containerd v2.0.11

This patch release focuses on image distribution reliability by preventing content store pollution and ensures the runtime remains secure by updating the Go toolchain.

Limit fallback to /blobs endpoint during reference resolution — This prevents the local content store from being filled with incorrect or unwanted data during image pulls by restricting how the resolver searches for missing blobs. It ensures more predictable and cleaner storage management for container images.