chore(deps): bump github.com/opencontainers/runc from 1.0.0-rc95 to 1.0.2

[dependabot]

Bumps github.com/opencontainers/runc from 1.0.0-rc95 to 1.0.2.

Release notes

Sourced from github.com/opencontainers/runc's releases.

runc 1.0 -- "A wizard is never late, nor is he early, he arrives precisely when he means to."

This release has quite a few last-minute bug-fixes and various correctness and performance improvements (almost all of which are related to cgroup handling), and is the first non-rc release of runc in 5 years (v1.0.0-rc1 was released in 2016). It's been a very long road, and we thank the many contributors and maintainers that helped us get to this point (approximately 422 people in total).

As runc follows Semantic Versioning, we will endeavor to not make any breaking changes without bumping the major version number of runc.

However, it should be noted that Go API usage of runc's internal implementation (libcontainer) is not covered by this policy -- for historical reasons, this code was not moved into an "internal" package (this feature did not exist in Go at the time) and because certain projects currently depend on this, we have not yet moved this code into an internal package. Despite this, we reserve the right to make breaking changes in our Go APIs (though we will note such changes in our changelog, and will try to avoid needless disruption if possible).

Breaking changes:

• Removed libcontainer/configs.Device* identifiers (deprecated since rc94, use libcontainer/devices) (#2999)
• Removed libcontainer/system.RunningInUserNS function (deprecated since rc94, use libcontainer/userns) (#2999)

Deprecations:

• The usage of relative paths for mountpoints will now produce a warning (such configurations are outside of the spec, and in future runc will produce an error when given such configurations). (#2917, #3004)

Bugfixes:

• cgroupv2: devices: rework the filter generation to produce consistent results with cgroupv1, and always clobber any existing eBPF program(s) to fix runc update and avoid leaking eBPF programs (resulting in errors when managing containers). (#2951)
• cgroupv2: correctly convert "number of IOs" statistics in a cgroupv1-compatible way. (#2965, #2967, #2968, #2964)
• cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
• cgroupv2: wait for freeze to finish before returning from the freezing code, optimize the method for checking whether a cgroup is frozen. (#2955)
• cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
• cgroups/systemd: fixed returning "unit already exists" error from a systemd cgroup manager (regression in rc94) (#2997, #2996)

Improvements:

... (truncated)

Commits

• 52b36a2 VERSION: release 1.0.2
• 133bcfb Merge pull request #3167 from kolyshkin/1.0-fix-freeze
• 8ec5762 libct/cg/sd/v1: add SkipFreezeOnSet knob
• 1850dc1 libct/cg/sd/v1: add freezeBeforeSet unit test
• 4ce440f libct/cg/sd/v1: Fix unnecessary freeze/thaw
• 9c4d5c6 Merge pull request #3169 from kolyshkin/1.0-fix-cc-warn
• 13b45cb libct/nsenter: fix unused-result warning
• 62f38ad Merge pull request #3130 from kolyshkin/1.0-nsexec-log-race
• 0280d06 Merge pull request #3142 from kolyshkin/1.0-reproducible-builds
• ed60a98 Merge pull request #3129 from kolyshkin/1.0-seccomp
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

❗ No coverage uploaded for pull request base (v3@3423172). Click here to learn what that means.
The diff coverage is n/a.

@@          Coverage Diff          @@
##             v3     #306   +/-   ##
=====================================
  Coverage      ?   55.55%           
=====================================
  Files         ?        1           
  Lines         ?      315           
  Branches      ?        0           
=====================================
  Hits          ?      175           
  Misses        ?      103           
  Partials      ?       37           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 3423172...1f6a4b0. Read the comment docs.

[darwinz]

Issue #287

[aeneasr]

done