Bump the other-go-modules group across 1 directory with 4 updates

[dependabot]

Bumps the other-go-modules group with 4 updates in the / directory: github.com/Microsoft/hcsshim, github.com/containernetworking/plugins, golang.org/x/sync and golang.org/x/sys.

Updates github.com/Microsoft/hcsshim from 0.13.0 to 0.14.0

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.14.0

This is a non-rc v0.14.0 release, which is the same as https://github.com/microsoft/hcsshim/releases/tag/v0.14.0-rc.1

What's Changed

• Use multi-error for annotation processing by @​helsaawy in microsoft/hcsshim#2419
• Add rootfs.exe tool to merge tar image layers by @​helsaawy in microsoft/hcsshim#2424
• Support for querying disks based on LUN by @​ambarve in microsoft/hcsshim#2421
• Tool for extracting UtilityVM files from a container layer into a CIM by @​ambarve in microsoft/hcsshim#2423
• Add uvm:// mount support for LCOW by @​helsaawy in microsoft/hcsshim#2430
• Bump google.golang.org/grpc from 1.69.0 to 1.72.1 in /test by @​dependabot[bot] in microsoft/hcsshim#2432
• Bump golang.org/x/sync from 0.13.0 to 0.14.0 in /test by @​dependabot[bot] in microsoft/hcsshim#2433
• Store extraction error for LazyImageLayers by @​helsaawy in microsoft/hcsshim#2429
• Switch to golangci-lint v2 by @​helsaawy in microsoft/hcsshim#2440
• SecurityPolicy: Add leading and trailing checks for env variables by @​MahatiC in microsoft/hcsshim#2431
• Trim LCOW GetProperties response by @​helsaawy in microsoft/hcsshim#2458
• Swap EvalSymlinks with ResolvePath by @​helsaawy in microsoft/hcsshim#2455
• Bug: when searching for LinuxBootFiles by @​helsaawy in microsoft/hcsshim#2454
• Organize annotations; change annotation expansions by @​helsaawy in microsoft/hcsshim#2449
• Omnibus dependabot update by @​helsaawy in microsoft/hcsshim#2442
• lcow: disable virtio-vsock init by @​anmaxvl in microsoft/hcsshim#2461
• Initial support for verified CIMs by @​ambarve in microsoft/hcsshim#2448
• Move hcsshim/main to containerd v2.1.2 and update CIs to WS2025 by @​kiashok in microsoft/hcsshim#2425
• Validate runhcs sandbox isolation and platform by @​helsaawy in microsoft/hcsshim#2473
• log mkfs.ext4 stderr output by @​anmaxvl in microsoft/hcsshim#2474
• Bump golang.org/x/sys from 0.33.0 to 0.34.0 in /test by @​dependabot[bot] in microsoft/hcsshim#2480
• Remove WS2025 from CIs by @​kiashok in microsoft/hcsshim#2483
• Gcs sidecar framework by @​kiashok in microsoft/hcsshim#2422
• Support for importing verified block CIM layers by @​ambarve in microsoft/hcsshim#2456
• Warn on incomplete vNUMA setting, clarify field names by @​helsaawy in microsoft/hcsshim#2466
• Fix CUDA for non-privileged containers by @​helsaawy in microsoft/hcsshim#2492
• fixes to uvmboot by @​ambarve in microsoft/hcsshim#2494
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in microsoft/hcsshim#2499

Full Changelog: microsoft/hcsshim@v0.13.0...v0.14.0

v0.14.0-rc.1

What's Changed

• Use multi-error for annotation processing by @​helsaawy in microsoft/hcsshim#2419
• Add rootfs.exe tool to merge tar image layers by @​helsaawy in microsoft/hcsshim#2424
• Support for querying disks based on LUN by @​ambarve in microsoft/hcsshim#2421
• Tool for extracting UtilityVM files from a container layer into a CIM by @​ambarve in microsoft/hcsshim#2423
• Add uvm:// mount support for LCOW by @​helsaawy in microsoft/hcsshim#2430
• Bump google.golang.org/grpc from 1.69.0 to 1.72.1 in /test by @​dependabot[bot] in microsoft/hcsshim#2432
• Bump golang.org/x/sync from 0.13.0 to 0.14.0 in /test by @​dependabot[bot] in microsoft/hcsshim#2433
• Store extraction error for LazyImageLayers by @​helsaawy in microsoft/hcsshim#2429
• Switch to golangci-lint v2 by @​helsaawy in microsoft/hcsshim#2440
• SecurityPolicy: Add leading and trailing checks for env variables by @​MahatiC in microsoft/hcsshim#2431
• Trim LCOW GetProperties response by @​helsaawy in microsoft/hcsshim#2458
• Swap EvalSymlinks with ResolvePath by @​helsaawy in microsoft/hcsshim#2455

... (truncated)

Commits

• 59e0e2f Bump actions/checkout from 4 to 5 (#2499)
• a776109 Fix console size bug
• 0366cb2 Add default allow all policy to uvmboot
• 144c633 Fix CUDA for non-privileged containers (#2492)
• 0842153 Warn on incomplete vNUMA setting, clarify field names (#2466)
• 1ee5fce Merge pull request #2456 from ambarve/hyperv_bcims
• a2229bf Make a common utility function for appending VHD footer
• e7200e8 Support for importing block CIM layers
• dde229d Support creating verified UVM CIMs
• b8f90a0 Merge pull request #2422 from kiashok/gcs-sidecar-framework
• Additional commits viewable in compare view

Updates github.com/containernetworking/plugins from 1.9.0 to 1.9.1

Release notes

Sourced from github.com/containernetworking/plugins's releases.

v1.9.1

This is a patch release with dependency updates and some minor fixes.

Minor fixes

• bandwidth: handle nil bandwidth in CHECK by @​squeed in containernetworking/plugins#1222
• vrf: fix route filtering to preserve IPAM-configured routes by @​mlguerrero12 in containernetworking/plugins#1227
• CVE-2025-52881: Bump selinux to 1.13.0 by @​sbiradar10 in containernetworking/plugins#1231
• bridge: include attempted IP address in AddrAdd error message by @​Amulyam24 in containernetworking/plugins#1225

New Contributors

• @​sbiradar10 made their first contribution in containernetworking/plugins#1231
• @​Amulyam24 made their first contribution in containernetworking/plugins#1225

Full Changelog: containernetworking/plugins@v1.9.0...v1.9.1

Commits

• adc3e6b bridge: include attempted IP address in AddrAdd error message
• 4161e44 build(deps): bump golangci/golangci-lint-action from 8 to 9
• dada84a CVE-2025-52881: Bump selinux to 1.13.0
• dfb1f9a fix(test): use shorter veth peer name
• ccc8314 vrf: fix route filtering to preserve IPAM-configured routes
• 8c4a6b3 bandwidth: handle nil bandwidth in CHECK
• See full diff in compare view

Updates golang.org/x/sync from 0.19.0 to 0.20.0

Commits

• ec11c4a errgroup: fix a typo in the documentation
• 1a58307 all: modernize interface{} -> any
• 3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
• See full diff in compare view

Updates golang.org/x/sys from 0.41.0 to 0.42.0

Commits

• eaaaaee windows/registry: correct KeyInfo.ModTime calculation
• 942780b cpu: darwin/arm64 feature detection
• acef388 unix/linux: Prefixmsg and PrefixCacheinfo structs
• 3687fbd cpu: better defaults on darwin ARM64
• 48062e9 plan9: change Note to alias syscall.Note
• 4f23f80 windows: change Signal to alias syscall.Signal
• 7548802 all: upgrade go directive to at least 1.25.0 [generated]
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions