  * [`5f293d9ac`](https://github.com/containerd/containerd/commit/5f293d9ac42a645e50d21ea2e872de9b1e823e64) [CRI] Fix panic when registry.mirrors use localhost
* Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241))
  * [`63895de45`](https://github.com/containerd/containerd/commit/63895de45578272b1c7bca89c2b1265070f113b9) Add support for TMP override on toml
* CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170))
  * [`2a81c9f67`](https://github.com/containerd/containerd/commit/2a81c9f6771eb8c94c7979cc8f2683e2b780d432) CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options
* Merge Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35)
  * [`70c88f507`](https://github.com/containerd/containerd/commit/70c88f507579277ab7af23b06666e3b57d4b4f2d) schema1: reject ambiguous documents
  * [`eb9ba7ed8`](https://github.com/containerd/containerd/commit/eb9ba7ed8d46d48fb22362f9d91fff6fb837e37e) images: validate document type before unmarshal
* [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111))
  * [`91bbaf679`](https://github.com/containerd/containerd/commit/91bbaf67993d2602aa9efee574234160b5768c04) [cri] add sandbox and container latency metrics
* Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255))
  * [`444ef2f6d`](https://github.com/containerd/containerd/commit/444ef2f6d772085d6da9fe7bacecab3a714b334e) Generalize Windows CI setup script for any user.
  * [`3d6bfa3f5`](https://github.com/containerd/containerd/commit/3d6bfa3f5582d03df18b12dd565ea404f15e6099) Standardize cmdlet capitalization in Windows CI scripts.
* feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253))
  * [`bef792b96`](https://github.com/containerd/containerd/commit/bef792b962de720237c9e3be5f083cca717a9d2b) feat: use rwmutex instead
* Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206))
  * [`e17fe37e0`](https://github.com/containerd/containerd/commit/e17fe37e0158ef225930373707e3552c2888a61a) Fix package alias
  * [`6870f3b1b`](https://github.com/containerd/containerd/commit/6870f3b1b8fa0cb90bab11bfac3a57940cdf3648) Support custom runtime path when launching tasks
  * [`d4f4c1380`](https://github.com/containerd/containerd/commit/d4f4c1380a65746a4c51631a7dfa112f5a9b9dbc) Add runtime path in CreateTaskRequest
* Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246))
  * [`db124c560`](https://github.com/containerd/containerd/commit/db124c560ccadaa5ea5ce6e478cc141a764d2589) Close file if permission modification fails
* release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250))
  * [`2f31dcda7`](https://github.com/containerd/containerd/commit/2f31dcda7f579527132e3ae1c9eb19483f2144e7) release: change tar name to match prior releases
* Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237))
  * [`89eebc4c0`](https://github.com/containerd/containerd/commit/89eebc4c0fcbdef9b75440de25ce51b1cece6dc6) Fix wrong error returned for image index lookup
* Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221))
  * [`526defb57`](https://github.com/containerd/containerd/commit/526defb5715f481e501e6e42307b3c469d48d5d2) Fix containerd fails to pull OCI image with non-`http(s)://` urls
* Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223))
  * [`a3b756ce1`](https://github.com/containerd/containerd/commit/a3b756ce18d45a7e3db1e244e741d35d0f885388) Prepare release notes for v1.6.0-beta.2
* Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196))
  * [`be84932e1`](https://github.com/containerd/containerd/commit/be84932e117ed503d28f7fdf15f852f90c0a779d) Rename release dockerfile to omit distro name
  * [`28126fd60`](https://github.com/containerd/containerd/commit/28126fd605a8cf279f6b9e5b89fd0698b3e67b9c) release: improve dockerfile
  * [`27d7c5038`](https://github.com/containerd/containerd/commit/27d7c50384b11d6a3c5982c7e20e89ec360d542a) Add arm64 to releases
* use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236))
  * [`6765524b7`](https://github.com/containerd/containerd/commit/6765524b73beac359ca43520faaf74347d94b6b5) use write lock when updating container stats
* go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230))
  * [`b103bee4c`](https://github.com/containerd/containerd/commit/b103bee4cc1b0aa5e622b3cc54fc984f453afe63) go.mod: Bump hcsshim to v0.9.1
* go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228))
  * [`920b24793`](https://github.com/containerd/containerd/commit/920b24793d8e4c8902891ad9965945390d4d6712) go.mod: Bump ttrpc to 1.1.0
* go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213))
  * [`97073c943`](https://github.com/containerd/containerd/commit/97073c9437b299ce528c21080950491d095d3778) go.mod: github.com/moby/sys/mountinfo v0.5.0
  * [`19d9d0d2a`](https://github.com/containerd/containerd/commit/19d9d0d2a564311311b3e2751f2811a5bb67b6bd) go.mod: github.com/moby/sys/signal v0.6.0
  * [`9c455ded6`](https://github.com/containerd/containerd/commit/9c455ded6115e3f8c20c914322a272f0cf6959d6) go.mod: github.com/moby/sys/symlink v0.2.0
  * [`fa12f4e69`](https://github.com/containerd/containerd/commit/fa12f4e6964528067690045a0838c0e3dc73b13c) go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
* cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222))
  * [`574800633`](https://github.com/containerd/containerd/commit/57480063373747b4206cb7cc4277958d54d5aaa9) cleanup: add more description on comment
* Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211))
  * [`869ccc01c`](https://github.com/containerd/containerd/commit/869ccc01c173ead832ceb07f9084b492b6e5c8a1) Update Go to 1.17.3
* CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214))
  * [`a22346622`](https://github.com/containerd/containerd/commit/a22346622b730e7f291ffd9b7d8a952060953133) CI: bump up crun: 1.0 -> 1.3
* Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205))
  * [`548579d0e`](https://github.com/containerd/containerd/commit/548579d0e2ffa220a7062262c28bd5f4e7567a28) Pin az CLI version
* Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918))
  * [`d022fbe78`](https://github.com/containerd/containerd/commit/d022fbe789b22d7e2773eeb1e01949f356b32efe) Address PR comments
  * [`6fa1bb4a5`](https://github.com/containerd/containerd/commit/6fa1bb4a5c48fbb971084d38ce4dea43995ad3e9) Fix build after rebase
  * [`2cec3a34b`](https://github.com/containerd/containerd/commit/2cec3a34b18a95205c7632f37b4686e982b1aa48) Migrate task directory
  * [`8b788d9df`](https://github.com/containerd/containerd/commit/8b788d9dfee9e330e65949f8e8e6704bbf9049e0) Expose shim process interface
  * [`733519677`](https://github.com/containerd/containerd/commit/733519677f9b266314db5d9c20df821120477769) Fix after rebase
  * [`df8c206a9`](https://github.com/containerd/containerd/commit/df8c206a927986a6953586c556b01f594b951821) Cleanup shim loading
  * [`b554b577b`](https://github.com/containerd/containerd/commit/b554b577b05b1663931fcc3c792d60fb1a157020) Move shim restore to a separate file
  * [`a3d298193`](https://github.com/containerd/containerd/commit/a3d298193c816386b7a939d6cf7259e0afa3001d) Fix backward compatibility with old task shims
  * [`33786ee4d`](https://github.com/containerd/containerd/commit/33786ee4d279864b42e639056e64d18bfcd6da40) Add plugin dependency between shim and shim services
  * [`fb5f6ce3c`](https://github.com/containerd/containerd/commit/fb5f6ce3c9f9fd8b7d18df55b066703fb1ab4ce2) Rework task create and cleanup flow
  * [`7c4ead285`](https://github.com/containerd/containerd/commit/7c4ead285dbab56357c3c5411612b5032661f1f5) Add task manager
  * [`2d5d3541e`](https://github.com/containerd/containerd/commit/2d5d3541e6260718e951f002fe31b4ae6d237199) Rename task manager to shim manager
* [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113))
  * [`2e6d5709e`](https://github.com/containerd/containerd/commit/2e6d5709e32253c3c98956f07c71cb9b6b1d5fd4) Implement CRI container and pods stats
  * [`b69bbe25a`](https://github.com/containerd/containerd/commit/b69bbe25acc10a805b8459bb4e79880ad781727f) Vendor latest k8s.io/cri-api and netlink
* test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200))
  * [`9bfec3980`](https://github.com/containerd/containerd/commit/9bfec3980b66aa05f0e94475af7911736f1275fb) test: Add grace period for restart monitor test
* integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179))
  * [`0ba3532f5`](https://github.com/containerd/containerd/commit/0ba3532f547d901505361d1fddea3bb0de5b0f66) integration: Enables TestRuntimeHandler for Windows
* Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171))
  * [`82cb0a63e`](https://github.com/containerd/containerd/commit/82cb0a63e1494b7e0cfcf4fdd8d19741a233bbcc) Add mkdir on Dockerfile
* sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189))
  * [`6ee8577e5`](https://github.com/containerd/containerd/commit/6ee8577e54fb15730effb7e44340eed2e70ed42f) sys/reaper: avoid leaky goroutine when exec timeout
* adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184))
  * [`ea8978810`](https://github.com/containerd/containerd/commit/ea89788105aeb926d1609b0b98c509322c4d37c4) adds additional debug out to timebox cni setup
* converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176))
  * [`f0d3ea96c`](https://github.com/containerd/containerd/commit/f0d3ea96cf8cc39a185c77d01423efcfd72c876e) converter: Allow hooks during image conversion
* compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177))
  * [`6fa9f22fa`](https://github.com/containerd/containerd/commit/6fa9f22fa3e20493625d3a100b9c1e9279a00503) compression: support zstd with skippable frame
* integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182))
  * [`fb4432c24`](https://github.com/containerd/containerd/commit/fb4432c24a9ec1a3f3db9e8c9d2fd29c48b177e6) integration: Enables TestVolumeCopyUp for Windows
*  integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121))
  * [`830b3c26e`](https://github.com/containerd/containerd/commit/830b3c26ec0fcf7fb2755aece1ed7abece76aa1f) integration: Enable some tests for Windows (part 2)
* integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085))
  * [`602018900`](https://github.com/containerd/containerd/commit/60201890038061d270b9a643144a534456cb150e) integration: Enable some tests for Windows
* Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125))
  * [`ebc5cf19a`](https://github.com/containerd/containerd/commit/ebc5cf19acfb770ef12730d2ed0776b39769aa84) feat(doc): update to version 2 syntax
* fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166))
  * [`3e51312a6`](https://github.com/containerd/containerd/commit/3e51312a61ea9d727d082818e487b76a7739385a) fix shim reaper wait command execute blocked
* content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145))
  * [`010a9e2bc`](https://github.com/containerd/containerd/commit/010a9e2bca7f8ebd587505392abbbd0c1766c17a) content: close stream after commit request
* Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165))
  * [`88fc5cf2d`](https://github.com/containerd/containerd/commit/88fc5cf2d00239d235e4efaee18e2628d97e8e30) Adding scope tests for ParseAuthHeader
  * [`7438edc7e`](https://github.com/containerd/containerd/commit/7438edc7ed976fd38d3b4051acf45874ec611330) Adding tests for GenerateTokenOptions
  * [`9b4a6f129`](https://github.com/containerd/containerd/commit/9b4a6f129517e353de70b824d78c755605eb84f6) Generate token options with each scope as a separate string.
* vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167))
  * [`96018b7db`](https://github.com/containerd/containerd/commit/96018b7db99e8e009e6f78ca3f506f1be23eb2a9) vendor: Updates go-cni
* commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159))
  * [`5b222d54a`](https://github.com/containerd/containerd/commit/5b222d54ad75c6f29a566d8f83e5c47c28584bfe) commands: Enables task metrics for Windows
* vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149))
  * [`b8f3ebb03`](https://github.com/containerd/containerd/commit/b8f3ebb03ba33ffe1ed87d314598f21d077ed698) vendor: update moby/sys for darwin support
* Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144))
  * [`0ccc386c8`](https://github.com/containerd/containerd/commit/0ccc386c86d94314f3c0460be395caadaa69ed49) Prepare release notes for v1.6.0-beta.1
  * [`e5fc3b38e`](https://github.com/containerd/containerd/commit/e5fc3b38ee9f4e1788cac279e56966819f7af920) Update mailmap
  * [`37720fc6f`](https://github.com/containerd/containerd/commit/37720fc6fdae4daf3c79794ad68f0e2c821f617c) Update api vendor
* bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136))
  * [`a217b5ac8`](https://github.com/containerd/containerd/commit/a217b5ac8f66cfdbffd730f16b63f13e313013b8) bump CNI to spec v1.0.0
* Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992))
  * [`294143bf3`](https://github.com/containerd/containerd/commit/294143bf380dbbc706e85387148c02fc2afa496d) Inject otel traces to grpc client.
* client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142))
  * [`cd2f2b0af`](https://github.com/containerd/containerd/commit/cd2f2b0af60f27aff9e7074a1ea523549c2ff47f) client: expose (*image).platform
* Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128))
  * [`3b73922fb`](https://github.com/containerd/containerd/commit/3b73922fba02afef924986309679873996e0654f) feat(doc): add Core Scheduling documentation
* Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130))
  * [`130a9c7dd`](https://github.com/containerd/containerd/commit/130a9c7ddbdd33a95a4b531ff25506d2d1651b20) Ensure namespace is proxied to grpc/ttrpc plugins
* fix #6054  MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109))
  * [`535191abf`](https://github.com/containerd/containerd/commit/535191abf3b3f6a41fe63fc7952f1f72690b2d70) fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
* Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124))
  * [`2a8dac12a`](https://github.com/containerd/containerd/commit/2a8dac12a7629c1c9f1be66c40e6cd5d25d9c70b) Output a warning for label image labels instead of erroring
* Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132))
  * [`c18c2e735`](https://github.com/containerd/containerd/commit/c18c2e73565bbfc7fde6c8462230c4afba33818d) Fix spelling mistake in Windows snapshotter
* Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126))
  * [`ca35f4e82`](https://github.com/containerd/containerd/commit/ca35f4e820b11d329e1824314480b15a2be0d08d) Windows: Cleanup rm- prefixed layers
* cleanup deprecated package  `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118))
  * [`1f1cad391`](https://github.com/containerd/containerd/commit/1f1cad39122548611c82ab3cada8099a0d70a6f6) io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
* close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115))
  * [`46be06937`](https://github.com/containerd/containerd/commit/46be069379bb8b439b05b9e10d01631b097cedb9) close Writer after use which may leak mem
* Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778))
  * [`2bc77b8a2`](https://github.com/containerd/containerd/commit/2bc77b8a2865efe83bc50225223555a919191f54) Adds Windows resource limits support
* Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098))
  * [`1abe50512`](https://github.com/containerd/containerd/commit/1abe5051210ab80d1451fcb19a54efa372d29f4b) Prepare release notes for v1.6.0-beta.0
* Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105))
  * [`c5947557d`](https://github.com/containerd/containerd/commit/c5947557d89e4b1e0a4a89e207f8943af8075f70) Add error message to in TestContainerdRestart integration test
* Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110))
  * [`072a7074b`](https://github.com/containerd/containerd/commit/072a7074b4897aa3b086ce1bae0459eefa13dbd1) Fix typo in the NewContainer function documentation
* Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104))
  * [`18d483b23`](https://github.com/containerd/containerd/commit/18d483b236b2bf999441c2324b70ae52a48a7cb7) Update cgroups to v1.0.2
* btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100))
  * [`ac2df3ba9`](https://github.com/containerd/containerd/commit/ac2df3ba9ad2d26da08395d294abb7c0fa0105e5) test: check file content after mount
* Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107))
  * [`4ed3c524c`](https://github.com/containerd/containerd/commit/4ed3c524cf6d01cf31538b20848675285e6538cd) Update test timeout based on recent cancellations
* Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106))
  * [`d252a293d`](https://github.com/containerd/containerd/commit/d252a293df3d8fc76cb5b141e33d59fc55b94b5a) Remove extra test_teardown
  * [`4a569c889`](https://github.com/containerd/containerd/commit/4a569c8894029c858cbdad2920a85541bc89e35b) Check the pid in cri test teardown
* add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011))
  * [`f1054dbbd`](https://github.com/containerd/containerd/commit/f1054dbbdeb0eac096ba91b7ae892b7104be7c5e) fix integration client vendor
  * [`e48bbe839`](https://github.com/containerd/containerd/commit/e48bbe83949a43dedd3e2727452259f99dd81635) add runc shim support for sched core
* integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579))
  * [`abf4de498`](https://github.com/containerd/containerd/commit/abf4de4985fdf8edf0220a055ff14b9c33c5547c) integration: Enables Windows containerd restart test
* vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099))
  * [`46b152f81`](https://github.com/containerd/containerd/commit/46b152f81be2580e726e478a198b290770225ed7) vendor: Bump hcsshim to 0.9.0
* [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695))
  * [`55893b9be`](https://github.com/containerd/containerd/commit/55893b9be729b7473a717682d6bf99a154c36422) Add CNI conf based on runtime class
* Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102))
  * [`de1a39bf3`](https://github.com/containerd/containerd/commit/de1a39bf32caf2cfb6b8967a3f23cde44ee83992) Update Go to 1.17.2
* integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933))
  * [`7a7a9a282`](https://github.com/containerd/containerd/commit/7a7a9a282c42b6cdfa26f5c515e238d2e782b446) integration: Adds test for multilayer image import
* runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031))
  * [`f7658e37d`](https://github.com/containerd/containerd/commit/f7658e37d94674b8bfaf3206d425f102c5d9b552) runtime: should fail fast if dial error on shim
* Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034))
  * [`791e175c7`](https://github.com/containerd/containerd/commit/791e175c79930a34cfbb2048fbcaa8493fd2c86b) Windows: Fixes Windows containers with image volumes
* run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094))
  * [`3a713811b`](https://github.com/containerd/containerd/commit/3a713811bee3bd813853a0c87763ddf2d804adee) run `gofmt` with Go 1.17
* pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088))
  * [`703b86533`](https://github.com/containerd/containerd/commit/703b86533b3348584124f42e3e39524d3f911121) pkg/cap: remove an outdated comment
* Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066))
  * [`1ee2bff0e`](https://github.com/containerd/containerd/commit/1ee2bff0e02136099cb49c08dab25830e7778535) Update go otel 1.0.1
* Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086))
  * [`c528d2c39`](https://github.com/containerd/containerd/commit/c528d2c39f1c1d6430f7faccc7e6cf8b2938132d) Update ADOPTERS.md with additional uses
* modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082))
  * [`b9a0c5080`](https://github.com/containerd/containerd/commit/b9a0c5080a50e177726c2fdf6eb7cf377d25bfc9) modify the way for checking cos
* Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915))
  * [`65f6a896c`](https://github.com/containerd/containerd/commit/65f6a896c3ec892e4342a117e8dea7250986a098) Fuzzing: Add 4 fuzzers + small modifications
* Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081))
  * [`9734b4039`](https://github.com/containerd/containerd/commit/9734b403939841528f3cee5e057270a49ff153a2) Pin mingw to version 10.2.0
  * [`d19af5afb`](https://github.com/containerd/containerd/commit/d19af5afbfcf91bdd420b0978b48d9f348247739) Update to golang 1.17.1
  * [`3cb0ec01e`](https://github.com/containerd/containerd/commit/3cb0ec01ec86a289aa24ba8979720dc3c91593c3) Install nssm
* Merge Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq)
  * [`7c621e1fc`](https://github.com/containerd/containerd/commit/7c621e1fcc08bcf5a1a48b837342cc22eada1685) btrfs: reduce permissions on plugin directories
  * [`6886c6a2e`](https://github.com/containerd/containerd/commit/6886c6a2ec0c70dde1aa64e77b64a5ad47b983c3) v1 runtime: reduce permissions for bundle dir
  * [`7d56b24f1`](https://github.com/containerd/containerd/commit/7d56b24f1a9af82dfaa10ff55a4e3c36a7efd943) v2 runtime: reduce permissions for bundle dir
* task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079))
  * [`02e77bcdc`](https://github.com/containerd/containerd/commit/02e77bcdc1e48fb4089dab02d6b67955d48df4ad) task service: return known error type
* refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973))
  * [`50da67359`](https://github.com/containerd/containerd/commit/50da6735923837519d7b8ec0ba997ce890b6de29) refactor: move from io/ioutil to io and os package
* fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076))
  * [`049042382`](https://github.com/containerd/containerd/commit/049042382c1ac5e451e9d1ca24c7f622270609d6) fix: update vendor
  * [`5c2426a7b`](https://github.com/containerd/containerd/commit/5c2426a7b23d209a3ba46bce5ab81ec280e5b3ae) cleanup: import from k8s.io/utils/clock/testing instead
  * [`6484fab1e`](https://github.com/containerd/containerd/commit/6484fab1e020c6cb946e5e82ecd5eb24a9b3ffc6) cleanup: import from k8s.io/utils/clock instead
* feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069))
  * [`d16942cf1`](https://github.com/containerd/containerd/commit/d16942cf16391ddcc17ca06e3fba94af743d05b7) feat: enable cri remote client to call with grpc calloptions
* cleanup k8s ansible yaml (carry for #5713)  ([#6074](https://github.com/containerd/containerd/pull/6074))
  * [`f6b7e07fd`](https://github.com/containerd/containerd/commit/f6b7e07fd318bded1da10bc05d691ad1ae42d522) cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>)
* feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070))
  * [`933ddaa6f`](https://github.com/containerd/containerd/commit/933ddaa6f870e10b1164d7a4a442c0e026ba7975) fix: wrong flag type
  * [`da16d492c`](https://github.com/containerd/containerd/commit/da16d492cd07ee7089aa8b000ba48f494f193147) feat: support import image for specific platform
* Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065))
  * [`67b883146`](https://github.com/containerd/containerd/commit/67b88314619dae55465057fe39b43586bf3b6df7) Update mirror images to take target image name
* fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059))
  * [`e6ddffc2a`](https://github.com/containerd/containerd/commit/e6ddffc2af90ce4fad3db6510911bce849b8c578) fix: make exec-id flag required in exec command
* images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052))
  * [`09c9270fe`](https://github.com/containerd/containerd/commit/09c9270feee1d81044e29c47c3609fb0c1e4d7f5) images: enable converter to uncompress zstd
* replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922))
  * [`694a00754`](https://github.com/containerd/containerd/commit/694a007543fafe751cbfab07093ba1b3ae58f1b6) replace deprecated function
* integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853))
  * [`f42513112`](https://github.com/containerd/containerd/commit/f42513112f65b24668a46a1cae9480f06edfdaec) integration: Adds Windows HostProcess tests
* Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047))
  * [`224454062`](https://github.com/containerd/containerd/commit/2244540628f10d68efa5ac2a8dd80cb667c438b7) Fix main branch build is broken
* Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003))
  * [`45c3453a7`](https://github.com/containerd/containerd/commit/45c3453a7cd997fed9d6d4ea998135e532b5428a) Add open telemetry logging hook for logrus
* Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023))
  * [`50a568595`](https://github.com/containerd/containerd/commit/50a56859514011d35b603b13a264aa217e12cab8) Change oci.WithUser behavior for LCOW
* switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946))
  * [`fcffe0c83`](https://github.com/containerd/containerd/commit/fcffe0c83acea4d201425de763782dfef74c7204) switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
* import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926))
  * [`e087b47e9`](https://github.com/containerd/containerd/commit/e087b47e98d4768085d3ee5c9ceb1aaa7038ec72) import: Raise error if the imported image is filtered out
* Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043))
  * [`b9cf0d75a`](https://github.com/containerd/containerd/commit/b9cf0d75a9f4a8a09ab55caa1983a8988ba4834d) Fix panic in metadata content writer on copy error
* Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001))
  * [`084387e0b`](https://github.com/containerd/containerd/commit/084387e0b4d860b264dfddc62d556b6f0ec702a4) Move tracing to plugin
* ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916))
  * [`6b0b64a51`](https://github.com/containerd/containerd/commit/6b0b64a51a5112954355cc2cb1809bd410e53855) ctr: Fixes Windows image import
* update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017))
  * [`483d2e947`](https://github.com/containerd/containerd/commit/483d2e947fbb3b50339509962200f5e5e1965f7b) go.mod: update opentelemetry modules to v1.0.0
* fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979))
  * [`498e5b27f`](https://github.com/containerd/containerd/commit/498e5b27f7928eab29756f674a161737fe36cabf) fix error string format
* Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036))
  * [`407d60694`](https://github.com/containerd/containerd/commit/407d6069412d7fc563ea45ff46dfcc13e71338e5) Add github action to mirror image
* add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027))
  * [`16f3d67b5`](https://github.com/containerd/containerd/commit/16f3d67b5a804b3a32a5df6318531768a654ef8c) add current process state to the error message
*  FreeBSD: fix tar headers & the nil check on getxattr  ([#5991](https://github.com/containerd/containerd/pull/5991))
  * [`2bffb5f9b`](https://github.com/containerd/containerd/commit/2bffb5f9b234bff72739f48f7d027b47a178a9ae) FreeBSD: fix tar headers & the nil check on getxattr
* gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035))
  * [`97df73004`](https://github.com/containerd/containerd/commit/97df73004e4b9d7c632f4889f889fd6b330a9e40) gha: collect Vagrant VMs' IP addresses
* bump continuity and console version  that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033))
  * [`7854e0bff`](https://github.com/containerd/containerd/commit/7854e0bffe7e95fc8002f2150caef96f4d858a48) bump continuity and console version that remove pkg/errors
* import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997))
  * [`6875aa5d3`](https://github.com/containerd/containerd/commit/6875aa5d3737d7ff87220ffd53275ef37d323d0e) import: Add option to skip creating digest image
* ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998))
  * [`16d3f48a2`](https://github.com/containerd/containerd/commit/16d3f48a2e13fa820431d09825e5b8a566b11360) ctr namespaces: improve usage string
* bump console version to v1.0.3 that remove pkg/errors  ([#6028](https://github.com/containerd/containerd/pull/6028))
  * [`a68fb7add`](https://github.com/containerd/containerd/commit/a68fb7addb79c31602fd2cbcad3c29cb1333aa66) bump console version to v1.0.3 that remove pkg/errors
* Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032))
  * [`3e72e335f`](https://github.com/containerd/containerd/commit/3e72e335fe6e03aecdc93e07d0162090319c4156) Use github images for integration tests
* Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995))
  * [`8596d1188`](https://github.com/containerd/containerd/commit/8596d11886b4afe4323b24e645858bc48753f18e) Fix typo
* Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012))
  * [`f40df3d72`](https://github.com/containerd/containerd/commit/f40df3d72ba85700c737aca2cb21212d8f0caaed) Enable image config labels in ctr and CRI container creation
* Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970))
  * [`2fecf5b02`](https://github.com/containerd/containerd/commit/2fecf5b02e95cdf4ee5babd065b2c52d6aadbe18) Make sure exit signals trigger an exit during init
* task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974))
  * [`55faa5e93`](https://github.com/containerd/containerd/commit/55faa5e93d7fdacc7d9b28ee79a0972ec18e3471) task delete: Closes task IO before waiting
* CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985))
  * [`f700ae873`](https://github.com/containerd/containerd/commit/f700ae8732c42cad41cf5628884610b3f95a464d) CI: bump up crun to 1.0
* seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982))
  * [`55923daa9`](https://github.com/containerd/containerd/commit/55923daa9f56c8a890875f1e111201d918b382e2) seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990))
  * [`73dbbf5bf`](https://github.com/containerd/containerd/commit/73dbbf5bfa4ff2c9a2f6c91dc7c4dc29ace5fa4c) Update to Go 1.17.1
* CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987))
  * [`6d961f967`](https://github.com/containerd/containerd/commit/6d961f96736d7b471b3cdc47c76bd8bd58a6e3a9) CI: Switch to available latest images
* add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610))
  * [`91b64c58b`](https://github.com/containerd/containerd/commit/91b64c58b128a8268fdbb3f03b2f238766be55cf) add xfs support to devicemapper snapshotter
* Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956))
  * [`57e10439d`](https://github.com/containerd/containerd/commit/57e10439d9d1d66492ae55e48af713d9a7a4c6f8) Fixes task kill --force on Windows
* Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817))
  * [`8d135d284`](https://github.com/containerd/containerd/commit/8d135d28420a1f8aa7ce8bb2f56103555f380a5f) Add support for shim plugins
* vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976))
  * [`8ff8b1b82`](https://github.com/containerd/containerd/commit/8ff8b1b8236329457345350e6123cf0ef865a30f) vendor: update continuity for darwin support
* replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906))
  * [`2ac996840`](https://github.com/containerd/containerd/commit/2ac996840187b2e42fdbe4e4c9b6b55a7c775c43) replace uses of os/exec with golang.org/x/sys/execabs
* complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972))
  * [`16cd6ed13`](https://github.com/containerd/containerd/commit/16cd6ed137d8f6397def9e63a15ac8761a8c1cda) Additional integration tests for pulling image with labels
* Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966))
  * [`2458afeb1`](https://github.com/containerd/containerd/commit/2458afeb131b8942907b1c62a9b1751387e2ed08) Fix content copy to not ignore unexpected EOF
* add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964))
  * [`1efed4309`](https://github.com/containerd/containerd/commit/1efed43090fcb24eb138acf318b9edef91d22007) add ip_pref CNI options for primary pod ip
* cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939))
  * [`756f4a314`](https://github.com/containerd/containerd/commit/756f4a3147d6fde2f69077ae1805dacde886bf89) cri: add devices for privileged container
* sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954))
  * [`24cec9be5`](https://github.com/containerd/containerd/commit/24cec9be560c44bf7ab3135836ebf9caddbf7c61) sandbox: Allows the sandbox to be deleted in NotReady state
* pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969))
  * [`9954147c0`](https://github.com/containerd/containerd/commit/9954147c0343639c538cc77416022e263090be80) pin protobuild version to tag
* Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965))
  * [`6bec0d39b`](https://github.com/containerd/containerd/commit/6bec0d39b043c8cc9de3df9d7a8b6c8611fe348e) use a const metric for build_info
  * [`ae27a6b05`](https://github.com/containerd/containerd/commit/ae27a6b05ce42bd0c3e794ae46e9a1d9f0cb37f0) Add metric exposing build version&revision
* Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627))
  * [`f8dfbee17`](https://github.com/containerd/containerd/commit/f8dfbee17888240616a57a724fa34bef4357092d) add cri test case
  * [`9a8bf1315`](https://github.com/containerd/containerd/commit/9a8bf13158e469e284757bc9f88796439817423b) feature: add field LinuxContainerResources.Unified on cri
* integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861))
  * [`f7b1ceb9f`](https://github.com/containerd/containerd/commit/f7b1ceb9f666c7a142f139a3306c8163866a280e) integration: investigate TestRestartMonitor's failure
* Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917))
  * [`278176db1`](https://github.com/containerd/containerd/commit/278176db151b3559a73ffa5bcdfe3b025a5abae6) Address issue forms feedback
  * [`11ab3cba0`](https://github.com/containerd/containerd/commit/11ab3cba0e161f66f5d5bfdf680055c9b82533ce) Use issue forms for bug reporting
* cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945))
  * [`2bcd6a4e8`](https://github.com/containerd/containerd/commit/2bcd6a4e8837d14a7b980349281c7508a701e4ab) cri: patch update image labels
* darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936))
  * [`a43fa9f28`](https://github.com/containerd/containerd/commit/a43fa9f284e5f0a4c50f65f80a88a3a91d3e5f75) darwin: runtime support
  * [`5dd38792a`](https://github.com/containerd/containerd/commit/5dd38792a82e1f7bb0579263e8854a8b373371e4) darwin: use the default values for socketRoot variable
* Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858))
  * [`7826a21ac`](https://github.com/containerd/containerd/commit/7826a21ac6319a033fdf7573f2a17d2507a69f2f) Update RELEASES.md
* archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949))
  * [`ccc5ee303`](https://github.com/containerd/containerd/commit/ccc5ee303892023081a880ffc32bbd8ebf56461d) archive: Add WriteDiff error logs
* replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958))
  * [`8e850bc0f`](https://github.com/containerd/containerd/commit/8e850bc0feeba4910bf6e8f079b6c5ca5f34d199) replace deprecated Dail with DailContext
* Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951))
  * [`aeea697d8`](https://github.com/containerd/containerd/commit/aeea697d84f214ab99b542fa5e695b9369e3ca0b) Add WS2022 support in Windows Periodic tests
* Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943))
  * [`96ec0b6f3`](https://github.com/containerd/containerd/commit/96ec0b6f34c05d26de4d9433b45a3493e16fc28e) content fuzzer: Clean up tempdir
* using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944))
  * [`789abc936`](https://github.com/containerd/containerd/commit/789abc9367b27506f6559f60448018134881630f) using Hosts replace deprecated field
* fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947))
  * [`820bd9269`](https://github.com/containerd/containerd/commit/820bd926906f60e19a62b7eb809053fe3e75818c) fix document non-synchronous in crictl.md
* go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929))
  * [`1dd0d59b7`](https://github.com/containerd/containerd/commit/1dd0d59b7386d9f2ae44fdcabcce21f8bf3b4900) go.mod: Update hcsshim to v0.8.21
* Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937))
  * [`eb2530be8`](https://github.com/containerd/containerd/commit/eb2530be8434a63e5358b6aa52cd3b76054bc31a) Makefile.linux: build on riscv with PIE
* Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932))
  * [`27046a9e0`](https://github.com/containerd/containerd/commit/27046a9e06de44ecc4b1662ca43977cc2d6c789e) Fix cwd flag for `ctr tasks exec`
* Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927))
  * [`6d3d34b85`](https://github.com/containerd/containerd/commit/6d3d34b85d5aa4c32e350f36693507d6e0c1c0fc) Update Pause image in tests & config
* cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122))
  * [`e0f8c04da`](https://github.com/containerd/containerd/commit/e0f8c04dad213975bf55dcfa71986be6d8b489e2) cri: Devices ownership from SecurityContext
* Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921))
  * [`7bc5aa74c`](https://github.com/containerd/containerd/commit/7bc5aa74c2cf054b8e5a7982cad073c252fb5f4a) Fix pull fails on unexpected EOF
* Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845))
  * [`838afd211`](https://github.com/containerd/containerd/commit/838afd21161c0c43fbb28f3b71b8ad1e37fe63fd) Adding testing of two devices
  * [`7fba86264`](https://github.com/containerd/containerd/commit/7fba862648b2ee70a351441f0e910274937ea04b) Fix dir support for devices V3 (#4847)
* windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914))
  * [`e2c769d6f`](https://github.com/containerd/containerd/commit/e2c769d6fb17391df70bd658e1573360d4ccbb7b) windows: The DefaultSpec platform should match the Default matcher
* Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865))
  * [`25644b461`](https://github.com/containerd/containerd/commit/25644b4614d607199befa3c83c86540496a6e4f9) Add RunAsUserName functionality for the Windows Pod Sandbox Container
* bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899))
  * [`e18516767`](https://github.com/containerd/containerd/commit/e185167677649b751fd04c18c71ea39f4deda114) go.mod: update runc to v1.0.2
  * [`3f8ea1b6a`](https://github.com/containerd/containerd/commit/3f8ea1b6a1755a7c09addbcdabceb9b2eecc2ff7) update runc binary to v1.0.2
* Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903))
  * [`d3aa7ee9f`](https://github.com/containerd/containerd/commit/d3aa7ee9f065d5d8773b4b38124ad6e3d6634dc2) Run `go fmt` with Go 1.17
* go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905))
  * [`429296910`](https://github.com/containerd/containerd/commit/429296910658a0b4c892fd01c65df7d3f1202b3e) go.mod: github.com/pelletier/go-toml v1.9.3
* cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902))
  * [`c3609ff4c`](https://github.com/containerd/containerd/commit/c3609ff4ca0c1e2c4b713db65a63faefca5786db) cri: filter selinux xattr for image volumes
* Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131))
  * [`79b369a0b`](https://github.com/containerd/containerd/commit/79b369a0bb9d79bf2c397d2bed771fca9144b46e) Added windows hostProcess cni skip
* script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897))
  * [`4dd5ca70f`](https://github.com/containerd/containerd/commit/4dd5ca70fb0948299d52fddc115e999ce8fc143b) script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
* Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889))
  * [`9fe7bc938`](https://github.com/containerd/containerd/commit/9fe7bc938b1264844e3434e501c7c817c1956ea4) Bump integration timeout to 35 min
  * [`f8602c372`](https://github.com/containerd/containerd/commit/f8602c3725c55938c6b4ca3440ef07e6c3f28ba4) Update to Go 1.17
* integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896))
  * [`acb81bbda`](https://github.com/containerd/containerd/commit/acb81bbdaf35524ea020d81607ab62dd8bb718ed) integration: fix TestContainerPids
* [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891))
  * [`6f60b3016`](https://github.com/containerd/containerd/commit/6f60b3016f126d06717cd296b86dce0679b61d2c) [ctr] add HOSTNAME env for host network
* Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886))
  * [`c9b1b2fd5`](https://github.com/containerd/containerd/commit/c9b1b2fd5b6ec9d434a4baf3c091a31bfa039934) Fuzzing: Add fuzzer
* Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884))
  * [`9e1b57ca0`](https://github.com/containerd/containerd/commit/9e1b57ca0161c4081bbc899db32b665d3d38bc94) Add env for SystemdCgroup driver
* Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878))
  * [`1224060f8`](https://github.com/containerd/containerd/commit/1224060f8928ef58c8d480bc7763a09b19427413) Allow expanded DNS configuration
* Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863))
  * [`538d93d2f`](https://github.com/containerd/containerd/commit/538d93d2fcab530f525687a90521d30c00965df8) Fuzzing: Add 4 fuzzers
* Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813))
  * [`d30d897ef`](https://github.com/containerd/containerd/commit/d30d897ef93e7838f0c0828e0e85619b93331131) Cleanup v2 shim
* Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840))
  * [`5e49ec27d`](https://github.com/containerd/containerd/commit/5e49ec27dc4ff4f619453578a624d8cc35b21630) Use http.Get to download binaries instead of exec.Command
  * [`11a90c7ff`](https://github.com/containerd/containerd/commit/11a90c7ff4b59ba4a0d639c74fe8eb0fa0761f85) Fuzzing: Add experimental version of container fuzzer
* add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846))
  * [`d2f3b7146`](https://github.com/containerd/containerd/commit/d2f3b71468f385e535e6db31b430bfeeb973dead) add cpu-shares to ctr
* docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847))
  * [`bc4cea4e4`](https://github.com/containerd/containerd/commit/bc4cea4e44d5d219a5f6bba0654e6918ccd2a2bb) docs: rename main to master
* content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849))
  * [`a3d6edc0e`](https://github.com/containerd/containerd/commit/a3d6edc0eddeb380dceed84884a78b5dc621023b) content: return the error with its timestamp
* Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857))
  * [`82fe0db9a`](https://github.com/containerd/containerd/commit/82fe0db9aa83d94c04761ee9907befb5d1e61597) Fix bad `make protos` failure
* replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851))
  * [`30b832e49`](https://github.com/containerd/containerd/commit/30b832e494ebaa244d2321299dc0d3072eae4044) archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
* docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856))
  * [`1c47fb17f`](https://github.com/containerd/containerd/commit/1c47fb17f3b0c3da9ff45960487f93fc03ba1bf4) docs: remove FOSSA's badge
* BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850))
  * [`9cc179aa7`](https://github.com/containerd/containerd/commit/9cc179aa773b3aa09de03934c8850a770d7aa71b) BUILDING.md: remove some bits about building runc
  * [`42b57cc73`](https://github.com/containerd/containerd/commit/42b57cc730e6283b5f64563e90a7201d47d9a354) BUILDING.md: markdown fixes
* go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836))
  * [`e634f04d8`](https://github.com/containerd/containerd/commit/e634f04d8cdb6c2f96eea2e4e66d0e4500a46282) go.mod: update kubernetes to v1.22.0
* [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852))
  * [`e6538b8bc`](https://github.com/containerd/containerd/commit/e6538b8bce1814471af2cd3467d5f4c6e863cb08) Add trap to cri-integration test script
* docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848))
  * [`a5468852f`](https://github.com/containerd/containerd/commit/a5468852f8123ada3757db9b608cd6648285d835) docs: list all snapshotter-related build flags
* Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835))
  * [`0a0621bb4`](https://github.com/containerd/containerd/commit/0a0621bb47d48d8cbcbb614ee38422ce8b98a340) Move plugin context events into separate plugin
* Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839))
  * [`534685f95`](https://github.com/containerd/containerd/commit/534685f9558cc67125156ba2fbdd0e0ade74cc33) Fix Linux CI Linter using go 1.15.14
* Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842))
  * [`42a28ad2c`](https://github.com/containerd/containerd/commit/42a28ad2ca7faecfa3e2024952781136211c1fbf) Update Go to 1.16.7
* Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838))
  * [`10eab21a4`](https://github.com/containerd/containerd/commit/10eab21a4d4f47b2eb63a83e3675d151277a430a) Cleanup CI
* Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834))
  * [`6f027e38a`](https://github.com/containerd/containerd/commit/6f027e38a8e705a05ccc7031afb39b53a358b958) Remove redundant build tags
* Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830))
  * [`7917da764`](https://github.com/containerd/containerd/commit/7917da764c6d6b0851f3adf1ef2346d62c88a1d0) Change default directories on Darwin
* [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731))
  * [`3c5424454`](https://github.com/containerd/containerd/commit/3c5424454b60e775829c2e9b56be53a6af42fa90) [otel-tracing] vendor and go modules changes
  * [`3597ac859`](https://github.com/containerd/containerd/commit/3597ac859d3fc79f250e5d0f1664fb9db9143898) [otel-tracing] Initial opentelemetry support
  * [`10824eaf2`](https://github.com/containerd/containerd/commit/10824eaf2ea46e3be7e4ac29a9ae6de11ec21093) remove go 1.13 from containerd
* Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829))
  * [`c3c276ae1`](https://github.com/containerd/containerd/commit/c3c276ae1c3c322b192539980ce4973f452fd0a2) Fuzzing: Fix for OSS-fuzz issue 36825
* Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825))
  * [`41a04246f`](https://github.com/containerd/containerd/commit/41a04246f414f43080c9f0c9944516bd5855b209) Fuzzing: Add two more fuzzers
* scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760))
  * [`6c257552a`](https://github.com/containerd/containerd/commit/6c257552a72a49f75114c01401d3703f880ac054) scripts: declare ROOT closer to where it's used, and some DRY changes
  * [`dba0ef4eb`](https://github.com/containerd/containerd/commit/dba0ef4eb58e87cd3c6ab5a0e93f39ff1703b6eb) scripts: add missing quotes, and minor linting issues
  * [`0cb656860`](https://github.com/containerd/containerd/commit/0cb656860fabd4ad4d4ac93b4b0e2d88270fd231) test/build-utils.sh: remove support for Debian Jessie
* platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821))
  * [`f2c3122e9`](https://github.com/containerd/containerd/commit/f2c3122e9c6470c052318497899b290a5afc74a5) platforms: Format(): use path.Join() instead of joinNotEmpty()
* Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823))
  * [`2c699cc35`](https://github.com/containerd/containerd/commit/2c699cc35095476ddae077a459cbcf8962b51050) Fuzzing: Remove panics of container_fuzzer
* Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785))
  * [`acecd6603`](https://github.com/containerd/containerd/commit/acecd660311216c91d13435d561a854eb5e4c580) Change protoc link
  * [`cc88f8e0a`](https://github.com/containerd/containerd/commit/cc88f8e0ae82d08ccf821f9f1de4c180afb8e6ca) Split fuzzer to two fuzzers
  * [`6294235d8`](https://github.com/containerd/containerd/commit/6294235d8137424862def12cf3cf6267b3597dfc) Fuzzing: Add container fuzzer
* runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746))
  * [`4ab3e7a53`](https://github.com/containerd/containerd/commit/4ab3e7a53a15cf0bc311179994f339760365dd97) runtime: fix the issue of create new socket with abstract address
* mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809))
  * [`ce437864b`](https://github.com/containerd/containerd/commit/ce437864b2e7e2f9b94e02ba564e010a5ea2248d) mergo: Upgrade to 0.3.12 to fix panic
* ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802))
  * [`d1e868c83`](https://github.com/containerd/containerd/commit/d1e868c832d42f443dbd55118b2eff9aa92b021a) ci: install criu from PPA
* Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144))
  * [`d62d6c11d`](https://github.com/containerd/containerd/commit/d62d6c11dc381f9a4b3301329a20ccf3babcc604) Split release steps into multiple tasks
  * [`b4807122d`](https://github.com/containerd/containerd/commit/b4807122d29370c79272f8d982e9c408736a4932) Update release workflow to upload binary without CNI
* Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725))
  * [`23bc3db91`](https://github.com/containerd/containerd/commit/23bc3db914c30b133e5fa037fc2a3242f7329fc7) Enable critest on Windows
* Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792))
  * [`43117cf91`](https://github.com/containerd/containerd/commit/43117cf9193ab81fc3c178c0bef1d4ca49259c94) Script to check if entries in go.mod files are in sync
* Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043))
  * [`e692a0192`](https://github.com/containerd/containerd/commit/e692a01926cd296f3b77ee7f6ba1308b5ecd6aca) Add shared content label to namespaces
* platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784))
  * [`2405671d4`](https://github.com/containerd/containerd/commit/2405671d4089626f224473936e793fee19905d90) platforms: add "ios" as known OS, "loong64" as known ARCH
* Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804))
  * [`3a8622e30`](https://github.com/containerd/containerd/commit/3a8622e309d9f75e0c12fd43a31d95127ff341be) Updates the location of protobuf downloads in docs
* Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803))
  * [`0d9393650`](https://github.com/containerd/containerd/commit/0d939365079d91e82549c808fde1ba70cf0cdea3) Update protobuf install to use correct repository
* overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624))
  * [`67406b373`](https://github.com/containerd/containerd/commit/67406b3732b3139ea2f825541e5c84d46ffd5e04) overlay: add an optional label of upperdir location of each snapshot
* Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693))
  * [`1d3d08026`](https://github.com/containerd/containerd/commit/1d3d08026d25797b81ec1d385119dffa04a2ad46) Support SIGRTMIN+n signals
* respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800))
  * [`7a10fd4fc`](https://github.com/containerd/containerd/commit/7a10fd4fccb93a04b80352fea71fc1095d742b7f) respect context timeout in shim binary call
* Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716))
  * [`494b940f1`](https://github.com/containerd/containerd/commit/494b940f1475cb393d8f6ec8474eaeb50d022231) Introduce a new go module - containerd/api for use in standalone clients
* grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606))
  * [`63fe34add`](https://github.com/containerd/containerd/commit/63fe34add6997ba54d9bb0c6b2d7066efa2453c1) grpc config add options tcp_tls_ca
* integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162))
  * [`16deba098`](https://github.com/containerd/containerd/commit/16deba098c90a99e7948f16ffd4a49a5bbe9526d) integration: Windows volume-copy-up images
* add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795))
  * [`4fdb88464`](https://github.com/containerd/containerd/commit/4fdb884644ecdd6a4b4b0d1bd85b8f6ccc1995c6) add CRI support matrix to RELEASES.md
* adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794))
  * [`b5fc7846c`](https://github.com/containerd/containerd/commit/b5fc7846c465c10d9dfd4f0c150571c78e1a12b2) adding a little more clarity
* update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793))
  * [`18d6cc1b0`](https://github.com/containerd/containerd/commit/18d6cc1b06ad1ff8fb7def3a667f8bfe68e83e70) update gotestsum to v1.7.0
* Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756))
  * [`f1d79d33b`](https://github.com/containerd/containerd/commit/f1d79d33b8479ddfa741e61b83dffda259fa16aa) Discard blocks when removing a thin device
* Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590))
  * [`2bb8ad7c9`](https://github.com/containerd/containerd/commit/2bb8ad7c9ea4f626527a33dce51b89d3278194a2) Makefile: pass build tags to manpage build process
  * [`f60d447c1`](https://github.com/containerd/containerd/commit/f60d447c16991a183853cce58d21d88351cb0f16) Makefile: fix tags parameter computation
* Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744))
  * [`efa8ab715`](https://github.com/containerd/containerd/commit/efa8ab7158ea806e5ef2c9460187ec75eabab06e) Add runtime label to metrics
* interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745))
  * [`0d45ac14e`](https://github.com/containerd/containerd/commit/0d45ac14e92a9b63f7e31dab5a9325b26e8a3e12) interface about shim build check
* integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775))
  * [`00d52bb15`](https://github.com/containerd/containerd/commit/00d52bb159e091d1dee79e7b4c809662fe8f4e4d) integration: log all processes to investigate the test failure
* Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779))
  * [`2556aac67`](https://github.com/containerd/containerd/commit/2556aac6751829f7f219c4ddc3f5d4630c1dda07) Fuzzing: Add archive fuzzer
* Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687))
  * [`0789a0c02`](https://github.com/containerd/containerd/commit/0789a0c02b78d70cc06c9c8f86d9a128f2b9d46c) Add docker fetch fuzzer
* Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735))
  * [`b483177ee`](https://github.com/containerd/containerd/commit/b483177ee2089fd8284258840e2526370c15eab3) Support custom compressor for walking differ
* remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770))
  * [`53ec1abec`](https://github.com/containerd/containerd/commit/53ec1abec228e5121d5de4acaab08ed26ad70b9c) remotes/docker/pusher.go: Fix missing Close()
* remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769))
  * [`67d07fe5c`](https://github.com/containerd/containerd/commit/67d07fe5cf4f165396872499b3d36ee5cba6774d) remotes/docker/fetcher.go: Fix missing Close()
* Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771))
  * [`d2b6d192d`](https://github.com/containerd/containerd/commit/d2b6d192db18655e0930bd3c8051947873ed39b1) Update cpuguy83/go-md2man binary to v2.0.1
* Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750))
  * [`9537bc265`](https://github.com/containerd/containerd/commit/9537bc2654869bbc6fc4b740a674acfbcec9ab00) Dockerfile.test: build containerd in separate stage
  * [`36be5ef3a`](https://github.com/containerd/containerd/commit/36be5ef3a26d5db8f487514e06179a17d7771b49) Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
  * [`8faacfca1`](https://github.com/containerd/containerd/commit/8faacfca1647e6b8d2d37e35f11d0cf9bd5d42f6) Dockerfile.test: clean up apt indexes after installing
  * [`9f7e6335c`](https://github.com/containerd/containerd/commit/9f7e6335c46f9a46cfe2f0955759842b095addc4) Dockerfile.test: build critools in a separate stage
  * [`7ec8e2d36`](https://github.com/containerd/containerd/commit/7ec8e2d369606e870875f52a116ca2bf32e7317d) Dockerfile.test: build cni in a separate stage
  * [`f9f423c07`](https://github.com/containerd/containerd/commit/f9f423c078f3b106fe1a87fd60c86eb2d606e2bf) Dockerfile.test: standard directory to collect build aftifacts
  * [`e9f26eb87`](https://github.com/containerd/containerd/commit/e9f26eb877faf37dd0b6f33fe1292970b6183fd1) Dockerfile.test: split dev stage, and optimize order
  * [`25fada0cc`](https://github.com/containerd/containerd/commit/25fada0cc7082d3f6c2e54e58e1794234a605daf) Dockerfile.test: skip curl, gcc, git and make install
  * [`546538971`](https://github.com/containerd/containerd/commit/546538971cbde5c9fd95da32d0d77daba63c72ad) install-critools: make sure DESTDIR exists
* update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754))
  * [`603962bc8`](https://github.com/containerd/containerd/commit/603962bc81deb197350ee5144dad862d062eb964) update gotestsum to current master
* Merge Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w)
  * [`bc4e416c8`](https://github.com/containerd/containerd/commit/bc4e416c88670e4409917a18bc3da50e48b401de) Add test for archive breakout test for lchmod
* Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755))
  * [`150e07b64`](https://github.com/containerd/containerd/commit/150e07b648e7766ca862ee868bf99544d0836e89) Use systemd cgroup driver for cgroupv2 tests
* update runc  to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751))
  * [`a12c7bd1c`](https://github.com/containerd/containerd/commit/a12c7bd1cf18b719416932bbdcbb6e6219b1f1d4) go.mod: runc v1.0.1
  * [`43e0594ae`](https://github.com/containerd/containerd/commit/43e0594ae93be1b4629da91d25c4a830c91924a2) update runc binary to v1.0.1
* runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737))
  * [`dbef1d56d`](https://github.com/containerd/containerd/commit/dbef1d56d7ebc05bc4553d72c419ed5ce025b05d) runtime: runc v2: remove redundant validation
* Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727))
  * [`18321f539`](https://github.com/containerd/containerd/commit/18321f539ce5f78e5db034ce0af73076ea4f11b0) Move loop check to before sleep
  * [`2e8a572df`](https://github.com/containerd/containerd/commit/2e8a572dfd6cc170ed60a45d7d1180d56958eb12) Add timestamp to flaky restart monitor test
* Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722))
  * [`55fd2ab5d`](https://github.com/containerd/containerd/commit/55fd2ab5d6efe01fd12e3ff58bece7ea358b18d3) integration/client: go mod tidy
  * [`e72046f86`](https://github.com/containerd/containerd/commit/e72046f86bc54dfda54fdd9b17955ecae4232cca) Update Go to 1.16.6
* client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447))
  * [`73d28ddeb`](https://github.com/containerd/containerd/commit/73d28ddeb27a5532df084035199c9ad5ed2f69fe) client: surface a connection error more clearly
* Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712))
  * [`894b6ae39`](https://github.com/containerd/containerd/commit/894b6ae39b9266411d0d4e6325235390c06fc0ab) Fix missing Body.Close() calls on push to docker remote
* remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710))
  * [`ac75071b4`](https://github.com/containerd/containerd/commit/ac75071b49cbc69dc4eb7734316e5129b01562e4) remove pkg/cri/platforms package
* Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709))
  * [`0a8802df6`](https://github.com/containerd/containerd/commit/0a8802df67c3e2770ba787c9a0f6bcd41de6b34d) Allow WithServices to use custom implementations
* [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673))
  * [`a81f05f36`](https://github.com/containerd/containerd/commit/a81f05f3602a2b1eee9bff12ce9b985d16aadb60) [Vendor] Update hcsshim to 0.8.18
* test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578))
  * [`04ab4418f`](https://github.com/containerd/containerd/commit/04ab4418fdac4f85cc3b510bc297e06550175c90) test integration: Adds a test that restarts a failed container
* [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619))
  * [`d1c105192`](https://github.com/containerd/containerd/commit/d1c10519278560bbdf220dc72843e344d1a05743) use fu wei's suggeted interface pick for marshaling
  * [`14962dcbd`](https://github.com/containerd/containerd/commit/14962dcbd23790681431838f1efc8b7fe7012157) add alpha version
  * [`a5c417ac0`](https://github.com/containerd/containerd/commit/a5c417ac060f29dad343573674f879d59fc0b9ef) move up to CRI v1 and support v1alpha in parallel
* gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682))
  * [`4c6e4a06f`](https://github.com/containerd/containerd/commit/4c6e4a06ff8f7ef1ab28c67a97fe6bd0f79d73a8) gha: make release workflow work in forks
* Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666))
  * [`3a0b9ec6b`](https://github.com/containerd/containerd/commit/3a0b9ec6bbabeab2f2cb962f62a52d875365793a) Add unit test for plugin
* Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700))
  * [`aefabe546`](https://github.com/containerd/containerd/commit/aefabe5462a0080fa3e7817d33db6dd9a8e95d2d) Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
* Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676))
  * [`a7ad6b3be`](https://github.com/containerd/containerd/commit/a7ad6b3be5bfad7ab77b2801e52663a2eb43e270) Add support for registry host path override
  * [`95c708572`](https://github.com/containerd/containerd/commit/95c708572f2d65b85ebbb3648f34fd531c7b6f36) Update documenation for OCI distribution 1.0
* archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702))
  * [`53835221f`](https://github.com/containerd/containerd/commit/53835221f6b8fc496dbd2332fd48cd58a79f6f2b) Cleanup lchmod logic in archive
* Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571))
  * [`419d616fe`](https://github.com/containerd/containerd/commit/419d616fec5f24ee61a0a113a899e78a6e49a850) Install specific golang version in Windows CI.
* Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660))
  * [`bda7b5866`](https://github.com/containerd/containerd/commit/bda7b58666b9b8e01342a36317cffe9fdf1f7aa3) feat: Add snapshotter label to the new snapshot for container.
* snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655))
  * [`03ee45006`](https://github.com/containerd/containerd/commit/03ee450060dff5440fc02e8c88752c8314a8714f) snapshot/devmapper: log exported methods correctly
* Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662))
  * [`2019a1e68`](https://github.com/containerd/containerd/commit/2019a1e68f7488bdc0975062cbbd933b53595714) Makefile: fix DESTDIR and PREFIX concatenation
* Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287))
  * [`cabe67736`](https://github.com/containerd/containerd/commit/cabe67736941fa4fa1a6fc54b0045891ecc28733) tests: Use EnsureImageExists for image pulling
  * [`a78bdf22d`](https://github.com/containerd/containerd/commit/a78bdf22df22b0904e843e579f3088472cb52685) tests: Refactors PodSandbox creation
* move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641))
  * [`a964cf0cc`](https://github.com/containerd/containerd/commit/a964cf0cc4beabfd5cc50e970581d79f195ca4c0) un-export mount.FMountat
  * [`21f532d51`](https://github.com/containerd/containerd/commit/21f532d51891087f850ef3a7ed7e737c8c95b88a) move sys.FMountat() into mount package
* sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640))
  * [`dac2543a0`](https://github.com/containerd/containerd/commit/dac2543a07b788f908cde037a133902bebf605d2) sandbox: send pod UID to CNI plugins as K8S_POD_UID
* sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639))
  * [`5a0beaefb`](https://github.com/containerd/containerd/commit/5a0beaefbb64190696f8e634d037bc9047e6f4ac) sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
* content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633))
  * [`63c185da9`](https://github.com/containerd/containerd/commit/63c185da9ad38fabb842aee2fbdefae2f4e5b946) content/local: inline sys.StatATimeAsTime()
* allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636))
  * [`09d78bb6b`](https://github.com/containerd/containerd/commit/09d78bb6b9e8b173f44f5ba3abaee0de416b0ee0) allow multi gpu to be specified via ctr
  * [`f913a4275`](https://github.com/containerd/containerd/commit/f913a42755663e4e7f855dcfe37bad64887a9058) go.mod: runc v1.0.0
  * [`28bb59c08`](https://github.com/containerd/containerd/commit/28bb59c080ce671c8e89829844f95c871eb41393) update runc binary to v1.0.0 GA
* fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629))
  * [`560e7d479`](https://github.com/containerd/containerd/commit/560e7d479923dd7b1b0249375abf202054bf7ed4) fixing some doc links
* Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623))
  * [`d9694b297`](https://github.com/containerd/containerd/commit/d9694b2976a5181121f54690867a53c29dde6552) Sync integration/go.mod with root go.mod
* archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615))
  * [`4a46ea2f4`](https://github.com/containerd/containerd/commit/4a46ea2f4b55a2e4e694ecc6f93389421053dc6a) archive: Expose ChangeWriter to allow customized diff computing
* CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625))
  * [`cd33c007c`](https://github.com/containerd/containerd/commit/cd33c007cecdee2c8e5333190cad1bbce4ade13d) CI: Switch to available latest images
  * [`75b4c83f0`](https://github.com/containerd/containerd/commit/75b4c83f04d5f4fb148b5f498584af8854581083) fix deprecation config for default runtime
* Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614))
  * [`394f86475`](https://github.com/containerd/containerd/commit/394f864750ed0ffea980d713b179a53e070a9d78) Re-enable criu in main integration runs
* runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617))
  * [`87a2e0b2a`](https://github.com/containerd/containerd/commit/87a2e0b2a2d58c19e26d96ebcefc982505316081) runtime,v2: Enable debug when containerd is on debug+ log level
  * [`1bbee573a`](https://github.com/containerd/containerd/commit/1bbee573af72ee63ec67483a836f6e5cdcf9850d) github.com/golang/protobuf/proto is deprecated
  * [`91c8fa452`](https://github.com/containerd/containerd/commit/91c8fa4529f335c34dffc56e15c54054e97ac69e) Update github.com/golang/protobuf from v1.3.5 to v1.4.3
  * [`b7e79dc5a`](https://github.com/containerd/containerd/commit/b7e79dc5ab1084d2db3562c77896489674d9486f) Update google.golang.org/grpc from v1.27.1 to v1.38.0
  * [`8d2e156dd`](https://github.com/containerd/containerd/commit/8d2e156ddbd63e58d18048fd9960c586178fdc58) Increase golangci-lint timeout
* ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611))
  * [`05e51539a`](https://github.com/containerd/containerd/commit/05e51539a95f739c8963ab5184b8bda540e34e36) command line flags of setting container rootfs propagation
  * [`1dada3fc2`](https://github.com/containerd/containerd/commit/1dada3fc2a76ea1298f924bf404928c0f37796c4) add cgroupv2 setup for cos with a flag
* Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612))
  * [`bfbebf02b`](https://github.com/containerd/containerd/commit/bfbebf02b7c413c7afc9c253fb2199803c9e7c69) Update gotestsum to add timestamps to junit output
* Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604))
  * [`9c01fe20d`](https://github.com/containerd/containerd/commit/9c01fe20d31d3120c8bd2e0e68c411a3ebeabc64) Allow to pass --no-cgroup option to nvidia-container-cli
* Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577))
  * [`77374e8b3`](https://github.com/containerd/containerd/commit/77374e8b35900cc4cffd719282d29b43b729b58e) Makefile: FHS conformant manpage installation pathes
* Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594))
  * [`3ab974433`](https://github.com/containerd/containerd/commit/3ab97443360775ff3fb13a7be2efedb875805824) Add proper Go version before project checks
* Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580))
  * [`af5a130bc`](https://github.com/containerd/containerd/commit/af5a130bc94b91729114a502bf52f729f76638e4) Enable cri-integration in Windows Periodic Tests
* adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573))
  * [`7a2b04758`](https://github.com/containerd/containerd/commit/7a2b04758bfb52c17e1780dc432cff586b714839) adds explanation for seccomp unset/unconfined default vs runtime default
* Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569))
  * [`728743eb2`](https://github.com/containerd/containerd/commit/728743eb2858764df05fbb012cb03eb7c6cb0423) Fix cleanup context of teardownPodNetwork
* update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572))
  * [`01585595a`](https://github.com/containerd/containerd/commit/01585595a5934773aec184fc893b3db03e02628d) update integration/client go.sum
* Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566))
  * [`69f43d458`](https://github.com/containerd/containerd/commit/69f43d4589c50a8e64afac7cd5dda99433112ab8) Revert diff/walking error change
* Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562))
  * [`9a451d103`](https://github.com/containerd/containerd/commit/9a451d103c9b2d4791e22e5acdb7098c37bbec55) Update opencontainers/selinux to v1.8.2
* fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565))
  * [`014748bc0`](https://github.com/containerd/containerd/commit/014748bc04623346725d2a1330d7a2292563a4df) fix invalid validation error checking
* diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551))
  * [`558fdc680`](https://github.com/containerd/containerd/commit/558fdc6808dc2c15645e8bccf500a93df78432b6) diff/walking: fix defer cleanup
* Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559))
  * [`5f0fc4893`](https://github.com/containerd/containerd/commit/5f0fc4893da618651a67f44b80f6b47392d1d727) Add creation timestamp to RG
* Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328))
  * [`f8538b5e1`](https://github.com/containerd/containerd/commit/f8538b5e12b0977904bb810e3eae234a8ab1e48c) Fix error case in Windows layer cleanup
* Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422))
  * [`402acd7c1`](https://github.com/containerd/containerd/commit/402acd7c1e20aa6ea88ce6cd6f77e486c5e88478) Small typo fix "reimporst"
  * [`f21627059`](https://github.com/containerd/containerd/commit/f2162705950a1b220fbbb8c396738d7155928212) Use DeactivateLayer to recover layers that we cannot rename
* tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284))
  * [`93e268f62`](https://github.com/containerd/containerd/commit/93e268f6258e37200f15fe9240dd46b9988624e9) tests: Symlink volume tests
* Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535))
  * [`b5f530a15`](https://github.com/containerd/containerd/commit/b5f530a15780ee443b8c568200d37d50d0449672) Makefile: fix DESTDIR environment variable behaviour
* Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560))
  * [`edfd8d599`](https://github.com/containerd/containerd/commit/edfd8d59937faeb36f40b8baeff488a6d693ef49) Change Wrapf of non-error to an actual error
  * [`a93b5cbc2`](https://github.com/containerd/containerd/commit/a93b5cbc2f1f6e4e4b0b5fc3eb0843e24762f1f5) Install apparmor parser for arm64 environment
* scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536))
  * [`498bb36f6`](https://github.com/containerd/containerd/commit/498bb36f67689c2b6f0a6142472ba1f20ab87bf8) scrub the stale TODO
* docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554))
  * [`75daf45be`](https://github.com/containerd/containerd/commit/75daf45bebd198bca613ee96ddc0adc3afcd3861) docs: explicitly mention containerd's Prometheus path
* integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553))
  * [`2f870aa89`](https://github.com/containerd/containerd/commit/2f870aa896dff06dc4cae9875a4f53831169d14c) integration: Cleanup containerd on test teardown
* docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548))
  * [`93d4541a2`](https://github.com/containerd/containerd/commit/93d4541a20d19bb1562cacb855e8fba310045ab6) docs/cri: update ocicrypt link
  * [`792466495`](https://github.com/containerd/containerd/commit/7924664951197caf3c0f808ff329801ea2467104) docs/cri: fix broken links
* Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544))
  * [`05c03de94`](https://github.com/containerd/containerd/commit/05c03de94d28cdfc5f27057952d1308af2e66041) Update Windows periodic tests
* Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165))
  * [`77285e311`](https://github.com/containerd/containerd/commit/77285e311c6798df988b227ba9d56e85e29abc76) Schedule Windows job daily after midnight.
  * [`2b58782df`](https://github.com/containerd/containerd/commit/2b58782df0411226603d5d1dbdd52b10b3885bc5) Update windows-periodic.yml
  * [`421fc6ea7`](https://github.com/containerd/containerd/commit/421fc6ea73fef2f7946d762b800b349edd5fcb12) Add CI periodic Windows Jobs.
* Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273))
  * [`9fcea1d3f`](https://github.com/containerd/containerd/commit/9fcea1d3f03c7c6c5df0fc70a4ddb9a2b2dfa36b) Rename atomicWrite to writeToCompletion
* Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539))
  * [`b996e49c5`](https://github.com/containerd/containerd/commit/b996e49c5cb13788824f667b38886dd21a4a6db4) Do not run btrfs tests if btrfs kernel module is not loaded
* Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533))
  * [`50ad4b96c`](https://github.com/containerd/containerd/commit/50ad4b96c4acfde425e1fc6e7411b52658d7af92) Fix incorrect UA used for registry authentication
* ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531))
  * [`535d9cc59`](https://github.com/containerd/containerd/commit/535d9cc59fe75abebcbcfea60a8ff0f5f795beb1) ctr: parse mount options with embedded = character
* Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472))
  * [`a4f97d45d`](https://github.com/containerd/containerd/commit/a4f97d45da2886eea52b7ea179da8f66e2176975) Add ruleset=4 option
  * [`1442fee22`](https://github.com/containerd/containerd/commit/1442fee229bb6d536fa29d2a3aefccf5786d036a) Remove mountpoints not commonly mounted on FreeBSD
  * [`de04b3243`](https://github.com/containerd/containerd/commit/de04b32430cc1b26a70641bbeef5a85e194a5c75) Add copyright header & make sure compilation succeeds on all platforms
  * [`e1fd6be7e`](https://github.com/containerd/containerd/commit/e1fd6be7e8aa5f0a74cb8153ef1ef19d317f8224) Fix mounts for FreeBSD
* ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527))
  * [`5dec27b6f`](https://github.com/containerd/containerd/commit/5dec27b6f1f6921ae288a3094b796929b59fc539) ctr: exec handle pty resize after Start
  * [`b9378b452`](https://github.com/containerd/containerd/commit/b9378b45296218ba7f23384cf426384bb2102e0f) ctr: exec setup IO with console
* Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534))
  * [`923ab5b7c`](https://github.com/containerd/containerd/commit/923ab5b7ca0b3d07b117f4725d687c76e123d49a) Makefile: use $@ for target file names
* Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528))
  * [`e1c845df5`](https://github.com/containerd/containerd/commit/e1c845df506e5b7e2bd39f443db2a13862ddf825) Fix small typo
* Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519))
  * [`79e345221`](https://github.com/containerd/containerd/commit/79e3452213a595a87d6880538c7d2b0f6b067aab) update the link
  * [`1acca8bba`](https://github.com/containerd/containerd/commit/1acca8bba36e99684ee3489ea4a42609194ca6b9) Don't check for apparmor_parser to be present
* Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520))
  * [`869375a41`](https://github.com/containerd/containerd/commit/869375a413c8541d8776ee93a36753faa97427d7) Remove useless lines
* Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509))
  * [`a5b1740bb`](https://github.com/containerd/containerd/commit/a5b1740bbe3aa90848836268ebed82947ccf3fb4) fixed typos
* Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275))
  * [`c0e2f4b5d`](https://github.com/containerd/containerd/commit/c0e2f4b5d2c28b22da552156dae5239935b6a343) Try next mirror in case of non-404 errors, too
* bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514))
  * [`ec28288f4`](https://github.com/containerd/containerd/commit/ec28288f45ea0ff4567eee776ed3b8c289bf7f9c) bump runc version to v1.0.0-rc95
* update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511))
  * [`599127f4d`](https://github.com/containerd/containerd/commit/599127f4df767d60e256e24cea2a84f83d0c2a00) update runc binary to v1.0.0-rc95
* Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508))
  * [`5dbae87c5`](https://github.com/containerd/containerd/commit/5dbae87c59f6c0d53489b6b824fabf8d5fbe9117) Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0
* Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507))
  * [`1093f05ab`](https://github.com/containerd/containerd/commit/1093f05ab202f0ab6551379d19e81ac32c6dd076) Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
* Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493))
  * [`9643c9965`](https://github.com/containerd/containerd/commit/9643c99658758885d540050d1ff0ad0aaef1b4ea) Makefile: allow overriding install command via environment
* tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163))
  * [`09a0c9471`](https://github.com/containerd/containerd/commit/09a0c9471bf687ebcc7d8f8594606d127b3a803e) tests: Adds support for Windows cri-integration tests
* Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504))
  * [`b1d4140a2`](https://github.com/containerd/containerd/commit/b1d4140a220eb429eeb2059cd33fad6cd3bc7c80) Update docker resolver to authorize redirects
* bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505))
  * [`b6a251749`](https://github.com/containerd/containerd/commit/b6a2517491da040a1e821cc25a240de8308af948) bump hcsshim version to v0.8.17
* Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498))
  * [`315739251`](https://github.com/containerd/containerd/commit/315739251396c79718baad47191a2bc83dda586f) just release ctd-decoder not ctr-enc
  * [`b9c403e79`](https://github.com/containerd/containerd/commit/b9c403e79a578efd4350197e16860923fd7d209f) Merge remote-tracking branch 'upstream/master'
  * [`fc4da9728`](https://github.com/containerd/containerd/commit/fc4da9728e6231560411292ca9a2f6a591f64e57) Pin integration test image for alpine
* cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313))
  * [`273c2bb16`](https://github.com/containerd/containerd/commit/273c2bb168d1733ebcbe7418ca1232237f3dc603) tests: Prepull images used in tests
* plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440))
  * [`98f5922b5`](https://github.com/containerd/containerd/commit/98f5922b5e27f5e1d4e398091c6f2c24eea203dd) plugin: optimize the check for the last registration
* metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465))
  * [`e37ddafab`](https://github.com/containerd/containerd/commit/e37ddafab457596bc55151cd5bb34a77919c85ac) metadata: modify NewLeaseManager to return leases.Manager
* Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100))
  * [`8014d9fee`](https://github.com/containerd/containerd/commit/8014d9fee0e2a758d34af977f1ea6a1b6932a098) Skip TLS verification for localhost
  * [`74c7d66df`](https://github.com/containerd/containerd/commit/74c7d66dfb514ed5f130d53f3dbfbb8918d258eb) Merge remote-tracking branch 'upstream/master'
* Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492))
  * [`4b1b8346b`](https://github.com/containerd/containerd/commit/4b1b8346be2e8851650823a5e53b53658309f651) Makefile: make sure manpages are built before install-man
* adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309))
  * [`6e249b1ae`](https://github.com/containerd/containerd/commit/6e249b1aea69f30969ab3452dc19e78300dc3c06) adds credentials description
  * [`b59e29773`](https://github.com/containerd/containerd/commit/b59e29773c31bd173e3e23058fd960c3027da1eb) adds description for hosts.toml
* Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459))
  * [`0ba7303ee`](https://github.com/containerd/containerd/commit/0ba7303ee8c34f8f85c4679832f3b00dc36353ea) Prepare default branch rename
  * [`d02413330`](https://github.com/containerd/containerd/commit/d024133308a2d27ae0a1005afb29273d1a1715a1) Merge remote-tracking branch 'upstream/master'
* Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473))
  * [`de6db4038`](https://github.com/containerd/containerd/commit/de6db4038c937d4de0081283705303acf48f9834) Update vendored runc to v1.0.0.0-rc94
  * [`5c99f150a`](https://github.com/containerd/containerd/commit/5c99f150aec0b7b24535494ae9209a555e1344ea) Update the runc binary used with containerd to runc v1.0.0-rc94
* Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468))
  * [`b890f056e`](https://github.com/containerd/containerd/commit/b890f056e87d3823beeedf1339cd53469d4819b9) Fix content.ReaderAt close
* Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466))
  * [`c5797c8fc`](https://github.com/containerd/containerd/commit/c5797c8fcba00fd87527cc4b03a8785255424295) Update releases doc with updated support timeline
* tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452))
  * [`7d70992d3`](https://github.com/containerd/containerd/commit/7d70992d33df40049c517cbef8356b7e2bb5bd42) tests: add test for adaptor
* Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450))
  * [`9ea25634b`](https://github.com/containerd/containerd/commit/9ea25634bddccbcd4c45a7e552a147ff7f50aaab) Makefile: allow overriding go command by environment
* update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462))
  * [`c74a6c419`](https://github.com/containerd/containerd/commit/c74a6c4194b6e5e8b7887308c466ab1b19654a32) update to new cri-tools make install
* Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461))
  * [`79d800b9b`](https://github.com/containerd/containerd/commit/79d800b9b0148ae209d164420f723311e93dbb4e) Update Go to 1.16.4
  * [`d559b00fe`](https://github.com/containerd/containerd/commit/d559b00fe69817448cb2788dcecd297f51ed01a4) Merge remote-tracking branch 'upstream/release/1.5'
* [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457))
  * [`b35aa7250`](https://github.com/containerd/containerd/commit/b35aa7250a2a3f226b3fa09ccc950944a70ca33c) go.mod: cut circular dependency on github.com/containerd/containerd
  * [`b68405639`](https://github.com/containerd/containerd/commit/b684056399651a8219e9c60a6c39bacfc88ae741) integration/client: go mod tidy
* oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063))
  * [`b592a4c1e`](https://github.com/containerd/containerd/commit/b592a4c1ec51d36d21d1dea5f07a03013c6acaa7) oci: fix WithDevShmSize
* [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454))
  * [`e120261ee`](https://github.com/containerd/containerd/commit/e120261ee30cee924221a7536dfd1d516f449f88) windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411))
  * [`b0d3b35b2`](https://github.com/containerd/containerd/commit/b0d3b35b28f8df673740fbbd3bac3a36551589bf) windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448))
  * [`0b786908c`](https://github.com/containerd/containerd/commit/0b786908c0a37eae087aff204d54b6f9b97fa2f1) doc: add missing namespaces package
* update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445))
  * [`b56527cb7`](https://github.com/containerd/containerd/commit/b56527cb7ed1146a0cc5fb24140dfccdd8d7cf57) update seccomp version
* Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436))
  * [`b538d8f1a`](https://github.com/containerd/containerd/commit/b538d8f1a1f1e3cc13a9a49a2dd12a20644ee9c3) Update golang.org/x/sys to add linux/ppc support
* go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441))
  * [`e26fc8472`](https://github.com/containerd/containerd/commit/e26fc84729e4063c4ccac3271fc7eff7fb803b86) go.mod: cut circular dependency on github.com/containerd/containerd
  * [`15e0bd513`](https://github.com/containerd/containerd/commit/15e0bd513e84e0638d90f63f4bb7a828b9558f4c) integration/client: go mod tidy
* Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446))
  * [`81402e475`](https://github.com/containerd/containerd/commit/81402e47583bfce47f4924968c7164a7d2392ba3) Fix different registry hosts referencing the same auth config.
</p>
</details>

### Changes from containerd/cgroups
<details><summary>24 commits</summary>
<p>

* cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203))
  * [`80a7821`](https://github.com/containerd/cgroups/commit/80a7821536fc82757f390f8d65693074bd3ef8e4) cgroup: Optionally add process and task to a subsystems subset
* replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208))
  * [`0072297`](https://github.com/containerd/cgroups/commit/0072297e4547d623094fc68b0df41eef364d1747) replace pkg/errors from vendor
* cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207))
  * [`d55de5d`](https://github.com/containerd/cgroups/commit/d55de5d2af9a3616eb758e393a2170a1421155c1) cgroup.go: avoid panic on nil interface
* Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204))
  * [`73a8516`](https://github.com/containerd/cgroups/commit/73a8516e7f0f45fe9931d02cc57ff6059202f553) cgroupv2: reset lastErr to nil when subtree control is successfully written
  * [`2ca92c5`](https://github.com/containerd/cgroups/commit/2ca92c515038c7a30c1998dbe29a87873b98a3b3) cgroupv2: enable controllers before setting resources in NewChild()
* v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201))
  * [`db173a8`](https://github.com/containerd/cgroups/commit/db173a86bea843700360e7061c6f8d3869d13363) v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
  * [`b19a60d`](https://github.com/containerd/cgroups/commit/b19a60d64d89b858b3c2bee4a04fb7f70642ffce) v2: remove errors that are never returned
* v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202))
  * [`4fe70f3`](https://github.com/containerd/cgroups/commit/4fe70f3edc256fc2345d5f8f8a54e2f4e96f271e) v1: reduce duplicated code
* cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200))
  * [`6659093`](https://github.com/containerd/cgroups/commit/66590933215fb7b0c9f9ffd39e9946ab510d7679) cgroup v1: implement AddProc()
* Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199))
  * [`7254c12`](https://github.com/containerd/cgroups/commit/7254c1242cee46d1c37bf3da2151eed571879b5c) Rename branch from master to main
* utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197))
  * [`23b5120`](https://github.com/containerd/cgroups/commit/23b51209bf7bd11941d5613119309b11029e8373) utils: export ParseCgroupFile()
* go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194))
  * [`f8918cf`](https://github.com/containerd/cgroups/commit/f8918cf2d923b7003970ce99bb29545f2f34b531) go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
* Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195))
  * [`1a4509d`](https://github.com/containerd/cgroups/commit/1a4509dd06454dc765aed7f62cb26531416ffce3) Use /proc/partitions to get device names
</p>
</details>

### Changes from containerd/console
<details><summary>6 commits</summary>
<p>

* Fix CI ([#55](https://github.com/containerd/console/pull/55))
  * [`e700792`](https://github.com/containerd/console/commit/e7007923e8658f863a85c34aa029c394918fed19) Fix CI
  * [`05dadd9`](https://github.com/containerd/console/commit/05dadd92d21fc51f0bf56eadcb4201955cfc98d8) Stop using pkg/errors
* Add support for z/OS ([#46](https://github.com/containerd/console/pull/46))
  * [`7097449`](https://github.com/containerd/console/commit/70974496a6a52dc828ed9eeaaf451485a7598d53) Console test on z/OS
  * [`c4672c3`](https://github.com/containerd/console/commit/c4672c3a84f944113a124e5c1d401ff7ce932675) Add support for z/OS
</p>
</details>

### Changes from containerd/continuity
<details><summary>16 commits</summary>
<p>

* Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185))
  * [`849cf06`](https://github.com/containerd/continuity/commit/849cf06982a4a69ccb3c1cfa81f2aca763ad9877) run gofmt with Go 1.17
  * [`7b4650c`](https://github.com/containerd/continuity/commit/7b4650cc28941dc385d93521d532e6abbd923ed6) remove direct dependency on github.com/pkg/errors
* Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186))
  * [`16556d0`](https://github.com/containerd/continuity/commit/16556d050e667b37fa349d76de4bca0d8a225a33) update AUTHORS
  * [`b80f086`](https://github.com/containerd/continuity/commit/b80f08663090d91b0316074edca48bdd4fdbe0fa) darwin: use utimensat syscall instead of utimes
  * [`c666a35`](https://github.com/containerd/continuity/commit/c666a3535003db8bc2b1a8e6e40a693b3643aa3e) fix darwin usage of du command
* go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161))
  * [`c7d2029`](https://github.com/containerd/continuity/commit/c7d202952681f94836fad4d45d7b829f32fb9e9c) go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
* fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184))
  * [`fa7d162`](https://github.com/containerd/continuity/commit/fa7d1622372f1a787bfe51d59183b598813ce9d9) reformat nolint comments
  * [`a780d6d`](https://github.com/containerd/continuity/commit/a780d6dfbb58807abd3118add4e567017a0931f9) fs/stat: add FreeBSD
* Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182))
  * [`0175d70`](https://github.com/containerd/continuity/commit/0175d7070de291971f80576e74cd3ca2c5ab611c) Rename branch from master to main
* testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180))
  * [`e10d519`](https://github.com/containerd/continuity/commit/e10d519aaa7d4883e622e170239be4189336871d) testutil/loopback: print more debug info
</p>
</details>

### Changes from containerd/go-cni
<details><summary>15 commits</summary>
<p>

* remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74))
  * [`eff9f5b`](https://github.com/containerd/go-cni/commit/eff9f5bf31bf2228e257e6a9bf7d259e7c4626b9) remove: Continue on "not found" errors
* go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72))
  * [`9cfa666`](https://github.com/containerd/go-cni/commit/9cfa666e12c79b68bdc474d3808edf557b6af36c) go.mod: github.com/containernetworking/cni v1.0.1
* remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71))
  * [`b6c559f`](https://github.com/containerd/go-cni/commit/b6c559f04b1d93c5eed8cf9dfaf5025d75d4c348) remove direct dependency on github.com/pkg/errors
* update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70))
  * [`786c2bc`](https://github.com/containerd/go-cni/commit/786c2bcd455ebdf69321c7d613052a1d49bf0165) test: add TestLibCNIType100
  * [`e3fccc2`](https://github.com/containerd/go-cni/commit/e3fccc24058924b8bfa5e4d265defca6964a251f) update CNI to v1.0.0
* Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69))
  * [`591b0b6`](https://github.com/containerd/go-cni/commit/591b0b69153fc04bb2f27c9e7d8af70f184e17d3) Rename branch from master to main
* result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68))
  * [`6c993c3`](https://github.com/containerd/go-cni/commit/6c993c3feefaf407e41f65ac0a66b6817fa00c81) result: change Raw from a struct field to a method
* result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67))
  * [`bc7198b`](https://github.com/containerd/go-cni/commit/bc7198b2c67b9a4ee960b3097822379908560b0c) result: expose raw result
</p>
</details>

### Changes from containerd/ttrpc
<details><summary>34 commits</summary>
<p>

* Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96))
  * [`6eabacc`](https://github.com/containerd/ttrpc/commit/6eabacc9bc8e71d09834cce051ec9115ba36b1e1) Add protoc-gen-go-ttrpc
* client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94))
  * [`4f0aeb5`](https://github.com/containerd/ttrpc/commit/4f0aeb590b0add2bb19d199e7db4a487afde4581) client: Handle sending/receiving in separate goroutines
* Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95))
  * [`e621cd1`](https://github.com/containerd/ttrpc/commit/e621cd13e4495f2d3673ef9409ab69d1054b5c10) Run Protobuild in GitHub Actions
  * [`35cd240`](https://github.com/containerd/ttrpc/commit/35cd24038aee70ed64d7814c06eb4c7c805cddde) Re-generate example.pb.go
* replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93))
  * [`81faa3e`](https://github.com/containerd/ttrpc/commit/81faa3ee80c4384ec3ee9022efc2a9fc8c46361a) replace pkg/errors from vendor
* Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86))
  * [`a143311`](https://github.com/containerd/ttrpc/commit/a1433112ec1ce559f5a81564937ba583702b48c8) Rename branch from master to main
* Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85))
  * [`2368990`](https://github.com/containerd/ttrpc/commit/236899069c6f7d7bd857b9deac1197143ec99862) Make the example command buildable on macOS
  * [`616d54c`](https://github.com/containerd/ttrpc/commit/616d54c531e0a32f0efeee3b6770daef5ed4a13f) Run GitHub Actions on macOS
  * [`a4b18e0`](https://github.com/containerd/ttrpc/commit/a4b18e0db831b76114a7a8b166697ed4788838da) Make "go test" work on macOS
* Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83))
  * [`fede9db`](https://github.com/containerd/ttrpc/commit/fede9db17c4440a840e9e7e3f4ed49d76743dc33) Return Unimplemented when services or methods are not implemented
* Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84))
  * [`dcc7d39`](https://github.com/containerd/ttrpc/commit/dcc7d39848621e8b22b1ef74095d94908559db98) Remove "Very new" and checked TODO items
* removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82))
  * [`2776d3f`](https://github.com/containerd/ttrpc/commit/2776d3f8573226f4947bf982ecf4e28c1e121825) removing glide from ignore
* go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79))
  * [`849845f`](https://github.com/containerd/ttrpc/commit/849845f63b953af9caddd3186954bffebf722d8e) go.mod: github.com/prometheus/procfs v0.6.0
  * [`3ea5780`](https://github.com/containerd/ttrpc/commit/3ea578089caa347c6a4a539d041f437f719e5ecc) go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63
  * [`4640e27`](https://github.com/containerd/ttrpc/commit/4640e2792cb2f461ff719f82ce5609ba2bbc2e62) go.mod: google.golang.org/grpc v1.27.1
  * [`7c78be3`](https://github.com/containerd/ttrpc/commit/7c78be300bb630a5d8dafbbd8837d05034da6ee9) go.mod: github.com/gogo/protobuf v1.3.2
* remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78))
  * [`88f2525`](https://github.com/containerd/ttrpc/commit/88f25256c07a1b20caf0b36d2417c335f2a8a2d7) CI: add codecov badge to readme
  * [`6773702`](https://github.com/containerd/ttrpc/commit/6773702961f0c431811490d03076f2b5f4d8971c) CI: remove travis
* Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77))
  * [`5bab91b`](https://github.com/containerd/ttrpc/commit/5bab91b0d034bdabcc34b69b0927fecb948ec7c6) Use GitHub Actions for CI
* go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76))
  * [`a2f306d`](https://github.com/containerd/ttrpc/commit/a2f306d78905538a59862cf5a097fbf1ca26d026) go.mod: sirupsen/logrus v1.7.0
  * [`f0fad07`](https://github.com/containerd/ttrpc/commit/f0fad07cf1dc560a74e62ead1c9faac48a1a9662) go mod tidy
</p>
</details>

### Dependency Changes

* **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 **_new_**
* **github.com/Microsoft/go-winio**                                                v0.4.17 -> v0.5.0
* **github.com/Microsoft/hcsshim**                                                 v0.8.16 -> v0.9.1
* **github.com/bits-and-blooms/bitset**                                            v1.2.0 **_new_**
* **github.com/blang/semver**                                                      v3.5.1 **_new_**
* **github.com/cenkalti/backoff/v4**                                               v4.1.1 **_new_**
* **github.com/cilium/ebpf**                                                       v0.4.0 -> v0.6.2
* **github.com/containerd/cgroups**                                                v1.0.1 -> v1.0.2
* **github.com/containerd/console**                                                v1.0.2 -> v1.0.3
* **github.com/containerd/continuity**                                             v0.1.0 -> v0.2.0
* **github.com/containerd/go-cni**                                                 v1.0.2 -> aa8bf14323a5
* **github.com/containerd/ttrpc**                                                  v1.0.2 -> v1.1.0
* **github.com/containernetworking/cni**                                           v0.8.1 -> v1.0.1
* **github.com/containernetworking/plugins**                                       v0.9.1 -> v1.0.1
* **github.com/go-logr/logr**                                                      v0.2.0 -> v0.4.0
* **github.com/golang/groupcache**                                                 8c9f03a8e57e -> 41bb18bfe9da
* **github.com/golang/protobuf**                                                   v1.3.5 -> v1.5.2
* **github.com/google/go-cmp**                                                     v0.5.4 -> v0.5.6
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 **_new_**
* **github.com/grpc-ecosystem/grpc-gateway**                                       v1.16.0 **_new_**
* **github.com/imdario/mergo**                                                     v0.3.11 -> v0.3.12
* **github.com/json-iterator/go**                                                  v1.1.10 -> v1.1.11
* **github.com/moby/spdystream**                                                   v0.2.0 **_new_**
* **github.com/moby/sys/signal**                                                   v0.6.0 **_new_**
* **github.com/opencontainers/image-spec**                                         v1.0.1 -> 5ad6f50d6283
* **github.com/opencontainers/runc**                                               v1.0.0-rc93 -> v1.0.2
* **github.com/opencontainers/runtime-spec**                                       e6143ca7d51d -> 1c3f411f0417
* **github.com/opencontainers/selinux**                                            v1.8.0 -> v1.8.2
* **github.com/pelletier/go-toml**                                                 v1.8.1 -> v1.9.3
* **github.com/prometheus/client_golang**                                          v1.7.1 -> v1.11.0
* **github.com/prometheus/common**                                                 v0.10.0 -> v0.26.0
* **github.com/satori/go.uuid**                                                    v1.2.0 **_new_**
* **github.com/sirupsen/logrus**                                                   v1.7.0 -> v1.8.1
* **github.com/spf13/pflag**                                                       v1.0.5 **_new_**
* **github.com/stretchr/testify**                                                  v1.6.1 -> v1.7.0
* **github.com/vishvananda/netlink**                                               f5de75959ad5 **_new_**
* **github.com/vishvananda/netns**                                                 2eb08e3e575f **_new_**
* **go.etcd.io/bbolt**                                                             v1.3.5 -> v1.3.6
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.24.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.0.1 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.0.1 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.0.1 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.0.1 **_new_**
* **go.opentelemetry.io/otel/trace**                                               v1.0.1 **_new_**
* **go.opentelemetry.io/proto/otlp**                                               v0.9.0 **_new_**
* **golang.org/x/net**                                                             e18ecbb05110 -> e898025ed96a
* **golang.org/x/sync**                                                            09787c993a3a -> 036812b2e83c
* **golang.org/x/sys**                                                             47abb6519492 -> 69cdffdb9359
* **golang.org/x/term**                                                            7de9c90e9dd1 -> 6a3ed077a48d
* **golang.org/x/text**                                                            v0.3.4 -> v0.3.6
* **golang.org/x/time**                                                            3af7569d3a1e -> 1f47c861a9ac
* **google.golang.org/appengine**                                                  v1.6.5 -> v1.6.6
* **google.golang.org/grpc**                                                       v1.27.1 -> v1.41.0
* **google.golang.org/protobuf**                                                   v1.27.1 **_new_**
* **gopkg.in/yaml.v3**                                                             9f266ea9e77c -> 496545a6307b
* **k8s.io/api**                                                                   v0.20.6 -> v0.22.0
* **k8s.io/apimachinery**                                                          v0.20.6 -> v0.22.0
* **k8s.io/apiserver**                                                             v0.20.6 -> v0.22.0
* **k8s.io/client-go**                                                             v0.20.6 -> v0.22.0
* **k8s.io/component-base**                                                        v0.20.6 -> v0.22.0
* **k8s.io/cri-api**                                                               v0.20.6 -> v0.23.0-alpha.4
* **k8s.io/utils**                                                                 67b214c5f920 -> cb0fa318a74b

Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)

containerd 1.5.8

Welcome to the v1.5.8 release of containerd!

The eighth patch release for containerd 1.5 contains a mitigation for [CVE-2021-41190](https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m)
as well as several fixes and updates.

### Notable Updates
* **Handle ambiguous OCI manifest parsing** ([GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35))
* **Filter selinux xattr for image volumes in CRI plugin** ([#5104](https://github.com/containerd/containerd/pull/5104))
* **Use DeactiveLayer to unlock layers that cannot be renamed in Windows snapshotter** ([#5422](https://github.com/containerd/containerd/pull/5422))
* **Fix pull failure on unexpected EOF** ([#5921](https://github.com/containerd/containerd/pull/5921))
* **Close task IO before waiting on delete** ([#5974](https://github.com/containerd/containerd/pull/5974))
* **Log a warning for ignored invalid image labels rather than erroring** ([#6124](https://github.com/containerd/containerd/pull/6124))
* **Update pull to handle of non-https urls in descriptors** ([#6221](https://github.com/containerd/containerd/pull/6221))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Phil Estes
* Sebastiaan van Stijn
* Derek McGowan
* Kazuyoshi Kato
* Wei Fu
* Akihiro Suda
* Daniel Canter
* Kevin Parsons
* Kohei Tokunaga
* Samuel Karp
* Claudiu Belu
* Jacob Blain Christen
* Maksym Pavlenko
* Mike Brown
* Paul "TBBle" Hampson
* Sambhav Kothari
* zounengren

### Changes
<details><summary>29 commits</summary>
<p>

* [release/1.5] Prepare release notes for v1.5.8 ([#6260](https://github.com/containerd/containerd/pull/6260))
  * [`2385fd14d`](https://github.com/containerd/containerd/commit/2385fd14d6991dc01b6a9d8dc5b996e855ddf7a7) Prepare release notes for v1.5.8
* [release/1.5] mailmap: Add Kevin Parsons ([#6261](https://github.com/containerd/containerd/pull/6261))
  * [`ef071b07b`](https://github.com/containerd/containerd/commit/ef071b07bc9198a7df334fd2882930680a52fdde) mailmap: Add Kevin Parsons
* Merge Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35)
  * [`15d8c03e3`](https://github.com/containerd/containerd/commit/15d8c03e3260953cc560223b42426e8b67dde93c) schema1: reject ambiguous documents
  * [`833407fbf`](https://github.com/containerd/containerd/commit/833407fbff446771e26d6a381897f2c7ae24677e) images: validate document type before unmarshal
* [release/1.5] Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6238](https://github.com/containerd/containerd/pull/6238))
  * [`01428ec40`](https://github.com/containerd/containerd/commit/01428ec4095d23727d227e5602690a2ad356d02f) Fix containerd fails to pull OCI image with non-`http(s)://` urls
* [release/1.5] go.mod: Bump hcsshim to v0.8.23 ([#6231](https://github.com/containerd/containerd/pull/6231))
  * [`2bd3f18d9`](https://github.com/containerd/containerd/commit/2bd3f18d9fcb239356d553ad689f54a508bdbb0d) [release/1.5] go.mod: Bump hcsshim to v0.8.23
* [release/1.5] go.mod: Bump ttrpc to 1.1.0 ([#6229](https://github.com/containerd/containerd/pull/6229))
  * [`047ea15d2`](https://github.com/containerd/containerd/commit/047ea15d2cf9a80d8d1dc37f9cf786a8bf443ec2) [release/1.5] go.mod: Bump ttrpc to 1.1.0
* [release/1.5] update Go to 1.16.10 ([#6210](https://github.com/containerd/containerd/pull/6210))
  * [`7b20299bc`](https://github.com/containerd/containerd/commit/7b20299bcda9a3f4d9d047618e7d23dacb4a05fc) [release/1.5] update Go to 1.16.10
  * [`641976bea`](https://github.com/containerd/containerd/commit/641976bea903f6d685319955f28fe2c9e6cce566) [release/1.5] update Go to 1.16.9
* [release/1.5] Output a warning for label image labels instead of erroring ([#6187](https://github.com/containerd/containerd/pull/6187))
  * [`b988fc918`](https://github.com/containerd/containerd/commit/b988fc918ad314570dd3772233a570f6a5271c34) Output a warning for label image labels instead of erroring
* [release/1.5] task delete: Closes task IO before waiting ([#6129](https://github.com/containerd/containerd/pull/6129))
  * [`bf02a8330`](https://github.com/containerd/containerd/commit/bf02a8330f059991ada4d43704eb70c613d9f633) task delete: Closes task IO before waiting
* [release/1.5] Update test timeout based on recent cancellations ([#6134](https://github.com/containerd/containerd/pull/6134))
  * [`3109820f5`](https://github.com/containerd/containerd/commit/3109820f5006116e6e06b9b9a7b1ca4e25a72a3e) Update test timeout based on recent cancellations
* [release/1.5] Use deactivatelayer to recover layers that we cannot rename  ([#6133](https://github.com/containerd/containerd/pull/6133))
  * [`16762f3e5`](https://github.com/containerd/containerd/commit/16762f3e5c26688dd7482b9b880f1b46e4185661) Fix spelling mistake in Windows snapshotter
  * [`6094bc770`](https://github.com/containerd/containerd/commit/6094bc77050820c5433c2281d9f3e2a0883eb580) Use DeactivateLayer to recover layers that we cannot rename
* [release/1.5] Fix pull fails on unexpected EOF ([#6117](https://github.com/containerd/containerd/pull/6117))
  * [`aa7c9d9da`](https://github.com/containerd/containerd/commit/aa7c9d9daf5876311c4a77bb445c51225ba19956) Fix pull fails on unexpected EOF
* [release/1.5 backport] cri: filter selinux xattr for image volumes ([#5104](https://github.com/containerd/containerd/pull/5104))
  * [`c0534c168`](https://github.com/containerd/containerd/commit/c0534c168dc7013c4805f0d4f056920a8dcf6e1b) [release/1.5 backport] cri: filter selinux xattr for image volumes
</p>
</details>

### Changes from containerd/ttrpc
<details><summary>34 commits</summary>
<p>

* Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96))
  * [`6eabacc`](https://github.com/containerd/ttrpc/commit/6eabacc9bc8e71d09834cce051ec9115ba36b1e1) Add protoc-gen-go-ttrpc
* client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94))
  * [`4f0aeb5`](https://github.com/containerd/ttrpc/commit/4f0aeb590b0add2bb19d199e7db4a487afde4581) client: Handle sending/receiving in separate goroutines
* Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95))
  * [`e621cd1`](https://github.com/containerd/ttrpc/commit/e621cd13e4495f2d3673ef9409ab69d1054b5c10) Run Protobuild in GitHub Actions
  * [`35cd240`](https://github.com/containerd/ttrpc/commit/35cd24038aee70ed64d7814c06eb4c7c805cddde) Re-generate example.pb.go
* replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93))
  * [`81faa3e`](https://github.com/containerd/ttrpc/commit/81faa3ee80c4384ec3ee9022efc2a9fc8c46361a) replace pkg/errors from vendor
* Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86))
  * [`a143311`](https://github.com/containerd/ttrpc/commit/a1433112ec1ce559f5a81564937ba583702b48c8) Rename branch from master to main
* Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85))
  * [`2368990`](https://github.com/containerd/ttrpc/commit/236899069c6f7d7bd857b9deac1197143ec99862) Make the example command buildable on macOS
  * [`616d54c`](https://github.com/containerd/ttrpc/commit/616d54c531e0a32f0efeee3b6770daef5ed4a13f) Run GitHub Actions on macOS
  * [`a4b18e0`](https://github.com/containerd/ttrpc/commit/a4b18e0db831b76114a7a8b166697ed4788838da) Make "go test" work on macOS
* Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83))
  * [`fede9db`](https://github.com/containerd/ttrpc/commit/fede9db17c4440a840e9e7e3f4ed49d76743dc33) Return Unimplemented when services or methods are not implemented
* Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84))
  * [`dcc7d39`](https://github.com/containerd/ttrpc/commit/dcc7d39848621e8b22b1ef74095d94908559db98) Remove "Very new" and checked TODO items
* removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82))
  * [`2776d3f`](https://github.com/containerd/ttrpc/commit/2776d3f8573226f4947bf982ecf4e28c1e121825) removing glide from ignore
* go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79))
  * [`849845f`](https://github.com/containerd/ttrpc/commit/849845f63b953af9caddd3186954bffebf722d8e) go.mod: github.com/prometheus/procfs v0.6.0
  * [`3ea5780`](https://github.com/containerd/ttrpc/commit/3ea578089caa347c6a4a539d041f437f719e5ecc) go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63
  * [`4640e27`](https://github.com/containerd/ttrpc/commit/4640e2792cb2f461ff719f82ce5609ba2bbc2e62) go.mod: google.golang.org/grpc v1.27.1
  * [`7c78be3`](https://github.com/containerd/ttrpc/commit/7c78be300bb630a5d8dafbbd8837d05034da6ee9) go.mod: github.com/gogo/protobuf v1.3.2
* remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78))
  * [`88f2525`](https://github.com/containerd/ttrpc/commit/88f25256c07a1b20caf0b36d2417c335f2a8a2d7) CI: add codecov badge to readme
  * [`6773702`](https://github.com/containerd/ttrpc/commit/6773702961f0c431811490d03076f2b5f4d8971c) CI: remove travis
* Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77))
  * [`5bab91b`](https://github.com/containerd/ttrpc/commit/5bab91b0d034bdabcc34b69b0927fecb948ec7c6) Use GitHub Actions for CI
* go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76))
  * [`a2f306d`](https://github.com/containerd/ttrpc/commit/a2f306d78905538a59862cf5a097fbf1ca26d026) go.mod: sirupsen/logrus v1.7.0
  * [`f0fad07`](https://github.com/containerd/ttrpc/commit/f0fad07cf1dc560a74e62ead1c9faac48a1a9662) go mod tidy
</p>
</details>

### Dependency Changes

* **github.com/Microsoft/hcsshim**  v0.8.21 -> v0.8.23
* **github.com/containerd/ttrpc**   v1.0.2 -> v1.1.0

Previous release can be found at [v1.5.7](https://github.com/containerd/containerd/releases/tag/v1.5.7)

containerd 1.4.12

Welcome to the v1.4.12 release of containerd!

The twelfth patch release for containerd 1.4 contains a few minor bug fixes
and an update to mitigate [CVE-2021-41190](https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m).

### Notable Updates

* **Handle ambiguous OCI manifest parsing** ([GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35))
* **Update pull to try next mirror for non-404 errors** ([#5275](https://github.com/containerd/containerd/pull/5275))
* **Update pull to handle of non-https urls in descriptors** ([#6221](https://github.com/containerd/containerd/pull/6221))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Maksym Pavlenko
* Samuel Karp
* Sebastiaan van Stijn
* Kohei Tokunaga
* Phil Estes
* Sebastian Hasler

### Changes
<details><summary>13 commits</summary>
<p>

* [release/1.4] Prepare release notes for v1.4.12 ([#6259](https://github.com/containerd/containerd/pull/6259))
  * [`540b70454`](https://github.com/containerd/containerd/commit/540b7045470a9fc89a40de2014d4770cd3b64c85) Prepare release notes for v1.4.12
* Merge Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35)
  * [`eb875416e`](https://github.com/containerd/containerd/commit/eb875416e4ef2ddc3635203c7dca9f134bb91210) schema1: reject ambiguous documents
  * [`53e0c8c35`](https://github.com/containerd/containerd/commit/53e0c8c35ac4fe00f565465a7820f7e8404db23d) images: validate document type before unmarshal
* [release/1.4] Try next mirror in case of non-404 errors, too ([#6244](https://github.com/containerd/containerd/pull/6244))
  * [`9b538c7c7`](https://github.com/containerd/containerd/commit/9b538c7c7744a1aeb64de1b9c0b38e35b10b4885) Try next mirror in case of non-404 errors, too
* [release/1.4] Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6239](https://github.com/containerd/containerd/pull/6239))
  * [`e9f59a95e`](https://github.com/containerd/containerd/commit/e9f59a95ed5131d2a907fb26d4be2841e1787d28) Fix containerd fails to pull OCI image with non-`http(s)://` urls
* [release/1.4] update Go to 1.16.10 ([#6212](https://github.com/containerd/containerd/pull/6212))
  * [`16921116b`](https://github.com/containerd/containerd/commit/16921116b0571a29a10b5a1a01250cde77bc81a6) [release/1.4] update Go to 1.16.10
* [release/1.4] update Go to 1.16.9 ([#6103](https://github.com/containerd/containerd/pull/6103))
  * [`b742b36fb`](https://github.com/containerd/containerd/commit/b742b36fb766ef6179a72ba9807fe27f2592f2af) [release/1.4] update Go to 1.16.9
</p>
</details>

### Dependency Changes

This release has no dependency changes

Previous release can be found at [v1.4.11](https://github.com/containerd/containerd/releases/tag/v1.4.11)

containerd 1.6.0-beta.2

Welcome to the v1.6.0-beta.2 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

### Highlights

#### Runtime

* **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744))
* **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813))
* **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817))
* **Split task manager into shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918))
* **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011))
* **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031))

#### Windows

* **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131))
* **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778))

#### CRI

* **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695))
* **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619))
* **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627))
* **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964))
* **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113))
* **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130))

#### Other

* **Add a shared namespace label for cross-namespace content sharing** ([#5043](https://github.com/containerd/containerd/pull/5043))
* **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606))
* **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610))
* **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965))
* **Add OpenTelemetry trace injection to grpc client** ([#5992](https://github.com/containerd/containerd/pull/5992))

#### Client

* **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709))
* **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Phil Estes
* Derek McGowan
* Wei Fu
* Akihiro Suda
* Sebastiaan van Stijn
* Maksym Pavlenko
* Mike Brown
* Claudiu Belu
* Kazuyoshi Kato
* Michael Crosby
* zounengren
* AdamKorcz
* Adelina Tuvenie
* Brian Goff
* Daniel Canter
* Davanum Srinivas
* Kohei Tokunaga
* haoyun
* Enrico Weigelt, metux IT consult
* Shiming Zhang
* Hajime Tazaki
* Alakesh Haloi
* Iceber Gu
* Kevin Parsons
* Samuel Karp
* Gijs Peskens
* Aditi Sharma
* David Porter
* Jacob MacElroy
* Alexandre Peixoto Ferreira
* Cody Roseborough
* Furkan
* Jiaming Xu
* Kir Kolyshkin
* Miao Wang
* Neil Johnson
* Paul "TBBle" Hampson
* Priyanka Saggu
* Romain Aviolat
* Sunghoon Kang
* Tõnis Tiigi
* Zhiyu Li
* wanglei
* Alexey Ivanov
* Artem Khramov
* Ben Hutchings
* Cory Bennett
* Da McGrady
* Dan Williams
* Eng Zer Jun
* Ethan Chen
* Fabiano Fidêncio
* Fupan Li
* Gabriel Adrian Samfira
* Gaurav Gahlot
* Gunju Kim
* Jacob Blain Christen
* Jayme Howard
* Jintao Zhang
* Kaijie Chen
* Kern Walster
* Kitt Hsu
* Lantao Liu
* Ma Xinjian
* Mikko Ylinen
* Ng Yang
* Nicolas Chariglione
* Peri Thompson
* Quan Tian
* Radostin Stoyanov
* Rui Lopes
* Sambhav Kothari
* Samuel Ortiz
* Sebastian Hasler
* Yang Yang
* Yifan Yuan
* Zilong Wang
* Zufar Dhiyaulhaq
* botieking98
* chenxiaoyu
* jayonlau
* jerryzhuang
* kerthcet
* levinxo
* linrunlong
* scuzhanglei
* wangzhan
* Étienne Guesnet

### Changes
<details><summary>708 commits</summary>
<p>

* Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223))
  * [`a3b756ce1`](https://github.com/containerd/containerd/commit/a3b756ce18d45a7e3db1e244e741d35d0f885388) Prepare release notes for v1.6.0-beta.2
* Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196))
  * [`be84932e1`](https://github.com/containerd/containerd/commit/be84932e117ed503d28f7fdf15f852f90c0a779d) Rename release dockerfile to omit distro name
  * [`28126fd60`](https://github.com/containerd/containerd/commit/28126fd605a8cf279f6b9e5b89fd0698b3e67b9c) release: improve dockerfile
  * [`27d7c5038`](https://github.com/containerd/containerd/commit/27d7c50384b11d6a3c5982c7e20e89ec360d542a) Add arm64 to releases
* use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236))
  * [`6765524b7`](https://github.com/containerd/containerd/commit/6765524b73beac359ca43520faaf74347d94b6b5) use write lock when updating container stats
* go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230))
  * [`b103bee4c`](https://github.com/containerd/containerd/commit/b103bee4cc1b0aa5e622b3cc54fc984f453afe63) go.mod: Bump hcsshim to v0.9.1
* go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228))
  * [`920b24793`](https://github.com/containerd/containerd/commit/920b24793d8e4c8902891ad9965945390d4d6712) go.mod: Bump ttrpc to 1.1.0
* go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213))
  * [`97073c943`](https://github.com/containerd/containerd/commit/97073c9437b299ce528c21080950491d095d3778) go.mod: github.com/moby/sys/mountinfo v0.5.0
  * [`19d9d0d2a`](https://github.com/containerd/containerd/commit/19d9d0d2a564311311b3e2751f2811a5bb67b6bd) go.mod: github.com/moby/sys/signal v0.6.0
  * [`9c455ded6`](https://github.com/containerd/containerd/commit/9c455ded6115e3f8c20c914322a272f0cf6959d6) go.mod: github.com/moby/sys/symlink v0.2.0
  * [`fa12f4e69`](https://github.com/containerd/containerd/commit/fa12f4e6964528067690045a0838c0e3dc73b13c) go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
* cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222))
  * [`574800633`](https://github.com/containerd/containerd/commit/57480063373747b4206cb7cc4277958d54d5aaa9) cleanup: add more description on comment
* Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211))
  * [`869ccc01c`](https://github.com/containerd/containerd/commit/869ccc01c173ead832ceb07f9084b492b6e5c8a1) Update Go to 1.17.3
* CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214))
  * [`a22346622`](https://github.com/containerd/containerd/commit/a22346622b730e7f291ffd9b7d8a952060953133) CI: bump up crun: 1.0 -> 1.3
* Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205))
  * [`548579d0e`](https://github.com/containerd/containerd/commit/548579d0e2ffa220a7062262c28bd5f4e7567a28) Pin az CLI version
* Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918))
  * [`d022fbe78`](https://github.com/containerd/containerd/commit/d022fbe789b22d7e2773eeb1e01949f356b32efe) Address PR comments
  * [`6fa1bb4a5`](https://github.com/containerd/containerd/commit/6fa1bb4a5c48fbb971084d38ce4dea43995ad3e9) Fix build after rebase
  * [`2cec3a34b`](https://github.com/containerd/containerd/commit/2cec3a34b18a95205c7632f37b4686e982b1aa48) Migrate task directory
  * [`8b788d9df`](https://github.com/containerd/containerd/commit/8b788d9dfee9e330e65949f8e8e6704bbf9049e0) Expose shim process interface
  * [`733519677`](https://github.com/containerd/containerd/commit/733519677f9b266314db5d9c20df821120477769) Fix after rebase
  * [`df8c206a9`](https://github.com/containerd/containerd/commit/df8c206a927986a6953586c556b01f594b951821) Cleanup shim loading
  * [`b554b577b`](https://github.com/containerd/containerd/commit/b554b577b05b1663931fcc3c792d60fb1a157020) Move shim restore to a separate file
  * [`a3d298193`](https://github.com/containerd/containerd/commit/a3d298193c816386b7a939d6cf7259e0afa3001d) Fix backward compatibility with old task shims
  * [`33786ee4d`](https://github.com/containerd/containerd/commit/33786ee4d279864b42e639056e64d18bfcd6da40) Add plugin dependency between shim and shim services
  * [`fb5f6ce3c`](https://github.com/containerd/containerd/commit/fb5f6ce3c9f9fd8b7d18df55b066703fb1ab4ce2) Rework task create and cleanup flow
  * [`7c4ead285`](https://github.com/containerd/containerd/commit/7c4ead285dbab56357c3c5411612b5032661f1f5) Add task manager
  * [`2d5d3541e`](https://github.com/containerd/containerd/commit/2d5d3541e6260718e951f002fe31b4ae6d237199) Rename task manager to shim manager
* [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113))
  * [`2e6d5709e`](https://github.com/containerd/containerd/commit/2e6d5709e32253c3c98956f07c71cb9b6b1d5fd4) Implement CRI container and pods stats
  * [`b69bbe25a`](https://github.com/containerd/containerd/commit/b69bbe25acc10a805b8459bb4e79880ad781727f) Vendor latest k8s.io/cri-api and netlink
* test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200))
  * [`9bfec3980`](https://github.com/containerd/containerd/commit/9bfec3980b66aa05f0e94475af7911736f1275fb) test: Add grace period for restart monitor test
* integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179))
  * [`0ba3532f5`](https://github.com/containerd/containerd/commit/0ba3532f547d901505361d1fddea3bb0de5b0f66) integration: Enables TestRuntimeHandler for Windows
* Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171))
  * [`82cb0a63e`](https://github.com/containerd/containerd/commit/82cb0a63e1494b7e0cfcf4fdd8d19741a233bbcc) Add mkdir on Dockerfile
* sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189))
  * [`6ee8577e5`](https://github.com/containerd/containerd/commit/6ee8577e54fb15730effb7e44340eed2e70ed42f) sys/reaper: avoid leaky goroutine when exec timeout
* adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184))
  * [`ea8978810`](https://github.com/containerd/containerd/commit/ea89788105aeb926d1609b0b98c509322c4d37c4) adds additional debug out to timebox cni setup
* converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176))
  * [`f0d3ea96c`](https://github.com/containerd/containerd/commit/f0d3ea96cf8cc39a185c77d01423efcfd72c876e) converter: Allow hooks during image conversion
* compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177))
  * [`6fa9f22fa`](https://github.com/containerd/containerd/commit/6fa9f22fa3e20493625d3a100b9c1e9279a00503) compression: support zstd with skippable frame
* integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182))
  * [`fb4432c24`](https://github.com/containerd/containerd/commit/fb4432c24a9ec1a3f3db9e8c9d2fd29c48b177e6) integration: Enables TestVolumeCopyUp for Windows
*  integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121))
  * [`830b3c26e`](https://github.com/containerd/containerd/commit/830b3c26ec0fcf7fb2755aece1ed7abece76aa1f) integration: Enable some tests for Windows (part 2)
* integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085))
  * [`602018900`](https://github.com/containerd/containerd/commit/60201890038061d270b9a643144a534456cb150e) integration: Enable some tests for Windows
* Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125))
  * [`ebc5cf19a`](https://github.com/containerd/containerd/commit/ebc5cf19acfb770ef12730d2ed0776b39769aa84) feat(doc): update to version 2 syntax
* fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166))
  * [`3e51312a6`](https://github.com/containerd/containerd/commit/3e51312a61ea9d727d082818e487b76a7739385a) fix shim reaper wait command execute blocked
* content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145))
  * [`010a9e2bc`](https://github.com/containerd/containerd/commit/010a9e2bca7f8ebd587505392abbbd0c1766c17a) content: close stream after commit request
* Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165))
  * [`88fc5cf2d`](https://github.com/containerd/containerd/commit/88fc5cf2d00239d235e4efaee18e2628d97e8e30) Adding scope tests for ParseAuthHeader
  * [`7438edc7e`](https://github.com/containerd/containerd/commit/7438edc7ed976fd38d3b4051acf45874ec611330) Adding tests for GenerateTokenOptions
  * [`9b4a6f129`](https://github.com/containerd/containerd/commit/9b4a6f129517e353de70b824d78c755605eb84f6) Generate token options with each scope as a separate string.
* vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167))
  * [`96018b7db`](https://github.com/containerd/containerd/commit/96018b7db99e8e009e6f78ca3f506f1be23eb2a9) vendor: Updates go-cni
* commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159))
  * [`5b222d54a`](https://github.com/containerd/containerd/commit/5b222d54ad75c6f29a566d8f83e5c47c28584bfe) commands: Enables task metrics for Windows
* vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149))
  * [`b8f3ebb03`](https://github.com/containerd/containerd/commit/b8f3ebb03ba33ffe1ed87d314598f21d077ed698) vendor: update moby/sys for darwin support
* Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144))
  * [`0ccc386c8`](https://github.com/containerd/containerd/commit/0ccc386c86d94314f3c0460be395caadaa69ed49) Prepare release notes for v1.6.0-beta.1
  * [`e5fc3b38e`](https://github.com/containerd/containerd/commit/e5fc3b38ee9f4e1788cac279e56966819f7af920) Update mailmap
  * [`37720fc6f`](https://github.com/containerd/containerd/commit/37720fc6fdae4daf3c79794ad68f0e2c821f617c) Update api vendor
* bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136))
  * [`a217b5ac8`](https://github.com/containerd/containerd/commit/a217b5ac8f66cfdbffd730f16b63f13e313013b8) bump CNI to spec v1.0.0
* Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992))
  * [`294143bf3`](https://github.com/containerd/containerd/commit/294143bf380dbbc706e85387148c02fc2afa496d) Inject otel traces to grpc client.
* client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142))
  * [`cd2f2b0af`](https://github.com/containerd/containerd/commit/cd2f2b0af60f27aff9e7074a1ea523549c2ff47f) client: expose (*image).platform
* Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128))
  * [`3b73922fb`](https://github.com/containerd/containerd/commit/3b73922fba02afef924986309679873996e0654f) feat(doc): add Core Scheduling documentation
* Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130))
  * [`130a9c7dd`](https://github.com/containerd/containerd/commit/130a9c7ddbdd33a95a4b531ff25506d2d1651b20) Ensure namespace is proxied to grpc/ttrpc plugins
* fix #6054  MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109))
  * [`535191abf`](https://github.com/containerd/containerd/commit/535191abf3b3f6a41fe63fc7952f1f72690b2d70) fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
* Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124))
  * [`2a8dac12a`](https://github.com/containerd/containerd/commit/2a8dac12a7629c1c9f1be66c40e6cd5d25d9c70b) Output a warning for label image labels instead of erroring
* Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132))
  * [`c18c2e735`](https://github.com/containerd/containerd/commit/c18c2e73565bbfc7fde6c8462230c4afba33818d) Fix spelling mistake in Windows snapshotter
* Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126))
  * [`ca35f4e82`](https://github.com/containerd/containerd/commit/ca35f4e820b11d329e1824314480b15a2be0d08d) Windows: Cleanup rm- prefixed layers
* cleanup deprecated package  `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118))
  * [`1f1cad391`](https://github.com/containerd/containerd/commit/1f1cad39122548611c82ab3cada8099a0d70a6f6) io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
* close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115))
  * [`46be06937`](https://github.com/containerd/containerd/commit/46be069379bb8b439b05b9e10d01631b097cedb9) close Writer after use which may leak mem
* Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778))
  * [`2bc77b8a2`](https://github.com/containerd/containerd/commit/2bc77b8a2865efe83bc50225223555a919191f54) Adds Windows resource limits support
* Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098))
  * [`1abe50512`](https://github.com/containerd/containerd/commit/1abe5051210ab80d1451fcb19a54efa372d29f4b) Prepare release notes for v1.6.0-beta.0
* Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105))
  * [`c5947557d`](https://github.com/containerd/containerd/commit/c5947557d89e4b1e0a4a89e207f8943af8075f70) Add error message to in TestContainerdRestart integration test
* Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110))
  * [`072a7074b`](https://github.com/containerd/containerd/commit/072a7074b4897aa3b086ce1bae0459eefa13dbd1) Fix typo in the NewContainer function documentation
* Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104))
  * [`18d483b23`](https://github.com/containerd/containerd/commit/18d483b236b2bf999441c2324b70ae52a48a7cb7) Update cgroups to v1.0.2
* btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100))
  * [`ac2df3ba9`](https://github.com/containerd/containerd/commit/ac2df3ba9ad2d26da08395d294abb7c0fa0105e5) test: check file content after mount
* Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107))
  * [`4ed3c524c`](https://github.com/containerd/containerd/commit/4ed3c524cf6d01cf31538b20848675285e6538cd) Update test timeout based on recent cancellations
* Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106))
  * [`d252a293d`](https://github.com/containerd/containerd/commit/d252a293df3d8fc76cb5b141e33d59fc55b94b5a) Remove extra test_teardown
  * [`4a569c889`](https://github.com/containerd/containerd/commit/4a569c8894029c858cbdad2920a85541bc89e35b) Check the pid in cri test teardown
* add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011))
  * [`f1054dbbd`](https://github.com/containerd/containerd/commit/f1054dbbdeb0eac096ba91b7ae892b7104be7c5e) fix integration client vendor
  * [`e48bbe839`](https://github.com/containerd/containerd/commit/e48bbe83949a43dedd3e2727452259f99dd81635) add runc shim support for sched core
* integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579))
  * [`abf4de498`](https://github.com/containerd/containerd/commit/abf4de4985fdf8edf0220a055ff14b9c33c5547c) integration: Enables Windows containerd restart test
* vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099))
  * [`46b152f81`](https://github.com/containerd/containerd/commit/46b152f81be2580e726e478a198b290770225ed7) vendor: Bump hcsshim to 0.9.0
* [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695))
  * [`55893b9be`](https://github.com/containerd/containerd/commit/55893b9be729b7473a717682d6bf99a154c36422) Add CNI conf based on runtime class
* Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102))
  * [`de1a39bf3`](https://github.com/containerd/containerd/commit/de1a39bf32caf2cfb6b8967a3f23cde44ee83992) Update Go to 1.17.2
* integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933))
  * [`7a7a9a282`](https://github.com/containerd/containerd/commit/7a7a9a282c42b6cdfa26f5c515e238d2e782b446) integration: Adds test for multilayer image import
* runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031))
  * [`f7658e37d`](https://github.com/containerd/containerd/commit/f7658e37d94674b8bfaf3206d425f102c5d9b552) runtime: should fail fast if dial error on shim
* Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034))
  * [`791e175c7`](https://github.com/containerd/containerd/commit/791e175c79930a34cfbb2048fbcaa8493fd2c86b) Windows: Fixes Windows containers with image volumes
* run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094))
  * [`3a713811b`](https://github.com/containerd/containerd/commit/3a713811bee3bd813853a0c87763ddf2d804adee) run `gofmt` with Go 1.17
* pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088))
  * [`703b86533`](https://github.com/containerd/containerd/commit/703b86533b3348584124f42e3e39524d3f911121) pkg/cap: remove an outdated comment
* Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066))
  * [`1ee2bff0e`](https://github.com/containerd/containerd/commit/1ee2bff0e02136099cb49c08dab25830e7778535) Update go otel 1.0.1
* Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086))
  * [`c528d2c39`](https://github.com/containerd/containerd/commit/c528d2c39f1c1d6430f7faccc7e6cf8b2938132d) Update ADOPTERS.md with additional uses
* modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082))
  * [`b9a0c5080`](https://github.com/containerd/containerd/commit/b9a0c5080a50e177726c2fdf6eb7cf377d25bfc9) modify the way for checking cos
* Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915))
  * [`65f6a896c`](https://github.com/containerd/containerd/commit/65f6a896c3ec892e4342a117e8dea7250986a098) Fuzzing: Add 4 fuzzers + small modifications
* Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081))
  * [`9734b4039`](https://github.com/containerd/containerd/commit/9734b403939841528f3cee5e057270a49ff153a2) Pin mingw to version 10.2.0
  * [`d19af5afb`](https://github.com/containerd/containerd/commit/d19af5afbfcf91bdd420b0978b48d9f348247739) Update to golang 1.17.1
  * [`3cb0ec01e`](https://github.com/containerd/containerd/commit/3cb0ec01ec86a289aa24ba8979720dc3c91593c3) Install nssm
* Merge Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq)
  * [`7c621e1fc`](https://github.com/containerd/containerd/commit/7c621e1fcc08bcf5a1a48b837342cc22eada1685) btrfs: reduce permissions on plugin directories
  * [`6886c6a2e`](https://github.com/containerd/containerd/commit/6886c6a2ec0c70dde1aa64e77b64a5ad47b983c3) v1 runtime: reduce permissions for bundle dir
  * [`7d56b24f1`](https://github.com/containerd/containerd/commit/7d56b24f1a9af82dfaa10ff55a4e3c36a7efd943) v2 runtime: reduce permissions for bundle dir
* task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079))
  * [`02e77bcdc`](https://github.com/containerd/containerd/commit/02e77bcdc1e48fb4089dab02d6b67955d48df4ad) task service: return known error type
* refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973))
  * [`50da67359`](https://github.com/containerd/containerd/commit/50da6735923837519d7b8ec0ba997ce890b6de29) refactor: move from io/ioutil to io and os package
* fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076))
  * [`049042382`](https://github.com/containerd/containerd/commit/049042382c1ac5e451e9d1ca24c7f622270609d6) fix: update vendor
  * [`5c2426a7b`](https://github.com/containerd/containerd/commit/5c2426a7b23d209a3ba46bce5ab81ec280e5b3ae) cleanup: import from k8s.io/utils/clock/testing instead
  * [`6484fab1e`](https://github.com/containerd/containerd/commit/6484fab1e020c6cb946e5e82ecd5eb24a9b3ffc6) cleanup: import from k8s.io/utils/clock instead
* feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069))
  * [`d16942cf1`](https://github.com/containerd/containerd/commit/d16942cf16391ddcc17ca06e3fba94af743d05b7) feat: enable cri remote client to call with grpc calloptions
* cleanup k8s ansible yaml (carry for #5713)  ([#6074](https://github.com/containerd/containerd/pull/6074))
  * [`f6b7e07fd`](https://github.com/containerd/containerd/commit/f6b7e07fd318bded1da10bc05d691ad1ae42d522) cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>)
* feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070))
  * [`933ddaa6f`](https://github.com/containerd/containerd/commit/933ddaa6f870e10b1164d7a4a442c0e026ba7975) fix: wrong flag type
  * [`da16d492c`](https://github.com/containerd/containerd/commit/da16d492cd07ee7089aa8b000ba48f494f193147) feat: support import image for specific platform
* Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065))
  * [`67b883146`](https://github.com/containerd/containerd/commit/67b88314619dae55465057fe39b43586bf3b6df7) Update mirror images to take target image name
* fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059))
  * [`e6ddffc2a`](https://github.com/containerd/containerd/commit/e6ddffc2af90ce4fad3db6510911bce849b8c578) fix: make exec-id flag required in exec command
* images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052))
  * [`09c9270fe`](https://github.com/containerd/containerd/commit/09c9270feee1d81044e29c47c3609fb0c1e4d7f5) images: enable converter to uncompress zstd
* replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922))
  * [`694a00754`](https://github.com/containerd/containerd/commit/694a007543fafe751cbfab07093ba1b3ae58f1b6) replace deprecated function
* integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853))
  * [`f42513112`](https://github.com/containerd/containerd/commit/f42513112f65b24668a46a1cae9480f06edfdaec) integration: Adds Windows HostProcess tests
* Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047))
  * [`224454062`](https://github.com/containerd/containerd/commit/2244540628f10d68efa5ac2a8dd80cb667c438b7) Fix main branch build is broken
* Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003))
  * [`45c3453a7`](https://github.com/containerd/containerd/commit/45c3453a7cd997fed9d6d4ea998135e532b5428a) Add open telemetry logging hook for logrus
* Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023))
  * [`50a568595`](https://github.com/containerd/containerd/commit/50a56859514011d35b603b13a264aa217e12cab8) Change oci.WithUser behavior for LCOW
* switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946))
  * [`fcffe0c83`](https://github.com/containerd/containerd/commit/fcffe0c83acea4d201425de763782dfef74c7204) switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
* import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926))
  * [`e087b47e9`](https://github.com/containerd/containerd/commit/e087b47e98d4768085d3ee5c9ceb1aaa7038ec72) import: Raise error if the imported image is filtered out
* Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043))
  * [`b9cf0d75a`](https://github.com/containerd/containerd/commit/b9cf0d75a9f4a8a09ab55caa1983a8988ba4834d) Fix panic in metadata content writer on copy error
* Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001))
  * [`084387e0b`](https://github.com/containerd/containerd/commit/084387e0b4d860b264dfddc62d556b6f0ec702a4) Move tracing to plugin
* ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916))
  * [`6b0b64a51`](https://github.com/containerd/containerd/commit/6b0b64a51a5112954355cc2cb1809bd410e53855) ctr: Fixes Windows image import
* update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017))
  * [`483d2e947`](https://github.com/containerd/containerd/commit/483d2e947fbb3b50339509962200f5e5e1965f7b) go.mod: update opentelemetry modules to v1.0.0
* fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979))
  * [`498e5b27f`](https://github.com/containerd/containerd/commit/498e5b27f7928eab29756f674a161737fe36cabf) fix error string format
* Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036))
  * [`407d60694`](https://github.com/containerd/containerd/commit/407d6069412d7fc563ea45ff46dfcc13e71338e5) Add github action to mirror image
* add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027))
  * [`16f3d67b5`](https://github.com/containerd/containerd/commit/16f3d67b5a804b3a32a5df6318531768a654ef8c) add current process state to the error message
*  FreeBSD: fix tar headers & the nil check on getxattr  ([#5991](https://github.com/containerd/containerd/pull/5991))
  * [`2bffb5f9b`](https://github.com/containerd/containerd/commit/2bffb5f9b234bff72739f48f7d027b47a178a9ae) FreeBSD: fix tar headers & the nil check on getxattr
* gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035))
  * [`97df73004`](https://github.com/containerd/containerd/commit/97df73004e4b9d7c632f4889f889fd6b330a9e40) gha: collect Vagrant VMs' IP addresses
* bump continuity and console version  that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033))
  * [`7854e0bff`](https://github.com/containerd/containerd/commit/7854e0bffe7e95fc8002f2150caef96f4d858a48) bump continuity and console version that remove pkg/errors
* import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997))
  * [`6875aa5d3`](https://github.com/containerd/containerd/commit/6875aa5d3737d7ff87220ffd53275ef37d323d0e) import: Add option to skip creating digest image
* ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998))
  * [`16d3f48a2`](https://github.com/containerd/containerd/commit/16d3f48a2e13fa820431d09825e5b8a566b11360) ctr namespaces: improve usage string
* bump console version to v1.0.3 that remove pkg/errors  ([#6028](https://github.com/containerd/containerd/pull/6028))
  * [`a68fb7add`](https://github.com/containerd/containerd/commit/a68fb7addb79c31602fd2cbcad3c29cb1333aa66) bump console version to v1.0.3 that remove pkg/errors
* Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032))
  * [`3e72e335f`](https://github.com/containerd/containerd/commit/3e72e335fe6e03aecdc93e07d0162090319c4156) Use github images for integration tests
* Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995))
  * [`8596d1188`](https://github.com/containerd/containerd/commit/8596d11886b4afe4323b24e645858bc48753f18e) Fix typo
* Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012))
  * [`f40df3d72`](https://github.com/containerd/containerd/commit/f40df3d72ba85700c737aca2cb21212d8f0caaed) Enable image config labels in ctr and CRI container creation
* Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970))
  * [`2fecf5b02`](https://github.com/containerd/containerd/commit/2fecf5b02e95cdf4ee5babd065b2c52d6aadbe18) Make sure exit signals trigger an exit during init
* task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974))
  * [`55faa5e93`](https://github.com/containerd/containerd/commit/55faa5e93d7fdacc7d9b28ee79a0972ec18e3471) task delete: Closes task IO before waiting
* CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985))
  * [`f700ae873`](https://github.com/containerd/containerd/commit/f700ae8732c42cad41cf5628884610b3f95a464d) CI: bump up crun to 1.0
* seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982))
  * [`55923daa9`](https://github.com/containerd/containerd/commit/55923daa9f56c8a890875f1e111201d918b382e2) seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990))
  * [`73dbbf5bf`](https://github.com/containerd/containerd/commit/73dbbf5bfa4ff2c9a2f6c91dc7c4dc29ace5fa4c) Update to Go 1.17.1
* CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987))
  * [`6d961f967`](https://github.com/containerd/containerd/commit/6d961f96736d7b471b3cdc47c76bd8bd58a6e3a9) CI: Switch to available latest images
* add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610))
  * [`91b64c58b`](https://github.com/containerd/containerd/commit/91b64c58b128a8268fdbb3f03b2f238766be55cf) add xfs support to devicemapper snapshotter
* Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956))
  * [`57e10439d`](https://github.com/containerd/containerd/commit/57e10439d9d1d66492ae55e48af713d9a7a4c6f8) Fixes task kill --force on Windows
* Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817))
  * [`8d135d284`](https://github.com/containerd/containerd/commit/8d135d28420a1f8aa7ce8bb2f56103555f380a5f) Add support for shim plugins
* vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976))
  * [`8ff8b1b82`](https://github.com/containerd/containerd/commit/8ff8b1b8236329457345350e6123cf0ef865a30f) vendor: update continuity for darwin support
* replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906))
  * [`2ac996840`](https://github.com/containerd/containerd/commit/2ac996840187b2e42fdbe4e4c9b6b55a7c775c43) replace uses of os/exec with golang.org/x/sys/execabs
* complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972))
  * [`16cd6ed13`](https://github.com/containerd/containerd/commit/16cd6ed137d8f6397def9e63a15ac8761a8c1cda) Additional integration tests for pulling image with labels
* Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966))
  * [`2458afeb1`](https://github.com/containerd/containerd/commit/2458afeb131b8942907b1c62a9b1751387e2ed08) Fix content copy to not ignore unexpected EOF
* add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964))
  * [`1efed4309`](https://github.com/containerd/containerd/commit/1efed43090fcb24eb138acf318b9edef91d22007) add ip_pref CNI options for primary pod ip
* cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939))
  * [`756f4a314`](https://github.com/containerd/containerd/commit/756f4a3147d6fde2f69077ae1805dacde886bf89) cri: add devices for privileged container
* sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954))
  * [`24cec9be5`](https://github.com/containerd/containerd/commit/24cec9be560c44bf7ab3135836ebf9caddbf7c61) sandbox: Allows the sandbox to be deleted in NotReady state
* pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969))
  * [`9954147c0`](https://github.com/containerd/containerd/commit/9954147c0343639c538cc77416022e263090be80) pin protobuild version to tag
* Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965))
  * [`6bec0d39b`](https://github.com/containerd/containerd/commit/6bec0d39b043c8cc9de3df9d7a8b6c8611fe348e) use a const metric for build_info
  * [`ae27a6b05`](https://github.com/containerd/containerd/commit/ae27a6b05ce42bd0c3e794ae46e9a1d9f0cb37f0) Add metric exposing build version&revision
* Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627))
  * [`f8dfbee17`](https://github.com/containerd/containerd/commit/f8dfbee17888240616a57a724fa34bef4357092d) add cri test case
  * [`9a8bf1315`](https://github.com/containerd/containerd/commit/9a8bf13158e469e284757bc9f88796439817423b) feature: add field LinuxContainerResources.Unified on cri
* integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861))
  * [`f7b1ceb9f`](https://github.com/containerd/containerd/commit/f7b1ceb9f666c7a142f139a3306c8163866a280e) integration: investigate TestRestartMonitor's failure
* Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917))
  * [`278176db1`](https://github.com/containerd/containerd/commit/278176db151b3559a73ffa5bcdfe3b025a5abae6) Address issue forms feedback
  * [`11ab3cba0`](https://github.com/containerd/containerd/commit/11ab3cba0e161f66f5d5bfdf680055c9b82533ce) Use issue forms for bug reporting
* cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945))
  * [`2bcd6a4e8`](https://github.com/containerd/containerd/commit/2bcd6a4e8837d14a7b980349281c7508a701e4ab) cri: patch update image labels
* darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936))
  * [`a43fa9f28`](https://github.com/containerd/containerd/commit/a43fa9f284e5f0a4c50f65f80a88a3a91d3e5f75) darwin: runtime support
  * [`5dd38792a`](https://github.com/containerd/containerd/commit/5dd38792a82e1f7bb0579263e8854a8b373371e4) darwin: use the default values for socketRoot variable
* Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858))
  * [`7826a21ac`](https://github.com/containerd/containerd/commit/7826a21ac6319a033fdf7573f2a17d2507a69f2f) Update RELEASES.md
* archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949))
  * [`ccc5ee303`](https://github.com/containerd/containerd/commit/ccc5ee303892023081a880ffc32bbd8ebf56461d) archive: Add WriteDiff error logs
* replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958))
  * [`8e850bc0f`](https://github.com/containerd/containerd/commit/8e850bc0feeba4910bf6e8f079b6c5ca5f34d199) replace deprecated Dail with DailContext
* Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951))
  * [`aeea697d8`](https://github.com/containerd/containerd/commit/aeea697d84f214ab99b542fa5e695b9369e3ca0b) Add WS2022 support in Windows Periodic tests
* Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943))
  * [`96ec0b6f3`](https://github.com/containerd/containerd/commit/96ec0b6f34c05d26de4d9433b45a3493e16fc28e) content fuzzer: Clean up tempdir
* using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944))
  * [`789abc936`](https://github.com/containerd/containerd/commit/789abc9367b27506f6559f60448018134881630f) using Hosts replace deprecated field
* fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947))
  * [`820bd9269`](https://github.com/containerd/containerd/commit/820bd926906f60e19a62b7eb809053fe3e75818c) fix document non-synchronous in crictl.md
* go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929))
  * [`1dd0d59b7`](https://github.com/containerd/containerd/commit/1dd0d59b7386d9f2ae44fdcabcce21f8bf3b4900) go.mod: Update hcsshim to v0.8.21
* Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937))
  * [`eb2530be8`](https://github.com/containerd/containerd/commit/eb2530be8434a63e5358b6aa52cd3b76054bc31a) Makefile.linux: build on riscv with PIE
* Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932))
  * [`27046a9e0`](https://github.com/containerd/containerd/commit/27046a9e06de44ecc4b1662ca43977cc2d6c789e) Fix cwd flag for `ctr tasks exec`
* Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927))
  * [`6d3d34b85`](https://github.com/containerd/containerd/commit/6d3d34b85d5aa4c32e350f36693507d6e0c1c0fc) Update Pause image in tests & config
* cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122))
  * [`e0f8c04da`](https://github.com/containerd/containerd/commit/e0f8c04dad213975bf55dcfa71986be6d8b489e2) cri: Devices ownership from SecurityContext
* Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921))
  * [`7bc5aa74c`](https://github.com/containerd/containerd/commit/7bc5aa74c2cf054b8e5a7982cad073c252fb5f4a) Fix pull fails on unexpected EOF
* Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845))
  * [`838afd211`](https://github.com/containerd/containerd/commit/838afd21161c0c43fbb28f3b71b8ad1e37fe63fd) Adding testing of two devices
  * [`7fba86264`](https://github.com/containerd/containerd/commit/7fba862648b2ee70a351441f0e910274937ea04b) Fix dir support for devices V3 (#4847)
* windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914))
  * [`e2c769d6f`](https://github.com/containerd/containerd/commit/e2c769d6fb17391df70bd658e1573360d4ccbb7b) windows: The DefaultSpec platform should match the Default matcher
* Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865))
  * [`25644b461`](https://github.com/containerd/containerd/commit/25644b4614d607199befa3c83c86540496a6e4f9) Add RunAsUserName functionality for the Windows Pod Sandbox Container
* bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899))
  * [`e18516767`](https://github.com/containerd/containerd/commit/e185167677649b751fd04c18c71ea39f4deda114) go.mod: update runc to v1.0.2
  * [`3f8ea1b6a`](https://github.com/containerd/containerd/commit/3f8ea1b6a1755a7c09addbcdabceb9b2eecc2ff7) update runc binary to v1.0.2
* Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903))
  * [`d3aa7ee9f`](https://github.com/containerd/containerd/commit/d3aa7ee9f065d5d8773b4b38124ad6e3d6634dc2) Run `go fmt` with Go 1.17
* go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905))
  * [`429296910`](https://github.com/containerd/containerd/commit/429296910658a0b4c892fd01c65df7d3f1202b3e) go.mod: github.com/pelletier/go-toml v1.9.3
* cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902))
  * [`c3609ff4c`](https://github.com/containerd/containerd/commit/c3609ff4ca0c1e2c4b713db65a63faefca5786db) cri: filter selinux xattr for image volumes
* Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131))
  * [`79b369a0b`](https://github.com/containerd/containerd/commit/79b369a0bb9d79bf2c397d2bed771fca9144b46e) Added windows hostProcess cni skip
* script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897))
  * [`4dd5ca70f`](https://github.com/containerd/containerd/commit/4dd5ca70fb0948299d52fddc115e999ce8fc143b) script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
* Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889))
  * [`9fe7bc938`](https://github.com/containerd/containerd/commit/9fe7bc938b1264844e3434e501c7c817c1956ea4) Bump integration timeout to 35 min
  * [`f8602c372`](https://github.com/containerd/containerd/commit/f8602c3725c55938c6b4ca3440ef07e6c3f28ba4) Update to Go 1.17
* integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896))
  * [`acb81bbda`](https://github.com/containerd/containerd/commit/acb81bbdaf35524ea020d81607ab62dd8bb718ed) integration: fix TestContainerPids
* [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891))
  * [`6f60b3016`](https://github.com/containerd/containerd/commit/6f60b3016f126d06717cd296b86dce0679b61d2c) [ctr] add HOSTNAME env for host network
* Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886))
  * [`c9b1b2fd5`](https://github.com/containerd/containerd/commit/c9b1b2fd5b6ec9d434a4baf3c091a31bfa039934) Fuzzing: Add fuzzer
* Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884))
  * [`9e1b57ca0`](https://github.com/containerd/containerd/commit/9e1b57ca0161c4081bbc899db32b665d3d38bc94) Add env for SystemdCgroup driver
* Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878))
  * [`1224060f8`](https://github.com/containerd/containerd/commit/1224060f8928ef58c8d480bc7763a09b19427413) Allow expanded DNS configuration
* Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863))
  * [`538d93d2f`](https://github.com/containerd/containerd/commit/538d93d2fcab530f525687a90521d30c00965df8) Fuzzing: Add 4 fuzzers
* Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813))
  * [`d30d897ef`](https://github.com/containerd/containerd/commit/d30d897ef93e7838f0c0828e0e85619b93331131) Cleanup v2 shim
* Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840))
  * [`5e49ec27d`](https://github.com/containerd/containerd/commit/5e49ec27dc4ff4f619453578a624d8cc35b21630) Use http.Get to download binaries instead of exec.Command
  * [`11a90c7ff`](https://github.com/containerd/containerd/commit/11a90c7ff4b59ba4a0d639c74fe8eb0fa0761f85) Fuzzing: Add experimental version of container fuzzer
* add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846))
  * [`d2f3b7146`](https://github.com/containerd/containerd/commit/d2f3b71468f385e535e6db31b430bfeeb973dead) add cpu-shares to ctr
* docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847))
  * [`bc4cea4e4`](https://github.com/containerd/containerd/commit/bc4cea4e44d5d219a5f6bba0654e6918ccd2a2bb) docs: rename main to master
* content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849))
  * [`a3d6edc0e`](https://github.com/containerd/containerd/commit/a3d6edc0eddeb380dceed84884a78b5dc621023b) content: return the error with its timestamp
* Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857))
  * [`82fe0db9a`](https://github.com/containerd/containerd/commit/82fe0db9aa83d94c04761ee9907befb5d1e61597) Fix bad `make protos` failure
* replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851))
  * [`30b832e49`](https://github.com/containerd/containerd/commit/30b832e494ebaa244d2321299dc0d3072eae4044) archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
* docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856))
  * [`1c47fb17f`](https://github.com/containerd/containerd/commit/1c47fb17f3b0c3da9ff45960487f93fc03ba1bf4) docs: remove FOSSA's badge
* BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850))
  * [`9cc179aa7`](https://github.com/containerd/containerd/commit/9cc179aa773b3aa09de03934c8850a770d7aa71b) BUILDING.md: remove some bits about building runc
  * [`42b57cc73`](https://github.com/containerd/containerd/commit/42b57cc730e6283b5f64563e90a7201d47d9a354) BUILDING.md: markdown fixes
* go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836))
  * [`e634f04d8`](https://github.com/containerd/containerd/commit/e634f04d8cdb6c2f96eea2e4e66d0e4500a46282) go.mod: update kubernetes to v1.22.0
* [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852))
  * [`e6538b8bc`](https://github.com/containerd/containerd/commit/e6538b8bce1814471af2cd3467d5f4c6e863cb08) Add trap to cri-integration test script
* docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848))
  * [`a5468852f`](https://github.com/containerd/containerd/commit/a5468852f8123ada3757db9b608cd6648285d835) docs: list all snapshotter-related build flags
* Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835))
  * [`0a0621bb4`](https://github.com/containerd/containerd/commit/0a0621bb47d48d8cbcbb614ee38422ce8b98a340) Move plugin context events into separate plugin
* Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839))
  * [`534685f95`](https://github.com/containerd/containerd/commit/534685f9558cc67125156ba2fbdd0e0ade74cc33) Fix Linux CI Linter using go 1.15.14
* Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842))
  * [`42a28ad2c`](https://github.com/containerd/containerd/commit/42a28ad2ca7faecfa3e2024952781136211c1fbf) Update Go to 1.16.7
* Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838))
  * [`10eab21a4`](https://github.com/containerd/containerd/commit/10eab21a4d4f47b2eb63a83e3675d151277a430a) Cleanup CI
* Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834))
  * [`6f027e38a`](https://github.com/containerd/containerd/commit/6f027e38a8e705a05ccc7031afb39b53a358b958) Remove redundant build tags
* Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830))
  * [`7917da764`](https://github.com/containerd/containerd/commit/7917da764c6d6b0851f3adf1ef2346d62c88a1d0) Change default directories on Darwin
* [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731))
  * [`3c5424454`](https://github.com/containerd/containerd/commit/3c5424454b60e775829c2e9b56be53a6af42fa90) [otel-tracing] vendor and go modules changes
  * [`3597ac859`](https://github.com/containerd/containerd/commit/3597ac859d3fc79f250e5d0f1664fb9db9143898) [otel-tracing] Initial opentelemetry support
  * [`10824eaf2`](https://github.com/containerd/containerd/commit/10824eaf2ea46e3be7e4ac29a9ae6de11ec21093) remove go 1.13 from containerd
* Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829))
  * [`c3c276ae1`](https://github.com/containerd/containerd/commit/c3c276ae1c3c322b192539980ce4973f452fd0a2) Fuzzing: Fix for OSS-fuzz issue 36825
* Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825))
  * [`41a04246f`](https://github.com/containerd/containerd/commit/41a04246f414f43080c9f0c9944516bd5855b209) Fuzzing: Add two more fuzzers
* scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760))
  * [`6c257552a`](https://github.com/containerd/containerd/commit/6c257552a72a49f75114c01401d3703f880ac054) scripts: declare ROOT closer to where it's used, and some DRY changes
  * [`dba0ef4eb`](https://github.com/containerd/containerd/commit/dba0ef4eb58e87cd3c6ab5a0e93f39ff1703b6eb) scripts: add missing quotes, and minor linting issues
  * [`0cb656860`](https://github.com/containerd/containerd/commit/0cb656860fabd4ad4d4ac93b4b0e2d88270fd231) test/build-utils.sh: remove support for Debian Jessie
* platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821))
  * [`f2c3122e9`](https://github.com/containerd/containerd/commit/f2c3122e9c6470c052318497899b290a5afc74a5) platforms: Format(): use path.Join() instead of joinNotEmpty()
* Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823))
  * [`2c699cc35`](https://github.com/containerd/containerd/commit/2c699cc35095476ddae077a459cbcf8962b51050) Fuzzing: Remove panics of container_fuzzer
* Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785))
  * [`acecd6603`](https://github.com/containerd/containerd/commit/acecd660311216c91d13435d561a854eb5e4c580) Change protoc link
  * [`cc88f8e0a`](https://github.com/containerd/containerd/commit/cc88f8e0ae82d08ccf821f9f1de4c180afb8e6ca) Split fuzzer to two fuzzers
  * [`6294235d8`](https://github.com/containerd/containerd/commit/6294235d8137424862def12cf3cf6267b3597dfc) Fuzzing: Add container fuzzer
* runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746))
  * [`4ab3e7a53`](https://github.com/containerd/containerd/commit/4ab3e7a53a15cf0bc311179994f339760365dd97) runtime: fix the issue of create new socket with abstract address
* mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809))
  * [`ce437864b`](https://github.com/containerd/containerd/commit/ce437864b2e7e2f9b94e02ba564e010a5ea2248d) mergo: Upgrade to 0.3.12 to fix panic
* ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802))
  * [`d1e868c83`](https://github.com/containerd/containerd/commit/d1e868c832d42f443dbd55118b2eff9aa92b021a) ci: install criu from PPA
* Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144))
  * [`d62d6c11d`](https://github.com/containerd/containerd/commit/d62d6c11dc381f9a4b3301329a20ccf3babcc604) Split release steps into multiple tasks
  * [`b4807122d`](https://github.com/containerd/containerd/commit/b4807122d29370c79272f8d982e9c408736a4932) Update release workflow to upload binary without CNI
* Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725))
  * [`23bc3db91`](https://github.com/containerd/containerd/commit/23bc3db914c30b133e5fa037fc2a3242f7329fc7) Enable critest on Windows
* Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792))
  * [`43117cf91`](https://github.com/containerd/containerd/commit/43117cf9193ab81fc3c178c0bef1d4ca49259c94) Script to check if entries in go.mod files are in sync
* Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043))
  * [`e692a0192`](https://github.com/containerd/containerd/commit/e692a01926cd296f3b77ee7f6ba1308b5ecd6aca) Add shared content label to namespaces
* platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784))
  * [`2405671d4`](https://github.com/containerd/containerd/commit/2405671d4089626f224473936e793fee19905d90) platforms: add "ios" as known OS, "loong64" as known ARCH
* Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804))
  * [`3a8622e30`](https://github.com/containerd/containerd/commit/3a8622e309d9f75e0c12fd43a31d95127ff341be) Updates the location of protobuf downloads in docs
* Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803))
  * [`0d9393650`](https://github.com/containerd/containerd/commit/0d939365079d91e82549c808fde1ba70cf0cdea3) Update protobuf install to use correct repository
* overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624))
  * [`67406b373`](https://github.com/containerd/containerd/commit/67406b3732b3139ea2f825541e5c84d46ffd5e04) overlay: add an optional label of upperdir location of each snapshot
* Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693))
  * [`1d3d08026`](https://github.com/containerd/containerd/commit/1d3d08026d25797b81ec1d385119dffa04a2ad46) Support SIGRTMIN+n signals
* respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800))
  * [`7a10fd4fc`](https://github.com/containerd/containerd/commit/7a10fd4fccb93a04b80352fea71fc1095d742b7f) respect context timeout in shim binary call
* Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716))
  * [`494b940f1`](https://github.com/containerd/containerd/commit/494b940f1475cb393d8f6ec8474eaeb50d022231) Introduce a new go module - containerd/api for use in standalone clients
* grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606))
  * [`63fe34add`](https://github.com/containerd/containerd/commit/63fe34add6997ba54d9bb0c6b2d7066efa2453c1) grpc config add options tcp_tls_ca
* integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162))
  * [`16deba098`](https://github.com/containerd/containerd/commit/16deba098c90a99e7948f16ffd4a49a5bbe9526d) integration: Windows volume-copy-up images
* add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795))
  * [`4fdb88464`](https://github.com/containerd/containerd/commit/4fdb884644ecdd6a4b4b0d1bd85b8f6ccc1995c6) add CRI support matrix to RELEASES.md
* adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794))
  * [`b5fc7846c`](https://github.com/containerd/containerd/commit/b5fc7846c465c10d9dfd4f0c150571c78e1a12b2) adding a little more clarity
* update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793))
  * [`18d6cc1b0`](https://github.com/containerd/containerd/commit/18d6cc1b06ad1ff8fb7def3a667f8bfe68e83e70) update gotestsum to v1.7.0
* Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756))
  * [`f1d79d33b`](https://github.com/containerd/containerd/commit/f1d79d33b8479ddfa741e61b83dffda259fa16aa) Discard blocks when removing a thin device
* Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590))
  * [`2bb8ad7c9`](https://github.com/containerd/containerd/commit/2bb8ad7c9ea4f626527a33dce51b89d3278194a2) Makefile: pass build tags to manpage build process
  * [`f60d447c1`](https://github.com/containerd/containerd/commit/f60d447c16991a183853cce58d21d88351cb0f16) Makefile: fix tags parameter computation
* Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744))
  * [`efa8ab715`](https://github.com/containerd/containerd/commit/efa8ab7158ea806e5ef2c9460187ec75eabab06e) Add runtime label to metrics
* interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745))
  * [`0d45ac14e`](https://github.com/containerd/containerd/commit/0d45ac14e92a9b63f7e31dab5a9325b26e8a3e12) interface about shim build check
* integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775))
  * [`00d52bb15`](https://github.com/containerd/containerd/commit/00d52bb159e091d1dee79e7b4c809662fe8f4e4d) integration: log all processes to investigate the test failure
* Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779))
  * [`2556aac67`](https://github.com/containerd/containerd/commit/2556aac6751829f7f219c4ddc3f5d4630c1dda07) Fuzzing: Add archive fuzzer
* Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687))
  * [`0789a0c02`](https://github.com/containerd/containerd/commit/0789a0c02b78d70cc06c9c8f86d9a128f2b9d46c) Add docker fetch fuzzer
* Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735))
  * [`b483177ee`](https://github.com/containerd/containerd/commit/b483177ee2089fd8284258840e2526370c15eab3) Support custom compressor for walking differ
* remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770))
  * [`53ec1abec`](https://github.com/containerd/containerd/commit/53ec1abec228e5121d5de4acaab08ed26ad70b9c) remotes/docker/pusher.go: Fix missing Close()
* remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769))
  * [`67d07fe5c`](https://github.com/containerd/containerd/commit/67d07fe5cf4f165396872499b3d36ee5cba6774d) remotes/docker/fetcher.go: Fix missing Close()
* Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771))
  * [`d2b6d192d`](https://github.com/containerd/containerd/commit/d2b6d192db18655e0930bd3c8051947873ed39b1) Update cpuguy83/go-md2man binary to v2.0.1
* Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750))
  * [`9537bc265`](https://github.com/containerd/containerd/commit/9537bc2654869bbc6fc4b740a674acfbcec9ab00) Dockerfile.test: build containerd in separate stage
  * [`36be5ef3a`](https://github.com/containerd/containerd/commit/36be5ef3a26d5db8f487514e06179a17d7771b49) Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
  * [`8faacfca1`](https://github.com/containerd/containerd/commit/8faacfca1647e6b8d2d37e35f11d0cf9bd5d42f6) Dockerfile.test: clean up apt indexes after installing
  * [`9f7e6335c`](https://github.com/containerd/containerd/commit/9f7e6335c46f9a46cfe2f0955759842b095addc4) Dockerfile.test: build critools in a separate stage
  * [`7ec8e2d36`](https://github.com/containerd/containerd/commit/7ec8e2d369606e870875f52a116ca2bf32e7317d) Dockerfile.test: build cni in a separate stage
  * [`f9f423c07`](https://github.com/containerd/containerd/commit/f9f423c078f3b106fe1a87fd60c86eb2d606e2bf) Dockerfile.test: standard directory to collect build aftifacts
  * [`e9f26eb87`](https://github.com/containerd/containerd/commit/e9f26eb877faf37dd0b6f33fe1292970b6183fd1) Dockerfile.test: split dev stage, and optimize order
  * [`25fada0cc`](https://github.com/containerd/containerd/commit/25fada0cc7082d3f6c2e54e58e1794234a605daf) Dockerfile.test: skip curl, gcc, git and make install
  * [`546538971`](https://github.com/containerd/containerd/commit/546538971cbde5c9fd95da32d0d77daba63c72ad) install-critools: make sure DESTDIR exists
* update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754))
  * [`603962bc8`](https://github.com/containerd/containerd/commit/603962bc81deb197350ee5144dad862d062eb964) update gotestsum to current master
* Merge Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w)
  * [`bc4e416c8`](https://github.com/containerd/containerd/commit/bc4e416c88670e4409917a18bc3da50e48b401de) Add test for archive breakout test for lchmod
* Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755))
  * [`150e07b64`](https://github.com/containerd/containerd/commit/150e07b648e7766ca862ee868bf99544d0836e89) Use systemd cgroup driver for cgroupv2 tests
* update runc  to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751))
  * [`a12c7bd1c`](https://github.com/containerd/containerd/commit/a12c7bd1cf18b719416932bbdcbb6e6219b1f1d4) go.mod: runc v1.0.1
  * [`43e0594ae`](https://github.com/containerd/containerd/commit/43e0594ae93be1b4629da91d25c4a830c91924a2) update runc binary to v1.0.1
* runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737))
  * [`dbef1d56d`](https://github.com/containerd/containerd/commit/dbef1d56d7ebc05bc4553d72c419ed5ce025b05d) runtime: runc v2: remove redundant validation
* Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727))
  * [`18321f539`](https://github.com/containerd/containerd/commit/18321f539ce5f78e5db034ce0af73076ea4f11b0) Move loop check to before sleep
  * [`2e8a572df`](https://github.com/containerd/containerd/commit/2e8a572dfd6cc170ed60a45d7d1180d56958eb12) Add timestamp to flaky restart monitor test
* Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722))
  * [`55fd2ab5d`](https://github.com/containerd/containerd/commit/55fd2ab5d6efe01fd12e3ff58bece7ea358b18d3) integration/client: go mod tidy
  * [`e72046f86`](https://github.com/containerd/containerd/commit/e72046f86bc54dfda54fdd9b17955ecae4232cca) Update Go to 1.16.6
* client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447))
  * [`73d28ddeb`](https://github.com/containerd/containerd/commit/73d28ddeb27a5532df084035199c9ad5ed2f69fe) client: surface a connection error more clearly
* Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712))
  * [`894b6ae39`](https://github.com/containerd/containerd/commit/894b6ae39b9266411d0d4e6325235390c06fc0ab) Fix missing Body.Close() calls on push to docker remote
* remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710))
  * [`ac75071b4`](https://github.com/containerd/containerd/commit/ac75071b49cbc69dc4eb7734316e5129b01562e4) remove pkg/cri/platforms package
* Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709))
  * [`0a8802df6`](https://github.com/containerd/containerd/commit/0a8802df67c3e2770ba787c9a0f6bcd41de6b34d) Allow WithServices to use custom implementations
* [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673))
  * [`a81f05f36`](https://github.com/containerd/containerd/commit/a81f05f3602a2b1eee9bff12ce9b985d16aadb60) [Vendor] Update hcsshim to 0.8.18
* test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578))
  * [`04ab4418f`](https://github.com/containerd/containerd/commit/04ab4418fdac4f85cc3b510bc297e06550175c90) test integration: Adds a test that restarts a failed container
* [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619))
  * [`d1c105192`](https://github.com/containerd/containerd/commit/d1c10519278560bbdf220dc72843e344d1a05743) use fu wei's suggeted interface pick for marshaling
  * [`14962dcbd`](https://github.com/containerd/containerd/commit/14962dcbd23790681431838f1efc8b7fe7012157) add alpha version
  * [`a5c417ac0`](https://github.com/containerd/containerd/commit/a5c417ac060f29dad343573674f879d59fc0b9ef) move up to CRI v1 and support v1alpha in parallel
* gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682))
  * [`4c6e4a06f`](https://github.com/containerd/containerd/commit/4c6e4a06ff8f7ef1ab28c67a97fe6bd0f79d73a8) gha: make release workflow work in forks
* Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666))
  * [`3a0b9ec6b`](https://github.com/containerd/containerd/commit/3a0b9ec6bbabeab2f2cb962f62a52d875365793a) Add unit test for plugin
* Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700))
  * [`aefabe546`](https://github.com/containerd/containerd/commit/aefabe5462a0080fa3e7817d33db6dd9a8e95d2d) Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
* Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676))
  * [`a7ad6b3be`](https://github.com/containerd/containerd/commit/a7ad6b3be5bfad7ab77b2801e52663a2eb43e270) Add support for registry host path override
  * [`95c708572`](https://github.com/containerd/containerd/commit/95c708572f2d65b85ebbb3648f34fd531c7b6f36) Update documenation for OCI distribution 1.0
* archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702))
  * [`53835221f`](https://github.com/containerd/containerd/commit/53835221f6b8fc496dbd2332fd48cd58a79f6f2b) Cleanup lchmod logic in archive
* Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571))
  * [`419d616fe`](https://github.com/containerd/containerd/commit/419d616fec5f24ee61a0a113a899e78a6e49a850) Install specific golang version in Windows CI.
* Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660))
  * [`bda7b5866`](https://github.com/containerd/containerd/commit/bda7b58666b9b8e01342a36317cffe9fdf1f7aa3) feat: Add snapshotter label to the new snapshot for container.
* snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655))
  * [`03ee45006`](https://github.com/containerd/containerd/commit/03ee450060dff5440fc02e8c88752c8314a8714f) snapshot/devmapper: log exported methods correctly
* Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662))
  * [`2019a1e68`](https://github.com/containerd/containerd/commit/2019a1e68f7488bdc0975062cbbd933b53595714) Makefile: fix DESTDIR and PREFIX concatenation
* Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287))
  * [`cabe67736`](https://github.com/containerd/containerd/commit/cabe67736941fa4fa1a6fc54b0045891ecc28733) tests: Use EnsureImageExists for image pulling
  * [`a78bdf22d`](https://github.com/containerd/containerd/commit/a78bdf22df22b0904e843e579f3088472cb52685) tests: Refactors PodSandbox creation
* move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641))
  * [`a964cf0cc`](https://github.com/containerd/containerd/commit/a964cf0cc4beabfd5cc50e970581d79f195ca4c0) un-export mount.FMountat
  * [`21f532d51`](https://github.com/containerd/containerd/commit/21f532d51891087f850ef3a7ed7e737c8c95b88a) move sys.FMountat() into mount package
* sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640))
  * [`dac2543a0`](https://github.com/containerd/containerd/commit/dac2543a07b788f908cde037a133902bebf605d2) sandbox: send pod UID to CNI plugins as K8S_POD_UID
* sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639))
  * [`5a0beaefb`](https://github.com/containerd/containerd/commit/5a0beaefbb64190696f8e634d037bc9047e6f4ac) sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
* content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633))
  * [`63c185da9`](https://github.com/containerd/containerd/commit/63c185da9ad38fabb842aee2fbdefae2f4e5b946) content/local: inline sys.StatATimeAsTime()
* allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636))
  * [`09d78bb6b`](https://github.com/containerd/containerd/commit/09d78bb6b9e8b173f44f5ba3abaee0de416b0ee0) allow multi gpu to be specified via ctr
  * [`f913a4275`](https://github.com/containerd/containerd/commit/f913a42755663e4e7f855dcfe37bad64887a9058) go.mod: runc v1.0.0
  * [`28bb59c08`](https://github.com/containerd/containerd/commit/28bb59c080ce671c8e89829844f95c871eb41393) update runc binary to v1.0.0 GA
* fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629))
  * [`560e7d479`](https://github.com/containerd/containerd/commit/560e7d479923dd7b1b0249375abf202054bf7ed4) fixing some doc links
* Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623))
  * [`d9694b297`](https://github.com/containerd/containerd/commit/d9694b2976a5181121f54690867a53c29dde6552) Sync integration/go.mod with root go.mod
* archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615))
  * [`4a46ea2f4`](https://github.com/containerd/containerd/commit/4a46ea2f4b55a2e4e694ecc6f93389421053dc6a) archive: Expose ChangeWriter to allow customized diff computing
* CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625))
  * [`cd33c007c`](https://github.com/containerd/containerd/commit/cd33c007cecdee2c8e5333190cad1bbce4ade13d) CI: Switch to available latest images
  * [`75b4c83f0`](https://github.com/containerd/containerd/commit/75b4c83f04d5f4fb148b5f498584af8854581083) fix deprecation config for default runtime
* Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614))
  * [`394f86475`](https://github.com/containerd/containerd/commit/394f864750ed0ffea980d713b179a53e070a9d78) Re-enable criu in main integration runs
* runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617))
  * [`87a2e0b2a`](https://github.com/containerd/containerd/commit/87a2e0b2a2d58c19e26d96ebcefc982505316081) runtime,v2: Enable debug when containerd is on debug+ log level
  * [`1bbee573a`](https://github.com/containerd/containerd/commit/1bbee573af72ee63ec67483a836f6e5cdcf9850d) github.com/golang/protobuf/proto is deprecated
  * [`91c8fa452`](https://github.com/containerd/containerd/commit/91c8fa4529f335c34dffc56e15c54054e97ac69e) Update github.com/golang/protobuf from v1.3.5 to v1.4.3
  * [`b7e79dc5a`](https://github.com/containerd/containerd/commit/b7e79dc5ab1084d2db3562c77896489674d9486f) Update google.golang.org/grpc from v1.27.1 to v1.38.0
  * [`8d2e156dd`](https://github.com/containerd/containerd/commit/8d2e156ddbd63e58d18048fd9960c586178fdc58) Increase golangci-lint timeout
* ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611))
  * [`05e51539a`](https://github.com/containerd/containerd/commit/05e51539a95f739c8963ab5184b8bda540e34e36) command line flags of setting container rootfs propagation
  * [`1dada3fc2`](https://github.com/containerd/containerd/commit/1dada3fc2a76ea1298f924bf404928c0f37796c4) add cgroupv2 setup for cos with a flag
* Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612))
  * [`bfbebf02b`](https://github.com/containerd/containerd/commit/bfbebf02b7c413c7afc9c253fb2199803c9e7c69) Update gotestsum to add timestamps to junit output
* Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604))
  * [`9c01fe20d`](https://github.com/containerd/containerd/commit/9c01fe20d31d3120c8bd2e0e68c411a3ebeabc64) Allow to pass --no-cgroup option to nvidia-container-cli
* Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577))
  * [`77374e8b3`](https://github.com/containerd/containerd/commit/77374e8b35900cc4cffd719282d29b43b729b58e) Makefile: FHS conformant manpage installation pathes
* Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594))
  * [`3ab974433`](https://github.com/containerd/containerd/commit/3ab97443360775ff3fb13a7be2efedb875805824) Add proper Go version before project checks
* Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580))
  * [`af5a130bc`](https://github.com/containerd/containerd/commit/af5a130bc94b91729114a502bf52f729f76638e4) Enable cri-integration in Windows Periodic Tests
* adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573))
  * [`7a2b04758`](https://github.com/containerd/containerd/commit/7a2b04758bfb52c17e1780dc432cff586b714839) adds explanation for seccomp unset/unconfined default vs runtime default
* Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569))
  * [`728743eb2`](https://github.com/containerd/containerd/commit/728743eb2858764df05fbb012cb03eb7c6cb0423) Fix cleanup context of teardownPodNetwork
* update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572))
  * [`01585595a`](https://github.com/containerd/containerd/commit/01585595a5934773aec184fc893b3db03e02628d) update integration/client go.sum
* Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566))
  * [`69f43d458`](https://github.com/containerd/containerd/commit/69f43d4589c50a8e64afac7cd5dda99433112ab8) Revert diff/walking error change
* Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562))
  * [`9a451d103`](https://github.com/containerd/containerd/commit/9a451d103c9b2d4791e22e5acdb7098c37bbec55) Update opencontainers/selinux to v1.8.2
* fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565))
  * [`014748bc0`](https://github.com/containerd/containerd/commit/014748bc04623346725d2a1330d7a2292563a4df) fix invalid validation error checking
* diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551))
  * [`558fdc680`](https://github.com/containerd/containerd/commit/558fdc6808dc2c15645e8bccf500a93df78432b6) diff/walking: fix defer cleanup
* Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559))
  * [`5f0fc4893`](https://github.com/containerd/containerd/commit/5f0fc4893da618651a67f44b80f6b47392d1d727) Add creation timestamp to RG
* Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328))
  * [`f8538b5e1`](https://github.com/containerd/containerd/commit/f8538b5e12b0977904bb810e3eae234a8ab1e48c) Fix error case in Windows layer cleanup
* Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422))
  * [`402acd7c1`](https://github.com/containerd/containerd/commit/402acd7c1e20aa6ea88ce6cd6f77e486c5e88478) Small typo fix "reimporst"
  * [`f21627059`](https://github.com/containerd/containerd/commit/f2162705950a1b220fbbb8c396738d7155928212) Use DeactivateLayer to recover layers that we cannot rename
* tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284))
  * [`93e268f62`](https://github.com/containerd/containerd/commit/93e268f6258e37200f15fe9240dd46b9988624e9) tests: Symlink volume tests
* Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535))
  * [`b5f530a15`](https://github.com/containerd/containerd/commit/b5f530a15780ee443b8c568200d37d50d0449672) Makefile: fix DESTDIR environment variable behaviour
* Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560))
  * [`edfd8d599`](https://github.com/containerd/containerd/commit/edfd8d59937faeb36f40b8baeff488a6d693ef49) Change Wrapf of non-error to an actual error
  * [`a93b5cbc2`](https://github.com/containerd/containerd/commit/a93b5cbc2f1f6e4e4b0b5fc3eb0843e24762f1f5) Install apparmor parser for arm64 environment
* scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536))
  * [`498bb36f6`](https://github.com/containerd/containerd/commit/498bb36f67689c2b6f0a6142472ba1f20ab87bf8) scrub the stale TODO
* docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554))
  * [`75daf45be`](https://github.com/containerd/containerd/commit/75daf45bebd198bca613ee96ddc0adc3afcd3861) docs: explicitly mention containerd's Prometheus path
* integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553))
  * [`2f870aa89`](https://github.com/containerd/containerd/commit/2f870aa896dff06dc4cae9875a4f53831169d14c) integration: Cleanup containerd on test teardown
* docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548))
  * [`93d4541a2`](https://github.com/containerd/containerd/commit/93d4541a20d19bb1562cacb855e8fba310045ab6) docs/cri: update ocicrypt link
  * [`792466495`](https://github.com/containerd/containerd/commit/7924664951197caf3c0f808ff329801ea2467104) docs/cri: fix broken links
* Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544))
  * [`05c03de94`](https://github.com/containerd/containerd/commit/05c03de94d28cdfc5f27057952d1308af2e66041) Update Windows periodic tests
* Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165))
  * [`77285e311`](https://github.com/containerd/containerd/commit/77285e311c6798df988b227ba9d56e85e29abc76) Schedule Windows job daily after midnight.
  * [`2b58782df`](https://github.com/containerd/containerd/commit/2b58782df0411226603d5d1dbdd52b10b3885bc5) Update windows-periodic.yml
  * [`421fc6ea7`](https://github.com/containerd/containerd/commit/421fc6ea73fef2f7946d762b800b349edd5fcb12) Add CI periodic Windows Jobs.
* Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273))
  * [`9fcea1d3f`](https://github.com/containerd/containerd/commit/9fcea1d3f03c7c6c5df0fc70a4ddb9a2b2dfa36b) Rename atomicWrite to writeToCompletion
* Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539))
  * [`b996e49c5`](https://github.com/containerd/containerd/commit/b996e49c5cb13788824f667b38886dd21a4a6db4) Do not run btrfs tests if btrfs kernel module is not loaded
* Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533))
  * [`50ad4b96c`](https://github.com/containerd/containerd/commit/50ad4b96c4acfde425e1fc6e7411b52658d7af92) Fix incorrect UA used for registry authentication
* ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531))
  * [`535d9cc59`](https://github.com/containerd/containerd/commit/535d9cc59fe75abebcbcfea60a8ff0f5f795beb1) ctr: parse mount options with embedded = character
* Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472))
  * [`a4f97d45d`](https://github.com/containerd/containerd/commit/a4f97d45da2886eea52b7ea179da8f66e2176975) Add ruleset=4 option
  * [`1442fee22`](https://github.com/containerd/containerd/commit/1442fee229bb6d536fa29d2a3aefccf5786d036a) Remove mountpoints not commonly mounted on FreeBSD
  * [`de04b3243`](https://github.com/containerd/containerd/commit/de04b32430cc1b26a70641bbeef5a85e194a5c75) Add copyright header & make sure compilation succeeds on all platforms
  * [`e1fd6be7e`](https://github.com/containerd/containerd/commit/e1fd6be7e8aa5f0a74cb8153ef1ef19d317f8224) Fix mounts for FreeBSD
* ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527))
  * [`5dec27b6f`](https://github.com/containerd/containerd/commit/5dec27b6f1f6921ae288a3094b796929b59fc539) ctr: exec handle pty resize after Start
  * [`b9378b452`](https://github.com/containerd/containerd/commit/b9378b45296218ba7f23384cf426384bb2102e0f) ctr: exec setup IO with console
* Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534))
  * [`923ab5b7c`](https://github.com/containerd/containerd/commit/923ab5b7ca0b3d07b117f4725d687c76e123d49a) Makefile: use $@ for target file names
* Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528))
  * [`e1c845df5`](https://github.com/containerd/containerd/commit/e1c845df506e5b7e2bd39f443db2a13862ddf825) Fix small typo
* Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519))
  * [`79e345221`](https://github.com/containerd/containerd/commit/79e3452213a595a87d6880538c7d2b0f6b067aab) update the link
  * [`1acca8bba`](https://github.com/containerd/containerd/commit/1acca8bba36e99684ee3489ea4a42609194ca6b9) Don't check for apparmor_parser to be present
* Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520))
  * [`869375a41`](https://github.com/containerd/containerd/commit/869375a413c8541d8776ee93a36753faa97427d7) Remove useless lines
* Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509))
  * [`a5b1740bb`](https://github.com/containerd/containerd/commit/a5b1740bbe3aa90848836268ebed82947ccf3fb4) fixed typos
* Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275))
  * [`c0e2f4b5d`](https://github.com/containerd/containerd/commit/c0e2f4b5d2c28b22da552156dae5239935b6a343) Try next mirror in case of non-404 errors, too
* bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514))
  * [`ec28288f4`](https://github.com/containerd/containerd/commit/ec28288f45ea0ff4567eee776ed3b8c289bf7f9c) bump runc version to v1.0.0-rc95
* update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511))
  * [`599127f4d`](https://github.com/containerd/containerd/commit/599127f4df767d60e256e24cea2a84f83d0c2a00) update runc binary to v1.0.0-rc95
* Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508))
  * [`5dbae87c5`](https://github.com/containerd/containerd/commit/5dbae87c59f6c0d53489b6b824fabf8d5fbe9117) Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0
* Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507))
  * [`1093f05ab`](https://github.com/containerd/containerd/commit/1093f05ab202f0ab6551379d19e81ac32c6dd076) Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
* Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493))
  * [`9643c9965`](https://github.com/containerd/containerd/commit/9643c99658758885d540050d1ff0ad0aaef1b4ea) Makefile: allow overriding install command via environment
* tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163))
  * [`09a0c9471`](https://github.com/containerd/containerd/commit/09a0c9471bf687ebcc7d8f8594606d127b3a803e) tests: Adds support for Windows cri-integration tests
* Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504))
  * [`b1d4140a2`](https://github.com/containerd/containerd/commit/b1d4140a220eb429eeb2059cd33fad6cd3bc7c80) Update docker resolver to authorize redirects
* bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505))
  * [`b6a251749`](https://github.com/containerd/containerd/commit/b6a2517491da040a1e821cc25a240de8308af948) bump hcsshim version to v0.8.17
* Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498))
  * [`315739251`](https://github.com/containerd/containerd/commit/315739251396c79718baad47191a2bc83dda586f) just release ctd-decoder not ctr-enc
  * [`b9c403e79`](https://github.com/containerd/containerd/commit/b9c403e79a578efd4350197e16860923fd7d209f) Merge remote-tracking branch 'upstream/master'
  * [`fc4da9728`](https://github.com/containerd/containerd/commit/fc4da9728e6231560411292ca9a2f6a591f64e57) Pin integration test image for alpine
* cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313))
  * [`273c2bb16`](https://github.com/containerd/containerd/commit/273c2bb168d1733ebcbe7418ca1232237f3dc603) tests: Prepull images used in tests
* plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440))
  * [`98f5922b5`](https://github.com/containerd/containerd/commit/98f5922b5e27f5e1d4e398091c6f2c24eea203dd) plugin: optimize the check for the last registration
* metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465))
  * [`e37ddafab`](https://github.com/containerd/containerd/commit/e37ddafab457596bc55151cd5bb34a77919c85ac) metadata: modify NewLeaseManager to return leases.Manager
* Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100))
  * [`8014d9fee`](https://github.com/containerd/containerd/commit/8014d9fee0e2a758d34af977f1ea6a1b6932a098) Skip TLS verification for localhost
  * [`74c7d66df`](https://github.com/containerd/containerd/commit/74c7d66dfb514ed5f130d53f3dbfbb8918d258eb) Merge remote-tracking branch 'upstream/master'
* Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492))
  * [`4b1b8346b`](https://github.com/containerd/containerd/commit/4b1b8346be2e8851650823a5e53b53658309f651) Makefile: make sure manpages are built before install-man
* adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309))
  * [`6e249b1ae`](https://github.com/containerd/containerd/commit/6e249b1aea69f30969ab3452dc19e78300dc3c06) adds credentials description
  * [`b59e29773`](https://github.com/containerd/containerd/commit/b59e29773c31bd173e3e23058fd960c3027da1eb) adds description for hosts.toml
* Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459))
  * [`0ba7303ee`](https://github.com/containerd/containerd/commit/0ba7303ee8c34f8f85c4679832f3b00dc36353ea) Prepare default branch rename
  * [`d02413330`](https://github.com/containerd/containerd/commit/d024133308a2d27ae0a1005afb29273d1a1715a1) Merge remote-tracking branch 'upstream/master'
* Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473))
  * [`de6db4038`](https://github.com/containerd/containerd/commit/de6db4038c937d4de0081283705303acf48f9834) Update vendored runc to v1.0.0.0-rc94
  * [`5c99f150a`](https://github.com/containerd/containerd/commit/5c99f150aec0b7b24535494ae9209a555e1344ea) Update the runc binary used with containerd to runc v1.0.0-rc94
* Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468))
  * [`b890f056e`](https://github.com/containerd/containerd/commit/b890f056e87d3823beeedf1339cd53469d4819b9) Fix content.ReaderAt close
* Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466))
  * [`c5797c8fc`](https://github.com/containerd/containerd/commit/c5797c8fcba00fd87527cc4b03a8785255424295) Update releases doc with updated support timeline
* tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452))
  * [`7d70992d3`](https://github.com/containerd/containerd/commit/7d70992d33df40049c517cbef8356b7e2bb5bd42) tests: add test for adaptor
* Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450))
  * [`9ea25634b`](https://github.com/containerd/containerd/commit/9ea25634bddccbcd4c45a7e552a147ff7f50aaab) Makefile: allow overriding go command by environment
* update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462))
  * [`c74a6c419`](https://github.com/containerd/containerd/commit/c74a6c4194b6e5e8b7887308c466ab1b19654a32) update to new cri-tools make install
* Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461))
  * [`79d800b9b`](https://github.com/containerd/containerd/commit/79d800b9b0148ae209d164420f723311e93dbb4e) Update Go to 1.16.4
  * [`d559b00fe`](https://github.com/containerd/containerd/commit/d559b00fe69817448cb2788dcecd297f51ed01a4) Merge remote-tracking branch 'upstream/release/1.5'
* [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457))
  * [`b35aa7250`](https://github.com/containerd/containerd/commit/b35aa7250a2a3f226b3fa09ccc950944a70ca33c) go.mod: cut circular dependency on github.com/containerd/containerd
  * [`b68405639`](https://github.com/containerd/containerd/commit/b684056399651a8219e9c60a6c39bacfc88ae741) integration/client: go mod tidy
* oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063))
  * [`b592a4c1e`](https://github.com/containerd/containerd/commit/b592a4c1ec51d36d21d1dea5f07a03013c6acaa7) oci: fix WithDevShmSize
* [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454))
  * [`e120261ee`](https://github.com/containerd/containerd/commit/e120261ee30cee924221a7536dfd1d516f449f88) windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411))
  * [`b0d3b35b2`](https://github.com/containerd/containerd/commit/b0d3b35b28f8df673740fbbd3bac3a36551589bf) windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448))
  * [`0b786908c`](https://github.com/containerd/containerd/commit/0b786908c0a37eae087aff204d54b6f9b97fa2f1) doc: add missing namespaces package
* update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445))
  * [`b56527cb7`](https://github.com/containerd/containerd/commit/b56527cb7ed1146a0cc5fb24140dfccdd8d7cf57) update seccomp version
* Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436))
  * [`b538d8f1a`](https://github.com/containerd/containerd/commit/b538d8f1a1f1e3cc13a9a49a2dd12a20644ee9c3) Update golang.org/x/sys to add linux/ppc support
* go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441))
  * [`e26fc8472`](https://github.com/containerd/containerd/commit/e26fc84729e4063c4ccac3271fc7eff7fb803b86) go.mod: cut circular dependency on github.com/containerd/containerd
  * [`15e0bd513`](https://github.com/containerd/containerd/commit/15e0bd513e84e0638d90f63f4bb7a828b9558f4c) integration/client: go mod tidy
* Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446))
  * [`81402e475`](https://github.com/containerd/containerd/commit/81402e47583bfce47f4924968c7164a7d2392ba3) Fix different registry hosts referencing the same auth config.
</p>
</details>

### Changes from containerd/cgroups
<details><summary>24 commits</summary>
<p>

* cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203))
  * [`80a7821`](https://github.com/containerd/cgroups/commit/80a7821536fc82757f390f8d65693074bd3ef8e4) cgroup: Optionally add process and task to a subsystems subset
* replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208))
  * [`0072297`](https://github.com/containerd/cgroups/commit/0072297e4547d623094fc68b0df41eef364d1747) replace pkg/errors from vendor
* cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207))
  * [`d55de5d`](https://github.com/containerd/cgroups/commit/d55de5d2af9a3616eb758e393a2170a1421155c1) cgroup.go: avoid panic on nil interface
* Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204))
  * [`73a8516`](https://github.com/containerd/cgroups/commit/73a8516e7f0f45fe9931d02cc57ff6059202f553) cgroupv2: reset lastErr to nil when subtree control is successfully written
  * [`2ca92c5`](https://github.com/containerd/cgroups/commit/2ca92c515038c7a30c1998dbe29a87873b98a3b3) cgroupv2: enable controllers before setting resources in NewChild()
* v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201))
  * [`db173a8`](https://github.com/containerd/cgroups/commit/db173a86bea843700360e7061c6f8d3869d13363) v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
  * [`b19a60d`](https://github.com/containerd/cgroups/commit/b19a60d64d89b858b3c2bee4a04fb7f70642ffce) v2: remove errors that are never returned
* v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202))
  * [`4fe70f3`](https://github.com/containerd/cgroups/commit/4fe70f3edc256fc2345d5f8f8a54e2f4e96f271e) v1: reduce duplicated code
* cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200))
  * [`6659093`](https://github.com/containerd/cgroups/commit/66590933215fb7b0c9f9ffd39e9946ab510d7679) cgroup v1: implement AddProc()
* Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199))
  * [`7254c12`](https://github.com/containerd/cgroups/commit/7254c1242cee46d1c37bf3da2151eed571879b5c) Rename branch from master to main
* utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197))
  * [`23b5120`](https://github.com/containerd/cgroups/commit/23b51209bf7bd11941d5613119309b11029e8373) utils: export ParseCgroupFile()
* go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194))
  * [`f8918cf`](https://github.com/containerd/cgroups/commit/f8918cf2d923b7003970ce99bb29545f2f34b531) go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
* Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195))
  * [`1a4509d`](https://github.com/containerd/cgroups/commit/1a4509dd06454dc765aed7f62cb26531416ffce3) Use /proc/partitions to get device names
</p>
</details>

### Changes from containerd/console
<details><summary>6 commits</summary>
<p>

* Fix CI ([#55](https://github.com/containerd/console/pull/55))
  * [`e700792`](https://github.com/containerd/console/commit/e7007923e8658f863a85c34aa029c394918fed19) Fix CI
  * [`05dadd9`](https://github.com/containerd/console/commit/05dadd92d21fc51f0bf56eadcb4201955cfc98d8) Stop using pkg/errors
* Add support for z/OS ([#46](https://github.com/containerd/console/pull/46))
  * [`7097449`](https://github.com/containerd/console/commit/70974496a6a52dc828ed9eeaaf451485a7598d53) Console test on z/OS
  * [`c4672c3`](https://github.com/containerd/console/commit/c4672c3a84f944113a124e5c1d401ff7ce932675) Add support for z/OS
</p>
</details>

### Changes from containerd/continuity
<details><summary>16 commits</summary>
<p>

* Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185))
  * [`849cf06`](https://github.com/containerd/continuity/commit/849cf06982a4a69ccb3c1cfa81f2aca763ad9877) run gofmt with Go 1.17
  * [`7b4650c`](https://github.com/containerd/continuity/commit/7b4650cc28941dc385d93521d532e6abbd923ed6) remove direct dependency on github.com/pkg/errors
* Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186))
  * [`16556d0`](https://github.com/containerd/continuity/commit/16556d050e667b37fa349d76de4bca0d8a225a33) update AUTHORS
  * [`b80f086`](https://github.com/containerd/continuity/commit/b80f08663090d91b0316074edca48bdd4fdbe0fa) darwin: use utimensat syscall instead of utimes
  * [`c666a35`](https://github.com/containerd/continuity/commit/c666a3535003db8bc2b1a8e6e40a693b3643aa3e) fix darwin usage of du command
* go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161))
  * [`c7d2029`](https://github.com/containerd/continuity/commit/c7d202952681f94836fad4d45d7b829f32fb9e9c) go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
* fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184))
  * [`fa7d162`](https://github.com/containerd/continuity/commit/fa7d1622372f1a787bfe51d59183b598813ce9d9) reformat nolint comments
  * [`a780d6d`](https://github.com/containerd/continuity/commit/a780d6dfbb58807abd3118add4e567017a0931f9) fs/stat: add FreeBSD
* Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182))
  * [`0175d70`](https://github.com/containerd/continuity/commit/0175d7070de291971f80576e74cd3ca2c5ab611c) Rename branch from master to main
* testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180))
  * [`e10d519`](https://github.com/containerd/continuity/commit/e10d519aaa7d4883e622e170239be4189336871d) testutil/loopback: print more debug info
</p>
</details>

### Changes from containerd/go-cni
<details><summary>15 commits</summary>
<p>

* remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74))
  * [`eff9f5b`](https://github.com/containerd/go-cni/commit/eff9f5bf31bf2228e257e6a9bf7d259e7c4626b9) remove: Continue on "not found" errors
* go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72))
  * [`9cfa666`](https://github.com/containerd/go-cni/commit/9cfa666e12c79b68bdc474d3808edf557b6af36c) go.mod: github.com/containernetworking/cni v1.0.1
* remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71))
  * [`b6c559f`](https://github.com/containerd/go-cni/commit/b6c559f04b1d93c5eed8cf9dfaf5025d75d4c348) remove direct dependency on github.com/pkg/errors
* update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70))
  * [`786c2bc`](https://github.com/containerd/go-cni/commit/786c2bcd455ebdf69321c7d613052a1d49bf0165) test: add TestLibCNIType100
  * [`e3fccc2`](https://github.com/containerd/go-cni/commit/e3fccc24058924b8bfa5e4d265defca6964a251f) update CNI to v1.0.0
* Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69))
  * [`591b0b6`](https://github.com/containerd/go-cni/commit/591b0b69153fc04bb2f27c9e7d8af70f184e17d3) Rename branch from master to main
* result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68))
  * [`6c993c3`](https://github.com/containerd/go-cni/commit/6c993c3feefaf407e41f65ac0a66b6817fa00c81) result: change Raw from a struct field to a method
* result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67))
  * [`bc7198b`](https://github.com/containerd/go-cni/commit/bc7198b2c67b9a4ee960b3097822379908560b0c) result: expose raw result
</p>
</details>

### Changes from containerd/ttrpc
<details><summary>34 commits</summary>
<p>

* Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96))
  * [`6eabacc`](https://github.com/containerd/ttrpc/commit/6eabacc9bc8e71d09834cce051ec9115ba36b1e1) Add protoc-gen-go-ttrpc
* client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94))
  * [`4f0aeb5`](https://github.com/containerd/ttrpc/commit/4f0aeb590b0add2bb19d199e7db4a487afde4581) client: Handle sending/receiving in separate goroutines
* Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95))
  * [`e621cd1`](https://github.com/containerd/ttrpc/commit/e621cd13e4495f2d3673ef9409ab69d1054b5c10) Run Protobuild in GitHub Actions
  * [`35cd240`](https://github.com/containerd/ttrpc/commit/35cd24038aee70ed64d7814c06eb4c7c805cddde) Re-generate example.pb.go
* replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93))
  * [`81faa3e`](https://github.com/containerd/ttrpc/commit/81faa3ee80c4384ec3ee9022efc2a9fc8c46361a) replace pkg/errors from vendor
* Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86))
  * [`a143311`](https://github.com/containerd/ttrpc/commit/a1433112ec1ce559f5a81564937ba583702b48c8) Rename branch from master to main
* Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85))
  * [`2368990`](https://github.com/containerd/ttrpc/commit/236899069c6f7d7bd857b9deac1197143ec99862) Make the example command buildable on macOS
  * [`616d54c`](https://github.com/containerd/ttrpc/commit/616d54c531e0a32f0efeee3b6770daef5ed4a13f) Run GitHub Actions on macOS
  * [`a4b18e0`](https://github.com/containerd/ttrpc/commit/a4b18e0db831b76114a7a8b166697ed4788838da) Make "go test" work on macOS
* Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83))
  * [`fede9db`](https://github.com/containerd/ttrpc/commit/fede9db17c4440a840e9e7e3f4ed49d76743dc33) Return Unimplemented when services or methods are not implemented
* Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84))
  * [`dcc7d39`](https://github.com/containerd/ttrpc/commit/dcc7d39848621e8b22b1ef74095d94908559db98) Remove "Very new" and checked TODO items
* removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82))
  * [`2776d3f`](https://github.com/containerd/ttrpc/commit/2776d3f8573226f4947bf982ecf4e28c1e121825) removing glide from ignore
* go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79))
  * [`849845f`](https://github.com/containerd/ttrpc/commit/849845f63b953af9caddd3186954bffebf722d8e) go.mod: github.com/prometheus/procfs v0.6.0
  * [`3ea5780`](https://github.com/containerd/ttrpc/commit/3ea578089caa347c6a4a539d041f437f719e5ecc) go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63
  * [`4640e27`](https://github.com/containerd/ttrpc/commit/4640e2792cb2f461ff719f82ce5609ba2bbc2e62) go.mod: google.golang.org/grpc v1.27.1
  * [`7c78be3`](https://github.com/containerd/ttrpc/commit/7c78be300bb630a5d8dafbbd8837d05034da6ee9) go.mod: github.com/gogo/protobuf v1.3.2
* remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78))
  * [`88f2525`](https://github.com/containerd/ttrpc/commit/88f25256c07a1b20caf0b36d2417c335f2a8a2d7) CI: add codecov badge to readme
  * [`6773702`](https://github.com/containerd/ttrpc/commit/6773702961f0c431811490d03076f2b5f4d8971c) CI: remove travis
* Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77))
  * [`5bab91b`](https://github.com/containerd/ttrpc/commit/5bab91b0d034bdabcc34b69b0927fecb948ec7c6) Use GitHub Actions for CI
* go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76))
  * [`a2f306d`](https://github.com/containerd/ttrpc/commit/a2f306d78905538a59862cf5a097fbf1ca26d026) go.mod: sirupsen/logrus v1.7.0
  * [`f0fad07`](https://github.com/containerd/ttrpc/commit/f0fad07cf1dc560a74e62ead1c9faac48a1a9662) go mod tidy
</p>
</details>

### Dependency Changes

* **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 **_new_**
* **github.com/Microsoft/go-winio**                                                v0.4.17 -> v0.5.0
* **github.com/Microsoft/hcsshim**                                                 v0.8.16 -> v0.9.1
* **github.com/bits-and-blooms/bitset**                                            v1.2.0 **_new_**
* **github.com/blang/semver**                                                      v3.5.1 **_new_**
* **github.com/cenkalti/backoff/v4**                                               v4.1.1 **_new_**
* **github.com/cilium/ebpf**                                                       v0.4.0 -> v0.6.2
* **github.com/containerd/cgroups**                                                v1.0.1 -> v1.0.2
* **github.com/containerd/console**                                                v1.0.2 -> v1.0.3
* **github.com/containerd/continuity**                                             v0.1.0 -> v0.2.0
* **github.com/containerd/go-cni**                                                 v1.0.2 -> aa8bf14323a5
* **github.com/containerd/ttrpc**                                                  v1.0.2 -> v1.1.0
* **github.com/containernetworking/cni**                                           v0.8.1 -> v1.0.1
* **github.com/containernetworking/plugins**                                       v0.9.1 -> v1.0.1
* **github.com/go-logr/logr**                                                      v0.2.0 -> v0.4.0
* **github.com/golang/groupcache**                                                 8c9f03a8e57e -> 41bb18bfe9da
* **github.com/golang/protobuf**                                                   v1.3.5 -> v1.5.2
* **github.com/google/go-cmp**                                                     v0.5.4 -> v0.5.6
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 **_new_**
* **github.com/grpc-ecosystem/grpc-gateway**                                       v1.16.0 **_new_**
* **github.com/imdario/mergo**                                                     v0.3.11 -> v0.3.12
* **github.com/json-iterator/go**                                                  v1.1.10 -> v1.1.11
* **github.com/moby/spdystream**                                                   v0.2.0 **_new_**
* **github.com/moby/sys/signal**                                                   v0.6.0 **_new_**
* **github.com/opencontainers/image-spec**                                         v1.0.1 -> 5ad6f50d6283
* **github.com/opencontainers/runc**                                               v1.0.0-rc93 -> v1.0.2
* **github.com/opencontainers/runtime-spec**                                       e6143ca7d51d -> 1c3f411f0417
* **github.com/opencontainers/selinux**                                            v1.8.0 -> v1.8.2
* **github.com/pelletier/go-toml**                                                 v1.8.1 -> v1.9.3
* **github.com/prometheus/client_golang**                                          v1.7.1 -> v1.11.0
* **github.com/prometheus/common**                                                 v0.10.0 -> v0.26.0
* **github.com/satori/go.uuid**                                                    v1.2.0 **_new_**
* **github.com/sirupsen/logrus**                                                   v1.7.0 -> v1.8.1
* **github.com/spf13/pflag**                                                       v1.0.5 **_new_**
* **github.com/stretchr/testify**                                                  v1.6.1 -> v1.7.0
* **github.com/vishvananda/netlink**                                               f5de75959ad5 **_new_**
* **github.com/vishvananda/netns**                                                 2eb08e3e575f **_new_**
* **go.etcd.io/bbolt**                                                             v1.3.5 -> v1.3.6
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.24.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.0.1 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.0.1 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.0.1 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.0.1 **_new_**
* **go.opentelemetry.io/otel/trace**                                               v1.0.1 **_new_**
* **go.opentelemetry.io/proto/otlp**                                               v0.9.0 **_new_**
* **golang.org/x/net**                                                             e18ecbb05110 -> e898025ed96a
* **golang.org/x/sync**                                                            09787c993a3a -> 036812b2e83c
* **golang.org/x/sys**                                                             47abb6519492 -> 69cdffdb9359
* **golang.org/x/term**                                                            7de9c90e9dd1 -> 6a3ed077a48d
* **golang.org/x/text**                                                            v0.3.4 -> v0.3.6
* **golang.org/x/time**                                                            3af7569d3a1e -> 1f47c861a9ac
* **google.golang.org/appengine**                                                  v1.6.5 -> v1.6.6
* **google.golang.org/grpc**                                                       v1.27.1 -> v1.41.0
* **google.golang.org/protobuf**                                                   v1.27.1 **_new_**
* **gopkg.in/yaml.v3**                                                             9f266ea9e77c -> 496545a6307b
* **k8s.io/api**                                                                   v0.20.6 -> v0.22.0
* **k8s.io/apimachinery**                                                          v0.20.6 -> v0.22.0
* **k8s.io/apiserver**                                                             v0.20.6 -> v0.22.0
* **k8s.io/client-go**                                                             v0.20.6 -> v0.22.0
* **k8s.io/component-base**                                                        v0.20.6 -> v0.22.0
* **k8s.io/cri-api**                                                               v0.20.6 -> v0.23.0-alpha.4
* **k8s.io/utils**                                                                 67b214c5f920 -> cb0fa318a74b

Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)

containerd 1.6.0-beta.1

Welcome to the v1.6.0-beta.1 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

### Highlights

#### Runtime

* **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744))
* **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813))
* **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817))
* **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011))
* **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031))

#### Windows

* **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131))
* **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778))

#### CRI

* **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695))
* **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619))
* **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627))
* **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964))
* **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130))

#### Other

* **Add a shared namespace label for cross-namespace content sharing** ([#5043](https://github.com/containerd/containerd/pull/5043))
* **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606))
* **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610))
* **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965))
* **Add OpenTelemetry trace injection to grpc client** ([#5992](https://github.com/containerd/containerd/pull/5992))

#### Client

* **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709))
* **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Phil Estes
* Derek McGowan
* Wei Fu
* Akihiro Suda
* Sebastiaan van Stijn
* Maksym Pavlenko
* Mike Brown
* Michael Crosby
* Claudiu Belu
* Kazuyoshi Kato
* AdamKorcz
* zounengren
* Adelina Tuvenie
* Davanum Srinivas
* Kohei Tokunaga
* Brian Goff
* Daniel Canter
* Enrico Weigelt, metux IT consult
* Shiming Zhang
* haoyun
* Alakesh Haloi
* Hajime Tazaki
* Iceber Gu
* Samuel Karp
* Gijs Peskens
* Kevin Parsons
* Aditi Sharma
* Alexandre Peixoto Ferreira
* Cody Roseborough
* Furkan
* Jiaming Xu
* Kir Kolyshkin
* Miao Wang
* Neil Johnson
* Paul "TBBle" Hampson
* Priyanka Saggu
* Sunghoon Kang
* Zhiyu Li
* wanglei
* Alexey Ivanov
* Artem Khramov
* Ben Hutchings
* Cory Bennett
* Dan Williams
* Eng Zer Jun
* Ethan Chen
* Fabiano Fidêncio
* Fupan Li
* Gaurav Gahlot
* Gunju Kim
* Jacob Blain Christen
* Jayme Howard
* Jintao Zhang
* Kaijie Chen
* Kern Walster
* Kitt Hsu
* Lantao Liu
* Ma Xinjian
* Mikko Ylinen
* Ng Yang
* Nicolas Chariglione
* Peri Thompson
* Quan Tian
* Radostin Stoyanov
* Romain Aviolat
* Rui Lopes
* Sambhav Kothari
* Samuel Ortiz
* Sebastian Hasler
* Yang Yang
* Yifan Yuan
* Zilong Wang
* Zufar Dhiyaulhaq
* chenxiaoyu
* jayonlau
* jerryzhuang
* kerthcet
* levinxo
* linrunlong
* scuzhanglei
* wangzhan

### Changes
<details><summary>631 commits</summary>
<p>

* Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144))
  * [`0ccc386c8`](https://github.com/containerd/containerd/commit/0ccc386c86d94314f3c0460be395caadaa69ed49) Prepare release notes for v1.6.0-beta.1
  * [`e5fc3b38e`](https://github.com/containerd/containerd/commit/e5fc3b38ee9f4e1788cac279e56966819f7af920) Update mailmap
  * [`37720fc6f`](https://github.com/containerd/containerd/commit/37720fc6fdae4daf3c79794ad68f0e2c821f617c) Update api vendor
* bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136))
  * [`a217b5ac8`](https://github.com/containerd/containerd/commit/a217b5ac8f66cfdbffd730f16b63f13e313013b8) bump CNI to spec v1.0.0
* Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992))
  * [`294143bf3`](https://github.com/containerd/containerd/commit/294143bf380dbbc706e85387148c02fc2afa496d) Inject otel traces to grpc client.
* client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142))
  * [`cd2f2b0af`](https://github.com/containerd/containerd/commit/cd2f2b0af60f27aff9e7074a1ea523549c2ff47f) client: expose (*image).platform
* Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128))
  * [`3b73922fb`](https://github.com/containerd/containerd/commit/3b73922fba02afef924986309679873996e0654f) feat(doc): add Core Scheduling documentation
* Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130))
  * [`130a9c7dd`](https://github.com/containerd/containerd/commit/130a9c7ddbdd33a95a4b531ff25506d2d1651b20) Ensure namespace is proxied to grpc/ttrpc plugins
* fix #6054  MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109))
  * [`535191abf`](https://github.com/containerd/containerd/commit/535191abf3b3f6a41fe63fc7952f1f72690b2d70) fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
* Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124))
  * [`2a8dac12a`](https://github.com/containerd/containerd/commit/2a8dac12a7629c1c9f1be66c40e6cd5d25d9c70b) Output a warning for label image labels instead of erroring
* Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132))
  * [`c18c2e735`](https://github.com/containerd/containerd/commit/c18c2e73565bbfc7fde6c8462230c4afba33818d) Fix spelling mistake in Windows snapshotter
* Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126))
  * [`ca35f4e82`](https://github.com/containerd/containerd/commit/ca35f4e820b11d329e1824314480b15a2be0d08d) Windows: Cleanup rm- prefixed layers
* cleanup deprecated package  `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118))
  * [`1f1cad391`](https://github.com/containerd/containerd/commit/1f1cad39122548611c82ab3cada8099a0d70a6f6) io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
* close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115))
  * [`46be06937`](https://github.com/containerd/containerd/commit/46be069379bb8b439b05b9e10d01631b097cedb9) close Writer after use which may leak mem
* Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778))
  * [`2bc77b8a2`](https://github.com/containerd/containerd/commit/2bc77b8a2865efe83bc50225223555a919191f54) Adds Windows resource limits support
* Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098))
  * [`1abe50512`](https://github.com/containerd/containerd/commit/1abe5051210ab80d1451fcb19a54efa372d29f4b) Prepare release notes for v1.6.0-beta.0
* Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105))
  * [`c5947557d`](https://github.com/containerd/containerd/commit/c5947557d89e4b1e0a4a89e207f8943af8075f70) Add error message to in TestContainerdRestart integration test
* Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110))
  * [`072a7074b`](https://github.com/containerd/containerd/commit/072a7074b4897aa3b086ce1bae0459eefa13dbd1) Fix typo in the NewContainer function documentation
* Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104))
  * [`18d483b23`](https://github.com/containerd/containerd/commit/18d483b236b2bf999441c2324b70ae52a48a7cb7) Update cgroups to v1.0.2
* btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100))
  * [`ac2df3ba9`](https://github.com/containerd/containerd/commit/ac2df3ba9ad2d26da08395d294abb7c0fa0105e5) test: check file content after mount
* Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107))
  * [`4ed3c524c`](https://github.com/containerd/containerd/commit/4ed3c524cf6d01cf31538b20848675285e6538cd) Update test timeout based on recent cancellations
* Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106))
  * [`d252a293d`](https://github.com/containerd/containerd/commit/d252a293df3d8fc76cb5b141e33d59fc55b94b5a) Remove extra test_teardown
  * [`4a569c889`](https://github.com/containerd/containerd/commit/4a569c8894029c858cbdad2920a85541bc89e35b) Check the pid in cri test teardown
* add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011))
  * [`f1054dbbd`](https://github.com/containerd/containerd/commit/f1054dbbdeb0eac096ba91b7ae892b7104be7c5e) fix integration client vendor
  * [`e48bbe839`](https://github.com/containerd/containerd/commit/e48bbe83949a43dedd3e2727452259f99dd81635) add runc shim support for sched core
* integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579))
  * [`abf4de498`](https://github.com/containerd/containerd/commit/abf4de4985fdf8edf0220a055ff14b9c33c5547c) integration: Enables Windows containerd restart test
* vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099))
  * [`46b152f81`](https://github.com/containerd/containerd/commit/46b152f81be2580e726e478a198b290770225ed7) vendor: Bump hcsshim to 0.9.0
* [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695))
  * [`55893b9be`](https://github.com/containerd/containerd/commit/55893b9be729b7473a717682d6bf99a154c36422) Add CNI conf based on runtime class
* Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102))
  * [`de1a39bf3`](https://github.com/containerd/containerd/commit/de1a39bf32caf2cfb6b8967a3f23cde44ee83992) Update Go to 1.17.2
* integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933))
  * [`7a7a9a282`](https://github.com/containerd/containerd/commit/7a7a9a282c42b6cdfa26f5c515e238d2e782b446) integration: Adds test for multilayer image import
* runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031))
  * [`f7658e37d`](https://github.com/containerd/containerd/commit/f7658e37d94674b8bfaf3206d425f102c5d9b552) runtime: should fail fast if dial error on shim
* Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034))
  * [`791e175c7`](https://github.com/containerd/containerd/commit/791e175c79930a34cfbb2048fbcaa8493fd2c86b) Windows: Fixes Windows containers with image volumes
* run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094))
  * [`3a713811b`](https://github.com/containerd/containerd/commit/3a713811bee3bd813853a0c87763ddf2d804adee) run `gofmt` with Go 1.17
* pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088))
  * [`703b86533`](https://github.com/containerd/containerd/commit/703b86533b3348584124f42e3e39524d3f911121) pkg/cap: remove an outdated comment
* Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066))
  * [`1ee2bff0e`](https://github.com/containerd/containerd/commit/1ee2bff0e02136099cb49c08dab25830e7778535) Update go otel 1.0.1
* Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086))
  * [`c528d2c39`](https://github.com/containerd/containerd/commit/c528d2c39f1c1d6430f7faccc7e6cf8b2938132d) Update ADOPTERS.md with additional uses
* modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082))
  * [`b9a0c5080`](https://github.com/containerd/containerd/commit/b9a0c5080a50e177726c2fdf6eb7cf377d25bfc9) modify the way for checking cos
* Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915))
  * [`65f6a896c`](https://github.com/containerd/containerd/commit/65f6a896c3ec892e4342a117e8dea7250986a098) Fuzzing: Add 4 fuzzers + small modifications
* Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081))
  * [`9734b4039`](https://github.com/containerd/containerd/commit/9734b403939841528f3cee5e057270a49ff153a2) Pin mingw to version 10.2.0
  * [`d19af5afb`](https://github.com/containerd/containerd/commit/d19af5afbfcf91bdd420b0978b48d9f348247739) Update to golang 1.17.1
  * [`3cb0ec01e`](https://github.com/containerd/containerd/commit/3cb0ec01ec86a289aa24ba8979720dc3c91593c3) Install nssm
  * [`3f00006f7`](https://github.com/containerd/containerd/commit/3f00006f72cbf5e6546a68757600c82e6df1f816) Merge pull request from GHSA-c2h3-6mxw-7mvq
  * [`7c621e1fc`](https://github.com/containerd/containerd/commit/7c621e1fcc08bcf5a1a48b837342cc22eada1685) btrfs: reduce permissions on plugin directories
  * [`6886c6a2e`](https://github.com/containerd/containerd/commit/6886c6a2ec0c70dde1aa64e77b64a5ad47b983c3) v1 runtime: reduce permissions for bundle dir
  * [`7d56b24f1`](https://github.com/containerd/containerd/commit/7d56b24f1a9af82dfaa10ff55a4e3c36a7efd943) v2 runtime: reduce permissions for bundle dir
* task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079))
  * [`02e77bcdc`](https://github.com/containerd/containerd/commit/02e77bcdc1e48fb4089dab02d6b67955d48df4ad) task service: return known error type
* refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973))
  * [`50da67359`](https://github.com/containerd/containerd/commit/50da6735923837519d7b8ec0ba997ce890b6de29) refactor: move from io/ioutil to io and os package
* fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076))
  * [`049042382`](https://github.com/containerd/containerd/commit/049042382c1ac5e451e9d1ca24c7f622270609d6) fix: update vendor
  * [`5c2426a7b`](https://github.com/containerd/containerd/commit/5c2426a7b23d209a3ba46bce5ab81ec280e5b3ae) cleanup: import from k8s.io/utils/clock/testing instead
  * [`6484fab1e`](https://github.com/containerd/containerd/commit/6484fab1e020c6cb946e5e82ecd5eb24a9b3ffc6) cleanup: import from k8s.io/utils/clock instead
* feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069))
  * [`d16942cf1`](https://github.com/containerd/containerd/commit/d16942cf16391ddcc17ca06e3fba94af743d05b7) feat: enable cri remote client to call with grpc calloptions
* cleanup k8s ansible yaml (carry for #5713)  ([#6074](https://github.com/containerd/containerd/pull/6074))
  * [`f6b7e07fd`](https://github.com/containerd/containerd/commit/f6b7e07fd318bded1da10bc05d691ad1ae42d522) cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>)
* feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070))
  * [`933ddaa6f`](https://github.com/containerd/containerd/commit/933ddaa6f870e10b1164d7a4a442c0e026ba7975) fix: wrong flag type
  * [`da16d492c`](https://github.com/containerd/containerd/commit/da16d492cd07ee7089aa8b000ba48f494f193147) feat: support import image for specific platform
* Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065))
  * [`67b883146`](https://github.com/containerd/containerd/commit/67b88314619dae55465057fe39b43586bf3b6df7) Update mirror images to take target image name
* fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059))
  * [`e6ddffc2a`](https://github.com/containerd/containerd/commit/e6ddffc2af90ce4fad3db6510911bce849b8c578) fix: make exec-id flag required in exec command
* images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052))
  * [`09c9270fe`](https://github.com/containerd/containerd/commit/09c9270feee1d81044e29c47c3609fb0c1e4d7f5) images: enable converter to uncompress zstd
* replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922))
  * [`694a00754`](https://github.com/containerd/containerd/commit/694a007543fafe751cbfab07093ba1b3ae58f1b6) replace deprecated function
* integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853))
  * [`f42513112`](https://github.com/containerd/containerd/commit/f42513112f65b24668a46a1cae9480f06edfdaec) integration: Adds Windows HostProcess tests
* Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047))
  * [`224454062`](https://github.com/containerd/containerd/commit/2244540628f10d68efa5ac2a8dd80cb667c438b7) Fix main branch build is broken
* Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003))
  * [`45c3453a7`](https://github.com/containerd/containerd/commit/45c3453a7cd997fed9d6d4ea998135e532b5428a) Add open telemetry logging hook for logrus
* Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023))
  * [`50a568595`](https://github.com/containerd/containerd/commit/50a56859514011d35b603b13a264aa217e12cab8) Change oci.WithUser behavior for LCOW
* switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946))
  * [`fcffe0c83`](https://github.com/containerd/containerd/commit/fcffe0c83acea4d201425de763782dfef74c7204) switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
* import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926))
  * [`e087b47e9`](https://github.com/containerd/containerd/commit/e087b47e98d4768085d3ee5c9ceb1aaa7038ec72) import: Raise error if the imported image is filtered out
* Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043))
  * [`b9cf0d75a`](https://github.com/containerd/containerd/commit/b9cf0d75a9f4a8a09ab55caa1983a8988ba4834d) Fix panic in metadata content writer on copy error
* Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001))
  * [`084387e0b`](https://github.com/containerd/containerd/commit/084387e0b4d860b264dfddc62d556b6f0ec702a4) Move tracing to plugin
* ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916))
  * [`6b0b64a51`](https://github.com/containerd/containerd/commit/6b0b64a51a5112954355cc2cb1809bd410e53855) ctr: Fixes Windows image import
* update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017))
  * [`483d2e947`](https://github.com/containerd/containerd/commit/483d2e947fbb3b50339509962200f5e5e1965f7b) go.mod: update opentelemetry modules to v1.0.0
* fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979))
  * [`498e5b27f`](https://github.com/containerd/containerd/commit/498e5b27f7928eab29756f674a161737fe36cabf) fix error string format
* Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036))
  * [`407d60694`](https://github.com/containerd/containerd/commit/407d6069412d7fc563ea45ff46dfcc13e71338e5) Add github action to mirror image
* add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027))
  * [`16f3d67b5`](https://github.com/containerd/containerd/commit/16f3d67b5a804b3a32a5df6318531768a654ef8c) add current process state to the error message
*  FreeBSD: fix tar headers & the nil check on getxattr  ([#5991](https://github.com/containerd/containerd/pull/5991))
  * [`2bffb5f9b`](https://github.com/containerd/containerd/commit/2bffb5f9b234bff72739f48f7d027b47a178a9ae) FreeBSD: fix tar headers & the nil check on getxattr
* gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035))
  * [`97df73004`](https://github.com/containerd/containerd/commit/97df73004e4b9d7c632f4889f889fd6b330a9e40) gha: collect Vagrant VMs' IP addresses
* bump continuity and console version  that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033))
  * [`7854e0bff`](https://github.com/containerd/containerd/commit/7854e0bffe7e95fc8002f2150caef96f4d858a48) bump continuity and console version that remove pkg/errors
* import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997))
  * [`6875aa5d3`](https://github.com/containerd/containerd/commit/6875aa5d3737d7ff87220ffd53275ef37d323d0e) import: Add option to skip creating digest image
* ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998))
  * [`16d3f48a2`](https://github.com/containerd/containerd/commit/16d3f48a2e13fa820431d09825e5b8a566b11360) ctr namespaces: improve usage string
* bump console version to v1.0.3 that remove pkg/errors  ([#6028](https://github.com/containerd/containerd/pull/6028))
  * [`a68fb7add`](https://github.com/containerd/containerd/commit/a68fb7addb79c31602fd2cbcad3c29cb1333aa66) bump console version to v1.0.3 that remove pkg/errors
* Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032))
  * [`3e72e335f`](https://github.com/containerd/containerd/commit/3e72e335fe6e03aecdc93e07d0162090319c4156) Use github images for integration tests
* Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995))
  * [`8596d1188`](https://github.com/containerd/containerd/commit/8596d11886b4afe4323b24e645858bc48753f18e) Fix typo
* Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012))
  * [`f40df3d72`](https://github.com/containerd/containerd/commit/f40df3d72ba85700c737aca2cb21212d8f0caaed) Enable image config labels in ctr and CRI container creation
* Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970))
  * [`2fecf5b02`](https://github.com/containerd/containerd/commit/2fecf5b02e95cdf4ee5babd065b2c52d6aadbe18) Make sure exit signals trigger an exit during init
* task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974))
  * [`55faa5e93`](https://github.com/containerd/containerd/commit/55faa5e93d7fdacc7d9b28ee79a0972ec18e3471) task delete: Closes task IO before waiting
* CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985))
  * [`f700ae873`](https://github.com/containerd/containerd/commit/f700ae8732c42cad41cf5628884610b3f95a464d) CI: bump up crun to 1.0
* seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982))
  * [`55923daa9`](https://github.com/containerd/containerd/commit/55923daa9f56c8a890875f1e111201d918b382e2) seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990))
  * [`73dbbf5bf`](https://github.com/containerd/containerd/commit/73dbbf5bfa4ff2c9a2f6c91dc7c4dc29ace5fa4c) Update to Go 1.17.1
* CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987))
  * [`6d961f967`](https://github.com/containerd/containerd/commit/6d961f96736d7b471b3cdc47c76bd8bd58a6e3a9) CI: Switch to available latest images
* add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610))
  * [`91b64c58b`](https://github.com/containerd/containerd/commit/91b64c58b128a8268fdbb3f03b2f238766be55cf) add xfs support to devicemapper snapshotter
* Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956))
  * [`57e10439d`](https://github.com/containerd/containerd/commit/57e10439d9d1d66492ae55e48af713d9a7a4c6f8) Fixes task kill --force on Windows
* Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817))
  * [`8d135d284`](https://github.com/containerd/containerd/commit/8d135d28420a1f8aa7ce8bb2f56103555f380a5f) Add support for shim plugins
* vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976))
  * [`8ff8b1b82`](https://github.com/containerd/containerd/commit/8ff8b1b8236329457345350e6123cf0ef865a30f) vendor: update continuity for darwin support
* replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906))
  * [`2ac996840`](https://github.com/containerd/containerd/commit/2ac996840187b2e42fdbe4e4c9b6b55a7c775c43) replace uses of os/exec with golang.org/x/sys/execabs
* complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972))
  * [`16cd6ed13`](https://github.com/containerd/containerd/commit/16cd6ed137d8f6397def9e63a15ac8761a8c1cda) Additional integration tests for pulling image with labels
* Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966))
  * [`2458afeb1`](https://github.com/containerd/containerd/commit/2458afeb131b8942907b1c62a9b1751387e2ed08) Fix content copy to not ignore unexpected EOF
* add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964))
  * [`1efed4309`](https://github.com/containerd/containerd/commit/1efed43090fcb24eb138acf318b9edef91d22007) add ip_pref CNI options for primary pod ip
* cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939))
  * [`756f4a314`](https://github.com/containerd/containerd/commit/756f4a3147d6fde2f69077ae1805dacde886bf89) cri: add devices for privileged container
* sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954))
  * [`24cec9be5`](https://github.com/containerd/containerd/commit/24cec9be560c44bf7ab3135836ebf9caddbf7c61) sandbox: Allows the sandbox to be deleted in NotReady state
* pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969))
  * [`9954147c0`](https://github.com/containerd/containerd/commit/9954147c0343639c538cc77416022e263090be80) pin protobuild version to tag
* Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965))
  * [`6bec0d39b`](https://github.com/containerd/containerd/commit/6bec0d39b043c8cc9de3df9d7a8b6c8611fe348e) use a const metric for build_info
  * [`ae27a6b05`](https://github.com/containerd/containerd/commit/ae27a6b05ce42bd0c3e794ae46e9a1d9f0cb37f0) Add metric exposing build version&revision
* Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627))
  * [`f8dfbee17`](https://github.com/containerd/containerd/commit/f8dfbee17888240616a57a724fa34bef4357092d) add cri test case
  * [`9a8bf1315`](https://github.com/containerd/containerd/commit/9a8bf13158e469e284757bc9f88796439817423b) feature: add field LinuxContainerResources.Unified on cri
* integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861))
  * [`f7b1ceb9f`](https://github.com/containerd/containerd/commit/f7b1ceb9f666c7a142f139a3306c8163866a280e) integration: investigate TestRestartMonitor's failure
* Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917))
  * [`278176db1`](https://github.com/containerd/containerd/commit/278176db151b3559a73ffa5bcdfe3b025a5abae6) Address issue forms feedback
  * [`11ab3cba0`](https://github.com/containerd/containerd/commit/11ab3cba0e161f66f5d5bfdf680055c9b82533ce) Use issue forms for bug reporting
* cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945))
  * [`2bcd6a4e8`](https://github.com/containerd/containerd/commit/2bcd6a4e8837d14a7b980349281c7508a701e4ab) cri: patch update image labels
* darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936))
  * [`a43fa9f28`](https://github.com/containerd/containerd/commit/a43fa9f284e5f0a4c50f65f80a88a3a91d3e5f75) darwin: runtime support
  * [`5dd38792a`](https://github.com/containerd/containerd/commit/5dd38792a82e1f7bb0579263e8854a8b373371e4) darwin: use the default values for socketRoot variable
* Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858))
  * [`7826a21ac`](https://github.com/containerd/containerd/commit/7826a21ac6319a033fdf7573f2a17d2507a69f2f) Update RELEASES.md
* archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949))
  * [`ccc5ee303`](https://github.com/containerd/containerd/commit/ccc5ee303892023081a880ffc32bbd8ebf56461d) archive: Add WriteDiff error logs
* replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958))
  * [`8e850bc0f`](https://github.com/containerd/containerd/commit/8e850bc0feeba4910bf6e8f079b6c5ca5f34d199) replace deprecated Dail with DailContext
* Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951))
  * [`aeea697d8`](https://github.com/containerd/containerd/commit/aeea697d84f214ab99b542fa5e695b9369e3ca0b) Add WS2022 support in Windows Periodic tests
* Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943))
  * [`96ec0b6f3`](https://github.com/containerd/containerd/commit/96ec0b6f34c05d26de4d9433b45a3493e16fc28e) content fuzzer: Clean up tempdir
* using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944))
  * [`789abc936`](https://github.com/containerd/containerd/commit/789abc9367b27506f6559f60448018134881630f) using Hosts replace deprecated field
* fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947))
  * [`820bd9269`](https://github.com/containerd/containerd/commit/820bd926906f60e19a62b7eb809053fe3e75818c) fix document non-synchronous in crictl.md
* go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929))
  * [`1dd0d59b7`](https://github.com/containerd/containerd/commit/1dd0d59b7386d9f2ae44fdcabcce21f8bf3b4900) go.mod: Update hcsshim to v0.8.21
* Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937))
  * [`eb2530be8`](https://github.com/containerd/containerd/commit/eb2530be8434a63e5358b6aa52cd3b76054bc31a) Makefile.linux: build on riscv with PIE
* Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932))
  * [`27046a9e0`](https://github.com/containerd/containerd/commit/27046a9e06de44ecc4b1662ca43977cc2d6c789e) Fix cwd flag for `ctr tasks exec`
* Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927))
  * [`6d3d34b85`](https://github.com/containerd/containerd/commit/6d3d34b85d5aa4c32e350f36693507d6e0c1c0fc) Update Pause image in tests & config
* cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122))
  * [`e0f8c04da`](https://github.com/containerd/containerd/commit/e0f8c04dad213975bf55dcfa71986be6d8b489e2) cri: Devices ownership from SecurityContext
* Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921))
  * [`7bc5aa74c`](https://github.com/containerd/containerd/commit/7bc5aa74c2cf054b8e5a7982cad073c252fb5f4a) Fix pull fails on unexpected EOF
* Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845))
  * [`838afd211`](https://github.com/containerd/containerd/commit/838afd21161c0c43fbb28f3b71b8ad1e37fe63fd) Adding testing of two devices
  * [`7fba86264`](https://github.com/containerd/containerd/commit/7fba862648b2ee70a351441f0e910274937ea04b) Fix dir support for devices V3 (#4847)
* windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914))
  * [`e2c769d6f`](https://github.com/containerd/containerd/commit/e2c769d6fb17391df70bd658e1573360d4ccbb7b) windows: The DefaultSpec platform should match the Default matcher
* Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865))
  * [`25644b461`](https://github.com/containerd/containerd/commit/25644b4614d607199befa3c83c86540496a6e4f9) Add RunAsUserName functionality for the Windows Pod Sandbox Container
* bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899))
  * [`e18516767`](https://github.com/containerd/containerd/commit/e185167677649b751fd04c18c71ea39f4deda114) go.mod: update runc to v1.0.2
  * [`3f8ea1b6a`](https://github.com/containerd/containerd/commit/3f8ea1b6a1755a7c09addbcdabceb9b2eecc2ff7) update runc binary to v1.0.2
* Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903))
  * [`d3aa7ee9f`](https://github.com/containerd/containerd/commit/d3aa7ee9f065d5d8773b4b38124ad6e3d6634dc2) Run `go fmt` with Go 1.17
* go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905))
  * [`429296910`](https://github.com/containerd/containerd/commit/429296910658a0b4c892fd01c65df7d3f1202b3e) go.mod: github.com/pelletier/go-toml v1.9.3
* cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902))
  * [`c3609ff4c`](https://github.com/containerd/containerd/commit/c3609ff4ca0c1e2c4b713db65a63faefca5786db) cri: filter selinux xattr for image volumes
* Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131))
  * [`79b369a0b`](https://github.com/containerd/containerd/commit/79b369a0bb9d79bf2c397d2bed771fca9144b46e) Added windows hostProcess cni skip
* script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897))
  * [`4dd5ca70f`](https://github.com/containerd/containerd/commit/4dd5ca70fb0948299d52fddc115e999ce8fc143b) script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
* Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889))
  * [`9fe7bc938`](https://github.com/containerd/containerd/commit/9fe7bc938b1264844e3434e501c7c817c1956ea4) Bump integration timeout to 35 min
  * [`f8602c372`](https://github.com/containerd/containerd/commit/f8602c3725c55938c6b4ca3440ef07e6c3f28ba4) Update to Go 1.17
* integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896))
  * [`acb81bbda`](https://github.com/containerd/containerd/commit/acb81bbdaf35524ea020d81607ab62dd8bb718ed) integration: fix TestContainerPids
* [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891))
  * [`6f60b3016`](https://github.com/containerd/containerd/commit/6f60b3016f126d06717cd296b86dce0679b61d2c) [ctr] add HOSTNAME env for host network
* Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886))
  * [`c9b1b2fd5`](https://github.com/containerd/containerd/commit/c9b1b2fd5b6ec9d434a4baf3c091a31bfa039934) Fuzzing: Add fuzzer
* Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884))
  * [`9e1b57ca0`](https://github.com/containerd/containerd/commit/9e1b57ca0161c4081bbc899db32b665d3d38bc94) Add env for SystemdCgroup driver
* Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878))
  * [`1224060f8`](https://github.com/containerd/containerd/commit/1224060f8928ef58c8d480bc7763a09b19427413) Allow expanded DNS configuration
* Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863))
  * [`538d93d2f`](https://github.com/containerd/containerd/commit/538d93d2fcab530f525687a90521d30c00965df8) Fuzzing: Add 4 fuzzers
* Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813))
  * [`d30d897ef`](https://github.com/containerd/containerd/commit/d30d897ef93e7838f0c0828e0e85619b93331131) Cleanup v2 shim
* Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840))
  * [`5e49ec27d`](https://github.com/containerd/containerd/commit/5e49ec27dc4ff4f619453578a624d8cc35b21630) Use http.Get to download binaries instead of exec.Command
  * [`11a90c7ff`](https://github.com/containerd/containerd/commit/11a90c7ff4b59ba4a0d639c74fe8eb0fa0761f85) Fuzzing: Add experimental version of container fuzzer
* add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846))
  * [`d2f3b7146`](https://github.com/containerd/containerd/commit/d2f3b71468f385e535e6db31b430bfeeb973dead) add cpu-shares to ctr
* docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847))
  * [`bc4cea4e4`](https://github.com/containerd/containerd/commit/bc4cea4e44d5d219a5f6bba0654e6918ccd2a2bb) docs: rename main to master
* content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849))
  * [`a3d6edc0e`](https://github.com/containerd/containerd/commit/a3d6edc0eddeb380dceed84884a78b5dc621023b) content: return the error with its timestamp
* Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857))
  * [`82fe0db9a`](https://github.com/containerd/containerd/commit/82fe0db9aa83d94c04761ee9907befb5d1e61597) Fix bad `make protos` failure
* replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851))
  * [`30b832e49`](https://github.com/containerd/containerd/commit/30b832e494ebaa244d2321299dc0d3072eae4044) archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
* docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856))
  * [`1c47fb17f`](https://github.com/containerd/containerd/commit/1c47fb17f3b0c3da9ff45960487f93fc03ba1bf4) docs: remove FOSSA's badge
* BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850))
  * [`9cc179aa7`](https://github.com/containerd/containerd/commit/9cc179aa773b3aa09de03934c8850a770d7aa71b) BUILDING.md: remove some bits about building runc
  * [`42b57cc73`](https://github.com/containerd/containerd/commit/42b57cc730e6283b5f64563e90a7201d47d9a354) BUILDING.md: markdown fixes
* go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836))
  * [`e634f04d8`](https://github.com/containerd/containerd/commit/e634f04d8cdb6c2f96eea2e4e66d0e4500a46282) go.mod: update kubernetes to v1.22.0
* [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852))
  * [`e6538b8bc`](https://github.com/containerd/containerd/commit/e6538b8bce1814471af2cd3467d5f4c6e863cb08) Add trap to cri-integration test script
* docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848))
  * [`a5468852f`](https://github.com/containerd/containerd/commit/a5468852f8123ada3757db9b608cd6648285d835) docs: list all snapshotter-related build flags
* Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835))
  * [`0a0621bb4`](https://github.com/containerd/containerd/commit/0a0621bb47d48d8cbcbb614ee38422ce8b98a340) Move plugin context events into separate plugin
* Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839))
  * [`534685f95`](https://github.com/containerd/containerd/commit/534685f9558cc67125156ba2fbdd0e0ade74cc33) Fix Linux CI Linter using go 1.15.14
* Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842))
  * [`42a28ad2c`](https://github.com/containerd/containerd/commit/42a28ad2ca7faecfa3e2024952781136211c1fbf) Update Go to 1.16.7
* Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838))
  * [`10eab21a4`](https://github.com/containerd/containerd/commit/10eab21a4d4f47b2eb63a83e3675d151277a430a) Cleanup CI
* Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834))
  * [`6f027e38a`](https://github.com/containerd/containerd/commit/6f027e38a8e705a05ccc7031afb39b53a358b958) Remove redundant build tags
* Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830))
  * [`7917da764`](https://github.com/containerd/containerd/commit/7917da764c6d6b0851f3adf1ef2346d62c88a1d0) Change default directories on Darwin
* [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731))
  * [`3c5424454`](https://github.com/containerd/containerd/commit/3c5424454b60e775829c2e9b56be53a6af42fa90) [otel-tracing] vendor and go modules changes
  * [`3597ac859`](https://github.com/containerd/containerd/commit/3597ac859d3fc79f250e5d0f1664fb9db9143898) [otel-tracing] Initial opentelemetry support
  * [`10824eaf2`](https://github.com/containerd/containerd/commit/10824eaf2ea46e3be7e4ac29a9ae6de11ec21093) remove go 1.13 from containerd
* Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829))
  * [`c3c276ae1`](https://github.com/containerd/containerd/commit/c3c276ae1c3c322b192539980ce4973f452fd0a2) Fuzzing: Fix for OSS-fuzz issue 36825
* Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825))
  * [`41a04246f`](https://github.com/containerd/containerd/commit/41a04246f414f43080c9f0c9944516bd5855b209) Fuzzing: Add two more fuzzers
* scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760))
  * [`6c257552a`](https://github.com/containerd/containerd/commit/6c257552a72a49f75114c01401d3703f880ac054) scripts: declare ROOT closer to where it's used, and some DRY changes
  * [`dba0ef4eb`](https://github.com/containerd/containerd/commit/dba0ef4eb58e87cd3c6ab5a0e93f39ff1703b6eb) scripts: add missing quotes, and minor linting issues
  * [`0cb656860`](https://github.com/containerd/containerd/commit/0cb656860fabd4ad4d4ac93b4b0e2d88270fd231) test/build-utils.sh: remove support for Debian Jessie
* platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821))
  * [`f2c3122e9`](https://github.com/containerd/containerd/commit/f2c3122e9c6470c052318497899b290a5afc74a5) platforms: Format(): use path.Join() instead of joinNotEmpty()
* Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823))
  * [`2c699cc35`](https://github.com/containerd/containerd/commit/2c699cc35095476ddae077a459cbcf8962b51050) Fuzzing: Remove panics of container_fuzzer
* Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785))
  * [`acecd6603`](https://github.com/containerd/containerd/commit/acecd660311216c91d13435d561a854eb5e4c580) Change protoc link
  * [`cc88f8e0a`](https://github.com/containerd/containerd/commit/cc88f8e0ae82d08ccf821f9f1de4c180afb8e6ca) Split fuzzer to two fuzzers
  * [`6294235d8`](https://github.com/containerd/containerd/commit/6294235d8137424862def12cf3cf6267b3597dfc) Fuzzing: Add container fuzzer
* runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746))
  * [`4ab3e7a53`](https://github.com/containerd/containerd/commit/4ab3e7a53a15cf0bc311179994f339760365dd97) runtime: fix the issue of create new socket with abstract address
* mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809))
  * [`ce437864b`](https://github.com/containerd/containerd/commit/ce437864b2e7e2f9b94e02ba564e010a5ea2248d) mergo: Upgrade to 0.3.12 to fix panic
* ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802))
  * [`d1e868c83`](https://github.com/containerd/containerd/commit/d1e868c832d42f443dbd55118b2eff9aa92b021a) ci: install criu from PPA
* Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144))
  * [`d62d6c11d`](https://github.com/containerd/containerd/commit/d62d6c11dc381f9a4b3301329a20ccf3babcc604) Split release steps into multiple tasks
  * [`b4807122d`](https://github.com/containerd/containerd/commit/b4807122d29370c79272f8d982e9c408736a4932) Update release workflow to upload binary without CNI
* Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725))
  * [`23bc3db91`](https://github.com/containerd/containerd/commit/23bc3db914c30b133e5fa037fc2a3242f7329fc7) Enable critest on Windows
* Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792))
  * [`43117cf91`](https://github.com/containerd/containerd/commit/43117cf9193ab81fc3c178c0bef1d4ca49259c94) Script to check if entries in go.mod files are in sync
* Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043))
  * [`e692a0192`](https://github.com/containerd/containerd/commit/e692a01926cd296f3b77ee7f6ba1308b5ecd6aca) Add shared content label to namespaces
* platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784))
  * [`2405671d4`](https://github.com/containerd/containerd/commit/2405671d4089626f224473936e793fee19905d90) platforms: add "ios" as known OS, "loong64" as known ARCH
* Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804))
  * [`3a8622e30`](https://github.com/containerd/containerd/commit/3a8622e309d9f75e0c12fd43a31d95127ff341be) Updates the location of protobuf downloads in docs
* Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803))
  * [`0d9393650`](https://github.com/containerd/containerd/commit/0d939365079d91e82549c808fde1ba70cf0cdea3) Update protobuf install to use correct repository
* overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624))
  * [`67406b373`](https://github.com/containerd/containerd/commit/67406b3732b3139ea2f825541e5c84d46ffd5e04) overlay: add an optional label of upperdir location of each snapshot
* Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693))
  * [`1d3d08026`](https://github.com/containerd/containerd/commit/1d3d08026d25797b81ec1d385119dffa04a2ad46) Support SIGRTMIN+n signals
* respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800))
  * [`7a10fd4fc`](https://github.com/containerd/containerd/commit/7a10fd4fccb93a04b80352fea71fc1095d742b7f) respect context timeout in shim binary call
* Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716))
  * [`494b940f1`](https://github.com/containerd/containerd/commit/494b940f1475cb393d8f6ec8474eaeb50d022231) Introduce a new go module - containerd/api for use in standalone clients
* grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606))
  * [`63fe34add`](https://github.com/containerd/containerd/commit/63fe34add6997ba54d9bb0c6b2d7066efa2453c1) grpc config add options tcp_tls_ca
* integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162))
  * [`16deba098`](https://github.com/containerd/containerd/commit/16deba098c90a99e7948f16ffd4a49a5bbe9526d) integration: Windows volume-copy-up images
* add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795))
  * [`4fdb88464`](https://github.com/containerd/containerd/commit/4fdb884644ecdd6a4b4b0d1bd85b8f6ccc1995c6) add CRI support matrix to RELEASES.md
* adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794))
  * [`b5fc7846c`](https://github.com/containerd/containerd/commit/b5fc7846c465c10d9dfd4f0c150571c78e1a12b2) adding a little more clarity
* update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793))
  * [`18d6cc1b0`](https://github.com/containerd/containerd/commit/18d6cc1b06ad1ff8fb7def3a667f8bfe68e83e70) update gotestsum to v1.7.0
* Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756))
  * [`f1d79d33b`](https://github.com/containerd/containerd/commit/f1d79d33b8479ddfa741e61b83dffda259fa16aa) Discard blocks when removing a thin device
* Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590))
  * [`2bb8ad7c9`](https://github.com/containerd/containerd/commit/2bb8ad7c9ea4f626527a33dce51b89d3278194a2) Makefile: pass build tags to manpage build process
  * [`f60d447c1`](https://github.com/containerd/containerd/commit/f60d447c16991a183853cce58d21d88351cb0f16) Makefile: fix tags parameter computation
* Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744))
  * [`efa8ab715`](https://github.com/containerd/containerd/commit/efa8ab7158ea806e5ef2c9460187ec75eabab06e) Add runtime label to metrics
* interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745))
  * [`0d45ac14e`](https://github.com/containerd/containerd/commit/0d45ac14e92a9b63f7e31dab5a9325b26e8a3e12) interface about shim build check
* integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775))
  * [`00d52bb15`](https://github.com/containerd/containerd/commit/00d52bb159e091d1dee79e7b4c809662fe8f4e4d) integration: log all processes to investigate the test failure
* Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779))
  * [`2556aac67`](https://github.com/containerd/containerd/commit/2556aac6751829f7f219c4ddc3f5d4630c1dda07) Fuzzing: Add archive fuzzer
* Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687))
  * [`0789a0c02`](https://github.com/containerd/containerd/commit/0789a0c02b78d70cc06c9c8f86d9a128f2b9d46c) Add docker fetch fuzzer
* Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735))
  * [`b483177ee`](https://github.com/containerd/containerd/commit/b483177ee2089fd8284258840e2526370c15eab3) Support custom compressor for walking differ
* remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770))
  * [`53ec1abec`](https://github.com/containerd/containerd/commit/53ec1abec228e5121d5de4acaab08ed26ad70b9c) remotes/docker/pusher.go: Fix missing Close()
* remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769))
  * [`67d07fe5c`](https://github.com/containerd/containerd/commit/67d07fe5cf4f165396872499b3d36ee5cba6774d) remotes/docker/fetcher.go: Fix missing Close()
* Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771))
  * [`d2b6d192d`](https://github.com/containerd/containerd/commit/d2b6d192db18655e0930bd3c8051947873ed39b1) Update cpuguy83/go-md2man binary to v2.0.1
* Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750))
  * [`9537bc265`](https://github.com/containerd/containerd/commit/9537bc2654869bbc6fc4b740a674acfbcec9ab00) Dockerfile.test: build containerd in separate stage
  * [`36be5ef3a`](https://github.com/containerd/containerd/commit/36be5ef3a26d5db8f487514e06179a17d7771b49) Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
  * [`8faacfca1`](https://github.com/containerd/containerd/commit/8faacfca1647e6b8d2d37e35f11d0cf9bd5d42f6) Dockerfile.test: clean up apt indexes after installing
  * [`9f7e6335c`](https://github.com/containerd/containerd/commit/9f7e6335c46f9a46cfe2f0955759842b095addc4) Dockerfile.test: build critools in a separate stage
  * [`7ec8e2d36`](https://github.com/containerd/containerd/commit/7ec8e2d369606e870875f52a116ca2bf32e7317d) Dockerfile.test: build cni in a separate stage
  * [`f9f423c07`](https://github.com/containerd/containerd/commit/f9f423c078f3b106fe1a87fd60c86eb2d606e2bf) Dockerfile.test: standard directory to collect build aftifacts
  * [`e9f26eb87`](https://github.com/containerd/containerd/commit/e9f26eb877faf37dd0b6f33fe1292970b6183fd1) Dockerfile.test: split dev stage, and optimize order
  * [`25fada0cc`](https://github.com/containerd/containerd/commit/25fada0cc7082d3f6c2e54e58e1794234a605daf) Dockerfile.test: skip curl, gcc, git and make install
  * [`546538971`](https://github.com/containerd/containerd/commit/546538971cbde5c9fd95da32d0d77daba63c72ad) install-critools: make sure DESTDIR exists
* update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754))
  * [`603962bc8`](https://github.com/containerd/containerd/commit/603962bc81deb197350ee5144dad862d062eb964) update gotestsum to current master
  * [`51a8f969b`](https://github.com/containerd/containerd/commit/51a8f969bd5b4e5759ad11327820536648153cfd) Merge pull request from GHSA-c72p-9xmj-rx3w
  * [`bc4e416c8`](https://github.com/containerd/containerd/commit/bc4e416c88670e4409917a18bc3da50e48b401de) Add test for archive breakout test for lchmod
* Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755))
  * [`150e07b64`](https://github.com/containerd/containerd/commit/150e07b648e7766ca862ee868bf99544d0836e89) Use systemd cgroup driver for cgroupv2 tests
* update runc  to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751))
  * [`a12c7bd1c`](https://github.com/containerd/containerd/commit/a12c7bd1cf18b719416932bbdcbb6e6219b1f1d4) go.mod: runc v1.0.1
  * [`43e0594ae`](https://github.com/containerd/containerd/commit/43e0594ae93be1b4629da91d25c4a830c91924a2) update runc binary to v1.0.1
* runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737))
  * [`dbef1d56d`](https://github.com/containerd/containerd/commit/dbef1d56d7ebc05bc4553d72c419ed5ce025b05d) runtime: runc v2: remove redundant validation
* Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727))
  * [`18321f539`](https://github.com/containerd/containerd/commit/18321f539ce5f78e5db034ce0af73076ea4f11b0) Move loop check to before sleep
  * [`2e8a572df`](https://github.com/containerd/containerd/commit/2e8a572dfd6cc170ed60a45d7d1180d56958eb12) Add timestamp to flaky restart monitor test
* Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722))
  * [`55fd2ab5d`](https://github.com/containerd/containerd/commit/55fd2ab5d6efe01fd12e3ff58bece7ea358b18d3) integration/client: go mod tidy
  * [`e72046f86`](https://github.com/containerd/containerd/commit/e72046f86bc54dfda54fdd9b17955ecae4232cca) Update Go to 1.16.6
* client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447))
  * [`73d28ddeb`](https://github.com/containerd/containerd/commit/73d28ddeb27a5532df084035199c9ad5ed2f69fe) client: surface a connection error more clearly
* Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712))
  * [`894b6ae39`](https://github.com/containerd/containerd/commit/894b6ae39b9266411d0d4e6325235390c06fc0ab) Fix missing Body.Close() calls on push to docker remote
* remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710))
  * [`ac75071b4`](https://github.com/containerd/containerd/commit/ac75071b49cbc69dc4eb7734316e5129b01562e4) remove pkg/cri/platforms package
* Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709))
  * [`0a8802df6`](https://github.com/containerd/containerd/commit/0a8802df67c3e2770ba787c9a0f6bcd41de6b34d) Allow WithServices to use custom implementations
* [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673))
  * [`a81f05f36`](https://github.com/containerd/containerd/commit/a81f05f3602a2b1eee9bff12ce9b985d16aadb60) [Vendor] Update hcsshim to 0.8.18
* test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578))
  * [`04ab4418f`](https://github.com/containerd/containerd/commit/04ab4418fdac4f85cc3b510bc297e06550175c90) test integration: Adds a test that restarts a failed container
* [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619))
  * [`d1c105192`](https://github.com/containerd/containerd/commit/d1c10519278560bbdf220dc72843e344d1a05743) use fu wei's suggeted interface pick for marshaling
  * [`14962dcbd`](https://github.com/containerd/containerd/commit/14962dcbd23790681431838f1efc8b7fe7012157) add alpha version
  * [`a5c417ac0`](https://github.com/containerd/containerd/commit/a5c417ac060f29dad343573674f879d59fc0b9ef) move up to CRI v1 and support v1alpha in parallel
* gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682))
  * [`4c6e4a06f`](https://github.com/containerd/containerd/commit/4c6e4a06ff8f7ef1ab28c67a97fe6bd0f79d73a8) gha: make release workflow work in forks
* Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666))
  * [`3a0b9ec6b`](https://github.com/containerd/containerd/commit/3a0b9ec6bbabeab2f2cb962f62a52d875365793a) Add unit test for plugin
* Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700))
  * [`aefabe546`](https://github.com/containerd/containerd/commit/aefabe5462a0080fa3e7817d33db6dd9a8e95d2d) Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
* Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676))
  * [`a7ad6b3be`](https://github.com/containerd/containerd/commit/a7ad6b3be5bfad7ab77b2801e52663a2eb43e270) Add support for registry host path override
  * [`95c708572`](https://github.com/containerd/containerd/commit/95c708572f2d65b85ebbb3648f34fd531c7b6f36) Update documenation for OCI distribution 1.0
* archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702))
  * [`53835221f`](https://github.com/containerd/containerd/commit/53835221f6b8fc496dbd2332fd48cd58a79f6f2b) Cleanup lchmod logic in archive
* Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571))
  * [`419d616fe`](https://github.com/containerd/containerd/commit/419d616fec5f24ee61a0a113a899e78a6e49a850) Install specific golang version in Windows CI.
* Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660))
  * [`bda7b5866`](https://github.com/containerd/containerd/commit/bda7b58666b9b8e01342a36317cffe9fdf1f7aa3) feat: Add snapshotter label to the new snapshot for container.
* snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655))
  * [`03ee45006`](https://github.com/containerd/containerd/commit/03ee450060dff5440fc02e8c88752c8314a8714f) snapshot/devmapper: log exported methods correctly
* Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662))
  * [`2019a1e68`](https://github.com/containerd/containerd/commit/2019a1e68f7488bdc0975062cbbd933b53595714) Makefile: fix DESTDIR and PREFIX concatenation
* Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287))
  * [`cabe67736`](https://github.com/containerd/containerd/commit/cabe67736941fa4fa1a6fc54b0045891ecc28733) tests: Use EnsureImageExists for image pulling
  * [`a78bdf22d`](https://github.com/containerd/containerd/commit/a78bdf22df22b0904e843e579f3088472cb52685) tests: Refactors PodSandbox creation
* move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641))
  * [`a964cf0cc`](https://github.com/containerd/containerd/commit/a964cf0cc4beabfd5cc50e970581d79f195ca4c0) un-export mount.FMountat
  * [`21f532d51`](https://github.com/containerd/containerd/commit/21f532d51891087f850ef3a7ed7e737c8c95b88a) move sys.FMountat() into mount package
* sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640))
  * [`dac2543a0`](https://github.com/containerd/containerd/commit/dac2543a07b788f908cde037a133902bebf605d2) sandbox: send pod UID to CNI plugins as K8S_POD_UID
* sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639))
  * [`5a0beaefb`](https://github.com/containerd/containerd/commit/5a0beaefbb64190696f8e634d037bc9047e6f4ac) sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
* content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633))
  * [`63c185da9`](https://github.com/containerd/containerd/commit/63c185da9ad38fabb842aee2fbdefae2f4e5b946) content/local: inline sys.StatATimeAsTime()
* allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636))
  * [`09d78bb6b`](https://github.com/containerd/containerd/commit/09d78bb6b9e8b173f44f5ba3abaee0de416b0ee0) allow multi gpu to be specified via ctr
  * [`f913a4275`](https://github.com/containerd/containerd/commit/f913a42755663e4e7f855dcfe37bad64887a9058) go.mod: runc v1.0.0
  * [`28bb59c08`](https://github.com/containerd/containerd/commit/28bb59c080ce671c8e89829844f95c871eb41393) update runc binary to v1.0.0 GA
* fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629))
  * [`560e7d479`](https://github.com/containerd/containerd/commit/560e7d479923dd7b1b0249375abf202054bf7ed4) fixing some doc links
* Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623))
  * [`d9694b297`](https://github.com/containerd/containerd/commit/d9694b2976a5181121f54690867a53c29dde6552) Sync integration/go.mod with root go.mod
* archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615))
  * [`4a46ea2f4`](https://github.com/containerd/containerd/commit/4a46ea2f4b55a2e4e694ecc6f93389421053dc6a) archive: Expose ChangeWriter to allow customized diff computing
* CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625))
  * [`cd33c007c`](https://github.com/containerd/containerd/commit/cd33c007cecdee2c8e5333190cad1bbce4ade13d) CI: Switch to available latest images
  * [`75b4c83f0`](https://github.com/containerd/containerd/commit/75b4c83f04d5f4fb148b5f498584af8854581083) fix deprecation config for default runtime
* Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614))
  * [`394f86475`](https://github.com/containerd/containerd/commit/394f864750ed0ffea980d713b179a53e070a9d78) Re-enable criu in main integration runs
* runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617))
  * [`87a2e0b2a`](https://github.com/containerd/containerd/commit/87a2e0b2a2d58c19e26d96ebcefc982505316081) runtime,v2: Enable debug when containerd is on debug+ log level
  * [`1bbee573a`](https://github.com/containerd/containerd/commit/1bbee573af72ee63ec67483a836f6e5cdcf9850d) github.com/golang/protobuf/proto is deprecated
  * [`91c8fa452`](https://github.com/containerd/containerd/commit/91c8fa4529f335c34dffc56e15c54054e97ac69e) Update github.com/golang/protobuf from v1.3.5 to v1.4.3
  * [`b7e79dc5a`](https://github.com/containerd/containerd/commit/b7e79dc5ab1084d2db3562c77896489674d9486f) Update google.golang.org/grpc from v1.27.1 to v1.38.0
  * [`8d2e156dd`](https://github.com/containerd/containerd/commit/8d2e156ddbd63e58d18048fd9960c586178fdc58) Increase golangci-lint timeout
* ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611))
  * [`05e51539a`](https://github.com/containerd/containerd/commit/05e51539a95f739c8963ab5184b8bda540e34e36) command line flags of setting container rootfs propagation
  * [`1dada3fc2`](https://github.com/containerd/containerd/commit/1dada3fc2a76ea1298f924bf404928c0f37796c4) add cgroupv2 setup for cos with a flag
* Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612))
  * [`bfbebf02b`](https://github.com/containerd/containerd/commit/bfbebf02b7c413c7afc9c253fb2199803c9e7c69) Update gotestsum to add timestamps to junit output
* Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604))
  * [`9c01fe20d`](https://github.com/containerd/containerd/commit/9c01fe20d31d3120c8bd2e0e68c411a3ebeabc64) Allow to pass --no-cgroup option to nvidia-container-cli
* Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577))
  * [`77374e8b3`](https://github.com/containerd/containerd/commit/77374e8b35900cc4cffd719282d29b43b729b58e) Makefile: FHS conformant manpage installation pathes
* Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594))
  * [`3ab974433`](https://github.com/containerd/containerd/commit/3ab97443360775ff3fb13a7be2efedb875805824) Add proper Go version before project checks
* Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580))
  * [`af5a130bc`](https://github.com/containerd/containerd/commit/af5a130bc94b91729114a502bf52f729f76638e4) Enable cri-integration in Windows Periodic Tests
* adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573))
  * [`7a2b04758`](https://github.com/containerd/containerd/commit/7a2b04758bfb52c17e1780dc432cff586b714839) adds explanation for seccomp unset/unconfined default vs runtime default
* Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569))
  * [`728743eb2`](https://github.com/containerd/containerd/commit/728743eb2858764df05fbb012cb03eb7c6cb0423) Fix cleanup context of teardownPodNetwork
* update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572))
  * [`01585595a`](https://github.com/containerd/containerd/commit/01585595a5934773aec184fc893b3db03e02628d) update integration/client go.sum
* Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566))
  * [`69f43d458`](https://github.com/containerd/containerd/commit/69f43d4589c50a8e64afac7cd5dda99433112ab8) Revert diff/walking error change
* Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562))
  * [`9a451d103`](https://github.com/containerd/containerd/commit/9a451d103c9b2d4791e22e5acdb7098c37bbec55) Update opencontainers/selinux to v1.8.2
* fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565))
  * [`014748bc0`](https://github.com/containerd/containerd/commit/014748bc04623346725d2a1330d7a2292563a4df) fix invalid validation error checking
* diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551))
  * [`558fdc680`](https://github.com/containerd/containerd/commit/558fdc6808dc2c15645e8bccf500a93df78432b6) diff/walking: fix defer cleanup
* Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559))
  * [`5f0fc4893`](https://github.com/containerd/containerd/commit/5f0fc4893da618651a67f44b80f6b47392d1d727) Add creation timestamp to RG
* Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328))
  * [`f8538b5e1`](https://github.com/containerd/containerd/commit/f8538b5e12b0977904bb810e3eae234a8ab1e48c) Fix error case in Windows layer cleanup
* Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422))
  * [`402acd7c1`](https://github.com/containerd/containerd/commit/402acd7c1e20aa6ea88ce6cd6f77e486c5e88478) Small typo fix "reimporst"
  * [`f21627059`](https://github.com/containerd/containerd/commit/f2162705950a1b220fbbb8c396738d7155928212) Use DeactivateLayer to recover layers that we cannot rename
* tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284))
  * [`93e268f62`](https://github.com/containerd/containerd/commit/93e268f6258e37200f15fe9240dd46b9988624e9) tests: Symlink volume tests
* Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535))
  * [`b5f530a15`](https://github.com/containerd/containerd/commit/b5f530a15780ee443b8c568200d37d50d0449672) Makefile: fix DESTDIR environment variable behaviour
* Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560))
  * [`edfd8d599`](https://github.com/containerd/containerd/commit/edfd8d59937faeb36f40b8baeff488a6d693ef49) Change Wrapf of non-error to an actual error
  * [`a93b5cbc2`](https://github.com/containerd/containerd/commit/a93b5cbc2f1f6e4e4b0b5fc3eb0843e24762f1f5) Install apparmor parser for arm64 environment
* scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536))
  * [`498bb36f6`](https://github.com/containerd/containerd/commit/498bb36f67689c2b6f0a6142472ba1f20ab87bf8) scrub the stale TODO
* docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554))
  * [`75daf45be`](https://github.com/containerd/containerd/commit/75daf45bebd198bca613ee96ddc0adc3afcd3861) docs: explicitly mention containerd's Prometheus path
* integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553))
  * [`2f870aa89`](https://github.com/containerd/containerd/commit/2f870aa896dff06dc4cae9875a4f53831169d14c) integration: Cleanup containerd on test teardown
* docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548))
  * [`93d4541a2`](https://github.com/containerd/containerd/commit/93d4541a20d19bb1562cacb855e8fba310045ab6) docs/cri: update ocicrypt link
  * [`792466495`](https://github.com/containerd/containerd/commit/7924664951197caf3c0f808ff329801ea2467104) docs/cri: fix broken links
* Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544))
  * [`05c03de94`](https://github.com/containerd/containerd/commit/05c03de94d28cdfc5f27057952d1308af2e66041) Update Windows periodic tests
* Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165))
  * [`77285e311`](https://github.com/containerd/containerd/commit/77285e311c6798df988b227ba9d56e85e29abc76) Schedule Windows job daily after midnight.
  * [`2b58782df`](https://github.com/containerd/containerd/commit/2b58782df0411226603d5d1dbdd52b10b3885bc5) Update windows-periodic.yml
  * [`421fc6ea7`](https://github.com/containerd/containerd/commit/421fc6ea73fef2f7946d762b800b349edd5fcb12) Add CI periodic Windows Jobs.
* Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273))
  * [`9fcea1d3f`](https://github.com/containerd/containerd/commit/9fcea1d3f03c7c6c5df0fc70a4ddb9a2b2dfa36b) Rename atomicWrite to writeToCompletion
* Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539))
  * [`b996e49c5`](https://github.com/containerd/containerd/commit/b996e49c5cb13788824f667b38886dd21a4a6db4) Do not run btrfs tests if btrfs kernel module is not loaded
* Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533))
  * [`50ad4b96c`](https://github.com/containerd/containerd/commit/50ad4b96c4acfde425e1fc6e7411b52658d7af92) Fix incorrect UA used for registry authentication
* ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531))
  * [`535d9cc59`](https://github.com/containerd/containerd/commit/535d9cc59fe75abebcbcfea60a8ff0f5f795beb1) ctr: parse mount options with embedded = character
* Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472))
  * [`a4f97d45d`](https://github.com/containerd/containerd/commit/a4f97d45da2886eea52b7ea179da8f66e2176975) Add ruleset=4 option
  * [`1442fee22`](https://github.com/containerd/containerd/commit/1442fee229bb6d536fa29d2a3aefccf5786d036a) Remove mountpoints not commonly mounted on FreeBSD
  * [`de04b3243`](https://github.com/containerd/containerd/commit/de04b32430cc1b26a70641bbeef5a85e194a5c75) Add copyright header & make sure compilation succeeds on all platforms
  * [`e1fd6be7e`](https://github.com/containerd/containerd/commit/e1fd6be7e8aa5f0a74cb8153ef1ef19d317f8224) Fix mounts for FreeBSD
* ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527))
  * [`5dec27b6f`](https://github.com/containerd/containerd/commit/5dec27b6f1f6921ae288a3094b796929b59fc539) ctr: exec handle pty resize after Start
  * [`b9378b452`](https://github.com/containerd/containerd/commit/b9378b45296218ba7f23384cf426384bb2102e0f) ctr: exec setup IO with console
* Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534))
  * [`923ab5b7c`](https://github.com/containerd/containerd/commit/923ab5b7ca0b3d07b117f4725d687c76e123d49a) Makefile: use $@ for target file names
* Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528))
  * [`e1c845df5`](https://github.com/containerd/containerd/commit/e1c845df506e5b7e2bd39f443db2a13862ddf825) Fix small typo
* Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519))
  * [`79e345221`](https://github.com/containerd/containerd/commit/79e3452213a595a87d6880538c7d2b0f6b067aab) update the link
  * [`1acca8bba`](https://github.com/containerd/containerd/commit/1acca8bba36e99684ee3489ea4a42609194ca6b9) Don't check for apparmor_parser to be present
* Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520))
  * [`869375a41`](https://github.com/containerd/containerd/commit/869375a413c8541d8776ee93a36753faa97427d7) Remove useless lines
* Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509))
  * [`a5b1740bb`](https://github.com/containerd/containerd/commit/a5b1740bbe3aa90848836268ebed82947ccf3fb4) fixed typos
* Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275))
  * [`c0e2f4b5d`](https://github.com/containerd/containerd/commit/c0e2f4b5d2c28b22da552156dae5239935b6a343) Try next mirror in case of non-404 errors, too
* bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514))
  * [`ec28288f4`](https://github.com/containerd/containerd/commit/ec28288f45ea0ff4567eee776ed3b8c289bf7f9c) bump runc version to v1.0.0-rc95
* update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511))
  * [`599127f4d`](https://github.com/containerd/containerd/commit/599127f4df767d60e256e24cea2a84f83d0c2a00) update runc binary to v1.0.0-rc95
* Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508))
  * [`5dbae87c5`](https://github.com/containerd/containerd/commit/5dbae87c59f6c0d53489b6b824fabf8d5fbe9117) Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0
* Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507))
  * [`1093f05ab`](https://github.com/containerd/containerd/commit/1093f05ab202f0ab6551379d19e81ac32c6dd076) Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
* Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493))
  * [`9643c9965`](https://github.com/containerd/containerd/commit/9643c99658758885d540050d1ff0ad0aaef1b4ea) Makefile: allow overriding install command via environment
* tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163))
  * [`09a0c9471`](https://github.com/containerd/containerd/commit/09a0c9471bf687ebcc7d8f8594606d127b3a803e) tests: Adds support for Windows cri-integration tests
* Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504))
  * [`b1d4140a2`](https://github.com/containerd/containerd/commit/b1d4140a220eb429eeb2059cd33fad6cd3bc7c80) Update docker resolver to authorize redirects
* bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505))
  * [`b6a251749`](https://github.com/containerd/containerd/commit/b6a2517491da040a1e821cc25a240de8308af948) bump hcsshim version to v0.8.17
* Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498))
  * [`315739251`](https://github.com/containerd/containerd/commit/315739251396c79718baad47191a2bc83dda586f) just release ctd-decoder not ctr-enc
  * [`b9c403e79`](https://github.com/containerd/containerd/commit/b9c403e79a578efd4350197e16860923fd7d209f) Merge remote-tracking branch 'upstream/master'
  * [`fc4da9728`](https://github.com/containerd/containerd/commit/fc4da9728e6231560411292ca9a2f6a591f64e57) Pin integration test image for alpine
* cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313))
  * [`273c2bb16`](https://github.com/containerd/containerd/commit/273c2bb168d1733ebcbe7418ca1232237f3dc603) tests: Prepull images used in tests
* plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440))
  * [`98f5922b5`](https://github.com/containerd/containerd/commit/98f5922b5e27f5e1d4e398091c6f2c24eea203dd) plugin: optimize the check for the last registration
* metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465))
  * [`e37ddafab`](https://github.com/containerd/containerd/commit/e37ddafab457596bc55151cd5bb34a77919c85ac) metadata: modify NewLeaseManager to return leases.Manager
* Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100))
  * [`8014d9fee`](https://github.com/containerd/containerd/commit/8014d9fee0e2a758d34af977f1ea6a1b6932a098) Skip TLS verification for localhost
  * [`74c7d66df`](https://github.com/containerd/containerd/commit/74c7d66dfb514ed5f130d53f3dbfbb8918d258eb) Merge remote-tracking branch 'upstream/master'
* Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492))
  * [`4b1b8346b`](https://github.com/containerd/containerd/commit/4b1b8346be2e8851650823a5e53b53658309f651) Makefile: make sure manpages are built before install-man
* adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309))
  * [`6e249b1ae`](https://github.com/containerd/containerd/commit/6e249b1aea69f30969ab3452dc19e78300dc3c06) adds credentials description
  * [`b59e29773`](https://github.com/containerd/containerd/commit/b59e29773c31bd173e3e23058fd960c3027da1eb) adds description for hosts.toml
* Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459))
  * [`0ba7303ee`](https://github.com/containerd/containerd/commit/0ba7303ee8c34f8f85c4679832f3b00dc36353ea) Prepare default branch rename
  * [`d02413330`](https://github.com/containerd/containerd/commit/d024133308a2d27ae0a1005afb29273d1a1715a1) Merge remote-tracking branch 'upstream/master'
* Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473))
  * [`de6db4038`](https://github.com/containerd/containerd/commit/de6db4038c937d4de0081283705303acf48f9834) Update vendored runc to v1.0.0.0-rc94
  * [`5c99f150a`](https://github.com/containerd/containerd/commit/5c99f150aec0b7b24535494ae9209a555e1344ea) Update the runc binary used with containerd to runc v1.0.0-rc94
* Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468))
  * [`b890f056e`](https://github.com/containerd/containerd/commit/b890f056e87d3823beeedf1339cd53469d4819b9) Fix content.ReaderAt close
* Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466))
  * [`c5797c8fc`](https://github.com/containerd/containerd/commit/c5797c8fcba00fd87527cc4b03a8785255424295) Update releases doc with updated support timeline
* tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452))
  * [`7d70992d3`](https://github.com/containerd/containerd/commit/7d70992d33df40049c517cbef8356b7e2bb5bd42) tests: add test for adaptor
* Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450))
  * [`9ea25634b`](https://github.com/containerd/containerd/commit/9ea25634bddccbcd4c45a7e552a147ff7f50aaab) Makefile: allow overriding go command by environment
* update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462))
  * [`c74a6c419`](https://github.com/containerd/containerd/commit/c74a6c4194b6e5e8b7887308c466ab1b19654a32) update to new cri-tools make install
* Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461))
  * [`79d800b9b`](https://github.com/containerd/containerd/commit/79d800b9b0148ae209d164420f723311e93dbb4e) Update Go to 1.16.4
  * [`d559b00fe`](https://github.com/containerd/containerd/commit/d559b00fe69817448cb2788dcecd297f51ed01a4) Merge remote-tracking branch 'upstream/release/1.5'
* [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457))
  * [`b35aa7250`](https://github.com/containerd/containerd/commit/b35aa7250a2a3f226b3fa09ccc950944a70ca33c) go.mod: cut circular dependency on github.com/containerd/containerd
  * [`b68405639`](https://github.com/containerd/containerd/commit/b684056399651a8219e9c60a6c39bacfc88ae741) integration/client: go mod tidy
* oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063))
  * [`b592a4c1e`](https://github.com/containerd/containerd/commit/b592a4c1ec51d36d21d1dea5f07a03013c6acaa7) oci: fix WithDevShmSize
* [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454))
  * [`e120261ee`](https://github.com/containerd/containerd/commit/e120261ee30cee924221a7536dfd1d516f449f88) windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411))
  * [`b0d3b35b2`](https://github.com/containerd/containerd/commit/b0d3b35b28f8df673740fbbd3bac3a36551589bf) windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448))
  * [`0b786908c`](https://github.com/containerd/containerd/commit/0b786908c0a37eae087aff204d54b6f9b97fa2f1) doc: add missing namespaces package
* update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445))
  * [`b56527cb7`](https://github.com/containerd/containerd/commit/b56527cb7ed1146a0cc5fb24140dfccdd8d7cf57) update seccomp version
* Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436))
  * [`b538d8f1a`](https://github.com/containerd/containerd/commit/b538d8f1a1f1e3cc13a9a49a2dd12a20644ee9c3) Update golang.org/x/sys to add linux/ppc support
* go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441))
  * [`e26fc8472`](https://github.com/containerd/containerd/commit/e26fc84729e4063c4ccac3271fc7eff7fb803b86) go.mod: cut circular dependency on github.com/containerd/containerd
  * [`15e0bd513`](https://github.com/containerd/containerd/commit/15e0bd513e84e0638d90f63f4bb7a828b9558f4c) integration/client: go mod tidy
* Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446))
  * [`81402e475`](https://github.com/containerd/containerd/commit/81402e47583bfce47f4924968c7164a7d2392ba3) Fix different registry hosts referencing the same auth config.
</p>
</details>

### Changes from containerd/cgroups
<details><summary>24 commits</summary>
<p>

* cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203))
  * [`80a7821`](https://github.com/containerd/cgroups/commit/80a7821536fc82757f390f8d65693074bd3ef8e4) cgroup: Optionally add process and task to a subsystems subset
* replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208))
  * [`0072297`](https://github.com/containerd/cgroups/commit/0072297e4547d623094fc68b0df41eef364d1747) replace pkg/errors from vendor
* cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207))
  * [`d55de5d`](https://github.com/containerd/cgroups/commit/d55de5d2af9a3616eb758e393a2170a1421155c1) cgroup.go: avoid panic on nil interface
* Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204))
  * [`73a8516`](https://github.com/containerd/cgroups/commit/73a8516e7f0f45fe9931d02cc57ff6059202f553) cgroupv2: reset lastErr to nil when subtree control is successfully written
  * [`2ca92c5`](https://github.com/containerd/cgroups/commit/2ca92c515038c7a30c1998dbe29a87873b98a3b3) cgroupv2: enable controllers before setting resources in NewChild()
* v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201))
  * [`db173a8`](https://github.com/containerd/cgroups/commit/db173a86bea843700360e7061c6f8d3869d13363) v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
  * [`b19a60d`](https://github.com/containerd/cgroups/commit/b19a60d64d89b858b3c2bee4a04fb7f70642ffce) v2: remove errors that are never returned
* v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202))
  * [`4fe70f3`](https://github.com/containerd/cgroups/commit/4fe70f3edc256fc2345d5f8f8a54e2f4e96f271e) v1: reduce duplicated code
* cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200))
  * [`6659093`](https://github.com/containerd/cgroups/commit/66590933215fb7b0c9f9ffd39e9946ab510d7679) cgroup v1: implement AddProc()
* Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199))
  * [`7254c12`](https://github.com/containerd/cgroups/commit/7254c1242cee46d1c37bf3da2151eed571879b5c) Rename branch from master to main
* utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197))
  * [`23b5120`](https://github.com/containerd/cgroups/commit/23b51209bf7bd11941d5613119309b11029e8373) utils: export ParseCgroupFile()
* go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194))
  * [`f8918cf`](https://github.com/containerd/cgroups/commit/f8918cf2d923b7003970ce99bb29545f2f34b531) go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
* Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195))
  * [`1a4509d`](https://github.com/containerd/cgroups/commit/1a4509dd06454dc765aed7f62cb26531416ffce3) Use /proc/partitions to get device names
</p>
</details>

### Changes from containerd/console
<details><summary>6 commits</summary>
<p>

* Fix CI ([#55](https://github.com/containerd/console/pull/55))
  * [`e700792`](https://github.com/containerd/console/commit/e7007923e8658f863a85c34aa029c394918fed19) Fix CI
  * [`05dadd9`](https://github.com/containerd/console/commit/05dadd92d21fc51f0bf56eadcb4201955cfc98d8) Stop using pkg/errors
* Add support for z/OS ([#46](https://github.com/containerd/console/pull/46))
  * [`7097449`](https://github.com/containerd/console/commit/70974496a6a52dc828ed9eeaaf451485a7598d53) Console test on z/OS
  * [`c4672c3`](https://github.com/containerd/console/commit/c4672c3a84f944113a124e5c1d401ff7ce932675) Add support for z/OS
</p>
</details>

### Changes from containerd/continuity
<details><summary>16 commits</summary>
<p>

* Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185))
  * [`849cf06`](https://github.com/containerd/continuity/commit/849cf06982a4a69ccb3c1cfa81f2aca763ad9877) run gofmt with Go 1.17
  * [`7b4650c`](https://github.com/containerd/continuity/commit/7b4650cc28941dc385d93521d532e6abbd923ed6) remove direct dependency on github.com/pkg/errors
* Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186))
  * [`16556d0`](https://github.com/containerd/continuity/commit/16556d050e667b37fa349d76de4bca0d8a225a33) update AUTHORS
  * [`b80f086`](https://github.com/containerd/continuity/commit/b80f08663090d91b0316074edca48bdd4fdbe0fa) darwin: use utimensat syscall instead of utimes
  * [`c666a35`](https://github.com/containerd/continuity/commit/c666a3535003db8bc2b1a8e6e40a693b3643aa3e) fix darwin usage of du command
* go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161))
  * [`c7d2029`](https://github.com/containerd/continuity/commit/c7d202952681f94836fad4d45d7b829f32fb9e9c) go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
* fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184))
  * [`fa7d162`](https://github.com/containerd/continuity/commit/fa7d1622372f1a787bfe51d59183b598813ce9d9) reformat nolint comments
  * [`a780d6d`](https://github.com/containerd/continuity/commit/a780d6dfbb58807abd3118add4e567017a0931f9) fs/stat: add FreeBSD
* Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182))
  * [`0175d70`](https://github.com/containerd/continuity/commit/0175d7070de291971f80576e74cd3ca2c5ab611c) Rename branch from master to main
* testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180))
  * [`e10d519`](https://github.com/containerd/continuity/commit/e10d519aaa7d4883e622e170239be4189336871d) testutil/loopback: print more debug info
</p>
</details>

### Changes from containerd/go-cni
<details><summary>13 commits</summary>
<p>

* go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72))
  * [`9cfa666`](https://github.com/containerd/go-cni/commit/9cfa666e12c79b68bdc474d3808edf557b6af36c) go.mod: github.com/containernetworking/cni v1.0.1
* remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71))
  * [`b6c559f`](https://github.com/containerd/go-cni/commit/b6c559f04b1d93c5eed8cf9dfaf5025d75d4c348) remove direct dependency on github.com/pkg/errors
* update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70))
  * [`786c2bc`](https://github.com/containerd/go-cni/commit/786c2bcd455ebdf69321c7d613052a1d49bf0165) test: add TestLibCNIType100
  * [`e3fccc2`](https://github.com/containerd/go-cni/commit/e3fccc24058924b8bfa5e4d265defca6964a251f) update CNI to v1.0.0
* Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69))
  * [`591b0b6`](https://github.com/containerd/go-cni/commit/591b0b69153fc04bb2f27c9e7d8af70f184e17d3) Rename branch from master to main
* result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68))
  * [`6c993c3`](https://github.com/containerd/go-cni/commit/6c993c3feefaf407e41f65ac0a66b6817fa00c81) result: change Raw from a struct field to a method
* result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67))
  * [`bc7198b`](https://github.com/containerd/go-cni/commit/bc7198b2c67b9a4ee960b3097822379908560b0c) result: expose raw result
</p>
</details>

### Dependency Changes

* **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 **_new_**
* **github.com/Microsoft/go-winio**                                                v0.4.17 -> v0.5.0
* **github.com/Microsoft/hcsshim**                                                 v0.8.16 -> v0.9.0
* **github.com/bits-and-blooms/bitset**                                            v1.2.0 **_new_**
* **github.com/blang/semver**                                                      v3.5.1 **_new_**
* **github.com/cenkalti/backoff/v4**                                               v4.1.1 **_new_**
* **github.com/cilium/ebpf**                                                       v0.4.0 -> v0.6.2
* **github.com/containerd/cgroups**                                                v1.0.1 -> v1.0.2
* **github.com/containerd/console**                                                v1.0.2 -> v1.0.3
* **github.com/containerd/continuity**                                             v0.1.0 -> v0.2.0
* **github.com/containerd/go-cni**                                                 v1.0.2 -> v1.1.0
* **github.com/containernetworking/cni**                                           v0.8.1 -> v1.0.1
* **github.com/containernetworking/plugins**                                       v0.9.1 -> v1.0.1
* **github.com/go-logr/logr**                                                      v0.2.0 -> v0.4.0
* **github.com/golang/groupcache**                                                 8c9f03a8e57e -> 41bb18bfe9da
* **github.com/golang/protobuf**                                                   v1.3.5 -> v1.5.2
* **github.com/google/go-cmp**                                                     v0.5.4 -> v0.5.6
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 **_new_**
* **github.com/grpc-ecosystem/grpc-gateway**                                       v1.16.0 **_new_**
* **github.com/imdario/mergo**                                                     v0.3.11 -> v0.3.12
* **github.com/json-iterator/go**                                                  v1.1.10 -> v1.1.11
* **github.com/moby/spdystream**                                                   v0.2.0 **_new_**
* **github.com/moby/sys/signal**                                                   8a51b5cc8879 **_new_**
* **github.com/opencontainers/image-spec**                                         v1.0.1 -> 5ad6f50d6283
* **github.com/opencontainers/runc**                                               v1.0.0-rc93 -> v1.0.2
* **github.com/opencontainers/runtime-spec**                                       e6143ca7d51d -> 1c3f411f0417
* **github.com/opencontainers/selinux**                                            v1.8.0 -> v1.8.2
* **github.com/pelletier/go-toml**                                                 v1.8.1 -> v1.9.3
* **github.com/prometheus/client_golang**                                          v1.7.1 -> v1.11.0
* **github.com/prometheus/common**                                                 v0.10.0 -> v0.26.0
* **github.com/satori/go.uuid**                                                    v1.2.0 **_new_**
* **github.com/sirupsen/logrus**                                                   v1.7.0 -> v1.8.1
* **github.com/spf13/pflag**                                                       v1.0.5 **_new_**
* **github.com/stretchr/testify**                                                  v1.6.1 -> v1.7.0
* **go.etcd.io/bbolt**                                                             v1.3.5 -> v1.3.6
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.24.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.0.1 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.0.1 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.0.1 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.0.1 **_new_**
* **go.opentelemetry.io/otel/trace**                                               v1.0.1 **_new_**
* **go.opentelemetry.io/proto/otlp**                                               v0.9.0 **_new_**
* **golang.org/x/net**                                                             e18ecbb05110 -> e898025ed96a
* **golang.org/x/sync**                                                            09787c993a3a -> 036812b2e83c
* **golang.org/x/sys**                                                             47abb6519492 -> ed5796bab164
* **golang.org/x/term**                                                            7de9c90e9dd1 -> 6a3ed077a48d
* **golang.org/x/text**                                                            v0.3.4 -> v0.3.6
* **golang.org/x/time**                                                            3af7569d3a1e -> 1f47c861a9ac
* **google.golang.org/appengine**                                                  v1.6.5 -> v1.6.6
* **google.golang.org/grpc**                                                       v1.27.1 -> v1.41.0
* **google.golang.org/protobuf**                                                   v1.27.1 **_new_**
* **gopkg.in/yaml.v3**                                                             9f266ea9e77c -> 496545a6307b
* **k8s.io/api**                                                                   v0.20.6 -> v0.22.0
* **k8s.io/apimachinery**                                                          v0.20.6 -> v0.22.0
* **k8s.io/apiserver**                                                             v0.20.6 -> v0.22.0
* **k8s.io/client-go**                                                             v0.20.6 -> v0.22.0
* **k8s.io/component-base**                                                        v0.20.6 -> v0.22.0
* **k8s.io/cri-api**                                                               v0.20.6 -> v0.22.0
* **k8s.io/utils**                                                                 67b214c5f920 -> cb0fa318a74b

Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)

containerd 1.6.0-beta.0

Welcome to the v1.6.0-beta.0 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

### Highlights

#### Runtime

* **Add runtime label to metrics** [#5744](https://github.com/containerd/containerd/pull/5744)
* **Cleanup task delete logic in v2 shim** [#5813](https://github.com/containerd/containerd/pull/5813)
* **Add support for shim plugins** [#5817](https://github.com/containerd/containerd/pull/5817)
* **Add runc shim support for core scheduling** [#6011](https://github.com/containerd/containerd/pull/6011)
* **Update shim client connect attempt to fail fast when shim errors** [#6031](https://github.com/containerd/containerd/pull/6031)

#### Windows

* **Add support for Windows HostProcess containers** [#5131](https://github.com/containerd/containerd/pull/5131)

#### CRI

* **Add CNI configuration based on runtime class** [#4695](https://github.com/containerd/containerd/pull/4695)
* **Add support for CRI v1 and v1alpha in parallel** [#5619](https://github.com/containerd/containerd/pull/5619)
* **Add support for unified resources field for cgroups v2** [#5627](https://github.com/containerd/containerd/pull/5627)
* **Add IP preference configuration for reporting pod IP** [#5964](https://github.com/containerd/containerd/pull/5964)

#### Other

* **Add a shared namespace label for cross-namespace content sharing** [#5043](https://github.com/containerd/containerd/pull/5043)
* **Add support for client TLS Auth for grpc** [#5606](https://github.com/containerd/containerd/pull/5606)
* **Add xfs support for devicemapper snapshotter** [#5610](https://github.com/containerd/containerd/pull/5610)
* **Add metric exposing build version and revision** [#5965](https://github.com/containerd/containerd/pull/5965)

#### Client

* **Allow WithServices to use custom implementations** [#5709](https://github.com/containerd/containerd/pull/5709)
* **Support custom compressor for walking differ** [#5735](https://github.com/containerd/containerd/pull/5735)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Phil Estes
* Derek McGowan
* Wei Fu
* Akihiro Suda
* Sebastiaan van Stijn
* Maksym Pavlenko
* Mike Brown
* Michael Crosby
* Claudiu Belu
* Kazuyoshi Kato
* AdamKorcz
* Adelina Tuvenie
* Davanum Srinivas
* Kohei Tokunaga
* zounengren
* Daniel Canter
* Enrico Weigelt, metux IT consult
* Shiming Zhang
* haoyun
* Brian Goff
* Alakesh Haloi
* Hajime Tazaki
* Iceber Gu
* Samuel Karp
* Gijs Peskens
* Aditi Sharma
* Kevin Parsons
* Alexandre Peixoto Ferreira
* Cody Roseborough
* Furkan
* Jiaming Xu
* Kir Kolyshkin
* Miao Wang
* Neil Johnson
* Paul "TBBle" Hampson
* Priyanka Saggu
* Sunghoon Kang
* Zhiyu Li
* wanglei
* zounengren
* Alexey Ivanov
* Artem Khramov
* Ben Hutchings
* Cory Bennett
* Dan Williams
* Eng Zer Jun
* Ethan Chen
* Fabiano Fidêncio
* Fupan Li
* Gaurav Gahlot
* Gunju Kim
* Jacob Blain Christen
* Jayme Howard
* Jintao Zhang
* Kaijie Chen
* Kern Walster
* Kevin Parsons
* Kitt Hsu
* Lantao Liu
* Ma Xinjian
* Maksym Pavlenko
* Mikko Ylinen
* Ng Yang
* Nicolas Chariglione
* Peri Thompson
* Quan Tian
* Radostin Stoyanov
* Rui Lopes
* Samuel Ortiz
* Sebastian Hasler
* Yang Yang
* Yifan Yuan
* Zilong Wang
* Zufar Dhiyaulhaq
* jayonlau
* jerryzhuang
* kerthcet
* levinxo
* linrunlong
* scuzhanglei
* wangzhan

### Changes
<details><summary>603 commits</summary>
<p>

* [`5b29542cb`](https://github.com/containerd/containerd/commit/5b29542cbee35f2e8dd493c1d12825da381f5c6e) Merge pull request  [#6098](https://github.com/containerd/containerd/pull/6098) from dmcgowan/prepare-1.6.0-beta.0
* [`37e9efbe6`](https://github.com/containerd/containerd/commit/37e9efbe6ac716f69986116a48ec0a4cd95e9067) Merge pull request  [#6105](https://github.com/containerd/containerd/pull/6105) from dmcgowan/test-add-error-testcontainerdrestart
* [`2e3c8d5e6`](https://github.com/containerd/containerd/commit/2e3c8d5e637241b84446b4568075e16ad67d903d) Merge pull request  [#6110](https://github.com/containerd/containerd/pull/6110) from rgl/rgl-new-container-doc-typo
* [`1abe50512`](https://github.com/containerd/containerd/commit/1abe5051210ab80d1451fcb19a54efa372d29f4b) Prepare release notes for v1.6.0-beta.0
* [`c5947557d`](https://github.com/containerd/containerd/commit/c5947557d89e4b1e0a4a89e207f8943af8075f70) Add error message to in TestContainerdRestart integration test
* [`6927fc327`](https://github.com/containerd/containerd/commit/6927fc32764498102f4d694cfcf6a1551fc91567) Merge pull request  [#6104](https://github.com/containerd/containerd/pull/6104) from dmcgowan/update-cgroups
* [`072a7074b`](https://github.com/containerd/containerd/commit/072a7074b4897aa3b086ce1bae0459eefa13dbd1) Fix typo in the NewContainer function documentation
* [`193bafc42`](https://github.com/containerd/containerd/commit/193bafc42c2028af923c4b08448e38fc2e6a85bc) Merge pull request  [#6100](https://github.com/containerd/containerd/pull/6100) from jonyhy96/cleanup-test
* [`ac2df3ba9`](https://github.com/containerd/containerd/commit/ac2df3ba9ad2d26da08395d294abb7c0fa0105e5) test: check file content after mount
* [`18d483b23`](https://github.com/containerd/containerd/commit/18d483b236b2bf999441c2324b70ae52a48a7cb7) Update cgroups to v1.0.2
* [`a4663097e`](https://github.com/containerd/containerd/commit/a4663097eceedc9093fe8599b78f6b061cc70a82) Merge pull request  [#6107](https://github.com/containerd/containerd/pull/6107) from estesp/test-timeout
* [`4ed3c524c`](https://github.com/containerd/containerd/commit/4ed3c524cf6d01cf31538b20848675285e6538cd) Update test timeout based on recent cancellations
* [`3f033aeff`](https://github.com/containerd/containerd/commit/3f033aeff3ec0dd606e0696b96ccacd9cd4b6bc6) Merge pull request  [#6106](https://github.com/containerd/containerd/pull/6106) from dmcgowan/test-cri-teardown-check-pid
* [`d252a293d`](https://github.com/containerd/containerd/commit/d252a293df3d8fc76cb5b141e33d59fc55b94b5a) Remove extra test_teardown
* [`4a569c889`](https://github.com/containerd/containerd/commit/4a569c8894029c858cbdad2920a85541bc89e35b) Check the pid in cri test teardown
* [`cb6fb93af`](https://github.com/containerd/containerd/commit/cb6fb93af576119e1d0c91513eff93930470ab14) Merge pull request  [#6011](https://github.com/containerd/containerd/pull/6011) from crosbymichael/schedcore
* [`60ffa3ff7`](https://github.com/containerd/containerd/commit/60ffa3ff7d969ea0f2ec0aa14714cad70738b7ef) Merge pull request  [#5579](https://github.com/containerd/containerd/pull/5579) from claudiubelu/integration/restart-containerd
* [`c01ebe7cf`](https://github.com/containerd/containerd/commit/c01ebe7cfb78a3107bc3ce458f888629309bb538) Merge pull request  [#6099](https://github.com/containerd/containerd/pull/6099) from dcantah/update-hcsshim-0.9
* [`26ee1b1ee`](https://github.com/containerd/containerd/commit/26ee1b1ee55b06f580d17cb2470257c2a1426121) Merge pull request  [#4695](https://github.com/containerd/containerd/pull/4695) from crosbymichael/cri-class
* [`f1054dbbd`](https://github.com/containerd/containerd/commit/f1054dbbdeb0eac096ba91b7ae892b7104be7c5e) fix integration client vendor
* [`e48bbe839`](https://github.com/containerd/containerd/commit/e48bbe83949a43dedd3e2727452259f99dd81635) add runc shim support for sched core
* [`88e1cf5fb`](https://github.com/containerd/containerd/commit/88e1cf5fb542f97bcba0e0eef45b6ec1d4d56306) Merge pull request  [#6102](https://github.com/containerd/containerd/pull/6102) from thaJeztah/bump_go_1.17.2
* [`de1a39bf3`](https://github.com/containerd/containerd/commit/de1a39bf32caf2cfb6b8967a3f23cde44ee83992) Update Go to 1.17.2
* [`46b152f81`](https://github.com/containerd/containerd/commit/46b152f81be2580e726e478a198b290770225ed7) vendor: Bump hcsshim to 0.9.0
* [`e648fa2e8`](https://github.com/containerd/containerd/commit/e648fa2e81f5344ae12592e56f10e8d36da6e6b9) Merge pull request  [#5933](https://github.com/containerd/containerd/pull/5933) from claudiubelu/integration/import-multilayer
* [`2d48b6a86`](https://github.com/containerd/containerd/commit/2d48b6a86495a7f52ad3ad6dd8302d7ca9d1574b) Merge pull request  [#6031](https://github.com/containerd/containerd/pull/6031) from fuweid/carry-5648
* [`7b8a697f2`](https://github.com/containerd/containerd/commit/7b8a697f2809a5c4a5d4616dc54946c21b1a14a2) Merge pull request  [#6034](https://github.com/containerd/containerd/pull/6034) from claudiubelu/windows/fixes-image-volume
* [`228265688`](https://github.com/containerd/containerd/commit/228265688a72954fc4ceafc58646f8cbd15e1a41) Merge pull request  [#6094](https://github.com/containerd/containerd/pull/6094) from zouyee/go117
* [`3a713811b`](https://github.com/containerd/containerd/commit/3a713811bee3bd813853a0c87763ddf2d804adee) run `gofmt` with Go 1.17
* [`7b2a5f1c0`](https://github.com/containerd/containerd/commit/7b2a5f1c0d0dc2479010ed6a7367ebd9249204c9) Merge pull request  [#6088](https://github.com/containerd/containerd/pull/6088) from AkihiroSuda/pkg-cap-fix-comment
* [`6e5ce1486`](https://github.com/containerd/containerd/commit/6e5ce14863890cc13c2a08952d190627a6d25456) Merge pull request  [#6066](https://github.com/containerd/containerd/pull/6066) from cpuguy83/fix_tracing_attrs_usage
* [`703b86533`](https://github.com/containerd/containerd/commit/703b86533b3348584124f42e3e39524d3f911121) pkg/cap: remove an outdated comment
* [`1ee2bff0e`](https://github.com/containerd/containerd/commit/1ee2bff0e02136099cb49c08dab25830e7778535) Update go otel 1.0.1
* [`79e35892c`](https://github.com/containerd/containerd/commit/79e35892c8d978d25f0f96f5f272d3364384e7ab) Merge pull request  [#6086](https://github.com/containerd/containerd/pull/6086) from estesp/add-adopters
* [`97e201640`](https://github.com/containerd/containerd/commit/97e201640954789f3a72852bd455e22043a4f967) Merge pull request  [#6082](https://github.com/containerd/containerd/pull/6082) from Dragoncell/cgroupv2_fix
* [`b9a0c5080`](https://github.com/containerd/containerd/commit/b9a0c5080a50e177726c2fdf6eb7cf377d25bfc9) modify the way for checking cos
* [`c528d2c39`](https://github.com/containerd/containerd/commit/c528d2c39f1c1d6430f7faccc7e6cf8b2938132d) Update ADOPTERS.md with additional uses
* [`d193dc2b8`](https://github.com/containerd/containerd/commit/d193dc2b8afb1467255cea5326e9807514f94c0f) Merge pull request  [#5915](https://github.com/containerd/containerd/pull/5915) from AdamKorcz/fuzz12
* [`4acb18c95`](https://github.com/containerd/containerd/commit/4acb18c957b1be086c7aceaf9f2e68df942df21e) Merge pull request  [#6081](https://github.com/containerd/containerd/pull/6081) from adelina-t/fix_tests
* [`3f00006f7`](https://github.com/containerd/containerd/commit/3f00006f72cbf5e6546a68757600c82e6df1f816) Merge pull request from GHSA-c2h3-6mxw-7mvq
* [`9734b4039`](https://github.com/containerd/containerd/commit/9734b403939841528f3cee5e057270a49ff153a2) Pin mingw to version 10.2.0
* [`d19af5afb`](https://github.com/containerd/containerd/commit/d19af5afbfcf91bdd420b0978b48d9f348247739) Update to golang 1.17.1
* [`3cb0ec01e`](https://github.com/containerd/containerd/commit/3cb0ec01ec86a289aa24ba8979720dc3c91593c3) Install nssm
* [`64291df71`](https://github.com/containerd/containerd/commit/64291df71bff72e852188d17e5dad9f3c2c36024) Merge pull request  [#6079](https://github.com/containerd/containerd/pull/6079) from cpuguy83/correct_task_error
* [`63b7e5771`](https://github.com/containerd/containerd/commit/63b7e5771e8914f3c36c707f3b5fc4846b11997b) Merge pull request  [#5973](https://github.com/containerd/containerd/pull/5973) from Juneezee/deprecate-ioutil
* [`02e77bcdc`](https://github.com/containerd/containerd/commit/02e77bcdc1e48fb4089dab02d6b67955d48df4ad) task service: return known error type
* [`791e175c7`](https://github.com/containerd/containerd/commit/791e175c79930a34cfbb2048fbcaa8493fd2c86b) Windows: Fixes Windows containers with image volumes
* [`fbdcddedc`](https://github.com/containerd/containerd/commit/fbdcddedc00f6293295cc6f4507d0cdf84ae6566) Merge pull request  [#6076](https://github.com/containerd/containerd/pull/6076) from jonyhy96/cleanup-import
* [`c76c9f2cc`](https://github.com/containerd/containerd/commit/c76c9f2ccf00c833b299e58cda4ca5fe5e968bc8) Merge pull request  [#6069](https://github.com/containerd/containerd/pull/6069) from jonyhy96/feat-grpc-options
* [`049042382`](https://github.com/containerd/containerd/commit/049042382c1ac5e451e9d1ca24c7f622270609d6) fix: update vendor
* [`5c2426a7b`](https://github.com/containerd/containerd/commit/5c2426a7b23d209a3ba46bce5ab81ec280e5b3ae) cleanup: import from k8s.io/utils/clock/testing instead
* [`6484fab1e`](https://github.com/containerd/containerd/commit/6484fab1e020c6cb946e5e82ecd5eb24a9b3ffc6) cleanup: import from k8s.io/utils/clock instead
* [`d16942cf1`](https://github.com/containerd/containerd/commit/d16942cf16391ddcc17ca06e3fba94af743d05b7) feat: enable cri remote client to call with grpc calloptions
* [`a06a0990e`](https://github.com/containerd/containerd/commit/a06a0990eca38953deab23e73601be770801946b) Merge pull request  [#6074](https://github.com/containerd/containerd/pull/6074) from mikebrow/cleanup
* [`f6b7e07fd`](https://github.com/containerd/containerd/commit/f6b7e07fd318bded1da10bc05d691ad1ae42d522) cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>)
* [`f90ebaf1c`](https://github.com/containerd/containerd/commit/f90ebaf1ce7ba5fa4eafa2f174635e3eb9a4c0e8) Merge pull request  [#6070](https://github.com/containerd/containerd/pull/6070) from jonyhy96/feat-import-platform
* [`96fda588b`](https://github.com/containerd/containerd/commit/96fda588b96a23164fdae8750b8a35ec59ef3cb7) Merge pull request  [#6065](https://github.com/containerd/containerd/pull/6065) from dmcgowan/mirror-action-custom-tag
* [`933ddaa6f`](https://github.com/containerd/containerd/commit/933ddaa6f870e10b1164d7a4a442c0e026ba7975) fix: wrong flag type
* [`da16d492c`](https://github.com/containerd/containerd/commit/da16d492cd07ee7089aa8b000ba48f494f193147) feat: support import image for specific platform
* [`d132691f1`](https://github.com/containerd/containerd/commit/d132691f109389d986bb96a8fa903ba6272a2049) Merge pull request  [#6059](https://github.com/containerd/containerd/pull/6059) from jonyhy96/feat-cmd-flag
* [`67b883146`](https://github.com/containerd/containerd/commit/67b88314619dae55465057fe39b43586bf3b6df7) Update mirror images to take target image name
* [`e6ddffc2a`](https://github.com/containerd/containerd/commit/e6ddffc2af90ce4fad3db6510911bce849b8c578) fix: make exec-id flag required in exec command
* [`0f27a423e`](https://github.com/containerd/containerd/commit/0f27a423ef12110770382095024a852bd309606c) Merge pull request  [#6052](https://github.com/containerd/containerd/pull/6052) from ktock/uncompress-compression-pkg
* [`6416cc35c`](https://github.com/containerd/containerd/commit/6416cc35c1f0a92a3561411de4ccfb71df2c8308) Merge pull request  [#5922](https://github.com/containerd/containerd/pull/5922) from zouyee/replace
* [`09c9270fe`](https://github.com/containerd/containerd/commit/09c9270feee1d81044e29c47c3609fb0c1e4d7f5) images: enable converter to uncompress zstd
* [`5162238c7`](https://github.com/containerd/containerd/commit/5162238c7da04d6bdd771d0aa43f8e34c91ea2ca) Merge pull request  [#5853](https://github.com/containerd/containerd/pull/5853) from claudiubelu/integration/windows-hostprocess
* [`694a00754`](https://github.com/containerd/containerd/commit/694a007543fafe751cbfab07093ba1b3ae58f1b6) replace deprecated function
* [`f40df655c`](https://github.com/containerd/containerd/commit/f40df655cdb0543bfdfe6cf9b8a4019b0089c8ea) Merge pull request  [#6047](https://github.com/containerd/containerd/pull/6047) from ktock/fix-build-main
* [`224454062`](https://github.com/containerd/containerd/commit/2244540628f10d68efa5ac2a8dd80cb667c438b7) Fix main branch build is broken
* [`22beecb7d`](https://github.com/containerd/containerd/commit/22beecb7d9bd06e743be9da7e519976417755466) Merge pull request  [#6003](https://github.com/containerd/containerd/pull/6003) from cpuguy83/add_otel_log_hook
* [`efc90baf5`](https://github.com/containerd/containerd/commit/efc90baf58348745d3ee3d2e9d5ca233ac0029c3) Merge pull request  [#6023](https://github.com/containerd/containerd/pull/6023) from dcantah/fix-lcow-withusername
* [`7c621e1fc`](https://github.com/containerd/containerd/commit/7c621e1fcc08bcf5a1a48b837342cc22eada1685) btrfs: reduce permissions on plugin directories
* [`4921fb6b6`](https://github.com/containerd/containerd/commit/4921fb6b63e5476e54fb7e2cf93c3b505f1c09cb) Merge pull request  [#5946](https://github.com/containerd/containerd/pull/5946) from zouyee/errors
* [`fcffe0c83`](https://github.com/containerd/containerd/commit/fcffe0c83acea4d201425de763782dfef74c7204) switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
* [`45e0e5a77`](https://github.com/containerd/containerd/commit/45e0e5a77ef71d1e8afe7670d31d11b72269b9a6) Merge pull request  [#5926](https://github.com/containerd/containerd/pull/5926) from claudiubelu/import-add-platform-check
* [`c5e23649d`](https://github.com/containerd/containerd/commit/c5e23649df3fa881535ecfc3c48dc65368009dc8) Merge pull request  [#6043](https://github.com/containerd/containerd/pull/6043) from dmcgowan/fix-metadata-content-panic
* [`c23f52af3`](https://github.com/containerd/containerd/commit/c23f52af30b4461dd6ae8224ceb553040e79d4d3) Merge pull request  [#6001](https://github.com/containerd/containerd/pull/6001) from cpuguy83/trace_exporter_plugin
* [`b23ec233a`](https://github.com/containerd/containerd/commit/b23ec233a8bbd9be6ddf5348fa6949c591dff373) Merge pull request  [#5916](https://github.com/containerd/containerd/pull/5916) from claudiubelu/windows/image-import
* [`a4fa3a716`](https://github.com/containerd/containerd/commit/a4fa3a71627c51483bcfb701076b35600a12c583) Merge pull request  [#6017](https://github.com/containerd/containerd/pull/6017) from thaJeztah/fix_main_nomodules
* [`b9cf0d75a`](https://github.com/containerd/containerd/commit/b9cf0d75a9f4a8a09ab55caa1983a8988ba4834d) Fix panic in metadata content writer on copy error
* [`6886c6a2e`](https://github.com/containerd/containerd/commit/6886c6a2ec0c70dde1aa64e77b64a5ad47b983c3) v1 runtime: reduce permissions for bundle dir
* [`7d56b24f1`](https://github.com/containerd/containerd/commit/7d56b24f1a9af82dfaa10ff55a4e3c36a7efd943) v2 runtime: reduce permissions for bundle dir
* [`d0bedc5bd`](https://github.com/containerd/containerd/commit/d0bedc5bd111172f5a14fcbf83ad19ab471337c5) Merge pull request  [#5979](https://github.com/containerd/containerd/pull/5979) from TianTianBigWang/fix/err-string-fmt
* [`7a7a9a282`](https://github.com/containerd/containerd/commit/7a7a9a282c42b6cdfa26f5c515e238d2e782b446) integration: Adds test for multilayer image import
* [`f7658e37d`](https://github.com/containerd/containerd/commit/f7658e37d94674b8bfaf3206d425f102c5d9b552) runtime: should fail fast if dial error on shim
* [`483d2e947`](https://github.com/containerd/containerd/commit/483d2e947fbb3b50339509962200f5e5e1965f7b) go.mod: update opentelemetry modules to v1.0.0
* [`483e23bdc`](https://github.com/containerd/containerd/commit/483e23bdcdf46ae204f267d6864d1a51da7ec1ae) Merge pull request  [#6036](https://github.com/containerd/containerd/pull/6036) from dmcgowan/add-mirror-action
* [`f6c1e7ed8`](https://github.com/containerd/containerd/commit/f6c1e7ed8b75ddf1250892969808f6414b6a42f9) Merge pull request  [#6027](https://github.com/containerd/containerd/pull/6027) from alakesh/log-fix
* [`084387e0b`](https://github.com/containerd/containerd/commit/084387e0b4d860b264dfddc62d556b6f0ec702a4) Move tracing to plugin
* [`45c3453a7`](https://github.com/containerd/containerd/commit/45c3453a7cd997fed9d6d4ea998135e532b5428a) Add open telemetry logging hook for logrus
* [`6fd80dea3`](https://github.com/containerd/containerd/commit/6fd80dea341a1599f3a0984ed10d035fdd3a2cd1) Merge pull request  [#5991](https://github.com/containerd/containerd/pull/5991) from akhramov/freebsd/fix-tar-headers
* [`16f3d67b5`](https://github.com/containerd/containerd/commit/16f3d67b5a804b3a32a5df6318531768a654ef8c) add current process state to the error message
* [`407d60694`](https://github.com/containerd/containerd/commit/407d6069412d7fc563ea45ff46dfcc13e71338e5) Add github action to mirror image
* [`03d1a0fa7`](https://github.com/containerd/containerd/commit/03d1a0fa7266a82866803053b7a58845095510ef) Merge pull request  [#6035](https://github.com/containerd/containerd/pull/6035) from kzys/virt-ip
* [`97df73004`](https://github.com/containerd/containerd/commit/97df73004e4b9d7c632f4889f889fd6b330a9e40) gha: collect Vagrant VMs' IP addresses
* [`2bffb5f9b`](https://github.com/containerd/containerd/commit/2bffb5f9b234bff72739f48f7d027b47a178a9ae) FreeBSD: fix tar headers & the nil check on getxattr
* [`3393970dd`](https://github.com/containerd/containerd/commit/3393970dd7a57c3e8507fa75f27eb43a869dca37) Merge pull request  [#6033](https://github.com/containerd/containerd/pull/6033) from zouyee/continuity
* [`90c6ff97a`](https://github.com/containerd/containerd/commit/90c6ff97a88fa1583437de1749ebc2fdb05778ef) Merge pull request  [#5997](https://github.com/containerd/containerd/pull/5997) from ktock/deduped-ref
* [`7854e0bff`](https://github.com/containerd/containerd/commit/7854e0bffe7e95fc8002f2150caef96f4d858a48) bump continuity and console version that remove pkg/errors
* [`2e2956ba2`](https://github.com/containerd/containerd/commit/2e2956ba2dfae843a2dde9cefdd679d05aed4978) Merge pull request  [#5998](https://github.com/containerd/containerd/pull/5998) from kaijchen/patch-1
* [`16d3f48a2`](https://github.com/containerd/containerd/commit/16d3f48a2e13fa820431d09825e5b8a566b11360) ctr namespaces: improve usage string
* [`ecbd7c653`](https://github.com/containerd/containerd/commit/ecbd7c6533fc454e3ea7359cb0dd5571bf9191a7) Merge pull request  [#6028](https://github.com/containerd/containerd/pull/6028) from zouyee/bump
* [`50da67359`](https://github.com/containerd/containerd/commit/50da6735923837519d7b8ec0ba997ce890b6de29) refactor: move from io/ioutil to io and os package
* [`a68fb7add`](https://github.com/containerd/containerd/commit/a68fb7addb79c31602fd2cbcad3c29cb1333aa66) bump console version to v1.0.3 that remove pkg/errors
* [`c16be1a5e`](https://github.com/containerd/containerd/commit/c16be1a5e2afe08b7fe34a2c3d24234a874ada36) Merge pull request  [#6032](https://github.com/containerd/containerd/pull/6032) from dmcgowan/update-integration-test-images
* [`3e72e335f`](https://github.com/containerd/containerd/commit/3e72e335fe6e03aecdc93e07d0162090319c4156) Use github images for integration tests
* [`d72d2794d`](https://github.com/containerd/containerd/commit/d72d2794de51b21efe0bfd473398d535f44d01ef) Merge pull request  [#5995](https://github.com/containerd/containerd/pull/5995) from wssccc/wssccc-patch-2
* [`55893b9be`](https://github.com/containerd/containerd/commit/55893b9be729b7473a717682d6bf99a154c36422) Add CNI conf based on runtime class
* [`50a568595`](https://github.com/containerd/containerd/commit/50a56859514011d35b603b13a264aa217e12cab8) Change oci.WithUser behavior for LCOW
* [`65f6a896c`](https://github.com/containerd/containerd/commit/65f6a896c3ec892e4342a117e8dea7250986a098) Fuzzing: Add 4 fuzzers + small modifications
* [`7ddf5e52b`](https://github.com/containerd/containerd/commit/7ddf5e52ba738e868b70807797c79c8e54da3497) Merge pull request  [#6012](https://github.com/containerd/containerd/pull/6012) from estesp/set-image-labels
* [`7d6e9773a`](https://github.com/containerd/containerd/commit/7d6e9773acbede2a0382e2a149739e24349cfeb7) Merge pull request  [#5970](https://github.com/containerd/containerd/pull/5970) from cpuguy83/cancel_on_signal
* [`2fecf5b02`](https://github.com/containerd/containerd/commit/2fecf5b02e95cdf4ee5babd065b2c52d6aadbe18) Make sure exit signals trigger an exit during init
* [`f40df3d72`](https://github.com/containerd/containerd/commit/f40df3d72ba85700c737aca2cb21212d8f0caaed) Enable image config labels in ctr and CRI container creation
* [`d081457ba`](https://github.com/containerd/containerd/commit/d081457ba486b7c5c1e9f218f755b038061d90bc) Merge pull request  [#5974](https://github.com/containerd/containerd/pull/5974) from claudiubelu/hanging-task-delete-fix
* [`40c7d1d16`](https://github.com/containerd/containerd/commit/40c7d1d16860953abf57be62fa19856487075833) Merge pull request  [#5985](https://github.com/containerd/containerd/pull/5985) from AkihiroSuda/crun-1.0
* [`6875aa5d3`](https://github.com/containerd/containerd/commit/6875aa5d3737d7ff87220ffd53275ef37d323d0e) import: Add option to skip creating digest image
* [`da6b0efcc`](https://github.com/containerd/containerd/commit/da6b0efccde2b9f815bc49200593c4d2110a6397) Merge pull request  [#5982](https://github.com/containerd/containerd/pull/5982) from AkihiroSuda/clone3
* [`f700ae873`](https://github.com/containerd/containerd/commit/f700ae8732c42cad41cf5628884610b3f95a464d) CI: bump up crun to 1.0
* [`55923daa9`](https://github.com/containerd/containerd/commit/55923daa9f56c8a890875f1e111201d918b382e2) seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* [`8596d1188`](https://github.com/containerd/containerd/commit/8596d11886b4afe4323b24e645858bc48753f18e) Fix typo
* [`493220b71`](https://github.com/containerd/containerd/commit/493220b719a74c9d73cf7e131ce6c4fc2a32eac1) Merge pull request  [#5990](https://github.com/containerd/containerd/pull/5990) from estesp/update-go-1.17.1
* [`73dbbf5bf`](https://github.com/containerd/containerd/commit/73dbbf5bfa4ff2c9a2f6c91dc7c4dc29ace5fa4c) Update to Go 1.17.1
* [`cbf9d88c9`](https://github.com/containerd/containerd/commit/cbf9d88c9e3e1a385971d9d0dd4b2f5f0e97a073) Merge pull request  [#5987](https://github.com/containerd/containerd/pull/5987) from wllenyj/ci
* [`498e5b27f`](https://github.com/containerd/containerd/commit/498e5b27f7928eab29756f674a161737fe36cabf) fix error string format
* [`6d961f967`](https://github.com/containerd/containerd/commit/6d961f96736d7b471b3cdc47c76bd8bd58a6e3a9) CI: Switch to available latest images
* [`8493cd1a5`](https://github.com/containerd/containerd/commit/8493cd1a506b791fef29bbae544a1074f6b7bb6d) Merge pull request  [#5610](https://github.com/containerd/containerd/pull/5610) from alakesh/xfs-support-devmapper
* [`e087b47e9`](https://github.com/containerd/containerd/commit/e087b47e98d4768085d3ee5c9ceb1aaa7038ec72) import: Raise error if the imported image is filtered out
* [`8cf06feac`](https://github.com/containerd/containerd/commit/8cf06feac42097b02a928e1376f5c2536f25bc27) Merge pull request  [#5956](https://github.com/containerd/containerd/pull/5956) from claudiubelu/windows/fixes-task-delete-force
* [`e1ad77910`](https://github.com/containerd/containerd/commit/e1ad7791077916aac9c1f4981ad350f0e3fce719) Merge pull request  [#5817](https://github.com/containerd/containerd/pull/5817) from dmcgowan/shim-plugins
* [`91b64c58b`](https://github.com/containerd/containerd/commit/91b64c58b128a8268fdbb3f03b2f238766be55cf) add xfs support to devicemapper snapshotter
* [`3d734d034`](https://github.com/containerd/containerd/commit/3d734d034525a273cb0c665725f30b420bf88cdc) Merge pull request  [#5976](https://github.com/containerd/containerd/pull/5976) from ukontainer/pr-continuity
* [`d9f921e4f`](https://github.com/containerd/containerd/commit/d9f921e4f0d09ae290543fa3750f7ac0cd1d40b1) Merge pull request  [#5906](https://github.com/containerd/containerd/pull/5906) from thaJeztah/replace_os_exec
* [`8766f2118`](https://github.com/containerd/containerd/commit/8766f2118cf44298966012acb0500af56e0dc80e) Merge pull request  [#5972](https://github.com/containerd/containerd/pull/5972) from zouyee/labels
* [`94b86a6b9`](https://github.com/containerd/containerd/commit/94b86a6b9706e58917892b398c7d627f7889d03c) Merge pull request  [#5966](https://github.com/containerd/containerd/pull/5966) from dmcgowan/fix-unexpected-eof-handling
* [`8ff8b1b82`](https://github.com/containerd/containerd/commit/8ff8b1b8236329457345350e6123cf0ef865a30f) vendor: update continuity for darwin support
* [`6589876d2`](https://github.com/containerd/containerd/commit/6589876d2050fdd0b51fc25ae3c63024823c7586) Merge pull request  [#5964](https://github.com/containerd/containerd/pull/5964) from crosbymichael/cni-pref
* [`689a863ef`](https://github.com/containerd/containerd/commit/689a863efe66ba2fbad37e1c1c5f224783f3d015) Merge pull request  [#5939](https://github.com/containerd/containerd/pull/5939) from scuzhanglei/privileged-device
* [`1ddc54c00`](https://github.com/containerd/containerd/commit/1ddc54c00dbb91a4f529175bebabf96d59895fd8) Merge pull request  [#5954](https://github.com/containerd/containerd/pull/5954) from claudiubelu/fix-sandbox-remove
* [`1efed4309`](https://github.com/containerd/containerd/commit/1efed43090fcb24eb138acf318b9edef91d22007) add ip_pref CNI options for primary pod ip
* [`16cd6ed13`](https://github.com/containerd/containerd/commit/16cd6ed137d8f6397def9e63a15ac8761a8c1cda) Additional integration tests for pulling image with labels
* [`756f4a314`](https://github.com/containerd/containerd/commit/756f4a3147d6fde2f69077ae1805dacde886bf89) cri: add devices for privileged container
* [`a4d64e5e0`](https://github.com/containerd/containerd/commit/a4d64e5e0065b718702d1a4cb99d8948ee96f03d) Merge pull request  [#5969](https://github.com/containerd/containerd/pull/5969) from crosbymichael/pin-pbuild
* [`55c55b071`](https://github.com/containerd/containerd/commit/55c55b0711120b5ae676ccbc92d548099234c992) Merge pull request  [#5965](https://github.com/containerd/containerd/pull/5965) from crosbymichael/ctd-metric
* [`9954147c0`](https://github.com/containerd/containerd/commit/9954147c0343639c538cc77416022e263090be80) pin protobuild version to tag
* [`2458afeb1`](https://github.com/containerd/containerd/commit/2458afeb131b8942907b1c62a9b1751387e2ed08) Fix content copy to not ignore unexpected EOF
* [`6bec0d39b`](https://github.com/containerd/containerd/commit/6bec0d39b043c8cc9de3df9d7a8b6c8611fe348e) use a const metric for build_info
* [`ae27a6b05`](https://github.com/containerd/containerd/commit/ae27a6b05ce42bd0c3e794ae46e9a1d9f0cb37f0) Add metric exposing build version&revision
* [`d58542a9d`](https://github.com/containerd/containerd/commit/d58542a9d11187c94c511b095928e2e6d8739e54) Merge pull request  [#5627](https://github.com/containerd/containerd/pull/5627) from payall4u/payall4u/cri-support-cgroup-v2
* [`d040ca384`](https://github.com/containerd/containerd/commit/d040ca3845a50243493d7895f9a296a6a04fc794) Merge pull request  [#5861](https://github.com/containerd/containerd/pull/5861) from kzys/restart-monitor
* [`5e32e9d85`](https://github.com/containerd/containerd/commit/5e32e9d8552022ed86cb844f5ef1ce02172b65d4) Merge pull request  [#5917](https://github.com/containerd/containerd/pull/5917) from mxpv/issue_forms
* [`b01cad3b5`](https://github.com/containerd/containerd/commit/b01cad3b56e0e150cdeff4f8b41a35c1b53bbdcd) Merge pull request  [#5945](https://github.com/containerd/containerd/pull/5945) from fuweid/fix_5900
* [`99987f2a5`](https://github.com/containerd/containerd/commit/99987f2a5eae653c36a78f5258fd5369766cebcf) Merge pull request  [#5936](https://github.com/containerd/containerd/pull/5936) from ukontainer/feature-darwin-runtime-shim
* [`bdb41f607`](https://github.com/containerd/containerd/commit/bdb41f607928f5170af590797be319d95b85b998) Merge pull request  [#5858](https://github.com/containerd/containerd/pull/5858) from levinxo/patch-1
* [`5540fc428`](https://github.com/containerd/containerd/commit/5540fc42802018c98956b9ab6615ea8065f6a310) Merge pull request  [#5949](https://github.com/containerd/containerd/pull/5949) from wzshiming/fix/write-diff
* [`bef14adfd`](https://github.com/containerd/containerd/commit/bef14adfd998630a204f3030106f92a6583e6777) Merge pull request  [#5958](https://github.com/containerd/containerd/pull/5958) from zouyee/dail
* [`b06d0a3e0`](https://github.com/containerd/containerd/commit/b06d0a3e0da982c81a952430e6201ffb3499f0a6) Merge pull request  [#5951](https://github.com/containerd/containerd/pull/5951) from adelina-t/ws_2022_job
* [`8e850bc0f`](https://github.com/containerd/containerd/commit/8e850bc0feeba4910bf6e8f079b6c5ca5f34d199) replace deprecated Dail with DailContext
* [`ff75f7d48`](https://github.com/containerd/containerd/commit/ff75f7d4899cdaa019be4cd904fc5c4ab9748b09) Merge pull request  [#5943](https://github.com/containerd/containerd/pull/5943) from AdamKorcz/fuzz13
* [`0ae5c41f1`](https://github.com/containerd/containerd/commit/0ae5c41f1b52e29d69d5b64530e7403e1200cb81) Merge pull request  [#5944](https://github.com/containerd/containerd/pull/5944) from zouyee/deprecated
* [`132aa56ee`](https://github.com/containerd/containerd/commit/132aa56ee787a4b5b170ce25aa3f04164a99d059) Merge pull request  [#5947](https://github.com/containerd/containerd/pull/5947) from kerthcet/feature/upgrade-pause-image-to-3.6
* [`aeea697d8`](https://github.com/containerd/containerd/commit/aeea697d84f214ab99b542fa5e695b9369e3ca0b) Add WS2022 support in Windows Periodic tests
* [`55faa5e93`](https://github.com/containerd/containerd/commit/55faa5e93d7fdacc7d9b28ee79a0972ec18e3471) task delete: Closes task IO before waiting
* [`f42513112`](https://github.com/containerd/containerd/commit/f42513112f65b24668a46a1cae9480f06edfdaec) integration: Adds Windows HostProcess tests
* [`ccc5ee303`](https://github.com/containerd/containerd/commit/ccc5ee303892023081a880ffc32bbd8ebf56461d) archive: Add WriteDiff error logs
* [`820bd9269`](https://github.com/containerd/containerd/commit/820bd926906f60e19a62b7eb809053fe3e75818c) fix document non-synchronous in crictl.md
* [`2bcd6a4e8`](https://github.com/containerd/containerd/commit/2bcd6a4e8837d14a7b980349281c7508a701e4ab) cri: patch update image labels
* [`789abc936`](https://github.com/containerd/containerd/commit/789abc9367b27506f6559f60448018134881630f) using Hosts replace deprecated field
* [`57e10439d`](https://github.com/containerd/containerd/commit/57e10439d9d1d66492ae55e48af713d9a7a4c6f8) Fixes task kill --force on Windows
* [`abf4de498`](https://github.com/containerd/containerd/commit/abf4de4985fdf8edf0220a055ff14b9c33c5547c) integration: Enables Windows containerd restart test
* [`96ec0b6f3`](https://github.com/containerd/containerd/commit/96ec0b6f34c05d26de4d9433b45a3493e16fc28e) content fuzzer: Clean up tempdir
* [`61a46e9fd`](https://github.com/containerd/containerd/commit/61a46e9fdde52221a563e3f11fbd9fdd047a8ae8) Merge pull request  [#5929](https://github.com/containerd/containerd/pull/5929) from dcantah/update-hcsshim-0.8.21
* [`dd8b6ee3f`](https://github.com/containerd/containerd/commit/dd8b6ee3fb11d3fdde54f2505971ef5643b6dd88) Merge pull request  [#5937](https://github.com/containerd/containerd/pull/5937) from kolyshkin/riscv-pie
* [`eb2530be8`](https://github.com/containerd/containerd/commit/eb2530be8434a63e5358b6aa52cd3b76054bc31a) Makefile.linux: build on riscv with PIE
* [`6b0b64a51`](https://github.com/containerd/containerd/commit/6b0b64a51a5112954355cc2cb1809bd410e53855) ctr: Fixes Windows image import
* [`a43fa9f28`](https://github.com/containerd/containerd/commit/a43fa9f284e5f0a4c50f65f80a88a3a91d3e5f75) darwin: runtime support
* [`5dd38792a`](https://github.com/containerd/containerd/commit/5dd38792a82e1f7bb0579263e8854a8b373371e4) darwin: use the default values for socketRoot variable
* [`1dfd8a279`](https://github.com/containerd/containerd/commit/1dfd8a279ef7699fee06d11d89a5d99e1429f313) Merge pull request  [#5932](https://github.com/containerd/containerd/pull/5932) from dcantah/ctr-exec-add-cwd
* [`27046a9e0`](https://github.com/containerd/containerd/commit/27046a9e06de44ecc4b1662ca43977cc2d6c789e) Fix cwd flag for `ctr tasks exec`
* [`24cec9be5`](https://github.com/containerd/containerd/commit/24cec9be560c44bf7ab3135836ebf9caddbf7c61) sandbox: Allows the sandbox to be deleted in NotReady state
* [`1dd0d59b7`](https://github.com/containerd/containerd/commit/1dd0d59b7386d9f2ae44fdcabcce21f8bf3b4900) go.mod: Update hcsshim to v0.8.21
* [`e00f87f1d`](https://github.com/containerd/containerd/commit/e00f87f1dc6a22d3c34495dcd75769d80e56a761) Merge pull request  [#5927](https://github.com/containerd/containerd/pull/5927) from adelina-t/ws_2022_image_update
* [`4bc5ca76e`](https://github.com/containerd/containerd/commit/4bc5ca76e7cf70d36411a31c68915803691020dc) Merge pull request  [#5122](https://github.com/containerd/containerd/pull/5122) from mythi/non-root-containers-and-devices-v2
* [`6d3d34b85`](https://github.com/containerd/containerd/commit/6d3d34b85d5aa4c32e350f36693507d6e0c1c0fc) Update Pause image in tests & config
* [`278176db1`](https://github.com/containerd/containerd/commit/278176db151b3559a73ffa5bcdfe3b025a5abae6) Address issue forms feedback
* [`44d5a7e26`](https://github.com/containerd/containerd/commit/44d5a7e26d84d69f33ffdce2b6a5f4d2535b9983) Merge pull request  [#5921](https://github.com/containerd/containerd/pull/5921) from ktock/fix-failed-precondition
* [`0d5223d70`](https://github.com/containerd/containerd/commit/0d5223d700b58f3241ed198ef78737aad8f02f1d) Merge pull request  [#5845](https://github.com/containerd/containerd/pull/5845) from alexandref75/fix-dir-device-support
* [`838afd211`](https://github.com/containerd/containerd/commit/838afd21161c0c43fbb28f3b71b8ad1e37fe63fd) Adding testing of two devices
* [`ebcf876bf`](https://github.com/containerd/containerd/commit/ebcf876bf7b8f1cb79c60f37af08affa135c398d) Merge pull request  [#5914](https://github.com/containerd/containerd/pull/5914) from claudiubelu/windows/platform-default-match
* [`e0f8c04da`](https://github.com/containerd/containerd/commit/e0f8c04dad213975bf55dcfa71986be6d8b489e2) cri: Devices ownership from SecurityContext
* [`7bc5aa74c`](https://github.com/containerd/containerd/commit/7bc5aa74c2cf054b8e5a7982cad073c252fb5f4a) Fix pull fails on unexpected EOF
* [`11ab3cba0`](https://github.com/containerd/containerd/commit/11ab3cba0e161f66f5d5bfdf680055c9b82533ce) Use issue forms for bug reporting
* [`e2c769d6f`](https://github.com/containerd/containerd/commit/e2c769d6fb17391df70bd658e1573360d4ccbb7b) windows: The DefaultSpec platform should match the Default matcher
* [`7826a21ac`](https://github.com/containerd/containerd/commit/7826a21ac6319a033fdf7573f2a17d2507a69f2f) Update RELEASES.md
* [`af1a0908d`](https://github.com/containerd/containerd/commit/af1a0908d06b4f7db4a11bfc67ecc2f34baeb04b) Merge pull request  [#5865](https://github.com/containerd/containerd/pull/5865) from dcantah/windows-pod-runasusername
* [`2ac996840`](https://github.com/containerd/containerd/commit/2ac996840187b2e42fdbe4e4c9b6b55a7c775c43) replace uses of os/exec with golang.org/x/sys/execabs
* [`ebe8f8c6b`](https://github.com/containerd/containerd/commit/ebe8f8c6be4aa00ef540ff7bbc2afa10af1fd250) Merge pull request  [#5899](https://github.com/containerd/containerd/pull/5899) from AkihiroSuda/runc-v1.0.2
* [`6fa958853`](https://github.com/containerd/containerd/commit/6fa958853197af31ffd1225a6c300589e5068667) Merge pull request  [#5903](https://github.com/containerd/containerd/pull/5903) from AkihiroSuda/gofmt117
* [`81317350c`](https://github.com/containerd/containerd/commit/81317350c4c3379355abb5f2fb5c2ef9e73a20fa) Merge pull request  [#5905](https://github.com/containerd/containerd/pull/5905) from thaJeztah/update_toml
* [`25644b461`](https://github.com/containerd/containerd/commit/25644b4614d607199befa3c83c86540496a6e4f9) Add RunAsUserName functionality for the Windows Pod Sandbox Container
* [`e18516767`](https://github.com/containerd/containerd/commit/e185167677649b751fd04c18c71ea39f4deda114) go.mod: update runc to v1.0.2
* [`3f8ea1b6a`](https://github.com/containerd/containerd/commit/3f8ea1b6a1755a7c09addbcdabceb9b2eecc2ff7) update runc binary to v1.0.2
* [`f43f22966`](https://github.com/containerd/containerd/commit/f43f22966d47daf2ceba7fc47321c6ac08eff3b4) Merge pull request  [#5902](https://github.com/containerd/containerd/pull/5902) from dweomer/rke2-690-on-main
* [`429296910`](https://github.com/containerd/containerd/commit/429296910658a0b4c892fd01c65df7d3f1202b3e) go.mod: github.com/pelletier/go-toml v1.9.3
* [`f8dfbee17`](https://github.com/containerd/containerd/commit/f8dfbee17888240616a57a724fa34bef4357092d) add cri test case
* [`9a8bf1315`](https://github.com/containerd/containerd/commit/9a8bf13158e469e284757bc9f88796439817423b) feature: add field LinuxContainerResources.Unified on cri
* [`d3aa7ee9f`](https://github.com/containerd/containerd/commit/d3aa7ee9f065d5d8773b4b38124ad6e3d6634dc2) Run `go fmt` with Go 1.17
* [`c3609ff4c`](https://github.com/containerd/containerd/commit/c3609ff4ca0c1e2c4b713db65a63faefca5786db) cri: filter selinux xattr for image volumes
* [`ff2e58d11`](https://github.com/containerd/containerd/commit/ff2e58d11409de3d42eb36ad3451cc8f7d508dc8) Merge pull request  [#5131](https://github.com/containerd/containerd/pull/5131) from perithompson/windows-hostnetwork
* [`736222dd8`](https://github.com/containerd/containerd/commit/736222dd87c15609976fb1e656959db1a6a05c90) Merge pull request  [#5897](https://github.com/containerd/containerd/pull/5897) from kzys/upgrade-golangci-lint
* [`70d122b29`](https://github.com/containerd/containerd/commit/70d122b290aec4cc415973a0b7508d3e2f16b91d) Merge pull request  [#5889](https://github.com/containerd/containerd/pull/5889) from estesp/update-go-1.17
* [`a6034d021`](https://github.com/containerd/containerd/commit/a6034d021f9563e46da537a68a8946bf2ec782af) Merge pull request  [#5896](https://github.com/containerd/containerd/pull/5896) from kzys/pid-order
* [`4dd5ca70f`](https://github.com/containerd/containerd/commit/4dd5ca70fb0948299d52fddc115e999ce8fc143b) script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
* [`f7b1ceb9f`](https://github.com/containerd/containerd/commit/f7b1ceb9f666c7a142f139a3306c8163866a280e) integration: investigate TestRestartMonitor's failure
* [`acb81bbda`](https://github.com/containerd/containerd/commit/acb81bbdaf35524ea020d81607ab62dd8bb718ed) integration: fix TestContainerPids
* [`9fe7bc938`](https://github.com/containerd/containerd/commit/9fe7bc938b1264844e3434e501c7c817c1956ea4) Bump integration timeout to 35 min
* [`7fba86264`](https://github.com/containerd/containerd/commit/7fba862648b2ee70a351441f0e910274937ea04b) Fix dir support for devices V3 (#4847)
* [`a5eccab27`](https://github.com/containerd/containerd/commit/a5eccab2787eb7c8baba18a71d955a2504ed22fe) Merge pull request  [#5891](https://github.com/containerd/containerd/pull/5891) from crosbymichael/net-host-env
* [`6f60b3016`](https://github.com/containerd/containerd/commit/6f60b3016f126d06717cd296b86dce0679b61d2c) [ctr] add HOSTNAME env for host network
* [`8d135d284`](https://github.com/containerd/containerd/commit/8d135d28420a1f8aa7ce8bb2f56103555f380a5f) Add support for shim plugins
* [`fda782a7b`](https://github.com/containerd/containerd/commit/fda782a7b941de5438e4fbbd38675bf23b69304b) Merge pull request  [#5886](https://github.com/containerd/containerd/pull/5886) from AdamKorcz/fuzz11
* [`c076ede40`](https://github.com/containerd/containerd/commit/c076ede4056668e466d86ddc266cb6ce9f5bcc96) Merge pull request  [#5884](https://github.com/containerd/containerd/pull/5884) from adisky/add-systemd-env
* [`f8602c372`](https://github.com/containerd/containerd/commit/f8602c3725c55938c6b4ca3440ef07e6c3f28ba4) Update to Go 1.17
* [`c9b1b2fd5`](https://github.com/containerd/containerd/commit/c9b1b2fd5b6ec9d434a4baf3c091a31bfa039934) Fuzzing: Add fuzzer
* [`9e1b57ca0`](https://github.com/containerd/containerd/commit/9e1b57ca0161c4081bbc899db32b665d3d38bc94) Add env for SystemdCgroup driver
* [`024804b1b`](https://github.com/containerd/containerd/commit/024804b1be8a67f85e06c7b2dcfd0af14ae6a569) Merge pull request  [#5878](https://github.com/containerd/containerd/pull/5878) from gjkim42/allow-expanded-dns-config
* [`1224060f8`](https://github.com/containerd/containerd/commit/1224060f8928ef58c8d480bc7763a09b19427413) Allow expanded DNS configuration
* [`d0be7b90f`](https://github.com/containerd/containerd/commit/d0be7b90f1306d2c7d59e28d3ffd74eddcddfa21) Merge pull request  [#5863](https://github.com/containerd/containerd/pull/5863) from AdamKorcz/fuzz10
* [`538d93d2f`](https://github.com/containerd/containerd/commit/538d93d2fcab530f525687a90521d30c00965df8) Fuzzing: Add 4 fuzzers
* [`79b369a0b`](https://github.com/containerd/containerd/commit/79b369a0bb9d79bf2c397d2bed771fca9144b46e) Added windows hostProcess cni skip
* [`7d4c95ff0`](https://github.com/containerd/containerd/commit/7d4c95ff04a4b65ddd12963ef20ff7b5d3d24b96) Merge pull request  [#5813](https://github.com/containerd/containerd/pull/5813) from mxpv/shim_cleanup
* [`159c0f04e`](https://github.com/containerd/containerd/commit/159c0f04e521aead4f101eb964e715c22427c06c) Merge pull request  [#5840](https://github.com/containerd/containerd/pull/5840) from AdamKorcz/fuzz9
* [`1c4e9d048`](https://github.com/containerd/containerd/commit/1c4e9d04879782d79bed5989da8ebc7ff957984f) Merge pull request  [#5846](https://github.com/containerd/containerd/pull/5846) from crosbymichael/ctr-cpu.shares
* [`0fbcf9b97`](https://github.com/containerd/containerd/commit/0fbcf9b97f3b5ff0ba582f4410333bd2d63e277c) Merge pull request  [#5847](https://github.com/containerd/containerd/pull/5847) from kzys/master-to-main
* [`4c7338aa6`](https://github.com/containerd/containerd/commit/4c7338aa64997166a6f0b0a057b9a0f4682ce0a6) Merge pull request  [#5849](https://github.com/containerd/containerd/pull/5849) from kzys/lock-error-2
* [`0ae2d3987`](https://github.com/containerd/containerd/commit/0ae2d3987b354d208aa65cd92a0800232bfd2efb) Merge pull request  [#5857](https://github.com/containerd/containerd/pull/5857) from dims/fix-bad-make-protos-failure
* [`82fe0db9a`](https://github.com/containerd/containerd/commit/82fe0db9aa83d94c04761ee9907befb5d1e61597) Fix bad `make protos` failure
* [`ed564061e`](https://github.com/containerd/containerd/commit/ed564061e59c2b4a7d8f644c2440808c748c0ed9) Merge pull request  [#5851](https://github.com/containerd/containerd/pull/5851) from zouyee/location
* [`56c5daa52`](https://github.com/containerd/containerd/commit/56c5daa52d29295c9090875e9c34d84e8ad03588) Merge pull request  [#5856](https://github.com/containerd/containerd/pull/5856) from kzys/remove-fossa
* [`37f2c7ca8`](https://github.com/containerd/containerd/commit/37f2c7ca8d681ba3d5e9e0b6a26ef0be0a382362) Merge pull request  [#5850](https://github.com/containerd/containerd/pull/5850) from thaJeztah/runc_build_docs
* [`284c29dde`](https://github.com/containerd/containerd/commit/284c29dde7727b9a305c66be4520ec0c85968464) Merge pull request  [#5836](https://github.com/containerd/containerd/pull/5836) from dcantah/k8s122
* [`1c47fb17f`](https://github.com/containerd/containerd/commit/1c47fb17f3b0c3da9ff45960487f93fc03ba1bf4) docs: remove FOSSA's badge
* [`bc4cea4e4`](https://github.com/containerd/containerd/commit/bc4cea4e44d5d219a5f6bba0654e6918ccd2a2bb) docs: rename main to master
* [`9d07f8d9a`](https://github.com/containerd/containerd/commit/9d07f8d9a4e999f54dd17666697f1d7851872fb1) Merge pull request  [#5852](https://github.com/containerd/containerd/pull/5852) from adelina-t/add_trap_cri_integration_script
* [`5e49ec27d`](https://github.com/containerd/containerd/commit/5e49ec27dc4ff4f619453578a624d8cc35b21630) Use http.Get to download binaries instead of exec.Command
* [`e6538b8bc`](https://github.com/containerd/containerd/commit/e6538b8bce1814471af2cd3467d5f4c6e863cb08) Add trap to cri-integration test script
* [`d2f3b7146`](https://github.com/containerd/containerd/commit/d2f3b71468f385e535e6db31b430bfeeb973dead) add cpu-shares to ctr
* [`30b832e49`](https://github.com/containerd/containerd/commit/30b832e494ebaa244d2321299dc0d3072eae4044) archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
* [`9cc179aa7`](https://github.com/containerd/containerd/commit/9cc179aa773b3aa09de03934c8850a770d7aa71b) BUILDING.md: remove some bits about building runc
* [`42b57cc73`](https://github.com/containerd/containerd/commit/42b57cc730e6283b5f64563e90a7201d47d9a354) BUILDING.md: markdown fixes
* [`0bcd45d3a`](https://github.com/containerd/containerd/commit/0bcd45d3a0f4a09bdb4dd6010d2fada08aca472e) Merge pull request  [#5848](https://github.com/containerd/containerd/pull/5848) from kzys/build-flags
* [`a3d6edc0e`](https://github.com/containerd/containerd/commit/a3d6edc0eddeb380dceed84884a78b5dc621023b) content: return the error with its timestamp
* [`a5468852f`](https://github.com/containerd/containerd/commit/a5468852f8123ada3757db9b608cd6648285d835) docs: list all snapshotter-related build flags
* [`e634f04d8`](https://github.com/containerd/containerd/commit/e634f04d8cdb6c2f96eea2e4e66d0e4500a46282) go.mod: update kubernetes to v1.22.0
* [`11a90c7ff`](https://github.com/containerd/containerd/commit/11a90c7ff4b59ba4a0d639c74fe8eb0fa0761f85) Fuzzing: Add experimental version of container fuzzer
* [`218db0f9a`](https://github.com/containerd/containerd/commit/218db0f9afaeda2813bddbddf2764c8414bb9c42) Merge pull request  [#5835](https://github.com/containerd/containerd/pull/5835) from dmcgowan/plugin-events-cleanup
* [`7f0be5edd`](https://github.com/containerd/containerd/commit/7f0be5edd81d44a9eeee17268e18e1a101ec6e39) Merge pull request  [#5839](https://github.com/containerd/containerd/pull/5839) from dcantah/ci-weirdness
* [`1373bc519`](https://github.com/containerd/containerd/commit/1373bc519b4dfa92ac3b91246a959693d5bbaef9) Merge pull request  [#5842](https://github.com/containerd/containerd/pull/5842) from thaJeztah/update_go_116
* [`42a28ad2c`](https://github.com/containerd/containerd/commit/42a28ad2ca7faecfa3e2024952781136211c1fbf) Update Go to 1.16.7
* [`fedd657ea`](https://github.com/containerd/containerd/commit/fedd657ea02873301e56a653c898b86ef0b404e7) Merge pull request  [#5838](https://github.com/containerd/containerd/pull/5838) from mxpv/ci
* [`534685f95`](https://github.com/containerd/containerd/commit/534685f9558cc67125156ba2fbdd0e0ade74cc33) Fix Linux CI Linter using go 1.15.14
* [`10eab21a4`](https://github.com/containerd/containerd/commit/10eab21a4d4f47b2eb63a83e3675d151277a430a) Cleanup CI
* [`587fc0925`](https://github.com/containerd/containerd/commit/587fc092598791ab58bfa275958ce20cc5d80783) Merge pull request  [#5834](https://github.com/containerd/containerd/pull/5834) from dmcgowan/remove-redundant-build-tags
* [`0a0621bb4`](https://github.com/containerd/containerd/commit/0a0621bb47d48d8cbcbb614ee38422ce8b98a340) Move plugin context events into separate plugin
* [`6f027e38a`](https://github.com/containerd/containerd/commit/6f027e38a8e705a05ccc7031afb39b53a358b958) Remove redundant build tags
* [`b43d9502c`](https://github.com/containerd/containerd/commit/b43d9502c27c0105f47d9ec257e23d716c4756be) Merge pull request  [#5830](https://github.com/containerd/containerd/pull/5830) from mxpv/darwin
* [`5b76d08f4`](https://github.com/containerd/containerd/commit/5b76d08f4c2213fcef371580b1b7b66e292b064f) Merge pull request  [#5731](https://github.com/containerd/containerd/pull/5731) from alakesh/opentelemetry-basic
* [`3c5424454`](https://github.com/containerd/containerd/commit/3c5424454b60e775829c2e9b56be53a6af42fa90) [otel-tracing] vendor and go modules changes
* [`3597ac859`](https://github.com/containerd/containerd/commit/3597ac859d3fc79f250e5d0f1664fb9db9143898) [otel-tracing] Initial opentelemetry support
* [`7917da764`](https://github.com/containerd/containerd/commit/7917da764c6d6b0851f3adf1ef2346d62c88a1d0) Change default directories on Darwin
* [`10824eaf2`](https://github.com/containerd/containerd/commit/10824eaf2ea46e3be7e4ac29a9ae6de11ec21093) remove go 1.13 from containerd
* [`d30d897ef`](https://github.com/containerd/containerd/commit/d30d897ef93e7838f0c0828e0e85619b93331131) Cleanup v2 shim
* [`b97a56b71`](https://github.com/containerd/containerd/commit/b97a56b71445a9365754259fc383bb0d74b425e3) Merge pull request  [#5829](https://github.com/containerd/containerd/pull/5829) from AdamKorcz/fuzz8
* [`c3c276ae1`](https://github.com/containerd/containerd/commit/c3c276ae1c3c322b192539980ce4973f452fd0a2) Fuzzing: Fix for OSS-fuzz issue 36825
* [`dd08c7a49`](https://github.com/containerd/containerd/commit/dd08c7a49fd8a0d5aade30b2a5a864bb61b9ba27) Merge pull request  [#5825](https://github.com/containerd/containerd/pull/5825) from AdamKorcz/fuzz7
* [`424d7e47b`](https://github.com/containerd/containerd/commit/424d7e47bc2759b68b5c5479644fb9e7f2d387f1) Merge pull request  [#5760](https://github.com/containerd/containerd/pull/5760) from thaJeztah/cleanup_test_scripts
* [`6c257552a`](https://github.com/containerd/containerd/commit/6c257552a72a49f75114c01401d3703f880ac054) scripts: declare ROOT closer to where it's used, and some DRY changes
* [`dba0ef4eb`](https://github.com/containerd/containerd/commit/dba0ef4eb58e87cd3c6ab5a0e93f39ff1703b6eb) scripts: add missing quotes, and minor linting issues
* [`0cb656860`](https://github.com/containerd/containerd/commit/0cb656860fabd4ad4d4ac93b4b0e2d88270fd231) test/build-utils.sh: remove support for Debian Jessie
* [`41a04246f`](https://github.com/containerd/containerd/commit/41a04246f414f43080c9f0c9944516bd5855b209) Fuzzing: Add two more fuzzers
* [`7d4891783`](https://github.com/containerd/containerd/commit/7d4891783aac5adf6cd83f657852574a71875631) Merge pull request  [#5821](https://github.com/containerd/containerd/pull/5821) from thaJeztah/simplify_platforms_format
* [`58dbe9685`](https://github.com/containerd/containerd/commit/58dbe9685e21c17431aa750bc5b1a9c7c49e2f75) Merge pull request  [#5823](https://github.com/containerd/containerd/pull/5823) from AdamKorcz/fuzz6
* [`2c699cc35`](https://github.com/containerd/containerd/commit/2c699cc35095476ddae077a459cbcf8962b51050) Fuzzing: Remove panics of container_fuzzer
* [`f2c3122e9`](https://github.com/containerd/containerd/commit/f2c3122e9c6470c052318497899b290a5afc74a5) platforms: Format(): use path.Join() instead of joinNotEmpty()
* [`f12040b6b`](https://github.com/containerd/containerd/commit/f12040b6b6565eb8a690f076ffebb1b442f24a09) Merge pull request  [#5785](https://github.com/containerd/containerd/pull/5785) from AdamKorcz/fuzz5
* [`acecd6603`](https://github.com/containerd/containerd/commit/acecd660311216c91d13435d561a854eb5e4c580) Change protoc link
* [`fcd9c4199`](https://github.com/containerd/containerd/commit/fcd9c41991b1697c26cb095fdd8400f8369c5322) Merge pull request  [#5746](https://github.com/containerd/containerd/pull/5746) from lifupan/main
* [`ee1dfc0cd`](https://github.com/containerd/containerd/commit/ee1dfc0cd9a0df765e15817faf7a15b520d73571) Merge pull request  [#5809](https://github.com/containerd/containerd/pull/5809) from isugimpy/main
* [`ce437864b`](https://github.com/containerd/containerd/commit/ce437864b2e7e2f9b94e02ba564e010a5ea2248d) mergo: Upgrade to 0.3.12 to fix panic
* [`4282ec12c`](https://github.com/containerd/containerd/commit/4282ec12cd822800fb4239071926749ba3b4067b) Merge pull request  [#5802](https://github.com/containerd/containerd/pull/5802) from rst0git/ci-criu-ppa
* [`d1e868c83`](https://github.com/containerd/containerd/commit/d1e868c832d42f443dbd55118b2eff9aa92b021a) ci: install criu from PPA
* [`5d3e8fd2c`](https://github.com/containerd/containerd/commit/5d3e8fd2c07af15964b6b2f1b47dacaa3ed87157) Merge pull request  [#5144](https://github.com/containerd/containerd/pull/5144) from devholic/release-non-cni-version
* [`a3e431ad4`](https://github.com/containerd/containerd/commit/a3e431ad417dbcf878d8c359b4914c1fe6591bd7) Merge pull request  [#5725](https://github.com/containerd/containerd/pull/5725) from adelina-t/enable_critest
* [`2b9f8334c`](https://github.com/containerd/containerd/commit/2b9f8334c694a65644ca4aab5d017ef5ae3e1fd7) Merge pull request  [#5792](https://github.com/containerd/containerd/pull/5792) from dims/script-to-check-if-entries-in-go.mod-files-are-in-sync
* [`fb589a713`](https://github.com/containerd/containerd/commit/fb589a71331869b141c83afb098152359f44b8c4) Merge pull request  [#5043](https://github.com/containerd/containerd/pull/5043) from IRCody/shared_namespace
* [`9eb08bf8e`](https://github.com/containerd/containerd/commit/9eb08bf8e5f7c68d4be58646621826543c58b219) Merge pull request  [#5784](https://github.com/containerd/containerd/pull/5784) from thaJeztah/update_goos_list
* [`1dadd6a1d`](https://github.com/containerd/containerd/commit/1dadd6a1d2e9781b847c02454fc9de545e67fc87) Merge pull request  [#5804](https://github.com/containerd/containerd/pull/5804) from IRCody/proto-download
* [`e692a0192`](https://github.com/containerd/containerd/commit/e692a01926cd296f3b77ee7f6ba1308b5ecd6aca) Add shared content label to namespaces
* [`3a8622e30`](https://github.com/containerd/containerd/commit/3a8622e309d9f75e0c12fd43a31d95127ff341be) Updates the location of protobuf downloads in docs
* [`c4664bdac`](https://github.com/containerd/containerd/commit/c4664bdac670b6f360080e9540f77440e74903bf) Merge pull request  [#5803](https://github.com/containerd/containerd/pull/5803) from dmcgowan/fix-protobuf-install
* [`0d9393650`](https://github.com/containerd/containerd/commit/0d939365079d91e82549c808fde1ba70cf0cdea3) Update protobuf install to use correct repository
* [`d62d6c11d`](https://github.com/containerd/containerd/commit/d62d6c11dc381f9a4b3301329a20ccf3babcc604) Split release steps into multiple tasks
* [`b4807122d`](https://github.com/containerd/containerd/commit/b4807122d29370c79272f8d982e9c408736a4932) Update release workflow to upload binary without CNI
* [`5280530a0`](https://github.com/containerd/containerd/commit/5280530a0dce323beef69a8144c78be78d3f1988) Merge pull request  [#5624](https://github.com/containerd/containerd/pull/5624) from ktock/overlayupper
* [`67406b373`](https://github.com/containerd/containerd/commit/67406b3732b3139ea2f825541e5c84d46ffd5e04) overlay: add an optional label of upperdir location of each snapshot
* [`43117cf91`](https://github.com/containerd/containerd/commit/43117cf9193ab81fc3c178c0bef1d4ca49259c94) Script to check if entries in go.mod files are in sync
* [`caf9e256b`](https://github.com/containerd/containerd/commit/caf9e256b78ff600d8b7b17e40711bf91884da78) Merge pull request  [#5693](https://github.com/containerd/containerd/pull/5693) from kzys/sigrtmin
* [`742ffadfb`](https://github.com/containerd/containerd/commit/742ffadfbd8ddbae27f567d5afd8c786f556c26b) Merge pull request  [#5800](https://github.com/containerd/containerd/pull/5800) from zhuangqh/binarycall-timeout
* [`6d31cdda5`](https://github.com/containerd/containerd/commit/6d31cdda5090b2d2ca42437b0c9b70584486ee1c) Merge pull request  [#5716](https://github.com/containerd/containerd/pull/5716) from dims/add-new-go-module-for-api-directory
* [`4ab3e7a53`](https://github.com/containerd/containerd/commit/4ab3e7a53a15cf0bc311179994f339760365dd97) runtime: fix the issue of create new socket with abstract address
* [`cc88f8e0a`](https://github.com/containerd/containerd/commit/cc88f8e0ae82d08ccf821f9f1de4c180afb8e6ca) Split fuzzer to two fuzzers
* [`7a10fd4fc`](https://github.com/containerd/containerd/commit/7a10fd4fccb93a04b80352fea71fc1095d742b7f) respect context timeout in shim binary call
* [`23bc3db91`](https://github.com/containerd/containerd/commit/23bc3db914c30b133e5fa037fc2a3242f7329fc7) Enable critest on Windows
* [`494b940f1`](https://github.com/containerd/containerd/commit/494b940f1475cb393d8f6ec8474eaeb50d022231) Introduce a new go module - containerd/api for use in standalone clients
* [`158901756`](https://github.com/containerd/containerd/commit/158901756c6ca8574126de2d63c1dc75ef683eda) Merge pull request  [#5606](https://github.com/containerd/containerd/pull/5606) from zwtop/master
* [`b5b5dcc27`](https://github.com/containerd/containerd/commit/b5b5dcc2736fa46a910b6ba2bc86004b22607ef4) Merge pull request  [#5162](https://github.com/containerd/containerd/pull/5162) from claudiubelu/integration-test-images
* [`ce3d6e9bf`](https://github.com/containerd/containerd/commit/ce3d6e9bfc06775206a6e11cfec2120508ea3964) Merge pull request  [#5795](https://github.com/containerd/containerd/pull/5795) from mikebrow/cri-support-metrics
* [`0def98e46`](https://github.com/containerd/containerd/commit/0def98e462706286e6eaeff4a90be22fda75e761) Merge pull request  [#5794](https://github.com/containerd/containerd/pull/5794) from mikebrow/clarify-host-docs
* [`4fdb88464`](https://github.com/containerd/containerd/commit/4fdb884644ecdd6a4b4b0d1bd85b8f6ccc1995c6) add CRI support matrix to RELEASES.md
* [`b5fc7846c`](https://github.com/containerd/containerd/commit/b5fc7846c465c10d9dfd4f0c150571c78e1a12b2) adding a little more clarity
* [`3a503acd5`](https://github.com/containerd/containerd/commit/3a503acd506bc1d8d0c2d3b357e18a4112aa79dd) Merge pull request  [#5793](https://github.com/containerd/containerd/pull/5793) from thaJeztah/gotestsum_1.7
* [`1d3d08026`](https://github.com/containerd/containerd/commit/1d3d08026d25797b81ec1d385119dffa04a2ad46) Support SIGRTMIN+n signals
* [`18d6cc1b0`](https://github.com/containerd/containerd/commit/18d6cc1b06ad1ff8fb7def3a667f8bfe68e83e70) update gotestsum to v1.7.0
* [`3b7a3d599`](https://github.com/containerd/containerd/commit/3b7a3d599b87dacf1d52e581f6a48ab3ea49ccfe) Merge pull request  [#5756](https://github.com/containerd/containerd/pull/5756) from Kern--/discard-blocks
* [`f6fa3fdd7`](https://github.com/containerd/containerd/commit/f6fa3fdd7b47013bd9753c839309becbc1c01880) Merge pull request  [#5590](https://github.com/containerd/containerd/pull/5590) from oss-qm/submit/makefile-tags
* [`559f9a5b9`](https://github.com/containerd/containerd/commit/559f9a5b90073dc12005d1a611c97007db0be131) Merge pull request  [#5744](https://github.com/containerd/containerd/pull/5744) from mxpv/metrics
* [`ee3272e9c`](https://github.com/containerd/containerd/commit/ee3272e9cfe314d15ff5603817d4cd56492afd9a) Merge pull request  [#5745](https://github.com/containerd/containerd/pull/5745) from yylt/check
* [`c3f1f0e5e`](https://github.com/containerd/containerd/commit/c3f1f0e5ee20cf097ccabee6957ec6d18b02002b) Merge pull request  [#5775](https://github.com/containerd/containerd/pull/5775) from kzys/pid-order
* [`efa8ab715`](https://github.com/containerd/containerd/commit/efa8ab7158ea806e5ef2c9460187ec75eabab06e) Add runtime label to metrics
* [`6294235d8`](https://github.com/containerd/containerd/commit/6294235d8137424862def12cf3cf6267b3597dfc) Fuzzing: Add container fuzzer
* [`2405671d4`](https://github.com/containerd/containerd/commit/2405671d4089626f224473936e793fee19905d90) platforms: add "ios" as known OS, "loong64" as known ARCH
* [`a963242f7`](https://github.com/containerd/containerd/commit/a963242f78c8a05967dfe050cab1016ac7aeabee) Merge pull request  [#5779](https://github.com/containerd/containerd/pull/5779) from AdamKorcz/fuzz4
* [`2556aac67`](https://github.com/containerd/containerd/commit/2556aac6751829f7f219c4ddc3f5d4630c1dda07) Fuzzing: Add archive fuzzer
* [`0d45ac14e`](https://github.com/containerd/containerd/commit/0d45ac14e92a9b63f7e31dab5a9325b26e8a3e12) interface about shim build check
* [`00d52bb15`](https://github.com/containerd/containerd/commit/00d52bb159e091d1dee79e7b4c809662fe8f4e4d) integration: log all processes to investigate the test failure
* [`a137b64f5`](https://github.com/containerd/containerd/commit/a137b64f5099d47a0935f8cbb78a729ca44d2712) Merge pull request  [#5687](https://github.com/containerd/containerd/pull/5687) from AdamKorcz/fuzz3
* [`ee27cde73`](https://github.com/containerd/containerd/commit/ee27cde735e2a27a5e1465116ac98593b78d0a6f) Merge pull request  [#5735](https://github.com/containerd/containerd/pull/5735) from ktock/diffcompression
* [`f1d79d33b`](https://github.com/containerd/containerd/commit/f1d79d33b8479ddfa741e61b83dffda259fa16aa) Discard blocks when removing a thin device
* [`6389fc79f`](https://github.com/containerd/containerd/commit/6389fc79f08e3db3f7de945b0040da68a87759a0) Merge pull request  [#5770](https://github.com/containerd/containerd/pull/5770) from wzshiming/fix/push-docker-remote-close
* [`5a874e081`](https://github.com/containerd/containerd/commit/5a874e08120c54e7a19b083c53047c6b3a9f2c2d) Merge pull request  [#5769](https://github.com/containerd/containerd/pull/5769) from wzshiming/fix/fetch-docker-remote-close
* [`e325184c8`](https://github.com/containerd/containerd/commit/e325184c8c868edcfa1bd39c595112ba7c38e564) Merge pull request  [#5771](https://github.com/containerd/containerd/pull/5771) from thaJeztah/update_md2man
* [`d2b6d192d`](https://github.com/containerd/containerd/commit/d2b6d192db18655e0930bd3c8051947873ed39b1) Update cpuguy83/go-md2man binary to v2.0.1
* [`53ec1abec`](https://github.com/containerd/containerd/commit/53ec1abec228e5121d5de4acaab08ed26ad70b9c) remotes/docker/pusher.go: Fix missing Close()
* [`67d07fe5c`](https://github.com/containerd/containerd/commit/67d07fe5cf4f165396872499b3d36ee5cba6774d) remotes/docker/fetcher.go: Fix missing Close()
* [`0789a0c02`](https://github.com/containerd/containerd/commit/0789a0c02b78d70cc06c9c8f86d9a128f2b9d46c) Add docker fetch fuzzer
* [`b809212b1`](https://github.com/containerd/containerd/commit/b809212b18d335bc050f2abf71750d414440a3d0) Merge pull request  [#5750](https://github.com/containerd/containerd/pull/5750) from thaJeztah/cleanup_test_dockerfile
* [`b483177ee`](https://github.com/containerd/containerd/commit/b483177ee2089fd8284258840e2526370c15eab3) Support custom compressor for walking differ
* [`1292c50fe`](https://github.com/containerd/containerd/commit/1292c50fe99e9deb01155edef2ec9062305f311c) Merge pull request  [#5754](https://github.com/containerd/containerd/pull/5754) from thaJeztah/update_gotestsum
* [`51a8f969b`](https://github.com/containerd/containerd/commit/51a8f969bd5b4e5759ad11327820536648153cfd) Merge pull request from GHSA-c72p-9xmj-rx3w
* [`b88bf1eca`](https://github.com/containerd/containerd/commit/b88bf1eca7a76958d291192d38170ba45f92591d) Merge pull request  [#5755](https://github.com/containerd/containerd/pull/5755) from adisky/gce-configure-use-systemd
* [`29b86c547`](https://github.com/containerd/containerd/commit/29b86c54794b261022000147d426d65af00af815) Merge pull request  [#5751](https://github.com/containerd/containerd/pull/5751) from AkihiroSuda/runc-v1.0.1
* [`150e07b64`](https://github.com/containerd/containerd/commit/150e07b648e7766ca862ee868bf99544d0836e89) Use systemd cgroup driver for cgroupv2 tests
* [`603962bc8`](https://github.com/containerd/containerd/commit/603962bc81deb197350ee5144dad862d062eb964) update gotestsum to current master
* [`a12c7bd1c`](https://github.com/containerd/containerd/commit/a12c7bd1cf18b719416932bbdcbb6e6219b1f1d4) go.mod: runc v1.0.1
* [`43e0594ae`](https://github.com/containerd/containerd/commit/43e0594ae93be1b4629da91d25c4a830c91924a2) update runc binary to v1.0.1
* [`9537bc265`](https://github.com/containerd/containerd/commit/9537bc2654869bbc6fc4b740a674acfbcec9ab00) Dockerfile.test: build containerd in separate stage
* [`36be5ef3a`](https://github.com/containerd/containerd/commit/36be5ef3a26d5db8f487514e06179a17d7771b49) Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
* [`8faacfca1`](https://github.com/containerd/containerd/commit/8faacfca1647e6b8d2d37e35f11d0cf9bd5d42f6) Dockerfile.test: clean up apt indexes after installing
* [`9f7e6335c`](https://github.com/containerd/containerd/commit/9f7e6335c46f9a46cfe2f0955759842b095addc4) Dockerfile.test: build critools in a separate stage
* [`7ec8e2d36`](https://github.com/containerd/containerd/commit/7ec8e2d369606e870875f52a116ca2bf32e7317d) Dockerfile.test: build cni in a separate stage
* [`f9f423c07`](https://github.com/containerd/containerd/commit/f9f423c078f3b106fe1a87fd60c86eb2d606e2bf) Dockerfile.test: standard directory to collect build aftifacts
* [`e9f26eb87`](https://github.com/containerd/containerd/commit/e9f26eb877faf37dd0b6f33fe1292970b6183fd1) Dockerfile.test: split dev stage, and optimize order
* [`25fada0cc`](https://github.com/containerd/containerd/commit/25fada0cc7082d3f6c2e54e58e1794234a605daf) Dockerfile.test: skip curl, gcc, git and make install
* [`546538971`](https://github.com/containerd/containerd/commit/546538971cbde5c9fd95da32d0d77daba63c72ad) install-critools: make sure DESTDIR exists
* [`e830c5364`](https://github.com/containerd/containerd/commit/e830c5364cd652b2774dccce3524c7d10f8007dd) Merge pull request  [#5737](https://github.com/containerd/containerd/pull/5737) from thaJeztah/remove_redundant_check
* [`dbef1d56d`](https://github.com/containerd/containerd/commit/dbef1d56d7ebc05bc4553d72c419ed5ce025b05d) runtime: runc v2: remove redundant validation
* [`34fb8d896`](https://github.com/containerd/containerd/commit/34fb8d8967595292adce04b53b12ee33499cd6b8) Merge pull request  [#5727](https://github.com/containerd/containerd/pull/5727) from dmcgowan/test-monitor-restart-grace
* [`18321f539`](https://github.com/containerd/containerd/commit/18321f539ce5f78e5db034ce0af73076ea4f11b0) Move loop check to before sleep
* [`2e8a572df`](https://github.com/containerd/containerd/commit/2e8a572dfd6cc170ed60a45d7d1180d56958eb12) Add timestamp to flaky restart monitor test
* [`d527926cd`](https://github.com/containerd/containerd/commit/d527926cd5a2eb52ec6e1461a09d5a5f10ca090a) Merge pull request  [#5722](https://github.com/containerd/containerd/pull/5722) from AkihiroSuda/go1.16.6
* [`55fd2ab5d`](https://github.com/containerd/containerd/commit/55fd2ab5d6efe01fd12e3ff58bece7ea358b18d3) integration/client: go mod tidy
* [`e72046f86`](https://github.com/containerd/containerd/commit/e72046f86bc54dfda54fdd9b17955ecae4232cca) Update Go to 1.16.6
* [`cbdebd18e`](https://github.com/containerd/containerd/commit/cbdebd18eb69679dcb23b988658cb2dd0254c7f8) Merge pull request  [#4447](https://github.com/containerd/containerd/pull/4447) from kzys/grpc-error
* [`b6aa5a48b`](https://github.com/containerd/containerd/commit/b6aa5a48bd67c0b0e52f3629e923bc7278acb42d) Merge pull request  [#5712](https://github.com/containerd/containerd/pull/5712) from coryb/docker-push-close-body
* [`bc4e416c8`](https://github.com/containerd/containerd/commit/bc4e416c88670e4409917a18bc3da50e48b401de) Add test for archive breakout test for lchmod
* [`a8ef1fc48`](https://github.com/containerd/containerd/commit/a8ef1fc4881add03be37511f37f50269a041fe40) Merge pull request  [#5710](https://github.com/containerd/containerd/pull/5710) from fuweid/cri-cleanup
* [`894b6ae39`](https://github.com/containerd/containerd/commit/894b6ae39b9266411d0d4e6325235390c06fc0ab) Fix missing Body.Close() calls on push to docker remote
* [`ac75071b4`](https://github.com/containerd/containerd/commit/ac75071b49cbc69dc4eb7734316e5129b01562e4) remove pkg/cri/platforms package
* [`51f2ce92f`](https://github.com/containerd/containerd/commit/51f2ce92fca36e9dc20d3945d917b904fd4be2bb) Merge pull request  [#5709](https://github.com/containerd/containerd/pull/5709) from cpuguy83/custom_client
* [`0a8802df6`](https://github.com/containerd/containerd/commit/0a8802df67c3e2770ba787c9a0f6bcd41de6b34d) Allow WithServices to use custom implementations
* [`0dcffc3ee`](https://github.com/containerd/containerd/commit/0dcffc3ee1ad55e0c744093d3720a7b719f57696) Merge pull request  [#5673](https://github.com/containerd/containerd/pull/5673) from dcantah/hcsshim-0.8.18
* [`d38c186d9`](https://github.com/containerd/containerd/commit/d38c186d9db5a01aa6f9c8e3133c39d5f439fb03) Merge pull request  [#5578](https://github.com/containerd/containerd/pull/5578) from claudiubelu/integration/failed-container
* [`cf600abec`](https://github.com/containerd/containerd/commit/cf600abecc27200a3c0e1415cd1f6c325eb05edf) Merge pull request  [#5619](https://github.com/containerd/containerd/pull/5619) from mikebrow/cri-add-v1-proxy-alpha
* [`9fa7d1507`](https://github.com/containerd/containerd/commit/9fa7d15077ef1e71c91aa62a59238026c2969fe2) Merge pull request  [#5682](https://github.com/containerd/containerd/pull/5682) from kzys/gha-fork
* [`31d78444e`](https://github.com/containerd/containerd/commit/31d78444e0a2943c4938594f71c48c474d36c9b5) Merge pull request  [#5666](https://github.com/containerd/containerd/pull/5666) from wllenyj/plugin_test
* [`aefbe7c1c`](https://github.com/containerd/containerd/commit/aefbe7c1cbeb31ac06611dcca7917fc51737e615) Merge pull request  [#5700](https://github.com/containerd/containerd/pull/5700) from AkihiroSuda/test-cri-in-userns
* [`71c1dc661`](https://github.com/containerd/containerd/commit/71c1dc66156ab1db3be4fdb3a5be25bf3363a951) Merge pull request  [#5676](https://github.com/containerd/containerd/pull/5676) from dmcgowan/update-for-distribution-spec-1.0
* [`aefabe546`](https://github.com/containerd/containerd/commit/aefabe5462a0080fa3e7817d33db6dd9a8e95d2d) Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
* [`0573e22e3`](https://github.com/containerd/containerd/commit/0573e22e374d38adcbb26eedad893be4b7e31a3f) Merge pull request  [#5702](https://github.com/containerd/containerd/pull/5702) from dmcgowan/archive-cleanup-lchmod
* [`53835221f`](https://github.com/containerd/containerd/commit/53835221f6b8fc496dbd2332fd48cd58a79f6f2b) Cleanup lchmod logic in archive
* [`d1c105192`](https://github.com/containerd/containerd/commit/d1c10519278560bbdf220dc72843e344d1a05743) use fu wei's suggeted interface pick for marshaling
* [`14962dcbd`](https://github.com/containerd/containerd/commit/14962dcbd23790681431838f1efc8b7fe7012157) add alpha version
* [`4c6e4a06f`](https://github.com/containerd/containerd/commit/4c6e4a06ff8f7ef1ab28c67a97fe6bd0f79d73a8) gha: make release workflow work in forks
* [`73d28ddeb`](https://github.com/containerd/containerd/commit/73d28ddeb27a5532df084035199c9ad5ed2f69fe) client: surface a connection error more clearly
* [`7eceeb950`](https://github.com/containerd/containerd/commit/7eceeb950b84396c165d972efb35116a113966fd) Merge pull request  [#5571](https://github.com/containerd/containerd/pull/5571) from adelina-t/win_set_specific_go_version
* [`a7ad6b3be`](https://github.com/containerd/containerd/commit/a7ad6b3be5bfad7ab77b2801e52663a2eb43e270) Add support for registry host path override
* [`3a0b9ec6b`](https://github.com/containerd/containerd/commit/3a0b9ec6bbabeab2f2cb962f62a52d875365793a) Add unit test for plugin
* [`95c708572`](https://github.com/containerd/containerd/commit/95c708572f2d65b85ebbb3648f34fd531c7b6f36) Update documenation for OCI distribution 1.0
* [`a81f05f36`](https://github.com/containerd/containerd/commit/a81f05f3602a2b1eee9bff12ce9b985d16aadb60) [Vendor] Update hcsshim to 0.8.18
* [`16deba098`](https://github.com/containerd/containerd/commit/16deba098c90a99e7948f16ffd4a49a5bbe9526d) integration: Windows volume-copy-up images
* [`63fe34add`](https://github.com/containerd/containerd/commit/63fe34add6997ba54d9bb0c6b2d7066efa2453c1) grpc config add options tcp_tls_ca
* [`25d7f907c`](https://github.com/containerd/containerd/commit/25d7f907c03a58b5fa30c6f90c3a36aa308e124c) Merge pull request  [#5660](https://github.com/containerd/containerd/pull/5660) from BigVan/main
* [`a5c417ac0`](https://github.com/containerd/containerd/commit/a5c417ac060f29dad343573674f879d59fc0b9ef) move up to CRI v1 and support v1alpha in parallel
* [`bda7b5866`](https://github.com/containerd/containerd/commit/bda7b58666b9b8e01342a36317cffe9fdf1f7aa3) feat: Add snapshotter label to the new snapshot for container.
* [`0bd2a86b1`](https://github.com/containerd/containerd/commit/0bd2a86b1bc81fc16e92459bfbcb178234a4c50d) Merge pull request  [#5655](https://github.com/containerd/containerd/pull/5655) from kzys/dm-log
* [`e72a56a1e`](https://github.com/containerd/containerd/commit/e72a56a1e97b2068fe7772fe5fd8835caefc62b4) Merge pull request  [#5662](https://github.com/containerd/containerd/pull/5662) from thaJeztah/fix_destdir
* [`2019a1e68`](https://github.com/containerd/containerd/commit/2019a1e68f7488bdc0975062cbbd933b53595714) Makefile: fix DESTDIR and PREFIX concatenation
* [`04ab4418f`](https://github.com/containerd/containerd/commit/04ab4418fdac4f85cc3b510bc297e06550175c90) test integration: Adds a test that restarts a failed container
* [`e1f28659b`](https://github.com/containerd/containerd/commit/e1f28659bc8346b5aec5406de3eafceb5c3ae70f) Merge pull request  [#5287](https://github.com/containerd/containerd/pull/5287) from claudiubelu/cri-integration-cleanup
* [`03ee45006`](https://github.com/containerd/containerd/commit/03ee450060dff5440fc02e8c88752c8314a8714f) snapshot/devmapper: log exported methods correctly
* [`c8c6eed93`](https://github.com/containerd/containerd/commit/c8c6eed932301e411a233f79473594ef6decfefc) Merge pull request  [#5641](https://github.com/containerd/containerd/pull/5641) from thaJeztah/move_sys_fmountat
* [`a964cf0cc`](https://github.com/containerd/containerd/commit/a964cf0cc4beabfd5cc50e970581d79f195ca4c0) un-export mount.FMountat
* [`21f532d51`](https://github.com/containerd/containerd/commit/21f532d51891087f850ef3a7ed7e737c8c95b88a) move sys.FMountat() into mount package
* [`03bfcd8a3`](https://github.com/containerd/containerd/commit/03bfcd8a32be15f2b13e07908dacc78d89511370) Merge pull request  [#5640](https://github.com/containerd/containerd/pull/5640) from dcbw/cni-plugin-pod-uid
* [`dac2543a0`](https://github.com/containerd/containerd/commit/dac2543a07b788f908cde037a133902bebf605d2) sandbox: send pod UID to CNI plugins as K8S_POD_UID
* [`0396089f7`](https://github.com/containerd/containerd/commit/0396089f79f241df4d8724a0cd31cf58523756ff) Merge pull request  [#5639](https://github.com/containerd/containerd/pull/5639) from thaJeztah/remove_sys_stat
* [`5a0beaefb`](https://github.com/containerd/containerd/commit/5a0beaefbb64190696f8e634d037bc9047e6f4ac) sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
* [`ddeacc4b7`](https://github.com/containerd/containerd/commit/ddeacc4b773bdd3e23c3eabd96a7580e5a6670fa) Merge pull request  [#5633](https://github.com/containerd/containerd/pull/5633) from thaJeztah/inline_statatimeastime
* [`1daea57ab`](https://github.com/containerd/containerd/commit/1daea57ab5c6dd47dd0276a01477e033f7c59d4f) Merge pull request  [#5636](https://github.com/containerd/containerd/pull/5636) from crosbymichael/multi-gpus
* [`f913a4275`](https://github.com/containerd/containerd/commit/f913a42755663e4e7f855dcfe37bad64887a9058) go.mod: runc v1.0.0
* [`28bb59c08`](https://github.com/containerd/containerd/commit/28bb59c080ce671c8e89829844f95c871eb41393) update runc binary to v1.0.0 GA
* [`63c185da9`](https://github.com/containerd/containerd/commit/63c185da9ad38fabb842aee2fbdefae2f4e5b946) content/local: inline sys.StatATimeAsTime()
* [`09d78bb6b`](https://github.com/containerd/containerd/commit/09d78bb6b9e8b173f44f5ba3abaee0de416b0ee0) allow multi gpu to be specified via ctr
* [`6883c8459`](https://github.com/containerd/containerd/commit/6883c845959ba36f72a3ca36a510d209b2248386) Merge pull request  [#5629](https://github.com/containerd/containerd/pull/5629) from mikebrow/master-to-main-doc-links
* [`5aeb13eb5`](https://github.com/containerd/containerd/commit/5aeb13eb55342829b42af959792b62735e7c0d87) Merge pull request  [#5623](https://github.com/containerd/containerd/pull/5623) from dims/sync-integration/go.mod-with-root-go.mod
* [`560e7d479`](https://github.com/containerd/containerd/commit/560e7d479923dd7b1b0249375abf202054bf7ed4) fixing some doc links
* [`d9694b297`](https://github.com/containerd/containerd/commit/d9694b2976a5181121f54690867a53c29dde6552) Sync integration/go.mod with root go.mod
* [`c07711c8c`](https://github.com/containerd/containerd/commit/c07711c8c05bd0a86f57216b214044ee4712f585) Merge pull request  [#5615](https://github.com/containerd/containerd/pull/5615) from ktock/exposechangewriter
* [`4a46ea2f4`](https://github.com/containerd/containerd/commit/4a46ea2f4b55a2e4e694ecc6f93389421053dc6a) archive: Expose ChangeWriter to allow customized diff computing
* [`ba70277fb`](https://github.com/containerd/containerd/commit/ba70277fb75e2976c4e9e817bf02e20bcb6a1fa1) Merge pull request  [#5625](https://github.com/containerd/containerd/pull/5625) from ktock/bb
* [`cd33c007c`](https://github.com/containerd/containerd/commit/cd33c007cecdee2c8e5333190cad1bbce4ade13d) CI: Switch to available latest images
* [`75b4c83f0`](https://github.com/containerd/containerd/commit/75b4c83f04d5f4fb148b5f498584af8854581083) fix deprecation config for default runtime
* [`c88a5d023`](https://github.com/containerd/containerd/commit/c88a5d0234868d27e719ea452c5ded4e584e8bc5) Merge pull request  [#5614](https://github.com/containerd/containerd/pull/5614) from estesp/test-criu-overlay
* [`f0a32c66d`](https://github.com/containerd/containerd/commit/f0a32c66dad1e9de716c9960af806105d691cd78) Merge pull request  [#5617](https://github.com/containerd/containerd/pull/5617) from fidencio/wip/shimv2-debug
* [`1bbee573a`](https://github.com/containerd/containerd/commit/1bbee573af72ee63ec67483a836f6e5cdcf9850d) github.com/golang/protobuf/proto is deprecated
* [`91c8fa452`](https://github.com/containerd/containerd/commit/91c8fa4529f335c34dffc56e15c54054e97ac69e) Update github.com/golang/protobuf from v1.3.5 to v1.4.3
* [`b7e79dc5a`](https://github.com/containerd/containerd/commit/b7e79dc5ab1084d2db3562c77896489674d9486f) Update google.golang.org/grpc from v1.27.1 to v1.38.0
* [`8d2e156dd`](https://github.com/containerd/containerd/commit/8d2e156ddbd63e58d18048fd9960c586178fdc58) Increase golangci-lint timeout
* [`87a2e0b2a`](https://github.com/containerd/containerd/commit/87a2e0b2a2d58c19e26d96ebcefc982505316081) runtime,v2: Enable debug when containerd is on debug+ log level
* [`11304a4ac`](https://github.com/containerd/containerd/commit/11304a4ac81a65975c81678a5eabafa864e50689) Merge pull request  [#5611](https://github.com/containerd/containerd/pull/5611) from cloudtogo/rootfs-propagation
* [`05e51539a`](https://github.com/containerd/containerd/commit/05e51539a95f739c8963ab5184b8bda540e34e36) command line flags of setting container rootfs propagation
* [`394f86475`](https://github.com/containerd/containerd/commit/394f864750ed0ffea980d713b179a53e070a9d78) Re-enable criu in main integration runs
* [`1dada3fc2`](https://github.com/containerd/containerd/commit/1dada3fc2a76ea1298f924bf404928c0f37796c4) add cgroupv2 setup for cos with a flag
* [`0631cec6e`](https://github.com/containerd/containerd/commit/0631cec6e3a88cb65b67371c4d04011b52ad63ca) Merge pull request  [#5612](https://github.com/containerd/containerd/pull/5612) from cpuguy83/update_gotestsum
* [`bfbebf02b`](https://github.com/containerd/containerd/commit/bfbebf02b7c413c7afc9c253fb2199803c9e7c69) Update gotestsum to add timestamps to junit output
* [`2bb8ad7c9`](https://github.com/containerd/containerd/commit/2bb8ad7c9ea4f626527a33dce51b89d3278194a2) Makefile: pass build tags to manpage build process
* [`f60d447c1`](https://github.com/containerd/containerd/commit/f60d447c16991a183853cce58d21d88351cb0f16) Makefile: fix tags parameter computation
* [`0a3a77bc4`](https://github.com/containerd/containerd/commit/0a3a77bc445379851a5c737955411fc9e630c3ce) Merge pull request  [#5604](https://github.com/containerd/containerd/pull/5604) from ktock/nvidiacgroups
* [`9c01fe20d`](https://github.com/containerd/containerd/commit/9c01fe20d31d3120c8bd2e0e68c411a3ebeabc64) Allow to pass --no-cgroup option to nvidia-container-cli
* [`fdfe01d7d`](https://github.com/containerd/containerd/commit/fdfe01d7d388a3523e8fe3233551dab8306330ee) Merge pull request  [#5577](https://github.com/containerd/containerd/pull/5577) from oss-qm/submit/fhs-manpage
* [`77374e8b3`](https://github.com/containerd/containerd/commit/77374e8b35900cc4cffd719282d29b43b729b58e) Makefile: FHS conformant manpage installation pathes
* [`2076dc6ff`](https://github.com/containerd/containerd/commit/2076dc6ffa0e8c2bac74b95df03c4399e21e5b15) Merge pull request  [#5594](https://github.com/containerd/containerd/pull/5594) from estesp/go-for-project-checks
* [`3ab974433`](https://github.com/containerd/containerd/commit/3ab97443360775ff3fb13a7be2efedb875805824) Add proper Go version before project checks
* [`a545df345`](https://github.com/containerd/containerd/commit/a545df345ee6b2e0cb6b8ae2c4fd11b7738f9185) Merge pull request  [#5580](https://github.com/containerd/containerd/pull/5580) from adelina-t/enable_cri_integration
* [`af5a130bc`](https://github.com/containerd/containerd/commit/af5a130bc94b91729114a502bf52f729f76638e4) Enable cri-integration in Windows Periodic Tests
* [`2f0342fb5`](https://github.com/containerd/containerd/commit/2f0342fb548e455c1165b4a583b7d625ec901867) Merge pull request  [#5573](https://github.com/containerd/containerd/pull/5573) from mikebrow/seccomp-doc-nit
* [`7a2b04758`](https://github.com/containerd/containerd/commit/7a2b04758bfb52c17e1780dc432cff586b714839) adds explanation for seccomp unset/unconfined default vs runtime default
* [`7d77b51b4`](https://github.com/containerd/containerd/commit/7d77b51b4992ee03308a88aaa32894cbcfbfbae0) Merge pull request  [#5569](https://github.com/containerd/containerd/pull/5569) from tnqn/teardown-network-timeout
* [`68d69b7bd`](https://github.com/containerd/containerd/commit/68d69b7bda6a19be77aeb7ea4192a53b1473b41f) Merge pull request  [#5572](https://github.com/containerd/containerd/pull/5572) from dims/update-integration/client-go.sum
* [`01585595a`](https://github.com/containerd/containerd/commit/01585595a5934773aec184fc893b3db03e02628d) update integration/client go.sum
* [`419d616fe`](https://github.com/containerd/containerd/commit/419d616fec5f24ee61a0a113a899e78a6e49a850) Install specific golang version in Windows CI.
* [`f6061b489`](https://github.com/containerd/containerd/commit/f6061b489f42fa004f1c6e49e7dc0552a41d2a1d) Merge pull request  [#5566](https://github.com/containerd/containerd/pull/5566) from dmcgowan/cleanup-diff-walking
* [`fd2ca8dc6`](https://github.com/containerd/containerd/commit/fd2ca8dc6b64de3d56e796dd757c24cdfde91165) Merge pull request  [#5562](https://github.com/containerd/containerd/pull/5562) from dims/update-opencontainers/selinux-to-v1.8.2
* [`69f43d458`](https://github.com/containerd/containerd/commit/69f43d4589c50a8e64afac7cd5dda99433112ab8) Revert diff/walking error change
* [`728743eb2`](https://github.com/containerd/containerd/commit/728743eb2858764df05fbb012cb03eb7c6cb0423) Fix cleanup context of teardownPodNetwork
* [`e2f784269`](https://github.com/containerd/containerd/commit/e2f784269dbdc8d3aa1b647caf7bd82de2e1e87e) Merge pull request  [#5565](https://github.com/containerd/containerd/pull/5565) from mikebrow/wrapf-fixes
* [`014748bc0`](https://github.com/containerd/containerd/commit/014748bc04623346725d2a1330d7a2292563a4df) fix invalid validation error checking
* [`6ae90906a`](https://github.com/containerd/containerd/commit/6ae90906abfbc310126630d085c1ea92a0cd0f0b) Merge pull request  [#5551](https://github.com/containerd/containerd/pull/5551) from Iceber/fix-diff
* [`e3521ed14`](https://github.com/containerd/containerd/commit/e3521ed14b3c852f97eca466f93610cf7a300184) Merge pull request  [#5559](https://github.com/containerd/containerd/pull/5559) from adelina-t/win_rg_creation_timestamp
* [`cabe67736`](https://github.com/containerd/containerd/commit/cabe67736941fa4fa1a6fc54b0045891ecc28733) tests: Use EnsureImageExists for image pulling
* [`a78bdf22d`](https://github.com/containerd/containerd/commit/a78bdf22df22b0904e843e579f3088472cb52685) tests: Refactors PodSandbox creation
* [`ada96ec19`](https://github.com/containerd/containerd/commit/ada96ec19226fceb8f775e8a173642a05399494e) Merge pull request  [#5328](https://github.com/containerd/containerd/pull/5328) from kevpar/win-ci-cleanup
* [`bd4fcf632`](https://github.com/containerd/containerd/commit/bd4fcf6322f1df33ede37d849085f1099789e493) Merge pull request  [#5422](https://github.com/containerd/containerd/pull/5422) from TBBle/use-layer-deactivate-instead-of-vhd-detach
* [`265b3947a`](https://github.com/containerd/containerd/commit/265b3947a35a557cb06ff563ac600b31d75061b4) Merge pull request  [#5284](https://github.com/containerd/containerd/pull/5284) from claudiubelu/test-symlinks
* [`6dcd88329`](https://github.com/containerd/containerd/commit/6dcd88329907be9b0b8b0fe202b02764406e2e27) Merge pull request  [#5535](https://github.com/containerd/containerd/pull/5535) from oss-qm/submit/makefile-destdir
* [`9a451d103`](https://github.com/containerd/containerd/commit/9a451d103c9b2d4791e22e5acdb7098c37bbec55) Update opencontainers/selinux to v1.8.2
* [`93e268f62`](https://github.com/containerd/containerd/commit/93e268f6258e37200f15fe9240dd46b9988624e9) tests: Symlink volume tests
* [`308c7b34e`](https://github.com/containerd/containerd/commit/308c7b34e858dc4801e6fe9665f538f29c7e9e36) Merge pull request  [#5560](https://github.com/containerd/containerd/pull/5560) from estesp/no-error
* [`edfd8d599`](https://github.com/containerd/containerd/commit/edfd8d59937faeb36f40b8baeff488a6d693ef49) Change Wrapf of non-error to an actual error
* [`a93b5cbc2`](https://github.com/containerd/containerd/commit/a93b5cbc2f1f6e4e4b0b5fc3eb0843e24762f1f5) Install apparmor parser for arm64 environment
* [`5f0fc4893`](https://github.com/containerd/containerd/commit/5f0fc4893da618651a67f44b80f6b47392d1d727) Add creation timestamp to RG
* [`686d3f262`](https://github.com/containerd/containerd/commit/686d3f262d282f8ac55ad4b23c919210965c4d6a) Merge pull request  [#5536](https://github.com/containerd/containerd/pull/5536) from zouyee/merge
* [`add4be6ee`](https://github.com/containerd/containerd/commit/add4be6eecb81b311210e97679b12e04a0e4530a) Merge pull request  [#5554](https://github.com/containerd/containerd/pull/5554) from kzys/prometheus-doc
* [`954ef2b27`](https://github.com/containerd/containerd/commit/954ef2b2732b30acd228e56e7166bf46ce4b93b4) Merge pull request  [#5553](https://github.com/containerd/containerd/pull/5553) from claudiubelu/integration-test-cleanup-windows
* [`75daf45be`](https://github.com/containerd/containerd/commit/75daf45bebd198bca613ee96ddc0adc3afcd3861) docs: explicitly mention containerd's Prometheus path
* [`ffeea14ae`](https://github.com/containerd/containerd/commit/ffeea14aee08b7d8086d17ae48cc7c8ae9699f23) Merge pull request  [#5548](https://github.com/containerd/containerd/pull/5548) from Iceber/update-cri-link
* [`2f870aa89`](https://github.com/containerd/containerd/commit/2f870aa896dff06dc4cae9875a4f53831169d14c) integration: Cleanup containerd on test teardown
* [`558fdc680`](https://github.com/containerd/containerd/commit/558fdc6808dc2c15645e8bccf500a93df78432b6) diff/walking: fix defer cleanup
* [`b5f530a15`](https://github.com/containerd/containerd/commit/b5f530a15780ee443b8c568200d37d50d0449672) Makefile: fix DESTDIR environment variable behaviour
* [`498bb36f6`](https://github.com/containerd/containerd/commit/498bb36f67689c2b6f0a6142472ba1f20ab87bf8) scrub the stale TODO
* [`93d4541a2`](https://github.com/containerd/containerd/commit/93d4541a20d19bb1562cacb855e8fba310045ab6) docs/cri: update ocicrypt link
* [`792466495`](https://github.com/containerd/containerd/commit/7924664951197caf3c0f808ff329801ea2467104) docs/cri: fix broken links
* [`c8b33ba29`](https://github.com/containerd/containerd/commit/c8b33ba297d86550dd5e530527cf5d92246d292f) Merge pull request  [#5544](https://github.com/containerd/containerd/pull/5544) from dmcgowan/update-windows-periodic-tests
* [`05c03de94`](https://github.com/containerd/containerd/commit/05c03de94d28cdfc5f27057952d1308af2e66041) Update Windows periodic tests
* [`334e74765`](https://github.com/containerd/containerd/commit/334e74765e7537270a5901d3ebc64d96de5c091d) Merge pull request  [#5165](https://github.com/containerd/containerd/pull/5165) from adelina-t/azure_ci_workflow
* [`c8cbf7998`](https://github.com/containerd/containerd/commit/c8cbf7998b4dd871d30026317cb906bf17147513) Merge pull request  [#5273](https://github.com/containerd/containerd/pull/5273) from wzshiming/fix/local-store-atomic-write
* [`9fcea1d3f`](https://github.com/containerd/containerd/commit/9fcea1d3f03c7c6c5df0fc70a4ddb9a2b2dfa36b) Rename atomicWrite to writeToCompletion
* [`925ff5a21`](https://github.com/containerd/containerd/commit/925ff5a21ba35bc6be3419edd5f44a58f8af7592) Merge pull request  [#5539](https://github.com/containerd/containerd/pull/5539) from alakesh/btrfs-test
* [`b996e49c5`](https://github.com/containerd/containerd/commit/b996e49c5cb13788824f667b38886dd21a4a6db4) Do not run btrfs tests if btrfs kernel module is not loaded
* [`f0d2f8943`](https://github.com/containerd/containerd/commit/f0d2f89437af17c549f5757e148bc74f8712ceea) Merge pull request  [#5533](https://github.com/containerd/containerd/pull/5533) from povsister/fix-auth-ua
* [`50ad4b96c`](https://github.com/containerd/containerd/commit/50ad4b96c4acfde425e1fc6e7411b52658d7af92) Fix incorrect UA used for registry authentication
* [`96df20cf7`](https://github.com/containerd/containerd/commit/96df20cf770479393342047a62182961f9205d62) Merge pull request  [#5531](https://github.com/containerd/containerd/pull/5531) from samuelkarp/freebsd-ctr-run-mounts
* [`ba4fa32dc`](https://github.com/containerd/containerd/commit/ba4fa32dca33c284483d66b96a598701fe3c0d0f) Merge pull request  [#5472](https://github.com/containerd/containerd/pull/5472) from gizahNL/freebsd_mounts
* [`0a92694e0`](https://github.com/containerd/containerd/commit/0a92694e0acd08a089238c3c1e203f405af6842f) Merge pull request  [#5527](https://github.com/containerd/containerd/pull/5527) from samuelkarp/freebsd-ctr-exec
* [`c0794c06a`](https://github.com/containerd/containerd/commit/c0794c06a214ffae04d65dbd0699d7147ad50464) Merge pull request  [#5534](https://github.com/containerd/containerd/pull/5534) from oss-qm/submit/makefile-at
* [`923ab5b7c`](https://github.com/containerd/containerd/commit/923ab5b7ca0b3d07b117f4725d687c76e123d49a) Makefile: use $@ for target file names
* [`535d9cc59`](https://github.com/containerd/containerd/commit/535d9cc59fe75abebcbcfea60a8ff0f5f795beb1) ctr: parse mount options with embedded = character
* [`a4f97d45d`](https://github.com/containerd/containerd/commit/a4f97d45da2886eea52b7ea179da8f66e2176975) Add ruleset=4 option
* [`5dec27b6f`](https://github.com/containerd/containerd/commit/5dec27b6f1f6921ae288a3094b796929b59fc539) ctr: exec handle pty resize after Start
* [`531908c73`](https://github.com/containerd/containerd/commit/531908c73dee7ab389e6002a055b13f0759808ff) Merge pull request  [#5528](https://github.com/containerd/containerd/pull/5528) from MaXinjian/0524
* [`e1c845df5`](https://github.com/containerd/containerd/commit/e1c845df506e5b7e2bd39f443db2a13862ddf825) Fix small typo
* [`b9378b452`](https://github.com/containerd/containerd/commit/b9378b45296218ba7f23384cf426384bb2102e0f) ctr: exec setup IO with console
* [`a0efc5479`](https://github.com/containerd/containerd/commit/a0efc5479553cf441600962aaa08580cd436d916) Merge pull request  [#5519](https://github.com/containerd/containerd/pull/5519) from wzshiming/fix/dont-check-apparmor-parser
* [`5089035c5`](https://github.com/containerd/containerd/commit/5089035c5efb5e774ba8eb5d630bc1b313e9175b) Merge pull request  [#5520](https://github.com/containerd/containerd/pull/5520) from wzshiming/clean/gen-mgr
* [`869375a41`](https://github.com/containerd/containerd/commit/869375a413c8541d8776ee93a36753faa97427d7) Remove useless lines
* [`79e345221`](https://github.com/containerd/containerd/commit/79e3452213a595a87d6880538c7d2b0f6b067aab) update the link
* [`1acca8bba`](https://github.com/containerd/containerd/commit/1acca8bba36e99684ee3489ea4a42609194ca6b9) Don't check for apparmor_parser to be present
* [`055c801ed`](https://github.com/containerd/containerd/commit/055c801ededcb7a5e82f47bdeed555cdf6c64bd8) Merge pull request  [#5509](https://github.com/containerd/containerd/pull/5509) from gauravgahlot/typos
* [`dbccd0d35`](https://github.com/containerd/containerd/commit/dbccd0d357174c14a72f10244bb6df102c39f4b6) Merge pull request  [#5275](https://github.com/containerd/containerd/pull/5275) from haslersn/fix-4531
* [`88c98fdfe`](https://github.com/containerd/containerd/commit/88c98fdfefe07db5afb2967a72b8449a0180c39d) Merge pull request  [#5514](https://github.com/containerd/containerd/pull/5514) from Priyankasaggu11929/psaggu_bump_runc_version_to_v1.0.0-rc95
* [`ec28288f4`](https://github.com/containerd/containerd/commit/ec28288f45ea0ff4567eee776ed3b8c289bf7f9c) bump runc version to v1.0.0-rc95
* [`89de7e7e1`](https://github.com/containerd/containerd/commit/89de7e7e1c4b1484a5399deeb9ea5ce7c895ae82) Merge pull request  [#5511](https://github.com/containerd/containerd/pull/5511) from AkihiroSuda/runc-rc95
* [`599127f4d`](https://github.com/containerd/containerd/commit/599127f4df767d60e256e24cea2a84f83d0c2a00) update runc binary to v1.0.0-rc95
* [`e9a7b6a7a`](https://github.com/containerd/containerd/commit/e9a7b6a7ae89431ad85c541269154de8a6829a6d) Merge pull request  [#5508](https://github.com/containerd/containerd/pull/5508) from dims/bump-go-winio-to-0.5.0
* [`cf7e0002c`](https://github.com/containerd/containerd/commit/cf7e0002cfcd52c3d6b4b9592949ff4611551fc0) Merge pull request  [#5507](https://github.com/containerd/containerd/pull/5507) from dims/bump-selinux-to-1.8.1
* [`a5b1740bb`](https://github.com/containerd/containerd/commit/a5b1740bbe3aa90848836268ebed82947ccf3fb4) fixed typos
* [`77285e311`](https://github.com/containerd/containerd/commit/77285e311c6798df988b227ba9d56e85e29abc76) Schedule Windows job daily after midnight.
* [`2b58782df`](https://github.com/containerd/containerd/commit/2b58782df0411226603d5d1dbdd52b10b3885bc5) Update windows-periodic.yml
* [`5dbae87c5`](https://github.com/containerd/containerd/commit/5dbae87c59f6c0d53489b6b824fabf8d5fbe9117) Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0
* [`1093f05ab`](https://github.com/containerd/containerd/commit/1093f05ab202f0ab6551379d19e81ac32c6dd076) Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
* [`49321a12d`](https://github.com/containerd/containerd/commit/49321a12dfc0c5fe4ff6a0748cf18e46979ca70d) Merge pull request  [#5493](https://github.com/containerd/containerd/pull/5493) from oss-qm/submit/install-prog
* [`a152049d7`](https://github.com/containerd/containerd/commit/a152049d7dc841149a90f4f402a6d8757cb99576) Merge pull request  [#5163](https://github.com/containerd/containerd/pull/5163) from claudiubelu/test-windows
* [`bf1a6678b`](https://github.com/containerd/containerd/commit/bf1a6678b945288ab8cc4741633fabed8926438c) Merge pull request  [#5504](https://github.com/containerd/containerd/pull/5504) from dmcgowan/fix-authorization-on-redirect
* [`bd8ca8f59`](https://github.com/containerd/containerd/commit/bd8ca8f595f3c21c7a0760adc904b6369cdc751b) Merge pull request  [#5505](https://github.com/containerd/containerd/pull/5505) from Priyankasaggu11929/bump-hcsshim-to-v0.8.17
* [`b6a251749`](https://github.com/containerd/containerd/commit/b6a2517491da040a1e821cc25a240de8308af948) bump hcsshim version to v0.8.17
* [`b1d4140a2`](https://github.com/containerd/containerd/commit/b1d4140a220eb429eeb2059cd33fad6cd3bc7c80) Update docker resolver to authorize redirects
* [`09a0c9471`](https://github.com/containerd/containerd/commit/09a0c9471bf687ebcc7d8f8594606d127b3a803e) tests: Adds support for Windows cri-integration tests
* [`fe5d3496a`](https://github.com/containerd/containerd/commit/fe5d3496a4bf845bf149bf8b941bc8ff8052bede) Merge pull request  [#5498](https://github.com/containerd/containerd/pull/5498) from mikebrow/release-binary-update-for-imgcrypt
* [`315739251`](https://github.com/containerd/containerd/commit/315739251396c79718baad47191a2bc83dda586f) just release ctd-decoder not ctr-enc
* [`b9c403e79`](https://github.com/containerd/containerd/commit/b9c403e79a578efd4350197e16860923fd7d209f) Merge remote-tracking branch 'upstream/master'
* [`1442fee22`](https://github.com/containerd/containerd/commit/1442fee229bb6d536fa29d2a3aefccf5786d036a) Remove mountpoints not commonly mounted on FreeBSD
* [`fc4da9728`](https://github.com/containerd/containerd/commit/fc4da9728e6231560411292ca9a2f6a591f64e57) Pin integration test image for alpine
* [`c7e4747cf`](https://github.com/containerd/containerd/commit/c7e4747cfb5cf15eef68af71b0a5526f2343f635) Merge pull request  [#5313](https://github.com/containerd/containerd/pull/5313) from claudiubelu/pull-images-once
* [`b9e1d0cd2`](https://github.com/containerd/containerd/commit/b9e1d0cd279f704cd2139a6eed4fe2486ae075a9) Merge pull request  [#5440](https://github.com/containerd/containerd/pull/5440) from Iceber/optimize-last-registration
* [`18f345818`](https://github.com/containerd/containerd/commit/18f3458180f5b4e2e7ac1fae157ab7eb5b71005f) Merge pull request  [#5465](https://github.com/containerd/containerd/pull/5465) from Iceber/update-lease-manager
* [`e47400cbd`](https://github.com/containerd/containerd/commit/e47400cbd2d5f45ab8d836d56c8521f6c81d0ce2) Merge pull request  [#5100](https://github.com/containerd/containerd/pull/5100) from adisky/skip-tls-localHost
* [`74c7d66df`](https://github.com/containerd/containerd/commit/74c7d66dfb514ed5f130d53f3dbfbb8918d258eb) Merge remote-tracking branch 'upstream/master'
* [`28e29af62`](https://github.com/containerd/containerd/commit/28e29af62dfc2559b8fff23b0243b14f1b1286bc) Merge pull request  [#5492](https://github.com/containerd/containerd/pull/5492) from oss-qm/submit/install-man
* [`a5f19b02d`](https://github.com/containerd/containerd/commit/a5f19b02d0cb66e5707c21ee3ce1d5c65008a1e0) Merge pull request  [#5309](https://github.com/containerd/containerd/pull/5309) from mikebrow/document-hosts.toml
* [`9643c9965`](https://github.com/containerd/containerd/commit/9643c99658758885d540050d1ff0ad0aaef1b4ea) Makefile: allow overriding install command via environment
* [`4b1b8346b`](https://github.com/containerd/containerd/commit/4b1b8346be2e8851650823a5e53b53658309f651) Makefile: make sure manpages are built before install-man
* [`6e249b1ae`](https://github.com/containerd/containerd/commit/6e249b1aea69f30969ab3452dc19e78300dc3c06) adds credentials description
* [`08fa9ab62`](https://github.com/containerd/containerd/commit/08fa9ab625103b43174497911caf74bdeb0fc0f9) Merge pull request  [#5459](https://github.com/containerd/containerd/pull/5459) from dmcgowan/prepare-default-branch-rename
* [`d02413330`](https://github.com/containerd/containerd/commit/d024133308a2d27ae0a1005afb29273d1a1715a1) Merge remote-tracking branch 'upstream/master'
* [`de04b3243`](https://github.com/containerd/containerd/commit/de04b32430cc1b26a70641bbeef5a85e194a5c75) Add copyright header & make sure compilation succeeds on all platforms
* [`e1fd6be7e`](https://github.com/containerd/containerd/commit/e1fd6be7e8aa5f0a74cb8153ef1ef19d317f8224) Fix mounts for FreeBSD
* [`d0240b31f`](https://github.com/containerd/containerd/commit/d0240b31f94418d5321ac59f980a7051a7d551a0) Merge pull request  [#5473](https://github.com/containerd/containerd/pull/5473) from dims/update-runc-to-rc94
* [`de6db4038`](https://github.com/containerd/containerd/commit/de6db4038c937d4de0081283705303acf48f9834) Update vendored runc to v1.0.0.0-rc94
* [`5c99f150a`](https://github.com/containerd/containerd/commit/5c99f150aec0b7b24535494ae9209a555e1344ea) Update the runc binary used with containerd to runc v1.0.0-rc94
* [`d559b00fe`](https://github.com/containerd/containerd/commit/d559b00fe69817448cb2788dcecd297f51ed01a4) Merge remote-tracking branch 'upstream/release/1.5'
* [`1987f0ad1`](https://github.com/containerd/containerd/commit/1987f0ad1ad2dc033320dd32976f7af88a80c507) Merge pull request  [#5468](https://github.com/containerd/containerd/pull/5468) from wzshiming/fix/close-file
* [`ec0e1a4f3`](https://github.com/containerd/containerd/commit/ec0e1a4f3e99f9322163880b75461a366420b10f) Merge pull request  [#5466](https://github.com/containerd/containerd/pull/5466) from dmcgowan/update-release
* [`b890f056e`](https://github.com/containerd/containerd/commit/b890f056e87d3823beeedf1339cd53469d4819b9) Fix content.ReaderAt close
* [`01ca105b6`](https://github.com/containerd/containerd/commit/01ca105b6a7c3d4307fe3d9cd847c7d48519a7bd) Merge pull request  [#5452](https://github.com/containerd/containerd/pull/5452) from Dentrax/feature/add-test-for-adaptor
* [`f6fc6041a`](https://github.com/containerd/containerd/commit/f6fc6041ab3beea488611b0d49db7bc0fd61fabc) Merge pull request  [#5450](https://github.com/containerd/containerd/pull/5450) from oss-qm/submit/makefile-go-command
* [`c5797c8fc`](https://github.com/containerd/containerd/commit/c5797c8fcba00fd87527cc4b03a8785255424295) Update releases doc with updated support timeline
* [`1ecc98f1d`](https://github.com/containerd/containerd/commit/1ecc98f1de2b77698a68a0afc8c8c73e690b21d7) Merge pull request  [#5462](https://github.com/containerd/containerd/pull/5462) from mikebrow/correct-critools-release
* [`c74a6c419`](https://github.com/containerd/containerd/commit/c74a6c4194b6e5e8b7887308c466ab1b19654a32) update to new cri-tools make install
* [`e37ddafab`](https://github.com/containerd/containerd/commit/e37ddafab457596bc55151cd5bb34a77919c85ac) metadata: modify NewLeaseManager to return leases.Manager
* [`087d03bc5`](https://github.com/containerd/containerd/commit/087d03bc55006cb2550ab60333dc84130dc7c4e5) Merge pull request  [#5461](https://github.com/containerd/containerd/pull/5461) from tao12345666333/update-go-1.16.4
* [`79d800b9b`](https://github.com/containerd/containerd/commit/79d800b9b0148ae209d164420f723311e93dbb4e) Update Go to 1.16.4
* [`0ba7303ee`](https://github.com/containerd/containerd/commit/0ba7303ee8c34f8f85c4679832f3b00dc36353ea) Prepare default branch rename
* [`ab963e1cc`](https://github.com/containerd/containerd/commit/ab963e1cc16a845567a0e3e971775c29c701fcf8) Merge pull request  [#5063](https://github.com/containerd/containerd/pull/5063) from Iceber/fix-with-dev-shm-size
* [`7507b47c3`](https://github.com/containerd/containerd/commit/7507b47c3678b22f9e266a69aa1aa3b90749022b) Merge pull request  [#5457](https://github.com/containerd/containerd/pull/5457) from thaJeztah/1.5_backport_dont_loop_da_loop
* [`b35aa7250`](https://github.com/containerd/containerd/commit/b35aa7250a2a3f226b3fa09ccc950944a70ca33c) go.mod: cut circular dependency on github.com/containerd/containerd
* [`b68405639`](https://github.com/containerd/containerd/commit/b684056399651a8219e9c60a6c39bacfc88ae741) integration/client: go mod tidy
* [`14316794a`](https://github.com/containerd/containerd/commit/14316794ad0a33b8688078f770655c9203e4d80d) Merge pull request  [#5454](https://github.com/containerd/containerd/pull/5454) from estesp/cp-5411
* [`7d70992d3`](https://github.com/containerd/containerd/commit/7d70992d33df40049c517cbef8356b7e2bb5bd42) tests: add test for adaptor
* [`e120261ee`](https://github.com/containerd/containerd/commit/e120261ee30cee924221a7536dfd1d516f449f88) windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* [`1e8ec3269`](https://github.com/containerd/containerd/commit/1e8ec32698269cd3e5ba3624efa74f4b8454d49d) Merge pull request  [#5411](https://github.com/containerd/containerd/pull/5411) from kevpar/win-evalsymlinks
* [`93725cdb2`](https://github.com/containerd/containerd/commit/93725cdb2ee87f281f5c83303e79dd49778e1ebe) Merge pull request  [#5448](https://github.com/containerd/containerd/pull/5448) from Dentrax/fix/doc-client-import
* [`0b786908c`](https://github.com/containerd/containerd/commit/0b786908c0a37eae087aff204d54b6f9b97fa2f1) doc: add missing namespaces package
* [`b0d3b35b2`](https://github.com/containerd/containerd/commit/b0d3b35b28f8df673740fbbd3bac3a36551589bf) windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
* [`9ea25634b`](https://github.com/containerd/containerd/commit/9ea25634bddccbcd4c45a7e552a147ff7f50aaab) Makefile: allow overriding go command by environment
* [`cbdc094d3`](https://github.com/containerd/containerd/commit/cbdc094d3356178ecc82aa8ec37778d99293d09d) Merge pull request  [#5445](https://github.com/containerd/containerd/pull/5445) from mikebrow/update-seccomp
* [`c27cbc661`](https://github.com/containerd/containerd/commit/c27cbc661723e477f21f68d235592ea87c2bee94) Merge pull request  [#5436](https://github.com/containerd/containerd/pull/5436) from bwh-mind/ppc32
* [`53e157784`](https://github.com/containerd/containerd/commit/53e15778456825df2f8b6bd126d9e811b40b15c2) Merge pull request  [#5441](https://github.com/containerd/containerd/pull/5441) from thaJeztah/dont_loop_da_loop
* [`c1a35232d`](https://github.com/containerd/containerd/commit/c1a35232d8e80caae78464fdb1b29cd1eda30785) Merge pull request  [#5446](https://github.com/containerd/containerd/pull/5446) from Random-Liu/fix-auth-config
* [`81402e475`](https://github.com/containerd/containerd/commit/81402e47583bfce47f4924968c7164a7d2392ba3) Fix different registry hosts referencing the same auth config.
* [`b56527cb7`](https://github.com/containerd/containerd/commit/b56527cb7ed1146a0cc5fb24140dfccdd8d7cf57) update seccomp version
* [`8014d9fee`](https://github.com/containerd/containerd/commit/8014d9fee0e2a758d34af977f1ea6a1b6932a098) Skip TLS verification for localhost
* [`b538d8f1a`](https://github.com/containerd/containerd/commit/b538d8f1a1f1e3cc13a9a49a2dd12a20644ee9c3) Update golang.org/x/sys to add linux/ppc support
* [`b59e29773`](https://github.com/containerd/containerd/commit/b59e29773c31bd173e3e23058fd960c3027da1eb) adds description for hosts.toml
* [`e26fc8472`](https://github.com/containerd/containerd/commit/e26fc84729e4063c4ccac3271fc7eff7fb803b86) go.mod: cut circular dependency on github.com/containerd/containerd
* [`15e0bd513`](https://github.com/containerd/containerd/commit/15e0bd513e84e0638d90f63f4bb7a828b9558f4c) integration/client: go mod tidy
* [`98f5922b5`](https://github.com/containerd/containerd/commit/98f5922b5e27f5e1d4e398091c6f2c24eea203dd) plugin: optimize the check for the last registration
* [`273c2bb16`](https://github.com/containerd/containerd/commit/273c2bb168d1733ebcbe7418ca1232237f3dc603) tests: Prepull images used in tests
* [`402acd7c1`](https://github.com/containerd/containerd/commit/402acd7c1e20aa6ea88ce6cd6f77e486c5e88478) Small typo fix "reimporst"
* [`f21627059`](https://github.com/containerd/containerd/commit/f2162705950a1b220fbbb8c396738d7155928212) Use DeactivateLayer to recover layers that we cannot rename
* [`421fc6ea7`](https://github.com/containerd/containerd/commit/421fc6ea73fef2f7946d762b800b349edd5fcb12) Add CI periodic Windows Jobs.
* [`c0e2f4b5d`](https://github.com/containerd/containerd/commit/c0e2f4b5d2c28b22da552156dae5239935b6a343) Try next mirror in case of non-404 errors, too
* [`f8538b5e1`](https://github.com/containerd/containerd/commit/f8538b5e12b0977904bb810e3eae234a8ab1e48c) Fix error case in Windows layer cleanup
* [`b592a4c1e`](https://github.com/containerd/containerd/commit/b592a4c1ec51d36d21d1dea5f07a03013c6acaa7) oci: fix WithDevShmSize
</p>
</details>

### Changes from containerd/cgroups
<details><summary>24 commits</summary>
<p>

* [`9ada639`](https://github.com/containerd/cgroups/commit/9ada639eccd8ae0ff4748af3906f18bf1d0a14ae) Merge pull request  [#203](https://github.com/containerd/cgroups/pull/203) from sameo/topic/subsystem-filter
* [`80a7821`](https://github.com/containerd/cgroups/commit/80a7821536fc82757f390f8d65693074bd3ef8e4) cgroup: Optionally add process and task to a subsystems subset
* [`4ff5113`](https://github.com/containerd/cgroups/commit/4ff51137c5c38ee76a8b91b89b2d8ab0c084531a) Merge pull request  [#208](https://github.com/containerd/cgroups/pull/208) from zouyee/replaceerror
* [`0072297`](https://github.com/containerd/cgroups/commit/0072297e4547d623094fc68b0df41eef364d1747) replace pkg/errors from vendor
* [`90010ec`](https://github.com/containerd/cgroups/commit/90010ec3ee97a1675ffaebfe4ec09b50621459d6) Merge pull request  [#207](https://github.com/containerd/cgroups/pull/207) from linrl3/topic/nil-interface-bug
* [`d55de5d`](https://github.com/containerd/cgroups/commit/d55de5d2af9a3616eb758e393a2170a1421155c1) cgroup.go: avoid panic on nil interface
* [`ddda8a1`](https://github.com/containerd/cgroups/commit/ddda8a174e9ae86b31366812ae2d0f9f9570a7f1) Merge pull request  [#204](https://github.com/containerd/cgroups/pull/204) from shankerwangmiao/main
* [`fbc4dd0`](https://github.com/containerd/cgroups/commit/fbc4dd0def7830b9d46d178658b1f982134dce0c) Merge pull request  [#201](https://github.com/containerd/cgroups/pull/201) from thaJeztah/remove_unused_errors
* [`73a8516`](https://github.com/containerd/cgroups/commit/73a8516e7f0f45fe9931d02cc57ff6059202f553) cgroupv2: reset lastErr to nil when subtree control is successfully written
* [`2ca92c5`](https://github.com/containerd/cgroups/commit/2ca92c515038c7a30c1998dbe29a87873b98a3b3) cgroupv2: enable controllers before setting resources in NewChild()
* [`2c11864`](https://github.com/containerd/cgroups/commit/2c118646cd190f024fad165f845f4aebc9063283) Merge pull request  [#202](https://github.com/containerd/cgroups/pull/202) from thaJeztah/cgroupv1_less_dry
* [`4fe70f3`](https://github.com/containerd/cgroups/commit/4fe70f3edc256fc2345d5f8f8a54e2f4e96f271e) v1: reduce duplicated code
* [`e6ce30d`](https://github.com/containerd/cgroups/commit/e6ce30d6d8c0dbc2f168683a18916e7a392fb693) Merge pull request  [#200](https://github.com/containerd/cgroups/pull/200) from thaJeztah/add_cgroupv1_addproc
* [`db173a8`](https://github.com/containerd/cgroups/commit/db173a86bea843700360e7061c6f8d3869d13363) v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
* [`b19a60d`](https://github.com/containerd/cgroups/commit/b19a60d64d89b858b3c2bee4a04fb7f70642ffce) v2: remove errors that are never returned
* [`6659093`](https://github.com/containerd/cgroups/commit/66590933215fb7b0c9f9ffd39e9946ab510d7679) cgroup v1: implement AddProc()
* [`616d434`](https://github.com/containerd/cgroups/commit/616d4347a49f244931740491cac6fedf8d2dd873) Merge pull request  [#199](https://github.com/containerd/cgroups/pull/199) from dmcgowan/rename-branch
* [`7254c12`](https://github.com/containerd/cgroups/commit/7254c1242cee46d1c37bf3da2151eed571879b5c) Rename branch from master to main
* [`ca6254f`](https://github.com/containerd/cgroups/commit/ca6254ff374c9f490b64ca3a8b95d04f131caa13) Merge pull request  [#197](https://github.com/containerd/cgroups/pull/197) from thaJeztah/export_parseCgroupFile
* [`a7c2112`](https://github.com/containerd/cgroups/commit/a7c211271502f3477ff9adc4911e23fcf46eb900) Merge pull request  [#194](https://github.com/containerd/cgroups/pull/194) from thaJeztah/dbus_deprecated
* [`f8918cf`](https://github.com/containerd/cgroups/commit/f8918cf2d923b7003970ce99bb29545f2f34b531) go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
* [`23b5120`](https://github.com/containerd/cgroups/commit/23b51209bf7bd11941d5613119309b11029e8373) utils: export ParseCgroupFile()
* [`ff350a8`](https://github.com/containerd/cgroups/commit/ff350a818c8aa3ebecfb12670c5075c7cbb4de4f) Merge pull request  [#195](https://github.com/containerd/cgroups/pull/195) from SaveTheRbtz/fasterDiskStats
* [`1a4509d`](https://github.com/containerd/cgroups/commit/1a4509dd06454dc765aed7f62cb26531416ffce3) Use /proc/partitions to get device names
</p>
</details>

### Changes from containerd/console
<details><summary>6 commits</summary>
<p>

* [`b5cb846`](https://github.com/containerd/console/commit/b5cb846c9186d67bcae3ce3c324e47cd317d9527) Merge pull request  [#55](https://github.com/containerd/console/pull/55) from AkihiroSuda/fix-ci
* [`e700792`](https://github.com/containerd/console/commit/e7007923e8658f863a85c34aa029c394918fed19) Fix CI
* [`05dadd9`](https://github.com/containerd/console/commit/05dadd92d21fc51f0bf56eadcb4201955cfc98d8) Stop using pkg/errors
* [`2298a9c`](https://github.com/containerd/console/commit/2298a9c8aead14b9486648325a78a831580e58b4) Merge pull request  [#46](https://github.com/containerd/console/pull/46) from najohnsn/master
* [`7097449`](https://github.com/containerd/console/commit/70974496a6a52dc828ed9eeaaf451485a7598d53) Console test on z/OS
* [`c4672c3`](https://github.com/containerd/console/commit/c4672c3a84f944113a124e5c1d401ff7ce932675) Add support for z/OS
</p>
</details>

### Changes from containerd/continuity
<details><summary>16 commits</summary>
<p>

* [`7e9eee8`](https://github.com/containerd/continuity/commit/7e9eee85bd9966ac84b134cab592e8fa37ff3e8a) Merge pull request  [#185](https://github.com/containerd/continuity/pull/185) from AkihiroSuda/remove-pkg-errors
* [`849cf06`](https://github.com/containerd/continuity/commit/849cf06982a4a69ccb3c1cfa81f2aca763ad9877) run gofmt with Go 1.17
* [`7b4650c`](https://github.com/containerd/continuity/commit/7b4650cc28941dc385d93521d532e6abbd923ed6) remove direct dependency on github.com/pkg/errors
* [`2e0898a`](https://github.com/containerd/continuity/commit/2e0898a8e801a232448807243649283aaa9bef59) Merge pull request  [#186](https://github.com/containerd/continuity/pull/186) from ukontainer/fix-darwin-utimes
* [`16556d0`](https://github.com/containerd/continuity/commit/16556d050e667b37fa349d76de4bca0d8a225a33) update AUTHORS
* [`b80f086`](https://github.com/containerd/continuity/commit/b80f08663090d91b0316074edca48bdd4fdbe0fa) darwin: use utimensat syscall instead of utimes
* [`c666a35`](https://github.com/containerd/continuity/commit/c666a3535003db8bc2b1a8e6e40a693b3643aa3e) fix darwin usage of du command
* [`8bdabd6`](https://github.com/containerd/continuity/commit/8bdabd621c1fc1cac80308f93ac4a1083c393fa8) Merge pull request  [#161](https://github.com/containerd/continuity/pull/161) from thaJeztah/update_fuse_2
* [`10c7322`](https://github.com/containerd/continuity/commit/10c7322dbe5b222d599af8f7c548842b9009b6be) Merge pull request  [#184](https://github.com/containerd/continuity/pull/184) from thaJeztah/update_stat
* [`fa7d162`](https://github.com/containerd/continuity/commit/fa7d1622372f1a787bfe51d59183b598813ce9d9) reformat nolint comments
* [`a780d6d`](https://github.com/containerd/continuity/commit/a780d6dfbb58807abd3118add4e567017a0931f9) fs/stat: add FreeBSD
* [`7f42732`](https://github.com/containerd/continuity/commit/7f427325e878a1890b681ae71c7a43b1ef076a5f) Merge pull request  [#182](https://github.com/containerd/continuity/pull/182) from dmcgowan/branch-rename
* [`0175d70`](https://github.com/containerd/continuity/commit/0175d7070de291971f80576e74cd3ca2c5ab611c) Rename branch from master to main
* [`33a8456`](https://github.com/containerd/continuity/commit/33a84563724b68f70fc71fbb632cf9e0ad60ba5d) Merge pull request  [#180](https://github.com/containerd/continuity/pull/180) from AkihiroSuda/loopback-debug
* [`e10d519`](https://github.com/containerd/continuity/commit/e10d519aaa7d4883e622e170239be4189336871d) testutil/loopback: print more debug info
* [`c7d2029`](https://github.com/containerd/continuity/commit/c7d202952681f94836fad4d45d7b829f32fb9e9c) go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
</p>
</details>

### Dependency Changes

* **github.com/AdaLogics/go-fuzz-headers**                                         6c3934b029d8 **_new_**
* **github.com/Microsoft/go-winio**                                                v0.4.17 -> v0.5.0
* **github.com/Microsoft/hcsshim**                                                 v0.8.16 -> v0.9.0
* **github.com/bits-and-blooms/bitset**                                            v1.2.0 **_new_**
* **github.com/blang/semver**                                                      v3.5.1 **_new_**
* **github.com/cenkalti/backoff/v4**                                               v4.1.1 **_new_**
* **github.com/cilium/ebpf**                                                       v0.4.0 -> v0.6.2
* **github.com/containerd/cgroups**                                                v1.0.1 -> v1.0.2
* **github.com/containerd/console**                                                v1.0.2 -> v1.0.3
* **github.com/containerd/continuity**                                             v0.1.0 -> v0.2.0
* **github.com/go-logr/logr**                                                      v0.2.0 -> v0.4.0
* **github.com/golang/groupcache**                                                 8c9f03a8e57e -> 41bb18bfe9da
* **github.com/golang/protobuf**                                                   v1.3.5 -> v1.5.2
* **github.com/google/go-cmp**                                                     v0.5.4 -> v0.5.6
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 **_new_**
* **github.com/grpc-ecosystem/grpc-gateway**                                       v1.16.0 **_new_**
* **github.com/imdario/mergo**                                                     v0.3.11 -> v0.3.12
* **github.com/json-iterator/go**                                                  v1.1.10 -> v1.1.11
* **github.com/moby/spdystream**                                                   v0.2.0 **_new_**
* **github.com/moby/sys/signal**                                                   8a51b5cc8879 **_new_**
* **github.com/opencontainers/image-spec**                                         v1.0.1 -> 5ad6f50d6283
* **github.com/opencontainers/runc**                                               v1.0.0-rc93 -> v1.0.2
* **github.com/opencontainers/runtime-spec**                                       e6143ca7d51d -> 1c3f411f0417
* **github.com/opencontainers/selinux**                                            v1.8.0 -> v1.8.2
* **github.com/pelletier/go-toml**                                                 v1.8.1 -> v1.9.3
* **github.com/prometheus/client_golang**                                          v1.7.1 -> v1.11.0
* **github.com/prometheus/common**                                                 v0.10.0 -> v0.26.0
* **github.com/satori/go.uuid**                                                    v1.2.0 **_new_**
* **github.com/sirupsen/logrus**                                                   v1.7.0 -> v1.8.1
* **github.com/spf13/pflag**                                                       v1.0.5 **_new_**
* **github.com/stretchr/testify**                                                  v1.6.1 -> v1.7.0
* **go.etcd.io/bbolt**                                                             v1.3.5 -> v1.3.6
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.24.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.0.1 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.0.1 **_new_**
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.0.1 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.0.1 **_new_**
* **go.opentelemetry.io/otel/trace**                                               v1.0.1 **_new_**
* **go.opentelemetry.io/proto/otlp**                                               v0.9.0 **_new_**
* **golang.org/x/net**                                                             e18ecbb05110 -> e898025ed96a
* **golang.org/x/sync**                                                            09787c993a3a -> 036812b2e83c
* **golang.org/x/sys**                                                             47abb6519492 -> ed5796bab164
* **golang.org/x/term**                                                            7de9c90e9dd1 -> 6a3ed077a48d
* **golang.org/x/text**                                                            v0.3.4 -> v0.3.6
* **golang.org/x/time**                                                            3af7569d3a1e -> 1f47c861a9ac
* **google.golang.org/appengine**                                                  v1.6.5 -> v1.6.6
* **google.golang.org/grpc**                                                       v1.27.1 -> v1.41.0
* **google.golang.org/protobuf**                                                   v1.27.1 **_new_**
* **gopkg.in/yaml.v3**                                                             9f266ea9e77c -> 496545a6307b
* **k8s.io/api**                                                                   v0.20.6 -> v0.22.0
* **k8s.io/apimachinery**                                                          v0.20.6 -> v0.22.0
* **k8s.io/apiserver**                                                             v0.20.6 -> v0.22.0
* **k8s.io/client-go**                                                             v0.20.6 -> v0.22.0
* **k8s.io/component-base**                                                        v0.20.6 -> v0.22.0
* **k8s.io/cri-api**                                                               v0.20.6 -> v0.22.0
* **k8s.io/utils**                                                                 67b214c5f920 -> cb0fa318a74b

Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)

containerd 1.5.7

Welcome to the v1.5.7 release of containerd!

The seventh patch release for containerd 1.5 is a security release to fix CVE-2021-41103.

### Notable Updates
* **Fix insufficiently restricted permissions on container root and plugin directories** [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Samuel Karp

### Changes
<details><summary>5 commits</summary>
<p>

* [`8686ededf`](https://github.com/containerd/containerd/commit/8686ededfc90076914c5238eb96c883ea093a8ba) Merge pull request from GHSA-c2h3-6mxw-7mvq
* [`bc2f973ff`](https://github.com/containerd/containerd/commit/bc2f973ffe7125d1082d5df4f956f38115f07919) Prepare release notes for v1.5.7
* [`f95fca079`](https://github.com/containerd/containerd/commit/f95fca0790771dc577997b1b12f56791e7a219b7) btrfs: reduce permissions on plugin directories
* [`68119b417`](https://github.com/containerd/containerd/commit/68119b417e29c5295a5b8b21b3127f0329ce2090) v1 runtime: reduce permissions for bundle dir
* [`97db45e83`](https://github.com/containerd/containerd/commit/97db45e83d03f735495e899aeebf2069ede728ff) v2 runtime: reduce permissions for bundle dir
</p>
</details>

### Dependency Changes

This release has no dependency changes

Previous release can be found at [v1.5.6](https://github.com/containerd/containerd/releases/tag/v1.5.6)

containerd 1.4.11

Welcome to the v1.4.11 release of containerd!

The eleventh patch release for containerd 1.4 is a security release to fix CVE-2021-41103.

### Notable Updates

* **Fix insufficiently restricted permissions on container root and plugin directories** [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Samuel Karp
* Phil Estes

### Changes
<details><summary>7 commits</summary>
<p>

* [`5b46e404f`](https://github.com/containerd/containerd/commit/5b46e404f6b9f661a205e28d59c982d3634148f8) Merge pull request from GHSA-c2h3-6mxw-7mvq
* [`adc279b83`](https://github.com/containerd/containerd/commit/adc279b8326a8d8913236456694f623aa37a39a9) Prepare release notes for v1.4.11
* [`0b1bde385`](https://github.com/containerd/containerd/commit/0b1bde38546a9283a52cf4970e01fd0f09b0ac4a) btrfs: reduce permissions on plugin directories
* [`38532c6ed`](https://github.com/containerd/containerd/commit/38532c6ed7bb9dd683ba9eaca62dd7cce0330cbb) v1 runtime: reduce permissions for bundle dir
* [`403846c95`](https://github.com/containerd/containerd/commit/403846c9540f5bfdaf1fe5349cce5fd3bc60f507) v2 runtime: reduce permissions for bundle dir
* [`8a3cfaf33`](https://github.com/containerd/containerd/commit/8a3cfaf33ecb286cfc710fdd32fdd2d1f9a27842) Merge pull request  [#6075](https://github.com/containerd/containerd/pull/6075) from dmcgowan/1.4-update-test-images
* [`3cd12c7d4`](https://github.com/containerd/containerd/commit/3cd12c7d47543f24a2e6445f047edf8b432f6e64) Update test images to use Github package registry
</p>
</details>

### Dependency Changes

This release has no dependency changes

Previous release can be found at [v1.4.10](https://github.com/containerd/containerd/releases/tag/v1.4.10)

containerd 1.5.6

Welcome to the v1.5.6 release of containerd!

The sixth patch release for containerd 1.5 contains minor fixes and updates
including an updated runc and hcsshim.

### Notable Updates

* **Install apparmor parser for arm64 and update seccomp to 2.5.1** [#5763](https://github.com/containerd/containerd/pull/5763)
* **Update runc binary to 1.0.2** [#5899](https://github.com/containerd/containerd/pull/5899)
* **Update hcsshim to v0.8.21 to fix layer issue on Windows Server 2019** [#5942](https://github.com/containerd/containerd/pull/5942)
* **Add support for 'clone3' syscall to fix issue with certain images when seccomp is enabled** [#5982](https://github.com/containerd/containerd/pull/5982)
* **Add image config labels in CRI container creation** [#6012](https://github.com/containerd/containerd/pull/6012)
* **Fix panic in metadata content writer on copy error** [#6043](https://github.com/containerd/containerd/pull/6043)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Akihiro Suda
* Wei Fu
* Phil Estes
* Alexandre Peixoto Ferreira
* Daniel Canter
* Sebastiaan van Stijn
* Davanum Srinivas
* Gunju Kim
* Jayme Howard
* Kohei Tokunaga
* Mike Brown
* wanglei
* zhanglei

### Changes
<details><summary>38 commits</summary>
<p>

* [`1a1b383ad`](https://github.com/containerd/containerd/commit/1a1b383ad5b520349f13f9715e0cd1e2f132c087) Merge pull request  [#6068](https://github.com/containerd/containerd/pull/6068) from dmcgowan/prepare-1.5.6
* [`bc8fdf832`](https://github.com/containerd/containerd/commit/bc8fdf8324f2116e058b61ef30bbf76479dfc5f3) Update release notes and mailmap
* [`77dafa20c`](https://github.com/containerd/containerd/commit/77dafa20c1df02a03c9c887813f25eb5a5853a65) Prepare release notes for v1.5.6
* [`063195739`](https://github.com/containerd/containerd/commit/063195739c21d530ff6ea65f0105ce6ada089fd8) Merge pull request  [#6045](https://github.com/containerd/containerd/pull/6045) from dmcgowan/1.5-fix-metadata-content-panic
* [`a4b51d119`](https://github.com/containerd/containerd/commit/a4b51d1197ee9a5547491a2ce0f15b23daaf1113) Fix panic in metadata content writer on copy error
* [`4de759ab5`](https://github.com/containerd/containerd/commit/4de759ab5952d20066f8dbb28a192ee7a56b3e6b) Merge pull request  [#6041](https://github.com/containerd/containerd/pull/6041) from dmcgowan/backport-1.5-use-ghcr-test-images
* [`147705920`](https://github.com/containerd/containerd/commit/1477059201e56c01a15618e04d22b4e0fce08d10) Use github images for integration tests
* [`3f4f6bca9`](https://github.com/containerd/containerd/commit/3f4f6bca98cf77d7a6f142dee8e388205b0eab70) Merge pull request  [#5981](https://github.com/containerd/containerd/pull/5981) from scuzhanglei/release-1.5-privileged-device
* [`980646e3c`](https://github.com/containerd/containerd/commit/980646e3c44198e25383feb739c3b7d918c85f87) Merge pull request  [#6024](https://github.com/containerd/containerd/pull/6024) from estesp/cp-6012
* [`514137aa0`](https://github.com/containerd/containerd/commit/514137aa0386b53ad2b4a6967248d9244ae2be7e) cri: add devices for privileged container
* [`6bfd09f7c`](https://github.com/containerd/containerd/commit/6bfd09f7c91c042a2ce6c2a1025c88e2975395b6) Enable image config labels in ctr and CRI container creation
* [`00e5fbe2a`](https://github.com/containerd/containerd/commit/00e5fbe2a2c254d8b6a8f3a56675e5673178cd67) Merge pull request  [#6013](https://github.com/containerd/containerd/pull/6013) from AkihiroSuda/cherrypick-5982-1.5
* [`2726be136`](https://github.com/containerd/containerd/commit/2726be13660957743f31353ac09ceeea92e4e6cd) Merge pull request  [#5983](https://github.com/containerd/containerd/pull/5983) from AkihiroSuda/runc-v1.0.2-15
* [`79e05529e`](https://github.com/containerd/containerd/commit/79e05529eaddf2950dea3a13915a94baa408afbf) Merge pull request  [#5999](https://github.com/containerd/containerd/pull/5999) from dmcgowan/1.5-fix-unexpected-eof-handling
* [`923088852`](https://github.com/containerd/containerd/commit/923088852dd91f7489924c46937522e797de5d2a) seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* [`4133c775c`](https://github.com/containerd/containerd/commit/4133c775cf81fec77bb2b3125d17d05dfb7a8dad) go.mod: update runc to v1.0.2
* [`011fb4c0b`](https://github.com/containerd/containerd/commit/011fb4c0b95637fde2b17c3e7d13697ff52ba40a) update runc binary to v1.0.2
* [`78a5a2c16`](https://github.com/containerd/containerd/commit/78a5a2c1647ca2e9d8511c5d760d3540ec0c4ffd) Merge pull request  [#6008](https://github.com/containerd/containerd/pull/6008) from thaJeztah/1.5_update_go
* [`210d3bc15`](https://github.com/containerd/containerd/commit/210d3bc15272b1ef33359065f533ecaf187ee32b) Fix content copy to not ignore unexpected EOF
* [`a863339c5`](https://github.com/containerd/containerd/commit/a863339c51f08bdbc6505e7beae4c16077714742) [release/1.5] update Go to 1.16.8
* [`217ab73b1`](https://github.com/containerd/containerd/commit/217ab73b1d98b874c684283a954051c8e1dd40fe) Merge pull request  [#6007](https://github.com/containerd/containerd/pull/6007) from AkihiroSuda/cherrypick-5987-1.5
* [`f3d46f828`](https://github.com/containerd/containerd/commit/f3d46f828e44b4216bbc68f79d810937ae95db41) CI: Switch to available latest images
* [`36d09a433`](https://github.com/containerd/containerd/commit/36d09a433c4d23caa9c93c6ee35fdf6eee19fcb2) Merge pull request  [#5941](https://github.com/containerd/containerd/pull/5941) from alexandref75/release/1.5
* [`f40ee0785`](https://github.com/containerd/containerd/commit/f40ee0785b87252b2a065396a67a52a1f3ef8d3b) Merge pull request  [#5942](https://github.com/containerd/containerd/pull/5942) from dcantah/15-hcsshim-backport
* [`c7ed09d55`](https://github.com/containerd/containerd/commit/c7ed09d55a94b8e310ad7c38d6506a0a7fafb357) Adding testing of two devices in a directory
* [`0ca2e2751`](https://github.com/containerd/containerd/commit/0ca2e2751f0f35688345e2e9aca18ee0f044dfaf) Fix dir support for devices V3 (#4847)
* [`0fd19511e`](https://github.com/containerd/containerd/commit/0fd19511e6aa352738a14abfffafd3a92b0b083b) go.mod: Update hcsshim to v0.8.21
* [`69e5db821`](https://github.com/containerd/containerd/commit/69e5db821af6458b4078d654ad3dcb3f31faa522) Merge pull request  [#5893](https://github.com/containerd/containerd/pull/5893) from gjkim42/cherry-pick-of-#5878
* [`27e164648`](https://github.com/containerd/containerd/commit/27e1646489d12c6e13f49c3fff4f61a53f7f603c) Allow expanded DNS configuration
* [`337ede532`](https://github.com/containerd/containerd/commit/337ede5321f115b00b1d3abcca3c5594ae722b0d) Merge pull request  [#5894](https://github.com/containerd/containerd/pull/5894) from estesp/cp-5625
* [`8cfab161f`](https://github.com/containerd/containerd/commit/8cfab161fb253d7dcc24eca1a4dfebeadca0bf8c) CI: Switch to available latest images
* [`25ad9449c`](https://github.com/containerd/containerd/commit/25ad9449cb709b266943a0fb198bf49d0b0d821a) Merge pull request  [#5763](https://github.com/containerd/containerd/pull/5763) from thaJeztah/1.5_backport_install_apparmor_parser_for_arm64_env
* [`84cfadfa4`](https://github.com/containerd/containerd/commit/84cfadfa4ae19dab9525a36d178edf846fdb861d) Merge pull request  [#5843](https://github.com/containerd/containerd/pull/5843) from thaJeztah/1.5_backport_update_go_116
* [`b9d5cff5d`](https://github.com/containerd/containerd/commit/b9d5cff5d10005277e5ef6ffd61e5a5fd6b15cbf) Update Go to 1.16.7
* [`8b22de9e4`](https://github.com/containerd/containerd/commit/8b22de9e4f7c5ca460d37061c86b41213a61901b) Merge pull request  [#5816](https://github.com/containerd/containerd/pull/5816) from estesp/cp-5809
* [`fe195c343`](https://github.com/containerd/containerd/commit/fe195c3432493277fff4e050e7622660ecc26415) mergo: Upgrade to 0.3.12 to fix panic
* [`eb4ba99fe`](https://github.com/containerd/containerd/commit/eb4ba99fe2e46d1833b9869de00d9eb7c9549b25) Install apparmor parser for arm64 environment
* [`0bc1e1d8a`](https://github.com/containerd/containerd/commit/0bc1e1d8aa714fe6628259d21e2b9de754b4df9a) update seccomp version
</p>
</details>

### Dependency Changes

* **github.com/Microsoft/hcsshim**    v0.8.18 -> v0.8.21
* **github.com/imdario/mergo**        v0.3.11 -> v0.3.12
* **github.com/opencontainers/runc**  v1.0.1 -> v1.0.2

Previous release can be found at [v1.5.5](https://github.com/containerd/containerd/releases/tag/v1.5.5)

containerd 1.4.10

Welcome to the v1.4.10 release of containerd!

The tenth patch release for containerd 1.4 contains minor fixes and updates
including an updated runc and hcsshim.

### Notable Updates

* **Update runc to v1.0.2** [#5899](https://github.com/containerd/containerd/pull/5899)
* **Update hcsshim to v0.8.21** [#5957](https://github.com/containerd/containerd/pull/5957)
* **Support "clone3" in default seccomp profile** [#5982](https://github.com/containerd/containerd/pull/5982)
* **Fix panic in metadata content writer on copy error** [#6043](https://github.com/containerd/containerd/pull/6043)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Sebastiaan van Stijn
* Akihiro Suda
* Phil Estes
* Derek McGowan
* Daniel Canter
* Jintao Zhang
* Michael Crosby
* Wei Fu

### Changes
<details><summary>26 commits</summary>
<p>

* [`8848fdb7c`](https://github.com/containerd/containerd/commit/8848fdb7c4ae3815afcc990a8a99d663dda1b590) Merge pull request  [#6062](https://github.com/containerd/containerd/pull/6062) from dmcgowan/prepare-1.4.10
* [`87d81c4f2`](https://github.com/containerd/containerd/commit/87d81c4f249f37c9c768e17e000b21cd79d5b8bd) Update release notes for v1.4.10
* [`16c175576`](https://github.com/containerd/containerd/commit/16c175576683c01f547e1af887e36751e6c039b8) Prepare release notes for v1.4.10
* [`f8a9b3b61`](https://github.com/containerd/containerd/commit/f8a9b3b61ab86082fd5022a8c35cd3286532c037) Merge pull request  [#6010](https://github.com/containerd/containerd/pull/6010) from thaJeztah/1.4_update_golang_1.16
* [`9b712ec73`](https://github.com/containerd/containerd/commit/9b712ec731b5a457c6cff35676beeaf3b82f9998) Merge pull request  [#6044](https://github.com/containerd/containerd/pull/6044) from dmcgowan/1.4-fix-metadata-content-panic
* [`6dddee4c8`](https://github.com/containerd/containerd/commit/6dddee4c8ffde7112a9ff1b6e2256b060733c12e) Fix panic in metadata content writer on copy error
* [`780289586`](https://github.com/containerd/containerd/commit/7802895866c4b85b2effa682823eda4da4135e49) Merge pull request  [#6014](https://github.com/containerd/containerd/pull/6014) from AkihiroSuda/cherrypick-5982-1.4
* [`668960dd3`](https://github.com/containerd/containerd/commit/668960dd3b6cbafc1e4a9d2b62c2f5c453eb0bea) seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
* [`bfe529e43`](https://github.com/containerd/containerd/commit/bfe529e43f9deb420a33d957d5f1747abff5c9ea) [release/1.4] update Go to 1.16.8
* [`46f70c5d8`](https://github.com/containerd/containerd/commit/46f70c5d85ee68c8c6abebceefc442b9b9231eb7) Update Go to 1.16.7
* [`6b98d33b8`](https://github.com/containerd/containerd/commit/6b98d33b8b646ce42ba63a010f66cc48e930d024) Update Go to 1.16.6
* [`8cc99a88d`](https://github.com/containerd/containerd/commit/8cc99a88debe6fa4ceae4a26a6b4327489bb20ad) Update Go to 1.16.4
* [`c1a8d3b4f`](https://github.com/containerd/containerd/commit/c1a8d3b4f0a7f7048d76c0cf3e51ff3e8b53ebf2) Update Go to 1.16.3
* [`80cbe4160`](https://github.com/containerd/containerd/commit/80cbe416095f60943aae448e98f6b900c8159a42) Update to Go 1.16.2
* [`ef6ce6c0c`](https://github.com/containerd/containerd/commit/ef6ce6c0c023bb2d620f789045a01c22455cf76d) Update to Go 1.16.1
* [`c9f216407`](https://github.com/containerd/containerd/commit/c9f2164072f03ac347eb7b513b8354cd2b7e0c75) [release/1.4] disable go modules where needed
* [`b9cc6ec62`](https://github.com/containerd/containerd/commit/b9cc6ec62bd45ce8f63bb6aa78fb9f4c65659768) Revert "[release/1.4] update Go to 1.15.11"
* [`8d271b339`](https://github.com/containerd/containerd/commit/8d271b339dbcf9f74afa88ee41da0ab35814d2e1) Revert "[release/1.4] Update Go to 1.15.13"
* [`afaa37975`](https://github.com/containerd/containerd/commit/afaa379753d40dd67e05b6a18f436af07e9a7e42) Revert "Update Go to 1.15.14"
* [`4ce1ce6f7`](https://github.com/containerd/containerd/commit/4ce1ce6f7dba7e12af76d863e41642cfa100c466) Revert "[release/1.4] Update Go to 1.15.15"
* [`f961e7b3c`](https://github.com/containerd/containerd/commit/f961e7b3ce4f32bcf075e2a7fa2649b277c42813) Merge pull request  [#5984](https://github.com/containerd/containerd/pull/5984) from AkihiroSuda/runc-v1.0.2-14
* [`b9d8ae17f`](https://github.com/containerd/containerd/commit/b9d8ae17f3d618bb1f48b803d0483297071d54da) update runc binary to v1.0.2
* [`e25371f79`](https://github.com/containerd/containerd/commit/e25371f799ee1a803eb997aaaeb31844aea7b2b1) Merge pull request  [#5957](https://github.com/containerd/containerd/pull/5957) from dcantah/hcsshim-backport-1.4
* [`a503d4c11`](https://github.com/containerd/containerd/commit/a503d4c11f1a52310dee1a3730bb484ebeca4c49) [release/1.4] go.mod: Update hcsshim to v0.8.21
* [`d30f83879`](https://github.com/containerd/containerd/commit/d30f83879a0d4a263978e99a41d7ebccf31c3b1c) Merge pull request  [#5841](https://github.com/containerd/containerd/pull/5841) from thaJeztah/1.4_update_golang
* [`2009fa71e`](https://github.com/containerd/containerd/commit/2009fa71eade66d669521e9f784d447987b87106) [release/1.4] Update Go to 1.15.15
</p>
</details>

### Dependency Changes

* **github.com/Microsoft/hcsshim**  v0.8.16 -> v0.8.21

Previous release can be found at [v1.4.9](https://github.com/containerd/containerd/releases/tag/v1.4.9)