Sebastiaan van Stijn
58d9cdd2d9
vendor: github.com/sirupsen/logrus v1.10.1
...
Notable changes:
- Add bidirectional `log/slog` integration with a Logrus hook and `slog.Handler`.
- Add minimal, composable logging interfaces for individual log levels.
- Fix reentrant logging deadlocks and improve concurrency safety around formatters, hooks, and entries.
- Fix generic `Log`, `Logf`, `Logln`, and `LogFn` methods unexpectedly panicking at `PanicLevel`.
- Allow `Entry.Caller` to be set explicitly and preserved across derived entries.
- Improve `TextFormatter` performance and reduce allocations significantly.
- Improve common Logger and Entry hot paths and caller-reporting performance.
- Update `TextFormatter` handling for `[]byte`, debug/trace colors, and Windows ANSI terminals.
- Raise the minimum supported Go version to Go 1.23.
- Deprecate `Entry.HasCaller` and `MutexWrap`.
release-notes: https://github.com/sirupsen/logrus/releases/tag/v1.10.0
release-notes: https://github.com/sirupsen/logrus/releases/tag/v1.10.1
full diff: https://github.com/sirupsen/logrus/compare/v1.9.4...v1.10.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-19 11:34:53 +02:00
Paweł Gronowski
400b45f682
vendor: github.com/moby/go-archive v0.3.3
...
full diff: https://github.com/moby/go-archive/compare/v0.3.2...v0.3.3
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-08-05 19:11:05 +02:00
Sebastiaan van Stijn
a6014a702b
vendor: github.com/moby/go-archive v0.3.2
...
full diff: https://github.com/moby/go-archive/compare/v0.3.1...v0.3.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-31 18:53:47 +02:00
Sebastiaan van Stijn
0b50545471
vendor: github.com/moby/go-archive v0.3.1
...
full diff: https://github.com/moby/go-archive/compare/v0.3.0...v0.3.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-31 18:10:04 +02:00
Sebastiaan van Stijn
f6d6bede46
vendor: github.com/moby/go-archive v0.3.0
...
full diff: https://github.com/moby/go-archive/compare/v0.2.1...v0.3.0
v0.3.0
This release fixes CVE-2026-17106 / GHSA-hfg8-hc9c-6c3h, where a crafted
tar archive could use links to cause extraction operations to create or
overwrite files outside the intended destination directory.
The issue affected Unpack, UnpackLayer, Untar, UntarUncompressed, and the
ApplyLayer helpers. Users should upgrade and avoid extracting untrusted
archives with earlier versions.
What's Changed
* archive: harden tar extraction against path traversal
* archive: do not follow reparse points in chtimes
* archive: fix creation time updates on Windows
* archive: minor cleanups and godoc touch-up
* archive: RebaseArchiveEntries: fix archive path rebasing
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-30 19:17:27 +02:00
Paweł Gronowski and GitHub
775dd50364
Merge pull request #7111 from thaJeztah/bump_go_archive
...
vendor: github.com/moby/go-archive main / v0.3.0-dev
2026-07-27 22:13:35 +02:00
Sebastiaan van Stijn and GitHub
977f88900e
Merge pull request #7121 from thaJeztah/bump_go_connections
...
vendor: github.com/docker/go-connections v0.8.0
2026-07-27 21:26:50 +02:00
Sebastiaan van Stijn
f6dfb40875
vendor: github.com/moby/go-archive main / v0.3.0-dev
...
full diff: https://github.com/moby/go-archive/compare/v0.2.0...2ff9bfb8b2ee
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-27 21:24:52 +02:00
Paweł Gronowski
aa610f321d
vendor: github.com/moby/moby/client v0.5.1
...
full diff: https://github.com/moby/moby/compare/client/v0.5.0...client/v0.5.1
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-07-27 21:15:05 +02:00
Sebastiaan van Stijn
4e6e8fe5c8
vendor: github.com/docker/go-connections v0.8.0
...
- sockets: set socket permissions without overriding umask
- sockets: improve abstract Unix socket handling
- sockets: InmemSocket: add DialContext
- sockets: remove double error decoration
- sockets: test-enhancements and improve coverage
full diff: https://github.com/docker/go-connections/compare/v0.7.0...v0.8.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-25 19:47:59 +02:00
Sebastiaan van Stijn
349fad1635
vendor: github.com/moby/go-archive v0.2.1
...
full diff: https://github.com/moby/go-archive/compare/v0.2.0...v0.2.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-23 23:05:30 +02:00
Sebastiaan van Stijn
8fda97b545
vendor: github.com/moby/sys/user v0.4.1
...
- user: prevent possible DoS via unbounded parsing of user and group
database files in GHSA-mjcv-p78q-w5fw. This fixes a similar issue
as CVE-2026-47262 in containerd.
- user: prevent falling back to looking up numeric usernames
Improve handling of numeric user/group to prevent looking up numeric
values as usernames. This fixes a similar issue as [CVE-2026-46680] in
containerd.
- user: update minimum go version to go1.18
- assorted testing and linting fixes.
[CVE-2026-46680]: https://github.com/advisories/GHSA-fqw6-gf59-qr4w
full diff: https://github.com/moby/sys/compare/user/v0.4.0...user/v0.4.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-25 21:31:42 +02:00
Sebastiaan van Stijn
233cd4a643
vendor: github.com/moby/moby/api v1.55.0-rc.1, moby/client v0.5.0-rc.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 18:54:32 +02:00
Paweł Gronowski and GitHub
5b600d015d
Merge pull request #7047 from thaJeztah/bump_go_events
...
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
2026-06-12 18:44:35 +02:00
Sebastiaan van Stijn
9eff92c55a
vendor: github.com/klauspost/compress v1.18.6
...
full diff: https://github.com/klauspost/compress/compare/v1.18.5...v1.18.6
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:11:24 +02:00
Sebastiaan van Stijn
43f745b242
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
...
full diff: https://github.com/docker/go-events/compare/605354379745...dbf6103125a4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:07:53 +02:00
Sebastiaan van Stijn and GitHub
f4a4c1e2cf
Merge pull request #7038 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.24
2026-06-10 15:48:14 +02:00
Paweł Gronowski and GitHub
9c7701eb48
Merge pull request #7037 from thaJeztah/bump_otels
...
vendor: go.opentelemetry.io/otel v1.44.0, go.opentelemetry.io/contrib v0.69.0
2026-06-10 12:26:23 +02:00
Sebastiaan van Stijn
a9c82c0a9f
vendor: github.com/mattn/go-runewidth v0.0.24
...
- Optimize EastAsian RuneWidth with precomputed width table
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.23...v0.0.24
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:58:46 +02:00
Sebastiaan van Stijn
22d7ca46a3
vendor: go.opentelemetry.io/otel v1.44.0, go.opentelemetry.io/contrib v0.69.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:35:02 +02:00
Sebastiaan van Stijn
b601b2577a
vendor: github.com/moby/sys/sequential v0.7.0
...
- update minimum go version to 1.24
- use os.OpenFile with O_FILE_FLAG_SEQUENTIAL_SCAN on Go 1.26+
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:22:14 +02:00
Paweł Gronowski and GitHub
f285746704
Merge pull request #6947 from thaJeztah/bump_platforms
...
vendor: github.com/containerd/platforms v1.0.0-rc.4
2026-05-08 13:26:50 +02:00
Sebastiaan van Stijn
9bbe02848d
vendor: github.com/moby/swarmkit/v2 v2.1.2
...
full diff: https://github.com/moby/swarmkit/compare/v2.1.1...v2.1.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-23 21:39:53 +02:00
Sebastiaan van Stijn
b7f37e86da
vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2
...
- https://github.com/moby/moby/compare/api/v1.54.1...api/v1.54.2
- https://github.com/moby/moby/compare/client/v0.4.0...client/v0.4.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 16:49:58 +02:00
Sebastiaan van Stijn
beac1144a6
vendor: github.com/containerd/platforms v1.0.0-rc.4
...
full diff: https://github.com/containerd/platforms/compare/v1.0.0-rc.2...v1.0.0-rc.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:37:14 +02:00
Sebastiaan van Stijn
a75ab98e43
vendor: github.com/mattn/go-runewidth v0.0.23
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.22...v0.0.23
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:34:25 +02:00
Sebastiaan van Stijn
b9a052a987
vendor: github.com/docker/go-connections v0.7.0
...
Changes:
- raise minimum supported Go version to go1.23
- sockets: `ConfigureTransport`: prevent idle connections leaking FDs.
- sockets: implement `WithAdditionalUsersAndGroups` for windows.
- tlsconfig: add ChaCha20-Poly1305 cipher suites to align closer with stdlib defaults.
- nat: SortPortMap: accept `map[Port][]PortBinding` as argument.
- nat: add benchmarks, optimize, and improve errors.
- proxy: check for `net.ErrClosed` instead of string-matching "use of closed network connection".
Breaking changes:
- tlsconfig: deprecate `tlsconfig.SystemCertPool` in favor of stdlib `x509.SystemCertPool`.
- sockets: remove deprecated `DialPipe`, `GetProxyEnv`, `DialerFromEnvironment`
Dependency updates:
- update github.com/Microsoft/go-winio to go v0.6.2
- update golang.org/x/sys to v0.10.0
full diff: https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-16 00:20:20 +02:00
Sebastiaan van Stijn
5fca671ef4
vendor: github.com/mattn/go-runewidth v0.0.22
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.21...v0.0.22
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-03 12:53:08 +02:00
Sebastiaan van Stijn
42da40a605
vendor: moby/client and moby/api master
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-03 12:44:53 +02:00
Sebastiaan van Stijn
98d978df6b
vendor: go.opentelemetry.io/otel v1.42.0, otel/contrib v1.67.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-02 12:51:19 +02:00
Paweł Gronowski and GitHub
5e856302bf
Merge pull request #6899 from thaJeztah/bump_compress
...
vendor: github.com/klauspost/compress v1.18.5
2026-04-02 11:37:51 +02:00
Paweł Gronowski and GitHub
253dc62658
Merge pull request #6903 from thaJeztah/bump_jose
...
vendor: github.com/go-jose/go-jose/v4 v4.1.4
2026-04-02 11:36:52 +02:00
Sebastiaan van Stijn
091afa4957
vendor: github.com/go-jose/go-jose/v4 v4.1.4
...
Fixes CVE-2026-34986 / GHSA-78h2-9frx-2jm8
full diff: https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-02 02:39:43 +02:00
Sebastiaan van Stijn
5efed5fa30
vendor: github.com/klauspost/compress v1.18.5
...
- zstd: Fix crash when changing encoder dictionary with same ID
full diff: https://github.com/klauspost/compress/compare/v1.18.4...v1.18.5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-01 00:38:50 +02:00
Sebastiaan van Stijn
cd9e5ae84f
vendor: github.com/moby/patternmatcher v0.6.1
...
- fix panic / nil pointer dereference on invalid patterns
full diff: https://github.com/moby/patternmatcher/compare/v0.6.0...v0.6.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-01 00:24:02 +02:00
Sebastiaan van Stijn
560db7d451
vendor: github.com/mattn/go-runewidth v0.0.21
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.20...v0.0.21
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-03-17 18:36:02 +01:00
Paweł Gronowski
206fc8c165
vendor: github.com/moby/moby/client v0.3.0
...
full diff: https://github.com/moby/moby/compare/client/v0.2.3-rc.1...client/v0.3.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-03-05 15:15:44 +01:00
Paweł Gronowski
0bf060f777
vendor: github.com/moby/moby/client v0.2.3-rc.1
...
full diff: https://github.com/moby/moby/client/compare/52dc67c0df94...v0.2.3-rc.1
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-02-27 20:34:37 +01:00
Paweł Gronowski
139b58d7f4
vendor: github.com/moby/moby/api v1.54.0-rc.1
...
full diff: https://github.com/moby/moby/api/compare/52dc67c0df94...v1.54.0-rc.1
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-02-27 20:34:19 +01:00
Sebastiaan van Stijn
8eedbdc6a8
vendor: moby/api v1.54.0-dev, moby/client v0.2.3-dev
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-02-27 18:16:02 +01:00
Sebastiaan van Stijn
cd070a5ed5
vendor: github.com/mattn/go-runewidth v0.0.20
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.19...v0.0.20
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-02-27 17:28:18 +01:00
Paweł Gronowski and GitHub
9e10dc3dca
Merge pull request #6824 from thaJeztah/bump_compress2
...
vendor: github.com/klauspost/compress v1.18.4
2026-02-27 15:39:27 +00:00
Sebastiaan van Stijn
caa8a50468
vendor: github.com/klauspost/compress v1.18.4
...
full diff: https://github.com/klauspost/compress/compare/v1.18.3...v1.18.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-02-27 15:23:55 +01:00
Sebastiaan van Stijn
fbd0e7f7c4
vendor: go.opentelemetry.io/otel v1.40.0
...
Includes fixes for [GHSA-9h8m-3fm2-qjrq] / [CVE-2026-24051] on macOS
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-02-27 15:16:34 +01:00
Paweł Gronowski
9c9ec73588
vendor: github.com/moby/moby/client v0.2.2
...
full diff: https://github.com/moby/moby/client/compare/v0.2.2-rc.2...v0.2.2
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-01-26 20:15:30 +01:00
Paweł Gronowski
bab3e81e1d
vendor: github.com/moby/moby/api v1.53.0
...
full diff: https://github.com/moby/moby/api/compare/v1.53.0-rc.2...v1.53.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-01-26 20:15:02 +01:00
Sebastiaan van Stijn
771660a17e
vendor: github.com/go-viper/mapstructure/v2 v2.5.0
...
full diff: https://github.com/go-viper/mapstructure/compare/v2.4.0...v2.5.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-01-26 12:32:10 +01:00
Sebastiaan van Stijn
c8841ac1b2
vendor: moby/api v1.53.0-rc.2, moby/client v0.2.2-rc.2
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-01-19 12:55:39 +01:00
Sebastiaan van Stijn
16873675bd
vendor: github.com/sirupsen/logrus v1.9.4
...
Notable changes:
- go.mod: update minimum supported go version to v1.17.
- go.mod: bump up dependencies.
- Touch-up godoc and add "doc" links.
- README: fix links, grammar, and update examples.
- Add GNU/Hurd support.
- Add WASI wasip1 support.
- Remove uses of deprecated `ioutil` package.
- CI: update actions and golangci-lint.
- CI: remove appveyor, add macOS.
full diff: https://github.com/sirupsen/logrus/compare/v1.9.3...v1.9.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-01-15 11:45:03 +01:00
Sebastiaan van Stijn
3ce8f1d80c
vendor: github.com/moby/go-archive v0.2.0
...
- remove aliases for deprecated types and functions
- chrootarchive: remove redundant "init" mitigation for CVE-2019-14271
- xattr: Fix OS matching
full diff: https://github.com/moby/go-archive/compare/v0.1.0...v0.2.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-12-23 18:11:31 +01:00