@@ -3,6 +3,7 @@ package daemon

 import (

 	"context"

 	"errors"

+	"slices"

 	"github.com/containerd/log"

 	"github.com/moby/moby/api/types/container"

@@ -42,10 +43,8 @@ func registerDeviceDriver(name string, d *deviceDriver) {

 func getFirstAvailableVendor(vendorList []string) (string, error) {

 	knownVendors := []string{"nvidia.com", "amd.com"}

 	for _, vendor := range knownVendors {

-		for _, available := range vendorList {

-			if vendor == available {

-				return vendor, nil

-			}

+		if slices.Contains(vendorList, vendor) {

+			return vendor, nil

 		}

 	}

 	return "", errors.New("no known GPU vendor found")

@@ -685,7 +685,7 @@ func (c *client) processEventStream(ctx context.Context, ns string) {

 			case *apievents.TaskDelete:

 				c.logger.WithFields(log.Fields{

 					"topic":     ev.Topic,

-					"type":      reflect.TypeOf(t),

+					"type":      reflect.TypeFor[*apievents.TaskDelete](),

 					"container": t.ContainerID,

 				}).Info("received task-delete event from containerd")

 			default:

@@ -47,7 +47,7 @@ func allocatePort(pa *portallocator.OSAllocator, bnd types.PortBinding) (types.P

 	// Try up to maxAllocatePortAttempts times to get a port that's not already allocated.

 	var allocatedPort int

 	var err error

-	for i := 0; i < maxAllocatePortAttempts; i++ {

+	for i := range maxAllocatePortAttempts {

 		allocatedPort, err = pa.AllocateHostPort(bnd.HostIP, bnd.Proto, int(bnd.HostPort), int(bnd.HostPortEnd))

 		if err == nil {

 			break

@@ -67,7 +67,7 @@ func (n *Network) startResolver() {

 		for _, subnet := range hnsresponse.Subnets {

 			if subnet.GatewayAddress != "" {

-				for i := 0; i < 3; i++ {

+				for range 3 {

 					resolver := NewResolver(subnet.GatewayAddress, true, n)

 					log.G(context.TODO()).Debugf("Binding a resolver on network %s gateway %s", n.Name(), subnet.GatewayAddress)

 					n.dnsCompartment = hnsresponse.DNSServerCompartment

@@ -55,7 +55,7 @@ func GenerateFromModel[T any](options Generic) (T, error) {

 	modType := reflect.TypeFor[T]()

-	isPtr := modType.Kind() == reflect.Ptr

+	isPtr := modType.Kind() == reflect.Pointer

 	// If the model is of pointer type, we need to dereference for New.

 	resType := modType

@@ -430,18 +430,14 @@ func setResourcesInSpec(c *container.Container, s *specs.Spec, isHyperV bool) {

 			leftoverNanoCPUs := c.HostConfig.NanoCPUs % 1e9

 			if leftoverNanoCPUs != 0 {

 				cpuCount++

-				cpuMaximum = uint16(c.HostConfig.NanoCPUs / int64(cpuCount) / (1e9 / 10000))

-				if cpuMaximum < 1 {

+				cpuMaximum = max(uint16(c.HostConfig.NanoCPUs/int64(cpuCount)/(1e9/10000)),

 					// The requested NanoCPUs is so small that we rounded to 0, use 1 instead

-					cpuMaximum = 1

-				}

+					1)

 			}

 		} else {

-			cpuMaximum = uint16(c.HostConfig.NanoCPUs / int64(runtime.NumCPU()) / (1e9 / 10000))

-			if cpuMaximum < 1 {

+			cpuMaximum = max(uint16(c.HostConfig.NanoCPUs/int64(runtime.NumCPU())/(1e9/10000)),

 				// The requested NanoCPUs is so small that we rounded to 0, use 1 instead

-				cpuMaximum = 1

-			}

+				1)

 		}

 	}

@@ -538,9 +534,9 @@ func readCredentialSpecFile(id, root, location string) (string, error) {

 func setupWindowsDevices(devices []containertypes.DeviceMapping) ([]specs.WindowsDevice, error) {

 	var specDevices []specs.WindowsDevice

 	for _, deviceMapping := range devices {

-		if strings.HasPrefix(deviceMapping.PathOnHost, "class/") {

+		if after, ok := strings.CutPrefix(deviceMapping.PathOnHost, "class/"); ok {

 			specDevices = append(specDevices, specs.WindowsDevice{

-				ID:     strings.TrimPrefix(deviceMapping.PathOnHost, "class/"),

+				ID:     after,

 				IDType: "class",

 			})

 		} else {

@@ -24,7 +24,7 @@ func init() {

 	//

 	// Note: copystructure is archived (https://github.com/mitchellh/copystructure)

 	// and won't receive upstream fixes for this limitation.

-	copystructure.Copiers[reflect.TypeOf(netip.Addr{})] = func(v any) (any, error) {

+	copystructure.Copiers[reflect.TypeFor[netip.Addr]()] = func(v any) (any, error) {

 		return v.(netip.Addr), nil

 	}

 }

@@ -84,7 +84,6 @@ func TestWindowsDevices(t *testing.T) {

 	}

 	for _, d := range testData {

-		d := d

 		t.Run(d.doc, func(t *testing.T) {

 			t.Parallel()

 			ctx := testutil.StartSpan(ctx, t)

@@ -348,7 +348,7 @@ func TestWindowsNetworkEndpointManagement(t *testing.T) {

 	const numContainers = 3

 	containerIDs := make([]string, numContainers)

-	for i := 0; i < numContainers; i++ {

+	for i := range numContainers {

 		ctrName := fmt.Sprintf("endpoint-ctr-%d", i)

 		id := container.Run(ctx, t, c,

 			container.WithName(ctrName),

@@ -364,7 +364,7 @@ func TestWindowsNetworkEndpointManagement(t *testing.T) {

 		"Expected %d containers, got %d", numContainers, len(netInfo.Network.Containers))

 	// Verify each container has network connectivity to others

-	for i := 0; i < numContainers-1; i++ {

+	for i := range numContainers - 1 {

 		targetName := fmt.Sprintf("endpoint-ctr-%d", i)

 		pingCmd := []string{"ping", "-n", "1", "-w", "3000", targetName}