Bump github.com/containerd/stargz-snapshotter from 0.8.0 to 0.10.1

[dependabot]

Bumps github.com/containerd/stargz-snapshotter from 0.8.0 to 0.10.1.

Release notes

Sourced from github.com/containerd/stargz-snapshotter's releases.

v0.10.1

This release updates containerd to apply the patch for CVE-2021-41190.

v0.10.0

This release comes with experimental support for image distribution on IPFS with lazy pulling (https://github.com/containerd/stargz-snapshotter/blob/HEAD/docs/ipfs.md), support for storing filesystem metadata on disk (bbolt) and reorganization of eStargz documents.

This release introduces new go modules ipfs and cmd. We have the following go modules as of now.

• github.com/containerd/stargz-snapshotter : Plugins for container runtimes to enable lazy pulling of eStargz and the image creation.
• github.com/containerd/stargz-snapshotter/estargz : Utilities to create and manipulate eStargz.
• github.com/containerd/stargz-snapshotter/ipfs : Plugins for containerd to support IPFS
• github.com/containerd/stargz-snapshotter/cmd : CLI commands

Notable Changes

• modules
  • Introduce the following go modules (#511)
    • ipfs: Plugins for containerd to image distribution on IPFS
    • cmd: CLI commands provided by this project
• ipfs (https://github.com/containerd/stargz-snapshotter/blob/HEAD/docs/ipfs.md)
  • Experimental support for distributing images on IPFS (#496, #501, #502, #511, #514)
• Stargz Snapshotter and Stargz Store
  • Enable to store filesystem metadata on disk to reduce memory usage (#415)
  • Make HTTP requests retryable (#479), thanks to @​rdpsin
  • Add microsecond latency measuring to metrics (#485), thanks to @​gtxu
• estargz
  • Unify eStargz specification documents (#513)
• ctr-remote
  • Fix ctr-remote to print the correct command name (#500), thanks to @​liubin

v0.9.0

This release comes with performance fixes of snapshotter implementation and lossless compression of eStargz.

Notable Changes

• estargz
  • Support lossless compression (#453)
• Stargz Store
  • Add logging of statFile errors (#442), thanks to @​vkuzniet
  • Reset bytes.Buffer before returning it to sync.Pool (#448), thanks to @​kzys
  • Avoid downloading the same data from the registry multiple times (#446), thanks to @​vkuzniet
  • Start pre/background-fetch of layers in an image simultaneously (#467)
• CI
  • Reduce required environment variables on "make benchmark" (#441), thanks to @​kzys
  • Run ctr pprof against containerd-stargz-grpc in Hello Bench (#445), thanks to @​kzys
  • Add test with upstream k3s (#447)
  • Add test with k3s + argo workflow (#449)

Commits

• 91eb38a Merge pull request #525 from ktock/prepare-v0.10.1
• e55182e Prepare for release v0.10.1
• 1885584 Merge pull request #523 from ktock/containerd-latest
• e1b5341 Make manifest detection stricter
• 64cb046 go.mod: Bump up containerd to the latest
• 668e9c5 Merge pull request #522 from ktock/containerd-1.6.0-beta2
• 67e28d1 Bump up containerd to 1.6.0-beta.2
• 1d8134b Merge pull request #519 from ktock/podman-3.4.1
• af23ed0 Bump up Podman to v3.4.1
• 3a9a614 Merge pull request #516 from ktock/nerdctl-v0.13
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #20.