crun: update to 1.20

Bumping crun to version 1.20-53-g4d6eae2e, which comprises the following commits:

    107214b1 build(deps): bump uraimo/run-on-arch-action from 2.8.1 to 3.0.0
    c954b1b6 criu: use a process to initialize the cgroup
    959cc6c4 cgroup: extend function
    e3866cc5 cgroup: fix ownership of dfd in read_pids_cgroup
    0f16ced1 linux: set subsystem_path before use in error
    6ed12c63 linux: remove dead code
    6c049b81 criu: hide feature if dlopen is not present
    73d00079 tests: map all IDs into the user namespace
    0037d567 ci: fail on "sudo make check"
    f82ead82 tests: fix test_resources_unified_invalid_controller()
    37213555 utils: improve error message if path not executable
    5f5454b5 utils: do not use hardcoded path buffer
    4948e451 utils: check for eaccess existence
    410f0d53 container: pass down executable path to custom handler
    bb56343c utils: move error handling inside find_executable()
    a77702c0 tests: do a shallow git clone for podman
    f941be48 error: silence compiler warning
    b8b25ea1 Prevent dlopen() for CRIU in static link'ed binary
    990b5f68 krun: fix libkrun_unload
    79b7e6b3 libcrun: use an hash map to lookup the key
    51fa411b libcrun: move annotations handling to a separate struct
    9abef0da linux: fix dup error
    14d5baa4 README: add CentOS Stream 9 & 10, rm 8
    e735b4bc krun: fix libkrun_exec return value
    90a321c6 container, error: update error handling
    620b91b5 utils: fix PATH lookup
    48470009 Downstream Fedora: fix gating config
    7949fbc6 tests: disable new test that does not use the runtime
    7f76fcd4 utils: add missing crun_error_release()
    6598c99b utils: add O_NOFOLLOW
    9c9a76ac NEWS: tag 1.20
    0aec82c2 krun: fix CVE-2025-24965
    793188c2 krun: initialize bool
    ac956685 utils: add O_WRONLY to WRITE_FILE_DEFAULT_FLAGS
    dcf4f78b utils: drop rootfs_len from safe_openat function
    de33f0a8 utils: write_file_at_with_flags uses safe_write
    c460b253 utils: safe_write uses size_t for the buffer length
    12778089 utils: drop function write_file_with_flags
    f1ef3bb4 utils: move write_file* wrappers to utils.h
    3e2344b0 utils: fix partial writes with write_file_at_with_flags
    7930c13d krun: drop unused variable
    f7987aa9 linux, mono: remove unneeded crun_error_release()
    b548479c utils: reduce memory consumption in safe_readlinkat
    3b653170 chroot_realpath: remove dead code
    17135c1b chroot_realpath: do not return non-existing paths
    7ab1acd3 container: fix error after read
    490d5502 linux, utils: remove dead code crun_ensure_file*()
    432a66d9 status: validate container id
    73bcfabb status: report errors from get_state_directory_status_file
    30d22ba3 status: report errors from get_run_directory
    873db607 status: report errors from libcrun_get_state_directory
    f5e7718c linux: improve error writing to net.ipv4.ping_group_range
    5c35f278 tests: make python script executable
    5b51cca8 github: disable aarch64, ppc64le and s390x build
    84d50992 github: cat config.log on configure failures
    7aa2cd85 github: add r/w permissions
    4f823090 github: show apt-get output
    2d08f586 exec: always call setsid
    b788f338 scheduler: ignore ENOSYS when resetting affinity mask
    e292c9e9 src/linux: handle EINVAL during pidfd_open gracefully
    869804f4 TMT: account for environments on internal testing farm ranch
    65484cb9 TMT: Replace `adjust` with `prepare` conditionals
    a4dcb9c6 cgroup: Show the absolute path to cgroup.controllers when a controller is not available
    179686b7 Revert "cgroup: remove tun/tap from the default allow list"
    68e8d9ab test: use wasm32-wasip1 instead of wasm32-wasi
    3158e491 criu: improve error handling for CRIU function calls
    3cd9c2c9 criu: do not set network_lock if not specified

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 2 insertions, 2 deletions

diff --git a/recipes-containers/crun/crun_git.bb b/recipes-containers/crun/crun_git.bb
index fcebba45..0dbf362f 100644
--- a/recipes-containers/crun/crun_git.bb
+++ b/recipes-containers/crun/crun_git.bb
@@ -3,7 +3,7 @@ LICENSE = "GPL-2.0-only"
 LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263"
 PRIORITY = "optional"
 
-SRCREV_crun = "6f010b5f6bd86d27e6a85eb0e933a8cca1ede71c"
+SRCREV_crun = "4d6eae2eb8047a7f51e536ffe461666b65b3d5e9"
 SRCREV_libocispec = "5ffd4dd9fa684e0ffb2f0b5ea4a6cb638b021397"
 SRCREV_ispec = "c66e8113cbad252a418d85f061bd1a20d0904d08"
 SRCREV_rspec = "9505701eb390445ef7edf2be3bd3d7bc1f14eae5"
@@ -17,7 +17,7 @@ SRC_URI = "git://github.com/containers/crun.git;branch=main;name=crun;protocol=h
            git://github.com/containers/yajl.git;branch=main;name=yajl;destsuffix=git/libocispec/yajl;protocol=https \
           "
 
-PV = "v1.19.1+git${SRCREV_crun}"
+PV = "v1.20.0+git${SRCREV_crun}"
 S = "${WORKDIR}/git"
 
 inherit autotools-brokensep pkgconfig