falco/0.40.0 package update (#40664)

<p align="center">
<img
src="https://raw.githubusercontent.com/wolfi-dev/.github/b535a42419ce0edb3c144c0edcff55a62b8ec1f8/profile/wolfi-logo-light-mode.svg"
/>
</p>

---------

Signed-off-by: wolfi-bot <[email protected]>
Co-authored-by: wolfi-bot <[email protected]>
Co-authored-by: Daniel Watkins <[email protected]>

Author: 3 people

falco.yaml

@@ -1,7 +1,7 @@
 package:
   name: falco
-  version: 0.39.2 # on update check if we can remove the 'Patch falcosecurity-libs' pipeline below if https://github.com/falcosecurity/libs/pull/2079 is merged
-  epoch: 2
+  version: "0.40.0"
+  epoch: 0
   description: Cloud Native Runtime Security
   copyright:
     - license: Apache-2.0
@@ -72,7 +72,7 @@ pipeline:
     with:
       repository: https://github.com/falcosecurity/falco
       tag: ${{package.version}}
-      expected-commit: 89a024bfdfd8bedba4aaebc21a6426cc24010520
+      expected-commit: ce4b4408988dc0be4aaff4bb06aa184ee1f14da3
       recurse-submodules: true
 
   - uses: patch
@@ -109,19 +109,6 @@ pipeline:
             -DFALCOSECURITY_SHARED_LIBS_VERSION=0   \
             -DFALCOSECURITY_SHARED_LIBS_SOVERSION=0 \
             ..
-      - name: Patch falcosecurity-libs
-        runs: |
-          # add appropriate include paths to fix gvisor on x86_64
-          # lots of good discussion and help from an upstream maintainer (@LucaGuerra) https://github.com/wolfi-dev/os/pull/26622#discussion_r1768659440
-          sed -i '/set_property(TARGET scap_engine_gvisor_o PROPERTY POSITION_INDEPENDENT_CODE ON)/a \
-          target_include_directories( \
-              scap_engine_gvisor_o \
-              PRIVATE \
-                  $<BUILD_INTERFACE:${CMAKE_CURRENT_BINARY_DIR}> \
-                  $<BUILD_INTERFACE:${LIBS_DIR}> \
-                  $<BUILD_INTERFACE:${LIBS_DIR}/userspace> \
-                  $<BUILD_INTERFACE:${PROJECT_BINARY_DIR}> \
-          )' falcosecurity-libs-repo/falcosecurity-libs-prefix/src/falcosecurity-libs/userspace/libscap/engine/gvisor/CMakeLists.txt
       - runs: |
           make falco -j$(nproc)
           make install PREFIX="/usr" DESTDIR="${{targets.destdir}}"

falco/tbb.patch

@@ -1,13 +1,13 @@
 diff --git a/userspace/falco/CMakeLists.txt b/userspace/falco/CMakeLists.txt
-index 13849e6f..43bbd7fd 100644
+index a67d8ab4..a8d627ab 100644
 --- a/userspace/falco/CMakeLists.txt
 +++ b/userspace/falco/CMakeLists.txt
-@@ -69,7 +69,7 @@ set(FALCO_INCLUDE_DIRECTORIES
+@@ -68,7 +68,7 @@ set(FALCO_INCLUDE_DIRECTORIES
+ )
 
  set(FALCO_DEPENDENCIES cxxopts)
- 
 -set(FALCO_LIBRARIES falco_engine sinsp yaml-cpp)
 +set(FALCO_LIBRARIES falco_engine sinsp yaml-cpp "${JSONCPP_LIB}" "${TBB_LIB}" "${RE2_LIB}")
 
- if(NOT WIN32)
-        target_sources(falco_application PRIVATE outputs_program.cpp outputs_syslog.cpp)
+ if(USE_JEMALLOC)
+        list(APPEND FALCO_DEPENDENCIES jemalloc)