[scarthgap][PATCH] containerd: update to v2.0.10

[Benjamin Robin <benjamin.robin@bootlin.com>]

Bumping containerd to version v2.0.10, which comprises the following
commits since v2.0.7:

03a19324f990 Bound user-database file reads in openBoundedUserFile
bbf4a2b8e6c8 Do not propagate reserved labels from image configs
a15e98122d25 update runc binary to v1.3.6
ba2ed2a5e5b5 [release/2.2] update runc binary to v1.3.5
474184497e5b runc: Update runc binary to v1.3.4
becbb802ec9a update go to 1.26.4/1.25.11
55bdc8bc5b0d Configure udevd children-max for root-test
6d81e88679f8 Clean up disk space in node e2e workflow
1a3d1c85e0d0 oci: return explicit error for out-of-range USER values
fa2a97505844 seccomp: Block AF_ALG in default socket policy
4b2b07879d7c seccomp: Document socket rule scope and socketcall limitation
ea56c960571d Support both styles of volatile mount option
3d34dc82065b sandbox: forward Create fields, fix event topics
4b260843e3f6 apparmor: Set abi conditionally
3e9c4d1e0c12 Add GitHub Action for k8s node e2e tests
cf73e68731f8 Fix TOCTOU race bug in tar extraction
2320b319e096 cri:fix lost container exit events if they arrive before info is cached
fde1480df4c6 update github.com/moby/spdystream v0.5.1
5b2eee8a2936 update to Go 1.25.9, 1.26.2
c579db16e210 update golangci-lint to v2.9.0 with go1.26 support
185ddcfd0cda remove windows/arm from cross build
8538158dfacc Ignore warnings for golangci-lint bump
1cff32695c41 ci: bump golangci from 6.5.2 to 7.0.0
2e02b8bb316e Skip github.com/cyphar/filepath-securejoin license checks
e71fc560b19b Updating selinux to v1.13.1
868869eb9eff fix: sanitize error before gRPC return to prevent credential leak in pod events
40632e4f2aa7 fix: redact all query parameters in CRI error logs
85c3b2b0276b CODEOWNERS: mark Sam and Chris as owners for 2.0
902d804c9914 Update github.com/moby/spdystream v0.4.0->v0.5.0
e92d7b131182 make linter happy in release
12fc0e6ca205 add integration test for cni result nil
8d912c6a2be3 address comment
742f8b8f60a2 fix issue where cni del is never executed
f246535975c9 Ignore NOCHANGE error
9c656fab42dc ci: update CIFuzz actions to support Ubuntu 24.04
c71c4a091aeb integration: Fix TestImageLoad() failure on CI
bfee299990b4 ci: modprobe xt_comment on almalinux

Signed-off-by: Benjamin Robin <benjamin.robin@bootlin.com>
---
 recipes-containers/containerd/containerd-opencontainers_git.bb | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/recipes-containers/containerd/containerd-opencontainers_git.bb b/recipes-containers/containerd/containerd-opencontainers_git.bb
index 4ecc915a9c35..bd2a9117b098 100644
--- a/recipes-containers/containerd/containerd-opencontainers_git.bb
+++ b/recipes-containers/containerd/containerd-opencontainers_git.bb
@@ -5,7 +5,7 @@ DESCRIPTION = "containerd is a daemon to control runC, built for performance and
                support as well as checkpoint and restore for cloning and live migration of containers."
 
 
-SRCREV = "4ac6c20c7bbf8177f29e46bbdc658fec02ffb8ad"
+SRCREV = "ffa3ba0cfc08e443758c01c73a69db403d31ad1b"
 SRC_URI = "git://github.com/containerd/containerd;branch=release/2.0;protocol=https;destsuffix=git/src/github.com/containerd/containerd/v2 \
            file://0001-Makefile-allow-GO_BUILD_FLAGS-to-be-externally-speci.patch \
            file://0001-build-don-t-use-gcflags-to-define-trimpath.patch \
@@ -15,8 +15,8 @@ SRC_URI = "git://github.com/containerd/containerd;branch=release/2.0;protocol=ht
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=1269f40c0d099c21a871163984590d89"
 
-CONTAINERD_VERSION = "v2.0.7"
-CVE_VERSION = "2.0.7"
+CONTAINERD_VERSION = "v2.0.10"
+CVE_VERSION = "2.0.10"
 
 # EXTRA_OEMAKE += "GODEBUG=1"
 

---
base-commit: 9d0007a369deb4a6346f5ab7a9e6d432a8ed14fe
change-id: 20260703-containerd-update-a71a2b785727

Best regards,
--  
Benjamin Robin <benjamin.robin@bootlin.com>