build(deps): bump github.com/containerd/nerdctl/v2 from 2.2.2 to 2.3.1

[dependabot]

Bumps github.com/containerd/nerdctl/v2 from 2.2.2 to 2.3.1.

Release notes

Sourced from github.com/containerd/nerdctl/v2's releases.

v2.3.1

Changes

This is the release of nerdctl v2.3.1.

This is a patch release for v2.3.0. It promotes the v2.3.x line to a GA release by updating nerdctl-full to use the stable containerd v2.3.1 instead of the beta containerd build used in v2.3.0.

Major changes:

• nerdctl compose:
  • Added support for the Compose healthcheck field in service configs (#4869, thanks to @​opjt)
  • Added support for passing service names to nerdctl compose down (#4901, thanks to @​ysedira)
• nerdctl network:
  • Fixed a panic when statting an invalid CNI config path (#4890, thanks to @​immanuwell)
• nerdctl-full:
  • Updated containerd to v2.3.1, BuildKit to v0.30.0, and gomodjail to v0.3.2 (#4887, #4922)
• Documentation:
  • Fixed the spelling of the --sig-proxy flag in the command reference (#4903, thanks to @​MukundaKatta)
  • Removed a stray quote from the --interactive flag documentation (#4904, thanks to @​MukundaKatta)
• CI and tests:
  • Added zizmor workflow linting and fixed reported workflow issues (#4909, thanks to @​omribz156)
  • Continued migrating container tests to Tigron (#4863, #4865, thanks to @​opjt)

Full changes: https://github.com/containerd/nerdctl/milestone/61?closed=1 Thanks to @​ChengyuZhu6, @​opjt, @​immanuwell, @​ysedira, @​MukundaKatta, and @​omribz156.

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.7, v2.0, v2.1, v2.2, or v2.3. Some features may not work with other releases of containerd.

About the binaries

• Minimal (nerdctl-2.3.1-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-2.3.1-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

-rwxr-xr-x root/root  31604898 2026-05-21 14:25 nerdctl
-rwxr-xr-x root/root     23381 2026-05-21 14:24 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      8639 2026-05-21 14:24 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

... (truncated)

Commits

• 04f63fe Merge pull request #4920 from containerd/dependabot/go_modules/github.com/com...
• b103df0 Merge pull request #4918 from containerd/dependabot/go_modules/docker-890c0f8f14
• 1563e7a Merge pull request #4922 from ChengyuZhu6/gomodjail
• 60c8491 Merge pull request #4921 from containerd/dependabot/go_modules/github.com/con...
• 46b313e update gomod jail to v0.3.2
• 00476a1 Merge pull request #4909 from omribz156/codex/add-zizmor
• 124dfc0 build(deps): bump the docker group across 1 directory with 2 updates
• 9e31c40 build(deps): bump github.com/containerd/containerd/v2
• d1b9921 Merge pull request #4915 from containerd/dependabot/go_modules/github.com/mob...
• dc34112 Merge pull request #4887 from ChengyuZhu6/bump-containerd
• Additional commits viewable in compare view

[dependabot]

Superseded by #1760.