Bump github.com/Microsoft/hcsshim from 0.14.0-rc.1 to 0.15.0-rc.3

[dependabot]

Bumps github.com/Microsoft/hcsshim from 0.14.0-rc.1 to 0.15.0-rc.3.

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.14.1

What's Changed

fb5aa2e94 - Maksim An (2026-04-07): upgrade dependencies to fix CI 9a434d6e1 - Dawei Wei (2026-03-06): shim: skip SandboxPlatform validation when platform is not explicitly set (#2620) 98d74bb52 - Cory Snider (2026-02-10): WCOW: restore support for client-mounted roots (#2595)

Full Changelog: microsoft/hcsshim@v0.14.0...v0.14.1

v0.14.0

This is a non-rc v0.14.0 release, which is the same as https://github.com/microsoft/hcsshim/releases/tag/v0.14.0-rc.1

What's Changed

• Use multi-error for annotation processing by @​helsaawy in microsoft/hcsshim#2419
• Add rootfs.exe tool to merge tar image layers by @​helsaawy in microsoft/hcsshim#2424
• Support for querying disks based on LUN by @​ambarve in microsoft/hcsshim#2421
• Tool for extracting UtilityVM files from a container layer into a CIM by @​ambarve in microsoft/hcsshim#2423
• Add uvm:// mount support for LCOW by @​helsaawy in microsoft/hcsshim#2430
• Bump google.golang.org/grpc from 1.69.0 to 1.72.1 in /test by @​dependabot[bot] in microsoft/hcsshim#2432
• Bump golang.org/x/sync from 0.13.0 to 0.14.0 in /test by @​dependabot[bot] in microsoft/hcsshim#2433
• Store extraction error for LazyImageLayers by @​helsaawy in microsoft/hcsshim#2429
• Switch to golangci-lint v2 by @​helsaawy in microsoft/hcsshim#2440
• SecurityPolicy: Add leading and trailing checks for env variables by @​MahatiC in microsoft/hcsshim#2431
• Trim LCOW GetProperties response by @​helsaawy in microsoft/hcsshim#2458
• Swap EvalSymlinks with ResolvePath by @​helsaawy in microsoft/hcsshim#2455
• Bug: when searching for LinuxBootFiles by @​helsaawy in microsoft/hcsshim#2454
• Organize annotations; change annotation expansions by @​helsaawy in microsoft/hcsshim#2449
• Omnibus dependabot update by @​helsaawy in microsoft/hcsshim#2442
• lcow: disable virtio-vsock init by @​anmaxvl in microsoft/hcsshim#2461
• Initial support for verified CIMs by @​ambarve in microsoft/hcsshim#2448
• Move hcsshim/main to containerd v2.1.2 and update CIs to WS2025 by @​kiashok in microsoft/hcsshim#2425
• Validate runhcs sandbox isolation and platform by @​helsaawy in microsoft/hcsshim#2473
• log mkfs.ext4 stderr output by @​anmaxvl in microsoft/hcsshim#2474
• Bump golang.org/x/sys from 0.33.0 to 0.34.0 in /test by @​dependabot[bot] in microsoft/hcsshim#2480
• Remove WS2025 from CIs by @​kiashok in microsoft/hcsshim#2483
• Gcs sidecar framework by @​kiashok in microsoft/hcsshim#2422
• Support for importing verified block CIM layers by @​ambarve in microsoft/hcsshim#2456
• Warn on incomplete vNUMA setting, clarify field names by @​helsaawy in microsoft/hcsshim#2466
• Fix CUDA for non-privileged containers by @​helsaawy in microsoft/hcsshim#2492
• fixes to uvmboot by @​ambarve in microsoft/hcsshim#2494
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in microsoft/hcsshim#2499

Full Changelog: microsoft/hcsshim@v0.13.0...v0.14.0

Commits

• 9ec809b Roll back github.com/opencontainers/selinux version (#2794)
• ef47025 [internal/wclayer]: harden reset dir-state cleanup (#2788)
• e536797 Mark gcs-sidecar as a critical process (#2770)
• 90d47ab [live-migration] adds the paths for enabling save/restore (#2709)
• d0dedde [internal/wclayer]: clear currentIsDir in reset deferred cleanup (#2787)
• 585c232 Bump actions/checkout from 6 to 7 (#2782)
• 96a7412 gcs: keep bridge alive across live-migration transport swap (#2771)
• c446e12 [live-migration] disable log listener for migratable UVMs (#2715)
• 1f0cac0 [internal/wclayer]: fix import temp dir leak on layer extract failure (#2778)
• 6290919 Omnibus dependency update (#2769)
• Additional commits viewable in compare view

[google-oss-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign savija-tv for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[google-oss-prow]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a GoogleCloudPlatform member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.