Update CRI-O to v1.26.2

Signed-off-by: Sascha Grunert <[email protected]>

dependencies.yaml

@@ -164,11 +164,29 @@ dependencies:
       match: VERSION
 
   - name: CRI-O
-    version: v1.26.1
+    version: v1.26.2
     refPaths:
     - path: hack/ci/install-cri-o.sh
       match: TAG
 
+  - name: crun
+    version: v1.8.1
+    refPaths:
+    - path: examples/baseprofile-crun.yaml
+      match: name
+    - path: test/tc_base_profiles_test.go
+      match: baseProfileNameCrun
+
+  - name: runc
+    version: v1.1.4
+    refPaths:
+    - path: examples/baseprofile-runc.yaml
+      match: name
+    - path: test/tc_base_profiles_test.go
+      match: baseProfileNameRunc
+    - path: installation-usage.md
+      match: baseProfileName
+
   - name: audit2rbac
     version: v0.9.0
     refPaths:

examples/baseprofile-crun.yaml

@@ -2,7 +2,7 @@
 apiVersion: security-profiles-operator.x-k8s.io/v1beta1
 kind: SeccompProfile
 metadata:
-  name: crun-v1.5
+  name: crun-v1.8.1
 spec:
   defaultAction: SCMP_ACT_ERRNO
   architectures:
@@ -54,7 +54,6 @@ spec:
         - setresgid
         - setresuid
         - setsid
-        - statfs
         - statx
         - symlinkat
         - umask

hack/ci/install-cri-o.sh

@@ -15,7 +15,7 @@
 
 set -euo pipefail
 
-TAG=v1.26.1
+TAG=v1.26.2
 
 curl_retry() {
     curl -sSfL --retry 5 --retry-delay 3 "$@"
@@ -36,7 +36,7 @@ curl_retry -o /usr/bin/bom \
 chmod +x /usr/bin/bom
 bom version
 
-curl_retry "https://raw.githubusercontent.com/cri-o/cri-o/main/scripts/get" |
+curl_retry "https://raw.githubusercontent.com/cri-o/cri-o/$TAG/scripts/get" |
     bash -s -- -t "$TAG"
 
 . /etc/os-release

installation-usage.md

@@ -452,7 +452,7 @@ metadata:
   name: profile1
 spec:
   defaultAction: SCMP_ACT_ERRNO
-  baseProfileName: runc-v1.0.0
+  baseProfileName: runc-v1.1.4
   syscalls:
     - action: SCMP_ACT_ALLOW
       names:

test/tc_base_profiles_test.go

@@ -23,15 +23,20 @@ import (
 	"time"
 )
 
+const (
+	baseProfileNameRunc = "runc-v1.1.4"
+	baseProfileNameCrun = "crun-v1.8.1"
+)
+
 func (e *e2e) testCaseBaseProfile([]string) {
 	e.seccompOnlyTestCase()
 
 	baseProfilePath := "examples/baseprofile-runc.yaml"
-	baseProfileName := "runc-v1.1.4"
+	baseProfileName := baseProfileNameRunc
 
 	if clusterType == clusterTypeVanilla && e.containerRuntime != containerRuntimeDocker {
 		baseProfilePath = "examples/baseprofile-crun.yaml"
-		baseProfileName = "crun-v1.5"
+		baseProfileName = baseProfileNameCrun
 	}
 
 	helloProfile := fmt.Sprintf(`