Update dependencies to include security patches reported by dependabot for ecs-init

[yinyic]

Summary

Implementation details

Updated packages called out by dependabot

For amazon-ecs-agent/ecs-init, affected packages are

1. github.com/opencontainers/runc - upgrade to use 1.1.2
   a. https://github.com/aws/amazon-ecs-agent/security/dependabot/20 requires 1.1.2
   b. https://github.com/aws/amazon-ecs-agent/security/dependabot/19 requires 1.0.0-rc9
   c. https://github.com/aws/amazon-ecs-agent/security/dependabot/18 requires 1.0.3
   d. https://github.com/aws/amazon-ecs-agent/security/dependabot/16 requires 1.0.0-rc91
   e. https://github.com/aws/amazon-ecs-agent/security/dependabot/15 requires 1.0.0-rc95
2. github.com/opencontainers/image-spec upgrade to use 1.0.2
   a. https://github.com/aws/amazon-ecs-agent/security/dependabot/17 requires 1.0.2
3. github.com/docker/docker upgrade to use 1.6.1
   a. https://github.com/aws/amazon-ecs-agent/security/dependabot/14 requires 1.6.1

• Ran go get for all the required package versions

go get github.com/opencontainers/runc@v1.1.2
go get github.com/opencontainers/image-spec@v1.0.2
go get github.com/docker/docker@v1.6.1

Other deps

Aditionally, update golang.org/x/sys to use v0.0.0-20210615035016-665e8c7367d1 (oldest revision available on the repo page) due to

github.com/aws/amazon-ecs-agent/ecs-init/config imports
	github.com/fsouza/go-dockerclient imports
	github.com/docker/docker/pkg/archive imports
	golang.org/x/sys/execabs: module golang.org/x/sys@latest found (v0.0.0-20220627191245-f75cf1eec38b, replaced by golang.org/x/sys@v0.0.0-20170529185110-b90f89a1e7a9), but does not contain package golang.org/x/sys/execabs

Morever, update github.com/fsouza/go-dockerclient to latest because

go: github.com/aws/amazon-ecs-agent/ecs-init/config imports
	github.com/fsouza/go-dockerclient imports
	github.com/docker/docker/opts imports
	github.com/docker/libnetwork/ipamutils imports
	github.com/docker/libnetwork/osl imports
	github.com/Sirupsen/logrus: github.com/Sirupsen/logrus@v1.8.1: parsing go.mod:
	module declares its path as: github.com/sirupsen/logrus
	        but was required as: github.com/Sirupsen/logrus

Clean-up

• Ran go mod tidy to resolve new transitive dependencies
• Ran go mod vendor to update vendor directory

Testing

New tests cover the changes: no

Verified with make generic-rpm-integrated

...
+ cd /home/yinyic/go/src/github.com/aws/amazon-ecs-agent/BUILD
+ cd amazon-ecs-init-1.62.2
+ /usr/bin/rm -rf /home/yinyic/go/src/github.com/aws/amazon-ecs-agent/BUILDROOT/amazon-ecs-init-1.62.2-1.x86_64
+ exit 0
find RPMS/ -type f -exec cp {} . \;
touch .generic-rpm-integrated-done

Description for the changelog

Update dependencies to include security patches reported by dependabot for ecs-init

Licensing

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[fierlion]

glad to see the testing done. Thanks for this thorough work!