fix: azure-cli falls back to pip on unknown Ubuntu codenames (devcont…

…ainers#1668)

* Initial plan

* fix: azure-cli falls back to pip on unknown codenames, add resolute support

- Add 'resolute' (Ubuntu 26.04) to AZCLI_ARCHIVE_VERSION_CODENAMES
- Add else branch to fall back to pip when codename/arch not in allowlist
- Bump feature version to 1.3.0
- Add test scenario for Ubuntu resolute

* test: add scenario for pip fallback on Ubuntu plucky (25.04)

Ubuntu plucky's codename is not in the apt archive allowlist, so this
scenario exercises the else-branch pip fallback path.

* Correcting the fallback test

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Kaniska <kaniska244@github.com>

fix(copilot-cli): use semver sort for prerelease tag resolution (devc…

…ontainers#1657)

* Initial plan

* fix(copilot-cli): use semver sort for prerelease tag resolution

* refactor(copilot-cli): extract resolve_prerelease_version function and add test

Extract the prerelease tag resolution logic into a standalone
resolve_prerelease_version() function that can read from stdin for
testing. Add a scenario test that validates version sorting with mock
git ls-remote data to prevent regressions.

* fix(copilot-cli): make repo_url mandatory in resolve_prerelease_version

Remove the stdin/cat fallback and use ${1:?} to error if no URL is
provided. Update the test to mock git via PATH instead of piping stdin.

* Add tests as per review comments without git ls and separate test for prerelease tag

* Further changes in the test and code cleanup

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Kaniska <kaniska244@github.com>

Fix Terraform Sentinel prerelease version resolution in scenario tests (

devcontainers#1648)

* Initial plan

* fix(terraform): preserve sentinel prerelease version names

* chore(terraform): bump feature minor version

* fix(terraform): correct feature patch version bump

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Kaniska <kaniska244@github.com>

Add Ubuntu 26.04 (resolute) support to docker-outside-of-docker (devc…

…ontainers#1656)

* Initial plan

* Add Ubuntu 26.04 (resolute) support to docker-outside-of-docker

- Add "resolute" to DOCKER_LICENSED_ARCHIVE_VERSION_CODENAMES
- Block moby on resolute (packages not available), matching docker-in-docker behavior
- Add test scenario for Ubuntu resolute with moby=false

* Bump version to 1.10.0 and exclude base:ubuntu from test-pr workflow

- Bump docker-outside-of-docker version from 1.9.1 to 1.10.0
- Add exclusion for docker-outside-of-docker with base:ubuntu image in
  test-pr workflow since moby (default) is not available on resolute

* Remove trailing whitespace in test-pr.yaml

* Add note about Ubuntu 26.04 requiring moby: false in NOTES.md

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

[docker-in-docker] - Fixing issue with containerd (devcontainers#1653)

* [docker-in-docker] - Fixing issue with containerd

* Change the base image used for stress test as its not compatible with ubuntu resolute

* Change test base image

fix: make bubblewrap conditionally installed for RedHat-based images (d…

…evcontainers#1651)

* Initial plan

* fix: make bubblewrap conditionally installed on RedHat-based systems

bubblewrap is not available in UBI repositories, causing common-utils
installation to fail on UBI base images. This change checks package
availability before adding bubblewrap to the install list, following
the same pattern used for compat-openssl10 and redhat-lsb-core.

Also adds a test scenario for UBI 8 image.

* chore: bump common-utils version to 2.5.9

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

fix(docker-in-docker): disable containerd erofs snapshotter to fix do…

…ckerd startup (devcontainers#1645)

* Test case

* Modify the script

* Trigger the test

* Change installation script to install erofs-utils upfront

* Install docker-compose v1 with python venv

* Force load erofs to replicate the same setup as reported in the issue

* Disable erofs filesystem

* Start own containerd process

* Major version bump

* Add docker probe in some cases.

* Support arm64 for azurelinux

fix: docker-in-docker on Ubuntu 26.04 — verify iptables-legacy works …

…before switching (devcontainers#1637)

* Initial plan

* fix: support Ubuntu 26.04 (plucky) by checking iptables-legacy works before switching, falling back to iptables-nft

Agent-Logs-Url: https://github.com/devcontainers/features/sessions/af4f00a5-8bfc-472b-97e3-735ddf7a07c1

Co-authored-by: Kaniska244 <186041440+Kaniska244@users.noreply.github.com>

* fix: also verify iptables-nft works before switching to it

Agent-Logs-Url: https://github.com/devcontainers/features/sessions/af4f00a5-8bfc-472b-97e3-735ddf7a07c1

Co-authored-by: Kaniska244 <186041440+Kaniska244@users.noreply.github.com>

* fix: use correct Ubuntu 26.04 codename 'resolute' instead of 'plucky'

Agent-Logs-Url: https://github.com/devcontainers/features/sessions/60277e16-b948-4f67-8140-1d3f1cda6941

Co-authored-by: Kaniska244 <186041440+Kaniska244@users.noreply.github.com>

* chore: bump docker-in-docker feature version to 2.17.0

Agent-Logs-Url: https://github.com/devcontainers/features/sessions/f340a34b-66fa-45bd-85f2-94b32c943241

Co-authored-by: Kaniska244 <186041440+Kaniska244@users.noreply.github.com>

* test: set moby: false for resolute test scenario

Agent-Logs-Url: https://github.com/devcontainers/features/sessions/ce62c78c-ff28-4766-bd7f-2b5a57a349ec

Co-authored-by: Kaniska244 <186041440+Kaniska244@users.noreply.github.com>

* docs: note Ubuntu Resolute exceptional behavior in NOTES.md

Agent-Logs-Url: https://github.com/devcontainers/features/sessions/8983ff12-365e-49de-bd65-47614caf8539

Co-authored-by: Kaniska244 <186041440+Kaniska244@users.noreply.github.com>

* Correction on the iptables switching logic

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Kaniska244 <186041440+Kaniska244@users.noreply.github.com>
Co-authored-by: Kaniska <kaniska244@github.com>

Install only missing packages across all common-utils package sets (d…

…evcontainers#1644)

* Initial plan

* Fix bubblewrap/socat installation in common-utils (install regardless of PACKAGES_ALREADY_INSTALLED)

* Install bubblewrap/socat only when missing in common-utils

* Refine missing-package checks in common-utils

* Check all common-utils packages and install only missing ones

* Address PR review: fix dpkg-query format, remove dead variable, add docs and tests

- Add \n to dpkg-query format string so glob patterns like libicu[0-9][0-9]
  that match multiple packages get each status on its own line
- Remove dead PACKAGES_ALREADY_INSTALLED variable from all three install
  functions and the marker file (per-package checks make it redundant)
- Document bubblewrap and socat in NOTES.md
- Add bubblewrap/socat checks to alpine, alma-9, fedora, and rocky-9 tests#

* Add bubblewrap/socat checks to Ubuntu test scenarios (jammy, noble)

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Abdurrahmaan Iqbal <abdurriq@github.com>

devcontainers#1635 - Fix: changed the golangci-lint script url (devco…

…ntainers#1636)

Fix: changed the golangci-lint script url