host-ctr: Upgrade go dependencies

Signed-off-by: Kyle Sessions <[email protected]>

sources/host-ctr/go.mod

@@ -7,7 +7,7 @@ toolchain go1.22.2
 require (
  github.com/aws/aws-sdk-go v1.53.13
  github.com/awslabs/amazon-ecr-containerd-resolver v0.0.0-20240521172427-b580afd02343
- github.com/containerd/containerd v1.6.30
+ github.com/containerd/containerd v1.7.17
  github.com/opencontainers/runtime-spec v1.2.0
  github.com/pelletier/go-toml v1.9.5
  github.com/pkg/errors v0.9.1
@@ -17,24 +17,14 @@ require (
  k8s.io/cri-api v0.30.1
 )
 
-replace (
- // Containerd 1.6.x carries an older version of go-restful that has a CVE.
- // As documented in containerd here: https://github.com/containerd/containerd/pull/7117
- // this CVE cannot be executed against containerd.
- // Regardless, this replace statement upgrades the go-restful dependency
- // to a version that does not have this CVE
- // and is still compatible with containerd.
- // TODO: For containerd 1.7.x, this replace statement can be removed
- // since containerd moved to go-restful/v3
- github.com/emicklei/go-restful v2.9.5+incompatible => github.com/emicklei/go-restful v2.16.0+incompatible
-
- // containerd still uses the v1alpha2 APIs in k8s.io/cri-api.
- // These were removed in v0.26 of cri-api resulting in a dependency conflict.
- // TODO: Remove this `replace` when containerd uses v1 of the cri-api
- k8s.io/cri-api => k8s.io/cri-api v0.25.5
-)
+// containerd still uses the v1alpha2 APIs in k8s.io/cri-api.
+// These were removed in v0.26 of cri-api resulting in a dependency conflict.
+// TODO: Remove this `replace` when containerd uses v1 of the cri-api
+replace k8s.io/cri-api => k8s.io/cri-api v0.27.14
 
 require (
+ github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
+ github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0 // indirect
  github.com/Masterminds/semver/v3 v3.2.1 // indirect
  github.com/Microsoft/go-winio v0.6.2 // indirect
  github.com/Microsoft/hcsshim v0.11.5 // indirect
@@ -43,6 +33,7 @@ require (
  github.com/cespare/xxhash/v2 v2.3.0 // indirect
  github.com/cilium/ebpf v0.15.0 // indirect
  github.com/containerd/cgroups v1.1.0 // indirect
+ github.com/containerd/cgroups/v3 v3.0.2 // indirect
  github.com/containerd/continuity v0.4.3 // indirect
  github.com/containerd/fifo v1.1.0 // indirect
  github.com/containerd/go-cni v1.1.9 // indirect
@@ -51,6 +42,7 @@ require (
  github.com/containerd/nri v0.6.1 // indirect
  github.com/containerd/ttrpc v1.2.4 // indirect
  github.com/containerd/typeurl v1.0.2 // indirect
+ github.com/containerd/typeurl/v2 v2.1.1 // indirect
  github.com/containernetworking/cni v1.2.0 // indirect
  github.com/containernetworking/plugins v1.4.0 // indirect
  github.com/containers/ocicrypt v1.1.10 // indirect
@@ -61,17 +53,21 @@ require (
  github.com/docker/go-metrics v0.0.1 // indirect
  github.com/docker/go-units v0.5.0 // indirect
  github.com/emicklei/go-restful/v3 v3.12.1 // indirect
+ github.com/felixge/httpsnoop v1.0.3 // indirect
  github.com/fsnotify/fsnotify v1.7.0 // indirect
  github.com/go-jose/go-jose/v3 v3.0.3 // indirect
  github.com/go-logr/logr v1.4.2 // indirect
+ github.com/go-logr/stdr v1.2.2 // indirect
  github.com/godbus/dbus/v5 v5.1.0 // indirect
- github.com/gogo/googleapis v1.4.1 // indirect
  github.com/gogo/protobuf v1.3.2 // indirect
  github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
  github.com/golang/protobuf v1.5.4 // indirect
+ github.com/google/go-cmp v0.6.0 // indirect
  github.com/google/gofuzz v1.2.0 // indirect
  github.com/google/uuid v1.6.0 // indirect
  github.com/gorilla/websocket v1.5.1 // indirect
+ github.com/hashicorp/errwrap v1.1.0 // indirect
+ github.com/hashicorp/go-multierror v1.1.1 // indirect
  github.com/htcat/htcat v1.0.2 // indirect
  github.com/intel/goresctrl v0.7.0 // indirect
  github.com/jmespath/go-jmespath v0.4.0 // indirect
@@ -81,6 +77,7 @@ require (
  github.com/moby/locker v1.0.1 // indirect
  github.com/moby/spdystream v0.2.0 // indirect
  github.com/moby/sys/mountinfo v0.7.1 // indirect
+ github.com/moby/sys/sequential v0.5.0 // indirect
  github.com/moby/sys/signal v0.7.0 // indirect
  github.com/moby/sys/symlink v0.2.0 // indirect
  github.com/moby/sys/user v0.1.0 // indirect
@@ -89,6 +86,7 @@ require (
  github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect
  github.com/opencontainers/go-digest v1.0.0 // indirect
  github.com/opencontainers/image-spec v1.1.0 // indirect
+ github.com/opencontainers/runtime-tools v0.9.1-0.20221107090550-2e043c6bd626 // indirect
  github.com/opencontainers/selinux v1.11.0 // indirect
  github.com/pmezard/go-difflib v1.0.0 // indirect
  github.com/prometheus/client_golang v1.19.1 // indirect
@@ -98,22 +96,28 @@ require (
  github.com/russross/blackfriday/v2 v2.1.0 // indirect
  github.com/spf13/pflag v1.0.5 // indirect
  github.com/stefanberger/go-pkcs11uri v0.0.0-20230803200340-78284954bff6 // indirect
- github.com/tchap/go-patricia v2.3.0+incompatible // indirect
+ github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635 // indirect
+ github.com/tchap/go-patricia/v2 v2.3.1 // indirect
  github.com/vishvananda/netlink v1.2.1-beta.2 // indirect
  github.com/vishvananda/netns v0.0.4 // indirect
  github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 // indirect
- go.etcd.io/bbolt v1.3.10 // indirect
  go.mozilla.org/pkcs7 v0.0.0-20210826202110-33d05740a352 // indirect
  go.opencensus.io v0.24.0 // indirect
+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0 // indirect
+ go.opentelemetry.io/otel v1.19.0 // indirect
+ go.opentelemetry.io/otel/metric v1.19.0 // indirect
+ go.opentelemetry.io/otel/trace v1.19.0 // indirect
  golang.org/x/crypto v0.23.0 // indirect
  golang.org/x/exp v0.0.0-20240530194437-404ba88c7ed0 // indirect
+ golang.org/x/mod v0.17.0 // indirect
  golang.org/x/net v0.25.0 // indirect
  golang.org/x/oauth2 v0.20.0 // indirect
  golang.org/x/sync v0.7.0 // indirect
  golang.org/x/sys v0.20.0 // indirect
  golang.org/x/term v0.20.0 // indirect
  golang.org/x/text v0.15.0 // indirect
  golang.org/x/time v0.5.0 // indirect
+ google.golang.org/genproto v0.0.0-20230822172742-b8732ec3820d // indirect
  google.golang.org/genproto/googleapis/rpc v0.0.0-20240528184218-531527333157 // indirect
  google.golang.org/grpc v1.64.0 // indirect
  google.golang.org/protobuf v1.34.1 // indirect
@@ -130,4 +134,6 @@ require (
  sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
  sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
  sigs.k8s.io/yaml v1.4.0 // indirect
+ tags.cncf.io/container-device-interface v0.7.2 // indirect
+ tags.cncf.io/container-device-interface/specs-go v0.7.0 // indirect
 )