Fix CI after dependency updates

Author: ZelAnton

CHANGELOG.md

@@ -14,7 +14,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 -
 
 ### Fixed
--
+
+- Update the bundled ProcessKit-rs core to 3.3.1 so restricted or legacy Linux
+  cgroup teardown reports a refused thaw instead of returning success while
+  leaving the process group frozen.
 
 ## [1.5.0] - 2026-08-08
 

Cargo.toml

@@ -58,6 +58,8 @@ pyo3-async-runtimes = { version = "0.29", features = ["tokio-runtime"] }
 # 3.3.0 is a deliberate compatibility bump after reviewing its additive
 # `ProcessGroup` adoption/statistics surface and `PipelineSession` auto-trait
 # changes; none of that new crate API is exposed by this binding.
+# 3.3.1 keeps that public API unchanged and fixes restricted/legacy Linux
+# cgroup teardown reporting when the kernel refuses to thaw the group.
 #
 # Features are listed EXPLICITLY with `default-features = false`, so a change to
 # the crate's default set can never silently alter our public surface:

docs/changelog.md

@@ -17,7 +17,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 -
 
 ### Fixed
--
+
+- Update the bundled ProcessKit-rs core to 3.3.1 so restricted or legacy Linux
+  cgroup teardown reports a refused thaw instead of returning success while
+  leaving the process group frozen.
 
 ## [1.5.0] - 2026-08-08
 

docs/llms-full.txt

@@ -6239,7 +6239,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 -
 
 ### Fixed
--
+
+- Update the bundled ProcessKit-rs core to 3.3.1 so restricted or legacy Linux
+  cgroup teardown reports a refused thaw instead of returning success while
+  leaving the process group frozen.
 
 ## [1.5.0] - 2026-08-08
 

tests/test_introspection.py

@@ -61,7 +61,7 @@ def test_host_containment_matches_a_real_group() -> None:
     assert report.mechanism in {"job_object", "cgroup_v2", "process_group"}
     assert report.soft_stop_scope in {"whole_tree", "opt_in_members", "none"}
     assert report.parent_death_cleanup in {"whole_tree", "direct_child_only", "none"}
-    assert report.crate_version == "3.3.0"
+    assert report.crate_version == "3.3.1"
     assert "HostContainment(" in repr(report)
 
     with ProcessGroup() as group: