216674c3e3
vendor: github.com/docker/docker 50212d215ba7 (master, v28.0-dev)
...
full diff: 6f6c3b9211...50212d215bgithub@gone.nl >
2025-01-08 18:11:19 +01:00
a289f11ac8
vendor: github.com/moby/swarmkit/v2 v2.0.0-20250103191802-8c1959736554
...
no changes in vendored code
full diff: e8ecf83ee0...8c19597365github@gone.nl >
2025-01-06 10:28:35 +01:00
2fc32c707b
vendor: github.com/moby/term v0.5.2
...
- update github.com/Azure/go-ansiterm to v0.0.0-20250102033503-faa5f7b0171c
to fix OSC string terminator parsing.
- add security policy
- update github actions and test against go1.22, go1.23
full diff: https://github.com/moby/term/compare/v0.5.0...v0.5.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-01-03 22:33:30 +01:00
e1a0c377b7
vendor: github.com/Azure/go-ansiterm faa5f7b0171c
...
- fix OSC string terminator parsing
diff: d185dfc1b5...faa5f7b017github@gone.nl >
2025-01-03 22:32:37 +01:00
7b37f30da2
Use io.copy for build context compression
...
The use of pools here is unnecessary and creates a code dependency on
moby library which will move to internal.
The pool does not provide any value here since it is only done for a
single operation and unlikely performed in alongside other operations
which are re-using the buffers many times between garbage collections.
Signed-off-by: Derek McGowan <derek@mcg.dev >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-01-03 13:45:38 +01:00
25f02bc044
vendor: github.com/docker/docker 6f6c3b921180 (master, v28.0.0-dev)
...
full diff: a72026acbb...6f6c3b9211github@gone.nl >
2025-01-01 16:24:28 +01:00
76ec0ea2eb
vendor: github.com/docker/docker a72026acbbdf (master, v28.0.0-dev)
...
removes uses of pkg/system
full diff: ad6929339a...a72026acbbgithub@gone.nl >
2024-12-23 13:50:59 +01:00
cc65127cb0
vendor: github.com/docker/docker ad6929339acd (master, v28.0.0-dev)
...
full diff: b249c5ebd2...ad6929339agithub@gone.nl >
2024-12-20 17:58:34 +01:00
6f47bce41c
vendor: golang.org/x/net v0.33.0
...
contains a fix for CVE-2024-45338 / https://go.dev/issue/70906 ,
but it doesn't affect our codebase:
govulncheck -show=verbose ./...
Scanning your code and 1260 packages across 211 dependent modules for known vulnerabilities...
...
Vulnerability #1 : GO-2024-3333
Non-linear parsing of case-insensitive content in golang.org/x/net/html
More info: https://pkg.go.dev/vuln/GO-2024-3333
Module: golang.org/x/net
Found in: golang.org/x/net@v0.32 .0
Fixed in: golang.org/x/net@v0.33 .0
Your code is affected by 0 vulnerabilities.
This scan also found 0 vulnerabilities in packages you import and 1
vulnerability in modules you require, but your code doesn't appear to call these
vulnerabilities.
full diff: https://github.com/golang/net/compare/v0.32.0...v0.33.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-20 17:12:38 +01:00
83156e6627
vendor: golang.org/x/net v0.32.0
...
go maintainers annnounced a security release for this module; this patch
already brings it up to the current version in case the security issue
affects us.
full diff: https://github.com/golang/net/compare/v0.31.0...v0.32.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-16 23:01:20 +01:00
450f6b9955
vendor: golang.org/x/crypto v0.31.0
...
update to the latest version of this dependency, which has a fix for a
authorization bypass in the ssh package. We don't use this functionality,
so there's no need to backport this change (other than de-noising false positives).
This is CVE-2024-45337 and Go issue https://go.dev/issue/70779 .
full diff: https://github.com/golang/crypto/compare/v0.29.0...v0.31.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-16 22:59:33 +01:00
b74302eb50
vendor: golang.org/x/text v0.21.0
...
no changes in vendored code
full diff: https://github.com/golang/text/compare/v0.20.0...v0.21.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-16 22:58:24 +01:00
cb2e35286c
vendor: golang.org/x/sync v0.10.0
...
no changes in vendored code
full diff: https://github.com/golang/sync/compare/v0.9.0...v0.10.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-16 22:57:35 +01:00
e56b665d81
vendor: golang.org/x/sys v0.28.0
...
full diff: https://github.com/golang/sys/compare/v0.27.0...v0.28.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-16 22:56:51 +01:00
2a5ac8f5ab
vendor: github.com/docker/docker b249c5ebd214 (master, v28.0.0-dev)
...
full diff: 5d72419486...b249c5ebd2github@gone.nl >
2024-12-09 21:56:05 +01:00
2eb77f4ede
vendor: github.com/docker/docker 5d72419486fe (master, v28.0.0-dev)
...
full diff: 87fbd9cd3b...5d72419486github@gone.nl >
2024-12-09 12:41:45 +01:00
9dfdffa015
Merge pull request #5672 from thaJeztah/bump_protobuf
...
vendor: google.golang.org/protobuf v1.35.2
2024-12-09 12:11:31 +01:00
f50dea6c40
vendor: google.golang.org/protobuf v1.35.2
...
full diff: https://github.com/protocolbuffers/protobuf-go/compare/v1.35.1...v1.35.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-06 22:45:30 +01:00
9399483f7a
vendor: golang.org/x/net v0.31.0
...
full diff: https://github.com/golang/net/compare/v0.30.0...v0.31.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-06 22:40:39 +01:00
6751bcc972
vendor: golang.org/x/crypto v0.29.0
...
no changes in vendored code
full diff: https://github.com/golang/crypto/compare/v0.28.0...v0.29.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-06 22:39:54 +01:00
d41ab7703a
vendor: golang.org/x/term v0.26.0
...
full diff: https://github.com/golang/term/compare/v0.25.0...v0.26.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-06 22:38:55 +01:00
5972025fae
vendor: golang.org/x/text v0.20.0
...
no changes in vendored code
full diff: https://github.com/golang/text/compare/v0.19.0...v0.20.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-06 22:35:41 +01:00
feb1e2a34c
vendor: golang.org/x/sync v0.9.0
...
no changes in vendored code
full diff: https://github.com/golang/sync/compare/v0.8.0...v0.9.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-06 22:34:43 +01:00
4c27c895f2
vendor: golang.org/x/sys v0.27.0
...
full diff: https://github.com/golang/sys/compare/v0.26.0...v0.27.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-12-06 22:33:47 +01:00
d4db289eb5
run, create, connect: add support for gw-priority
...
Signed-off-by: Albin Kerouanton <albinker@gmail.com >
2024-12-03 15:13:08 +01:00
6c76914532
Merge pull request #5637 from thaJeztah/bump_rosetta
...
vendor: github.com/tonistiigi/go-rosetta v0.0.0-20220804170347-3f4430f2d346
2024-11-21 17:53:16 +01:00
9ccc462005
Merge pull request #5634 from thaJeztah/bump_mapstructure
...
vendor: github.com/go-viper/mapstructure/v2 v2.2.1
2024-11-21 17:52:21 +01:00
35bf069da2
Merge pull request #5633 from thaJeztah/bump_capability
...
vendor: github.com/moby/sys/capability v0.4.0
2024-11-21 17:51:57 +01:00
d41b80fafc
vendor: github.com/docker/docker e5c2b5e10d68 (master, v28.0.0-dev)
...
full diff: 6ac445c42b...e5c2b5e10dgithub@gone.nl >
2024-11-20 15:54:27 +01:00
11fbc99939
vendor: github.com/tonistiigi/go-rosetta v0.0.0-20220804170347-3f4430f2d346
...
full diff: f79598599c...3f4430f2d3github@gone.nl >
2024-11-19 21:51:51 +01:00
f6599300ff
vendor: github.com/go-viper/mapstructure/v2 v2.2.1
...
full diff: https://github.com/go-viper/mapstructure/compare/v2.0.0...v2.2.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-19 11:49:17 +01:00
446d4138ed
vendor: github.com/moby/sys/capability v0.4.0
...
full diff: https://github.com/moby/sys/compare/capability/v0.3.0...capability/v0.4.0
Added
* New separate API for ambient ([GetAmbient], [SetAmbient], [ResetAmbient])
and bound ([GetBound], [DropBound]) capabilities, modelled after libcap.
Fixed
* [Apply] now returns an error if called for non-zero `pid`. Before this change,
it could silently change some capabilities of the current process, instead of
the one identified by the `pid`.
* Fixed tests that change capabilities to be run in a separate process.
* Other improvements in tests.
Changed
* Use raw syscalls (which are slightly faster).
* Most tests are now limited to testing the public API of the package.
* Simplify parsing /proc/*pid*/status, add a test case.
* Optimize the number of syscall to set ambient capabilities in Apply
by clearing them first; add a test case.
* Better documentation for [Apply], [NewFile], [NewFile2], [NewPid], [NewPid2].
Removed
* `.golangci.yml` and `.codespellrc` are no longer part of the package.
<!-- Doc links (please keep sorted). -->
[Apply]: https://pkg.go.dev/github.com/moby/sys/capability#Capabilities.Apply
[DropBound]: https://pkg.go.dev/github.com/moby/sys/capability#DropBound
[GetAmbient]: https://pkg.go.dev/github.com/moby/sys/capability#GetAmbient
[GetBound]: https://pkg.go.dev/github.com/moby/sys/capability#GetBound
[LastCap]: https://pkg.go.dev/github.com/moby/sys/capability#LastCap
[ListKnown]: https://pkg.go.dev/github.com/moby/sys/capability#ListKnown
[ListSupported]: https://pkg.go.dev/github.com/moby/sys/capability#ListSupported
[List]: https://pkg.go.dev/github.com/moby/sys/capability#List
[NewFile2]: https://pkg.go.dev/github.com/moby/sys/capability#NewFile2
[NewFile]: https://pkg.go.dev/github.com/moby/sys/capability#NewFile
[NewPid2]: https://pkg.go.dev/github.com/moby/sys/capability#NewPid2
[NewPid]: https://pkg.go.dev/github.com/moby/sys/capability#NewPid
[ResetAmbient]: https://pkg.go.dev/github.com/moby/sys/capability#ResetAmbient
[SetAmbient]: https://pkg.go.dev/github.com/moby/sys/capability#SetAmbient
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-19 11:37:18 +01:00
13754f6776
deps: update go-jose/go-jose to v4
...
See: https://github.com/go-jose/go-jose
Signed-off-by: Laura Brehm <laurabrehm@hey.com >
2024-11-05 14:12:16 +00:00
5f1311ae8d
vendor: github.com/docker/docker 6ac445c42bad (master, v28.0-dev)
...
full diff: 36a3bd0904...6ac445c42bgithub@gone.nl >
2024-11-01 14:10:15 +01:00
10c5a57927
vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 14:10:09 +01:00
5e40d288c7
vendor: go.opentelemetry.io/otel v1.28.0
...
aligning all related packages to v1.28.0 as well
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 14:08:45 +01:00
9ba73a1a05
vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0
...
full diff: https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.16.0...v2.20.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 14:04:41 +01:00
f3cf1b4213
vendor: go.etcd.io/etcd/raft/v3 v3.5.16
...
no changes in vendored code
full diff: https://github.com/etcd-io/etcd/compare/v3.5.6...v3.5.16
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 13:54:25 +01:00
cae19e3928
vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6
...
no changes in vendored code
full diff: ced1acdcaa...e8a1dd7889github@gone.nl >
2024-11-01 13:46:38 +01:00
074d1028b5
vendor: update prometheus dependencies
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 13:44:05 +01:00
1dbcce2057
vendor: google.golang.org/grpc v1.67.1
...
full diff:
- https://github.com/grpc/grpc-go/compare/v1.66.2...v1.67.1
- ef581f9131...5fefd90f89github@gone.nl >
2024-11-01 13:39:15 +01:00
1bba009944
vendor: google.golang.org/protobuf v1.35.1
...
full diff: https://github.com/protocolbuffers/protobuf-go/compare/v1.34.1...v1.35.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 13:31:29 +01:00
e3942d46a0
vendor: github.com/klauspost/compress v1.17.11
...
full diff: https://github.com/klauspost/compress/compare/v1.17.9...v1.17.11
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 13:28:47 +01:00
97ff1b7c0a
vendor: github.com/go-logr/logr v1.4.2
...
full diff: https://github.com/go-logr/logr/compare/v1.4.1...v1.4.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 13:25:17 +01:00
4c85feb4dd
vendor: github.com/cenkalti/backoff/v4 v4.3.0
...
full diff: https://github.com/cenkalti/backoff/compare/v4.2.1...v4.3.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 13:23:39 +01:00
3b48a57b04
vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161
...
documentation changes only, no changes in vendored code
full diff: d185dfc1b5...306776ec81github@gone.nl >
2024-11-01 13:20:48 +01:00
36e6c42977
vendor: golang.org/x/net v0.30.0
...
full diff: https://github.com/golang/net/compare/v0.29.0...v0.30.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 13:17:57 +01:00
84bfa52a6c
vendor: golang.org/x/crypto v0.28.0
...
no changes in vendored code
full diff: https://github.com/golang/crypto/compare/v0.27.0...v0.28.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 13:16:26 +01:00
7a94f592ed
vendor: golang.org/x/text v0.19.0
...
no changes in vendored code
full diff: https://github.com/golang/text/compare/v0.18.0...v0.19.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 13:14:25 +01:00
ef197f7314
vendor: golang.org/x/term v0.25.0
...
no changes in vendored code
full diff: https://github.com/golang/term/compare/v0.24.0...v0.25.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-11-01 13:12:59 +01:00
