chore(deps): update module github.com/cyphar/filepath-securejoin to v0.6.1 (8.19)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/cyphar/filepath-securejoin	indirect	patch	v0.6.0 -> v0.6.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

cyphar/filepath-securejoin (github.com/cyphar/filepath-securejoin)

v0.6.1: -- "At last up jumped the cunning spider, and fiercely held her fast."

Compare Source

This release includes a few more minor improvements to pathrs-lite,
mainly involving the fallback logic in tools which configure seccomp
profiles during execution (like runc) and to fix a file descriptor leak.

Fixed

• Our logic for deciding whether to use openat2(2) or fallback to an O_PATH
  resolver would cache the result to avoid doing needless test runs of
  openat2(2). However, this causes issues when pathrs-lite is being used by
  a program that applies new seccomp-bpf filters onto itself -- if the filter
  denies openat2(2) then we would return that error rather than falling back
  to the O_PATH resolver. To resolve this issue, we no longer cache the
  result if openat2(2) was successful, only if there was an error.
• A file descriptor leak in our openat2 wrapper (when doing the necessary
  dup for RESOLVE_IN_ROOT) has been removed.

Thanks to the following contributors for making this release possible:

• Aleksa Sarai cyphar@cyphar.com
• Kir Kolyshkin kolyshkin@gmail.com
• Li Fubang lifubang@acmcoder.com

Signed-off-by: Aleksa Sarai cyphar@cyphar.com

---

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.