fix(deps): update all rthook go dependencies main (main) (patch)

[cilium-renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/containers/common	require	patch	v0.62.2 -> v0.62.3
github.com/opencontainers/runc	require	patch	v1.2.5 -> v1.2.6

---

Release Notes

containers/common (github.com/containers/common)

v0.62.3

Compare Source

What's Changed

• [v0.62] Bump c/image to v5.34.3, c/common to v0.62.3 by @​TomSweeneyRedHat in https://github.com/containers/common/pull/2395

Full Changelog: containers/common@v0.62.2...v0.62.3

opencontainers/runc (github.com/opencontainers/runc)

v1.2.6: runc v1.2.6 -- "Hasta la victoria, siempre."

Compare Source

This is the sixth patch release in the 1.2.z series of runc.
It primarily fixes an issue with runc exec vs time namespace,
and a compatibility issue with older kernels.

Fixed

• Fix a stall issue that would happen if setting O_CLOEXEC with
  CloseExecFrom failed (#​4647).
• runc now properly handles joining time namespaces (such as with
  runc exec). Previously we would attempt to set the time offsets
  when joining, which would fail. (#​4635, #​4649)
• Handle EINTR retries correctly for socket-related direct
  golang.org/x/sys/unix system calls. (#​4650)
• We no longer use F_SEAL_FUTURE_WRITE when sealing the runc binary, as it
  turns out this had some unfortunate bugs in older kernel versions and was
  never necessary in the first place. (#​4651, #​4640)

Removed

• Remove Fexecve helper from libcontainer/system. Runc 1.2.1 removed
  runc-dmz, but we forgot to remove this helper added only for that. (#​4646)

Changed

• Use Go 1.23 for official builds, run CI with Go 1.24 and drop Ubuntu 20.04
  from CI. We need to drop Ubuntu 20.04 from CI because Github Actions
  announced it's already deprecated and it will be discontinued soon. (#​4648)

Static Linking Notices

The runc binary distributed with this release are statically linked with
the following GNU LGPL-2.1 licensed libraries, with runc acting
as a "work that uses the Library":

• libseccomp

The versions of these libraries were not modified from their upstream versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the attached
runc source code) may be used to exercise your rights under the LGPL-2.1.

However we strongly suggest that you make use of your distribution's packages
or download them from the authoritative upstream sources, especially since
these libraries are related to the security of your containers.

---

Thanks to the following contributors who made this release possible:

• Akihiro Suda [email protected]
• Aleksa Sarai [email protected]
• Evan Phoenix [email protected]
• Kir Kolyshkin [email protected]
• lifubang [email protected]
• Rodrigo Campos [email protected]
• Tomasz Duda <tomaszduda23@​gmail.com>

Signed-off-by: Kir Kolyshkin [email protected]

---

Configuration

📅 Schedule: Branch creation - "on monday and friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.