Release 1.1.13

[lifubang]

[1.1.13] - 2024-06-13

There is no certainty in the world. This is the only certainty I have.

Important Notes

• If building with Go 1.22.x, make sure to use 1.22.4 or a later version.
  (see runc doesn't work with go1.22  #4233 for more details)

Fixed

• Support go 1.22.4+. ([1.1] Support Go 1.22, bump some CI deps #4313)
• runc list: fix race with runc delete. ([1.1] runc list: fix race with runc delete #4231)
• Fix set nofile rlimit error. ([1.1] Fix set nofile rlimit error #4277, [1.1] libct/system: ClearRlimitNofileCache for go 1.23 #4299)
• libct/cg/fs: fix setting rt_period vs rt_runtime. ([1.1] libct/cg/fs: fix setting rt_period vs rt_runtime #4284)
• Fix a debug msg for user ns in nsexec. ([1.1] fix a debug msg for user ns in nsexec #4315)
• script/*: fix gpg usage wrt keyboxd. ([1.1] script/*: fix gpg usage wrt keyboxd #4316)
• CI fixes and misc backports. ([1.1] CI fixes and misc backports #4241)
• Fix codespell warnings. ([1.1] Fix codespell warnings #4300)

Changed

• Silence security false positives from golang/net. ([1.1] chore: silencing security false positives caused by golang.org/x/net #4244)
• libcontainer: allow containers to make apps think fips is enabled/disabled for testing. ([1.1] libcontainer: force apps to think fips is enabled/disabled for testing #4257)
• allow overriding VERSION value in Makefile. ([1.1] allow overriding VERSION value in Makefile #4270)
• Vagrantfile.fedora: bump Fedora to 39. ([1.1] Vagrantfile.fedora: bump Fedora to 39 #4261)
• ci/cirrus: rm centos stream 8. ([1.1] ci: workaround for centos stream 8 being EOLed #4305, [1.1] ci/cirrus: rm centos stream 8 #4308)

[rata]

This LGTM, but other reviewers pelase note that there are two PRs referenced not yet merged. We need to merge those first

[kolyshkin]

This LGTM, but other reviewers pelase note that there are two PRs referenced not yet merged. We need to merge those first

Basically we're looking into the relevant milestone (1.1.13 in this case) as well as PRs with backport/todo/1.1 label (including the closed/merged ones!)

[kolyshkin]

@lifubang can you rebase this? Has to be done from the command line because we want these commits to be signed.

[kolyshkin]

@cyphar PTAL

[cyphar]

@lifubang Can you please PGP-sign these commits?

[cyphar]

Minor nit.

[lifubang]

Can you please PGP-sign these commits?

Resigned with gpg.

[cyphar]

LGTM. @kolyshkin said he wanted to do the release this time, so he can merge it and all that jazz. Thanks!

[kolyshkin]

LGTM, thanks!