Skip to content

Build(deps): Bump github.com/containers/gvisor-tap-vsock from 0.8.9 to 0.9.0 - #651

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/go_modules/github.com/containers/gvisor-tap-vsock-0.9.0
Open

dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/go_modules/github.com/containers/gvisor-tap-vsock-0.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps github.com/containers/gvisor-tap-vsock from 0.8.9 to 0.9.0.

Release notes

Sourced from github.com/containers/gvisor-tap-vsock's releases.

v0.9.0

This release has several new features:

  • an ICMP forwarder was implemented in #597. Before this, ping was succeeding even for unknown addresses
  • more DNS records (SOA/PTR/AAAA) are handled instead of being silently ignored (#696)
  • lock contention in packet forwarding is reduced to improve performance (#613)
  • source IP is correctly reported when running in a container (#634)

There were also several security hardening features:

  • Unix sockets are created with 0600 permissions (#683)
  • The REST API accessible in the virtual network can (optionally) require an authorization token before accepting requests (#724)
  • REST API use is logged for auditing purpose (#669)
  • gvproxy no longer attempts to remove files before listening on a unix socket (#718)

This last change could cause regressions/trigger bugs in applications using gvisor-tap-vsock. Please file an issue if you have any problems with this change, or with this release in general.

What's Changed

New Features

Bug Fixes

Dependency Updates

... (truncated)

Commits
  • 6dbb5d4 Merge pull request #742 from cfergeau/pidfile
  • 05d96aa Merge pull request #741 from cfergeau/typo
  • dc743ce gvproxy: Simplify pidfile creation
  • 774a77e Merge pull request #739 from containers/dependabot/go_modules/github.com/foxc...
  • c56b47d win-ssh-proxy: Fix 'facilty' typo in help string
  • 7d5e9ec build(deps): bump github.com/foxcpp/go-mockdns from 1.2.0 to 1.3.0
  • 338d9a0 Merge pull request #669 from vyasgun/pr/sec-logs
  • aee4d54 Add structured audit logging for gvproxy HTTP API
  • abac00c services: log previously ignored JSON encoding errors
  • f8489be cmd/gvproxy: avoid rebuilding the virtual network handler repeatedly
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 12, 2026
@AkihiroSuda AkihiroSuda added this to the v3.3.0 milestone Oct 12, 2026
@AkihiroSuda

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/containers/gvisor-tap-vsock-0.9.0 branch from 74c299f to 92ec9e2 Compare October 12, 2026 13:25
Comment thread go.mod
github.com/google/go-cmp v0.7.0 // indirect
github.com/google/gopacket v1.1.19 // indirect
github.com/miekg/dns v1.1.72 // indirect
github.com/linuxkit/virtsock v0.0.0-20220523201153-1a23e78aa7a2 // indirect

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Curious that something switched to this module; it hasn't been actively maintained for quite some time. Also causes pkg/errors to be reintroduced; as this PR wasn't release yet;

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like it was containers/gvisor-tap-vsock@f8650f3 from 4 years ago

"Add Windows support"

Wondering if there's some alternative (or if it could be provided by github.com/mdlayher/vsock or something)

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Comment thread go.mod
golang.org/x/crypto v0.57.0 // indirect
golang.org/x/mod v0.35.0 // indirect
golang.org/x/net v0.58.0 // indirect
golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa // indirect

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This definitely shouldn't be there; this is all deprecated code 😞

@AkihiroSuda AkihiroSuda Oct 13, 2026 •

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@thaJeztah

Copy link
Copy Markdown
Contributor

@AkihiroSuda unless there's a strong motivation to do so, I'd hold off updating this (we could try cleaning up upstream a bit if they started to maintain it again); AFAICS this is just a tag with "whatever was merged in the last 4-5 Years", but lots of outdated stuff.

Bumps [github.com/containers/gvisor-tap-vsock](https://github.com/containers/gvisor-tap-vsock) from 0.8.9 to 0.9.0.
- [Release notes](https://github.com/containers/gvisor-tap-vsock/releases)
- [Commits](containers/gvisor-tap-vsock@v0.8.9...v0.9.0)

---
updated-dependencies:
- dependency-name: github.com/containers/gvisor-tap-vsock
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/containers/gvisor-tap-vsock-0.9.0 branch from 92ec9e2 to b23d2b8 Compare October 13, 2026 00:51
@AkihiroSuda

AkihiroSuda commented Oct 13, 2026 •

Copy link
Copy Markdown
Member

In gvisor-tap-vsock v0.9.0, VirtualNetwork.Mux() returns http.Handler
instead of *http.ServeMux, so *virtualnetwork.VirtualNetwork no longer
satisfied port.VirtualNetworkProvider and the network object was
silently dropped, failing with "virtual network services mux not
available in child context".

- Change VirtualNetworkProvider.Mux() to return http.Handler
- Add a compile-time assertion so this cannot regress silently
- Call the new VirtualNetwork.Close() on cleanup

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants