fix(deps): update module github.com/opencontainers/runc to v1.2.6

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/opencontainers/runc	v1.2.5 -> v1.2.6

---

Release Notes

opencontainers/runc (github.com/opencontainers/runc)

v1.2.6: runc v1.2.6 -- "Hasta la victoria, siempre."

Compare Source

This is the sixth patch release in the 1.2.z series of runc.
It primarily fixes an issue with runc exec vs time namespace,
and a compatibility issue with older kernels.

Fixed

• Fix a stall issue that would happen if setting O_CLOEXEC with
  CloseExecFrom failed (#​4647).
• runc now properly handles joining time namespaces (such as with
  runc exec). Previously we would attempt to set the time offsets
  when joining, which would fail. (#​4635, #​4649)
• Handle EINTR retries correctly for socket-related direct
  golang.org/x/sys/unix system calls. (#​4650)
• We no longer use F_SEAL_FUTURE_WRITE when sealing the runc binary, as it
  turns out this had some unfortunate bugs in older kernel versions and was
  never necessary in the first place. (#​4651, #​4640)

Removed

• Remove Fexecve helper from libcontainer/system. Runc 1.2.1 removed
  runc-dmz, but we forgot to remove this helper added only for that. (#​4646)

Changed

• Use Go 1.23 for official builds, run CI with Go 1.24 and drop Ubuntu 20.04
  from CI. We need to drop Ubuntu 20.04 from CI because Github Actions
  announced it's already deprecated and it will be discontinued soon. (#​4648)

Static Linking Notices

The runc binary distributed with this release are statically linked with
the following GNU LGPL-2.1 licensed libraries, with runc acting
as a "work that uses the Library":

• libseccomp

The versions of these libraries were not modified from their upstream versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the attached
runc source code) may be used to exercise your rights under the LGPL-2.1.

However we strongly suggest that you make use of your distribution's packages
or download them from the authoritative upstream sources, especially since
these libraries are related to the security of your containers.

---

Thanks to the following contributors who made this release possible:

• Akihiro Suda [email protected]
• Aleksa Sarai [email protected]
• Evan Phoenix [email protected]
• Kir Kolyshkin [email protected]
• lifubang [email protected]
• Rodrigo Campos [email protected]
• Tomasz Duda <tomaszduda23@​gmail.com>

Signed-off-by: Kir Kolyshkin [email protected]

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[nalind]

/approve
/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: nalind, renovate[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [nalind]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment