435c658333
vendor: github.com/moby/sys/signal v0.7.1
...
full diff: https://github.com/moby/sys/compare/signal/v0.7.0...signal/v0.7.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-25 14:54:29 +02:00
501904d48f
vendor: golang.org/x/sys v0.22.0
...
full diff: https://github.com/golang/sys/compare/v0.21.0...v0.22.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-25 14:53:35 +02:00
401048b9cb
vendor: github.com/containerd/containerd v1.7.20
...
no changes in vendored code
full diff: https://github.com/containerd/containerd/compare/v1.7.19...v1.7.20
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-19 19:01:54 +02:00
e3e9b99015
vendor: github.com/docker/cli-docs-tool v0.8.0
...
no changes in vendored code
full diff: https://github.com/docker/cli-docs-tool/compare/v0.7.0...v0.8.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-17 15:23:23 +02:00
e8baee9c7c
vendor: github.com/docker/docker aae044039ca4 (master, v-next)
...
full diff: 508cc7c612...aae044039c
2024-07-16 19:01:14 +02:00
a77ba7eda8
vendor: google.golang.org/genproto/googleapis/api 49dd2c1f3d0b
...
No changes in vendored files. This one got out of sync with the other modules
from the same repository.
full diff: d307bd883b...49dd2c1f3d
2024-07-16 19:00:14 +02:00
caa5d15e98
vendor: github.com/prometheus/procfs v0.15.1
...
full diff: https://github.com/prometheus/procfs/compare/v0.12.0...v0.15.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-16 18:46:30 +02:00
0f712827f1
vendor: github.com/containerd/containerd v1.7.19
...
no changes in vendored code
full diff: https://github.com/containerd/containerd/compare/v1.7.18...v1.7.19
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-16 18:45:37 +02:00
b28a1cd029
vendor: golang.org/x/sync v0.7.0
...
no changes in vendored code
full diff: https://github.com/golang/sync/compare/v0.6.0...v0.7.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-16 18:44:28 +02:00
4cac8efb56
vendor: github.com/docker/docker 508cc7c61226 (master)
...
full diff: https://github.com/docker/docker/v27.0.3..508cc7c6122651c4dfeeec2e626568704cfaf0f9
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-04 15:20:27 +02:00
404bf267f9
Merge pull request #5228 from thaJeztah/bump_bk_deps
...
vendor: update various dependencies
2024-07-04 11:10:05 +02:00
a0c4e56dea
vendor: golang.org/x/net v0.25.0
...
full diff: https://github.com/golang/net/compare/v0.24.0...v0.25.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-04 09:39:45 +02:00
723130d7fe
vendor: golang.org/x/crypto v0.23.0
...
no changes in vendored code
full diff: https://github.com/golang/crypto/compare/v0.22.0...v0.23.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-04 09:38:44 +02:00
d33ef57dcb
vendor: golang.org/x/text v0.15.0
...
no changes in vendored files
full diff: https://github.com/golang/text/compare/v0.14.0...v0.15.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-04 09:38:04 +02:00
21dbedd419
vendor: golang.org/x/sys v0.21.0
...
full diff: https://github.com/golang/sys/compare/v0.19.0...v0.21.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-04 09:32:57 +02:00
f8e7c0a0d6
vendor: github.com/klauspost/compress v1.17.9
...
full diff: https://github.com/klauspost/compress/compare/v1.17.4...v1.17.9
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-04 09:32:06 +02:00
e91f0ded9c
docs: make buildx build the canonical reference doc
...
Move common flag descriptions to the buildx build reference, and make
that page the canonical page in docs. Also rewrite some content in
image_build to make clear that this page is only for the legacy builder.
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-07-03 08:55:16 +02:00
03409219af
Merge pull request #5213 from thaJeztah/vendor_sortorder_v1.1.0
...
vendor: github.com/fvbommel/sortorder v1.1.0
2024-07-01 17:20:24 +02:00
0f6370c94b
vendor: github.com/fvbommel/sortorder v1.1.0
...
- Add a case-folding version of Natural sort order
This can be used to perform case-insensitive comparisons and sorting.
It's been placed in a separate sub-package because it requires the Unicode
tables in the standard library, which can add significantly to binary size.
full diff: https://github.com/fvbommel/sortorder/compare/v1.0.2...v1.1.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-01 13:10:44 +02:00
2e6aaf05d4
vendor: github.com/docker/docker v27.0.3
...
full diff: https://github.com/docker/docker/compare/v27.0.2...v27.0.3
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-01 12:28:52 +02:00
9455d61768
vendor: github.com/docker/docker v27.0.2
...
no diff, as it's the same commit tagged: https://github.com/docker/docker/compare/e953d76450b6...v27.0.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-28 09:06:28 +02:00
1382fbe61e
vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6)
...
full diff: 861fde8cc9...e953d76450c97e8091a6
2024-06-28 09:01:39 +02:00
ab0898ee32
vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974)
...
full diff: https://github.com/docker/docker/compare/v27.0.1...861fde8cc974
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
(cherry picked from commit 8945848025
2024-06-28 09:01:01 +02:00
cfec21f28b
vendor: github.com/docker/docker v27.0.1
...
no change in vendored files, just changing a tag
full diff: https://github.com/docker/docker/compare/ff1e2c0de72a...v27.0.1
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
(cherry picked from commit bf1a701820
2024-06-28 08:59:48 +02:00
ad583961b6
vendor: github.com/docker/docker v27.0-dev (ff1e2c0de72a, master)
...
full diff: 81b2027979...ff1e2c0de7
2024-06-21 15:18:13 +02:00
1a04810073
vendor: github.com/docker/docker v27.0.1-rc.1
...
no diff; same commit, but tagged.
full diff: https://github.com/docker/docker/compare/018d93decfb5...v27.0.1-rc.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-20 23:53:47 +02:00
34d42bdf0c
vendor: github.com/docker/docker v27.0-dev (018d93decfb5)
...
full diff: 1a1f3cff45...018d93decf
2024-06-20 14:00:27 +02:00
2088c5963b
vendor: github.com/docker/docker 1a1f3cff45ec (master, v27.0-dev)
...
Rewrite local code to use the new container.Ulimit alias to start
transitioning away from direct uses of go-units.Ulimit.
full diff: https://github.com/docker/docker/compare/v27.0.0-rc.2...1a1f3cff45ec5aba4a520fae88b4f929eab8b3e8
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-20 13:04:54 +02:00
4f00eee524
vendor: github.com/spf13/cobra v1.8.1
...
- release notes: https://github.com/spf13/cobra/releases/tag/v1.8.1
- full diff: https://github.com/spf13/cobra/compare/v1.8.0...v1.8.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-18 21:52:58 +02:00
468a76779d
Merge pull request #5169 from thaJeztah/bump_swarmkit
...
vendor: github.com/moby/swarmkit/v2 v2.0.0-20240611172349-ea1a7cec35cb
2024-06-18 15:04:39 +02:00
eae63069e6
vendor: github.com/moby/swarmkit/v2 v2.0.0-20240611172349-ea1a7cec35cb
...
Update the version to match what's used in docker/docker.
Full diff: c1c857e2dc...ea1a7cec35
2024-06-18 14:32:49 +02:00
3d017f30d6
vendor: github.com/docker/docker v27.0.0-rc.2
...
No diff as it's the same commit, but tagged. Just for transparency to
allow seeing differences between rc's.
full diff: https://github.com/docker/docker/compare/caf502a0bc44...v27.0.0-rc.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-18 14:03:41 +02:00
3b0d297aab
vendor: github.com/docker/docker caf502a0bc44 (v27.0.0-dev)
...
full diff: ec4bac431c...caf502a0bc
2024-06-17 17:08:30 +02:00
11a3d8728b
vendor: github.com/docker/docker ec4bac431c88 (v27.0.0-dev)
...
full diff: ba69bd9c1e...ec4bac431c
2024-06-17 10:18:07 +02:00
1bfec63b9f
vendor: github.com/docker/docker ba69bd9c1e48 (v27.0.0-rc.2-dev)
...
full diff: https://github.com/docker/docker/compare/v27.0.0-rc.1...ba69bd9c1e48
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-06-14 21:42:52 +02:00
4ea91a73ee
vendor: golang.org/x/net v0.24.0
...
no changes in vendored code
full diff: https://github.com/golang/net/compare/v0.23.0...v0.24.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-13 18:19:48 +02:00
91b63ac450
vendor: golang.org/x/crypto v0.22.0
...
no changes in vendored code
full diff: https://github.com/golang/crypto/compare/v0.21.0...v0.22.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-13 18:18:36 +02:00
a2ccd3eb00
vendor: golang.org/x/term v0.19.0
...
no changes in vendored code
full diff: https://github.com/golang/term/compare/v0.18.0...v0.19.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-13 18:17:46 +02:00
634b19f5ed
vendor: golang.org/x/sys v0.19.0
...
full diff: https://github.com/golang/sys/compare/v0.18.0...v0.19.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-13 18:14:41 +02:00
872935f1c0
vendor: github.com/docker/docker v27.0.0-rc.1
...
no changes in vendored code
full diff: https://github.com/docker/docker/compare/bcd280a3ed2d...v27.0.0-rc.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-12 23:46:01 +02:00
1fc73b470b
vendor: github.com/docker/docker v27.0.0-dev (bcd280a3ed2d)
...
full diff: 9d9488468f...bcd280a3ed
2024-06-12 13:59:03 +02:00
ad62b68693
vendor: github.com/containerd/platforms v0.2.1
...
- Remove hcsshim import from repo
- un-exports GetOsVersion
- Update windows matcher to not compare empty os version
full diff: https://github.com/containerd/platforms/compare/v0.2.0...v0.2.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-12 00:57:47 +02:00
892784deed
vendor: github.com/docker/docker v27.0.0-dev (9d9488468fe2)
...
full diff: a736d0701c...9d9488468f
2024-06-11 16:39:45 +02:00
43b840ed93
vendor: github.com/docker/docker a736d0701c41 (master, v27.0.0-dev)
...
full diff: 59996a493c...a736d0701c
2024-06-10 17:41:09 +02:00
d11fbda360
vendor: github.com/distribution/reference v0.6.0
...
full diff: https://github.com/distribution/reference/compare/v0.5.0...v0.6.0
- remove deprecated SplitHostname
- refactor splitDockerDomain to include more documentation
- fix typo in readme
- Exclude domain from name length check
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-08 23:20:52 +02:00
97b7746df0
vendor: github.com/docker/docker 59996a493cfc (v27.0.0-dev)
...
full diff: 181e70cc07...59996a493c
2024-06-07 16:11:03 +02:00
0ed8a7e310
vendor: github.com/docker/docker 00f18ef7a455 (master / v27.0.0-dev)
...
- api: Make EnableIPv6 optional
full diff: c6aaabc9fc...00f18ef7a4
2024-06-06 20:59:27 +02:00
bc2e274782
vendor: migrate to github.com/go-viper/mapstructure/v2 v2.0.0
...
github.com/mitchellh/mapstructure will no longer be maintained by the author,
and github.com/go-viper/mapstructure is nominated as the endorsed fork.
- v1.x changes since last release from mitchellh: https://github.com/go-viper/mapstructure/compare/v1.5.0...v1.6.0
- v2.0 changes: https://github.com/go-viper/mapstructure/compare/v1.6.0...v2.0.0
Breaking changes
Error is removed in favor of errors.Join (backported from Go 1.20 to preserve
compatibility with earlier versions)
What's Changed
- feat!: update module path
- build: update dev env
- feature: add StringToBasicTypeHookFunc and support complex
- Add an example showing how to use a DecodeHookFunc to parse a custom field.
- Remove exposed error type
- Replace internal joined error with errors.Join
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-06 00:05:45 +02:00
23148220ec
vendor: github.com/docker/docker c6aaabc9fc82 (master / v27.0.0-dev)
...
- api: move more network-related types to api/types/network
full diff: cd3804655a...c6aaabc9fc
2024-06-05 16:29:55 +02:00
a9ea034815
vendor: github.com/containerd/containerd v1.7.18
...
no changes to vendored files
full diff: https://github.com/containerd/containerd/compare/v1.7.17...v1.7.18
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-05 11:03:51 +02:00
558a910b85
vendor: github.com/containerd/containerd v1.7.17
...
no changes in vendored code
full diff: https://github.com/containerd/containerd/compare/v1.7.15...v1.7.17
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-04 22:16:39 +02:00
be2c284ee2
vendor: tags.cncf.io/container-device-interface v0.7.2
...
no changes in vendored code
full diff: https://github.com/cncf-tags/container-device-interface/compare/v0.6.2...v0.7.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-06-04 22:15:52 +02:00
b6a3ce4167
vendor: github.com/docker/docker cd3804655a25 (master / v27.0.0-dev)
...
full diff: e622cea556...cd3804655a
2024-06-04 09:17:20 +02:00
e2fc6bd771
vendor: github.com/docker/docker e622cea55698 (master / v27.0.0-dev)
...
full diff: 06e3a49d66...e622cea556
2024-05-31 17:39:37 +02:00
16c8f4942e
vendor: github.com/Microsoft/hcsshim v0.11.5
...
full diff: https://github.com/Microsoft/hcsshim/compare/v0.11.4...v0.11.5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-05-31 16:14:37 +02:00
b7548ba7f1
vendor: github.com/opencontainers/image-spec v1.1.0
...
full diff: https://github.com/opencontainers/image-spec/compare/v1.1.0-rc5...v1.1.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-05-31 16:10:21 +02:00
12aaeae21b
vendor: github.com/Microsoft/go-winio v0.6.2
...
- Fix compatibility with go1.22
- fileinfo: internally fix FileBasicInfo memory alignment (fixes compatibility
with go1.22)
- Switch from syscall to golang.org/x/sys/windows
- Remove golang.org/x/mod as dependency
- Remove golang.org/x/tools as dependency
full diff: https://github.com/Microsoft/go-winio/compare/v0.6.1...v0.6.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-05-31 15:49:19 +02:00
7b4171c608
Merge pull request #5092 from thaJeztah/use_containerd_platforms
...
migrate to new github.com/containerd/platforms package
2024-05-27 14:37:39 +02:00
7dc271a8be
migrate to new github.com/containerd/platforms package
...
The github.com/containerd/containerd/platforms package was moved to a separate
module in preparation of the containerd v2.0 release.
Switch to the new module, which means we also remove containerd as a direct
dependency.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-05-27 11:55:23 +02:00
05905bd922
vendor: github.com/docker/docker-credential-helpers v0.8.2
...
no changes to vendored code
full diff: https://github.com/docker/docker-credential-helpers/compare/v0.8.1...v0.8.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-05-23 19:13:17 +02:00
3fdf377b66
vendor: github.com/docker/docker master (06e3a49d66fa)
...
full diff: https://github.com/docker/docker/compare/v26.1.0...06e3a49d66fa
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-05-17 14:31:01 +02:00
dbf8443668
vendor: github.com/moby/swarmkit/v2 master (c1c857e2dca1)
...
- full diff: 911c97650f...c1c857e2dc
2024-05-15 14:49:56 +02:00
e3216ca64d
go.mod: use SemVer format for go version to assist CodeQL AutoBuild
...
CodeQL AutoBuild started to produce errors if the `go.mod` does not use
SemVer for the go version; 3a2b0a2feb/go/extractor/diagnostics/diagnostics.go (L512-L525)
2024-04-30 19:56:36 +02:00
e73fde8ca2
vendor: update github.com/docker/docker to v26.1.0
...
no change in vendored files (same hash, just a tagged release)
- full diff: https://github.com/docker/docker/compare/c8af8ebe4a89...v26.1.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-04-23 10:45:53 +02:00
aec1d364bf
vendor: github.com/docker/docker v26.1.0-dev (c8af8ebe4a89)
...
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-04-22 18:53:51 +02:00
6ad512068c
vendor: github.com/docker/docker v26.1.0-dev (ee8b788538ea)
...
no changes in vendored files
full diff: f9dfd139ec...ee8b788538
2024-04-19 15:04:28 +02:00
5515b86514
vendor: github.com/docker/docker v26.0.1-0.20240410103514-f9dfd139ec0d+incompatible (master)
...
Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2024-04-10 16:07:09 +01:00
c1053bf9d4
vendor: github.com/moby/swarmkit/v2 v2.0.0-20240227173239-911c97650f2e
...
Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2024-04-10 16:02:34 +01:00
8a3a7b9458
vendor: github.com/containerd/containerd v1.7.15
...
Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2024-04-10 15:52:37 +01:00
5fcbbde4b9
vendor: golang.org/x/net v0.23.0
...
full diff: https://github.com/golang/net/compare/v0.22.0...v0.23.0
Includes a fix for CVE-2023-45288, which is also addressed in go1.22.2
and go1.21.9;
> http2: close connections when receiving too many headers
>
> Maintaining HPACK state requires that we parse and process
> all HEADERS and CONTINUATION frames on a connection.
> When a request's headers exceed MaxHeaderBytes, we don't
> allocate memory to store the excess headers but we do
> parse them. This permits an attacker to cause an HTTP/2
> endpoint to read arbitrary amounts of data, all associated
> with a request which is going to be rejected.
>
> Set a limit on the amount of excess header frames we
> will process before closing a connection.
>
> Thanks to Bartek Nowotarski for reporting this issue.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-04-09 14:52:51 +02:00
4745b957d2
vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0
...
full diffs changes relevant to vendored code:
- https://github.com/golang/net/compare/v0.19.0...v0.22.0
- http2: remove suspicious uint32->v conversion in frame code
- http2: send an error of FLOW_CONTROL_ERROR when exceed the maximum octets
- https://github.com/golang/crypto/compare/v0.17.0...v0.21.0
- (no changes in vendored code)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-04-09 14:50:53 +02:00
c7a50ebb9f
vendor: golang.org/x/term v0.18.0
...
no changes in vendored code
full diff: https://github.com/golang/term/compare/v0.15.0...v0.18.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-04-09 14:47:48 +02:00
9a2133f2d4
vendor: golang.org/x/sys v0.18.0
...
full diff: https://github.com/golang/sys/compare/v0.16.0...v0.18.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-04-09 14:46:54 +02:00
89db01ef97
cli: add otel sdk tracing and metric providers to the core cli
...
This adds the code used by buildx and compose into the default CLI
program to help normalize the usage of these APIs and allow code reuse
between projects. It also allows these projects to benefit from
improvements or changes that may be made by another team.
At the moment, these APIs are a pretty thin layer on the OTEL SDK. It
configures an additional exporter to a docker endpoint that's used for
usage collection and is only active if the option is configured in
docker desktop.
This also upgrades the OTEL version to v1.19 which is the one being used
by buildkit, buildx, compose, etc.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-03-25 11:11:34 -05:00
fdb48a0664
vendor: github.com/docker/docker v26.0.0
...
no changes in vendored files
full diff: https://github.com/docker/docker/compare/8b79278316b5...v26.0.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-03-22 11:41:42 +01:00
69575f6175
vendor: github.com/docker/docker 8b79278316b5 (master)
...
no changes in vendored files
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-03-20 15:45:19 +01:00
b70a26deaf
vendor: github.com/docker/docker 330d777c53fb (v26.0.0-rc3-dev)
...
full diff: 70e46f2c7c...330d777c53
2024-03-19 14:31:41 +01:00
38c3ff67aa
vendor: github.com/docker/docker 70e46f2c7c2d (v26.0.0-rc3-dev)
...
full diff: https://github.com/docker/docker/compare/v26.0.0-rc2...70e46f2c7c2df8d8cc483d9831a907b12efa201b
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-03-16 16:53:20 +01:00
a4a79d75c0
vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4
...
full diffs:
- https://github.com/protocolbuffers/protobuf-go/compare/v1.31.0...v1.33.0
- https://github.com/golang/protobuf/compare/v1.5.3...v1.5.4
From the Go security announcement list;
> Version v1.33.0 of the google.golang.org/protobuf module fixes a bug in
> the google.golang.org/protobuf/encoding/protojson package which could cause
> the Unmarshal function to enter an infinite loop when handling some invalid
> inputs.
>
> This condition could only occur when unmarshaling into a message which contains
> a google.protobuf.Any value, or when the UnmarshalOptions.UnmarshalUnknown
> option is set. Unmarshal now correctly returns an error when handling these
> inputs.
>
> This is CVE-2024-24786.
In a follow-up post;
> A small correction: This vulnerability applies when the UnmarshalOptions.DiscardUnknown
> option is set (as well as when unmarshaling into any message which contains a
> google.protobuf.Any). There is no UnmarshalUnknown option.
>
> In addition, version 1.33.0 of google.golang.org/protobuf inadvertently
> introduced an incompatibility with the older github.com/golang/protobuf
> module. (https://github.com/golang/protobuf/issues/1596 ) Users of the older
> module should update to github.com/golang/protobuf@v1.5.4.
govulncheck results in our code shows that this does not affect the CLI:
govulncheck ./...
Scanning your code and 448 packages across 72 dependent modules for known vulnerabilities...
=== Symbol Results ===
No vulnerabilities found.
Your code is affected by 0 vulnerabilities.
This scan also found 1 vulnerability in packages you import and 0
vulnerabilities in modules you require, but your code doesn't appear to call
these vulnerabilities.
Use '-show verbose' for more details.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-03-16 16:41:42 +01:00
115c8d56e5
vendor: github.com/containerd/containerd v1.7.14
...
no changes in vendored files, but now requires go1.21
full diff: https://github.com/containerd/containerd/compare/v1.7.13...v1.7.14
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-03-16 16:41:38 +01:00
645b973521
vendor: github.com/docker/docker v26.0.0-rc2
...
full diff: https://github.com/docker/docker/compare/f4c696eef17d...v26.0.0-rc2
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-03-08 17:10:05 +01:00
a8379092af
vendor: github.com/docker/docker f4c696eef17d62a42
...
full diff: https://github.com/docker/docker/compare/v26.0.0-rc1+incompatible...f4c696eef17d62a421877d95c4810185750c5641
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-03-07 19:13:04 +01:00
5e80232398
vendor: github.com/docker/docker v26.0.0-rc1
...
full diff: https://github.com/docker/docker/compare/c70d7905fbd9...v26.0.0-rc1
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
test: update fixtures
Signed-off-by: Alano Terblanche <18033717+Benehiko@users.noreply.github.com>
2024-03-01 18:23:25 +01:00
85dcacd78f
plugins: set OTEL_RESOURCE_ATTRIBUTES when invoking a plugin
...
When a plugin is invoked, the docker cli will now set
`OTEL_RESOURCE_ATTRIBUTES` to pass OTEL resource attribute names to the
plugin as additional resource attributes. At the moment, the only
resource attribute passed is `cobra.command_path`.
All resource attributes passed by the CLI are prepended with the
namespace `docker.cli` to avoid clashing with existing ones the plugin
uses or ones defined by the user.
For aliased commands like the various builder commands, the command path
is overwritten to match with the original name (such as `docker
builder`) instead of the forwarded name (such as `docker buildx build`).
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-02-28 12:43:05 -08:00
acc675014f
vendor: github.com/docker/docker c70d7905fbd9 (v26.0.0-dev)
...
full diff: 86b86412a1...c70d7905fb
2024-02-26 17:54:20 +01:00
79541b7e21
vendor: google.golang.org/grpc v1.59.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 17:53:12 +01:00
096ced0894
vendor: OTEL v0.46.1 / v1.21.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 17:50:23 +01:00
f3c77df31e
vendor: github.com/prometheus/client_golang v1.17.0
...
full diffs:
- https://github.com/prometheus/client_golang/compare/v1.14.0...v1.17.0
- https://github.com/prometheus/client_model/compare/v0.3.0...v0.5.0
- https://github.com/prometheus/common/compare/v0.42.0...v0.44.0
- https://github.com/prometheus/procfs/compare/v0.9.0...v0.12.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 17:45:07 +01:00
1b42d04d63
vendor: github.com/go-logr/logr v1.3.0
...
full diff: https://github.com/go-logr/logr/compare/v1.2.4...v1.3.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 17:39:47 +01:00
f5a29ff8eb
vendor: github.com/containerd/containerd v1.7.13
...
no changes in vendored files
full diff: https://github.com/containerd/containerd/compare/v1.7.12...v1.7.13
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 17:36:46 +01:00
df6220d434
vendor: github.com/docker/docker 86b86412a1b7 (v26.0-dev)
...
full diff: 9e075f3808...86b86412a1
2024-02-10 12:26:39 +01:00
324309b086
vendor: github.com/docker/docker 9e075f3808a5 (master, v26.0.0-dev)
...
Vendor docker/docker with API < 1.24 removed. This should not affect client
code.
43ffb1ee9d..9e075f3808
2024-02-07 02:27:53 +01:00
93ad9fbdf6
vendor: github.com/moby/swarmkit/v2 v2.0.0-20240125134710-dcda100a8261
...
full diff: f082dd7a0c...dcda100a82
2024-02-07 02:23:51 +01:00
68dac842a1
vendor: github.com/docker/docker 43ffb1ee9d5a (v26.0.0-dev)
...
full diff: https://github.com/docker/docker/compare/v25.0.0...43ffb1ee9d5a
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-01-24 14:59:08 +01:00
4b1ed1f442
vendor: github.com/docker/docker v25.0.1
...
relevant changes:
- Fix isGitURL regular expression
- pkg/system: return even richer xattr errors
full diff: https://github.com/moby/moby/compare/v25.0.0...v25.0.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-24 12:17:20 +01:00
337dd82d8b
vendor: github.com/docker/docker v25.0.0
...
full diff: https://github.com/docker/docker/compare/v25.0.0-rc.3...v25.0.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-19 15:03:52 +01:00
cdb1c105f6
vendor: github.com/docker/docker v25.0.0-rc.3
...
full diff: https://github.com/moby/moby/compare/v25.0.0-rc.2...v25.0.0-rc.3
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-17 23:28:28 +01:00
21c2536051
vendor: golang.org/x/sys v0.16.0
...
full diff: https://github.com/golang/sys/compare/v0.15.0...v0.16.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-15 12:01:27 +01:00
d868dca00f
vendor: github.com/docker/docker v25.0.0-rc.2
...
- feat: make errdefs.IsXXX helper functions work with wrapped errors
full diff: https://github.com/moby/moby/compare/v25.0.0-rc.1...v25.0.0-rc.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-13 02:08:29 +01:00
8b6ffbdf77
vendor: github.com/containerd/containerd v1.7.12
...
- full diff: https://github.com/containerd/containerd/compare/v1.7.11...v1.7.12
- release notes: https://github.com/containerd/containerd/releases/tag/v1.7.12
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-12 19:31:12 +01:00
Sebastiaan van Stijn
Paweł Gronowski
David Karlsson
Sebastiaan van Stijn
Albin Kerouanton
Laura Brehm
Jonathan A. Sternberg