Skip to content

Build(deps): Bump github.com/containers/gvisor-tap-vsock from 0.8.9 to 0.9.0 - #651

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/go_modules/github.com/containers/gvisor-tap-vsock-0.9.0
Open

dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/go_modules/github.com/containers/gvisor-tap-vsock-0.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps github.com/containers/gvisor-tap-vsock from 0.8.9 to 0.9.0.

Release notes

Sourced from github.com/containers/gvisor-tap-vsock's releases.

v0.9.0

This release has several new features:

  • an ICMP forwarder was implemented in #597. Before this, ping was succeeding even for unknown addresses
  • more DNS records (SOA/PTR/AAAA) are handled instead of being silently ignored (#696)
  • lock contention in packet forwarding is reduced to improve performance (#613)
  • source IP is correctly reported when running in a container (#634)

There were also several security hardening features:

  • Unix sockets are created with 0600 permissions (#683)
  • The REST API accessible in the virtual network can (optionally) require an authorization token before accepting requests (#724)
  • REST API use is logged for auditing purpose (#669)
  • gvproxy no longer attempts to remove files before listening on a unix socket (#718)

This last change could cause regressions/trigger bugs in applications using gvisor-tap-vsock. Please file an issue if you have any problems with this change, or with this release in general.

What's Changed

New Features

Bug Fixes

Dependency Updates

... (truncated)

Commits
  • 6dbb5d4 Merge pull request #742 from cfergeau/pidfile
  • 05d96aa Merge pull request #741 from cfergeau/typo
  • dc743ce gvproxy: Simplify pidfile creation
  • 774a77e Merge pull request #739 from containers/dependabot/go_modules/github.com/foxc...
  • c56b47d win-ssh-proxy: Fix 'facilty' typo in help string
  • 7d5e9ec build(deps): bump github.com/foxcpp/go-mockdns from 1.2.0 to 1.3.0
  • 338d9a0 Merge pull request #669 from vyasgun/pr/sec-logs
  • aee4d54 Add structured audit logging for gvproxy HTTP API
  • abac00c services: log previously ignored JSON encoding errors
  • f8489be cmd/gvproxy: avoid rebuilding the virtual network handler repeatedly
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 12, 2026
@AkihiroSuda AkihiroSuda added this to the v3.3.0 milestone Oct 12, 2026
@AkihiroSuda

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/containers/gvisor-tap-vsock-0.9.0 branch from 74c299f to 92ec9e2 Compare October 12, 2026 13:25
Comment thread go.mod
github.com/google/go-cmp v0.7.0 // indirect
github.com/google/gopacket v1.1.19 // indirect
github.com/miekg/dns v1.1.72 // indirect
github.com/linuxkit/virtsock v0.0.0-20220523201153-1a23e78aa7a2 // indirect

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Curious that something switched to this module; it hasn't been actively maintained for quite some time. Also causes pkg/errors to be reintroduced; as this PR wasn't release yet;

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like it was containers/gvisor-tap-vsock@f8650f3 from 4 years ago

"Add Windows support"

Wondering if there's some alternative (or if it could be provided by github.com/mdlayher/vsock or something)

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Comment thread go.mod
golang.org/x/crypto v0.57.0 // indirect
golang.org/x/mod v0.35.0 // indirect
golang.org/x/net v0.58.0 // indirect
golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa // indirect

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This definitely shouldn't be there; this is all deprecated code 😞

@AkihiroSuda AkihiroSuda Oct 13, 2026 •

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@thaJeztah

Copy link
Copy Markdown
Contributor

@AkihiroSuda unless there's a strong motivation to do so, I'd hold off updating this (we could try cleaning up upstream a bit if they started to maintain it again); AFAICS this is just a tag with "whatever was merged in the last 4-5 Years", but lots of outdated stuff.

Bumps [github.com/containers/gvisor-tap-vsock](https://github.com/containers/gvisor-tap-vsock) from 0.8.9 to 0.9.0.
- [Release notes](https://github.com/containers/gvisor-tap-vsock/releases)
- [Commits](containers/gvisor-tap-vsock@v0.8.9...v0.9.0)

---
updated-dependencies:
- dependency-name: github.com/containers/gvisor-tap-vsock
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/containers/gvisor-tap-vsock-0.9.0 branch from 92ec9e2 to b23d2b8 Compare October 13, 2026 00:51
@AkihiroSuda

AkihiroSuda commented Oct 13, 2026 •

Copy link
Copy Markdown
Member

In gvisor-tap-vsock v0.9.0, VirtualNetwork.Mux() returns http.Handler
instead of *http.ServeMux, so *virtualnetwork.VirtualNetwork no longer
satisfied port.VirtualNetworkProvider and the network object was
silently dropped, failing with "virtual network services mux not
available in child context".

- Change VirtualNetworkProvider.Mux() to return http.Handler
- Add a compile-time assertion so this cannot regress silently
- Call the new VirtualNetwork.Close() on cleanup

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
@AkihiroSuda

Copy link
Copy Markdown
Member

@thaJeztah may I merge this?

@thaJeztah

Copy link
Copy Markdown
Contributor

@AkihiroSuda oh! wanted to look at this; is this one needed for the patch release (for the regression?), or could it be for "next minor"?

@AkihiroSuda AkihiroSuda modified the milestones: v3.3.0, v3.4.0 Oct 14, 2026
@AkihiroSuda

Copy link
Copy Markdown
Member

Postponing to v3.4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants