chore(deps): update module github.com/docker/docker to v24.0.7 (main) #380

renovate-bot · 2023-10-27T07:00:50Z

renovate-bot commented

2023-10-27 07:00:50 +00:00

This PR contains the following updates:

Package	Type	Update	Change
github.com/docker/docker	require	patch	`v24.0.6+incompatible` -> `v24.0.7`

Release Notes

docker/docker

`v24.0.7`

Compare Source

24.0.7

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Write overlay2 layer metadata atomically. moby/moby#46703
Fix "Rootful-in-Rootless" Docker-in-Docker on systemd version 250 and later. moby/moby#46626
Fix dockerd-rootless-setuptools.sh when username contains a backslash. moby/moby#46407
Fix a bug that would prevent network sandboxes to be fully deleted when stopping containers with no network attachments and when dockerd --bridge=none is used. moby/moby#46702
Fix a bug where cancelling an API request could interrupt container restart. moby/moby#46697
Fix an issue where containers would fail to start when providing --ip-range with a range larger than the subnet. docker/for-mac#6870
Fix data corruption with zstd output. moby/moby#46709
Fix the conditions under which the container's MAC address is applied. moby/moby#46478
Improve the performance of the stats collector. moby/moby#46448
Fix an issue with source policy rules ending up in the wrong order. moby/moby#46441

Packaging updates

Add support for Fedora 39 and Ubuntu 23.10. docker/docker-ce-packaging#940, docker/docker-ce-packaging#955
Fix docker.socket not getting disabled when uninstalling the docker-ce RPM package. docker/docker-ce-packaging#852
Upgrade Go to go1.20.10. docker/docker-ce-packaging#951
Upgrade containerd to v1.7.6 (static binaries only). moby/moby#46103
Upgrade the containerd.io package to v1.6.24.

Security

Deny containers access to /sys/devices/virtual/powercap by default. This change hardens against CVE-2020-8694, CVE-2020-8695, and CVE-2020-12912, and an attack known as the PLATYPUS attack. For more details, see advisory, commit.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/docker/docker](https://github.com/docker/docker) | require | patch | `v24.0.6+incompatible` -> `v24.0.7` | --- ### Release Notes <details> <summary>docker/docker</summary> ### [`v24.0.7`](https://github.com/moby/moby/releases/tag/v24.0.7) [Compare Source](https://github.com/docker/docker/compare/v24.0.6...v24.0.7) #### 24.0.7 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.7 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.7) - [moby/moby, 24.0.7 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.7) ##### Bug fixes and enhancements - Write overlay2 layer metadata atomically. [moby/moby#46703](https://github.com/moby/moby/pull/46703) - Fix "Rootful-in-Rootless" Docker-in-Docker on systemd version 250 and later. [moby/moby#46626](https://github.com/moby/moby/pull/46626) - Fix `dockerd-rootless-setuptools.sh` when username contains a backslash. [moby/moby#46407](https://github.com/moby/moby/pull/46407) - Fix a bug that would prevent network sandboxes to be fully deleted when stopping containers with no network attachments and when `dockerd --bridge=none` is used. [moby/moby#46702](https://github.com/moby/moby/pull/46702) - Fix a bug where cancelling an API request could interrupt container restart. [moby/moby#46697](https://github.com/moby/moby/pull/46697) - Fix an issue where containers would fail to start when providing `--ip-range` with a range larger than the subnet. [docker/for-mac#6870](https://github.com/docker/for-mac/issues/6870) - Fix data corruption with zstd output. [moby/moby#46709](https://github.com/moby/moby/pull/46709) - Fix the conditions under which the container's MAC address is applied. [moby/moby#46478](https://github.com/moby/moby/pull/46478) - Improve the performance of the stats collector. [moby/moby#46448](https://github.com/moby/moby/pull/46448) - Fix an issue with source policy rules ending up in the wrong order. [moby/moby#46441](https://github.com/moby/moby/pull/46441) ##### Packaging updates - Add support for Fedora 39 and Ubuntu 23.10. [docker/docker-ce-packaging#940](https://github.com/docker/docker-ce-packaging/pull/940), [docker/docker-ce-packaging#955](https://github.com/docker/docker-ce-packaging/pull/955) - Fix `docker.socket` not getting disabled when uninstalling the `docker-ce` RPM package. [docker/docker-ce-packaging#852](https://github.com/docker/docker-ce-packaging/pull/852) - Upgrade Go to `go1.20.10`. [docker/docker-ce-packaging#951](https://github.com/docker/docker-ce-packaging/pull/951) - Upgrade containerd to `v1.7.6` (static binaries only). [moby/moby#46103](https://github.com/moby/moby/pull/46103) - Upgrade the `containerd.io` package to [`v1.6.24`](https://github.com/containerd/containerd/releases/tag/v1.6.24). ##### Security - Deny containers access to `/sys/devices/virtual/powercap` by default. This change hardens against [CVE-2020-8694](https://scout.docker.com/v/CVE-2020-8694), [CVE-2020-8695](https://scout.docker.com/v/CVE-2020-8695), and [CVE-2020-12912](https://scout.docker.com/v/CVE-2020-12912), and an attack known as [the PLATYPUS attack](https://platypusattack.com/). For more details, see [advisory](https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p), [commit](https://github.com/moby/moby/commit/c9ccbfad11a60e703e91b6cca4f48927828c7e35). </details> --- ### Configuration :date: **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). :vertical_traffic_light: **Automerge**: Enabled. :recycle: **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. :no_bell: **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit 2023-10-27 07:00:51 +00:00

renovate/artifacts Artifact file update failure

continuous-integration/drone/push Build is failing Details

continuous-integration/drone/pr Build is failing Details

fa927ead87 chore(deps): update module github.com/docker/docker to v24.0.7

renovate-bot scheduled this pull request to auto merge when all checks succeed 2023-10-27 07:00:56 +00:00

renovate-bot force-pushed renovate/main-github.com-docker-docker-24.x from fa927ead87 to f1d426ae5c

2023-10-27 07:01:20 +00:00

Compare

renovate-bot force-pushed renovate/main-github.com-docker-docker-24.x from f1d426ae5c to bd5cdd3443

2023-10-30 08:00:55 +00:00

Compare