https://github.com/containerd/containerd/releases/tag/v2.0.0-rc.3

Highlights

• Preserve Unprivileged locked flags during remount of bind mounts (#10200)
• Add api Go module and move all protos under api (#10151)
• Configure otel from env instead of config.toml (#8970)
• Fix config import relative path glob (#9746)
• Enable NRI by default (#9744)
• Add PluginInfo to introspection API (#9442)
• Remove overlayfs volatile option on temp mounts (#9555)
• Move packages based on contributing guide (#9365)
• Expose usage of deprecated features (#9258)
• Use Intel ISA-L's igzip if available (#9200)
• Generalize plugin library (#9214)
• Introduce top level config migration (#9223)
• Add image delete target (#8989)
• Remove LimitNOFILE from containerd.service (#8924)
• Use github.com/containerd/log (#9086)
• Add support for image expiration during garbage collection (#9022)
• Reduce the contention between ref lock and boltdb lock in content store (#8792)
• Remove "containerd.io/restart.logpath" label (#8264)
• Remove aufs snapshotter (#8263)
• Fix deadlock during NRI plugin registration (containerd/nri#79)
• Fix deadlock when writing to pipe blocks (containerd/ttrpc#168)
  https://github.com/containerd/containerd/releases/tag/v2.0.0-rc.3

Probably, some of these items are quite trivial from end users' perspective and not worth mentioning as "Highlights".
e.g.,

• Preserve Unprivileged locked flags during remount of bind mounts #10200
• Fix config import relative path glob #9746
• Remove LimitNOFILE from containerd.service #8924
• Use github.com/containerd/log #9086

The list should be also sorted by the importance.