Backport of chore(deps): bump github.com/moby/sys/capability from 0.3.0 to 0.4.0 into release/1.9.x

[hc-github-team-nomad-core]

Backport

This PR is auto-generated from #24750 to be assessed for backporting due to the inclusion of the label backport/1.9.x.

The below text is copied from the body of the original PR.

---

Bumps github.com/moby/sys/capability from 0.3.0 to 0.4.0.

Release notes

Sourced from github.com/moby/sys/capability's releases.

mountinfo v0.4.0

Breaking changes:

• PidMountInfo is now deprecated and will be removed before v1.0; users should switch to GetMountsFromReader (#47)

Fixes and improvements:

• run filter after all fields are parsed (#50)
• correct handling errors from bufio.Scan
• documentation formatting fixes (#48)

Thanks to:

• Aleksa Sarai

capability v0.4.0

Added

• New separate API for ambient (GetAmbient, [SetAmbient], [ResetAmbient]) and bound (GetBound, DropBound) capabilities, modelled after libcap. (#176)

Fixed

• Apply now returns an error if called for non-zero pid. Before this change, it could silently change some capabilities of the current process, instead of the one identified by the pid. (#168, #174)
• Fixed tests that change capabilities to be run in a separate process. (#173)
• Other improvements in tests. (#169, #170)

Changed

• Use raw syscalls (which are slightly faster). (#176)
• Most tests are now limited to testing the public API of the package. (#162)
• Simplify parsing /proc/pid/status, add a test case. (#162)
• Optimize the number of syscall to set ambient capabilities in Apply by clearing them first; add a test case. (#163, #164)
• Better documentation for Apply, [NewFile], [NewFile2], [NewPid], [NewPid2]. (#175)

Removed

• .golangci.yml and .codespellrc are no longer part of the package. (#158)

For the complete list of changes, see https://github.com/moby/sys/blob/HEAD/capability/CHANGELOG.md.

---

Thanks to all of the contributors who made this release possible:

• Kir Kolyshkin (@​kolyshkin)
• lifubang (@​lifubang)
• Sebastiaan van Stijn (@​thaJeztah)
• Tianon Gravi (@​tianon)

... (truncated)

Commits

• 9a75fe6 Merge pull request #50 from cyphar/mountinfo-improvements
• 2847623 mountinfo: add unit-test for fully-filled fields in filter
• 41fc4b7 mountinfo: run filter after all fields are parsed
• 99cfd57 mountinfo: move s.Err() out of scanner loop
• 95f2efb Merge pull request #47 from kolyshkin/mount-pid
• 3358500 mountinfo: deprecate PidMountInfo
• 4413637 Merge pull request #48 from kolyshkin/mountinfo-doc-fixes
• 13322f1 Merge pull request #46 from thaJeztah/last_mount
• 5a01688 mountinfo: doc fixes
• 9ffc9f4 mount.RecursiveUnmount(): omit empty "sub-errors" in error message
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Overview of commits

• 4613817