Paweł Gronowski
e863f84b15
vendor: github.com/moby/moby/client v0.7.0-dev (402d0a16f131)
...
full diff: https://github.com/moby/moby/compare/client/v0.6.2...402d0a16f131
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-11-06 02:23:19 +01:00
Paweł Gronowski
e969249cf5
vendor: github.com/moby/moby/api v1.57.0-dev (402d0a16f131)
...
full diff: https://github.com/moby/moby/compare/api/v1.56.1...402d0a16f131
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-11-06 02:21:44 +01:00
Sebastiaan van Stijn
e63c04ae28
vendor: github.com/moby/sys/capability v0.5.0
...
full diff: https://github.com/moby/sys/compare/capability/v0.4.0...capability/v0.5.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-11-06 00:23:28 +01:00
Sebastiaan van Stijn
682373a887
vendor: github.com/Azure/go-ansiterm 51075c6ea6bc
...
full diff: https://github.com/Azure/go-ansiterm/compare/8c912ac31dd4...51075c6ea6bc
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-11-05 13:44:53 +01:00
Sebastiaan van Stijn
b9456fd725
vendor: github.com/klauspost/compress v1.20.2
...
includes a fix for CVE-2026-116591 / [GHSA-fpmh-frq8-7rj8]
full diff: https://github.com/klauspost/compress/compare/v1.20.1...v1.20.2
[GHSA-fpmh-frq8-7rj8]: https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-11-03 22:27:00 +01:00
Sebastiaan van Stijn
77ebef3df8
vendor: github.com/moby/swarmkit/v2 v2.1.3
...
full diff: https://github.com/moby/swarmkit/compare/v2.1.2...v2.1.3
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-11-03 21:11:01 +01:00
Sebastiaan van Stijn
81e4a109a3
vendor: github.com/go-jose/go-jose/v4 v4.1.7
...
Fixed Security Issues
- Thumbprint: reject invalid RSA key [GHSA-r39w-98wm-9pp6]
- json: backport stdlib fix for embedded unexported field [GHSA-27pc-rm86-68pq]
- Detect if headers are set by presence in the map [GHSA-p9j4-2j95-j4rv]
- limit RSA size in certificate verify [GHSA-v6h2-qj3f-2h6v]
- Limit recipients and signatures in JWE/JWS [GHSA-c67m-wr4h-2ccg]
Fixed
- jwk: fix bug in x5c parsing
- reject base64-encoded "null" in protected headers
Deprecated
- deprecate ParseEncrypted / ParseSigned
full diff: https://github.com/go-jose/go-jose/compare/v4.1.6...v4.1.7
[GHSA-r39w-98wm-9pp6]: https://github.com/go-jose/go-jose/security/advisories/GHSA-r39w-98wm-9pp6
[GHSA-27pc-rm86-68pq]: https://github.com/go-jose/go-jose/security/advisories/GHSA-27pc-rm86-68pq
[GHSA-p9j4-2j95-j4rv]: https://github.com/go-jose/go-jose/security/advisories/GHSA-p9j4-2j95-j4rv
[GHSA-v6h2-qj3f-2h6v]: https://github.com/go-jose/go-jose/security/advisories/GHSA-v6h2-qj3f-2h6v
[GHSA-c67m-wr4h-2ccg]: https://github.com/go-jose/go-jose/security/advisories/GHSA-c67m-wr4h-2ccg
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-11-03 14:24:18 +01:00
Sebastiaan van Stijn
ccccec73b0
vendor: github.com/go-jose/go-jose/v4 v4.1.6
...
- contains a fix for CVE-2026-116587 / [GHSA-mgcc-cww5-fp2q]
full diff: https://github.com/go-jose/go-jose/compare/v4.1.5...v4.1.6
[GHSA-mgcc-cww5-fp2q]: https://github.com/go-jose/go-jose/security/advisories/GHSA-mgcc-cww5-fp2q
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-28 22:38:48 +01:00
Sebastiaan van Stijn
8da8b00555
vendor: github.com/Microsoft/go-winio v0.6.3
...
- improve interoperability with stdlib sentinel errors and deprecate aliases
full diff: https://github.com/Microsoft/go-winio/compare/f19d9717deb0...v0.6.3
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-10 15:28:26 +02:00
Paweł Gronowski
45c2317672
Merge pull request #7366 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.31
2026-10-08 22:27:38 +02:00
Paweł Gronowski
730c880b35
vendor: github.com/moby/moby/client v0.6.2
...
full diff: https://github.com/moby/moby/compare/client/v0.6.1...client/v0.6.2
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-10-08 22:08:10 +02:00
Sebastiaan van Stijn
e63e4fe498
vendor: github.com/mattn/go-runewidth v0.0.31
...
- Treat the remaining invisible format controls as zero width
- Treat bidi isolates and other invisible format characters as zero width
- Measure ambiguous Latin letters as one cell in East Asian locales
- Fix width mismatches found by the Hegel property tests
- Recognise CJK locales regardless of charset spelling
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.30...v0.0.31
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-08 21:51:14 +02:00
Sebastiaan van Stijn
63445d6b70
vendor: github.com/docker/go-connections v0.8.2
...
v0.8.2
- sockets: preserve configured TLS ALPN protocols
- ci: add dependabot to update actions
- ci: update runners to Ubuntu 26.04
- build(deps): bump actions/checkout from 6.0.2 to 7.0.1
- build(deps): bump actions/setup-go from 6.3.0 to 7.0.0
- build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.3.0
full diff: https://github.com/docker/go-connections/compare/v0.8.1...v0.8.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-08 16:03:13 +02:00
Sebastiaan van Stijn
e11705385d
vendor: github.com/mattn/go-runewidth v0.0.30
...
- Wrap: measure grapheme clusters, not runes
- Skip grapheme segmentation for text that cannot form clusters
- Keep strings that are not valid UTF-8 on the segmenter - #111
- Take the rune fast path in the Truncate functions too
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.29...v0.0.30
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-06 11:07:44 +02:00
Paweł Gronowski
48988f5c12
Merge pull request #7347 from thaJeztah/bump_containerd_logs
...
vendor: github.com/containerd/log v0.2.0
2026-10-01 22:33:07 +02:00
Sebastiaan van Stijn
e3559d29fb
Merge pull request #7348 from thaJeztah/bump_client
...
vendor: github.com/moby/moby/client v0.6.1, moby/api v1.56.1
2026-10-01 22:32:20 +02:00
Sebastiaan van Stijn
886ab250f0
vendor: github.com/moby/moby/client v0.6.1, moby/api v1.56.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-01 22:23:55 +02:00
Sebastiaan van Stijn
58eea06064
vendor: github.com/Azure/go-ansiterm e937bb47801a
...
full diff: https://github.com/Azure/go-ansiterm/compare/faa5f7b0171c...e937bb47801ae0fd8fb8ff02743f6a93e2b51982
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-01 21:31:49 +02:00
Sebastiaan van Stijn
482a140ce7
Merge pull request #7345 from thaJeztah/bump_go_winio
...
vendor: github.com/Microsoft/go-winio f19d9717deb0
2026-10-01 20:00:59 +02:00
Sebastiaan van Stijn
3caafba34f
vendor: github.com/containerd/log v0.2.0
...
full diff: https://github.com/containerd/log/compare/v0.1.0...v0.2.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-01 19:44:52 +02:00
Sebastiaan van Stijn
07339fa78f
vendor: github.com/klauspost/compress v1.20.1
...
full diff: https://github.com/klauspost/compress/compare/v1.20.0...v1.20.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-01 19:34:03 +02:00
Sebastiaan van Stijn
637be3d60c
vendor: github.com/klauspost/compress v1.20.0
...
- Add lzw reader/writer
- ci: test against go1.27.x, drop go1.24.x
- flate: Writer L7-9 with dictionary can emit the dictionary to stream
- gzhttp: limit jitter hash to jitterBuffer bytes
- s2: arm64 assembly encoders, lowered from the amd64 avo program
- s2: clamp the Go EncodeBetter skip to match the assembly
- xpress: add Microsoft XPRESS (MS-XCA) decompression
- xxhash: bound input of non-preemptive assembly
- zstd, huff0: improved arm64 lowering, and narrow two table loads to MOVWQZX
- zstd/huff0: break false partial-register dependencies in seqdec/4X decoders
- zstd/huff0: fold two ISA-gap x86 idioms in the avo arm64 lowering
full diff: https://github.com/klauspost/compress/compare/v1.19.2...v1.20.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-01 19:33:28 +02:00
Sebastiaan van Stijn
6868874c98
vendor: github.com/Microsoft/go-winio f19d9717deb0
...
full diff: https://github.com/Microsoft/go-winio/compare/v0.6.2...f19d9717deb0a33bb37c3580481dd1909782fc03
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-10-01 19:29:12 +02:00
Paweł Gronowski
47a06aa077
Merge pull request #7293 from thaJeztah/bump_uax29
...
vendor: github.com/clipperhouse/uax29/v2 v2.7.0
2026-09-14 18:03:28 +02:00
Sebastiaan van Stijn
7b322e4dc2
vendor: github.com/moby/sys/userns v0.2.1
...
userns: fix user-namespace detection on OpenVZ, where namespace inode
numbers are virtualized.
full diff: https://github.com/moby/sys/userns/compare/v0.2.0...v0.2.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-08 20:27:04 +02:00
Sebastiaan van Stijn
676ca0067b
vendor: github.com/clipperhouse/uax29/v2 v2.7.0
...
- Adds Unicode 17 support
- Fast paths for ASCII
- ANSI escape sequences as grapheme clusters
- Implement UTF-8 C1 control sequences
- Implement 8-bit ANSI
Breaking change
The returned iterator type from FromString() and FromBytes() is now a pointer.
This will not present a problem if you are just using it in the typical way,
which is assigning to a local variable and iterating.
If you are embedding this iterator into another object, and therefore declaring
its type, this change might break your compilation. You’ll need to change to a
pointer type. Apologies if so — this seems like a small enough change that a
v3 would be a bit much.
full diff: https://github.com/clipperhouse/uax29/compare/v2.2.0...v2.7.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-07 09:21:26 +02:00
Paweł Gronowski
d306b9d600
Merge pull request #7287 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.29
2026-09-04 14:40:50 +02:00
Sebastiaan van Stijn
c50ce17c19
vendor: github.com/go-jose/go-jose/v4 v4.1.5
...
Fixed security issues
- cipher/cbc_hmac: don't panic on empty ciphertext
- cipher/cbc_hmac: don't panic on invalid key
- json: limit stack depth
- jwt: reject out-of-range NumericDate values
- Check alg against pubkey curve during verify.
- Reject malformed Ed25519 JWKs
- jws: choose verification key per-signature
Changed
- Verify OpaqueSigner's Public() return is public
- jws: skip signature on ErrJWKSKidNotFound
- Handle JWE JSON without protected header
- jws: don't strip internal whitespace before parsing JSON
- jws: fewer calls to OpaqueSigner.Public()
- Return a specific error when parsing empty string
- Reject typed nil at Verify time
full diff: https://github.com/go-jose/go-jose/compare/v4.1.4...v4.1.5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-03 23:40:55 +02:00
Sebastiaan van Stijn
441acb383d
vendor: github.com/mattn/go-runewidth v0.0.29
...
- Wrap: do not panic when the width is zero
- CreateLUT: rebuild the table after a DefaultCondition flag change
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.28...v0.0.29
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-03 23:35:43 +02:00
Paweł Gronowski
91fc8ad4a2
vendor: github.com/moby/moby/client v0.5.2-dev (b9b109e4d341)
...
full diff: https://github.com/moby/moby/compare/client/v0.5.1...b9b109e4d341
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-09-03 20:52:14 +02:00
Paweł Gronowski
cb6c7bc03f
vendor: github.com/moby/moby/api v1.56.0-dev (b9b109e4d341)
...
full diff: https://github.com/moby/moby/compare/api/v1.55.0...b9b109e4d341
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-09-03 20:40:38 +02:00
Sebastiaan van Stijn
3cb9f1cb86
vendor: github.com/fvbommel/sortorder v1.2.0
...
full diff: https://github.com/fvbommel/sortorder/compare/v1.1.0...v1.2.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-09-02 09:41:54 +02:00
Paweł Gronowski
cef1e66947
Merge pull request #7256 from thaJeztah/bump_go_events
...
vendor: github.com/docker/go-events v0.1.0
2026-08-28 21:50:23 +02:00
Sebastiaan van Stijn
76b505b054
vendor: github.com/klauspost/compress v1.19.2
...
full diff: https://github.com/klauspost/compress/compare/v1.18.7...v1.19.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-28 20:36:33 +02:00
Sebastiaan van Stijn
65b90d8888
vendor: github.com/docker/go-events v0.1.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-28 20:33:30 +02:00
Paweł Gronowski
ff3273f3e4
Merge pull request #7243 from thaJeztah/bump_go_metrics
...
vendor: github.com/docker/go-metrics v0.1.0
2026-08-27 18:50:25 +02:00
Paweł Gronowski
6fccf35355
Merge pull request #7246 from thaJeztah/bump_userns
...
vendor: github.com/moby/sys/userns v0.2.0
2026-08-27 18:50:15 +02:00
Sebastiaan van Stijn
b17df8fea3
vendor: github.com/docker/go-connections v0.8.1
...
fixes support for BSD variants
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-27 17:06:54 +02:00
Sebastiaan van Stijn
dc47c19e55
vendor: github.com/moby/sys/userns v0.2.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-27 17:06:09 +02:00
Sebastiaan van Stijn
3cd22ff935
vendor: github.com/docker/go-metrics v0.1.0
...
- Add support for creating timers with custom histogram buckets.
- Update `github.com/prometheus/client_golang` to v1.20.5.
- Update the minimum supported Go version to Go 1.21.
- Improve HTTP handler instrumentation, including minor performance improvements and cleanup.
- Avoid mutating shared label maps when creating namespaces and metrics.
- Encapsulate the Prometheus collector used by `HTTPMetric`.
- Improve package and API documentation.
- Update `golang.org/x/sys` and other dependencies.
full diff: https://github.com/docker/go-metrics/compare/v0.0.1...v0.1.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-27 17:05:24 +02:00
Paweł Gronowski
45f589590b
Merge pull request #7248 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.28
2026-08-27 14:10:47 +02:00
Paweł Gronowski
6b8da05715
Merge pull request #7245 from thaJeztah/bump_otels
...
vendor: go.opentelemetry.io/otel v1.46.0, go.opentelemetry.io/contrib v0.71.0
2026-08-27 14:10:18 +02:00
Paweł Gronowski
65ad909cde
Merge pull request #7244 from thaJeztah/bump_logrus
...
vendor: github.com/sirupsen/logrus v1.10.2
2026-08-27 14:10:06 +02:00
Sebastiaan van Stijn
bb63125969
vendor: go.opentelemetry.io/otel v1.46.0, go.opentelemetry.io/contrib v0.71.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-27 01:56:22 +02:00
Sebastiaan van Stijn
4f7a1841ba
vendor: github.com/mattn/go-runewidth v0.0.28
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.24...v0.0.28
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-26 17:08:29 +02:00
Sebastiaan van Stijn
ef48c25aed
vendor: github.com/sirupsen/logrus v1.10.2
...
removes some transitive dependencies
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-26 16:48:02 +02:00
Sebastiaan van Stijn
f2514827f4
vendor: github.com/containerd/platforms v1.0.0-rc.5
...
full diff: https://github.com/containerd/platforms/compare/v1.0.0-rc.4...v1.0.0-rc.5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-26 16:41:30 +02:00
Sebastiaan van Stijn
eed270f656
cli/compose/schema: migrate to github.com/santhosh-tekuri/jsonschema/v6
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-24 12:53:45 +02:00
Sebastiaan van Stijn
58d9cdd2d9
vendor: github.com/sirupsen/logrus v1.10.1
...
Notable changes:
- Add bidirectional `log/slog` integration with a Logrus hook and `slog.Handler`.
- Add minimal, composable logging interfaces for individual log levels.
- Fix reentrant logging deadlocks and improve concurrency safety around formatters, hooks, and entries.
- Fix generic `Log`, `Logf`, `Logln`, and `LogFn` methods unexpectedly panicking at `PanicLevel`.
- Allow `Entry.Caller` to be set explicitly and preserved across derived entries.
- Improve `TextFormatter` performance and reduce allocations significantly.
- Improve common Logger and Entry hot paths and caller-reporting performance.
- Update `TextFormatter` handling for `[]byte`, debug/trace colors, and Windows ANSI terminals.
- Raise the minimum supported Go version to Go 1.23.
- Deprecate `Entry.HasCaller` and `MutexWrap`.
release-notes: https://github.com/sirupsen/logrus/releases/tag/v1.10.0
release-notes: https://github.com/sirupsen/logrus/releases/tag/v1.10.1
full diff: https://github.com/sirupsen/logrus/compare/v1.9.4...v1.10.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-08-19 11:34:53 +02:00
Paweł Gronowski
400b45f682
vendor: github.com/moby/go-archive v0.3.3
...
full diff: https://github.com/moby/go-archive/compare/v0.3.2...v0.3.3
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-08-05 19:11:05 +02:00