Bump github.com/containerd/containerd/v2 from 2.3.5 to 2.3.6 in the go_modules group across 1 directory

[dependabot]

Bumps the go_modules group with 1 update in the / directory: github.com/containerd/containerd/v2.

Updates github.com/containerd/containerd/v2 from 2.3.5 to 2.3.6

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.3.6

Welcome to the v2.3.6 release of containerd!

The sixth patch release for containerd 2.3 contains various fixes and updates including a security patch.

Security Updates

• containerd
  • CVE-2026-53493

Highlights

Container Runtime Interface (CRI)

• Fix bug where container creation failed when SELinux relabeling was unsupported by the filesystem (#14211)
• Enable mount manager for image mounts in CRI (#14147)

Image Storage

• Ensure all layers are fetched when multiple manifests in an index share a config descriptor (#14139)

Runtime

• Avoid unexpected mutation of mount options in mount helpers (#14192)
• Mask /proc/interrupts and CPU thermal throttle sysfs paths in Linux containers by default (#14144)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Paweł Gronowski
• Samuel Karp
• Chris Henzie
• Maksym Pavlenko
• Wei Fu
• Gao Xiang
• Nan Liu

Changes

• 086fc0d40e Prepare release notes for v2.3.6
• 3e3b3daabc Merge commit from fork
• 03fbef37da Bound Walk references
• bfe167214b Bound Dispatch concurrency and references
• Fix input mutation in mount option helpers (#14192)
  • 5f17a29a9b core/mount: Keep lazy copy for filtered options

... (truncated)

Commits

• ee27353 Merge pull request #14226 from samuelkarp/prepare-release-2.3.6
• 086fc0d Prepare release notes for v2.3.6
• 3e3b3da Merge commit from fork
• 92e6694 Merge pull request #14192 from vvoland/13433-release/2.3
• f7ae0f2 Merge pull request #14211 from k8s-infra-cherrypick-robot/cherry-pick-14207-t...
• 7fd198f cri: tolerate wrapped ENOTSUP during relabel
• 03fbef3 Bound Walk references
• bfe1672 Bound Dispatch concurrency and references
• 5f17a29 core/mount: Keep lazy copy for filtered options
• 4979657 core/mount: Return copied filtered mount options
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[dependabot]

Looks like github.com/containerd/containerd/v2 is no longer updatable, so this is no longer needed.