Paweł Gronowski
48baf6c322
Merge pull request #7306 from thaJeztah/bump_x_deps
...
vendor: update golang.org/x/* deps
2026-09-14 18:05:00 +02:00
Paweł Gronowski
47a06aa077
Merge pull request #7293 from thaJeztah/bump_uax29
...
vendor: github.com/clipperhouse/uax29/v2 v2.7.0
2026-09-14 18:03:28 +02:00
Sebastiaan van Stijn
60dffc9412
vendor: golang.org/x/net v0.59.0
...
Notable changes:
- all: upgrade go directive to at least 1.26.0
- http2: deprecate Transport and Server
- http2: use IDNA Lookup profile, not raw Punycode translation
- addresses https://github.com/golang/go/issues/81010
- internal/httpcommon: remove Host header from server request
full diff: https://github.com/golang/net/compare/v0.58.0...v0.59.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-14 17:31:14 +02:00
Sebastiaan van Stijn
b0a6803f9b
vendor: golang.org/x/term v0.46.0
...
- all: upgrade go directive to at least 1.26.0
- term: process bytes returned with a read error
- fixes: x/term: ReadLine discards data returned with io.EOF
full diff: https://github.com/golang/term/compare/v0.45.0...v0.46.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-14 17:30:22 +02:00
Sebastiaan van Stijn
f90c2894a8
vendor: golang.org/x/text v0.42.0
...
full diff: https://github.com/golang/text/compare/v0.41.0...v0.42.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-14 17:29:43 +02:00
Sebastiaan van Stijn
ed4de7d484
vendor: golang.org/x/time v0.16.0
...
- all: upgrade go directive to at least 1.26.0
full diff: https://github.com/golang/time/compare/v0.15.0...v0.16.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-14 17:28:24 +02:00
Sebastiaan van Stijn
74b7f5cf27
vendor: golang.org/x/mod v0.41.0
...
- all: upgrade go directive to at least 1.26.0
full diff: https://github.com/golang/mod/compare/v0.40.0...v0.41.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-14 17:27:47 +02:00
Sebastiaan van Stijn
824b68911b
vendor: golang.org/x/sys v0.48.0
...
- cpu: add ppc64le POWER10 detection
- cpu: add basic support for GOARCH=sparc64
- cpu: disable AVX+ on netbsd/amd64
relates to "runtime: async preemption corrupts AVX (YMM) state on netbsd/amd64"
- internal/cpu: detect RISC-V VLENB when the vector extension is available
- unix: add missing HWTSTAMP_* constants
- unix: add pidfd constants and type
- unix: add IoctlPidfdInfo
- unix: add IPMI interface
- unix: align Ifreq so its union accessors cannot fault
- unix: stop generating sparc termbits from the generic header
- windows: add SO_SNDTIMEO constant for socket options
full diff: https://github.com/golang/sys/compare/v0.47.0...v0.48.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-14 17:27:10 +02:00
Sebastiaan van Stijn
dbad17f16f
vendor: golang.org/x/sync v0.23.0
...
- all: upgrade go directive to at least 1.26.0
- semaphore: panic on negative capacity
full diff: https://github.com/golang/sync/compare/v0.22.0...v0.23.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-14 17:26:27 +02:00
Sebastiaan van Stijn
7b322e4dc2
vendor: github.com/moby/sys/userns v0.2.1
...
userns: fix user-namespace detection on OpenVZ, where namespace inode
numbers are virtualized.
full diff: https://github.com/moby/sys/userns/compare/v0.2.0...v0.2.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-08 20:27:04 +02:00
Sebastiaan van Stijn
676ca0067b
vendor: github.com/clipperhouse/uax29/v2 v2.7.0
...
- Adds Unicode 17 support
- Fast paths for ASCII
- ANSI escape sequences as grapheme clusters
- Implement UTF-8 C1 control sequences
- Implement 8-bit ANSI
Breaking change
The returned iterator type from FromString() and FromBytes() is now a pointer.
This will not present a problem if you are just using it in the typical way,
which is assigning to a local variable and iterating.
If you are embedding this iterator into another object, and therefore declaring
its type, this change might break your compilation. You’ll need to change to a
pointer type. Apologies if so — this seems like a small enough change that a
v3 would be a bit much.
full diff: https://github.com/clipperhouse/uax29/compare/v2.2.0...v2.7.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-07 09:21:26 +02:00
Paweł Gronowski
d306b9d600
Merge pull request #7287 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.29
2026-09-04 14:40:50 +02:00
Sebastiaan van Stijn
e914d34ac3
vendor: tags.cncf.io/container-device-interface v1.1.1
...
removes some transitive dependencies
full diff: https://github.com/cncf-tags/container-device-interface/compare/v1.1.0...v1.1.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-04 11:35:43 +02:00
Sebastiaan van Stijn
c50ce17c19
vendor: github.com/go-jose/go-jose/v4 v4.1.5
...
Fixed security issues
- cipher/cbc_hmac: don't panic on empty ciphertext
- cipher/cbc_hmac: don't panic on invalid key
- json: limit stack depth
- jwt: reject out-of-range NumericDate values
- Check alg against pubkey curve during verify.
- Reject malformed Ed25519 JWKs
- jws: choose verification key per-signature
Changed
- Verify OpaqueSigner's Public() return is public
- jws: skip signature on ErrJWKSKidNotFound
- Handle JWE JSON without protected header
- jws: don't strip internal whitespace before parsing JSON
- jws: fewer calls to OpaqueSigner.Public()
- Return a specific error when parsing empty string
- Reject typed nil at Verify time
full diff: https://github.com/go-jose/go-jose/compare/v4.1.4...v4.1.5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-03 23:40:55 +02:00
Sebastiaan van Stijn
441acb383d
vendor: github.com/mattn/go-runewidth v0.0.29
...
- Wrap: do not panic when the width is zero
- CreateLUT: rebuild the table after a DefaultCondition flag change
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.28...v0.0.29
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-03 23:35:43 +02:00
Paweł Gronowski
d5ea3bdc8a
vendor: github.com/moby/moby/client v0.6.0
...
full diff: https://github.com/moby/moby/compare/b9b109e4d341...client/v0.6.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-09-03 23:01:04 +02:00
Paweł Gronowski
7cf09ba485
vendor: github.com/moby/moby/api v1.56.0
...
full diff: https://github.com/moby/moby/compare/b9b109e4d341...api/v1.56.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-09-03 23:00:14 +02:00
Paweł Gronowski
91fc8ad4a2
vendor: github.com/moby/moby/client v0.5.2-dev (b9b109e4d341)
...
full diff: https://github.com/moby/moby/compare/client/v0.5.1...b9b109e4d341
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-09-03 20:52:14 +02:00
Paweł Gronowski
cb6c7bc03f
vendor: github.com/moby/moby/api v1.56.0-dev (b9b109e4d341)
...
full diff: https://github.com/moby/moby/compare/api/v1.55.0...b9b109e4d341
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-09-03 20:40:38 +02:00
Sebastiaan van Stijn
3cb9f1cb86
vendor: github.com/fvbommel/sortorder v1.2.0
...
full diff: https://github.com/fvbommel/sortorder/compare/v1.1.0...v1.2.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-02 09:41:54 +02:00
Paweł Gronowski
cef1e66947
Merge pull request #7256 from thaJeztah/bump_go_events
...
vendor: github.com/docker/go-events v0.1.0
2026-08-28 21:50:23 +02:00
Paweł Gronowski
52611d0d6a
Merge pull request #7257 from thaJeztah/bump_compress
...
vendor: github.com/klauspost/compress v1.19.2
2026-08-28 21:50:14 +02:00
Sebastiaan van Stijn
76b505b054
vendor: github.com/klauspost/compress v1.19.2
...
full diff: https://github.com/klauspost/compress/compare/v1.18.7...v1.19.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-28 20:36:33 +02:00
Sebastiaan van Stijn
65b90d8888
vendor: github.com/docker/go-events v0.1.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-28 20:33:30 +02:00
Sebastiaan van Stijn
0f0e561a3f
vendor: github.com/docker/docker-credential-helpers v0.9.9
...
full diff: https://github.com/docker/docker-credential-helpers/compare/v0.9.8...v0.9.9
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-28 20:31:43 +02:00
Paweł Gronowski
ff3273f3e4
Merge pull request #7243 from thaJeztah/bump_go_metrics
...
vendor: github.com/docker/go-metrics v0.1.0
2026-08-27 18:50:25 +02:00
Paweł Gronowski
6fccf35355
Merge pull request #7246 from thaJeztah/bump_userns
...
vendor: github.com/moby/sys/userns v0.2.0
2026-08-27 18:50:15 +02:00
Sebastiaan van Stijn
b17df8fea3
vendor: github.com/docker/go-connections v0.8.1
...
fixes support for BSD variants
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-27 17:06:54 +02:00
Sebastiaan van Stijn
dc47c19e55
vendor: github.com/moby/sys/userns v0.2.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-27 17:06:09 +02:00
Sebastiaan van Stijn
3cd22ff935
vendor: github.com/docker/go-metrics v0.1.0
...
- Add support for creating timers with custom histogram buckets.
- Update `github.com/prometheus/client_golang` to v1.20.5.
- Update the minimum supported Go version to Go 1.21.
- Improve HTTP handler instrumentation, including minor performance improvements and cleanup.
- Avoid mutating shared label maps when creating namespaces and metrics.
- Encapsulate the Prometheus collector used by `HTTPMetric`.
- Improve package and API documentation.
- Update `golang.org/x/sys` and other dependencies.
full diff: https://github.com/docker/go-metrics/compare/v0.0.1...v0.1.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-27 17:05:24 +02:00
Paweł Gronowski
45f589590b
Merge pull request #7248 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.28
2026-08-27 14:10:47 +02:00
Paweł Gronowski
6b8da05715
Merge pull request #7245 from thaJeztah/bump_otels
...
vendor: go.opentelemetry.io/otel v1.46.0, go.opentelemetry.io/contrib v0.71.0
2026-08-27 14:10:18 +02:00
Paweł Gronowski
65ad909cde
Merge pull request #7244 from thaJeztah/bump_logrus
...
vendor: github.com/sirupsen/logrus v1.10.2
2026-08-27 14:10:06 +02:00
Paweł Gronowski
52eb28a512
Merge pull request #7242 from thaJeztah/bump_platforms
...
vendor: github.com/containerd/platforms v1.0.0-rc.5
2026-08-27 14:09:02 +02:00
Sebastiaan van Stijn
bb63125969
vendor: go.opentelemetry.io/otel v1.46.0, go.opentelemetry.io/contrib v0.71.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-27 01:56:22 +02:00
Sebastiaan van Stijn
2a24c3c77d
vendor: google.golang.org/genproto/* da73d73af1c5
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-27 01:56:22 +02:00
Sebastiaan van Stijn
4f7a1841ba
vendor: github.com/mattn/go-runewidth v0.0.28
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.24...v0.0.28
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-26 17:08:29 +02:00
Sebastiaan van Stijn
ef48c25aed
vendor: github.com/sirupsen/logrus v1.10.2
...
removes some transitive dependencies
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-26 16:48:02 +02:00
Sebastiaan van Stijn
f2514827f4
vendor: github.com/containerd/platforms v1.0.0-rc.5
...
full diff: https://github.com/containerd/platforms/compare/v1.0.0-rc.4...v1.0.0-rc.5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-26 16:41:30 +02:00
Sebastiaan van Stijn
f8d6265672
vendor: google.golang.org/protobuf v1.36.12
...
full diff: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.11...v1.36.12
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-26 16:20:43 +02:00
Sebastiaan van Stijn
d6041d1abc
vendor: google.golang.org/grpc v1.83.2
...
contains a fix for [GHSA-2v4p-qf9q-27wj] and other vulnerabilities
fixed in v1.83.0, v1.83.1
full diff: https://github.com/grpc/grpc-go/compare/v1.82.1...v1.83.2
[GHSA-2v4p-qf9q-27wj]: https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-26 12:25:17 +02:00
Sebastiaan van Stijn
bf6f62cc7c
Merge pull request #7195 from thaJeztah/modern_jsonschema
...
cli/compose/schema: migrate to github.com/santhosh-tekuri/jsonschema/v6
2026-08-25 21:55:32 +02:00
Paweł Gronowski
376f03c858
Merge pull request #7192 from thaJeztah/bump_x_deps
...
vendor: update golang.org/x/* dependencies
2026-08-25 21:50:33 +02:00
Sebastiaan van Stijn
eed270f656
cli/compose/schema: migrate to github.com/santhosh-tekuri/jsonschema/v6
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-24 12:53:45 +02:00
Sebastiaan van Stijn
58d9cdd2d9
vendor: github.com/sirupsen/logrus v1.10.1
...
Notable changes:
- Add bidirectional `log/slog` integration with a Logrus hook and `slog.Handler`.
- Add minimal, composable logging interfaces for individual log levels.
- Fix reentrant logging deadlocks and improve concurrency safety around formatters, hooks, and entries.
- Fix generic `Log`, `Logf`, `Logln`, and `LogFn` methods unexpectedly panicking at `PanicLevel`.
- Allow `Entry.Caller` to be set explicitly and preserved across derived entries.
- Improve `TextFormatter` performance and reduce allocations significantly.
- Improve common Logger and Entry hot paths and caller-reporting performance.
- Update `TextFormatter` handling for `[]byte`, debug/trace colors, and Windows ANSI terminals.
- Raise the minimum supported Go version to Go 1.23.
- Deprecate `Entry.HasCaller` and `MutexWrap`.
release-notes: https://github.com/sirupsen/logrus/releases/tag/v1.10.0
release-notes: https://github.com/sirupsen/logrus/releases/tag/v1.10.1
full diff: https://github.com/sirupsen/logrus/compare/v1.9.4...v1.10.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-19 11:34:53 +02:00
Sebastiaan van Stijn
1612f4c767
vendor: golang.org/x/mod v0.40.0
...
full diff: https://github.com/golang/mod/compare/v0.39.0...v0.40.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-15 14:44:44 +02:00
Sebastiaan van Stijn
cf53a284da
vendor: golang.org/x/net v0.58.0
...
full diff: https://github.com/golang/net/compare/v0.57.0...v0.58.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-15 14:43:34 +02:00
Sebastiaan van Stijn
0da5f45651
vendor: golang.org/x/text v0.41.0
...
full diff: https://github.com/golang/text/compare/v0.40.0...v0.41.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-15 14:42:34 +02:00
Sebastiaan van Stijn
ce15202968
vendor: golang.org/x/mod v0.39.0
...
full diff: https://github.com/golang/mod/compare/v0.38.0...v0.39.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-15 14:41:51 +02:00
Paweł Gronowski
400b45f682
vendor: github.com/moby/go-archive v0.3.3
...
full diff: https://github.com/moby/go-archive/compare/v0.3.2...v0.3.3
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-08-05 19:11:05 +02:00