[rpms/apptainer] migrate-spdx: update to upstream 1.5.0-rc.1

[rpms/apptainer] migrate-spdx: update to upstream 1.5.0-rc.1

[Dave Dykstra]

A new commit has been pushed.

Repo   : rpms/apptainer
Branch : migrate-spdx
Commit : e1d9f25ab84af9b031921e1d7677a2243e4f80e2
Author : Dave Dykstra <2129743+DrDaveD@users.noreply.github.com>
Date   : 2026-03-12T16:25:42-05:00
Stats  : +148/-125 in 6 file(s)
URL    : https://src.fedoraproject.org/rpms/apptainer/c/e1d9f25ab84af9b031921e1d7677a2243e4f80e2?branch=migrate-spdx

Log:
update to upstream 1.5.0-rc.1

---
diff --git a/.gitignore b/.gitignore
index 01714b4..04fcd0a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,8 @@
 /apptainer-*tar*
 /e2fsprogs-*tar*
 /gocryptfs-*tar*
-/squashfuse-*tar*
-/fuse-overlayfs-*tar*
 /squashfs-tools-*tar*
+# Small tarballs hang on upload so they're checked in and not ignored
+# /fuse-overlayfs-*tar*
+# /squashfuse-*tar*
+# /PRoot-*tar*

diff --git a/PRoot-5.4.0-rootless.2.tar.gz b/PRoot-5.4.0-rootless.2.tar.gz
new file mode 100644
index 0000000..f9f14a7
Binary files /dev/null and b/PRoot-5.4.0-rootless.2.tar.gz differ

diff --git a/apptainer.spec b/apptainer.spec
index 430200c..cb5b799 100644
--- a/apptainer.spec
+++ b/apptainer.spec
@@ -25,27 +25,24 @@
 #
 #
 
-# Disable debugsource packages; otherwise it ends up with an empty %%files
-#   file in debugsourcefiles.list on Fedora
-%undefine _debugsource_packages
-
 # This can be slightly different than %%{version}.
 # For example, it has dash instead of tilde for release candidates.
-%global package_version 1.4.5
+%global package_version 1.5.0-rc.1
 
-%global gocryptfs_version 2.5.1
-%global squashfuse_version 0.6.0
+%global gocryptfs_version 2.6.1
+%global squashfuse_version 0.6.1
 %global e2fsprogs_version 1.47.3
-%global fuse_overlayfs_version 1.15
-%global squashfs_tools_version 4.6.1
+%global fuse_overlayfs_version 1.16
+%global squashfs_tools_version 4.7.5
+%global PRoot_version 5.4.0-rootless.2
 
 # The last singularity version number in EPEL/Fedora
 %global last_singularity_version 3.8.7-3
 
 Summary: Application and environment virtualization formerly known as Singularity
 Name: apptainer
-Version: 1.4.5
-Release: 6%{?dist}
+Version: 1.5.0~rc.1
+Release: 1%{?dist}
 # See LICENSE.md for first party code (BSD-3-Clause and LBNL BSD)
 # See LICENSE_THIRD_PARTY.md for incorporated code (ASL 2.0)
 # See LICENSE_DEPENDENCIES.md for dependencies
@@ -75,10 +72,15 @@ Patch122: e2fsprogs-250.patch
 # URL: https://github.com/tytso/e2fsprogs/pull/251.patch
 Patch123: e2fsprogs-251.patch
 %endif
+%if "%{?fuse_overlayfs_version}" != ""
 Source13: https://github.com/containers/fuse-overlayfs/archive/v%{fuse_overlayfs_version}/fuse-overlayfs-%{fuse_overlayfs_version}.tar.gz
+%endif
 %if "%{?squashfs_tools_version}" != ""
 Source14: https://github.com/plougher/squashfs-tools/archive/%{squashfs_tools_version}/squashfs-tools-%{squashfs_tools_version}.tar.gz
 %endif
+%if "%{?PRoot_version}" != ""
+Source15: https://github.com/rootless-containers/PRoot/archive/v%{PRoot_version}/PRoot-%{PRoot_version}.tar.gz
+%endif
 
 # This Conflicts is in case someone tries to install the main apptainer
 # package when an old singularity package is installed.  An Obsoletes is on
@@ -101,84 +103,88 @@ Obsoletes: singularity-runtime < 3.0
 Provides: sif-runtime
 Conflicts: sif-runtime
 
+%if "%{?gocryptfs_version}" != ""
 Provides: bundled(gocryptfs) = %{gocryptfs_version}
+%endif
+%if "%{?squashfuse_version}" != ""
 Provides: bundled(squashfuse) = %{squashfuse_version}
+%endif
+%if "%{?e2fsprogs_version}" != ""
 Provides: bundled(e2fsprogs) = %{e2fsprogs_version}
 Provides: bundled(fuse2fs) = %{e2fsprogs_version}
+%endif
+%if "%{?fuse_overlayfs_version}" != ""
 Provides: bundled(fuse-overlayfs) = %{fuse_overlayfs_version}
+%endif
+%if "%{?squashfs_tools_version}" != ""
 Provides: bundled(squashfs-tools) = %{squashfs_tools_version}
-Provides: bundled(golang(github.com/AdaLogics/go_fuzz_headers)) = v0.0.0_20230811130428_ced1acdcaa24
-Provides: bundled(golang(github.com/AdamKorcz/go_fuzz_headers)) = v0.0.0_20210319161527_f761c2329661
-Provides: bundled(golang(github.com/Azure/go_ansiterm)) = v0.0.0_20230124172434_306776ec8161
-Provides: bundled(golang(github.com/BurntSushi/toml)) = v1.4.0
+%endif
+%if "%{?PRoot_version}" != ""
+Provides: bundled(PRoot) = %{PRoot_version}
+%endif
+Provides: bundled(golang(cyphar.com/go_pathrs)) = v0.2.1
+Provides: bundled(golang(github.com/AdaLogics/go_fuzz_headers)) = v0.0.0_20240806141605_e8a1dd7889d6
+Provides: bundled(golang(github.com/Azure/go_ansiterm)) = v0.0.0_20250102033503_faa5f7b0171c
+Provides: bundled(golang(github.com/BurntSushi/toml)) = v1.6.0
 Provides: bundled(golang(github.com/Microsoft/go_winio)) = v0.6.2
 Provides: bundled(golang(github.com/Netflix/go_expect)) = v0.0.0_20220104043353_73e0943537d2
-Provides: bundled(golang(github.com/ProtonMail/go_crypto)) = v1.1.6
+Provides: bundled(golang(github.com/ProtonMail/go_crypto)) = v1.4.0
 Provides: bundled(golang(github.com/VividCortex/ewma)) = v1.2.0
 Provides: bundled(golang(github.com/acarl005/stripansi)) = v0.0.0_20180116102854_5a71ef0e047d
 Provides: bundled(golang(github.com/adigunhammedolalekan/registry_auth)) = v0.0.0_20200730122110_8cde180a3a60
 Provides: bundled(golang(github.com/alexflint/go_filemutex)) = v1.3.0
 Provides: bundled(golang(github.com/apex/log)) = v1.9.0
 Provides: bundled(golang(github.com/apptainer/container_key_client)) = v0.8.0
-Provides: bundled(golang(github.com/apptainer/container_library_client)) = v1.4.10
-Provides: bundled(golang(github.com/apptainer/sif/v2)) = v2.20.2
-Provides: bundled(golang(github.com/asaskevich/govalidator)) = v0.0.0_20230301143203_a9d515a09cc2
+Provides: bundled(golang(github.com/apptainer/container_library_client)) = v1.4.12
+Provides: bundled(golang(github.com/apptainer/sif/v2)) = v2.24.0
 Provides: bundled(golang(github.com/astromechza/etcpwdparse)) = v0.0.0_20170319193008_f0e5f0779716
 Provides: bundled(golang(github.com/beorn7/perks)) = v1.0.1
 Provides: bundled(golang(github.com/blang/semver/v4)) = v4.0.0
 Provides: bundled(golang(github.com/buger/goterm)) = v1.0.4
 Provides: bundled(golang(github.com/buger/jsonparser)) = v1.1.1
+Provides: bundled(golang(github.com/ccoveille/go_safecast)) = v1.8.2
 Provides: bundled(golang(github.com/cenkalti/backoff/v4)) = v4.3.0
 Provides: bundled(golang(github.com/cespare/xxhash/v2)) = v2.3.0
-Provides: bundled(golang(github.com/cilium/ebpf)) = v0.16.0
-Provides: bundled(golang(github.com/cloudflare/circl)) = v1.3.7
+Provides: bundled(golang(github.com/cilium/ebpf)) = v0.17.3
+Provides: bundled(golang(github.com/clipperhouse/uax29/v2)) = v2.7.0
+Provides: bundled(golang(github.com/cloudflare/circl)) = v1.6.3
+Provides: bundled(golang(github.com/containerd/errdefs)) = v1.0.0
+Provides: bundled(golang(github.com/containerd/errdefs/pkg)) = v0.3.0
 Provides: bundled(golang(github.com/containerd/log)) = v0.1.0
-Provides: bundled(golang(github.com/containerd/stargz_snapshotter/estargz)) = v0.15.1
-Provides: bundled(golang(github.com/containernetworking/cni)) = v1.2.3
-Provides: bundled(golang(github.com/containernetworking/plugins)) = v1.5.1
-Provides: bundled(golang(github.com/containers/image/v5)) = v5.33.1
+Provides: bundled(golang(github.com/containerd/stargz_snapshotter/estargz)) = v0.18.2
+Provides: bundled(golang(github.com/containernetworking/cni)) = v1.3.0
+Provides: bundled(golang(github.com/containernetworking/plugins)) = v1.9.0
+Provides: bundled(golang(github.com/containers/image/v5)) = v5.36.2
 Provides: bundled(golang(github.com/containers/libtrust)) = v0.0.0_20230121012942_c1716e8a8d01
-Provides: bundled(golang(github.com/containers/ocicrypt)) = v1.2.0
-Provides: bundled(golang(github.com/containers/storage)) = v1.56.1
-Provides: bundled(golang(github.com/coreos/go_iptables)) = v0.7.0
-Provides: bundled(golang(github.com/coreos/go_systemd/v22)) = v22.5.0
-Provides: bundled(golang(github.com/cpuguy83/go_md2man/v2)) = v2.0.6
+Provides: bundled(golang(github.com/containers/ocicrypt)) = v1.2.1
+Provides: bundled(golang(github.com/containers/storage)) = v1.59.1
+Provides: bundled(golang(github.com/coreos/go_iptables)) = v0.8.0
+Provides: bundled(golang(github.com/coreos/go_systemd/v22)) = v22.6.0
+Provides: bundled(golang(github.com/cpuguy83/go_md2man/v2)) = v2.0.7
 Provides: bundled(golang(github.com/creack/pty)) = v1.1.24
-Provides: bundled(golang(github.com/cyberphone/json_canonicalization)) = v0.0.0_20231217050601_ba74d44ecf5f
-Provides: bundled(golang(github.com/cyphar/filepath_securejoin)) = v0.5.1
-Provides: bundled(golang(github.com/d2g/dhcp4)) = v0.0.0_20170904100407_a1d1b6c41b1c
-Provides: bundled(golang(github.com/d2g/dhcp4client)) = v1.0.0
+Provides: bundled(golang(github.com/cyberphone/json_canonicalization)) = v0.0.0_20241213102144_19d51d7fe467
+Provides: bundled(golang(github.com/cyphar/filepath_securejoin)) = v0.6.1
 Provides: bundled(golang(github.com/distribution/reference)) = v0.6.0
-Provides: bundled(golang(github.com/docker/cli)) = v27.5.1+incompatible
+Provides: bundled(golang(github.com/docker/cli)) = v29.3.0+incompatible
 Provides: bundled(golang(github.com/docker/distribution)) = v2.8.3+incompatible
-Provides: bundled(golang(github.com/docker/docker)) = v27.5.1+incompatible
-Provides: bundled(golang(github.com/docker/docker_credential_helpers)) = v0.8.2
+Provides: bundled(golang(github.com/docker/docker)) = v28.5.2+incompatible
+Provides: bundled(golang(github.com/docker/docker_credential_helpers)) = v0.9.3
 Provides: bundled(golang(github.com/docker/go_connections)) = v0.5.0
 Provides: bundled(golang(github.com/docker/go_metrics)) = v0.0.1
 Provides: bundled(golang(github.com/docker/go_units)) = v0.5.0
 Provides: bundled(golang(github.com/docker/libtrust)) = v0.0.0_20160708172513_aabc10ec26b7
 Provides: bundled(golang(github.com/fatih/color)) = v1.18.0
 Provides: bundled(golang(github.com/felixge/httpsnoop)) = v1.0.4
+Provides: bundled(golang(github.com/fsnotify/fsnotify)) = v1.9.0
 Provides: bundled(golang(github.com/garyburd/redigo)) = v0.0.0_20150301180006_535138d7bcd7
-Provides: bundled(golang(github.com/go_jose/go_jose/v4)) = v4.0.4
+Provides: bundled(golang(github.com/go_jose/go_jose/v4)) = v4.1.3
 Provides: bundled(golang(github.com/go_log/log)) = v0.2.0
-Provides: bundled(golang(github.com/go_logr/logr)) = v1.4.2
+Provides: bundled(golang(github.com/go_logr/logr)) = v1.4.3
 Provides: bundled(golang(github.com/go_logr/stdr)) = v1.2.2
-Provides: bundled(golang(github.com/go_openapi/analysis)) = v0.23.0
-Provides: bundled(golang(github.com/go_openapi/errors)) = v0.22.0
-Provides: bundled(golang(github.com/go_openapi/jsonpointer)) = v0.21.0
-Provides: bundled(golang(github.com/go_openapi/jsonreference)) = v0.21.0
-Provides: bundled(golang(github.com/go_openapi/loads)) = v0.22.0
-Provides: bundled(golang(github.com/go_openapi/runtime)) = v0.28.0
-Provides: bundled(golang(github.com/go_openapi/spec)) = v0.21.0
-Provides: bundled(golang(github.com/go_openapi/strfmt)) = v0.23.0
-Provides: bundled(golang(github.com/go_openapi/swag)) = v0.23.0
-Provides: bundled(golang(github.com/go_openapi/validate)) = v0.24.0
 Provides: bundled(golang(github.com/godbus/dbus/v5)) = v5.1.0
-Provides: bundled(golang(github.com/gogo/protobuf)) = v1.3.2
 Provides: bundled(golang(github.com/golang/protobuf)) = v1.5.4
-Provides: bundled(golang(github.com/google/go_cmp)) = v0.6.0
-Provides: bundled(golang(github.com/google/go_containerregistry)) = v0.20.2
+Provides: bundled(golang(github.com/google/go_cmp)) = v0.7.0
+Provides: bundled(golang(github.com/google/go_containerregistry)) = v0.21.2
 Provides: bundled(golang(github.com/google/uuid)) = v1.6.0
 Provides: bundled(golang(github.com/gorilla/handlers)) = v1.5.1
 Provides: bundled(golang(github.com/gorilla/mux)) = v1.8.1
@@ -187,97 +193,103 @@ Provides: bundled(golang(github.com/gosimple/unidecode)) = v1.0.1
 Provides: bundled(golang(github.com/hashicorp/errwrap)) = v1.1.0
 Provides: bundled(golang(github.com/hashicorp/go_multierror)) = v1.1.1
 Provides: bundled(golang(github.com/inconshreveable/mousetrap)) = v1.1.0
-Provides: bundled(golang(github.com/josharian/intern)) = v1.0.0
+Provides: bundled(golang(github.com/insomniacslk/dhcp)) = v0.0.0_20240829085014_a3a4c1f04475
+Provides: bundled(golang(github.com/josharian/native)) = v1.1.0
 Provides: bundled(golang(github.com/json_iterator/go)) = v1.1.12
-Provides: bundled(golang(github.com/klauspost/compress)) = v1.17.11
+Provides: bundled(golang(github.com/klauspost/compress)) = v1.18.4
 Provides: bundled(golang(github.com/klauspost/pgzip)) = v1.2.6
-Provides: bundled(golang(github.com/letsencrypt/boulder)) = v0.0.0_20240620165639_de9c06129bec
-Provides: bundled(golang(github.com/mailru/easyjson)) = v0.7.7
-Provides: bundled(golang(github.com/mattn/go_colorable)) = v0.1.13
+Provides: bundled(golang(github.com/mattn/go_colorable)) = v0.1.14
 Provides: bundled(golang(github.com/mattn/go_isatty)) = v0.0.20
-Provides: bundled(golang(github.com/mattn/go_runewidth)) = v0.0.16
+Provides: bundled(golang(github.com/mattn/go_runewidth)) = v0.0.20
 Provides: bundled(golang(github.com/mattn/go_shellwords)) = v1.0.12
-Provides: bundled(golang(github.com/mattn/go_sqlite3)) = v1.14.24
+Provides: bundled(golang(github.com/mattn/go_sqlite3)) = v1.14.28
+Provides: bundled(golang(github.com/mdlayher/packet)) = v1.1.2
+Provides: bundled(golang(github.com/mdlayher/socket)) = v0.5.1
 Provides: bundled(golang(github.com/miekg/pkcs11)) = v1.1.1
 Provides: bundled(golang(github.com/mitchellh/go_homedir)) = v1.1.0
-Provides: bundled(golang(github.com/mitchellh/mapstructure)) = v1.5.0
 Provides: bundled(golang(github.com/moby/docker_image_spec)) = v1.3.1
-Provides: bundled(golang(github.com/moby/patternmatcher)) = v0.5.0
-Provides: bundled(golang(github.com/moby/sys/capability)) = v0.3.0
+Provides: bundled(golang(github.com/moby/go_archive)) = v0.2.0
+Provides: bundled(golang(github.com/moby/patternmatcher)) = v0.6.0
+Provides: bundled(golang(github.com/moby/sys/atomicwriter)) = v0.1.0
+Provides: bundled(golang(github.com/moby/sys/capability)) = v0.4.0
 Provides: bundled(golang(github.com/moby/sys/mountinfo)) = v0.7.2
 Provides: bundled(golang(github.com/moby/sys/sequential)) = v0.6.0
-Provides: bundled(golang(github.com/moby/sys/user)) = v0.3.0
+Provides: bundled(golang(github.com/moby/sys/user)) = v0.4.0
 Provides: bundled(golang(github.com/moby/sys/userns)) = v0.1.0
 Provides: bundled(golang(github.com/modern_go/concurrent)) = v0.0.0_20180306012644_bacd9c7ef1dd
 Provides: bundled(golang(github.com/modern_go/reflect2)) = v1.0.2
-Provides: bundled(golang(github.com/muesli/cancelreader)) = v0.2.2
 Provides: bundled(golang(github.com/munnerz/goautoneg)) = v0.0.0_20191010083416_a7dc8b61c822
 Provides: bundled(golang(github.com/networkplumbing/go_nft)) = v0.4.0
-Provides: bundled(golang(github.com/oklog/ulid)) = v1.3.1
+Provides: bundled(golang(github.com/opencontainers/cgroups)) = v0.0.6
 Provides: bundled(golang(github.com/opencontainers/go_digest)) = v1.0.0
 Provides: bundled(golang(github.com/opencontainers/image_spec)) = v1.1.1
-Provides: bundled(golang(github.com/opencontainers/runc)) = v1.2.8
-Provides: bundled(golang(github.com/opencontainers/runtime_spec)) = v1.2.1
-Provides: bundled(golang(github.com/opencontainers/runtime_tools)) = v0.9.1_0.20221107090550_2e043c6bd626
+Provides: bundled(golang(github.com/opencontainers/runc)) = v1.4.0
+Provides: bundled(golang(github.com/opencontainers/runtime_spec)) = v1.3.0
+Provides: bundled(golang(github.com/opencontainers/runtime_tools)) = v0.9.1_0.20251114084447_edf4cb3d2116
 Provides: bundled(golang(github.com/opencontainers/selinux)) = v1.13.1
-Provides: bundled(golang(github.com/opencontainers/umoci)) = v0.4.7
-Provides: bundled(golang(github.com/pelletier/go_toml/v2)) = v2.2.3
+Provides: bundled(golang(github.com/opencontainers/umoci)) = v0.6.0
+Provides: bundled(golang(github.com/pelletier/go_toml/v2)) = v2.2.4
+Provides: bundled(golang(github.com/pierrec/lz4/v4)) = v4.1.21
 Provides: bundled(golang(github.com/pkg/errors)) = v0.9.1
-Provides: bundled(golang(github.com/proglottis/gpgme)) = v0.1.3
-Provides: bundled(golang(github.com/prometheus/client_golang)) = v1.20.2
-Provides: bundled(golang(github.com/prometheus/client_model)) = v0.6.1
-Provides: bundled(golang(github.com/prometheus/common)) = v0.57.0
-Provides: bundled(golang(github.com/prometheus/procfs)) = v0.15.1
-Provides: bundled(golang(github.com/rivo/uniseg)) = v0.4.7
-Provides: bundled(golang(github.com/rootless_containers/proto)) = v0.1.0
+Provides: bundled(golang(github.com/proglottis/gpgme)) = v0.1.4
+Provides: bundled(golang(github.com/prometheus/client_golang)) = v1.23.2
+Provides: bundled(golang(github.com/prometheus/client_model)) = v0.6.2
+Provides: bundled(golang(github.com/prometheus/common)) = v0.67.5
+Provides: bundled(golang(github.com/prometheus/procfs)) = v0.16.1
+Provides: bundled(golang(github.com/rootless_containers/proto/go_proto)) = v0.0.0_20230421021042_4cd87ebadd67
 Provides: bundled(golang(github.com/russross/blackfriday/v2)) = v2.1.0
-Provides: bundled(golang(github.com/safchain/ethtool)) = v0.4.0
-Provides: bundled(golang(github.com/samber/lo)) = v1.49.1
+Provides: bundled(golang(github.com/safchain/ethtool)) = v0.6.2
+Provides: bundled(golang(github.com/samber/lo)) = v1.53.0
 Provides: bundled(golang(github.com/seccomp/containers_golang)) = v0.6.0
-Provides: bundled(golang(github.com/seccomp/libseccomp_golang)) = v0.10.0
-Provides: bundled(golang(github.com/secure_systems_lab/go_securesystemslib)) = v0.9.0
+Provides: bundled(golang(github.com/seccomp/libseccomp_golang)) = v0.11.1
+Provides: bundled(golang(github.com/secure_systems_lab/go_securesystemslib)) = v0.9.1
 Provides: bundled(golang(github.com/shopspring/decimal)) = v1.4.0
-Provides: bundled(golang(github.com/sigstore/fulcio)) = v1.6.4
-Provides: bundled(golang(github.com/sigstore/protobuf_specs)) = v0.4.0
-Provides: bundled(golang(github.com/sigstore/rekor)) = v1.3.6
-Provides: bundled(golang(github.com/sigstore/sigstore)) = v1.8.14
-Provides: bundled(golang(github.com/sirupsen/logrus)) = v1.9.3
-Provides: bundled(golang(github.com/spf13/cobra)) = v1.9.1
-Provides: bundled(golang(github.com/spf13/pflag)) = v1.0.6
+Provides: bundled(golang(github.com/sigstore/fulcio)) = v1.8.5
+Provides: bundled(golang(github.com/sigstore/protobuf_specs)) = v0.5.0
+Provides: bundled(golang(github.com/sigstore/sigstore)) = v1.10.4
+Provides: bundled(golang(github.com/sirupsen/logrus)) = v1.9.4
+Provides: bundled(golang(github.com/smallstep/pkcs7)) = v0.1.1
+Provides: bundled(golang(github.com/spf13/cobra)) = v1.10.2
+Provides: bundled(golang(github.com/spf13/pflag)) = v1.0.10
 Provides: bundled(golang(github.com/stefanberger/go_pkcs11uri)) = v0.0.0_20230803200340_78284954bff6
-Provides: bundled(golang(github.com/sylabs/json_resp)) = v0.9.4
-Provides: bundled(golang(github.com/syndtr/gocapability)) = v0.0.0_20200815063812_42c35b437635
-Provides: bundled(golang(github.com/titanous/rocacheck)) = v0.0.0_20171023193734_afe73141d399
+Provides: bundled(golang(github.com/sylabs/json_resp)) = v0.9.5
+Provides: bundled(golang(github.com/u_root/uio)) = v0.0.0_20240224005618_d2acac8f3701
 Provides: bundled(golang(github.com/ulikunitz/xz)) = v0.5.15
-Provides: bundled(golang(github.com/vbatts/go_mtree)) = v0.5.0
-Provides: bundled(golang(github.com/vbatts/tar_split)) = v0.11.6
-Provides: bundled(golang(github.com/vbauerster/mpb/v8)) = v8.9.1
-Provides: bundled(golang(github.com/vishvananda/netlink)) = v1.2.1_beta.2
-Provides: bundled(golang(github.com/vishvananda/netns)) = v0.0.4
+Provides: bundled(golang(github.com/vbatts/go_mtree)) = v0.6.1_0.20250911112631_8307d76bc1b9
+Provides: bundled(golang(github.com/vbatts/tar_split)) = v0.12.2
+Provides: bundled(golang(github.com/vbauerster/mpb/v8)) = v8.12.0
+Provides: bundled(golang(github.com/vishvananda/netlink)) = v1.3.1
+Provides: bundled(golang(github.com/vishvananda/netns)) = v0.0.5
 Provides: bundled(golang(github.com/xeipuuv/gojsonpointer)) = v0.0.0_20190905194746_02993c407bfb
 Provides: bundled(golang(github.com/xeipuuv/gojsonreference)) = v0.0.0_20180127040603_bd5ef7bd5415
 Provides: bundled(golang(github.com/xeipuuv/gojsonschema)) = v1.2.0
-Provides: bundled(golang(go.mongodb.org/mongo_driver)) = v1.14.0
-Provides: bundled(golang(go.mozilla.org/pkcs7)) = v0.0.0_20210826202110_33d05740a352
-Provides: bundled(golang(go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp)) = v0.53.0
-Provides: bundled(golang(go.opentelemetry.io/otel)) = v1.28.0
-Provides: bundled(golang(go.opentelemetry.io/otel/metric)) = v1.28.0
-Provides: bundled(golang(go.opentelemetry.io/otel/trace)) = v1.28.0
-Provides: bundled(golang(golang.org/x/crypto)) = v0.33.0
-Provides: bundled(golang(golang.org/x/exp)) = v0.0.0_20241009180824_f66d83c29e7c
-Provides: bundled(golang(golang.org/x/net)) = v0.33.0
-Provides: bundled(golang(golang.org/x/sync)) = v0.11.0
-Provides: bundled(golang(golang.org/x/sys)) = v0.30.0
-Provides: bundled(golang(golang.org/x/term)) = v0.29.0
-Provides: bundled(golang(golang.org/x/text)) = v0.22.0
-Provides: bundled(golang(google.golang.org/genproto/googleapis/api)) = v0.0.0_20240814211410_ddb44dafa142
-Provides: bundled(golang(google.golang.org/genproto/googleapis/rpc)) = v0.0.0_20240903143218_8af14fe29dc1
-Provides: bundled(golang(google.golang.org/grpc)) = v1.67.0
-Provides: bundled(golang(google.golang.org/protobuf)) = v1.36.4
+Provides: bundled(golang(go.opentelemetry.io/auto/sdk)) = v1.2.1
+Provides: bundled(golang(go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp)) = v0.63.0
+Provides: bundled(golang(go.opentelemetry.io/otel)) = v1.38.0
+Provides: bundled(golang(go.opentelemetry.io/otel/metric)) = v1.38.0
+Provides: bundled(golang(go.opentelemetry.io/otel/trace)) = v1.38.0
+Provides: bundled(golang(go.yaml.in/yaml/v2)) = v2.4.3
+Provides: bundled(golang(go.yaml.in/yaml/v3)) = v3.0.4
+Provides: bundled(golang(go.yaml.in/yaml/v4)) = v4.0.0_rc.4
+Provides: bundled(golang(golang.org/x/crypto)) = v0.49.0
+Provides: bundled(golang(golang.org/x/mod)) = v0.33.0
+Provides: bundled(golang(golang.org/x/net)) = v0.51.0
+Provides: bundled(golang(golang.org/x/sync)) = v0.20.0
+Provides: bundled(golang(golang.org/x/sys)) = v0.42.0
+Provides: bundled(golang(golang.org/x/term)) = v0.41.0
+Provides: bundled(golang(golang.org/x/text)) = v0.35.0
+Provides: bundled(golang(google.golang.org/genproto/googleapis/api)) = v0.0.0_20251222181119_0a764e51fe1b
+Provides: bundled(golang(google.golang.org/genproto/googleapis/rpc)) = v0.0.0_20251222181119_0a764e51fe1b
+Provides: bundled(golang(google.golang.org/grpc)) = v1.78.0
+Provides: bundled(golang(google.golang.org/protobuf)) = v1.36.11
 Provides: bundled(golang(gopkg.in/yaml.v2)) = v2.4.0
 Provides: bundled(golang(gopkg.in/yaml.v3)) = v3.0.1
 Provides: bundled(golang(gotest.tools/v3)) = v3.5.2
-Provides: bundled(golang(mvdan.cc/sh/v3)) = v3.10.0
+Provides: bundled(golang(mvdan.cc/sh/v3)) = v3.13.0
+Provides: bundled(golang(sigs.k8s.io/knftables)) = v0.0.18
+Provides: bundled(golang(sigs.k8s.io/yaml)) = v1.4.0
+Provides: bundled(golang(tags.cncf.io/container_device_interface)) = v1.1.0
+Provides: bundled(golang(tags.cncf.io/container_device_interface/specs_go)) = v1.1.0
 
 %if "%{_target_vendor}" == "suse"
 BuildRequires: go
@@ -294,6 +306,9 @@ BuildRequires: git
 BuildRequires: gcc
 BuildRequires: make
 BuildRequires: libseccomp-devel
+BuildRequires: libtalloc-devel
+BuildRequires: libattr-devel
+BuildRequires: protobuf-c
 BuildRequires: cryptsetup
 BuildRequires: fuse3-devel
 %if ("%{?squashfuse_version}" != "") || ("%{e2fsprogs_version}" != "") || ("%{fuse_overlayfs_version}" != "") || ("%{?squashfs_tools_version}" != "")
@@ -325,6 +340,10 @@ Requires: %{name} = %{version}-%{release}
 Obsoletes: singularity <= %{last_singularity_version}
 # FESCo asked to have this form of Provides
 Provides: alternative-for(singularity)
+%if "%{_target_vendor}" != "suse"
+# RHEL versions < 8.6 have a too-old fuse3-libs for pre-mounting
+Requires: fuse3-libs >= 3.3.0
+%endif
 
 %description suid
 Provides the optional setuid-root portion of Apptainer.
@@ -349,9 +368,6 @@ if ! ./mlocal/scripts/check-min-go-version go $GOVERSION; then
 fi
 %endif
 
-# enable FIPS support in go programs
-export GODEBUG=fips140=on
-
 ./scripts/compile-dependencies $(dirname %{SOURCE10})
 
 # Not all of these parameters currently have an effect, but they might be
@@ -371,7 +387,7 @@ export GODEBUG=fips140=on
         --mandir=%{_mandir} \
         --infodir=%{_infodir}
 
-%make_build -C builddir V= old_config=
+%make_build -C builddir V= SUPPORT_PLUGINS= old_config=
 
 %install
 %if "%{?SOURCE1}" != ""
@@ -401,6 +417,10 @@ install -m 755 squashfs-tools-%{squashfs_tools_version}/squashfs-tools/mksquashf
 install -m 755 squashfs-tools-%{squashfs_tools_version}/squashfs-tools/unsquashfs %{buildroot}%{_libexecdir}/%{name}/bin/unsquashfs
 %endif
 
+%if "%{?PRoot_version}" != ""
+install -m 755 PRoot-%{PRoot_version}/src/proot %{buildroot}%{_libexecdir}/%{name}/bin/proot
+%endif
+
 %post
 # $1 in %%posttrans cannot distinguish between fresh installs and upgrades,
 # so check it here and create a file to pass the knowledge to that step
@@ -472,6 +492,9 @@ fi
 %{_libexecdir}/%{name}/bin/mksquashfs
 %{_libexecdir}/%{name}/bin/unsquashfs
 %endif
+%if "%{?PRoot_version}" != ""
+%{_libexecdir}/%{name}/bin/proot
+%endif
 %{_libexecdir}/%{name}/cni
 %{_libexecdir}/%{name}/lib
 %dir %{_sysconfdir}/%{name}

diff --git a/fuse-overlayfs-1.16.tar.gz b/fuse-overlayfs-1.16.tar.gz
new file mode 100644
index 0000000..0ec0a4a
Binary files /dev/null and b/fuse-overlayfs-1.16.tar.gz differ

diff --git a/sources b/sources
index 201f30e..ed9bdf8 100644
--- a/sources
+++ b/sources
@@ -1,6 +1,4 @@
-SHA512 (squashfs-tools-4.6.1.tar.gz) = 10e8a4b1e2327e062aef4f85860e76ebcd7a29e4c19e152ff7edec4a38316982b5bcfde4ab69da6bcb931258d264c2b6cb40cb5f635f9e6f6eba1ed5976267cb
-SHA512 (squashfuse-0.6.0.tar.gz) = 5b6f76aeab38c30a470a7bbd14a0029bbe6b1cff9c72a5c3adcb96cc32edaf278b4622d658b5510611d8a1f76d790dd5396fe1fa9fe3908e6919527439cc94cf
-SHA512 (gocryptfs-2.5.1.tar.gz) = 45f8f60235ec9472ee8071e1b413e275d6172b67f859dc6efc282cb1e26e7c3893b2a526876fa38419cb80b70ec90c369f2145cb746318c7e26470b3316687ff
 SHA512 (e2fsprogs-1.47.3.tar.gz) = 72d6ad9b2bdd1032b2a64cb7e2789a4c98e660169f3594c1d04d6322aff2ed4783cb5842eb4cb0aff7660c96c122d638dc541833b1a0a5cfdabaaaa3705ae2dd
-SHA512 (fuse-overlayfs-1.15.tar.gz) = 6da1094216e4f6ddbc8e1cf1b1a0ebb6a8902920c73c7fb0dfc4c23f5a3ff6f14430156f5914ac021e6b84c3d8425e006e45734dac3dcc26fce414155f3db370
-SHA512 (apptainer-1.4.5.tar.gz) = cb27f4ed51a5ea831720e1367066b9509010aba56353a8b6ba7e35fbc7077e737c760afbf106ed32de7c82bd86ec51eb4d8f78c73f0454cf90ee950eea26a5d7
+SHA512 (gocryptfs-2.6.1.tar.gz) = b97d3289ec600c4c8170198f3938c7e1b2e936201903f4fff7a70bb06b4f438cccffefb893a33738e626aadff4af9a1c661ea65a120572828d05962661db4d09
+SHA512 (squashfs-tools-4.7.5.tar.gz) = d24f1c8611dc7dcb17b81f3a34ee8c0d3484141c70ebe7c77c91c966e76cddc671e24d3f4a471ddc819c4708480cdd179168fe2bca8a09e97cebf0da9ef83b1c
+SHA512 (apptainer-1.5.0-rc.1.tar.gz) = 9b758de41b5c7a6294c158a7d3c20fccda6897d05e32af72359550b1fb3abffdc752f03684038e40e239a47c55ccbdae0b84c816bcb57bc99f453df7fce6e341

diff --git a/squashfuse-0.6.1.tar.gz b/squashfuse-0.6.1.tar.gz
new file mode 100644
index 0000000..a43311e
Binary files /dev/null and b/squashfuse-0.6.1.tar.gz differ