[0.5] gopathrs: close the fd after dup in openat2

CHANGELOG.md

@@ -14,6 +14,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
   denies `openat2(2)` then we would return that error rather than falling back
   to the `O_PATH` resolver. To resolve this issue, we no longer cache the
   result if `openat2(2)` was successful, only if there was an error.
+- A file descriptor leak in our `openat2` wrapper (when doing the necessary
+  `dup` for `RESOLVE_IN_ROOT`) has been removed.
 
 ## [0.5.1] - 2025-10-31 ##
 

pathrs-lite/openat2_linux.go

@@ -41,6 +41,7 @@ func openat2(dir fd.Fd, path string, how *unix.OpenHow) (*os.File, error) {
 			if err != nil {
 				return nil, err
 			}
+			_ = file.Close()
 			file = newFile
 		}
 	}