Containerd - v1.6.20

* [release/1.6] Prepare release notes for v1.6.20 ([#8310](https://github.com/containerd/containerd/pull/8310)) * [`a039a2b9c`](https://github.com/containerd/containerd/commit/a039a2b9c6a5e655b58bdd139af7307563b8efc7) Prepare release notes for v1.6.20 * [release/1.6]Updates oci image config to support upstream ArgsEscaped ([#8306](https://github.com/containerd/containerd/pull/8306)) * [`5dd94a7e6`](https://github.com/containerd/containerd/commit/5dd94a7e6ccb356d2c7061ad49ba8a843ed9e4df) Updates oci image config to support upstream ArgsEscaped * [release/1.6] update runc binary to v1.1.5 ([#8324](https://github.com/containerd/containerd/pull/8324)) * [`59fa6b191`](https://github.com/containerd/containerd/commit/59fa6b1914554c07321d79aa2131f370d0ebe27c) update runc binary to v1.1.5 * [`0c0aad93e`](https://github.com/containerd/containerd/commit/0c0aad93ec9a0db6392e41790294679eb9d2e3bc) go.mod: github.com/opencontainers/runc v1.1.5 * [release/1.6] Update ttrpc to v1.1.1 ([#8308](https://github.com/containerd/containerd/pull/8308)) * [`50a6be0b4`](https://github.com/containerd/containerd/commit/50a6be0b4798eef5486a0f86c59686898ecc20c8) Update ttrpc to v1.1.1 * [release/1.6 backport] Add `WithReadonlyTempMount` to create readonly temporary mounts ([#8299](https://github.com/containerd/containerd/pull/8299)) * [`8cead6594`](https://github.com/containerd/containerd/commit/8cead659440376c4a821d702f73c392f1c7fb8ce) Add `WithReadonlyTempMount` to create readonly temporary mounts * [release/1.6] Adds support for Windows ArgsEscaped images ([#8273](https://github.com/containerd/containerd/pull/8273)) * [`f0dc0297d`](https://github.com/containerd/containerd/commit/f0dc0297d02e223d997fc992496b07006c0c4a69) Adds support for Windows ArgsEscaped images * [release/1.6]go.mod: Bump hcsshim tag to v0.9.8 ([#8274](https://github.com/containerd/containerd/pull/8274)) * [`5981a24e2`](https://github.com/containerd/containerd/commit/5981a24e21a039c84f532c0e1ada85077c4101f1) Update hcsshim tag to v0.9.8 * [1.6] shim: fix debug flag not working ([#8288](https://github.com/containerd/containerd/pull/8288)) * [`28f1e32e3`](https://github.com/containerd/containerd/commit/28f1e32e3b1b167eeab8890d67ed57817b3da29b) shim: fix debug flag not working * [release/1.6] cherry-pick: Update go-restful to v3 ([#8271](https://github.com/containerd/containerd/pull/8271)) * [`5a8ea75df`](https://github.com/containerd/containerd/commit/5a8ea75df7d2956cd711e4445eea9b6aac070835) Update go-restful to v3 * [`59bdc1d5a`](https://github.com/containerd/containerd/commit/59bdc1d5a77ec7d5d57c66395de1bd2c1e27a55f) go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 * [release/1.6] Go 1.19.7 ([#8238](https://github.com/containerd/containerd/pull/8238)) * [`86e0bd9e3`](https://github.com/containerd/containerd/commit/86e0bd9e3966ae686d7ab0a99a60f0212837028d) Go 1.19.7 * [release/1.6 backport] archive: disable looking up usernames and groupnames on the host ([#8230](https://github.com/containerd/containerd/pull/8230)) * [`063ad2f19`](https://github.com/containerd/containerd/commit/063ad2f1949168fed35a5609d6a0c01c529da346) archive: disable looking up usernames and groupnames on the host * [release/1.6 backport] assorted linting, and golang update-related changes ([#8229](https://github.com/containerd/containerd/pull/8229)) * [`9cbea6fe7`](https://github.com/containerd/containerd/commit/9cbea6fe783f6ec6086bd85477ed2df659f10988) Enable dupword linter * [`c73f1abff`](https://github.com/containerd/containerd/commit/c73f1abff73657ea78d8a4762ff1b60324597896) Bump golangci-lint to v1.50.1 * [`f198f7724`](https://github.com/containerd/containerd/commit/f198f7724d6d83261ba83f830d65103169608fc7) update golangci-lint to v1.49.0 * [`e6179af1e`](https://github.com/containerd/containerd/commit/e6179af1ea994e1bdcc2c03f65223fa7256d9024) remove unneeded nolint-comments (nolintlint), disable deprecated linters * [`77160e6b5`](https://github.com/containerd/containerd/commit/77160e6b592ef44e4e800fac7736742dcf521f9c) [release/1.6] adjust some nolint comments * [`95655f4ce`](https://github.com/containerd/containerd/commit/95655f4ceedc29e44f13bb5b6b702f319c207b43) clean-up "nolint" comments, remove unused ones * [`9f0617ecc`](https://github.com/containerd/containerd/commit/9f0617ecc46ab189b2bd7d4839d89327f75b75ba) pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint * [`e66397d83`](https://github.com/containerd/containerd/commit/e66397d838fa69e2653eba67e5e9ac081c84c69b) golangci-lint: sort linters in config file * [`682a567e9`](https://github.com/containerd/containerd/commit/682a567e9eb86c1a538067ad5bb36b2d6b59d4fc) linting: address gosec G112/G114 * [`627f563e6`](https://github.com/containerd/containerd/commit/627f563e6d61d2ca98f77eef6322babf9f53553c) chore: remove duplicate word in comments * [`efb88a8bb`](https://github.com/containerd/containerd/commit/efb88a8bbcdbefe6b7c820aee5b41257af1fd093) pkg/cri/streaming: increase ReadHeaderTimeout * [`45f055df6`](https://github.com/containerd/containerd/commit/45f055df6617a5c05c494e6870694c8c11c13711) Update protobuf definitions * [`584707524`](https://github.com/containerd/containerd/commit/584707524ac08d5f5284fd76ded25f3845886587) Run gofmt 1.19 * [`f33e38572`](https://github.com/containerd/containerd/commit/f33e38572758e178a7e57344983c139ac87a138e) Switch to Go 1.19 * [`fc10cd23a`](https://github.com/containerd/containerd/commit/fc10cd23adc555c559b42e5c996bfb212cc4b50e) remove duplicate * [`7cbb9e746`](https://github.com/containerd/containerd/commit/7cbb9e746128e4ab87ee28bb6f833df928048fb0) Update linters to use t.Setenv * [`4347a3265`](https://github.com/containerd/containerd/commit/4347a3265a895d9f30602dc7dcb83c00e762892b) Use t.Setenv instead of os.Setenv * [`10357eab5`](https://github.com/containerd/containerd/commit/10357eab5f89aa875ff2fec3500416d86807d1da) Address some timeout issues in the Windows CI * [`977ce8ef5`](https://github.com/containerd/containerd/commit/977ce8ef508d5cdbf4d549458a0cc46cd14f7833) Enable gosec linter for golangci-lint * [`c23945c5f`](https://github.com/containerd/containerd/commit/c23945c5fab20269c98aa17337a247f6e9ec9175) test: remove redundant `mountPoint` * [`588ed91d3`](https://github.com/containerd/containerd/commit/588ed91d3fb93c77118e35ca09e73227ed81d3ff) test: use `T.TempDir` to create temporary test directory * [`c2ed63c86`](https://github.com/containerd/containerd/commit/c2ed63c86cacc0cf5e2e2729d2478c0c0385c039) Remove hardcoded /tmp in tempfile paths * [`7e382c516`](https://github.com/containerd/containerd/commit/7e382c516f80ea71aa9086d2cb9c0e83ec155222) fix Implicit memory aliasing in for loop

* [release/1.1] server: Fix connection leak when receiving ECONNRESET ([#136](https://github.com/containerd/ttrpc/pull/136)) * [`8977f59`](https://github.com/containerd/ttrpc/commit/8977f59dbda8a5a97d0801669e4c0d9f5a7088dd) server: Fix connection leak when receiving ECONNRESET