starred/cli
1
0
Fork 0
mirror of https://github.com/docker/cli.git synced 2026-09-28 02:06:53 -04:00
Code Issues Packages Projects Releases Wiki Activity
13,060 Commits 15 Branches 323 Tags
b1b8a602f6709aa632cc503baca53c3bc3ec2e6f
Commit Graph
13060 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastiaan van Stijn 2282b23f02 gha: dependabot: group docker/* and codeql action updates 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-07 15:56:25 +02:00
Sebastiaan van Stijn fd3497683d internal/prompt: Confirm: don't wrap stdIn 
This was a remnant from when `PromptForConfirmation` accepted a `InStream`;
it was added in [moby@30b8f08], which got left behind when [cli@37ccc00]
updated its signature to accept a plain `io.Reader`.

While updating, also update the comment to provide more context on the reason
we're unconditionally using `os.Stdin` on Windows.

[moby@30b8f08]: https://github.com/moby/moby/commit/30b8f084436a2a1d5e8523fcd2c5ea64cc805224
[cli@37ccc00]: https://github.com/docker/cli/commit/37ccc00d0e14461bcf29e98669773625dfed2fce

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-07 14:19:44 +02:00
Sebastiaan van Stijn 2abf92e95c cli/command: PromptUserForCredentials: don't mutate cli 
PromptUserForCredentials accepted a Cli as argument so that it could swap
the input stream on Windows (cli.SetIn).

Given that we only require this swap for the duration of this function (if
needed at all), we can use a local variable that either uses cli.In() or
os.Stdin (on Windows).

We currently still need to wrap the os.Stdin into a streams.In, but can use
the raw os.Stdin (and/or cli.In().File()) once prompt.DisableInputEcho is
updated.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-07 14:19:20 +02:00
Sebastiaan van Stijn 40a8e8e754 Merge pull request #7081 from vvoland/work-gha 
Update docker-agent-action to v2.0.2
 2026-07-06 11:43:13 +02:00
Paweł Gronowski da2622ed8e Update docker-agent-action to v2.0.2 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-07-06 11:35:08 +02:00
Sebastiaan van Stijn c4c704e62b Merge pull request #7079 from derekmisler/fix/pr-review-trigger-concurrency 
ci: add concurrency group to pr-review-trigger to prevent duplicate reviews
 2026-07-02 16:40:57 +02:00
Derek Misler 1c742902b6 ci: add concurrency group and remove bot filter in pr-review-trigger 
Add a concurrency group keyed on PR number to prevent duplicate reviews
from simultaneous review_requested events.

Remove the sender.type != 'Bot' guard so Dependabot PRs remain
reviewable — per maintainer feedback, those reviews are useful for
catching behavior changes in dependency updates.

Signed-off-by: Derek Misler <derek.misler@docker.com>
 2026-07-02 14:26:26 +00:00
Sebastiaan van Stijn 0f83acece4 Merge pull request #7077 from docker/dependabot/github_actions/actions/setup-go-6.5.0 
build(deps): bump actions/setup-go from 6.3.0 to 6.5.0
 2026-06-30 20:40:27 +02:00
Paweł Gronowski 3edebc433e Merge pull request #7078 from thaJeztah/version 
bump VERSION to v29.7.0-dev
 2026-06-30 16:58:09 +02:00
Sebastiaan van Stijn 635fed89d2 bump VERSION to v29.7.0-dev 
This reverts commit d9c59c9cfe.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-30 16:31:14 +02:00
dependabot[bot] 444bab12d9 build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.3.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...924ae3a1cded613372ab5595356fb5720e22ba16)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-30 08:44:46 +00:00
Sebastiaan van Stijn 8900f1d330 Merge pull request #7074 from thaJeztah/version 
version 29.6.1
v29.6.1 		2026-06-25 22:08:24 +02:00
Sebastiaan van Stijn 22b8f1396e Merge pull request #7069 from docker-agent/auto/migrate-to-docker-agent-action 
chore: migrate cagent-action to docker-agent-action (v2.0.0)
 2026-06-25 22:05:29 +02:00
Sebastiaan van Stijn d9c59c9cfe version 29.6.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-25 22:03:12 +02:00
Sebastiaan van Stijn 64307515e6 Merge pull request #7073 from thaJeztah/bump_moby_user 
vendor: github.com/moby/sys/user v0.4.1
 2026-06-25 21:59:18 +02:00
Sebastiaan van Stijn 8fda97b545 vendor: github.com/moby/sys/user v0.4.1 
- user: prevent possible DoS via unbounded parsing of user and group
  database files in GHSA-mjcv-p78q-w5fw. This fixes a similar issue
  as CVE-2026-47262 in containerd.
- user: prevent falling back to looking up numeric usernames
  Improve handling of numeric user/group to prevent looking up numeric
  values as usernames. This fixes a similar issue as [CVE-2026-46680] in
  containerd.
- user: update minimum go version to go1.18
- assorted testing and linting fixes.

[CVE-2026-46680]: https://github.com/advisories/GHSA-fqw6-gf59-qr4w

full diff: https://github.com/moby/sys/compare/user/v0.4.0...user/v0.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-25 21:31:42 +02:00
Docker Agent f9dc4e413b chore: bump docker-agent-action to v2.0.1 
Signed-off-by: Docker Agent <svc-github-docker-agent@docker.com>
 2026-06-24 13:32:46 +00:00
Sebastiaan van Stijn f8a2d2b253 Merge pull request #7070 from docker/dependabot/github_actions/actions/checkout-7.0.0 
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
 2026-06-24 10:48:34 +02:00
dependabot[bot] 7eb15d3454 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-24 08:42:35 +00:00
Sebastiaan van Stijn 033b0ff9ff Merge pull request #7063 from docker/dependabot/github_actions/crazy-max/dot-github/dot-github/workflows/zizmor.yml-1.10.1 
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.10.0 to 1.10.1
 2026-06-22 16:42:54 +02:00
Sebastiaan van Stijn 317bfd1231 Merge pull request #7067 from docker/dependabot/github_actions/docker/cagent-action/dot-github/workflows/review-pr.yml-1.5.5 
build(deps): bump docker/cagent-action/.github/workflows/review-pr.yml from 1.5.4 to 1.5.5
 2026-06-22 16:41:07 +02:00
Sebastiaan van Stijn 1b4c7d7807 Merge pull request #7068 from thaJeztah/bump_version 
bump VERSION to v29.7.0-dev
 2026-06-22 16:39:50 +02:00
Sebastiaan van Stijn e45822e51d bump VERSION to v29.7.0-dev 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-22 15:52:40 +02:00
dependabot[bot] a97303090d build(deps): bump docker/cagent-action/.github/workflows/review-pr.yml 
Bumps [docker/cagent-action/.github/workflows/review-pr.yml](https://github.com/docker/cagent-action) from 1.5.4 to 1.5.5.
- [Release notes](https://github.com/docker/cagent-action/releases)
- [Commits](https://github.com/docker/cagent-action/compare/3f5dc9969f307d3c76acb7e9ccaefdd96bd62f4b...367a30ddb41e0156459d03750f508eac03f3c38a)

---
updated-dependencies:
- dependency-name: docker/cagent-action/.github/workflows/review-pr.yml
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-22 08:43:57 +00:00
dependabot[bot] d516a10f93 build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml 
Bumps [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github) from 1.10.0 to 1.10.1.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/716fd1c51a46c5d93a41d44a94b439c9ee802536...46267a6e61cd56aac2fc79943df180152f4c89d6)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-19 08:42:27 +00:00
Sebastiaan van Stijn fb59821d45 Merge pull request #7062 from vvoland/update-docker 
vendor: github.com/moby/moby api v1.55.0 and client v0.5.0
v29.6.0 		2026-06-18 21:53:10 +02:00
Paweł Gronowski ee2f737013 vendor: github.com/moby/moby/client v0.5.0 
full diff: https://github.com/moby/moby/compare/client/v0.5.0-rc.1...client/v0.5.0

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-06-18 21:41:38 +02:00
Paweł Gronowski 1f80e23560 vendor: github.com/moby/moby/api v1.55.0 
full diff: https://github.com/moby/moby/compare/api/v1.55.0-rc.1...api/v1.55.0

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-06-18 21:39:19 +02:00
dependabot[bot] 244404379d build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/e79a6962e0d4c0c17b229090214935d2e33f8354...fb8b3582c8e4def4969c97caa2f19720cb33a72f)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-15 08:44:21 +00:00
Lohit Kolluri d9698edc85 e2e: add private registry pull/push regression test 
This adds an e2e regression test for authenticated pull/push against a private registry, covering the auth regression reported in docker/cli#5963.

Includes:
- New privateregistry service in the e2e Compose stack with htpasswd auth on port 5001, and --insecure-registry for the engine container.
- TestPullPushPrivateRepository test that verifies authenticated push/pull and rejects unauthenticated operations.
- Auth config and test credentials in e2e/testdata/registry/.
- 90-second retry loop for transient DNS/container startup races.
- Service health wait loop in scripts/test/e2e/run.
- Increase TestProcessTermination timeout from 10s to 20s for connhelper-ssh + engine 25 combination.
- Connhelper-ssh engine Dockerfile for private registry integration.

Signed-off-by: Lohit Kolluri <lohitkolluri@gmail.com>
 2026-06-13 00:22:00 +05:30
Paweł Gronowski 1d1562e004 Merge pull request #7029 from agirault/login-password-dash-stdin 
cli/registry: support password dash stdin
v29.6.0-rc.1 		2026-06-12 19:31:17 +02:00
Sebastiaan van Stijn 8c2e80070b Merge pull request #7051 from thaJeztah/bump_moby 
vendor: github.com/moby/moby/api v1.55.0-rc.1, moby/client v0.5.0-rc.1
 2026-06-12 19:07:07 +02:00
Sebastiaan van Stijn 233cd4a643 vendor: github.com/moby/moby/api v1.55.0-rc.1, moby/client v0.5.0-rc.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-12 18:54:32 +02:00
Paweł Gronowski 5b600d015d Merge pull request #7047 from thaJeztah/bump_go_events 
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
 2026-06-12 18:44:35 +02:00
Paweł Gronowski e6decf4d85 Merge pull request #7048 from thaJeztah/bump_compress 
vendor: github.com/klauspost/compress v1.18.6
 2026-06-12 18:44:24 +02:00
Paweł Gronowski a9284d1161 Merge pull request #7049 from thaJeztah/bump_x_net 
vendor: golang.org/x/net v0.56.0
 2026-06-12 18:44:11 +02:00
Paweł Gronowski e7319c78af Merge pull request #7050 from thaJeztah/update_authors_mailmap 
update AUTHORS and mailmap
 2026-06-12 18:43:43 +02:00
Sebastiaan van Stijn 0f1dbdea86 update AUTHORS and mailmap 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-12 18:05:12 +02:00
Sebastiaan van Stijn fef3ef83fe vendor: golang.org/x/net v0.56.0 
full diff: https://github.com/golang/net/compare/v0.55.0...v0.56.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-12 17:13:23 +02:00
Sebastiaan van Stijn 9eff92c55a vendor: github.com/klauspost/compress v1.18.6 
full diff: https://github.com/klauspost/compress/compare/v1.18.5...v1.18.6

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-12 17:11:24 +02:00
Sebastiaan van Stijn 43f745b242 vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4 
full diff: https://github.com/docker/go-events/compare/605354379745...dbf6103125a4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-12 17:07:53 +02:00
Alexis Girault 450df790a0 cli/registry: support password dash stdin 
Signed-off-by: Alexis Girault <agirault@nvidia.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-12 16:15:23 +02:00
Sebastiaan van Stijn 0df3977cb3 Merge pull request #7042 from thaJeztah/carry_deprecation 
Add a deprecation warning about --link on default nw
 2026-06-11 15:07:14 +02:00
Sebastiaan van Stijn 86cf0a5185 Merge pull request #7043 from docker/dependabot/github_actions/crazy-max/dot-github/dot-github/workflows/zizmor.yml-1.10.0 
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.8.0 to 1.10.0
 2026-06-11 14:44:57 +02:00
Sebastiaan van Stijn 3b10370c40 Merge pull request #7044 from docker/dependabot/github_actions/github/codeql-action-4.36.2 
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
 2026-06-11 14:39:44 +02:00
dependabot[bot] a23b1c6770 build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.1 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-11 08:44:24 +00:00
dependabot[bot] 3a197287d2 build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml 
Bumps [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github) from 1.8.0 to 1.10.0.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-11 08:42:57 +00:00
Albin Kerouanton aaaeb80ceb Add a deprecation warning about --link on default nw 
Signed-off-by: Albin Kerouanton <albinker@gmail.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-10 20:12:17 +02:00
Sebastiaan van Stijn 278ac25271 Merge pull request #6039 from thaJeztah/gomod_symlink 
scripts/with-go-mod.sh: use symlink instead of -modfile
 2026-06-10 16:11:07 +02:00
Sebastiaan van Stijn 54f330978e Merge pull request #7028 from docker/dependabot/github_actions/docker/setup-qemu-action-4.1.0 
build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
 2026-06-10 15:49:05 +02:00