chore: update versions

.github/workflows/diagram.yml

@@ -26,7 +26,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Update diagram
         uses: githubocto/repo-visualizer@a999615bdab757559bf94bda1fe6eef232765f85 # 0.9.1
         with:

.github/workflows/lint.yml

@@ -17,13 +17,13 @@ jobs:
   check-broken-links:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Check broken links
         uses: gaurav-nelson/github-action-markdown-link-check@4a1af151f4d7cf4d8f8ac5780597672a3671b88b # 1.0.17
   check-super-linter:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Check super-linter
         uses: github/super-linter@b807e99ddd37e444d189cfd2c2ca1274d8ae8ef1 # 7
         env:
@@ -36,7 +36,7 @@ jobs:
   check-tox:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Install tox
         run: pip install tox --break-system-packages
       - name: Run tox validation

.github/workflows/on_demand.yml

@@ -27,7 +27,7 @@ jobs:
     if: >-
       ( github.event_name == 'pull_request_review' && github.event.review.state == 'approved' ) || github.event_name != 'pull_request_review'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Run the sh-checker
         uses: luizm/action-sh-checker@17bd25a6ee188d2b91f677060038f4ba37ba14b2 # 0.9.0
         env:
@@ -43,7 +43,7 @@ jobs:
     outputs:
       demos: ${{ steps.filter.outputs.changes }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # 3.0.2
         if: ${{ !env.ACT }}
         id: filter
@@ -69,8 +69,8 @@ jobs:
       matrix:
         demo: ${{ fromJSON(needs.changes.outputs.demos) }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
-      - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # 5.5.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
+      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # 6.1.0
         with:
           go-version: "1.24"
           check-latest: true
@@ -81,7 +81,7 @@ jobs:
     name: Run BDD shell specs for Bash demo
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Install ShellSpec
         run: curl -fsSL https://github.com/shellspec/shellspec/releases/latest/download/shellspec-dist.tar.gz | tar -xz -C ..
       - name: Run Shellspec

.github/workflows/spell.yml

@@ -22,14 +22,14 @@ jobs:
     name: Check spelling (reviewdog)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
-      - uses: reviewdog/action-misspell@8f4203d27a6896ebd5cd8bdd861b36bd18c37978 # 1.26.3
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
+      - uses: reviewdog/action-misspell@e7ea17f144822818706c7e579de7927d59384575 # 1.27.0
         with:
           github_token: ${{ secrets.github_token }}
   check-spellcheck:
     name: Check spelling (pyspelling)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
-      - uses: igsekor/pyspelling-any@155eb06641bb9259cab59b5126a40be943ecb4f7 # 1.0.4
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
+      - uses: igsekor/pyspelling-any@44278deea34ea69d8f0d5179ac409c140b0a2f5a # 1.0.5
         name: Spellcheck

.github/workflows/update.yml

@@ -20,7 +20,7 @@ jobs:
       pull-requests: write # for technote-space/create-pr-action to create a PR
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
         with:
           # Fine-grained PAT with contents:write and workflows:write scopes
           token: ${{ secrets.WORKFLOW_TOKEN }}
@@ -35,7 +35,7 @@ jobs:
   check-dictionary:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - uses: technote-space/create-pr-action@91114507cf92349bec0a9a501c2edf1635427bc5 # 2.1.4
         with:
           EXECUTE_COMMANDS: |

bash/Dockerfile

@@ -1,4 +1,4 @@
-FROM kindest/node:v1.33.1
+FROM kindest/node:v1.34.0
 
 COPY bin/plugin.sh /opt/cni/bin/bash-cni
 

flannel/Dockerfile

@@ -1,4 +1,4 @@
-FROM kindest/node:v1.33.1
+FROM kindest/node:v1.34.0
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 RUN echo "wireshark-common wireshark-common/install-setuid boolean true" | debconf-set-selections && \

flannel/install.sh

@@ -13,7 +13,7 @@ set -o xtrace
 set -o errexit
 set -o nounset
 
-export PKG_FLANNEL_VERSION=${PKG_FLANNEL_VERSION:-1.7.1-flannel1}
+export PKG_FLANNEL_VERSION=${PKG_FLANNEL_VERSION:-1.8.0-flannel2}
 export PKG_CNI_PLUGINS_INSTALL_FLANNEL=true
 export PKG="cni-plugins"
 export PKG_COMMANDS_LIST="docker,kind,kubectl"

flannel/kube-flannel.yaml

@@ -133,7 +133,7 @@ spec:
       serviceAccountName: flannel
       initContainers:
         - name: install-cni-plugin
-          image: ghcr.io/flannel-io/flannel-cni-plugin:v1.7.1-flannel1
+          image: ghcr.io/flannel-io/flannel-cni-plugin:v1.8.0-flannel1
           command:
             - cp
           args:
@@ -144,7 +144,7 @@ spec:
             - name: cni-plugin
               mountPath: /opt/cni/bin
         - name: install-cni
-          image: ghcr.io/flannel-io/flannel:v0.26.7
+          image: ghcr.io/flannel-io/flannel:v0.27.4
           command:
             - cp
           args:
@@ -158,7 +158,7 @@ spec:
               mountPath: /etc/kube-flannel/
       containers:
         - name: kube-flannel
-          image: ghcr.io/flannel-io/flannel:v0.26.7
+          image: ghcr.io/flannel-io/flannel:v0.27.4
           command:
             - /opt/bin/flanneld
           args:
@@ -183,6 +183,8 @@ spec:
                   fieldPath: metadata.namespace
             - name: EVENT_QUEUE_DEPTH
               value: "5000"
+            - name: CONT_WHEN_CACHE_NOT_READY
+              value: "false"
           volumeMounts:
             - name: run
               mountPath: /run/flannel

pause/install.sh

@@ -46,7 +46,7 @@ fi
 
 # umoci - Modifies Open Container Images
 if ! command -v umoci; then
-    sudo curl -o /usr/bin/umoci -sL https://github.com/opencontainers/umoci/releases/download/v0.5.0/umoci.linux.amd64
+    sudo curl -o /usr/bin/umoci -sL https://github.com/opencontainers/umoci/releases/download/v0.6.0/umoci.amd64
     sudo chmod +x /usr/bin/umoci
 fi
 
@@ -57,8 +57,8 @@ if ! command -v cnitool; then
 fi
 
 # runc - CLI tool for spawning and running containers according to the OCI specification.
-if ! command -v runc || [ "$(runc --version | awk 'NR==1{print $3}')" != "1.3.0" ]; then
-    sudo curl -o /usr/bin/runc -L https://github.com/opencontainers/runc/releases/download/v1.3.0/runc.amd64
+if ! command -v runc || [ "$(runc --version | awk 'NR==1{print $3}')" != "1.3.3" ]; then
+    sudo curl -o /usr/bin/runc -L https://github.com/opencontainers/runc/releases/download/v1.3.3/runc.amd64
     sudo chmod +x /usr/bin/runc
 fi