build(deps): bump github.com/containers/podman/v4 from 4.2.0 to 4.5.0

[dependabot]

Bumps github.com/containers/podman/v4 from 4.2.0 to 4.5.0.

Release notes

Sourced from github.com/containers/podman/v4's releases.

v4.5.0

Features

• The podman kube play command now supports the hostIPC field (#17157).
• The podman kube play command now supports a new flag, --wait, that keeps the workload running in foreground until killed with a sigkill or sigterm. The workloads are cleaned up and removed when killed (#14522).
• The podman kube generate and podman kube play commands now support SELinux filetype labels.
• The podman kube play command now supports sysctl options (#16711).
• The podman kube generate command now supports generating the Deployments (#17712).
• The podman machine inspect command now shows information about named pipe addresses on Windows (#16860).
• The --userns=keep-id option for podman create, run, and kube play now works for root containers by copying the current mapping into a new user namespace (#17337).
• A new command has been added, podman secret exists, to verify if a secret with the given name exists.
• The podman kube generate and podman kube play commands now support ulimit annotations (#16404).
• The podman create, run, pod create, and pod clone commands now support a new option, --shm-size-systemd, that allows limiting tmpfs sizes for systemd-specific mounts (#17037).
• The podman create and run commands now support a new option, --group-entry which customizes the entry that is written to the /etc/group file within the container when the --user option is used (#14965).
• The podman create and podman run commands now support a new option, --security-opt label=nested, which allows SELinux labeling within a confined container.
• A new command, podman machine os apply has been added, which applies OS changes to a Podman machine, from an OCI image.
• The podman search command now supports two new options: --cert-dir and --creds.
• Defaults for the --cgroup-config option for podman create and podman run can now be set in containers.conf.
• Podman now supports auto updates for containers running inside a pod (#17181).
• Podman can now use a SQLite database as a backend for increased stability. The default remains the old database, BoltDB. The database to use is selected through the database_backend field in containers.conf.
• Netavark plugin support has been added. The netavark network backend now allows users to create custom network drivers. podman network create -d <plugin> can be used to create a network config for your plugin and then Podman will use it like any other config and takes care of setup/teardown on container start/stop. This requires at least Netavark version 1.6.
• DHCP with macvlan and the netavark backend is now supported.

Changes

• Remote builds using the podman build command no longer allows .containerignore or .dockerignore files to be symlinks outside the build context.
• The podman system reset command now clears build caches.
• The podman play kube command now adds ctrName as an alias to the pod network (#16544).
• The podman kube generate command no longer adds hostPort to the pod spec when generating service kinds.
• Using a private cgroup namespace with systemd containers on a cgroups v1 system will explicitly error (this configuration has never worked) (#17727).
• The SYS_CHROOT capability has been re-added to the default set of capabilities.
• Listing large quantities of images with the podman images command has seen a significant performance improvement (#17828).

Quadlet

• Quadlet now supports the Rootfs= option, allowing containers to be based on rootfs in addition to image.
• Quadlet now supports the Secret key in the Container group.
• Quadlet now supports the Logdriver key in .container and .kube units.
• Quadlet now supports the Mount key in .container files (#17632).
• Quadlet now supports specifying static IPv4 and IPv6 addresses in .container files via the IP= and IP6= options.
• Quadlet now supports health check configuration in .container files.
• Quadlet now supports relative paths in the Volume key in .container files (#17418).
• Quadlet now supports setting the UID and GID options for --userns=keep-id (#17908).
• Quadlet now supports adding tmpfs filesystems through the Tmpfs key in .container files (#17907).
• Quadlet now supports the UserNS option in .container files, which will replace the existing RemapGid, RemapUid, RemapUidSize and RemapUsers options in a future release (#17984).
• Quadlet now includes a --version option.
• Quadlet now forbids specifying SELinux label types, including disabling selinux separation.
• Quadlet now does not set log-driver by default.
• Fixed a bug where Quadlet did not recognize paths starting with systemd specifiers as absolute (#17906).

Bugfixes

• Fixed a bug in the network list API where a race condition would cause the list to fail if a container had just been removed (#17341).
• Fixed a bug in the podman image scp command to correctly use identity settings.

... (truncated)

Changelog

Sourced from github.com/containers/podman/v4's changelog.

4.5.0

Features

• The podman kube play command now supports the hostIPC field (#17157).
• The podman kube play command now supports a new flag, --wait, that keeps the workload running in foreground until killed with a sigkill or sigterm. The workloads are cleaned up and removed when killed (#14522).
• The podman kube generate and podman kube play commands now support SELinux filetype labels.
• The podman kube play command now supports sysctl options (#16711).
• The podman kube generate command now supports generating the Deployments (#17712).
• The podman machine inspect command now shows information about named pipe addresses on Windows (#16860).
• The --userns=keep-id option for podman create, run, and kube play now works for root containers by copying the current mapping into a new user namespace (#17337).
• A new command has been added, podman secret exists, to verify if a secret with the given name exists.
• The podman kube generate and podman kube play commands now support ulimit annotations (#16404).
• The podman create, run, pod create, and pod clone commands now support a new option, --shm-size-systemd, that allows limiting tmpfs sizes for systemd-specific mounts (#17037).
• The podman create and run commands now support a new option, --group-entry which customizes the entry that is written to the /etc/group file within the container when the --user option is used (#14965).
• The podman create and podman run commands now support a new option, --security-opt label=nested, which allows SELinux labeling within a confined container.
• A new command, podman machine os apply has been added, which applies OS changes to a Podman machine, from an OCI image.
• The podman search command now supports two new options: --cert-dir and --creds.
• Defaults for the --cgroup-config option for podman create and podman run can now be set in containers.conf.
• Podman now supports auto updates for containers running inside a pod (#17181).
• Podman can now use a SQLite database as a backend for increased stability. The default remains the old database, BoltDB. The database to use is selected through the database_backend field in containers.conf.
• Netavark plugin support is added, the netavark network backend now allows users to create custom network drivers. podman network create -d <plugin> can be used to create a network config for your plugin and then podman will use it like any other config and takes care of setup/teardown on container start/stop. This requires at least netavark version 1.6.

Changes

• Remote builds using the podman build command no longer allows .containerignore or .dockerignore files to be symlinks outside the build context.
• The podman system reset command now clears build caches.
• The podman play kube command now adds ctrName as an alias to the pod network (#16544).
• The podman kube generate command no longer adds hostPort to the pod spec when generating service kinds.
• Using a private cgroup namespace with systemd containers on a cgroups v1 system will explicitly error (this configuration has never worked) (#17727).
• The SYS_CHROOT capability has been re-added to the default set of capabilities.
• Listing large quantities of images with the podman images command has seen a significant performance improvement (#17828).

Quadlet

• Quadlet now supports the Rootfs= option, allowing containers to be based on rootfs in addition to image.
• Quadlet now supports the Secret key in the Container group.
• Quadlet now supports the Logdriver key in .container and .kube units.
• Quadlet now supports the Mount key in .container files (#17632).
• Quadlet now supports specifying static IPv4 and IPv6 addresses in .container files via the IP= and IP6= options.
• Quadlet now supports health check configuration in .container files.
• Quadlet now supports relative paths in the Volume key in .container files (#17418).
• Quadlet now supports setting the UID and GID options for --userns=keep-id (#17908).
• Quadlet now supports adding tmpfs filesystems through the Tmpfs key in .container files (#17907).
• Quadlet now includes a --version option.
• Quadlet now forbids specifying SELinux label types, including disabling selinux separation.
• Fixed a bug where Quadlet did not recognize paths starting with systemd specifiers as absolute (#17906).

Bugfixes

• Fixed a bug in the network list API where a race condition would cause the list to fail if a container had just been removed (#17341).
• Fixed a bug in the podman image scp command to correctly use identity settings.
• Fixed a bug in the remote Podman client's podman build command where building from stdin would fail. podman --remote build -f - now works correctly (#17495).
• Fixed a bug in the podman volume prune command where exclusive (!=) filters would fail (#17051).
• Fixed a bug in the --volume option in the podman create, run, pod create, and pod clone commands where specifying relative mappings or idmapped mounts would fail (#17517).

... (truncated)

Commits

• 75e3c12 Release v4.5.0
• 32a6892 [CI:DOCS] Final release notes for v4.5.0
• 8bef583 Merge pull request #18195 from openshift-cherrypick-robot/cherry-pick-18178-t...
• 5de2a13 Quadlet - do not set log-driver by default
• 091706e Merge pull request #18191 from openshift-cherrypick-robot/cherry-pick-18136-t...
• c5e704c Return title fields as a list
• 5a83f55 Merge pull request #18148 from mheon/bump_450_rc2
• bf6f58b Bump to v4.5.0-dev
• f3c3658 Bump to v4.5.0-RC2
• 15c3025 Final release notes for v4.5.0-RC2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.