Sebastiaan van Stijn
0b50545471
vendor: github.com/moby/go-archive v0.3.1
...
full diff: https://github.com/moby/go-archive/compare/v0.3.0...v0.3.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-31 18:10:04 +02:00
Paweł Gronowski and GitHub
c1eba931e3
Merge pull request #7086 from mickael-docker/docs-authz-decoding
...
docs(authz): clarify daemon parsing semantics
v29.7.0
2026-07-30 22:16:32 +02:00
Paweł Gronowski and GitHub
1a305be376
Merge pull request #7084 from thaJeztah/prompt_cleans
...
cli/command: PromptUserForCredentials: don't mutate cli
2026-07-30 22:15:34 +02:00
Sebastiaan van Stijn and GitHub
4c1c648df1
Merge pull request #7129 from docker/dependabot/github_actions/codeql-actions-f42a4cd18a
...
build(deps): bump the codeql-actions group across 1 directory with 3 updates
2026-07-30 21:56:12 +02:00
Sebastiaan van Stijn and GitHub
ee046d35c0
Merge pull request #7134 from hirehamir/fix/flaky-client-hangs
...
cli/command: fix flaky TestInitializeFromClientHangs
2026-07-30 21:54:54 +02:00
Sebastiaan van Stijn and GitHub
d70c3fd5e7
Merge pull request #7139 from thaJeztah/vendor_go_archive
...
vendor: github.com/moby/go-archive v0.3.0
2026-07-30 21:49:42 +02:00
Sebastiaan van Stijn
f6d6bede46
vendor: github.com/moby/go-archive v0.3.0
...
full diff: https://github.com/moby/go-archive/compare/v0.2.1...v0.3.0
v0.3.0
This release fixes CVE-2026-17106 / GHSA-hfg8-hc9c-6c3h, where a crafted
tar archive could use links to cause extraction operations to create or
overwrite files outside the intended destination directory.
The issue affected Unpack, UnpackLayer, Untar, UntarUncompressed, and the
ApplyLayer helpers. Users should upgrade and avoid extracting untrusted
archives with earlier versions.
What's Changed
* archive: harden tar extraction against path traversal
* archive: do not follow reparse points in chtimes
* archive: fix creation time updates on Windows
* archive: minor cleanups and godoc touch-up
* archive: RebaseArchiveEntries: fix archive path rebasing
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-30 19:17:27 +02:00
Sebastiaan van Stijn and GitHub
b47659808a
Merge pull request #7026 from vvoland/fix-hostname
...
cli/file_store: Go 1.26 compatibility
2026-07-30 15:51:46 +02:00
dependabot[bot] and GitHub
af626e1ed7
build(deps): bump the codeql-actions group across 1 directory with 3 updates
...
Bumps the codeql-actions group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action ), [github/codeql-action/autobuild](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
Updates `github/codeql-action/autobuild` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
Updates `github/codeql-action/analyze` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.37.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.37.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-30 08:46:12 +00:00
Sebastiaan van Stijn and GitHub
6d35de4601
Merge pull request #7137 from crazy-max/bin-image-github-builder
...
ci: use docker github builder to build bin image
2026-07-29 16:58:14 +02:00
CrazyMax and CrazyMax
ad8dce1012
ci: use docker github builder to build bin image
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-07-29 16:32:49 +02:00
Hamir
844210bd0f
cli/command: fix flaky TestInitializeFromClientHangs
...
Signed-off-by: Hamir <hirehamir@gmail.com >
2026-07-28 15:06:53 -07:00
Paweł Gronowski and GitHub
bd719d6703
Merge pull request #7131 from vvoland/build-oidc
...
gha/build: Use OIDC for Docker Hub login
2026-07-28 17:10:00 +02:00
Paweł Gronowski
52b1160c85
gha: bump docker/login-action from 4.4.0 to 4.5.0
...
OIDC login requires docker/login-action v4.5.0 or newer
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-07-28 15:38:23 +02:00
Paweł Gronowski
5ff2ff6311
gha/build: Use OIDC for Docker Hub login
...
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-07-28 14:28:40 +02:00
Paweł Gronowski and GitHub
775dd50364
Merge pull request #7111 from thaJeztah/bump_go_archive
...
vendor: github.com/moby/go-archive main / v0.3.0-dev
v29.7.0-rc.1
2026-07-27 22:13:35 +02:00
Paweł Gronowski and GitHub
3320996718
Merge pull request #7122 from thaJeztah/bump_x_deps
...
vendor: update golang.org/x/* dependencies
2026-07-27 22:13:17 +02:00
Sebastiaan van Stijn and GitHub
4b02fd04b0
Merge pull request #7124 from JessThrysoee/completion-swarm-filters
...
completion: add completion for swarm "--filter" flags
2026-07-27 21:30:07 +02:00
Sebastiaan van Stijn
487686142c
vendor: golang.org/x/net v0.57.0
...
Relevant changes (in vendor):
- bpf: add security considerations to package docs
- http2: initialize Transport on NewClientConn
fixes: x/net/http2: zero Transport not ready for use
- idna: reject all-ASCII xn-- labels on all Go versions
fixes x/net/idna: ToUnicode accepts Punycode labels encoding pure ASCII labels
full diff: https://github.com/golang/net/compare/v0.56.0...v0.57.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-27 21:28:05 +02:00
Sebastiaan van Stijn
e03b83ef06
vendor: golang.org/x/text v0.40.0
...
- unicode/norm: avoid infinite loop on invalid input
full diff: https://github.com/golang/text/compare/v0.38.0...v0.40.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-27 21:28:05 +02:00
Sebastiaan van Stijn
8dfca49e6b
vendor: golang.org/x/mod v0.38.0
...
full diff: https://github.com/golang/mod/compare/v0.37.0...v0.38.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-27 21:28:05 +02:00
Sebastiaan van Stijn
808405b67d
vendor: golang.org/x/term v0.45.0
...
full diff: https://github.com/golang/term/compare/v0.44.0...v0.45.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-27 21:28:05 +02:00
Sebastiaan van Stijn
3f5a7b50ab
vendor: golang.org/x/sys v0.47.0
...
- cpu: handle vendor suffixes in parseRelease
- unix: update glibc to 2.43
- unix: use epoll_pwait rather than epoll_wait
- windows: avoid length overflow in NewNTString
- windows: document safe usage of TrusteeValue
full diff: https://github.com/golang/sys/compare/v0.46.0...v0.47.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-27 21:28:05 +02:00
Sebastiaan van Stijn
40c63db4c8
vendor: golang.org/x/sync v0.22.0
...
semaphore: panic on negative weights
full diff: https://github.com/golang/sync/compare/v0.21.0...v0.22.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-27 21:28:03 +02:00
Sebastiaan van Stijn and GitHub
977f88900e
Merge pull request #7121 from thaJeztah/bump_go_connections
...
vendor: github.com/docker/go-connections v0.8.0
2026-07-27 21:26:50 +02:00
Sebastiaan van Stijn
f6dfb40875
vendor: github.com/moby/go-archive main / v0.3.0-dev
...
full diff: https://github.com/moby/go-archive/compare/v0.2.0...2ff9bfb8b2ee
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-27 21:24:52 +02:00
Sebastiaan van Stijn and GitHub
a9ac44ea6b
Merge pull request #7128 from vvoland/update-docker
...
vendor: github.com/moby/moby/client v0.5.1
2026-07-27 21:21:13 +02:00
Sebastiaan van Stijn and GitHub
358f0135e3
Merge pull request #7127 from vvoland/win-unix
...
docs: Document Unix socket support on Windows
2026-07-27 21:20:26 +02:00
Paweł Gronowski
aa610f321d
vendor: github.com/moby/moby/client v0.5.1
...
full diff: https://github.com/moby/moby/compare/client/v0.5.0...client/v0.5.1
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-07-27 21:15:05 +02:00
Paweł Gronowski
0d32eed829
docs: Document Unix socket support on Windows
...
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-07-27 20:29:50 +02:00
Paweł Gronowski and GitHub
be7865c09e
Merge pull request #7123 from thaJeztah/bump_grpc
...
vendor: google.golang.org/grpc v1.82.1
2026-07-27 17:00:54 +02:00
Paweł Gronowski and GitHub
186b7283e1
Merge pull request #7126 from thaJeztah/bump_yaml
...
vendor: go.yaml.in/yaml/v3 v3.0.5
2026-07-27 16:59:57 +02:00
Sebastiaan van Stijn
9f4301e8f5
vendor: go.yaml.in/yaml/v3 v3.0.5
...
removes transitive dependencies on gopkg.in/check.v1
full diff: https://github.com/yaml/go-yaml/compare/v3.0.4...v3.0.5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-27 14:43:56 +02:00
Jess Thrysoee
89e882a808
completion: add completion for swarm "--filter" flags
...
The migration to the generated (V2) shell completions dropped the
"--filter" key/value suggestions that the legacy bash completion used to
provide for the swarm commands, so e.g. "docker service ps <service>
--filter <TAB>" no longer completed anything.
Register filter completions for "docker service ps", "docker service
ls", and "docker node ps", following the same approach as the existing
completion for "docker events --filter".
Signed-off-by: Jess Thrysoee <jess@thrysoee.dk >
2026-07-26 15:52:58 +02:00
Sebastiaan van Stijn
4e6e8fe5c8
vendor: github.com/docker/go-connections v0.8.0
...
- sockets: set socket permissions without overriding umask
- sockets: improve abstract Unix socket handling
- sockets: InmemSocket: add DialContext
- sockets: remove double error decoration
- sockets: test-enhancements and improve coverage
full diff: https://github.com/docker/go-connections/compare/v0.7.0...v0.8.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-25 19:47:59 +02:00
Sebastiaan van Stijn and GitHub
5b21d378b0
Merge pull request #7118 from docker/dependabot/github_actions/codeql-actions-15f4d34eb1
...
build(deps): bump the codeql-actions group with 3 updates
2026-07-25 04:05:04 +02:00
Sebastiaan van Stijn
532dcc37f5
vendor: google.golang.org/grpc v1.82.1
...
Fixes xDS RBAC and HTTP/2 Vulnerabilities: GHSA-hrxh-6v49-42gf
full diff: https://github.com/grpc/grpc-go/compare/v1.81.1...v1.82.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-25 03:59:22 +02:00
Sebastiaan van Stijn and GitHub
19a0ee3926
Merge pull request #7113 from nikolauspschuetz/test-device-opts-validators
...
opts: add tests for weight/throttle device opts validators
2026-07-25 02:16:11 +02:00
Sebastiaan van Stijn and GitHub
c700ac42b6
Merge pull request #7103 from hirehamir/fix/stray-pipe-in-docker-create-help-message
...
fix: stray `|` pipe in `docker create --help`
2026-07-25 02:01:52 +02:00
Sebastiaan van Stijn and GitHub
03b45495db
Merge pull request #7116 from docker/dependabot/github_actions/actions/setup-go-7.0.0
...
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
2026-07-25 01:51:41 +02:00
Sebastiaan van Stijn and GitHub
8061c90dcd
Merge pull request #7110 from HajimohammadiNet/fix-container-rm-force-output
...
container rm: suppress forced not found errors
2026-07-25 01:50:41 +02:00
Sebastiaan van Stijn and GitHub
80698fa987
Merge pull request #7120 from docker/dependabot/github_actions/actions/checkout-7.0.1
...
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
2026-07-25 01:41:59 +02:00
AmirHossein HajiMohammadi
ee4c249cc2
container rm: suppress forced not found errors
...
Signed-off-by: AmirHossein HajiMohammadi <a.hajimohammadi@rahkar.team >
2026-07-24 17:38:57 +03:30
Sebastiaan van Stijn and GitHub
9391c9889c
Merge pull request #7119 from thaJeztah/bump_go_archive_0.2.1
...
vendor: github.com/moby/go-archive v0.2.1
2026-07-24 12:11:36 +02:00
dependabot[bot] and GitHub
90d14d3e7e
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 08:43:24 +00:00
Sebastiaan van Stijn
349fad1635
vendor: github.com/moby/go-archive v0.2.1
...
full diff: https://github.com/moby/go-archive/compare/v0.2.0...v0.2.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-07-23 23:05:30 +02:00
dependabot[bot] and GitHub
a3ea9a43e0
build(deps): bump the codeql-actions group with 3 updates
...
Bumps the codeql-actions group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action ), [github/codeql-action/autobuild](https://github.com/github/codeql-action ) and [github/codeql-action/analyze](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.0 to 4.37.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a )
Updates `github/codeql-action/autobuild` from 4.37.0 to 4.37.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a )
Updates `github/codeql-action/analyze` from 4.37.0 to 4.37.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a )
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.37.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.37.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-23 08:46:14 +00:00
dependabot[bot] and GitHub
fd78fdc62d
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/924ae3a1cded613372ab5595356fb5720e22ba16...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-22 08:46:48 +00:00
Nikolaus Schuetz
8f3477fca1
Add tests for weight/throttle device opts validators
...
opts/weightdevice.go and opts/throttledevice.go had no tests, unlike the
sibling opts. Add table-driven coverage for ValidateWeightDevice,
ValidateThrottleBpsDevice, ValidateThrottleIOpsDevice and the Set/GetList
paths, including boundary (weight 0/10/1000/overflow) and error cases.
Signed-off-by: Nikolaus Schuetz <nikolauspschuetz@gmail.com >
2026-07-20 13:47:09 -07:00
Paweł Gronowski and GitHub
7a54334eb0
Merge pull request #7082 from thaJeztah/prompt_cleans_step1
...
internal/prompt: Confirm: don't wrap stdIn
2026-07-20 17:29:42 +02:00