build(deps): bump github.com/containerd/nerdctl/v2 from 2.2.2 to 2.3.0

[dependabot]

Bumps github.com/containerd/nerdctl/v2 from 2.2.2 to 2.3.0.

Release notes

Sourced from github.com/containerd/nerdctl/v2's releases.

v2.3.0

(EDIT by @​AkihiroSuda) This release of nerdctl-full uses a beta release of containerd. Expected to be fixed in v2.3.1. containerd/nerdctl#4885

---

Changes

This is the release of nerdctl v2.3.0.

Major changes:

• nerdctl image:

  • Refactored image push/pull/save/load to use containerd's transfer service, while keeping legacy image push/pull support for containerd 1.7.x (#4583)
  • Added a progress bar for nerdctl image convert (#4779, thanks to @​must108)

• nerdctl search:

  • Added support for the nerdctl search command (#4660)

• nerdctl container:

  • Added SELinux support for nerdctl run and nerdctl info (#4639, thanks to @​ningmingxiao)
  • Improved nerdctl run --gpus handling by using CDI (#4617, thanks to @​elezar)
  • Improved GPU vendor detection for CDI device IDs (#4728, thanks to @​shiv-tyagi)
  • Fixed shared IPC namespace handling for nerdctl run (#4718, thanks to @​weiyuhang2011)
  • Added missing --ipc options to nerdctl run help text and shell completion (#4731, thanks to @​haytok)
  • Added support for nerdctl cp with tarballs (#4704, thanks to @​sondavidb)
  • Added missing HostConfig fields to the Docker-compatible nerdctl container inspect response (#4850, thanks to @​ayush-panta)
  • Fixed reading logs of stopped containers by waiting for the logger to finish (#4857, thanks to @​haytok)

• nerdctl build:

  • Added --source-policy-file support (#4712, thanks to @​tinovyatkin)

• nerdctl network:

  • Added MAC, IPv4, and IPv6 addresses to nerdctl network inspect output (#4680, thanks to @​coderbirju)
  • Fixed binding containers on different IP addresses to the same port (#4800, thanks to @​yankay)
  • Fixed cleanup of port-reserver state and unused iptables chains after container removal (#4801, #4811, #4820, #4835, thanks to @​haytok)
  • Fixed freeing reserved ports in rootful mode (#4862, thanks to @​unsuman)
  • Ignored missing /proc/net/tcp6 and /proc/net/udp6 on IPv6-disabled systems (#4824, thanks to @​shouhei)

• nerdctl compose:

  • Fixed compose pull policy handling for invalid options (#4686, thanks to @​haytok)

• Rootless:

  • Removed the dead -r argument from the rootless nsenter invocation (#4837, thanks to @​MayCXC)

• nerdctl-full:

  • Updated containerd to v2.3.0, runc to v1.4.2, BuildKit to v0.29.0, Stargz Snapshotter to v0.18.2, Nydus to v2.4.1, SOCI Snapshotter to v0.13.0, Kubo to v0.41.0, RootlessKit to v3.0.0, CNI plugins to v1.9.1, and cosign to v3.0.5 (#4866, #4827, #4807, #4792, thanks to @​AkihiroSuda and @​Swapnanil-Gupta)

• Documentation:

  • Fixed the formatting of the --security-opt label=<selinuxlabel> entry in the command reference (#4882, thanks to @​ogulcanaydogan)

... (truncated)

Commits

• 0b388bb Merge pull request #4882 from ogulcanaydogan/docs/fix-security-opt-label-form...
• a01031d Merge pull request #4880 from containerd/dependabot/go_modules/github.com/con...
• 4e82d72 Merge pull request #4878 from ChengyuZhu6/fix-note
• ea64ff9 docs: fix missing list prefix for --security-opt label entry
• e8e886f build(deps): bump github.com/containerd/containerd/v2
• 9667cae Merge pull request #4876 from containerd/dependabot/go_modules/github.com/con...
• cead61e hack: update release note
• 2299ffb build(deps): bump github.com/containerd/continuity from 0.4.5 to 0.5.0
• 0280cf4 Merge pull request #4874 from ChengyuZhu6/add-gpg
• 065061d MAINTAINERS: update ChengyuZhu6's gpg key
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)