chore(deps): github.com/landlock-lsm/go-landlock ^ v0.10.1

[floatpanebot]

What?

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/landlock-lsm/go-landlock	v0.8.1 → v0.10.1

---

Release Notes

landlock-lsm/go-landlock (github.com/landlock-lsm/go-landlock)

v0.10.1

Compare Source

Make handled access rights in Config struct public

v0.10.0: ABI V10 Support

Compare Source

Features:

• UDP bind/connect/send restrictions
• Quieting audit logging

v0.9.0: ABI V9 support

Compare Source

Adds support for LANDLOCK_ACCESS_FS_RESOLVE_UNIX (see https://docs.kernel.org/userspace-api/landlock.html#filesystem-flags), as introduced by Linux 7.1 today.

Users are advised to use landlock.V9 to restrict outgoing connections to named UNIX sockets. Individual sockets or directories can be allow-listed using the FSRule.WithResolveUnix() modifier for file system rules. As usual, the things to look out for are documented in config.go next to the landlock.V9 identifier.

For a step-by-step instruction for upgrading (or when using an AI agent!), see https://github.com/landlock-lsm/go-landlock/blob/main/docs/upgrade.md

Full Changelog: landlock-lsm/go-landlock@v0.8.1...v0.9.0

Why?

Automated dependency update via Renovate.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[floatpanebot]

❌ Security failed

Commit: e7c69fe · run logs

Failed jobs:

• govulncheck — Run govulncheck ./... and update vulnerable deps.

Failure details

Build errors:

• 2026-09-13T18:39:49.2465180Z ##[error] #1: internal/source/source.go:83: source.fetch calls http.Client.Do, which eventually calls url.URL.Parse
• 2026-09-13T18:39:49.2481683Z ##[error] #1: internal/source/source.go:83: source.fetch calls http.Client.Do, which eventually calls tls.Conn.HandshakeContext
• 2026-09-13T18:39:49.2484366Z ##[error] #2: internal/source/source.go:91: source.fetch calls io.ReadAll, which eventually calls tls.Conn.Read
• 2026-09-13T18:39:49.2486978Z ##[error] #3: termimage.go:134: termimage.Clear calls bufio.Writer.Flush, which calls tls.Conn.Write
• 2026-09-13T18:39:49.2489530Z ##[error] #4: internal/source/source.go:83: source.fetch calls http.Client.Do, which eventually calls tls.Dialer.DialContext
• 2026-09-13T18:39:49.2465165Z ##[error] #1: internal/source/source.go:83: source.fetch calls http.Client.Do, which eventually calls url.URL.Parse
• 2026-09-13T18:39:49.2481675Z ##[error] #1: internal/source/source.go:83: source.fetch calls http.Client.Do, which eventually calls tls.Conn.HandshakeContext
• 2026-09-13T18:39:49.2484360Z ##[error] #2: internal/source/source.go:91: source.fetch calls io.ReadAll, which eventually calls tls.Conn.Read