[rpms/buildah] update-buildah-cve-2026-46597: buildah-1.40.1-1.el9

[Jindrich Novy <jnovy@redhat.com>]

            A new commit has been pushed.

            Repo   : rpms/buildah
            Branch : update-buildah-cve-2026-46597
            Commit : 46fc4888b32f380551280adf4ba6e592055228f7
            Author : Jindrich Novy <jnovy@redhat.com>
            Date   : 2025-06-10T10:37:09+02:00
            Stats  : +14/-3 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/buildah/c/46fc4888b32f380551280adf4ba6e592055228f7?branch=update-buildah-cve-2026-46597

            Log:
            buildah-1.40.1-1.el9

- update to https://github.com/containers/buildah/releases/tag/v1.40.1
- Related: RHEL-80816

Signed-off-by: Jindrich Novy <jnovy@redhat.com>

---
diff --git a/buildah.spec b/buildah.spec
index a7db8d4..080887d 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -32,7 +32,7 @@ Epoch: 2
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 1.39.4
+Version: 1.40.1
 # The `AND` needs to be uppercase in the License for SPDX compatibility
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
 Release: 1%{?dist}
@@ -79,12 +79,16 @@ or
 * save container's root file system layer to create a new image
 * delete a working container or an image
 
+# This subpackage is only intended for CI testing.
+# Not meant for end user/customer usage.
 %package tests
 Summary: Tests for %{name}
 
 Requires: %{name} = %{epoch}:%{version}-%{release}
-%if %{defined fedora}
+%if %{defined bats_epel}
 Requires: bats
+%else
+Recommends: bats
 %endif
 Requires: bzip2
 Requires: podman
@@ -133,6 +137,7 @@ export BUILDTAGS+=" libtrust_openssl"
 %gobuild -o bin/copy ./tests/copy
 %gobuild -o bin/tutorial ./tests/tutorial
 %gobuild -o bin/inet ./tests/inet
+%gobuild -o bin/dumpspec ./tests/dumpspec
 %{__make} docs
 
 %install
@@ -144,6 +149,7 @@ cp bin/imgtype %{buildroot}/%{_bindir}/%{name}-imgtype
 cp bin/copy %{buildroot}/%{_bindir}/%{name}-copy
 cp bin/tutorial %{buildroot}/%{_bindir}/%{name}-tutorial
 cp bin/inet     %{buildroot}/%{_bindir}/%{name}-inet
+cp bin/dumpspec %{buildroot}/%{_bindir}/%{name}-dumpspec
 
 rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/*
 
@@ -168,9 +174,14 @@ rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/*
 %{_bindir}/%{name}-copy
 %{_bindir}/%{name}-tutorial
 %{_bindir}/%{name}-inet
+%{_bindir}/%{name}-dumpspec
 %{_datadir}/%{name}/test
 
 %changelog
+* Tue Jun 10 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.40.1-1
+- update to https://github.com/containers/buildah/releases/tag/v1.40.1
+- Related: RHEL-80816
+
 * Wed Apr 02 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.39.4-1
 - update to https://github.com/containers/buildah/releases/tag/v1.39.4
 - Related: RHEL-80816

diff --git a/sources b/sources
index 6def8f9..64f4c4b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v1.39.4.tar.gz) = c721660f94010a0dc8b01502db565b486c53962ee1933e03dd2297cf5d30ac9edef6c92491f41c8c61bee946302e7a39ecff55b2ad3e34ed649222c9655262c2
+SHA512 (v1.40.1.tar.gz) = 6b37b6cc5fa3d7972800cfaef5919df8ee6c9220e8635850ee9d8356645b08afa4252d688f4316b3265e5f6aef6fa0647fb4f7602b7add292fc8b56a74c4fa1f