crun: update to 1.26

Bumping crun to version 1.26-160-g393509db, which comprises the following commits:

    0a3e929f utils: fix memory leak and missing cache in libcrun_initialize_apparmor()
    63ce25da container: delete the container on poststart hooks failures
    b0847b3e Document error handling
    cf27a14b fix(utils): use parent dir fd for bind on long socket paths
    aca98960 fix(hooks): log warning when poststop hooks fail
    115ac2e6 cgroup: preserve errno on errors in rmdir_all_fd
    4db1709f libcrun: check setenv failure
    8feac6b9 fix(utils): retry fgetpwent_r() on EINTR
    52b7016f pass cgroup2 mount options to the kernel
    30426104 tests/podman: exclude --tls-details tests
    6e43ff33 tests/podman/run-tests.sh: fix ginkgo args
    fa7a5561 tests/podman/run-tests.sh: untangle -skip arg
    3a1addc7 fix(python): initialize error variable to NULL in Python bindings
    00206a80 channel_fd_pair: fix CPU busy loop when output pipe is blocked
    dbd02baa criu: show excerpt from log file on c/r error
    34143735 hooks: allow ignoring chdir permission errors for container hooks
    11af5b2d crui: simplify criu_check_mem_track error message.
    8d0ef603 container: remove dead code in setup_terminal_socketpair
    6c5c957e container: fix createRuntime hooks not receiving bundle path
    d24d0283 criu: check for criu_check_version error
    3ade23f4 plans: install iptables-legacy on CS9
    3e41e53b Packit/TMT: re-enable centos-stream-10-x86_64 tests
    c46a44a8 restore: fix memory leak
    7cec3cb2 build(deps): bump actions/upload-artifact from 6 to 7
    4e0e2679 mounts: fix error message argument
    be231d3c ci: bump shellcheck to v0.11.0
    b36ec403 ci: fix go-md2man installation
    35648b9b tests: switch from docker hub to quay for Fedora
    5002665f tests/clang-check: install clang-analyzer
    bdf9c902 status: drop unnecessary strtoll
    11701f43 criu: fix missing umount() in error path
    314c2efa utils: refactor set_home_env
    aecd620a libcrun: document vfork shared error
    04d7a341 cloned_binary: do not close file descriptor twice
    3f72f325 ci: simplify codespell job
    47c36ca5 linux: do not use errno after success
    a278c6d1 linux: drop unnecessary xasprintf result check
    3e313388 linux: do not leak error
    434d77cb cgroup-systemd: do not use errno after success
    335792b1 scheduler: add diagnostic messages for SCHED_DEADLINE
    4db170c5 criu: do not ignore errors with ret != -1
    036132e2 cgroup: do not clobber errno
    1649a4d3 container: do not use bogus errno
    2e527065 linux: do not use errno without failure
    a0be577a tests/podman: exclude ever failing test case
    e38674bc linux: fix copy_from_fd ownership
    8fa73419 linux: drop unnecessary code
    60d8a60e linux: do not leak error
    9a232317 utils: do not use errno after success
    d5b20987 container: do not use errno after success
    e2c09bfd ci: use git diff --exit-code
    f1c6ca6a ci: fix test (check) flake
    69d39045 linux: create error from uidgidmap_helper
    1492e83c cgroup: fix read_pids_cgroup skipping child cgroups
    c5879bab container: make return clearer
    a154b398 container: return the error from cgroup_killall
    899b9faa seccomp: fix n_plugins calculation
    463e277a krun: Rename nitro module to awsnitro
    b32f895b container: fix exit code return
    a6023b10 container: add missing crun_make_error
    52294f84 libcrun: standardize error code after yajl_gen_alloc
    59da15f3 container: add missing yajl cleanup
    5082e02d container: do not leak error
    a83a4cf9 container: improve error handling after libcrun_copy_config_file call
    6733e20c linux: use crun_error_wrap
    0f367791 container: do not use errno after successful calls
    29bb32d8 linux: do not use errno after successful calls
    e7ffed11 krun: fix error arguments
    34c1e098 krun: avoid redundant crun_error_release() call
    dedcdd67 krun: do not release error when *err is uninitialized
    671740dd krun: fix error code
    1644fb0e container: fix error leak
    649d568a krun: fix error return
    41a14fe8 krun: Propagate crun log level to libkrun
    2bff1297 libcrun: add `krun.` as a potentially unsafe annotation
    41941f2c krun: parse annotations for krun.{cpus, ram_mib}
    625226de krun: parse annotations for krun.variant
    f311dc07 Add handler phase HANDLER_CONFIGURE_BEFORE_USERNS, and move krun setup to it
    488f301d linux: check for def->linux
    b1a71725 linux: check for [ug]id_mappings before accessing them
    df771204 krun: Set exec args when running nitro variant
    b78e9868 krun/nitro: Redirect enclave VM output to stdout
    bf288342 krun: Remove specific function for nitro config
    8e8186b3 hooks: exit immediately if poststart hooks fail
    88f55126 AGENTS.md: new file
    71077a22 utils: flush gcov data before closing files
    3241e671 NEWS: tag 1.26
    5bee6a06 utils: handle NULL container passed to libcrun_open_proc_file()
    4df0d339 cgroup: rename enter_cgroup_subsystem
    6c98db0b tests: add tests for crun custom annotations
    29a39ebf tests: add cgroup unit tests for coverage
    3ef2a77f tests: add more utils unit tests for coverage
    87997df0 tests: add seccomp_notify unit tests for coverage
    890fff10 tests: add chroot_realpath unit tests for coverage
    440e3b09 tests: add mount_flags.perf unit tests for coverage
    869343fb tests: add signals.perf unit tests for coverage
    2a3193ab tests: add logger info to checkpoint_restore
    72793562 tests: add linux.c integration tests for coverage
    1407bb39 tests: add linux.c unit tests for coverage
    638266c7 tests: add error handling coverage tests for linux.c
    b18734b5 tests: add namespace coverage tests for linux.c
    8a26d6ba tests: add comprehensive tests for custom-handler.c
    a968a262 tests: add more unit tests for error.c coverage
    935eb0c7 tests: improve error logging and add more coverage tests
    035f2a07 tests: ignore profiling output in test_simple_delete
    b9781954 tests: fix memory-high test to use unified resources
    1bbe7e22 tests: add more seccomp tests for coverage
    07d6400b tests: add error handling tests for coverage
    422f4b87 tests: skip mount-bind-to-rootfs in rootless mode
    5cad31a4 tests: improve sd-notify-proxy test error handling
    bc91dd35 tests: fix checkpoint/restore tests for stability
    f5e6c330 tests: add Linux features tests
    58e00a52 tests: add I/O priority tests
    ae06b46c tests: add create command tests
    1e5f7ec5 tests: add cgroup setup tests
    89b124e0 tests: add namespace isolation tests
    14dcfea1 tests: add scheduler policy tests
    7543b013 tests: add comprehensive OCI lifecycle hook tests
    1404ccaa tests: add terminal tests for coverage
    5ce5ad6d tests: add comprehensive update command tests
    6a3fdc16 tests: add command tests for pause, unpause, kill, list, ps, spec
    2959911b tests: skip resources-cpu-weight-systemd when systemd cgroup fails
    90d6390c tests: skip bpf-devices-systemd when eBPF installation fails
    cfe9a063 tests: fix variable names in test_bpf_devices logger calls
    3f73b0f2 tests: add more seccomp tests for coverage
    ec0f5cf8 tests: add network device tests for coverage
    24f2491c tests: add more BPF device filter tests for coverage
    360406d7 tests: add cgroup resources tests for coverage
    ba669d8e tests: add cgroup manager env var support
    06541b69 tests: add multi-environment coverage script
    f9385a6c tests: remove unused Makefile
    bab81968 tests: add exit command to init
    49e080a1 coverage: add _safe_exit macro to flush gcov data before _exit
    26900326 criu: fix error release
    2805abde container: fix error release
    1b8e2a39 crun.1: add documentation for criu config files
    ec7325a3 tests: add tests for criu config set via rpc
    17f23ac2 criu: enable setting of RPC config file
    de8d3288 krun: do not leak handles on error
    0b3c673f build(deps): bump actions/cache from 4 to 5
    456dd8e2 build(deps): bump actions/upload-artifact from 5 to 6
    d833dac0 libocispec: sync
    4798015e build: add tests coverage
    b4db5d32 tests: use hide_stderr=True to avoid coverage output interference
    bfbb68eb tests: do not call function twice
    a1d5168d tests: replace all sys.stderr.write calls with proper logging
    11a43732 tests: improve TAP skip reason reporting with specific explanations
    0be79fe8 tests: add slow test detection and warnings to TAP output
    8e9ef557 tests: enhance TAP error reporting with more diagnostic information
    6d4cd432 tests: add writable /tmp tmpfs mount to base test configuration
    7ca36e36 tests: remove debug print statements in test_hooks
    6607eb2f linux: run createContainer hooks before making root RO
    baec9675 libocispec: sync from upstream
    c5d5f185 tests: install honggfuzz from sources
    d2b00600 linux: handle openat error
    b106e250 container: fix error release
    156ae065 NEWS: tag 1.25.1
    60a9183e build(deps): bump actions/checkout from 5 to 6
    332c2188 utils: invalidate proc_fd on open_proc_file
    50e9898f utils: use fsopen to open reference to proc
    2e86c95a src: move syscall wrappers to new file
    c2fa3c6a cgroup-systemd: use open_proc_file to get cgroup path
    8e9ae3d4 cgroup: use open_proc_file to get cgroup path
    1aeac1e8 linux: use open_proc_file to setup namespaces
    0f200e55 linux: use open_proc_file to setup net devices
    4be73c6d linux: use open_proc_file to initialize security
    30c575e5 utils: use open_proc_file for mark_or_close_fds_ge_than
    da40063a linux: use open_proc_file to open current mountns
    7172631e linux: use open_proc_file to setup oom score
    8822a5e6 linux: use open_proc_file to setup sysctls
    b66a8990 linux: use open_proc_file to setup timens_offsets
    3f5258a0 linux: use open_proc_file to setup userns mappings
    064bbfe4 container: use open_proc_file in resolve_rootfs_path
    58856b56 utils: add functions to open files under /proc
    d9a0adce NEWS: tag 1.25
    d94659a3 podman: disable artifact test
    0fc276cc cgroup-systemd: enable all accounting properties to ensure stats are readable
    9feec597 libcrun/cgroup: always enable TasksAccounting for systemd
    078e2d6d build(deps): bump actions/upload-artifact from 4 to 5
    6b12c6a8 Libcrun/container: Fix double allocation of 'err'
    b718483c Libcrun/seccomp: fix double allocation of 'err'
    65532fc5 build(deps): bump github/codeql-action from 3 to 4
    a9187097 Reset the inherited cpu affinity

crun/ocispec: update to

    5a0e037 source: fix ByteArrayHandler nested array parsing
    03bae1d source: add missing emit_clone() to BasicMapArrayHandler
    dbb5155 source: fix invalid else() syntax in byte array generation
    692b0b6 source: fix typo in ByteArrayHandler nested array parsing
    2acd6dc source: fix mapStringObject clone to copy len and keys
    c7ce09d ci: print test-suite.log on test failure
    8cff3b9 tests: add test-12 and test-13 for better coverage
    16a30ff source: add NULL check to generated clone functions
    507cf52 source: fix BasicMapType.emit_clone() to handle NULL maps
    2c8d0f8 gitignore: update
    a425a84 source: rename doublearray to nested_array
    7d7e02c source: add struct-level methods to TypeHandler classes
    dc24f9a source: refactor ArrayType using ArraySubtypeHandler classes
    fed6acc source: add BooleanPointerType.emit_generate() and emit_json_value()
    81ff1fa source: document ObjectType.emit_clone() design decision
    d91d34a source: add emit_gen_key_with_check() helper
    11b951f source: extract get_compound_children() helper
    4ff4117 source: inline c_file_map_str() into make_c_free()
    e59b696 source: inline c_file_str() into ArrayType.emit_free()
    337925c source: inline trivial wrapper functions
    73e8f9e source: inline array functions into ArrayType handler
    df11b0a helpers: rename judge_* functions to clearer names
    45a1b35 source: skip handler for object type in make_clone()
    31824dc source: remove dead code in read_val_generator()
    b49928d source: remove dead code in make_c_free()
    20de7a4 source: add emit_clone() to MapStringObjectType and BasicMapType
    971a65b source: add ArrayType handler for array operations
    633c0b5 source: add ObjectType, MapStringObjectType, and BasicMapType handlers
    141fa50 source: use TypeHandler in make_c_free() and make_clone()
    2fc8679 source: use TypeHandler.emit_parse() in parse_obj_type()
    c3686db source: add TypeHandler classes for type-specific C code generation
    c174b06 source: remove superfluous else after return
    858f199 source: remove dead code in make_clone()
    6ae8e2d source: consolidate numeric type conversion with helper function
    a23b40c source: apply emit_gen_key() helper to get_obj_arr_obj()
    717d035 source: apply YAJL helpers to get_c_epilog_for_array_make_gen()
    6dcd043 source: apply YAJL helpers to get_c_json()
    a2cc69b source: apply YAJL helpers to get_obj_arr_obj_array()
    7f5fcb5 source: apply YAJL helpers to get_map_string_obj()
    aa9271c source: add YAJL generation helper functions
    3366b93 source: add emit_invalid_type_check() helper for YAJL validation
    05ee4de source: add emit_value_error() helper for error wrapping
    7a62656 source: add emit_asprintf_error() helper to reduce boilerplate
    4d2f6e5 source: add do_read_value() helper to reduce boilerplate
    d37383d source: convert parse_obj_type() to multi-line f-strings
    39fa66d source: convert make_c_free() to multi-line f-strings
    d62a55f source: convert make_c_array_free() to multi-line f-strings
    112ab7f source: convert c_file_str() to multi-line f-strings
    41596b9 source: convert c_file_map_str() to multi-line f-strings
    a2fd73f source: complete get_obj_arr_obj_array() conversion to f-strings
    66e333d source: convert get_obj_arr_obj_array() to f-strings (object branch)
    47e7dc5 source: convert get_map_string_obj() to multi-line f-strings
    ae23175 source: convert parse_obj_type_array() to multi-line f-strings
    002af18 source: convert parse_map_string_obj() to multi-line f-strings
    e80d362 source: extract check_gen_status() helper pattern
    46ce297 source: extract calloc_with_check() helper pattern
    cc817ed source: continue null_check_return() pattern extraction
    419526a source: extract null_check_return() helper pattern (partial)
    064fcbb source: extract free_and_null() helper pattern
    7579c03 source: add emit() helper function for code generation
    c8a5437 gitignore: update
    b355817 runtime-spec: update
    819972d image-spec: update
    ea4906b Check 'src' before dereferencing
    345279c runtime-spec: update from upstream

Bumping runtime-spec to version v1.3.0-11-g6f7b71c, which comprises the following commits:

    53abf18 ci: bump golangci-lint to v2.10
    90a6479 Fix an error in the docs
    4361740 schema: fix definition for array type
    04836b1 schema: fix path for uint32 type
    c668b01 config-linux: allow empty strings in memory policy nodes field
    9d0d4bc version: v1.3.0+dev
    9224913 version: release v1.3.0
    4df3d11 Mention FreeBSD platform
    a257beb Add minimum supported Go version to CI (#1303)
    afdbcb8 Add FreeBSD as a platform
    75d79ee ci: use oldstable and stable Go versions
    9efd9f2 schema/defs-linux.json: fix max for FileMode
    09ec668 config-linux,schema: fix FileMode description

Bumping image-spec to version v1.1.1-28-ga4c6ade, which comprises the following commits:

    fccd049 Fix: Make the config field optional
    b71c0df Add missing backtick
    431b3be Update OCI Image Implementations list
    02ba6e2 Descriptor size cannot be negative

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

0 files changed, 0 insertions, 0 deletions