Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

This may fail, because the depguard config format changed, so perhaps we need to update golangci-lint first

@thaJeztah will we only see the fail after merging? Does it work locally just on another version?

This change looks good though once we figure that out

So, I don't think this works currently (unfortunately); the old version just ignores the config, and the new version's config syntax isn't easy to work with for this case (unless I overlooked an option); see

• make it easier to deny "some" packages from a dependency OpenPeeDeeP/depguard#63

Now that we fully dropped runc as dependency in #9114, this one became easier to configure.

Updated it to guard against github.com/opencontainers/runc as dependency; this should be ready for review now 👍