cri-o: update to v1.35.0

Bumping cri-o to version v1.33.0-522-g8273bca37, which comprises the following commits:

    5dd7bb4e3 Add libpathrs version to dependencies
    2b23b4810 Add libpathrs-devel to github-actions
    8d8d342a1 Add libpathrs-devel to Fedora packages for runc build
    d51616f2f fix: prevent panic on closed stopTimeoutChan in StopContainer
    71e9babcd fix: handle ErrNotAnImage in RemoveImage for concurrent deletion idempotency
    1d19f431c [docs] fix dead nixos link in install.md
    73957f24e build(deps): bump the gomod group across 1 directory with 7 updates
    e43e31772 Fix metric label cardinality mismatches in CRI stats
    1e19a7261 Skip OCI artifact fallback on transient network errors
    7eb2cc18e Add EnsureNotContainerImage to prevent container images in artifact store
    aed9671d7 Return image ID from PullImage instead of repo digest
    a42bdf9de tutorials/CRI-O in kind: fix bash syntax error
    1e2e17804 Bump golangci-lint to v2.10.1
    c355bea81 Add OpenVEX report generation via govulncheck
    9ca8e2c1a Bump go dependencies
    020b30892 Fix the bug where cri-o doesn't emit any metrics when all is set.
    f1c0c7b6a Feature Request: Make TLS minimum version and cipher suites configurable for CRI-O server
    ddb1d632a Update setup-go
    1294b3151 Temporarily pin conmon to pass CI. See https://github.com/containers/conmon/pull/629#issuecomment-3872984444 for details.
    65b9fcc49 Bump development version to v1.36.0
    ecacc4558 Mark v1.32 EOL
    75877851a Some minor refactorings of `ociartifact`
    d1d77faec Refactor `ociartifact`: extract `datastore` package for artifact data handling
    39ff6f590 Refactor `ociartifact` to simplify artifact creation using `NewArtifact` and remove redundant `buildArtifact` logic.
    ec12a7d5f bump c/common, c/storage
    33f0e88da Disable swap setup on GitHub actions
    b414a1f93 Update nixpkgs
    0f877a3e1 Update .coderabbit.yaml
    d56906b6d Create .coderabbit.yaml
    eccac32bd Revert "storage: Preserve knownRepoDigests order in ImageStatus"
    4eabb00d3 server: update container state prior to NRI StopContainer event.
    0f68aa8d0 test: Add regression test for user namespace cgroup delegation
    e826ac15c server: Always include UID/GID mappings for user namespace containers
    19d319695 server,nri: pass extended container status to NRI.
    03e4dffce build(deps): bump github.com/sigstore/fulcio from 1.8.3 to 1.8.5
    8df271a03 server,nri: pass any POSIX rlimits to plugins.
    23b10b8da server,nri: pass container user (uid, gids) to plugins.
    7822ff1f1 checkpoint: clean up checkpoint dir on error
    74af549f5 Remove `filepath-securejoin` replace and bump to 0.5.2
    922d3edc8 Refactor container mount setup functions and improve SELinux label handling
    396cce5f0 Replace cgmgr.CgroupStats to use cgroups.CgroupStats
    d9d10ea4c Rename DiskMetrics and FilesystemMetrics to DiskStats, FilesystemStats for consistency with other structs and cadvisor
    9da43ec9c Move disk_metrics to the new stats package.
    d2d7d1f2c Rename stats to statsserver
    5062a6a94 oci: fix lint
    73848ccec runtimehandlerhooks: save whether irq balance enable was done
    a96dfe16a server: run post stop hooks before updating container status
    fa5afc5b3 refactor(memorystore): remove unused Size() method
    4009c44e1 refactor: remove AddExecPID, use StartExecCmd
    eeab7a961 fix: make exec start atomic with PID registration
    a97e4b982 test: skip tests from kata containers
    e8d273b08 test: add integration tests for exec during graceful termination
    8df026b11 test: add tests for exec during container lifecycle
    35f7a3ca6 feat: allow exec to containers during graceful termination
    ec1c67a8c artifacts: fix unqualified search tests
    610a868fa artifacts: mock libartifact store
    6ca8533aa Drop unqualified-search-registries support for artifacts
    c33e3e81b test/nri: update linter deprecation annotation.
    174d13446 server,nri: pass any linux RDT constraints to plugins.
    25f32e0e6 server,nri: pass any linux net devices to plugins.
    db7314ca6 server,nri: pass any linux scheduler attributes to plugins.
    9536cf92c server,nri: pass any linux I/O priority to plugins.
    b23a7d055 go.{mod,sum}: bump NRI deps to v0.11.0, re-vendor.
    04f4754fa Update Golang download URL to use go.dev instead of storage.googleapis.com
    4e2f7dbed Ensure `InitLabel` only sets process label when unset
    29b33f11e Fix the bug where the ContainersStatuses.Image returned by the GetContainerEvents interface is nil
    01b2c74d9 Follow up on PR 9634 to clean up redundant code.
    68795ff36 Refactor cgroup manager integration: centralize pod and container cgroup manager retrieval logic with `GetPodAndContainerCgroupManagers` and standardize function naming for consistency.
    0b1d77bdd Add exec cgroup for exec CPU affinity
    a2a04ad55 Refactor cgroup manager logic: centralize `LibctrManager` and `CrunContainerCgroupManager` in `cgmgr` while replacing duplicates.
    c979d5fdd Delegate setting shared CPUs in cgroup to container runtime.
    cf4aab91f Update release notes to use cosign bundle format
    3cead51f9 Replace json-iterator/go with goccy/go-json
    9270ed35b Refactor ociartifact handling to use libartifact types and store
    db0840561 go.{mod,sum} bump CDI deps to v1.1.0.
    8212e1acd build(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.3
    23b69a24b build(deps): bump the gomod group with 10 updates
    a7b222899 server: use totalTimeout for infra container stop
    9d7aa99d0 OCPBUGS-62150: server: ignore /etc/passwd mount
    11e4c1806 build(deps): bump the gomod group across 1 directory with 3 updates
    1c09e085d Replace v1 annotation references with v2
    5a0973db5 Pin Kubernetes to v0.35.0-rc.0
    1a7db25c0 Add container pressure metrics to stats collection
    c42cf78c6 Remove SignalContainer functionality and related syscalls
    97658ce1a build(deps): bump the gomod group with 7 updates
    6bb8a380c Allow containers to use both host network and user namespace
    e46ab57b1 build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0
    c2ebfbac1 Migrate annotations to Kubernetes-recommended naming conventions
    ddfa9d3eb server: skip processing early if we get a nil adjustment from NRI.
    eb21f3b71 build(deps): bump the gomod group with compatibility fixes
    e03e84aae Fix incomplete config validation on sandbox restoration
    35ce440e8 Make AGENTS.md generic and add git workflow nuance
    bbe6d7a4e Rename CLAUDE.md to AGENTS.md
    e71f96aed dbusmgr: use system dbus when running as UID 0 regardless of rootless detection
    9e0b08c1d Add support for "all" in includedPodMetrics and validate its usage
    3b932318f Fix the bug where includedPodMetrics are not respected in ListMetricDescriptors
    f830100c3 Add CLAUDE.md project context file
    3233b94ea refactor: Reduce cyclomatic complexity in sandbox_run
    07b0da920 refactor: Reduce cyclomatic complexity in sandbox_run
    3dd90b8ab test: add integration tests for container_create_timeout configuration
    52efdb362 test: add tests for ContainerCreateTimeout configurability
    2d2024a0f Add documentation for container_create_timeout configuration option
    7a2427285 Add context timeout to task.Create in runtime_vm.go
    18d52e3e0 Make ContainerCreateTimeout configurable at runtime handler level
    09625082c Improve returned error text at CreateContainer failure
    f76e3f9ea Migrate to container-libs
    f6bc16be2 storage: Preserve knownRepoDigests order in ImageStatus
    e200c2625 test: Switch more integration tests to use crun
    20e6d1b47 Update golangci-lint to v2.6.2 and modernize configuration
    f22167af4 Update sigstore/cosign-installer to v4.0.0
    99a55c8f5 Fix CVE-2025-58183: Update tar-split to v0.12.2
    f49e8eb7b Disable runc integration tests due to AppArmor issue
    9ece818fb metrics: add disk IO stats
    822ce9db8 spec metrics: always report container_spec_memory_reservation_limit_bytes
    e7af6bd9b metrics: add container_start_time_seconds
    f470ad448 spec metrics: always report container_spec_memory_reservation_limit_bytes
    cf3eb39b7 metrics: add container_start_time_seconds
    2d66de376 feat: extend oci runtime to collect and manage disk metrics
    069114806 refactor: Reduce cyclomatic complexity in criocli
    6ad526c7a metrics: update process metrics tests and refactor stats_linux.go a bit
    7fda065ba Extend Disk Metrics for other filesystems
    d9694a420 Extended ContainerStats to include disk metrics
    8b8028baa feat: Added Disk Metrics
    7a179c8a6 refactor: Reduce cyclomatic complexity in container_create
    6cbdc99cc Fix `patch-release` job by adding dependencies.yaml
    58a1fc0f3 Tests for threads and sockets
    cbea27536 Refactor thread metrics
    aebf1d561 metrics: correct container metric metadata
    76319d61c build(deps): bump the gomod group across 1 directory with 2 updates
    927461f48 fix minor typos in README.md
    897f1cdf2 Added container process metrics
    a3c41c499 container: take state lock when setting spec
    fe0a3281d metrics: add container spec metrics
    a748f3453 metrics: add container_last_seen
    1fb90ef70 build(deps): bump k8s.io/kubelet from 0.35.0-alpha.1 to 0.35.0-alpha.2
    5ecd5931b build(deps): bump k8s.io/cri-client
    36475303d build(deps): bump the gomod group with 2 updates
    ed3fe40bf Add and apply gopls `modernize` linter
    fe4306b72 Pin github.com/cyphar/filepath-securejoin to v0.4.1
    9a2f002d0 build(deps): bump github.com/cri-o/crio-credential-provider
    c2db50755 Close runtime connection on watchdog call
    1e357f4d6 build(deps): bump sigs.k8s.io/release-sdk in the gomod group
    93f920160 Remove support for `InsecureRegistries` in favor of `registries.conf`
    f10344e7c Mark v1.31 as EOL
    2ec914d08 Packit: remove unmaintained branches
    c76a5286b lint
    b10d151c8 remove typo
    a760511c1 move log statement after fn call
    6e4965b1d Fix lint CI by re-adding `nolints`
    68c73a911 Clean up duplicate SignaturePolicyPath logic in image_pull.go
    55c749ff4 build(deps): bump golang.org/x/net in the gomod group
    ce5edf28b build(deps): bump the gomod group with 2 updates
    93121f41b Re-use public credential provider API
    a0c3b7723 build(deps): bump the gomod group across 1 directory with 4 updates
    d25f3a5d2 Update log formatting in interceptors to use %+v for better readability of structs
    ab0176bde HighPerformanceHooks: Nil pointer check for isContainerRequestWholeCPU
    172635f02 HighPerformanceHooks: Add housekeeping CPU support for IRQ loadbalancing
    7a780e492 Fix Generator initialization to properly initialize envMap
    53b7f6bfb Remove github.com/grpc-ecosystem/go-grpc-middleware dependency
    43ed9f965 Remove unused code from Makefile
    ff5900e74 Switch to go 1.25
    d73c82b4d Actions: cancel parallel runs
    0b1d84cbc Update nixpkgs
    1080c5ea9 Fix lint
    cadcf4753 build(deps): bump the gomod group across 1 directory with 3 updates
    85da8e038 Re-add the `--enable-fixed-path` removal for gpgme
    719a3e65d Remove temporary auth files if used
    bc7f61ad4 Update third party dependencies
    7a99e1d67 Consume additional pull auth if available
    63212c48b temporarily downgrade crun version until container-selinux fix is released
    02cd6750a server: Fix network cleanup failures when NetNS path is empty
    16246ad1a Fix `ERROR! Invalid callback for stdout specified: debug` by removing stdout_callback
    ad1728396 Use ftpmirror.gnu.org instead of ftp.gnu.org because ftp.gnu.org is sometimes too slow.
    78c966c13 HighPerformanceHooks: Defer irqSMPAffinityFile rollback
    44af57fe0 Revert "Skip [FeatureGate:InPlacePodVerticalScaling]"
    79cd6e3f1 Update development version
    14abbfc21 build(deps): bump the gomod group across 1 directory with 9 updates
    1f1746236 Update dependencies.yaml if required on release cut
    03ec73d26 HighPerformanceHooks: Move IRQ balancing to PostStop hook
    06c843730 HighPerformanceHooks: Add mock infra for command and system unit tests
    1283afcfe HighPerformanceHooks: Make locks atomic for irq SMP affinity
    8aeda9682 Update install.md - Add Dep for Ubuntu 24

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 3 insertions, 3 deletions

diff --git a/recipes-containers/cri-o/cri-o_git.bb b/recipes-containers/cri-o/cri-o_git.bb
index 0932658c..37a0b84e 100644
--- a/recipes-containers/cri-o/cri-o_git.bb
+++ b/recipes-containers/cri-o/cri-o_git.bb
@@ -14,9 +14,9 @@ At a high level, we expect the scope of cri-o to be restricted to the following
  - Resource isolation as required by the CRI \
  "
 
-SRCREV_cri-o = "5780ac7b4fb93ffe2e4d1fc038adb1442c6155c3"
+SRCREV_cri-o = "8273bca378a36dd225fcaf90b6b732cc4c6d4248"
 SRC_URI = "\
-        git://github.com/cri-o/cri-o.git;branch=release-1.34;name=cri-o;protocol=https;destsuffix=${GO_SRCURI_DESTSUFFIX} \
+        git://github.com/cri-o/cri-o.git;branch=release-1.36;name=cri-o;protocol=https;destsuffix=${GO_SRCURI_DESTSUFFIX} \
         file://crio.conf \
         file://run-ptest \
         "
@@ -27,7 +27,7 @@ LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=e3fc50a88d0a364313df4b21ef20c2
 
 GO_IMPORT = "import"
 
-PV = "1.34.1+git"
+PV = "1.35.0+git"
 
 inherit features_check ptest
 REQUIRED_DISTRO_FEATURES ?= "seccomp"