Paweł Gronowski and GitHub
dfc4efb1e2
Merge pull request #7109 from vvoland/update-docker
...
[29.x] Bump to 29.6.2
v29.6.2
2026-07-16 18:09:24 +02:00
Paweł Gronowski
dba867594c
Bump to 29.6.2
...
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-07-16 12:51:30 +02:00
Paweł Gronowski
d9aefe565a
Merge tag 'v29.6.1' into 29.x
...
v29.6.1
2026-07-15 17:35:42 +02:00
Paweł Gronowski
9182b351c1
Merge tag 'v29.6.0' into 29.x
...
v29.6.0
2026-07-15 17:35:42 +02:00
Paweł Gronowski
0ae55a3e6c
Merge tag 'v29.5.3' into 29.x
...
v29.5.3
2026-07-15 17:35:42 +02:00
Paweł Gronowski
029a4b21b3
Merge tag 'v29.5.2' into 29.x
...
v29.5.2
2026-07-15 17:35:41 +02:00
Paweł Gronowski
e596fea454
Merge tag 'v29.5.1' into 29.x
...
v29.5.1
2026-07-15 17:35:41 +02:00
Paweł Gronowski
0c72f456aa
Merge tag 'v29.5.0' into 29.x
...
v29.5.0
2026-07-15 17:35:41 +02:00
Paweł Gronowski
26f2736a2b
Merge tag 'v29.4.1' into 29.x
...
v29.4.1
2026-07-15 17:35:41 +02:00
Paweł Gronowski
ac4c4dfabd
Merge tag 'v29.4.0' into 29.x
...
v29.4.0
2026-07-15 17:35:40 +02:00
Sebastiaan van Stijn and GitHub
1245054535
Merge pull request #7099 from vvoland/7098-29.x
...
[29.x backport] scripts/sync-branch: Fix non-interactive merge
2026-07-10 08:34:26 +02:00
Paweł Gronowski
f72fb0caf0
scripts/sync-branch: Fix non-interactive merge
...
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
(cherry picked from commit f57e528457 )
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-07-09 16:52:02 +02:00
Sebastiaan van Stijn and GitHub
e4af2bf0d3
Merge pull request #7097 from vvoland/7091-29.x
...
[29.x backport] gha: Add release branch sync workflow
2026-07-09 16:35:45 +02:00
Paweł Gronowski
49a1af6aaa
gha: Add release branch sync workflow
...
Add a manually dispatched workflow for maintainers to sync a Docker
release branch to a selected release tag.
The sync-release-branch job checks out the release branch, computes
the list of unmerged tags up to the requested tag via
scripts/unmerged-tags, merges them in order via scripts/sync-branch
using git merge --no-ff (resolving conflicts by taking the tag's
content), then pushes the result to a temporary branch.
The push-release-branch job runs after manual approval via the
docker-releases environment. It verifies that neither the release
branch nor the temporary branch moved since the sync job ran before
force-advancing the release branch and deleting the temporary branch.
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
(cherry picked from commit 182f56fe8c )
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-07-09 14:45:32 +02:00
Sebastiaan van Stijn and GitHub
8900f1d330
Merge pull request #7074 from thaJeztah/version
...
version 29.6.1
v29.6.1
2026-06-25 22:08:24 +02:00
Sebastiaan van Stijn and GitHub
22b8f1396e
Merge pull request #7069 from docker-agent/auto/migrate-to-docker-agent-action
...
chore: migrate cagent-action to docker-agent-action (v2.0.0)
2026-06-25 22:05:29 +02:00
Sebastiaan van Stijn
d9c59c9cfe
version 29.6.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-25 22:03:12 +02:00
Sebastiaan van Stijn and GitHub
64307515e6
Merge pull request #7073 from thaJeztah/bump_moby_user
...
vendor: github.com/moby/sys/user v0.4.1
2026-06-25 21:59:18 +02:00
Sebastiaan van Stijn
8fda97b545
vendor: github.com/moby/sys/user v0.4.1
...
- user: prevent possible DoS via unbounded parsing of user and group
database files in GHSA-mjcv-p78q-w5fw. This fixes a similar issue
as CVE-2026-47262 in containerd.
- user: prevent falling back to looking up numeric usernames
Improve handling of numeric user/group to prevent looking up numeric
values as usernames. This fixes a similar issue as [CVE-2026-46680] in
containerd.
- user: update minimum go version to go1.18
- assorted testing and linting fixes.
[CVE-2026-46680]: https://github.com/advisories/GHSA-fqw6-gf59-qr4w
full diff: https://github.com/moby/sys/compare/user/v0.4.0...user/v0.4.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-25 21:31:42 +02:00
Docker Agent
f9dc4e413b
chore: bump docker-agent-action to v2.0.1
...
Signed-off-by: Docker Agent <svc-github-docker-agent@docker.com >
2026-06-24 13:32:46 +00:00
Sebastiaan van Stijn and GitHub
f8a2d2b253
Merge pull request #7070 from docker/dependabot/github_actions/actions/checkout-7.0.0
...
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
2026-06-24 10:48:34 +02:00
dependabot[bot] and GitHub
7eb15d3454
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-24 08:42:35 +00:00
Sebastiaan van Stijn and GitHub
033b0ff9ff
Merge pull request #7063 from docker/dependabot/github_actions/crazy-max/dot-github/dot-github/workflows/zizmor.yml-1.10.1
...
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.10.0 to 1.10.1
2026-06-22 16:42:54 +02:00
Sebastiaan van Stijn and GitHub
317bfd1231
Merge pull request #7067 from docker/dependabot/github_actions/docker/cagent-action/dot-github/workflows/review-pr.yml-1.5.5
...
build(deps): bump docker/cagent-action/.github/workflows/review-pr.yml from 1.5.4 to 1.5.5
2026-06-22 16:41:07 +02:00
Sebastiaan van Stijn and GitHub
1b4c7d7807
Merge pull request #7068 from thaJeztah/bump_version
...
bump VERSION to v29.7.0-dev
2026-06-22 16:39:50 +02:00
Sebastiaan van Stijn
e45822e51d
bump VERSION to v29.7.0-dev
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-22 15:52:40 +02:00
dependabot[bot] and GitHub
a97303090d
build(deps): bump docker/cagent-action/.github/workflows/review-pr.yml
...
Bumps [docker/cagent-action/.github/workflows/review-pr.yml](https://github.com/docker/cagent-action ) from 1.5.4 to 1.5.5.
- [Release notes](https://github.com/docker/cagent-action/releases )
- [Commits](https://github.com/docker/cagent-action/compare/3f5dc9969f307d3c76acb7e9ccaefdd96bd62f4b...367a30ddb41e0156459d03750f508eac03f3c38a )
---
updated-dependencies:
- dependency-name: docker/cagent-action/.github/workflows/review-pr.yml
dependency-version: 1.5.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-22 08:43:57 +00:00
dependabot[bot] and GitHub
d516a10f93
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml
...
Bumps [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ) from 1.10.0 to 1.10.1.
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/716fd1c51a46c5d93a41d44a94b439c9ee802536...46267a6e61cd56aac2fc79943df180152f4c89d6 )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.10.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-19 08:42:27 +00:00
Sebastiaan van Stijn and GitHub
fb59821d45
Merge pull request #7062 from vvoland/update-docker
...
vendor: github.com/moby/moby api v1.55.0 and client v0.5.0
v29.6.0
2026-06-18 21:53:10 +02:00
Paweł Gronowski
ee2f737013
vendor: github.com/moby/moby/client v0.5.0
...
full diff: https://github.com/moby/moby/compare/client/v0.5.0-rc.1...client/v0.5.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-06-18 21:41:38 +02:00
Paweł Gronowski
1f80e23560
vendor: github.com/moby/moby/api v1.55.0
...
full diff: https://github.com/moby/moby/compare/api/v1.55.0-rc.1...api/v1.55.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-06-18 21:39:19 +02:00
Paweł Gronowski and GitHub
1d1562e004
Merge pull request #7029 from agirault/login-password-dash-stdin
...
cli/registry: support password dash stdin
v29.6.0-rc.1
2026-06-12 19:31:17 +02:00
Sebastiaan van Stijn and GitHub
8c2e80070b
Merge pull request #7051 from thaJeztah/bump_moby
...
vendor: github.com/moby/moby/api v1.55.0-rc.1, moby/client v0.5.0-rc.1
2026-06-12 19:07:07 +02:00
Sebastiaan van Stijn
233cd4a643
vendor: github.com/moby/moby/api v1.55.0-rc.1, moby/client v0.5.0-rc.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 18:54:32 +02:00
Paweł Gronowski and GitHub
5b600d015d
Merge pull request #7047 from thaJeztah/bump_go_events
...
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
2026-06-12 18:44:35 +02:00
Paweł Gronowski and GitHub
e6decf4d85
Merge pull request #7048 from thaJeztah/bump_compress
...
vendor: github.com/klauspost/compress v1.18.6
2026-06-12 18:44:24 +02:00
Paweł Gronowski and GitHub
a9284d1161
Merge pull request #7049 from thaJeztah/bump_x_net
...
vendor: golang.org/x/net v0.56.0
2026-06-12 18:44:11 +02:00
Paweł Gronowski and GitHub
e7319c78af
Merge pull request #7050 from thaJeztah/update_authors_mailmap
...
update AUTHORS and mailmap
2026-06-12 18:43:43 +02:00
Sebastiaan van Stijn
0f1dbdea86
update AUTHORS and mailmap
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 18:05:12 +02:00
Sebastiaan van Stijn
fef3ef83fe
vendor: golang.org/x/net v0.56.0
...
full diff: https://github.com/golang/net/compare/v0.55.0...v0.56.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:13:23 +02:00
Sebastiaan van Stijn
9eff92c55a
vendor: github.com/klauspost/compress v1.18.6
...
full diff: https://github.com/klauspost/compress/compare/v1.18.5...v1.18.6
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:11:24 +02:00
Sebastiaan van Stijn
43f745b242
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
...
full diff: https://github.com/docker/go-events/compare/605354379745...dbf6103125a4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:07:53 +02:00
Alexis Girault and Sebastiaan van Stijn
450df790a0
cli/registry: support password dash stdin
...
Signed-off-by: Alexis Girault <agirault@nvidia.com >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 16:15:23 +02:00
Sebastiaan van Stijn and GitHub
0df3977cb3
Merge pull request #7042 from thaJeztah/carry_deprecation
...
Add a deprecation warning about --link on default nw
2026-06-11 15:07:14 +02:00
Sebastiaan van Stijn and GitHub
86cf0a5185
Merge pull request #7043 from docker/dependabot/github_actions/crazy-max/dot-github/dot-github/workflows/zizmor.yml-1.10.0
...
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.8.0 to 1.10.0
2026-06-11 14:44:57 +02:00
Sebastiaan van Stijn and GitHub
3b10370c40
Merge pull request #7044 from docker/dependabot/github_actions/github/codeql-action-4.36.2
...
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
2026-06-11 14:39:44 +02:00
dependabot[bot] and GitHub
a23b1c6770
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.36.1 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-11 08:44:24 +00:00
dependabot[bot] and GitHub
3a197287d2
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml
...
Bumps [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ) from 1.8.0 to 1.10.0.
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536 )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-11 08:42:57 +00:00
Albin Kerouanton and Sebastiaan van Stijn
aaaeb80ceb
Add a deprecation warning about --link on default nw
...
Signed-off-by: Albin Kerouanton <albinker@gmail.com >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-10 20:12:17 +02:00
Sebastiaan van Stijn and GitHub
278ac25271
Merge pull request #6039 from thaJeztah/gomod_symlink
...
scripts/with-go-mod.sh: use symlink instead of -modfile
2026-06-10 16:11:07 +02:00