diff --git a/Dockerfile b/Dockerfile
index a594358aee4..84c0600e543 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,7 +19,7 @@
 
 # Basic deps
 ARG CONTAINERD_VERSION=v2.0.0-rc.5
-ARG RUNC_VERSION=v1.1.15
+ARG RUNC_VERSION=v1.2.0
 ARG CNI_PLUGINS_VERSION=v1.5.1
 
 # Extra deps: Build
diff --git a/hack/build-integration-canary.sh b/hack/build-integration-canary.sh
index 32fdfb3d249..b2d6f4d9ba3 100755
--- a/hack/build-integration-canary.sh
+++ b/hack/build-integration-canary.sh
@@ -28,10 +28,7 @@ readonly root
 # "Blacklisting" here means that any dependency which name is blacklisted will be left untouched, at the version
 # currently pinned in the Dockerfile.
 # This is convenient so that currently broken alpha/beta/RC can be held back temporarily to keep the build green
-
-# Currently pinned, see:
-# - https://github.com/containerd/nerdctl/pull/3153
-blacklist=(runc)
+blacklist=()
 
 # List all the repositories we depend on to build and run integration tests
 dependencies=(