e225d51919
bump version to v28.3.0-dev
...
This file is only used as default if no version is specified. We
should probably get rid of this, but let's update it to better
reflect the version that developer builds are building.
https://github.com/docker/cli/blob/d48fb9f9f7bdb6e0ef37dbde68612a1704cad46e/docker.Makefile#L22
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-06-13 14:11:56 +02:00
9cc2a2bf2d
Merge pull request #6129 from vvoland/docs-deprecated
...
docs: deprecate empty Config fields in image inspect API
2025-06-13 14:10:48 +02:00
181563ee99
docs: deprecate empty Config fields in image inspect API
...
Image config fields like Cmd, Entrypoint, Env, etc. will be omitted from
/images/{name}/json response when empty, starting in v29.0.
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2025-06-13 13:48:07 +02:00
082d23d12d
Merge pull request #6127 from thaJeztah/bump_deps
...
vendor: update buildkit and containerd dependencies
2025-06-12 13:20:31 +00:00
59e34093bc
vendor: otel v1.35.0, otel/contrib v0.60.0, grpc v1.72.2
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-06-12 14:16:23 +02:00
a76643bca3
vendor: github.com/prometheus/client_golang v1.22.0
...
full diff: https://github.com/prometheus/client_golang/compare/v1.20.5...v1.22.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-06-12 14:12:33 +02:00
f6985b7a27
vendor: google.golang.org/protobuf v1.36.6
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-06-12 14:11:07 +02:00
bab8478ef3
vendor: golang.org/x/sys v0.33.0
...
full diff: https://github.com/golang/sys/compare/v0.32.0...v0.33.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-06-12 14:09:24 +02:00
9f82d4a791
vendor: golang.org/x/sync v0.14.0
...
full diff: https://github.com/golang/sync/compare/v0.13.0...v0.14.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-06-12 13:54:57 +02:00
8b8f558b83
Merge pull request #6124 from vvoland/update-go
...
update to go1.24.4
2025-06-10 15:12:26 +02:00
5487986681
Merge pull request #6123 from ndeloof/pluginserver
...
only close plugin server if actually created
2025-06-10 15:12:06 +02:00
b9c563a581
only close plugin server if actually created
...
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com >
2025-06-10 14:57:19 +02:00
fe7fc2ff7f
update to go1.24.4
...
- https://github.com/golang/go/issues?q=milestone%3AGo1.24.4+label%3ACherryPickApproved
- full diff: https://github.com/golang/go/compare/go1.24.3...go1.24.4
This release includes 3 security fixes following the security policy:
- net/http: sensitive headers not cleared on cross-origin redirect
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
Thanks to Takeshi Kaneko (GMO Cybersecurity by Ierae, Inc.) for reporting this issue.
This is CVE-2025-4673 and Go issue https://go.dev/issue/73816 .
- os: inconsistent handling of O_CREATE|O_EXCL on Unix and Windows
os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with O_CREATE and O_EXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would create a file in that location.
OpenFile now always returns an error when the O_CREATE and O_EXCL flags are both set and the target path is a symlink.
Thanks to Junyoung Park and Dong-uk Kim of KAIST Hacking Lab for discovering this issue.
This is CVE-2025-0913 and Go issue https://go.dev/issue/73702 .
- crypto/x509: usage of ExtKeyUsageAny disables policy validation
Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.
Thanks to Krzysztof Skrzętnicki (@Tener) of Teleport for reporting this issue.
This is CVE-2025-22874 and Go issue https://go.dev/issue/73612 .
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2025-06-09 16:25:41 +02:00
9e506545fd
Merge pull request #6120 from thaJeztah/fix_url
...
docs: fix link to live-restore
2025-06-02 13:02:40 +02:00
3c1bbfd82f
docs: fix link to live-restore
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-06-02 12:56:04 +02:00
0bfd4c9f29
Merge pull request #6119 from thaJeztah/bump_engine
...
vendor: github.com/docker/docker v28.2.2
2025-06-02 10:15:52 +02:00
d8f09a1b75
Merge pull request #6117 from vvoland/binimage-nosha
...
gha/bin-image: Don't push sha tags
2025-05-30 17:42:22 +02:00
473b248260
vendor: github.com/docker/docker v28.2.2
...
no diff; same commit, but tagged:
https://github.com/docker/docker/compare/45873be4ae3f...v28.2.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-30 17:37:57 +02:00
b2d63d17af
gha/bin-image: Don't push sha tags
...
This change eliminates the automatic creation of image tags in the
format `dockereng/cli-bin:sha-ad132f5` for every push.
They're not too useful, produce noise and use a lot of space.
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2025-05-30 12:00:29 +02:00
e6534b4eb7
Merge pull request #6116 from vvoland/vendor-docker
...
build / prepare (push) Has been cancelled
build / build (push) Has been cancelled
build / bin-image (push) Has been cancelled
build / prepare-plugins (push) Has been cancelled
build / plugins (push) Has been cancelled
codeql / codeql (push) Has been cancelled
e2e / tests (alpine, 23, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 23, local) (push) Has been cancelled
e2e / tests (alpine, 26, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 26, local) (push) Has been cancelled
e2e / tests (alpine, 27, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 27, local) (push) Has been cancelled
e2e / tests (alpine, 28, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 28, local) (push) Has been cancelled
e2e / tests (debian, 23, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 23, local) (push) Has been cancelled
e2e / tests (debian, 26, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 26, local) (push) Has been cancelled
e2e / tests (debian, 27, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 27, local) (push) Has been cancelled
e2e / tests (debian, 28, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 28, local) (push) Has been cancelled
test / ctn (push) Has been cancelled
test / host (macos-13) (push) Has been cancelled
test / host (macos-14) (push) Has been cancelled
validate / validate (lint) (push) Has been cancelled
validate / validate (shellcheck) (push) Has been cancelled
validate / validate (update-authors) (push) Has been cancelled
validate / validate (validate-vendor) (push) Has been cancelled
validate / validate-md (push) Has been cancelled
validate / validate-make (manpages) (push) Has been cancelled
validate / validate-make (yamldocs) (push) Has been cancelled
vendor: github.com/docker/docker v28.2.2-dev (45873be4ae3f)
2025-05-30 09:39:08 +00:00
5c3128e95e
vendor: github.com/docker/docker v28.2.2-dev (45873be4ae3f)
...
full diff: https://github.com/docker/docker/compare/0e2cc22d36ae...45873be4ae3f
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2025-05-30 11:15:35 +02:00
879ac3f88f
Merge pull request #6110 from thaJeztah/bump_engine
...
build / prepare (push) Has been cancelled
build / build (push) Has been cancelled
build / bin-image (push) Has been cancelled
build / prepare-plugins (push) Has been cancelled
build / plugins (push) Has been cancelled
codeql / codeql (push) Has been cancelled
e2e / tests (alpine, 23, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 23, local) (push) Has been cancelled
e2e / tests (alpine, 26, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 26, local) (push) Has been cancelled
e2e / tests (alpine, 27, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 27, local) (push) Has been cancelled
e2e / tests (alpine, 28, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 28, local) (push) Has been cancelled
e2e / tests (debian, 23, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 23, local) (push) Has been cancelled
e2e / tests (debian, 26, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 26, local) (push) Has been cancelled
e2e / tests (debian, 27, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 27, local) (push) Has been cancelled
e2e / tests (debian, 28, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 28, local) (push) Has been cancelled
test / ctn (push) Has been cancelled
test / host (macos-13) (push) Has been cancelled
test / host (macos-14) (push) Has been cancelled
validate / validate (lint) (push) Has been cancelled
validate / validate (shellcheck) (push) Has been cancelled
validate / validate (update-authors) (push) Has been cancelled
validate / validate (validate-vendor) (push) Has been cancelled
validate / validate-md (push) Has been cancelled
validate / validate-make (manpages) (push) Has been cancelled
validate / validate-make (yamldocs) (push) Has been cancelled
vendor: github.com/docker/docker 0e2cc22d36ae (v28.2-dev)
2025-05-28 13:17:56 +00:00
92fa1e1fc9
vendor: github.com/docker/docker 0e2cc22d36ae (v28.2-dev)
...
no changes in vendored code
full diff: https://github.com/docker/docker/compare/26db31fdab628a2345ed8f179e575099384166a9...0e2cc22d36ae3013f83863c8da2e1b808f25e78e
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-28 15:05:58 +02:00
4bec3a6795
Merge pull request #6114 from thaJeztah/deprecate_non_compliant_registries
...
docs: deprecated: fallback for non-OCI-compliant registries is removed
2025-05-28 14:28:52 +02:00
a007d1ae24
Merge pull request #6113 from thaJeztah/config_suppress_err
...
cli/config/configfile: explicitly ignore error
2025-05-28 12:08:37 +00:00
bbfbd54f4d
docs: deprecated: fallback for non-OCI-compliant registries is removed
...
GitHub deprecated the legacy registry, and it was [sunset on Feb 24th, 2025][1]
in favor of GitHub Container Registry (GHCR) (ghcr.io), so the fallback
was removed.
[1]: https://github.blog/changelog/2025-01-23-legacy-docker-registry-closing-down/
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-28 10:05:40 +02:00
2d21e1f7a5
cli/config/configfile: explicitly ignore error
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-28 09:55:33 +02:00
bc9be0bdea
Merge pull request #6112 from thaJeztah/bump_tools
...
Dockerfile: bump buildx v0.24.0, compose v2.36.2
2025-05-28 09:09:24 +02:00
3fe7dc5cb4
Dockerfile: update compose to v2.36.2
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-27 22:50:20 +02:00
9eae2a8976
Dockerfile: update buildx to v0.24.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-27 22:49:34 +02:00
a29e53dab7
Merge pull request #6111 from thaJeztah/update_deprecations
...
docs: deprecated: update status for non-standard fields in image inspect
2025-05-27 16:57:52 +02:00
da0c976fb0
docs: deprecated: update status for non-standard fields in image inspect
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-27 16:14:00 +02:00
17dc2880fa
Merge pull request #6109 from thaJeztah/image_rm_platform
...
image rm: add --platform option
2025-05-27 12:11:26 +02:00
bb0ca9f9ef
image rm: add --platform option
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-27 10:58:11 +02:00
f567263802
Merge pull request #6099 from thaJeztah/bump_engine
...
vendor: github.com/docker/docker 26db31fdab62 (v28.2-dev)
2025-05-27 10:49:43 +02:00
7775f01caa
vendor: github.com/docker/docker 26db31fdab62 (v28.2-dev)
...
full diff: https://github.com/docker/docker/compare/v28.2.0-rc.2...26db31fdab628a2345ed8f179e575099384166a9
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-27 09:20:06 +02:00
908ff04d6e
Merge pull request #6108 from thaJeztah/bump_engine_28.2
...
vendor: github.com/docker/docker v28.2.0-rc.2
2025-05-26 13:17:15 +00:00
519bc2daa1
vendor: github.com/docker/docker v28.2.0-rc.2
...
no changes in vendored code
full diff: https://github.com/docker/docker/compare/f4ffeb8c38b3...v28.2.0-rc.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-26 14:06:52 +02:00
b2c4452acb
Merge pull request #6101 from thaJeztah/deprecated_api_versions_removed
...
build / prepare (push) Has been cancelled
build / build (push) Has been cancelled
build / bin-image (push) Has been cancelled
build / prepare-plugins (push) Has been cancelled
build / plugins (push) Has been cancelled
codeql / codeql (push) Has been cancelled
e2e / tests (alpine, 23, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 23, local) (push) Has been cancelled
e2e / tests (alpine, 26, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 26, local) (push) Has been cancelled
e2e / tests (alpine, 27, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 27, local) (push) Has been cancelled
e2e / tests (alpine, 28, connhelper-ssh) (push) Has been cancelled
e2e / tests (alpine, 28, local) (push) Has been cancelled
e2e / tests (debian, 23, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 23, local) (push) Has been cancelled
e2e / tests (debian, 26, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 26, local) (push) Has been cancelled
e2e / tests (debian, 27, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 27, local) (push) Has been cancelled
e2e / tests (debian, 28, connhelper-ssh) (push) Has been cancelled
e2e / tests (debian, 28, local) (push) Has been cancelled
test / ctn (push) Has been cancelled
test / host (macos-13) (push) Has been cancelled
test / host (macos-14) (push) Has been cancelled
validate / validate (lint) (push) Has been cancelled
validate / validate (shellcheck) (push) Has been cancelled
validate / validate (update-authors) (push) Has been cancelled
validate / validate (validate-vendor) (push) Has been cancelled
validate / validate-md (push) Has been cancelled
validate / validate-make (manpages) (push) Has been cancelled
validate / validate-make (yamldocs) (push) Has been cancelled
docs: deprecated: mark API < v1.24 as "removed"
2025-05-22 12:09:34 +00:00
3e287df661
Merge pull request #6100 from thaJeztah/fluentd_async_connect_removed
...
docs: deprecated: mark `fluentd-async-connect` as "removed"
2025-05-22 14:09:24 +02:00
f1fb3e3011
Merge pull request #5282 from willww64/fix-configfile-relative-symlink
...
correctly handle configuration file saving when it is a relative symlink
2025-05-22 12:08:40 +00:00
9c8666c106
docs: deprecated: mark API < v1.24 as "removed"
...
Support for API versions lower than v1.24 was removed in v26.0.
The DOCKER_MIN_API_VERSION environment-variable is still present
in the docker daemon, but can currently only be used to raise the
minimum version.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-22 13:37:44 +02:00
21d0466ff1
docs: deprecated: mark fluentd-async-connect as "removed"
...
The daemon still has migration code in place, but no longer accepts
the option for new containers, so marking it as "removed";
https://github.com/moby/moby//commit/49ec488036d9702df8432ec0e6f33c170a4a2bbe
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-22 13:28:18 +02:00
1d3b933ac3
Merge pull request #6098 from thaJeztah/deprecated_inspect_fields
...
docs: deprecated: set Container and ContainerConfig fields to "removed"
2025-05-22 11:54:10 +02:00
649d088ddf
Merge pull request #6096 from thaJeztah/graphdriver_plugin_deprecation
...
docs: update deprecation status of graphdriver-plugins to "removed"
2025-05-22 11:49:53 +02:00
e135563c1f
Merge pull request #6097 from vvoland/28.x
...
vendor: github.com/docker/docker v28.2.0-dev (f4ffeb8c38b3)
2025-05-22 09:48:20 +00:00
026ae7a11f
docs: deprecated: set Container and ContainerConfig fields to "removed"
...
These fields have been removed in v26.0 (API v1.45 and up), and are always
omitted when using the containerd image store;
https://github.com/moby/moby/commit/03cddc62f4bcd48fbc3a31dd94f2bf84e44840dd
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-22 11:45:57 +02:00
681c705be6
vendor: github.com/docker/docker v28.2.0-dev (f4ffeb8c38b3)
...
full diff: https://github.com/docker/docker/compare/b590eff717b3...f4ffeb8c38b3
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2025-05-22 11:38:51 +02:00
bdd994b79a
docs: update deprecation status of graphdriver-plugins to "removed"
...
This functionality, was removed and the DOCKERD_DEPRECATED_GRAPHDRIVER_PLUGINS
no longer can be used in v28.0;
https://github.com/moby/moby/commit/42ca9154e9b8f8120011add4c09c6edcecd1e6f5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-22 11:29:37 +02:00
1015d15621
fix bug with config file being a relative symlink
...
- use filepath.EvalSymlink instead of check with filepath.IsAbs
- allow for dangling symlinks
- extract path from error when NotExist error occurs
Co-authored-by: Paweł Gronowski <me@woland.xyz >
Co-authored-by: Sebastiaan van Stijn <github@gone.nl >
Signed-off-by: Will Wang <willww64@gmail.com >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-05-22 11:11:07 +02:00
Sebastiaan van Stijn
Sebastiaan van Stijn
Paweł Gronowski
Nicolas De Loof
Will Wang