Upgrade QEMU to 10.1.3 / fix tar+fcntl+openat2 issue on musl aarch64

[chadlwilson]

This PR augments #283 in order to

• Upgrade QEMU to 10.1.3
• Bring in the latest upstream qemu patches from aports which fixes Failed to run tar on aarch64 when using QEMU compiled by tonistiigi/binfmt #285
  • see there for detail - TL;DR glibc compiled gnutar is broken via QEMU compiled for musl aarch64 after the fix for CVE-2025-45582
  • this issue is currently breaking buildkit/buildx cross-arch aarch64 builds of images such as almalinux:9/10 ubi:9/10 etc when using tar
  • QEMU upstream issue
  • aports/qemu patch in question for 3.23 is this one cherry-picked from this MR

Other Notes

As a side effect to make this happen

• Upgrades to Alpine 3.23 and go 1.25 (tests left as-is)
• Fixes an issue with bringing in crossarch busybox-static on Alpine 3.23
  • older approach no longer works and will give execve format error during busybox triggers, since apk tries to upgrade/replace all existing installs with the new arch; breaking the crossarch builder stage
  • uses an alternate apk --root to install the cross-arch busybox-static instead
• Upgrades golanglint-ci to v2 (used golangci-lint migrate to migrate config as-is)

None of the direct-execve patches have been altered from their 10.0 versions.

Testing

Tests/builds all passing on my fork at https://github.com/chadlwilson/binfmt/actions/runs/21165537732

[chadlwilson]

FWIW i tried upgrading the tests golang version and pkg dependencies but there is an issue with the scheduling tests that needs some work so I dropped it to keep this more focused

I also tried upgrading the main vendored dependencies which also worked fine but also left aside due to distracting from core goal.

[chadlwilson]

Any thoughts on this @tonistiigi or @crazy-max - now that the tests are all passing? 🙏

[ggjulio]

@tonistiigi @crazy-max ? 🙏