Sebastiaan van Stijn
8fda97b545
vendor: github.com/moby/sys/user v0.4.1
...
- user: prevent possible DoS via unbounded parsing of user and group
database files in GHSA-mjcv-p78q-w5fw. This fixes a similar issue
as CVE-2026-47262 in containerd.
- user: prevent falling back to looking up numeric usernames
Improve handling of numeric user/group to prevent looking up numeric
values as usernames. This fixes a similar issue as [CVE-2026-46680] in
containerd.
- user: update minimum go version to go1.18
- assorted testing and linting fixes.
[CVE-2026-46680]: https://github.com/advisories/GHSA-fqw6-gf59-qr4w
full diff: https://github.com/moby/sys/compare/user/v0.4.0...user/v0.4.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-25 21:31:42 +02:00
Sebastiaan van Stijn
233cd4a643
vendor: github.com/moby/moby/api v1.55.0-rc.1, moby/client v0.5.0-rc.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 18:54:32 +02:00
Paweł Gronowski and GitHub
5b600d015d
Merge pull request #7047 from thaJeztah/bump_go_events
...
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
2026-06-12 18:44:35 +02:00
Sebastiaan van Stijn
9eff92c55a
vendor: github.com/klauspost/compress v1.18.6
...
full diff: https://github.com/klauspost/compress/compare/v1.18.5...v1.18.6
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:11:24 +02:00
Sebastiaan van Stijn
43f745b242
vendor: github.com/docker/go-events v0.0.0-20260608200158-dbf6103125a4
...
full diff: https://github.com/docker/go-events/compare/605354379745...dbf6103125a4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-12 17:07:53 +02:00
Sebastiaan van Stijn and GitHub
f4a4c1e2cf
Merge pull request #7038 from thaJeztah/bump_runewidth
...
vendor: github.com/mattn/go-runewidth v0.0.24
2026-06-10 15:48:14 +02:00
Paweł Gronowski and GitHub
9c7701eb48
Merge pull request #7037 from thaJeztah/bump_otels
...
vendor: go.opentelemetry.io/otel v1.44.0, go.opentelemetry.io/contrib v0.69.0
2026-06-10 12:26:23 +02:00
Sebastiaan van Stijn
a9c82c0a9f
vendor: github.com/mattn/go-runewidth v0.0.24
...
- Optimize EastAsian RuneWidth with precomputed width table
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.23...v0.0.24
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:58:46 +02:00
Sebastiaan van Stijn
22d7ca46a3
vendor: go.opentelemetry.io/otel v1.44.0, go.opentelemetry.io/contrib v0.69.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:35:02 +02:00
Sebastiaan van Stijn
b601b2577a
vendor: github.com/moby/sys/sequential v0.7.0
...
- update minimum go version to 1.24
- use os.OpenFile with O_FILE_FLAG_SEQUENTIAL_SCAN on Go 1.26+
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-09 16:22:14 +02:00
Paweł Gronowski and GitHub
f285746704
Merge pull request #6947 from thaJeztah/bump_platforms
...
vendor: github.com/containerd/platforms v1.0.0-rc.4
2026-05-08 13:26:50 +02:00
Sebastiaan van Stijn
9bbe02848d
vendor: github.com/moby/swarmkit/v2 v2.1.2
...
full diff: https://github.com/moby/swarmkit/compare/v2.1.1...v2.1.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-23 21:39:53 +02:00
Sebastiaan van Stijn
b7f37e86da
vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2
...
- https://github.com/moby/moby/compare/api/v1.54.1...api/v1.54.2
- https://github.com/moby/moby/compare/client/v0.4.0...client/v0.4.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 16:49:58 +02:00
Sebastiaan van Stijn
beac1144a6
vendor: github.com/containerd/platforms v1.0.0-rc.4
...
full diff: https://github.com/containerd/platforms/compare/v1.0.0-rc.2...v1.0.0-rc.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:37:14 +02:00
Sebastiaan van Stijn
a75ab98e43
vendor: github.com/mattn/go-runewidth v0.0.23
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.22...v0.0.23
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-20 14:34:25 +02:00
Sebastiaan van Stijn
b9a052a987
vendor: github.com/docker/go-connections v0.7.0
...
Changes:
- raise minimum supported Go version to go1.23
- sockets: `ConfigureTransport`: prevent idle connections leaking FDs.
- sockets: implement `WithAdditionalUsersAndGroups` for windows.
- tlsconfig: add ChaCha20-Poly1305 cipher suites to align closer with stdlib defaults.
- nat: SortPortMap: accept `map[Port][]PortBinding` as argument.
- nat: add benchmarks, optimize, and improve errors.
- proxy: check for `net.ErrClosed` instead of string-matching "use of closed network connection".
Breaking changes:
- tlsconfig: deprecate `tlsconfig.SystemCertPool` in favor of stdlib `x509.SystemCertPool`.
- sockets: remove deprecated `DialPipe`, `GetProxyEnv`, `DialerFromEnvironment`
Dependency updates:
- update github.com/Microsoft/go-winio to go v0.6.2
- update golang.org/x/sys to v0.10.0
full diff: https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-16 00:20:20 +02:00
Sebastiaan van Stijn
5fca671ef4
vendor: github.com/mattn/go-runewidth v0.0.22
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.21...v0.0.22
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-03 12:53:08 +02:00
Sebastiaan van Stijn
42da40a605
vendor: moby/client and moby/api master
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-03 12:44:53 +02:00
Sebastiaan van Stijn
98d978df6b
vendor: go.opentelemetry.io/otel v1.42.0, otel/contrib v1.67.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-02 12:51:19 +02:00
Paweł Gronowski and GitHub
5e856302bf
Merge pull request #6899 from thaJeztah/bump_compress
...
vendor: github.com/klauspost/compress v1.18.5
2026-04-02 11:37:51 +02:00
Paweł Gronowski and GitHub
253dc62658
Merge pull request #6903 from thaJeztah/bump_jose
...
vendor: github.com/go-jose/go-jose/v4 v4.1.4
2026-04-02 11:36:52 +02:00
Sebastiaan van Stijn
091afa4957
vendor: github.com/go-jose/go-jose/v4 v4.1.4
...
Fixes CVE-2026-34986 / GHSA-78h2-9frx-2jm8
full diff: https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-02 02:39:43 +02:00
Sebastiaan van Stijn
5efed5fa30
vendor: github.com/klauspost/compress v1.18.5
...
- zstd: Fix crash when changing encoder dictionary with same ID
full diff: https://github.com/klauspost/compress/compare/v1.18.4...v1.18.5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-01 00:38:50 +02:00
Sebastiaan van Stijn
cd9e5ae84f
vendor: github.com/moby/patternmatcher v0.6.1
...
- fix panic / nil pointer dereference on invalid patterns
full diff: https://github.com/moby/patternmatcher/compare/v0.6.0...v0.6.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-01 00:24:02 +02:00
Sebastiaan van Stijn
560db7d451
vendor: github.com/mattn/go-runewidth v0.0.21
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.20...v0.0.21
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-03-17 18:36:02 +01:00
Paweł Gronowski
206fc8c165
vendor: github.com/moby/moby/client v0.3.0
...
full diff: https://github.com/moby/moby/compare/client/v0.2.3-rc.1...client/v0.3.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-03-05 15:15:44 +01:00
Paweł Gronowski
0bf060f777
vendor: github.com/moby/moby/client v0.2.3-rc.1
...
full diff: https://github.com/moby/moby/client/compare/52dc67c0df94...v0.2.3-rc.1
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-02-27 20:34:37 +01:00
Paweł Gronowski
139b58d7f4
vendor: github.com/moby/moby/api v1.54.0-rc.1
...
full diff: https://github.com/moby/moby/api/compare/52dc67c0df94...v1.54.0-rc.1
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-02-27 20:34:19 +01:00
Sebastiaan van Stijn
8eedbdc6a8
vendor: moby/api v1.54.0-dev, moby/client v0.2.3-dev
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-02-27 18:16:02 +01:00
Sebastiaan van Stijn
cd070a5ed5
vendor: github.com/mattn/go-runewidth v0.0.20
...
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.19...v0.0.20
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-02-27 17:28:18 +01:00
Paweł Gronowski and GitHub
9e10dc3dca
Merge pull request #6824 from thaJeztah/bump_compress2
...
vendor: github.com/klauspost/compress v1.18.4
2026-02-27 15:39:27 +00:00
Sebastiaan van Stijn
caa8a50468
vendor: github.com/klauspost/compress v1.18.4
...
full diff: https://github.com/klauspost/compress/compare/v1.18.3...v1.18.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-02-27 15:23:55 +01:00
Sebastiaan van Stijn
fbd0e7f7c4
vendor: go.opentelemetry.io/otel v1.40.0
...
Includes fixes for [GHSA-9h8m-3fm2-qjrq] / [CVE-2026-24051] on macOS
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-02-27 15:16:34 +01:00
Paweł Gronowski
9c9ec73588
vendor: github.com/moby/moby/client v0.2.2
...
full diff: https://github.com/moby/moby/client/compare/v0.2.2-rc.2...v0.2.2
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-01-26 20:15:30 +01:00
Paweł Gronowski
bab3e81e1d
vendor: github.com/moby/moby/api v1.53.0
...
full diff: https://github.com/moby/moby/api/compare/v1.53.0-rc.2...v1.53.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2026-01-26 20:15:02 +01:00
Sebastiaan van Stijn
771660a17e
vendor: github.com/go-viper/mapstructure/v2 v2.5.0
...
full diff: https://github.com/go-viper/mapstructure/compare/v2.4.0...v2.5.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-01-26 12:32:10 +01:00
Sebastiaan van Stijn
c8841ac1b2
vendor: moby/api v1.53.0-rc.2, moby/client v0.2.2-rc.2
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-01-19 12:55:39 +01:00
Sebastiaan van Stijn
16873675bd
vendor: github.com/sirupsen/logrus v1.9.4
...
Notable changes:
- go.mod: update minimum supported go version to v1.17.
- go.mod: bump up dependencies.
- Touch-up godoc and add "doc" links.
- README: fix links, grammar, and update examples.
- Add GNU/Hurd support.
- Add WASI wasip1 support.
- Remove uses of deprecated `ioutil` package.
- CI: update actions and golangci-lint.
- CI: remove appveyor, add macOS.
full diff: https://github.com/sirupsen/logrus/compare/v1.9.3...v1.9.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-01-15 11:45:03 +01:00
Sebastiaan van Stijn
3ce8f1d80c
vendor: github.com/moby/go-archive v0.2.0
...
- remove aliases for deprecated types and functions
- chrootarchive: remove redundant "init" mitigation for CVE-2019-14271
- xattr: Fix OS matching
full diff: https://github.com/moby/go-archive/compare/v0.1.0...v0.2.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-12-23 18:11:31 +01:00
Paweł Gronowski
302498c33c
vendor: github.com/moby/moby/client v0.2.2-rc.1
...
full diff: https://github.com/moby/moby/client/compare/b2d84a3ef5a9...v0.2.2-rc.1
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2025-12-17 16:45:43 +01:00
Paweł Gronowski
def847be9a
vendor: github.com/moby/moby/api v1.53.0-rc.1
...
full diff: https://github.com/moby/moby/api/compare/b2d84a3ef5a9...v1.53.0-rc.1
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2025-12-17 16:45:23 +01:00
Rob Murray
d8351dbe65
Vendor moby/[api|client] from moby master
...
Signed-off-by: Rob Murray <rob.murray@docker.com >
2025-12-16 13:49:49 +00:00
Sebastiaan van Stijn
15de6ce8f7
vendor: github.com/klauspost/compress v1.18.2
...
full diff: https://github.com/klauspost/compress/compare/v1.18.0...v1.18.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-12-11 19:58:08 +01:00
Sebastiaan van Stijn
5c406f5ee4
vendor: github.com/morikuni/aec v1.1.0
...
full diff: https://github.com/morikuni/aec/compare/v1.0.0...v1.1.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-12-11 17:30:12 +01:00
Sebastiaan van Stijn
49021ad987
vendor: github.com/spf13/cobra v1.10.2, migrate to go.yaml.in/yaml/v3
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-12-09 15:47:11 +01:00
Sebastiaan van Stijn
1abfbf298c
vendor: github.com/moby/moby/client v0.2.1
...
full diff: https://github.com/moby/moby/compare/client/v0.1.0...v0.2.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-27 17:25:03 +01:00
Paweł Gronowski and GitHub
e730f6f0f3
Merge pull request #6643 from thaJeztah/bump_modules2
...
vendor: github.com/moby/moby/api v1.52.0, moby/client v0.1.0
2025-11-10 22:04:44 +01:00
Paweł Gronowski and GitHub
6ac3f93755
Merge pull request #6578 from thaJeztah/bump_otel_semconv
...
cli/command: update to semconv v1.37.0, otel v1.38.0
2025-11-10 22:04:29 +01:00
Sebastiaan van Stijn
ebc1995f9f
vendor: github.com/moby/moby/api v1.52.0, moby/client v0.1.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-10 21:57:40 +01:00
Sebastiaan van Stijn
4b450f113b
vendor: github.com/moby/moby/api, moby/client master
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-10 16:32:05 +01:00