Update module github.com/opencontainers/selinux to v1.14.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/opencontainers/selinux	v1.13.1 → v1.14.1

---

Release Notes

opencontainers/selinux (github.com/opencontainers/selinux)

v1.14.1

Compare Source

This release mostly fixes label.InitLabels regression introduced in v1.14.0.

What's Changed

• README: rm travis, add gha badge by @​kolyshkin in #​268
• Fix label.InitLabels regression in v1.14.0; amend ReserveLabelV2 doc by @​kolyshkin in #​267

Full Changelog: opencontainers/selinux@v1.14.0...v1.14.1

v1.14.0

Compare Source

This release fixes a regression in ExecLabel, bumps the minimal Go version to 1.22, and deprecates several functions in favor of improved API.

Fixed

• ExecLabel was using an incorrect path (regression in v1.13.0). (#​253)

Deprecated

• CategoryRange is deprecated; use SetCategoryRange instead. (#​262)
• KVMContainerLabels is deprecated; use KVMContainerLabel instead. (#​262)
• InitContainerLabels is deprecated; use InitContainerLabel instead. (#​262)
• ReserveLabel is deprecated; use ReserveLabelV2 instead. (#​262)
• ROFileLabel is deprecated; if you use it, open a new issue. (#​262)
• ContainerLabels is deprecated, if you use it, open a new issue. (#​262)

Added

• SEUserByName. (#​232, #​251)
• CheckLabel. (#​250)
• SetCategoryRange, KVMContainerLabel, InitContainerLabel, ReserveLabelV2. (#​262)

Changed

• Switch to Go 1.22 as the minimally supported version (#​256)
• Update GetDefaultContextWithLevel to fall back to failsafe context (#​232)
• Use math/rand/v2 rather than crypto/rand for MCS label generation (#​257)

Miscellaneous

• MAINTAINERS: add Aleksa as a maintainer. (#​243)
• Assorted CI bumps and related fixes. (#​255)
• Remove intToMcs. (#​259)
• Use Cut more. (#​254)
• Simplify getSelinuxMountPoint. (#​258)
• Simplify/remove some code. (#​261)
• selinux: release map key when call mcsDelete. (#​263)

New Contributors

• @​capnspacehook made their first contribution in #​232
• @​mschiff made their first contribution in #​253
• @​espadolini made their first contribution in #​257

Full Changelog: opencontainers/selinux@v1.13.1...v1.14.0

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Luap99]

maybe wait for containers/podman#28653 to ensure this passes tests in podman before updating this here

[mtrmac]

maybe wait for containers/podman#28653 to ensure this passes tests in podman before updating this here

That looks unhappy now; then we should update the ReserveLabel calls here to ReserveLabelV2, and again test Podman.

[kolyshkin]

Somehow renovate got vendoring wrong here (forgot to bump the version it in images I think).

Here's an alternative PR which should work: #841

[Luap99]

Somehow renovate got vendoring wrong here (forgot to bump the version it in images I think).

#438

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v1.14.1). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.