Update module github.com/opencontainers/selinux to v1.14.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/opencontainers/selinux	v1.13.1 → v1.14.0

---

Release Notes

opencontainers/selinux (github.com/opencontainers/selinux)

v1.14.0

Compare Source

This release fixes a regression in ExecLabel, bumps the minimal Go version to 1.22, and deprecates several functions in favor of improved API.

Fixed

• ExecLabel was using an incorrect path (regression in v1.13.0). (#​253)

Deprecated

• CategoryRange is deprecated; use SetCategoryRange instead. (#​262)
• KVMContainerLabels is deprecated; use KVMContainerLabel instead. (#​262)
• InitContainerLabels is deprecated; use InitContainerLabel instead. (#​262)
• ReserveLabel is deprecated; use ReserveLabelV2 instead. (#​262)
• ROFileLabel is deprecated; if you use it, open a new issue. (#​262)
• ContainerLabels is deprecated, if you use it, open a new issue. (#​262)

Added

• SEUserByName. (#​232, #​251)
• CheckLabel. (#​250)
• SetCategoryRange, KVMContainerLabel, InitContainerLabel, ReserveLabelV2. (#​262)

Changed

• Switch to Go 1.22 as the minimally supported version (#​256)
• Update GetDefaultContextWithLevel to fall back to failsafe context (#​232)
• Use math/rand/v2 rather than crypto/rand for MCS label generation (#​257)

Miscellaneous

• MAINTAINERS: add Aleksa as a maintainer. (#​243)
• Assorted CI bumps and related fixes. (#​255)
• Remove intToMcs. (#​259)
• Use Cut more. (#​254)
• Simplify getSelinuxMountPoint. (#​258)
• Simplify/remove some code. (#​261)
• selinux: release map key when call mcsDelete. (#​263)

New Contributors

• @​capnspacehook made their first contribution in #​232
• @​mschiff made their first contribution in #​253
• @​espadolini made their first contribution in #​257

Full Changelog: opencontainers/selinux@v1.13.1...v1.14.0

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Luap99]

maybe wait for containers/podman#28653 to ensure this passes tests in podman before updating this here

[mtrmac]

maybe wait for containers/podman#28653 to ensure this passes tests in podman before updating this here

That looks unhappy now; then we should update the ReserveLabel calls here to ReserveLabelV2, and again test Podman.