Sebastiaan van Stijn
8fda97b545
vendor: github.com/moby/sys/user v0.4.1
...
- user: prevent possible DoS via unbounded parsing of user and group
database files in GHSA-mjcv-p78q-w5fw. This fixes a similar issue
as CVE-2026-47262 in containerd.
- user: prevent falling back to looking up numeric usernames
Improve handling of numeric user/group to prevent looking up numeric
values as usernames. This fixes a similar issue as [CVE-2026-46680] in
containerd.
- user: update minimum go version to go1.18
- assorted testing and linting fixes.
[CVE-2026-46680]: https://github.com/advisories/GHSA-fqw6-gf59-qr4w
full diff: https://github.com/moby/sys/compare/user/v0.4.0...user/v0.4.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-25 21:31:42 +02:00
Paweł Gronowski
ee2f737013
vendor: github.com/moby/moby/client v0.5.0
...
full diff: https://github.com/moby/moby/compare/client/v0.5.0-rc.1...client/v0.5.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-06-18 21:41:38 +02:00
Paweł Gronowski
1f80e23560
vendor: github.com/moby/moby/api v1.55.0
...
full diff: https://github.com/moby/moby/compare/api/v1.55.0-rc.1...api/v1.55.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-06-18 21:39:19 +02:00
Sebastiaan van Stijn
233cd4a643
vendor: github.com/moby/moby/api v1.55.0-rc.1, moby/client v0.5.0-rc.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 18:54:32 +02:00
Paweł Gronowski and GitHub
5b600d015d
Merge pull request #7047 from thaJeztah/bump_go_events
...
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
2026-06-12 18:44:35 +02:00
Paweł Gronowski and GitHub
e6decf4d85
Merge pull request #7048 from thaJeztah/bump_compress
...
vendor: github.com/klauspost/compress v1.18.6
2026-06-12 18:44:24 +02:00
Sebastiaan van Stijn
fef3ef83fe
vendor: golang.org/x/net v0.56.0
...
full diff: https://github.com/golang/net/compare/v0.55.0...v0.56.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:13:23 +02:00
Sebastiaan van Stijn
9eff92c55a
vendor: github.com/klauspost/compress v1.18.6
...
full diff: https://github.com/klauspost/compress/compare/v1.18.5...v1.18.6
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:11:24 +02:00
Sebastiaan van Stijn
43f745b242
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
...
full diff: https://github.com/docker/go-events/compare/605354379745...dbf6103125a4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:07:53 +02:00
Sebastiaan van Stijn and GitHub
f4a4c1e2cf
Merge pull request #7038 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.24
2026-06-10 15:48:14 +02:00
Paweł Gronowski and GitHub
9c7701eb48
Merge pull request #7037 from thaJeztah/bump_otels
...
vendor: go.opentelemetry.io/otel v1.44.0, go.opentelemetry.io/contrib v0.69.0
2026-06-10 12:26:23 +02:00
Paweł Gronowski and GitHub
ddc801807d
Merge pull request #7036 from thaJeztah/bump_x_deps
...
vendor: update golang.org/x/* dependencies
2026-06-10 12:26:08 +02:00
Paweł Gronowski and GitHub
83963b759c
Merge pull request #7035 from thaJeztah/bump_sequential
...
vendor: github.com/moby/sys/sequential v0.7.0
2026-06-10 12:25:21 +02:00
Sebastiaan van Stijn
a9c82c0a9f
vendor: github.com/mattn/go-runewidth v0.0.24
...
- Optimize EastAsian RuneWidth with precomputed width table
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.23...v0.0.24
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:58:46 +02:00
Sebastiaan van Stijn
22d7ca46a3
vendor: go.opentelemetry.io/otel v1.44.0, go.opentelemetry.io/contrib v0.69.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:35:02 +02:00
Sebastiaan van Stijn
a721bd651b
vendor: google.golang.org/genproto 3dc84a4a5aaa
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:32:02 +02:00
Sebastiaan van Stijn
51583aec0b
vendor: golang.org/x/text v0.38.0
...
full diff: https://github.com/golang/text/compare/v0.37.0...v0.38.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:26:28 +02:00
Sebastiaan van Stijn
399c9456a7
vendor: golang.org/x/sync v0.21.0
...
full diff: https://github.com/golang/sync/compare/v0.20.0...v0.21.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:25:46 +02:00
Sebastiaan van Stijn
de24d1cbc0
vendor: golang.org/x/mod v0.37.0
...
full diff: https://github.com/golang/mod/compare/v0.36.0...v0.37.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:25:11 +02:00
Sebastiaan van Stijn
49dc46afed
vendor: golang.org/x/term v0.44.0
...
full diff: https://github.com/golang/term/compare/v0.43.0...v0.44.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:24:33 +02:00
Sebastiaan van Stijn
c72acd0a08
vendor: golang.org/x/sys v0.46.0
...
full diff: https://github.com/golang/sys/compare/v0.45.0...v0.46.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:23:59 +02:00
Sebastiaan van Stijn
b601b2577a
vendor: github.com/moby/sys/sequential v0.7.0
...
- update minimum go version to 1.24
- use os.OpenFile with O_FILE_FLAG_SEQUENTIAL_SCAN on Go 1.26+
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:22:14 +02:00
Sebastiaan van Stijn
1aae5d7822
vendor: github.com/docker/docker-credential-helpers v0.9.8
...
full diff: https://github.com/docker/docker-credential-helpers/compare/v0.9.7...v0.9.8
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-08 20:58:17 +02:00
Sebastiaan van Stijn
20f5e7c08c
vendor: golang.org/x/net v0.55.0
...
security changes (not used in our code)
- html: escape greater-than symbol in doctype identifiers (CVE-2026-25681)
- html: improve Noah's Ark clause performance (CVE-2026-25680)
- html: properly render fostered elements in foreign content (CVE-2026-42502)
- html: properly check namespace in "in body" any other end tag (CVE-2026-42506)
- html: ignore duplicate attributes during tokenization (CVE-2026-27136)
other changes:
- quic: fix appendMaxDataFrame erroneously accumulating sentLimit
- quic: establish a "happened-before" relationship between stream write and read
- quic: fix buffer slicing when handling overlapping stream data
- http2: avoid API changes when built with go1.27
security announce: https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8
full diff: https://github.com/golang/net/compare/v0.54.0...v0.55.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-05-22 11:27:01 +02:00
Sebastiaan van Stijn
20debc9c01
vendor: golang.org/x/sys v0.45.0
...
notable changes:
- unix: update to Linux kernel 7.0
- unix: add Readv, Writev, Preadv, Pwritev for OpenBSD
- windows: add NtSetEaFile, NtQueryEaFile and NtQueryInformationFile
- cpu: add LLACQ_SCREL, SCQ, DBAR_HINTS detection for loong64
- cpu: detect zbc extension on riscv64
full diff: https://github.com/golang/sys/compare/v0.44.0...v0.45.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-05-22 11:25:58 +02:00
Sebastiaan van Stijn
970afd5cc4
vendor: golang.org/x/net v0.54.0
...
full diff: https://github.com/golang/net/compare/v0.53.0...v0.54.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-05-11 12:22:37 +02:00
Sebastiaan van Stijn
7e07bf127c
vendor: golang.org/x/mod v0.36.0
...
full diff: https://github.com/golang/mod/compare/v0.34.0...v0.36.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-05-11 12:21:34 +02:00
Sebastiaan van Stijn
5aeb52681b
vendor: golang.org/x/text v0.37.0
...
full diff: https://github.com/golang/time/compare/v0.36.0...v0.37.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-05-11 12:20:20 +02:00
Sebastiaan van Stijn
644d046721
vendor: golang.org/x/term v0.43.0
...
full diff: https://github.com/golang/term/compare/v0.42.0...v0.43.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-05-11 12:18:58 +02:00
Sebastiaan van Stijn
a853f40a30
vendor: golang.org/x/sys v0.44.0
...
full diff: https://github.com/golang/sys/compare/v0.43.0...v0.44.0
- unix: add CPUSetDynamic for systems with more than 1024 CPUs
- unix: avoid nil pointer dereference in Utime
- unix: automatically remove container created by mkall.sh
- cpu: use IsProcessorFeaturePresent to calculate ARM64 on windows
- windows: add GetIfTable2Ex, GetIpInterface{Entry,Table}, GetUnicastIpAddressTable
- windows: avoid uint16 overflow in NewNTUnicodeString
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-05-11 12:18:14 +02:00
Sebastiaan van Stijn
1e1384fae2
vendor: github.com/docker/docker-credential-helpers v0.9.7
...
no code-changes; only updates go version
full diff: https://github.com/docker/docker-credential-helpers/compare/v0.9.6...v0.9.7
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-05-08 14:51:12 +02:00
Paweł Gronowski and GitHub
f285746704
Merge pull request #6947 from thaJeztah/bump_platforms
...
vendor: github.com/containerd/platforms v1.0.0-rc.4
2026-05-08 13:26:50 +02:00
Sebastiaan van Stijn
9bbe02848d
vendor: github.com/moby/swarmkit/v2 v2.1.2
...
full diff: https://github.com/moby/swarmkit/compare/v2.1.1...v2.1.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-23 21:39:53 +02:00
Sebastiaan van Stijn
b7f37e86da
vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2
...
- https://github.com/moby/moby/compare/api/v1.54.1...api/v1.54.2
- https://github.com/moby/moby/compare/client/v0.4.0...client/v0.4.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 16:49:58 +02:00
Sebastiaan van Stijn and GitHub
f31b8b2697
Merge pull request #6946 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.23
2026-04-20 14:52:27 +02:00
Paweł Gronowski and GitHub
4e4e8f940b
Merge pull request #6943 from thaJeztah/bump_creds_helper
...
vendor: github.com/docker/docker-credential-helpers v0.9.6
2026-04-20 14:38:45 +02:00
Sebastiaan van Stijn
beac1144a6
vendor: github.com/containerd/platforms v1.0.0-rc.4
...
full diff: https://github.com/containerd/platforms/compare/v1.0.0-rc.2...v1.0.0-rc.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:37:14 +02:00
Sebastiaan van Stijn
a75ab98e43
vendor: github.com/mattn/go-runewidth v0.0.23
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.22...v0.0.23
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:34:25 +02:00
Sebastiaan van Stijn
b9549d3ab5
vendor: golang.org/x/net v0.53.0
...
full diff: https://cs.opensource.google/go/x/net/+/refs/tags/v0.52.0...refs/tags/v0.53.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:22:26 +02:00
Sebastiaan van Stijn
2edf815a80
vendor: golang.org/x/term v0.42.0
...
full diff: https://cs.opensource.google/go/x/term/+/refs/tags/v0.41.0...refs/tags/v0.42.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:21:03 +02:00
Sebastiaan van Stijn
258010c788
vendor: golang.org/x/text v0.36.0
...
full diff: https://cs.opensource.google/go/x/text/+/refs/tags/v0.35.0...refs/tags/v0.36.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:20:06 +02:00
Sebastiaan van Stijn
cfa80d8644
vendor: golang.org/x/mod v0.35.0
...
full diff: https://cs.opensource.google/go/x/mod/+/refs/tags/v0.34.0...refs/tags/v0.35.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:18:58 +02:00
Sebastiaan van Stijn
c20b2479e0
vendor: golang.org/x/sys v0.43.0
...
full diff: https://cs.opensource.google/go/x/sys/+/refs/tags/v0.42.0...refs/tags/v0.43.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:17:33 +02:00
Sebastiaan van Stijn
573dd31bf7
vendor: github.com/docker/docker-credential-helpers v0.9.6
...
full diff: https://github.com/docker/docker-credential-helpers/compare/v0.9.5...v0.9.6
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:14:22 +02:00
Sebastiaan van Stijn
3362ae31d0
vendor: go.opentelemetry.io/contrib v0.68.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-17 14:09:30 +02:00
Sebastiaan van Stijn
a1edb22832
vendor: go.opentelemetry.io/otel v1.43.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-17 14:07:46 +02:00
Sebastiaan van Stijn
0a24da3382
vendor: google.golang.org/grpc v1.80.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-17 14:07:39 +02:00
Sebastiaan van Stijn
f24c779887
vendor: google.golang.org/genproto/* 9d38bb4040a9
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-17 14:04:40 +02:00
Sebastiaan van Stijn
b9a052a987
vendor: github.com/docker/go-connections v0.7.0
...
Changes:
- raise minimum supported Go version to go1.23
- sockets: `ConfigureTransport`: prevent idle connections leaking FDs.
- sockets: implement `WithAdditionalUsersAndGroups` for windows.
- tlsconfig: add ChaCha20-Poly1305 cipher suites to align closer with stdlib defaults.
- nat: SortPortMap: accept `map[Port][]PortBinding` as argument.
- nat: add benchmarks, optimize, and improve errors.
- proxy: check for `net.ErrClosed` instead of string-matching "use of closed network connection".
Breaking changes:
- tlsconfig: deprecate `tlsconfig.SystemCertPool` in favor of stdlib `x509.SystemCertPool`.
- sockets: remove deprecated `DialPipe`, `GetProxyEnv`, `DialerFromEnvironment`
Dependency updates:
- update github.com/Microsoft/go-winio to go v0.6.2
- update golang.org/x/sys to v0.10.0
full diff: https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-16 00:20:20 +02:00
Sebastiaan van Stijn
c88681f8d8
vendor: moby/api v1.54.1, moby/client v0.4.0
...
full diffs:
- https://github.com/moby/moby/compare/ef0a1e449505...api/v1.54.1
- https://github.com/moby/moby/compare/ef0a1e449505...client/v0.4.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-03 15:54:11 +02:00