Skip to content

chore(deps): update azure-cni (patch) - #9611

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/patch-azure-cni
Open

chore(deps): update azure-cni (patch)#9611
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/patch-azure-cni

Conversation

@renovate

@renovate renovate Bot commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
containernetworking/azure-cni patch v1.7.16-0 → v1.7.17-0
containernetworking/azure-cni patch v1.6.43-0 → v1.6.44-0
containernetworking/v2/azure-cni patch v1.8.12 → v1.8.13

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copilot AI balanced review requested due to automatic review settings September 22, 2026 16:58
@renovate renovate Bot added the renovate This pull request was created by renovate label Sep 22, 2026
@renovate
renovate Bot requested review from a team and Camryn Lee (camrynl) September 22, 2026 16:58
@github-actions github-actions Bot added the components This pull request updates cached components on Linux or Windows VHDs label Sep 22, 2026
@github-actions

github-actions Bot commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

Changes cached containers or packages on windows VHDs

Please get a Windows SIG member to approve.

The following dif file shows any additions or deletions from what will be cached on windows VHDs organised by VHD type.

  • Additions are new things cached.
  • Deletions are things no longer cached.
diff --git a/vhd_files/2022-containerd-gen2.txt b/vhd_files/2022-containerd-gen2.txt
index 20066f0..762b162 100644
--- a/vhd_files/2022-containerd-gen2.txt
+++ b/vhd_files/2022-containerd-gen2.txt
@@ -98,2 +98,2 @@ HKLM:\SYSTEM\CurrentControlSet\Services\VfpExt\Parameters\VfpNotReuseTcpOneWayFl
-mcr.microsoft.com/containernetworking/azure-cni:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.7.16-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.6.44-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.7.17-0
@@ -102 +102 @@ mcr.microsoft.com/containernetworking/azure-cns:v1.7.16-0
-mcr.microsoft.com/containernetworking/v2/azure-cni:v1.8.12
+mcr.microsoft.com/containernetworking/v2/azure-cni:v1.8.13
diff --git a/vhd_files/2022-containerd.txt b/vhd_files/2022-containerd.txt
index d47f9d3..0f55f96 100644
--- a/vhd_files/2022-containerd.txt
+++ b/vhd_files/2022-containerd.txt
@@ -98,2 +98,2 @@ HKLM:\SYSTEM\CurrentControlSet\Services\VfpExt\Parameters\VfpNotReuseTcpOneWayFl
-mcr.microsoft.com/containernetworking/azure-cni:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.7.16-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.6.44-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.7.17-0
@@ -102 +102 @@ mcr.microsoft.com/containernetworking/azure-cns:v1.7.16-0
-mcr.microsoft.com/containernetworking/v2/azure-cni:v1.8.12
+mcr.microsoft.com/containernetworking/v2/azure-cni:v1.8.13
diff --git a/vhd_files/2025-gen2-tl.txt b/vhd_files/2025-gen2-tl.txt
index 13735dd..fb4c2d2 100644
--- a/vhd_files/2025-gen2-tl.txt
+++ b/vhd_files/2025-gen2-tl.txt
@@ -29,2 +29,2 @@ HKLM:\SYSTEM\CurrentControlSet\Services\hns\State\EnableCompartmentNamespace=1
-mcr.microsoft.com/containernetworking/azure-cni:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.7.16-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.6.44-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.7.17-0
@@ -33 +33 @@ mcr.microsoft.com/containernetworking/azure-cns:v1.7.16-0
-mcr.microsoft.com/containernetworking/v2/azure-cni:v1.8.12
+mcr.microsoft.com/containernetworking/v2/azure-cni:v1.8.13
diff --git a/vhd_files/2025-gen2.txt b/vhd_files/2025-gen2.txt
index 6fd7e0f..7428732 100644
--- a/vhd_files/2025-gen2.txt
+++ b/vhd_files/2025-gen2.txt
@@ -29,2 +29,2 @@ HKLM:\SYSTEM\CurrentControlSet\Services\hns\State\EnableCompartmentNamespace=1
-mcr.microsoft.com/containernetworking/azure-cni:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.7.16-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.6.44-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.7.17-0
@@ -33 +33 @@ mcr.microsoft.com/containernetworking/azure-cns:v1.7.16-0
-mcr.microsoft.com/containernetworking/v2/azure-cni:v1.8.12
+mcr.microsoft.com/containernetworking/v2/azure-cni:v1.8.13
diff --git a/vhd_files/2025.txt b/vhd_files/2025.txt
index 09e5f1c..5a68a8e 100644
--- a/vhd_files/2025.txt
+++ b/vhd_files/2025.txt
@@ -29,2 +29,2 @@ HKLM:\SYSTEM\CurrentControlSet\Services\hns\State\EnableCompartmentNamespace=1
-mcr.microsoft.com/containernetworking/azure-cni:v1.6.43-0
-mcr.microsoft.com/containernetworking/azure-cni:v1.7.16-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.6.44-0
+mcr.microsoft.com/containernetworking/azure-cni:v1.7.17-0
@@ -33 +33 @@ mcr.microsoft.com/containernetworking/azure-cns:v1.7.16-0
-mcr.microsoft.com/containernetworking/v2/azure-cni:v1.8.12
+mcr.microsoft.com/containernetworking/v2/azure-cni:v1.8.13

Copilot AI reviewed Sep 22, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🔵 Needs a closer look

Azure CNI is production-critical, while upstream changes, image manifests, and AKS-RP coordination could not be verified.

Review effort: Balanced
Findings: None

What changed in this PR

Updates Azure CNI images cached in Linux and Windows VHDs across three maintained patch streams.

Changes:

  • Updates Azure CNI v1.6.43-0 → v1.6.44-0.
  • Updates Azure CNI v1.7.16-0 → v1.7.17-0.
  • Updates Azure CNI v2 v1.8.12 → v1.8.13.

Package Update Analysis: Azure CNI

Update type: Patch
OS variants affected: All configured Windows VHDs and Linux AMD64/ARM64 VHDs
OS variants not updated: None — full configured coverage

Upstream changelog not found for these version ranges. Manual testing is recommended before merge.

Check Result Risk
Runtime/configuration changes Not independently verified 🔴 High
Download structure Registry URLs and prefetch binary paths remain unchanged 🟢 Low
VHD size impact New image sizes unavailable 🟡 Medium
AKS-RP coordination Not verified; component-owner confirmation is needed 🔴 High

Overall Risk: 🔴 High
Recommendation: Validate networking scenarios and confirm AKS-RP version coordination before merging.

File Description
parts/​common/​components.json Updates Azure CNI image versions for Windows and multi-architecture Linux VHD caching.

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@github-actions

github-actions Bot commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

Code Coverage

Package Line Rate Health
github.com/Azure/agentbaker/aks-node-controller 72% ➖
github.com/Azure/agentbaker/aks-node-controller/common 100% ✔
github.com/Azure/agentbaker/aks-node-controller/helpers 71% ➖
github.com/Azure/agentbaker/aks-node-controller/parser 89% ✔
github.com/Azure/agentbaker/aks-node-controller/pkg/gpu 100% ✔
github.com/Azure/agentbaker/aks-node-controller/pkg/nodeconfigutils 67% ➖
github.com/Azure/agentbaker/aks-node-controller/utils 0% ❌
github.com/Azure/agentbaker/apiserver 25% ❌
github.com/Azure/agentbaker/cmd 0% ❌
github.com/Azure/agentbaker/cmd/starter 0% ❌
github.com/Azure/agentbaker/fuzz/api 0% ❌
github.com/Azure/agentbaker/hotfix/render-nodecustomdata 0% ❌
github.com/Azure/agentbaker/pkg/agent 76% ➖
github.com/Azure/agentbaker/pkg/agent/datamodel 76% ➖
github.com/Azure/agentbaker/pkg/agent/toggles 0% ❌
github.com/Azure/agentbaker/pkg/vhdbuilder/datamodel 88% ✔
Summary 74% (6316 / 8578) ➖

@github-actions

github-actions Bot commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

Windows Unit Test Results

  3 files   17 suites   1m 7s ⏱️
533 tests 533 ✅ 0 💤 0 ❌
536 runs  536 ✅ 0 💤 0 ❌

Results for commit eca29b9.

@github-actions

github-actions Bot commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

Code Coverage

Package Line Rate Health
staging_cse_windows Package 1 65% ➖
debug 0% ❌
provisioningscripts 2% ❌
parts_windows Package 1 76% ➖
test 0% ❌
windows 21% ❌
Summary 37% (1598 / 6790) ❌

@github-actions

github-actions Bot commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

Code Coverage

Package Line Rate Health
shellspec spec 21% ❌
Summary 21% (3032 / 14138) ❌

@aks-node-assistant

aks-node-assistant Bot commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

AgentBaker Linux gate detective

Run: https://msazure.visualstudio.com/CloudNativeCompute/_build/results?buildId=182276996
Failed job/stage/task: build / build2204fipsgen2containerd / Test, Scan, and Cleanup.

Detective summary: Test/Scan completed the VHD scan, then the CIS baseline comparison again found Ubuntu 22.04 FIPS rules 5.1.18 and 5.1.6 regressed from pass to fail. This matches the existing repair-linked CIS baseline-drift signature, not a new azure-cni PR-local failure.

Likely cause / signature: $sigCis.

Confidence: High for recurring baseline drift.

Recommended owner/action: VHD validation owners should continue repair #39802117 to reconcile the CIS baseline or fix image content; no pipeline retry is recommended from this RCA.

Strongest alternative: PR-specific azure-cni change caused the scan diff; less likely because the same two CIS rules are repeating across unrelated PRs and the PR changes are not in the CIS scan path.

Evidence: Timeline marks Test/Scan as succeededWithIssues; task log reports CIS regressions detected: 2 with 5.1.18|pass->fail and 5.1.6|pass->fail; existing wiki row and repair #39802117 already track this recurring signature.

Wiki signature: $sigCis; repair #39802117

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort, defaults to Balanced
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@camrynl Camryn Lee (camrynl) Awaiting requested review from camrynl camrynl was automatically assigned from Azure/acn-cni-reviewers

At least 1 approving review is required to merge this pull request.

Assignees

@rbtr Evan Baker (rbtr)

@behzad-mir Behzad Mirkhanzadeh (behzad-mir)

@QxBytes Alexander (QxBytes)

@jpayne3506 John Payne (jpayne3506)

Labels

components This pull request updates cached components on Linux or Windows VHDs renovate This pull request was created by renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@rbtr @behzad-mir @QxBytes @jpayne3506