containerd v2.1.8

A security-focused patch release addressing CVE-2026-46680 alongside critical fixes for sandbox management, OCI specification handling, and AppArmor compatibility.

Critical Security Update (CVE-2026-46680) — This release addresses a security vulnerability. Users should update to ensure their container environments are protected against potential exploits related to CVE-2026-46680.

Improved OCI Spec Validation for USER Values — Prevents unexpected system behavior or incorrect user lookups when a container image specifies an invalid or out-of-range UID/GID in the OCI specification.

Stability Fixes for Sandbox Services and Events — Resolves issues where sandbox creation fields weren't forwarded correctly and ensures event topics are accurately published, improving the reliability of pod-level abstractions in Kubernetes and other orchestrators.