runc-opencontainers: update to v1.3.0-rc.1

Bumping runc to version v1.3.0-rc.1-40-g25d47644, which comprises the following commits:

    bac33825 build(deps): bump github.com/opencontainers/selinux
    bc96bc85 libct/seccomp: use maps and slices pkgs
    370733b7 libct/cap: rm mapKeys, use maps.Keys, slices.Sorted
    3a33b6a3 Make state.json 25% smaller
    9c5e687b libct: Use chown(uid, -1) to not change the gid
    d31e6b87 ci: bump bats to v0.11.0
    8e653e40 script/setup_host_fedora.sh: use bash arrays
    a76a1361 script/setup_host_fedora.sh: remove -p from mkdir
    af386d1d tests/int: rm some "shellcheck disable" annotations
    b48dd651 ci: bump shellcheck to v0.10.0
    6e5ffb7c Makefile: bump shfmt to v3.11.0
    53931553 libct: log a warning on join session keyring failure
    9aeb7905 tests/int/selinux: fix skip message
    5ac77ed6 libct/int: add/use needUserNS helper
    1d9bea53 .cirrus.yml: install less dependencies
    1afa1b86 signals: replace unix.Kill with process.Signal
    346c80d7 libct: replace unix.Kill with os.Process.Signal
    135552e5 CI: migrate Vagrant + Cirrus to Lima + GHA
    d5fe5303 build(deps): bump golang.org/x/net from 0.36.0 to 0.37.0
    000cdef7 build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0
    79e9cf53 doc: update spec-conformance.md
    12c2e21f build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0
    05e83fc6 deps: bump go-criu to v7
    5d6e7e12 VERSION: back to development
    a00ce11e VERSION: release v1.3.0-rc.1
    10ca66bf runc exec: implement CPU affinity
    d92dd226 performance improvement: setup signal notify in a new go routine
    a75076b4 Switch to opencontainers/cgroups
    6e01e850 CHANGELOG: fwd port 1.2.1 to 1.2.5 changes
    537a2276 build(deps): bump github.com/opencontainers/runtime-spec
    c43ea7d6 exeseal: do not use F_SEAL_FUTURE_WRITE
    1d047e44 expose criu options for link remap and skip in flight
    559bd4eb libcontainer: rename dmz -> exeseal
    ad09197e libct: don't send config to nsexec when joining an existing timens
    74619689 test: exec into a container with private time ns
    28475f12 Retry direct unix package calls if observing EINTR
    4e0f7a20 libct/cg/dev: remove specconv dependency
    69792827 libct/cg: don't use utils.CleanPath
    5e1dcdf5 libct/cg: add internal/path.Inner
    271aa88e libct/cg/fs2: rm _defaultDirPath
    7bebe68c libct/cg: stop using utils.ProcThreadSelf
    42449786 CI: gha: rm ubuntu-20.04
    79a4ac05 deps: bump cilium/ebpf to v0.17.3
    8db6ffbe libc/utils: simplify CleanPath
    26cfe142 release: explicitly set --keyserver in release signing scripts
    0e3b5d5b build: bump libseccomp to v2.5.6
    d237bc46 .cirrus.yml: use Go 1.24
    16d73367 Require Go 1.23.x, drop Go 1.22 support
    87420749 CI: add Go 1.24, drop go1.22
    99f9ed94 runc exec: fix setting process.Scheduler
    b9114d91 runc exec: fix setting process.ioPriority
    73849e79 libct: simplify Caps inheritance
    049a5f76 libct/cap: allow New(nil)
    f26ec922 libct: rm Rootless* properties from initConfig
    2a86c357 libct: document initConfig and friends
    13277b20 build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0
    4b87c7d4 Fixups for newProcess
    8fbdb7e7 setupIO: optimize
    c4eb0c61 libct: createExecFifo: optimize
    5d2e2445 execProcess: move some code to newProcess
    c283ed10 tests/int: add hooks argv[0] test
    8529591c build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5
    746a5c23 libcontainer/configs/validate: improve rootlessEUIDMount
    055041e8 libct: use strings.CutPrefix where possible
    259b71c0 libct/utils: stripRoot: rm useless HasPrefix
    ecf74300 libct/cg/fscommon: GetCgroupParam*: unify
    ef983f51 libct/cg/fscommon: ParseKeyValue: stricter check
    d83d533b libct/cg/fscommon: GetValueByKey: use strings.CutPrefix
    f1348712 libct/cg/fscommon: ParseKeyValue: use strings.Cut
    e9855bda libct/cg/fscommon: use strings.Cut in RDMA parser
    930cd494 libct/cg/fs2: use strings.Cut in parsePSIData
    40ce69cc libct/cg/fs2: use strings.Cut in setUnified
    037668e5 libct/cg/fs2: simplify parseCgroupFromReader
    075cea3a libcontainer/cgroups/fs: some refactoring
    4271ecf7 libct/cg/fs: refactor getCpusetStat
    bfcd479c libct/cg/fs: getPercpuUsage: rm TODO
    871d9186 exec: improve getSubCgroupPaths
    7149781f exec: use strings.Cut to parse --cgroup
    ec9b0b5f runc list: use standard os/user
    52f702af libct: earlier Rootless vs AdditionalGroups check
    7dc24868 libct: switch to numeric UID/GID/groups
    b55167e0 tests/int/exec --user: check default HOME
    ccb589bd libc/int/userns: add build tag to C file
    d84388ae libct/cg/sd: set the DeviceAllow property before DevicePolicy
    a274d275 build(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0
    54fa0c55 capabilities: be more graceful in resetting ambient
    f414b534 CI: fix criu-dev compile
    8e5bb0d8 deps: roll back to cilium/ebpf v0.16.0
    6c9ddcc6 libct: switch from libct/devices to libct/cgroups/devices/config
    200f5631 libct/devices: move config to libct/cg/devices/config
    70e500e7 deps: update to github.com/cyphar/filepath-securejoin@v0.4.1
    24ec764a build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4
    33315a05 libcontainer: if close_range fails, fall back to the old way
    111e8dcc libcontainer: Use MaxInt32 as the last FD to match kernel size semantics
    7b26da9e libcontainer: Prevent startup hang when CloseExecFrom errors
    9af79522 build(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.3
    a50e6872 tests/int: simplify assignments
    a22ea827 tests/int/hooks_so: don't hardcode soname
    1890af6d support cgroup v1 mounted with noprefix
    af929228 RELEASES: add formal release policy for runc

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

0 files changed, 0 insertions, 0 deletions