runc 1.1.9 -- "There is a crack in everything. That's how the light gets in."

This is the ninth patch release of the 1.1.z release branch of runc.
It fixes a regression introduced in 1.1.8, a bugfix in intelrdt, and
a libcontainer fix to cgroup v2 statistics reporting.

• Added go 1.21 to the CI matrix; other CI updates. (#3976, #3958)
• Fixed losing sticky bit on tmpfs (a regression in 1.1.8). (#3952, #3961)
• intelrdt: fixed ignoring ClosID on some systems. (#3550, #3978)
• Sum anon and file from memory.stat for cgroupv2 root usage,
  as the root does not have memory.current for cgroupv2.
  This aligns cgroupv2 root usage more closely with cgroupv1 reporting.
  Additionally, report root swap usage as sum of swap and memory usage,
  aligned with v1 and existing non-root v2 reporting. (#3933)

Static Linking Notices

The runc binary distributed with this release are statically linked with
the following GNU LGPL-2.1 licensed libraries, with runc acting
as a "work that uses the Library":

• libseccomp

The versions of these libraries were not modified from their upstream versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the attached
runc source code) may be used to exercise your rights under the LGPL-2.1.

However we strongly suggest that you make use of your distribution's packages
or download them from the authoritative upstream sources, especially since
these libraries are related to the security of your containers.

---

Thanks to all of the contributors who made this release possible:

• Akhil Mohan makhil@vmware.com
• Akihiro Suda akihiro.suda.cz@hco.ntt.co.jp
• Aleksa Sarai cyphar@cyphar.com
• Alexander Eldeib alexeldeib@gmail.com
• Cory Snider csnider@mirantis.com
• Kir Kolyshkin kolyshkin@gmail.com
• lifubang lifubang@acmcoder.com
• Mrunal Patel mrunalp@gmail.com

Signed-off-by: Aleksa Sarai cyphar@cyphar.com