[1.2] fix fd leaks and detect them as comprehensively as possible#5027

Merged

cyphar merged 6 commits intoopencontainers:release-1.2from

lifubang:ci-detect-fdleak-try-best-1.2

Nov 26, 2025

Commits on Nov 20, 2025

ci: detect file descriptor leaks as comprehensively as possible

lifubang
and
cyphar
committed
libct: always close m.dstFile in mountToRootfs
lifubang
committed
libct: add a defer fd close in createDeviceNode
lifubang
committed
bump github.com/opencontainers/selinux from v1.13.0 to v1.13.1
lifubang
committed
downgrade github.com/cyphar/filepath-securejoin from v0.6.0 to v0.5.2
lifubang
committed
integration: verify syscall compatibility after seccomp enforcement
lifubang
committed