Unless there's an important change in any of these that affects containerd, I'd rather keep this for v1.6. This is a huge diff in dependencies, and no changes in the runc code (except for removing dead code for windows, and some minor linting issues).

We keep release branches, so that we can backport specific (focussed) fixes, without having to include other changes from the main branch.

#5587 (comment)

This will also be updating to a new major version, so we should be careful picking this, unless we have a specific reason to update the dependency (I think this is coming in because this PR updates runc v1.0.0-rc95, but we only use a single package (libcontainer/user from runc), so we should no longer have a need to update it, unless there were changes in that package

#5587 (review)

I'm a bit cautious with some of the updates; we should be careful updating these in a patch release if there's no specific reason to require these changes. Especially with go modules, updating the version here will also force any consumer of containerd go module to update their dependencies to these newer versions, so there's a risk that containerd itself is not affected by the updated version (it may not be using the code), but consumers of containerd may be, and will now be forced to accept (possibly breaking) changes.