9436 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sebastiaan van Stijn	1fbc90faf7	update to go1.21.11 ... go1.21.11 (released 2024-06-04) includes security fixes to the archive/zip and net/netip packages, as well as bug fixes to the compiler, the go command, the runtime, and the os package. See the Go 1.21.11 milestone on our issue tracker for details; - https://github.com/golang/go/issues?q=milestone%3AGo1.21.11+label%3ACherryPickApproved - full diff: https://github.com/golang/go/compare/go1.21.10...go1.21.11 From the security announcement; We have just released Go versions 1.22.4 and 1.21.11, minor point releases. These minor releases include 2 security fixes following the security policy: - archive/zip: mishandling of corrupt central directory record The archive/zip package's handling of certain types of invalid zip files differed from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors. Thanks to Yufan You for reporting this issue. This is CVE-2024-24789 and Go issue https://go.dev/issue/66869. - net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms. Thanks to Enze Wang of Alioth and Jianjun Chen of Zhongguancun Lab for reporting this issue. This is CVE-2024-24790 and Go issue https://go.dev/issue/67680. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 630e1d3e95) Signed-off-by: Austin Vazquez <macedonv@amazon.com>	2024-07-22 14:44:01 +00:00
Paweł Gronowski	c5aee98be7	update to go1.21.10 ... These minor releases include 2 security fixes following the security policy: - cmd/go: arbitrary code execution during build on darwin On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive. Thanks to Juho Forsén of Mattermost for reporting this issue. This is CVE-2024-24787 and Go issue https://go.dev/issue/67119. - net: malformed DNS message can cause infinite loop A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. Thanks to long-name-let-people-remember-you on GitHub for reporting this issue, and to Mateusz Poliwczak for bringing the issue to our attention. This is CVE-2024-24788 and Go issue https://go.dev/issue/66754. View the release notes for more information: https://go.dev/doc/devel/release#go1.22.3 - https://github.com/golang/go/issues?q=milestone%3AGo1.21.10+label%3ACherryPickApproved - full diff: https://github.com/golang/go/compare/go1.21.9...go1.21.10 **- Description for the changelog** ```markdown changelog Update Go runtime to 1.21.10 ``` Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com> (cherry picked from commit eb99994c75) Signed-off-by: Austin Vazquez <macedonv@amazon.com>	2024-07-22 14:41:44 +00:00
Sebastiaan van Stijn	bc7a15921e	Merge pull request #5106 from laurazard/update-actions-25.0 ... [25.0 backport] gha: update to actions/upload-artifact@v4	2024-06-03 16:47:47 +02:00
Sebastiaan van Stijn	d379797cec	gha: update to actions/upload-artifact@v4 ... v3 is using Node.js 16 which are being deprecated: Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/upload-artifact@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/. ci: incl. platform pair in artifact name This fixes an the issue w/ `upload-artifact@v4`. See: https://github.blog/2024-02-12-get-started-with-v4-of-github-actions-artifacts/#compatibility Co-authored-by: Laura Brehm <laurabrehm@hey.com> Signed-off-by: Laura Brehm <laurabrehm@hey.com> Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit b9cd722595) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-06-03 16:43:15 +02:00
Laura Brehm	7e7b0ee8e6	Merge pull request #4988 from vvoland/v25.0-4986 ... [25.0 backport] update to go1.21.9	2024-04-05 15:48:30 +01:00
Paweł Gronowski	f2918727a6	update to go1.21.9 ... go1.21.9 (released 2024-04-03) includes a security fix to the net/http package, as well as bug fixes to the linker, and the go/types and net/http packages. See the Go 1.21.9 milestone on our issue tracker for details. - https://github.com/golang/go/issues?q=milestone%3AGo1.21.9+label%3ACherryPickApproved - full diff: https://github.com/golang/go/compare/go1.21.8...go1.21.9 **- Description for the changelog** ```markdown changelog Update Go runtime to 1.21.9 ``` Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com> (cherry picked from commit 0a5bd6c75b)	2024-04-05 12:45:15 +02:00
Paweł Gronowski	5dc9bcc5b7	Merge pull request #4951 from vvoland/vendor-docker-25.0.5-dev ... vendor: github.com/docker/docker e63daec8672d (v25.0.5-dev) v25.0.5	2024-03-19 15:51:10 +01:00
Paweł Gronowski	c2be159764	vendor: github.com/docker/docker e63daec8672d (v25.0.5-dev) ... full diff: https://github.com/docker/docker/compare/061aa95809be...e63daec8672d Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-19 15:43:45 +01:00
Bjorn Neergaard	1a576c50a9	Merge pull request #4924 from vvoland/v25.0-4923 ... [25.0 backport] bake: Add `windows/arm64` target to bin-image-cross v25.0.4	2024-03-06 09:08:42 -07:00
Paweł Gronowski	690b1565fb	bake: Add windows/arm64 target to bin-image-cross ... Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com> (cherry picked from commit ab9d560570) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-06 16:48:25 +01:00
Sebastiaan van Stijn	03114ec2ca	Merge pull request #4921 from vvoland/vendor-docker ... vendor: github.com/docker/docker 061aa95809be396a6	2024-03-06 15:33:35 +01:00
Paweł Gronowski	833128bce5	vendor: github.com/docker/docker 061aa95809be396a6 ... no change in vendored files full diff: https://github.com/docker/docker/compare/9e526bc3943c...061aa95809be396a6 Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-06 15:08:04 +01:00
Sebastiaan van Stijn	fd4d39aa88	Merge pull request #4920 from vvoland/vendor-docker ... [25.0] vendor: github.com/docker/docker 9e526bc3943c	2024-03-05 22:25:25 +01:00
Sebastiaan van Stijn	b4b35dedc6	Merge pull request #4919 from vvoland/v25.0-4918 ... [25.0 backport] update to go1.21.8	2024-03-05 22:24:46 +01:00
Paweł Gronowski	ce113a74af	vendor: github.com/docker/docker 9e526bc3943c ... no change in vendored files full diff: https://github.com/docker/docker/compare/51e876cd964c...9e526bc3943c Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-05 22:15:37 +01:00
Paweł Gronowski	a3b6c9ea7e	update to go1.21.8 ... go1.21.8 (released 2024-03-05) includes 5 security fixes: - crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783, https://go.dev/issue/65390) - net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290, https://go.dev/issue/65383) - net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289, https://go.dev/issue/65065) - html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785, https://go.dev/issue/65697) - net/mail: comments in display names are incorrectly handled (CVE-2024-24784, https://go.dev/issue/65083) View the release notes for more information: https://go.dev/doc/devel/release#go1.21.8 - https://github.com/golang/go/issues?q=milestone%3AGo1.21.8+label%3ACherryPickApproved - full diff: https://github.com/golang/go/compare/go1.21.6...go1.21.8 Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com> (cherry picked from commit 3b77477943) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-05 22:09:26 +01:00
Sebastiaan van Stijn	2bf4225ad2	Merge pull request #4908 from vvoland/vendor-docker ... [25.0] vendor: github.com/docker/docker 25.0.4-51e876cd964c4bb1f0a7c1bc24ecab9321b3ff1c	2024-03-05 17:13:10 +01:00
Sebastiaan van Stijn	f783e8d58a	Merge pull request #4915 from vvoland/v25.0-4839 ... [25.0 backport] update CI	2024-03-05 13:01:56 +01:00
Christopher Petito	956d15c723	Cleanup of dockerfiles, compose files and env vars ... Signed-off-by: Christopher Petito <chrisjpetito@gmail.com> (cherry picked from commit 69ed6588a8) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-05 09:56:21 +01:00
Christopher Petito	5a942fadcf	Update gha runners and engines used in e2e tests ... - gha runners updated to ubuntu 22.04 - e2e now runs against moby 23.0, 24.0 and 25.0 - temporarily skip broken test for moby < 25 Signed-off-by: Christopher Petito <chrisjpetito@gmail.com> (cherry picked from commit 6b67b95493) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-05 09:56:19 +01:00
Paweł Gronowski	592c146cca	testenv: Add DaemonAPIVersion helper ... Allow tests to check the negotiated API version used by the client. Can be used to skip tests based on API versions, for example: ```go skip.If(t, versions.LessThan(environment.DaemonAPIVersion(t), "1.44")) ``` will skip the test if the API version is older than 1.44 Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com> (cherry picked from commit 9831fea4db) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-05 09:56:16 +01:00
Paweł Gronowski	0735e78cc9	vendor: github.com/docker/docker 25.0.4-51e876cd96 ... full diff: https://github.com/docker/docker/compare/v25.0.3...51e876cd964c4bb1f0a7c1bc24ecab9321b3ff1c Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-04 12:58:21 +01:00
Sebastiaan van Stijn	63a3db4b31	Merge pull request #4914 from vvoland/v25.0-4831 ... [25.0 backport] Dockerfile: update docker compose to v2.24.3	2024-03-04 12:50:24 +01:00
Sebastiaan van Stijn	0b9bf6a6f4	Merge pull request #4913 from vvoland/v25-4867 ... [25.0 backport] Test fixes needed for upgrading ci runners and engine	2024-03-04 12:49:50 +01:00
Sebastiaan van Stijn	e0dab5ce1e	Dockerfile: update docker compose to v2.24.3 ... Update the version of compose used in CI to the latest version. - full diff: https://github.com/docker/compose/compare/v2.24.2...v2.24.3 - release notes: https://github.com/docker/compose/releases/tag/v2.24.2 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 53e2e54c29) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-04 12:32:16 +01:00
Sebastiaan van Stijn	b59204cc43	Merge pull request #4912 from vvoland/v25-4881 ... [25.0 backport] update to go1.21.7	2024-03-04 12:20:28 +01:00
Sebastiaan van Stijn	b8459ce351	Merge pull request #4911 from vvoland/v25-4876 ... [25.0 backport] Fixed typo in bash completion functions	2024-03-04 12:19:52 +01:00
Christopher Petito	a25a9100f3	Minor test fixes necessary for eventually upgrading ci runners and engine version ... Signed-off-by: Christopher Petito <chrisjpetito@gmail.com> (cherry picked from commit 30dd7c1319) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-04 12:19:36 +01:00
Sebastiaan van Stijn	eb223e7eaf	Merge pull request #4910 from vvoland/v25-4860 ... [25.0 backport] docker stack: allow '=' separator in extra_hosts	2024-03-04 12:19:04 +01:00
Sebastiaan van Stijn	c87c4c96ec	update to go1.21.7 ... go1.21.7 (released 2024-02-06) includes fixes to the compiler, the go command, the runtime, and the crypto/x509 package. See the Go 1.21.7 milestone on our issue tracker for details: - https://github.com/golang/go/issues?q=milestone%3AGo1.21.7+label%3ACherryPickApproved - full diff: https://github.com/golang/go/compare/go1.21.6...go1.21.7 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 20b9d489e0) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-04 12:15:36 +01:00
David le Blanc	c270556d44	Fixed typo in bash completion functions ... Signed-off-by: David le Blanc <david-le-blanc@users.noreply.github.com> (cherry picked from commit c514003e69) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-04 12:12:55 +01:00
Sebastiaan van Stijn	98f603bdd1	Merge pull request #4909 from vvoland/v25-4862 ... [25.0 backport] Avoid keeping @docker_cli_[UUID] files	2024-03-04 11:55:42 +01:00
Rob Murray	1cddb2b03d	docker stack: allow '=' separator in extra_hosts ... extra_hosts in the compose file format allows '=' as a separator, and brackets around IP addresses, the engine API doesn't. So, transform the values when reading a compose file for 'docker stack'. Signed-off-by: Rob Murray <rob.murray@docker.com> (cherry picked from commit c986d09bca) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-04 11:55:30 +01:00
Kirill A. Korinsky	8715d9a33a	Avoid keeping @docker_cli_[UUID] files ... Seems that OpenBSD behaves like darwin and requires to unlink all socket, after it was used. Tested on OpenBSD 7.4 Signed-off-by: Kirill A. Korinsky <kirill@korins.ky> (cherry picked from commit 2c214241fa) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2024-03-04 11:34:38 +01:00
Sebastiaan van Stijn	a5937c6043	Merge pull request #4885 from thaJeztah/25.0_backport_regenerate_mdddocs ... [25.0 backport] docs: regenerate markdown	2024-02-21 11:58:13 +01:00
Sebastiaan van Stijn	9142b58351	docs: regenerate markdown ... Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit f2e98f9a93) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-02-21 11:34:20 +01:00
Sebastiaan van Stijn	f67e569a8f	Merge pull request #4883 from dvdksn/backport_docs_cli_reference_urlscheme ... [25.0 backport] docs: update link targets	2024-02-21 09:32:16 +01:00
David Karlsson	08eba2246c	docs: update url scheme for reference docs ... Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com> (cherry picked from commit caf72655fb) Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>	2024-02-21 09:22:08 +01:00
David Karlsson	4fd2cf5f2d	deps: update cli-docs-tool version (v0.7.0) ... Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com> (cherry picked from commit e244044944) Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>	2024-02-21 09:22:04 +01:00
Sebastiaan van Stijn	bdfe1645f5	Merge pull request #4858 from thaJeztah/25.0_vendor_docker_25.0.3 ... [25.0] vendor: github.com/docker/docker v25.0.3	2024-02-07 10:47:40 +01:00
Sebastiaan van Stijn	e456704864	vendor: github.com/docker/docker v25.0.3 ... full diff: https://github.com/docker/docker/compare/v25.0.2...v25.0.3 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-02-07 02:20:23 +01:00
Sebastiaan van Stijn	4debf411d1	Merge pull request #4857 from thaJeztah/25.0_backport_codecov-action-4 ... [25.0 backport] build(deps): Bump codecov/codecov-action from 3 to 4 v25.0.3	2024-02-06 21:42:40 +01:00
Sebastiaan van Stijn	5e6ce1bde1	Merge pull request #4856 from thaJeztah/25.0_backport_plugin-socket-tests ... [25.0 backport] Add tests for CLI/plugin communication	2024-02-06 21:42:20 +01:00
dependabot[bot]	5428301e3f	build(deps): Bump codecov/codecov-action from 3 to 4 ... Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 4. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v3...v4) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit b123ce6526) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-02-06 21:35:08 +01:00
Laura Brehm	1cbc218c05	tests: add plugin-socket-compatibility tests ... Adds a new plugin to the e2e plugins that simulates an older plugin binary and a test suite to ensure older plugin binaries keep behaving the same with newer CLI versions. Signed-off-by: Laura Brehm <laurabrehm@hey.com> (cherry picked from commit cfa9fef77d) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-02-06 21:31:55 +01:00
Laura Brehm	2f6b5ada71	scripts: don't hardcode architecture in e2e script ... Signed-off-by: Laura Brehm <laurabrehm@hey.com> (cherry picked from commit 1c4d6d85dd) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-02-06 21:31:55 +01:00
Laura Brehm	d8e07c9c47	tests: add tests for cli-plugins/socket ... Signed-off-by: Laura Brehm <laurabrehm@hey.com> (cherry picked from commit 469bfc05ed) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-02-06 21:31:52 +01:00
Sebastiaan van Stijn	5f1b610fc3	Merge pull request #4841 from thaJeztah/25.0_vendor_docker_25.0.2 ... [25.0] vendor: github.com/docker/docker v25.0.2	2024-02-01 16:32:18 +01:00
Sebastiaan van Stijn	c105cd3ac2	Merge pull request #4837 from dvdksn/25.0_docs_backport_linode_volume_plugin ... [25.0 Backport] docs: Add Linode docker volume plugin #4396	2024-02-01 04:15:42 +01:00
Sebastiaan van Stijn	62b2963b80	vendor: github.com/docker/docker v25.0.2 ... no changes in vendored code full diff: https://github.com/docker/docker/compare/v25.0.1...v25.0.2 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-02-01 04:12:31 +01:00