David Shea

[release-1.26] Properly validate cache IDs and sources

4

Backport the changes from https://github.com/containers/buildah/pull/5778 to release-1.26 The `--mount type=cache` argument to the `RUN` instruction in Dockerfiles was using `filepath.Join` on user input, allowing crafted paths to be used to...

[release-1.21] Bump runc to v1.2.8 - CVE-2025-52881

1

#### What type of PR is this? /kind other #### What this PR does / why we need it: Bump runc to v1.2.8, to address [CVE-2025-52881](https://github.com/advisories/GHSA-cgrx-mc8f-2prm). This is a huge...