[workspace] Update core liberaries (containerd, runc, buildkit)

[geropl]

Description

Motivation to bump this particular set of libraries:

• we need to stay within supported versions range of kubernetes (EKS)
• because when we bump kubernetes, we also need to bump containerd on the AMI, for it to stay compatible
• that's why we need to bump containerd client libs (runc, buildkit) to stay within those range

Related Issue(s)

Fixes CLC-982

How to test

• Manual (fuse test) is actually covered by this integration test 💡
• workspace integration tests
• ephemeral cluster / catfood + loadgen

Documentation

Preview status

Gitpod was successfully deployed to your preview environment.

• 🏷️ Name - gpl-982-update-deps
• 🔗 URL - gpl-982-update-deps.preview.gitpod-dev.com/workspaces.
• 📚 Documentation - See our internal documentation for information on how to interact with your preview environment.
• 📦 Version - gpl-982-update-deps-gha.30936
• 🗒️ Logs - GCP Logs Explorer

Build Options

Build

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer

• analytics=segment
• with-dedicated-emulation
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment / Integration Tests

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• /werft preemptible
  Saves cost. Untick this only if you're really sure you need a non-preemtible machine.
• with-integration-tests=all
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh. If enabled, with-preview and with-large-vm will be enabled.
• with-monitoring

/hold

[socket-security]

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
golang/github.com/cilium/[email protected]	environment, filesystem, network, shell, unsafe	0	3.61 MB
golang/github.com/containerd/[email protected]	environment, filesystem, network, shell, unsafe	0	8.09 MB
golang/github.com/containerd/containerd/[email protected]	unsafe	0	1.9 MB
golang/github.com/opencontainers/[email protected] 🔁 golang/github.com/opencontainers/[email protected]	None	0	2.07 MB
golang/github.com/prometheus/[email protected]	filesystem, network, unsafe	0	1.08 MB
golang/github.com/spf13/[email protected] 🔁 golang/github.com/spf13/[email protected]	None	0	661 kB
golang/golang.org/x/[email protected]	environment, filesystem, network, shell, unsafe	0	6.7 MB
golang/golang.org/x/[email protected] 🔁 golang/golang.org/x/[email protected], golang/golang.org/x/[email protected]	None	0	9.28 MB
golang/helm.sh/helm/[email protected] 🔁 golang/helm.sh/helm/[email protected]	None	0	2.6 MB

🚮 Removed packages: golang/k8s.io/[email protected]

View full report↗︎

[geropl]

Superseded by #20526: