mirror of
https://github.com/docker/cli.git
synced 2026-08-24 10:05:37 -05:00
Sebastiaan van Stijn
20f5e7c08c
security changes (not used in our code) - html: escape greater-than symbol in doctype identifiers (CVE-2026-25681) - html: improve Noah's Ark clause performance (CVE-2026-25680) - html: properly render fostered elements in foreign content (CVE-2026-42502) - html: properly check namespace in "in body" any other end tag (CVE-2026-42506) - html: ignore duplicate attributes during tokenization (CVE-2026-27136) other changes: - quic: fix appendMaxDataFrame erroneously accumulating sentLimit - quic: establish a "happened-before" relationship between stream write and read - quic: fix buffer slicing when handling overlapping stream data - http2: avoid API changes when built with go1.27 security announce: https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8 full diff: https://github.com/golang/net/compare/v0.54.0...v0.55.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>