Sebastiaan van Stijn and GitHub
8900f1d330
Merge pull request #7074 from thaJeztah/version
...
version 29.6.1
v29.6.1
2026-06-25 22:08:24 +02:00
Sebastiaan van Stijn and GitHub
22b8f1396e
Merge pull request #7069 from docker-agent/auto/migrate-to-docker-agent-action
...
chore: migrate cagent-action to docker-agent-action (v2.0.0)
2026-06-25 22:05:29 +02:00
Sebastiaan van Stijn
d9c59c9cfe
version 29.6.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-25 22:03:12 +02:00
Sebastiaan van Stijn and GitHub
64307515e6
Merge pull request #7073 from thaJeztah/bump_moby_user
...
vendor: github.com/moby/sys/user v0.4.1
2026-06-25 21:59:18 +02:00
Sebastiaan van Stijn
8fda97b545
vendor: github.com/moby/sys/user v0.4.1
...
- user: prevent possible DoS via unbounded parsing of user and group
database files in GHSA-mjcv-p78q-w5fw. This fixes a similar issue
as CVE-2026-47262 in containerd.
- user: prevent falling back to looking up numeric usernames
Improve handling of numeric user/group to prevent looking up numeric
values as usernames. This fixes a similar issue as [CVE-2026-46680] in
containerd.
- user: update minimum go version to go1.18
- assorted testing and linting fixes.
[CVE-2026-46680]: https://github.com/advisories/GHSA-fqw6-gf59-qr4w
full diff: https://github.com/moby/sys/compare/user/v0.4.0...user/v0.4.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-25 21:31:42 +02:00
Docker Agent
f9dc4e413b
chore: bump docker-agent-action to v2.0.1
...
Signed-off-by: Docker Agent <svc-github-docker-agent@docker.com >
2026-06-24 13:32:46 +00:00
Sebastiaan van Stijn and GitHub
f8a2d2b253
Merge pull request #7070 from docker/dependabot/github_actions/actions/checkout-7.0.0
...
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
2026-06-24 10:48:34 +02:00
dependabot[bot] and GitHub
7eb15d3454
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-24 08:42:35 +00:00
Sebastiaan van Stijn and GitHub
033b0ff9ff
Merge pull request #7063 from docker/dependabot/github_actions/crazy-max/dot-github/dot-github/workflows/zizmor.yml-1.10.1
...
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.10.0 to 1.10.1
2026-06-22 16:42:54 +02:00
Sebastiaan van Stijn and GitHub
317bfd1231
Merge pull request #7067 from docker/dependabot/github_actions/docker/cagent-action/dot-github/workflows/review-pr.yml-1.5.5
...
build(deps): bump docker/cagent-action/.github/workflows/review-pr.yml from 1.5.4 to 1.5.5
2026-06-22 16:41:07 +02:00
Sebastiaan van Stijn and GitHub
1b4c7d7807
Merge pull request #7068 from thaJeztah/bump_version
...
bump VERSION to v29.7.0-dev
2026-06-22 16:39:50 +02:00
Sebastiaan van Stijn
e45822e51d
bump VERSION to v29.7.0-dev
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-22 15:52:40 +02:00
dependabot[bot] and GitHub
a97303090d
build(deps): bump docker/cagent-action/.github/workflows/review-pr.yml
...
Bumps [docker/cagent-action/.github/workflows/review-pr.yml](https://github.com/docker/cagent-action ) from 1.5.4 to 1.5.5.
- [Release notes](https://github.com/docker/cagent-action/releases )
- [Commits](https://github.com/docker/cagent-action/compare/3f5dc9969f307d3c76acb7e9ccaefdd96bd62f4b...367a30ddb41e0156459d03750f508eac03f3c38a )
---
updated-dependencies:
- dependency-name: docker/cagent-action/.github/workflows/review-pr.yml
dependency-version: 1.5.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-22 08:43:57 +00:00
dependabot[bot] and GitHub
d516a10f93
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml
...
Bumps [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ) from 1.10.0 to 1.10.1.
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/716fd1c51a46c5d93a41d44a94b439c9ee802536...46267a6e61cd56aac2fc79943df180152f4c89d6 )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.10.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-19 08:42:27 +00:00
Sebastiaan van Stijn and GitHub
fb59821d45
Merge pull request #7062 from vvoland/update-docker
...
vendor: github.com/moby/moby api v1.55.0 and client v0.5.0
v29.6.0
2026-06-18 21:53:10 +02:00
Paweł Gronowski
ee2f737013
vendor: github.com/moby/moby/client v0.5.0
...
full diff: https://github.com/moby/moby/compare/client/v0.5.0-rc.1...client/v0.5.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-06-18 21:41:38 +02:00
Paweł Gronowski
1f80e23560
vendor: github.com/moby/moby/api v1.55.0
...
full diff: https://github.com/moby/moby/compare/api/v1.55.0-rc.1...api/v1.55.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-06-18 21:39:19 +02:00
Paweł Gronowski and GitHub
1d1562e004
Merge pull request #7029 from agirault/login-password-dash-stdin
...
cli/registry: support password dash stdin
v29.6.0-rc.1
2026-06-12 19:31:17 +02:00
Sebastiaan van Stijn and GitHub
8c2e80070b
Merge pull request #7051 from thaJeztah/bump_moby
...
vendor: github.com/moby/moby/api v1.55.0-rc.1, moby/client v0.5.0-rc.1
2026-06-12 19:07:07 +02:00
Sebastiaan van Stijn
233cd4a643
vendor: github.com/moby/moby/api v1.55.0-rc.1, moby/client v0.5.0-rc.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 18:54:32 +02:00
Paweł Gronowski and GitHub
5b600d015d
Merge pull request #7047 from thaJeztah/bump_go_events
...
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
2026-06-12 18:44:35 +02:00
Paweł Gronowski and GitHub
e6decf4d85
Merge pull request #7048 from thaJeztah/bump_compress
...
vendor: github.com/klauspost/compress v1.18.6
2026-06-12 18:44:24 +02:00
Paweł Gronowski and GitHub
a9284d1161
Merge pull request #7049 from thaJeztah/bump_x_net
...
vendor: golang.org/x/net v0.56.0
2026-06-12 18:44:11 +02:00
Paweł Gronowski and GitHub
e7319c78af
Merge pull request #7050 from thaJeztah/update_authors_mailmap
...
update AUTHORS and mailmap
2026-06-12 18:43:43 +02:00
Sebastiaan van Stijn
0f1dbdea86
update AUTHORS and mailmap
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 18:05:12 +02:00
Sebastiaan van Stijn
fef3ef83fe
vendor: golang.org/x/net v0.56.0
...
full diff: https://github.com/golang/net/compare/v0.55.0...v0.56.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:13:23 +02:00
Sebastiaan van Stijn
9eff92c55a
vendor: github.com/klauspost/compress v1.18.6
...
full diff: https://github.com/klauspost/compress/compare/v1.18.5...v1.18.6
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:11:24 +02:00
Sebastiaan van Stijn
43f745b242
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
...
full diff: https://github.com/docker/go-events/compare/605354379745...dbf6103125a4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:07:53 +02:00
Alexis Girault and Sebastiaan van Stijn
450df790a0
cli/registry: support password dash stdin
...
Signed-off-by: Alexis Girault <agirault@nvidia.com >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 16:15:23 +02:00
Sebastiaan van Stijn and GitHub
0df3977cb3
Merge pull request #7042 from thaJeztah/carry_deprecation
...
Add a deprecation warning about --link on default nw
2026-06-11 15:07:14 +02:00
Sebastiaan van Stijn and GitHub
86cf0a5185
Merge pull request #7043 from docker/dependabot/github_actions/crazy-max/dot-github/dot-github/workflows/zizmor.yml-1.10.0
...
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.8.0 to 1.10.0
2026-06-11 14:44:57 +02:00
Sebastiaan van Stijn and GitHub
3b10370c40
Merge pull request #7044 from docker/dependabot/github_actions/github/codeql-action-4.36.2
...
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
2026-06-11 14:39:44 +02:00
dependabot[bot] and GitHub
a23b1c6770
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.36.1 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-11 08:44:24 +00:00
dependabot[bot] and GitHub
3a197287d2
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml
...
Bumps [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ) from 1.8.0 to 1.10.0.
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536 )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-11 08:42:57 +00:00
Albin Kerouanton and Sebastiaan van Stijn
aaaeb80ceb
Add a deprecation warning about --link on default nw
...
Signed-off-by: Albin Kerouanton <albinker@gmail.com >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-10 20:12:17 +02:00
Sebastiaan van Stijn and GitHub
278ac25271
Merge pull request #6039 from thaJeztah/gomod_symlink
...
scripts/with-go-mod.sh: use symlink instead of -modfile
2026-06-10 16:11:07 +02:00
Sebastiaan van Stijn and GitHub
54f330978e
Merge pull request #7028 from docker/dependabot/github_actions/docker/setup-qemu-action-4.1.0
...
build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
2026-06-10 15:49:05 +02:00
Sebastiaan van Stijn and GitHub
f4a4c1e2cf
Merge pull request #7038 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.24
2026-06-10 15:48:14 +02:00
Sebastiaan van Stijn
deacdc6feb
scripts/with-go-mod.sh: simplify symlink comparison
...
Make sure the symlinks point to the same file; not if both are
identical (absolute or relative symlink); it's only for suppressing
the warning so not critical.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-10 15:44:04 +02:00
Sebastiaan van Stijn
c17c247ed4
scripts/with-go-mod.sh: use symlink instead of -modfile
...
While the "-modfile=vendor.mod" is slightly more correct, using a
symlink allows for most of the go tools to work "as usual", just
without an acual `go.mod` being committed in the repository.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-10 15:44:01 +02:00
Sebastiaan van Stijn and GitHub
b680c49f57
Merge pull request #7041 from thaJeztah/no_tools
...
man: remove tools.go in favor of tools directive
2026-06-10 15:40:42 +02:00
Sebastiaan van Stijn and GitHub
4748c4e4d3
Merge pull request #7040 from thaJeztah/fix_go_version
...
scripts/with-go-mod: use correct minimum Go version
2026-06-10 15:37:02 +02:00
Paweł Gronowski and GitHub
9c7701eb48
Merge pull request #7037 from thaJeztah/bump_otels
...
vendor: go.opentelemetry.io/otel v1.44.0, go.opentelemetry.io/contrib v0.69.0
2026-06-10 12:26:23 +02:00
Paweł Gronowski and GitHub
ddc801807d
Merge pull request #7036 from thaJeztah/bump_x_deps
...
vendor: update golang.org/x/* dependencies
2026-06-10 12:26:08 +02:00
Paweł Gronowski and GitHub
83963b759c
Merge pull request #7035 from thaJeztah/bump_sequential
...
vendor: github.com/moby/sys/sequential v0.7.0
2026-06-10 12:25:21 +02:00
Paweł Gronowski and GitHub
2e635d7baf
Merge pull request #7032 from thaJeztah/bump_creds_helper
...
vendor: github.com/docker/docker-credential-helpers v0.9.8
2026-06-10 12:24:02 +02:00
Sebastiaan van Stijn
1c22ca1aac
scripts/docs: use "go install tool"
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-10 11:49:33 +02:00
Sebastiaan van Stijn
55016421fd
man: remove tools.go in favor of tools directive
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-10 11:37:02 +02:00
Sebastiaan van Stijn
8b2a990843
scripts/with-go-mod: use correct minimum Go version
...
Follow-up to 8f7dc04070 , which updated the
minimum Go version in vendor.mod, but did not adjust this script.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-10 10:23:25 +02:00
Sebastiaan van Stijn
a9c82c0a9f
vendor: github.com/mattn/go-runewidth v0.0.24
...
- Optimize EastAsian RuneWidth with precomputed width table
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.23...v0.0.24
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:58:46 +02:00