Paweł Gronowski
7059ef4c9c
formatter: Sort labels for stable output
...
Several Labels() methods iterated over maps without sorting, producing
non-deterministic output.
In early versions of Go, map iteration order happened to be stable in
practice, so the original code appeared to work correctly.
Since Go 1.12, the runtime intentionally randomizes map iteration order,
making the output unpredictable between runs.
The API response produces sorted labels and the container formatter
already sorted its labels (changed in 5ee17eef ).
Apply the same fix to the volume, network, config, and secret
formatters, and update tests to assert exact ordering instead of using
order-independent comparison.
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-04-24 16:47:11 +02:00
Sebastiaan van Stijn and GitHub
977ee838e0
Merge pull request #6951 from docker/dependabot/github_actions/github/codeql-action-4.35.2
...
build(deps): bump github/codeql-action from 4.35.1 to 4.35.2
2026-04-22 17:24:55 +02:00
dependabot[bot] and GitHub
b03176ddff
build(deps): bump github/codeql-action from 4.35.1 to 4.35.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.1 to 4.35.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...95e58e9a2cdfd71adc6e0353d5c52f41a045d225 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-22 13:35:46 +00:00
Paweł Gronowski and GitHub
e874fdbe83
Merge pull request #6952 from thaJeztah/bump_version
...
bump VERSION to v29.4.2
2026-04-22 15:22:15 +02:00
Sebastiaan van Stijn
9d8c1e4b70
bump VERSION to v29.4.2
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-22 15:14:35 +02:00
Paweł Gronowski and GitHub
055a478ea9
Merge pull request #6945 from thaJeztah/bump_moby
...
vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2
v29.4.2
v29.4.1
v29.4.3
2026-04-20 16:57:44 +02:00
Sebastiaan van Stijn
d0f5b279e9
cmd/docker-trust: bump moby/client v0.4.1, moby/api v1.54.2
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 16:50:53 +02:00
Sebastiaan van Stijn
b7f37e86da
vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2
...
- https://github.com/moby/moby/compare/api/v1.54.1...api/v1.54.2
- https://github.com/moby/moby/compare/client/v0.4.0...client/v0.4.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 16:49:58 +02:00
Paweł Gronowski and GitHub
c93d892f0e
Merge pull request #6949 from thaJeztah/bump_utils
...
Dockerfile: update buildx to v0.33.0, compose v5.1.3
2026-04-20 16:26:38 +02:00
Paweł Gronowski and GitHub
3553cafa13
Merge pull request #6948 from thaJeztah/bump_trust_deps
...
cmd/docker-trust: bump dependencies
2026-04-20 16:26:17 +02:00
Sebastiaan van Stijn
266f039bb5
Dockerfile: update compose to v5.1.3
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 16:13:56 +02:00
Sebastiaan van Stijn
d74d3c3b16
Dockerfile: update buildx to v0.33.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 16:12:56 +02:00
Sebastiaan van Stijn and GitHub
134c2a0ed6
Merge pull request #6826 from thaJeztah/bump_golangci_lint2
...
Dockerfile: update golangci-lint to v2.10.1
2026-04-20 16:00:14 +02:00
Paweł Gronowski and Sebastiaan van Stijn
58a7c3155b
golangci-lint: fix lint failures from v2.10.1 upgrade
...
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-04-20 15:49:35 +02:00
Sebastiaan van Stijn
f37a9e663f
Dockerfile: update golangci-lint to v2.10.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 15:49:32 +02:00
Paweł Gronowski and GitHub
4e25e5cfa9
Merge pull request #6941 from vvoland/milestone-validate
...
gha: Add milestone validation workflow
2026-04-20 15:32:29 +02:00
Sebastiaan van Stijn
ee56098b07
cmd/docker-trust: bump dependencies
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:59:01 +02:00
Sebastiaan van Stijn and GitHub
f31b8b2697
Merge pull request #6946 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.23
2026-04-20 14:52:27 +02:00
Paweł Gronowski
efbbc0c68c
gha: Add milestone validation workflow
...
Ensure PRs have a milestone set and that it matches the next release
version declared in the root VERSION file.
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-04-20 14:51:37 +02:00
Paweł Gronowski and GitHub
1546665853
Merge pull request #6942 from thaJeztah/rm_kernel_memory
...
docs, completion: remove deprecated "--kernel-memory" flags
2026-04-20 14:39:40 +02:00
Paweł Gronowski and GitHub
4e4e8f940b
Merge pull request #6943 from thaJeztah/bump_creds_helper
...
vendor: github.com/docker/docker-credential-helpers v0.9.6
2026-04-20 14:38:45 +02:00
Paweł Gronowski and GitHub
2b65d5943f
Merge pull request #6944 from thaJeztah/bump_x_deps
...
vendor: update golang.org/x/* dependencies
2026-04-20 14:38:27 +02:00
Sebastiaan van Stijn
a75ab98e43
vendor: github.com/mattn/go-runewidth v0.0.23
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.22...v0.0.23
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:34:25 +02:00
Sebastiaan van Stijn
b9549d3ab5
vendor: golang.org/x/net v0.53.0
...
full diff: https://cs.opensource.google/go/x/net/+/refs/tags/v0.52.0...refs/tags/v0.53.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:22:26 +02:00
Sebastiaan van Stijn
2edf815a80
vendor: golang.org/x/term v0.42.0
...
full diff: https://cs.opensource.google/go/x/term/+/refs/tags/v0.41.0...refs/tags/v0.42.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:21:03 +02:00
Sebastiaan van Stijn
258010c788
vendor: golang.org/x/text v0.36.0
...
full diff: https://cs.opensource.google/go/x/text/+/refs/tags/v0.35.0...refs/tags/v0.36.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:20:06 +02:00
Sebastiaan van Stijn
cfa80d8644
vendor: golang.org/x/mod v0.35.0
...
full diff: https://cs.opensource.google/go/x/mod/+/refs/tags/v0.34.0...refs/tags/v0.35.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:18:58 +02:00
Sebastiaan van Stijn
c20b2479e0
vendor: golang.org/x/sys v0.43.0
...
full diff: https://cs.opensource.google/go/x/sys/+/refs/tags/v0.42.0...refs/tags/v0.43.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:17:33 +02:00
Sebastiaan van Stijn
573dd31bf7
vendor: github.com/docker/docker-credential-helpers v0.9.6
...
full diff: https://github.com/docker/docker-credential-helpers/compare/v0.9.5...v0.9.6
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:14:22 +02:00
Sebastiaan van Stijn
2988338b99
docs/reference: remove deprecated "--kernel-memory" flag
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:06:16 +02:00
Sebastiaan van Stijn
58c7328df6
man: remove deprecated "--kernel-memory" flag
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:05:48 +02:00
Sebastiaan van Stijn
5468871a02
contrib/completion: remove deprecated "--kernel-memory" flags
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:05:10 +02:00
Paweł Gronowski and GitHub
10f16704a3
Merge pull request #6931 from docker/dependabot/github_actions/docker/bake-action-7.1.0
...
build(deps): bump docker/bake-action from 7.0.0 to 7.1.0
2026-04-20 12:12:09 +02:00
Sebastiaan van Stijn and GitHub
89958b190c
Merge pull request #6927 from Varun5711/docs/legacy-plugin-links-6880
...
docs: refresh legacy plugin references
2026-04-17 20:24:32 +02:00
Varun5711
acbbeb3c3a
docs: refresh legacy plugin references
...
Signed-off-by: Varun Hotani <varunhotani@gmail.com >
2026-04-17 21:14:16 +05:30
Paweł Gronowski and GitHub
dea3ebaa87
Merge pull request #6936 from thaJeztah/bump_otels
...
vendor: google.golang.org/grpc v1.80.0, go.opentelemetry.io/otel v1.43.0, go.opentelemetry.io/contrib v0.68.0
2026-04-17 15:41:57 +02:00
Sebastiaan van Stijn
3362ae31d0
vendor: go.opentelemetry.io/contrib v0.68.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-17 14:09:30 +02:00
Sebastiaan van Stijn
a1edb22832
vendor: go.opentelemetry.io/otel v1.43.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-17 14:07:46 +02:00
Sebastiaan van Stijn
0a24da3382
vendor: google.golang.org/grpc v1.80.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-17 14:07:39 +02:00
Sebastiaan van Stijn
f24c779887
vendor: google.golang.org/genproto/* 9d38bb4040a9
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-17 14:04:40 +02:00
Paweł Gronowski and GitHub
17633b7742
Merge pull request #6935 from docker/dependabot/github_actions/actions/upload-artifact-7.0.1
...
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
2026-04-17 10:52:20 +02:00
dependabot[bot] and GitHub
99aaff1807
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-17 08:43:30 +00:00
dependabot[bot] and Sebastiaan van Stijn
f3c060c382
build(deps): bump docker/bake-action from 7.0.0 to 7.1.0
...
Bumps [docker/bake-action](https://github.com/docker/bake-action ) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/82490499d2e5613fcead7e128237ef0b0ea210f7...a66e1c87e2eca0503c343edf1d208c716d54b8a8 )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-17 00:41:48 +02:00
Paweł Gronowski and GitHub
792293cc2f
Merge pull request #6923 from docker/dependabot/github_actions/docker/login-action-4.1.0
...
build(deps): bump docker/login-action from 4.0.0 to 4.1.0
2026-04-16 13:10:41 +02:00
Paweł Gronowski and GitHub
2660a496bf
Merge pull request #6930 from thaJeztah/bump_go_connections
...
vendor: github.com/docker/go-connections v0.7.0
2026-04-16 13:10:09 +02:00
Sebastiaan van Stijn
b9a052a987
vendor: github.com/docker/go-connections v0.7.0
...
Changes:
- raise minimum supported Go version to go1.23
- sockets: `ConfigureTransport`: prevent idle connections leaking FDs.
- sockets: implement `WithAdditionalUsersAndGroups` for windows.
- tlsconfig: add ChaCha20-Poly1305 cipher suites to align closer with stdlib defaults.
- nat: SortPortMap: accept `map[Port][]PortBinding` as argument.
- nat: add benchmarks, optimize, and improve errors.
- proxy: check for `net.ErrClosed` instead of string-matching "use of closed network connection".
Breaking changes:
- tlsconfig: deprecate `tlsconfig.SystemCertPool` in favor of stdlib `x509.SystemCertPool`.
- sockets: remove deprecated `DialPipe`, `GetProxyEnv`, `DialerFromEnvironment`
Dependency updates:
- update github.com/Microsoft/go-winio to go v0.6.2
- update golang.org/x/sys to v0.10.0
full diff: https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-16 00:20:20 +02:00
Sebastiaan van Stijn and GitHub
84b357f6b0
Merge pull request #6929 from thaJeztah/stdlib_systempools
...
use stdlib's x509.SystemCertPool on Windows
2026-04-15 16:32:00 +02:00
Sebastiaan van Stijn
0d32fde8e3
internal/registry: use stdlib's x509.SystemCertPool on Windows
...
The `tlsconfig.SystemCertPool` utility in go-connections was added in
[docker/go-connections@55aadc3 ], at which time Go stdlib didn't support
system-pools ([x509.SystemCertPool]) on Windows, so an empty pool was
constructed.
Support for system pools on Windows originally added in Go 1.8 (through
[golang/go@05471e9 ]), but reverted, and re-implemented in Go 1.18 (through
[golang/go@3544082 ]).
Go 1.18 and up now implement this, but, unlike Linux, which uses a pure-Go
implementation, certificate validation is handled by the system:
> On macOS and Windows, certificate verification is handled by system APIs,
> but the package aims to apply consistent validation rules across operating
> systems.
On macOS and Windows, x509.SystemCertPool returns an empty Pool, with the
`systemPool` set to `true` (see [loadSystemRoots]). This must be considered
an implementation detail; custom CAs can be appended to this pool, and handled
as usual.
This patch removes the special handling on Windows, removing the dependency
on go-connections for this part.
[docker/go-connections@55aadc3 ]: https://github.com/docker/go-connections/commit/55aadc3cc561684699edcdd0921b9293c3ee6b49
[golang/go@05471e9 ]: https://github.com/golang/go/commit/05471e9ee64a300bd2dcc4582ee1043c055893bb
[golang/go@3544082 ]: https://github.com/golang/go/commit/3544082f75fd3d2df7af237ed9aef3ddd499ab9c
[x509.SystemCertPool]: https://pkg.go.dev/crypto/x509#SystemCertPool
[loadSystemRoots]: https://cs.opensource.google/go/go/+/refs/tags/go1.26.1:src/crypto/x509/root_windows.go;l=15-17
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-15 13:04:15 +02:00
Sebastiaan van Stijn
ad641e5d61
cmd/docker-trust: use stdlib's x509.SystemCertPool on Windows
...
The `tlsconfig.SystemCertPool` utility in go-connections was added in
[docker/go-connections@55aadc3 ], at which time Go stdlib didn't support
system-pools ([x509.SystemCertPool]) on Windows, so an empty pool was
constructed.
Support for system pools on Windows originally added in Go 1.8 (through
[golang/go@05471e9 ]), but reverted, and re-implemented in Go 1.18 (through
[golang/go@3544082 ]).
Go 1.18 and up now implement this, but, unlike Linux, which uses a pure-Go
implementation, certificate validation is handled by the system:
> On macOS and Windows, certificate verification is handled by system APIs,
> but the package aims to apply consistent validation rules across operating
> systems.
On macOS and Windows, x509.SystemCertPool returns an empty Pool, with the
`systemPool` set to `true` (see [loadSystemRoots]). This must be considered
an implementation detail; custom CAs can be appended to this pool, and handled
as usual.
This patch removes the special handling on Windows, removing the dependency
on go-connections for this part.
[docker/go-connections@55aadc3 ]: https://github.com/docker/go-connections/commit/55aadc3cc561684699edcdd0921b9293c3ee6b49
[golang/go@05471e9 ]: https://github.com/golang/go/commit/05471e9ee64a300bd2dcc4582ee1043c055893bb
[golang/go@3544082 ]: https://github.com/golang/go/commit/3544082f75fd3d2df7af237ed9aef3ddd499ab9c
[x509.SystemCertPool]: https://pkg.go.dev/crypto/x509#SystemCertPool
[loadSystemRoots]: https://cs.opensource.google/go/go/+/refs/tags/go1.26.1:src/crypto/x509/root_windows.go;l=15-17
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-15 13:03:39 +02:00
dependabot[bot] and Sebastiaan van Stijn
14aa781767
build(deps): bump docker/login-action from 4.0.0 to 4.1.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-15 11:40:10 +02:00