[1.1.13] - 2024-06-13

There is no certainty in the world. This is the only certainty I have.

Important Notes

• If building with Go 1.22.x, make sure to use 1.22.4 or a later version.
  (see runc doesn't work with go1.22  #4233 for more details)

Fixed

• Support go 1.22.4+. ([1.1] Support Go 1.22, bump some CI deps #4313)
• runc list: fix race with runc delete. ([1.1] runc list: fix race with runc delete #4231)
• Fix set nofile rlimit error. ([1.1] Fix set nofile rlimit error #4277, [1.1] libct/system: ClearRlimitNofileCache for go 1.23 #4299)
• libct/cg/fs: fix setting rt_period vs rt_runtime. ([1.1] libct/cg/fs: fix setting rt_period vs rt_runtime #4284)
• Fix a debug msg for user ns in nsexec. ([1.1] fix a debug msg for user ns in nsexec #4315)
• script/*: fix gpg usage wrt keyboxd. ([1.1] script/*: fix gpg usage wrt keyboxd #4316)
• CI fixes and misc backports. ([1.1] CI fixes and misc backports #4241)
• Fix codespell warnings. ([1.1] Fix codespell warnings #4300)

Changed

• Silence security false positives from golang/net. ([1.1] chore: silencing security false positives caused by golang.org/x/net #4244)
• libcontainer: allow containers to make apps think fips is enabled/disabled for testing. ([1.1] libcontainer: force apps to think fips is enabled/disabled for testing #4257)
• allow overriding VERSION value in Makefile. ([1.1] allow overriding VERSION value in Makefile #4270)
• Vagrantfile.fedora: bump Fedora to 39. ([1.1] Vagrantfile.fedora: bump Fedora to 39 #4261)
• ci/cirrus: rm centos stream 8. ([1.1] ci: workaround for centos stream 8 being EOLed #4305, [1.1] ci/cirrus: rm centos stream 8 #4308)