diff --git a/Pkgfile b/Pkgfile
index bac9d69e3..6cd34fb16 100644
--- a/Pkgfile
+++ b/Pkgfile
@@ -146,10 +146,10 @@ vars:
   openssl_sha512: 5ae47bf1aed2740a33ba5df7dc7345a6738aa6bfa3c9c4de5e51742485e24b25192988d7a2c1b8201ef70056ad8abd0ca78b3d55abe24c0b0373d83b47ed9b74
 
   # renovate: datasource=github-tags depName=opencontainers/runc
-  runc_version: v1.2.0
-  runc_ref: 0b9fa21be2bcba45f6d9d748b4bcf70cfbffbc19
-  runc_sha256: 71b8e206563be9abcb727f8fa0405b8efa7b381e53fdc88b84ac02f85ea45809
-  runc_sha512: 48ce9145bc194beb69270cd3bbafe1888b10885e76775ce1bad3dc28823ab3b6dc85c1b0badb501dea6f6cd630156b3f79c4e781af82135d85c71e7eedcded85
+  runc_version: v1.2.1
+  runc_ref: d7735e388ef5eecbd60d93bfbe5afe0f3fbc8a6b
+  runc_sha256: bb03d108841f265392b0527a1768d53e6ece325389015e6f2567349bdaa5c5ff
+  runc_sha512: 933976d26834cd7ef159e6c673dfa88185c9467efb1642a2f44feb74bf9d3915ddf35c2d211504778e574a310806a64ca1b811694b444f9a179a66c1fdc3b52c
 
   # renovate: datasource=git-tags extractVersion=^tag-(?<version>.*)$ depName=git://repo.or.cz/socat.git
   socat_version: 1.8.0.1