From 7a7b0a468d6b51257744cc9cd9dc985e49157083 Mon Sep 17 00:00:00 2001
From: Azure Container Upstream Bot <azcu-bot@microsoft.com>
Date: Tue, 28 Jul 2026 17:31:59 +0200
Subject: [PATCH] kubelet: use filepath-securejoin/pathrs-lite for
 OpenInRoot/Reopen

The top-level OpenInRoot and Reopen wrappers were removed in
github.com/cyphar/filepath-securejoin v0.5.0+ and moved to the
pathrs-lite subpackage. Repoint the import so the kubelet builds
against filepath-securejoin >= v0.5.0 (pulled in via the
opencontainers/selinux v1.13.0 bump).
---
 pkg/kubelet/kubelet_server_journal_linux.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/kubelet/kubelet_server_journal_linux.go b/pkg/kubelet/kubelet_server_journal_linux.go
index bf550e6..dabbb1c 100644
--- a/pkg/kubelet/kubelet_server_journal_linux.go
+++ b/pkg/kubelet/kubelet_server_journal_linux.go
@@ -26,7 +26,7 @@ import (
 	"os/exec"
 	"strings"
 
-	securejoin "github.com/cyphar/filepath-securejoin"
+	securejoin "github.com/cyphar/filepath-securejoin/pathrs-lite"
 	unix "golang.org/x/sys/unix"
 )
 
-- 
2.55.0

