Skip to content

Update module github.com/cyphar/filepath-securejoin to v0.6.1#406

Open
renovate-rancher[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-cyphar-filepath-securejoin-0.x
Open

Update module github.com/cyphar/filepath-securejoin to v0.6.1#406
renovate-rancher[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-cyphar-filepath-securejoin-0.x

Conversation

@renovate-rancher
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/cyphar/filepath-securejoin v0.6.0v0.6.1 age confidence

Release Notes

cyphar/filepath-securejoin (github.com/cyphar/filepath-securejoin)

v0.6.1: -- "At last up jumped the cunning spider, and fiercely held her fast."

Compare Source

This release includes a few more minor improvements to pathrs-lite,
mainly involving the fallback logic in tools which configure seccomp
profiles during execution (like runc) and to fix a file descriptor leak.

Fixed
  • Our logic for deciding whether to use openat2(2) or fallback to an O_PATH
    resolver would cache the result to avoid doing needless test runs of
    openat2(2). However, this causes issues when pathrs-lite is being used by
    a program that applies new seccomp-bpf filters onto itself -- if the filter
    denies openat2(2) then we would return that error rather than falling back
    to the O_PATH resolver. To resolve this issue, we no longer cache the
    result if openat2(2) was successful, only if there was an error.
  • A file descriptor leak in our openat2 wrapper (when doing the necessary
    dup for RESOLVE_IN_ROOT) has been removed.

Thanks to the following contributors for making this release possible:

Signed-off-by: Aleksa Sarai cyphar@cyphar.com


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@renovate-rancher renovate-rancher Bot requested a review from a team as a code owner May 29, 2026 07:50
@renovate-rancher renovate-rancher Bot requested a review from kyledong-suse May 29, 2026 07:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants