chore(deps): bump github.com/containers/podman/v4 from 4.4.0 to 4.5.0

[dependabot]

Bumps github.com/containers/podman/v4 from 4.4.0 to 4.5.0.

Release notes

Sourced from github.com/containers/podman/v4's releases.

v4.5.0

Features

• The podman kube play command now supports the hostIPC field (#17157).
• The podman kube play command now supports a new flag, --wait, that keeps the workload running in foreground until killed with a sigkill or sigterm. The workloads are cleaned up and removed when killed (#14522).
• The podman kube generate and podman kube play commands now support SELinux filetype labels.
• The podman kube play command now supports sysctl options (#16711).
• The podman kube generate command now supports generating the Deployments (#17712).
• The podman machine inspect command now shows information about named pipe addresses on Windows (#16860).
• The --userns=keep-id option for podman create, run, and kube play now works for root containers by copying the current mapping into a new user namespace (#17337).
• A new command has been added, podman secret exists, to verify if a secret with the given name exists.
• The podman kube generate and podman kube play commands now support ulimit annotations (#16404).
• The podman create, run, pod create, and pod clone commands now support a new option, --shm-size-systemd, that allows limiting tmpfs sizes for systemd-specific mounts (#17037).
• The podman create and run commands now support a new option, --group-entry which customizes the entry that is written to the /etc/group file within the container when the --user option is used (#14965).
• The podman create and podman run commands now support a new option, --security-opt label=nested, which allows SELinux labeling within a confined container.
• A new command, podman machine os apply has been added, which applies OS changes to a Podman machine, from an OCI image.
• The podman search command now supports two new options: --cert-dir and --creds.
• Defaults for the --cgroup-config option for podman create and podman run can now be set in containers.conf.
• Podman now supports auto updates for containers running inside a pod (#17181).
• Podman can now use a SQLite database as a backend for increased stability. The default remains the old database, BoltDB. The database to use is selected through the database_backend field in containers.conf.
• Netavark plugin support has been added. The netavark network backend now allows users to create custom network drivers. podman network create -d <plugin> can be used to create a network config for your plugin and then Podman will use it like any other config and takes care of setup/teardown on container start/stop. This requires at least Netavark version 1.6.
• DHCP with macvlan and the netavark backend is now supported.

Changes

• Remote builds using the podman build command no longer allows .containerignore or .dockerignore files to be symlinks outside the build context.
• The podman system reset command now clears build caches.
• The podman play kube command now adds ctrName as an alias to the pod network (#16544).
• The podman kube generate command no longer adds hostPort to the pod spec when generating service kinds.
• Using a private cgroup namespace with systemd containers on a cgroups v1 system will explicitly error (this configuration has never worked) (#17727).
• The SYS_CHROOT capability has been re-added to the default set of capabilities.
• Listing large quantities of images with the podman images command has seen a significant performance improvement (#17828).

Quadlet

• Quadlet now supports the Rootfs= option, allowing containers to be based on rootfs in addition to image.
• Quadlet now supports the Secret key in the Container group.
• Quadlet now supports the Logdriver key in .container and .kube units.
• Quadlet now supports the Mount key in .container files (#17632).
• Quadlet now supports specifying static IPv4 and IPv6 addresses in .container files via the IP= and IP6= options.
• Quadlet now supports health check configuration in .container files.
• Quadlet now supports relative paths in the Volume key in .container files (#17418).
• Quadlet now supports setting the UID and GID options for --userns=keep-id (#17908).
• Quadlet now supports adding tmpfs filesystems through the Tmpfs key in .container files (#17907).
• Quadlet now supports the UserNS option in .container files, which will replace the existing RemapGid, RemapUid, RemapUidSize and RemapUsers options in a future release (#17984).
• Quadlet now includes a --version option.
• Quadlet now forbids specifying SELinux label types, including disabling selinux separation.
• Quadlet now does not set log-driver by default.
• Fixed a bug where Quadlet did not recognize paths starting with systemd specifiers as absolute (#17906).

Bugfixes

• Fixed a bug in the network list API where a race condition would cause the list to fail if a container had just been removed (#17341).
• Fixed a bug in the podman image scp command to correctly use identity settings.

... (truncated)

Changelog

Sourced from github.com/containers/podman/v4's changelog.

4.5.0

Features

• The podman kube play command now supports the hostIPC field (#17157).
• The podman kube play command now supports a new flag, --wait, that keeps the workload running in foreground until killed with a sigkill or sigterm. The workloads are cleaned up and removed when killed (#14522).
• The podman kube generate and podman kube play commands now support SELinux filetype labels.
• The podman kube play command now supports sysctl options (#16711).
• The podman kube generate command now supports generating the Deployments (#17712).
• The podman machine inspect command now shows information about named pipe addresses on Windows (#16860).
• The --userns=keep-id option for podman create, run, and kube play now works for root containers by copying the current mapping into a new user namespace (#17337).
• A new command has been added, podman secret exists, to verify if a secret with the given name exists.
• The podman kube generate and podman kube play commands now support ulimit annotations (#16404).
• The podman create, run, pod create, and pod clone commands now support a new option, --shm-size-systemd, that allows limiting tmpfs sizes for systemd-specific mounts (#17037).
• The podman create and run commands now support a new option, --group-entry which customizes the entry that is written to the /etc/group file within the container when the --user option is used (#14965).
• The podman create and podman run commands now support a new option, --security-opt label=nested, which allows SELinux labeling within a confined container.
• A new command, podman machine os apply has been added, which applies OS changes to a Podman machine, from an OCI image.
• The podman search command now supports two new options: --cert-dir and --creds.
• Defaults for the --cgroup-config option for podman create and podman run can now be set in containers.conf.
• Podman now supports auto updates for containers running inside a pod (#17181).
• Podman can now use a SQLite database as a backend for increased stability. The default remains the old database, BoltDB. The database to use is selected through the database_backend field in containers.conf.
• Netavark plugin support is added, the netavark network backend now allows users to create custom network drivers. podman network create -d <plugin> can be used to create a network config for your plugin and then podman will use it like any other config and takes care of setup/teardown on container start/stop. This requires at least netavark version 1.6.

Changes

• Remote builds using the podman build command no longer allows .containerignore or .dockerignore files to be symlinks outside the build context.
• The podman system reset command now clears build caches.
• The podman play kube command now adds ctrName as an alias to the pod network (#16544).
• The podman kube generate command no longer adds hostPort to the pod spec when generating service kinds.
• Using a private cgroup namespace with systemd containers on a cgroups v1 system will explicitly error (this configuration has never worked) (#17727).
• The SYS_CHROOT capability has been re-added to the default set of capabilities.
• Listing large quantities of images with the podman images command has seen a significant performance improvement (#17828).

Quadlet

• Quadlet now supports the Rootfs= option, allowing containers to be based on rootfs in addition to image.
• Quadlet now supports the Secret key in the Container group.
• Quadlet now supports the Logdriver key in .container and .kube units.
• Quadlet now supports the Mount key in .container files (#17632).
• Quadlet now supports specifying static IPv4 and IPv6 addresses in .container files via the IP= and IP6= options.
• Quadlet now supports health check configuration in .container files.
• Quadlet now supports relative paths in the Volume key in .container files (#17418).
• Quadlet now supports setting the UID and GID options for --userns=keep-id (#17908).
• Quadlet now supports adding tmpfs filesystems through the Tmpfs key in .container files (#17907).
• Quadlet now includes a --version option.
• Quadlet now forbids specifying SELinux label types, including disabling selinux separation.
• Fixed a bug where Quadlet did not recognize paths starting with systemd specifiers as absolute (#17906).

Bugfixes

• Fixed a bug in the network list API where a race condition would cause the list to fail if a container had just been removed (#17341).
• Fixed a bug in the podman image scp command to correctly use identity settings.
• Fixed a bug in the remote Podman client's podman build command where building from stdin would fail. podman --remote build -f - now works correctly (#17495).
• Fixed a bug in the podman volume prune command where exclusive (!=) filters would fail (#17051).
• Fixed a bug in the --volume option in the podman create, run, pod create, and pod clone commands where specifying relative mappings or idmapped mounts would fail (#17517).

... (truncated)

Commits

• 75e3c12 Release v4.5.0
• 32a6892 [CI:DOCS] Final release notes for v4.5.0
• 8bef583 Merge pull request #18195 from openshift-cherrypick-robot/cherry-pick-18178-t...
• 5de2a13 Quadlet - do not set log-driver by default
• 091706e Merge pull request #18191 from openshift-cherrypick-robot/cherry-pick-18136-t...
• c5e704c Return title fields as a list
• 5a83f55 Merge pull request #18148 from mheon/bump_450_rc2
• bf6f58b Bump to v4.5.0-dev
• f3c3658 Bump to v4.5.0-RC2
• 15c3025 Final release notes for v4.5.0-RC2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)