CrazyMax
3836aeb949
bake: add semvercmp func to stdlib
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-01-06 09:34:10 +01:00
Tõnis Tiigi and GitHub
2bcb098cbb
Merge pull request #3566 from jsternberg/dap-build-integration-tests
...
tests: add integration tests for `dap build`
2025-12-17 09:41:34 -08:00
Jonathan A. Sternberg
fdfba3014d
tests: add integration tests for dap build
...
This adds integration tests for the `dap build` command to test various
behavior associated with the command. We start the build and the
integration test acts as a dap client to send requests and check that
the output is what we expect.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com >
2025-12-17 10:56:30 -06:00
CrazyMax and GitHub
e794584a3f
Merge pull request #3561 from docker/dependabot/github_actions/peter-evans/create-pull-request-8.0.0
...
build(deps): bump peter-evans/create-pull-request from 7.0.9 to 8.0.0
2025-12-16 17:18:08 +01:00
CrazyMax and GitHub
29076c3f98
Merge pull request #3573 from docker/dependabot/github_actions/actions/download-artifact-7
...
build(deps): bump actions/download-artifact from 6 to 7
2025-12-16 17:11:52 +01:00
CrazyMax and GitHub
b6d76b0a16
Merge pull request #3572 from docker/dependabot/github_actions/actions/upload-artifact-6
...
build(deps): bump actions/upload-artifact from 5 to 6
2025-12-16 17:11:34 +01:00
dependabot[bot] and GitHub
a02f395415
build(deps): bump actions/download-artifact from 6 to 7
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-15 18:06:32 +00:00
dependabot[bot] and GitHub
77fad74d4a
build(deps): bump actions/upload-artifact from 5 to 6
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-15 18:06:27 +00:00
CrazyMax and GitHub
150cc839f2
Merge pull request #3570 from docker/dependabot/github_actions/actions/cache-5
...
build(deps): bump actions/cache from 4 to 5
2025-12-15 15:49:36 +01:00
Tõnis Tiigi and GitHub
590adceb63
Merge pull request #3554 from hsw/fix-debug-standalone
...
commands: fix debug flag in standalone mode
2025-12-12 16:07:35 -08:00
Tõnis Tiigi and GitHub
73d46672e1
Merge pull request #3534 from cpuguy83/dap_bp_overlaps
...
dap: Fix breakpoint overlap check
2025-12-12 16:06:47 -08:00
dependabot[bot] and GitHub
8dcf7f3663
build(deps): bump actions/cache from 4 to 5
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-12 18:03:39 +00:00
Tõnis Tiigi and GitHub
c003c8617e
Merge pull request #3558 from thaJeztah/bump_cli
...
vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
2025-12-12 09:43:24 -08:00
Tõnis Tiigi and GitHub
d56379477e
Merge pull request #3563 from thaJeztah/bump_aec
...
vendor: github.com/morikuni/aec v1.1.0
2025-12-11 09:38:55 -08:00
Sebastiaan van Stijn
9353c2c00e
vendor: github.com/morikuni/aec v1.1.0
...
full diff: https://github.com/morikuni/aec/compare/v1.0.0...v1.1.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-12-11 17:51:11 +01:00
dependabot[bot] and GitHub
23f1b52ec5
build(deps): bump peter-evans/create-pull-request from 7.0.9 to 8.0.0
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.9 to 8.0.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/84ae59a2cdc2258d6fa0732dd66352dddae2a412...98357b18bf14b5342f975ff684046ec3b2a07725 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-10 18:03:28 +00:00
Sebastiaan van Stijn
304ab6d65d
vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
...
reduce dependency on the archived go.yaml.in/yaml/v3 package
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-12-09 16:55:47 +01:00
Sergei Khomenkov
cecd8e9570
commands: fix debug flag in standalone mode
...
The -D/--debug flag was not enabling debug logging in standalone mode.
Root cause: debug.Enable() was called before dockerCli.Initialize(),
but Initialize() calls SetLogLevel("") which resets logrus level to
Info, and since options.Debug was false, it wasn't re-enabled.
Fix: Pass opt.debug to options.Debug before Initialize() so it
properly enables debug level after SetLogLevel().
Signed-off-by: Sergei Khomenkov <sergey@homenkow.ru >
2025-12-07 13:52:15 +02:00
CrazyMax and GitHub
22e7bf6455
Merge pull request #3552 from jsternberg/remove-unneeded-excludes
...
chore: remove unneeded excludes
2025-12-05 09:22:52 +01:00
Justin Chadwell and GitHub
acc77888aa
Merge pull request #3551 from jedevc/split-node-resolver
2025-12-05 08:14:23 +00:00
Jonathan A. Sternberg
17952c617d
chore: remove unneeded excludes
...
The upstream PR that used the pseudo-versions was merged so this no
longer causes an upgrade of those dependencies to pseudo-versions so the
exclude is no longer needed.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com >
2025-12-04 10:46:27 -06:00
Justin Chadwell
3e413a05df
build: split out node resolver
...
Signed-off-by: Justin Chadwell <me@jedevc.com >
2025-12-04 09:48:36 +00:00
Akihiro Suda and GitHub
4eb80cafb9
Merge pull request #3550 from thaJeztah/bump_cli
...
vendor: github.com/docker/cli v29.1.2
2025-12-04 02:00:11 +09:00
Sebastiaan van Stijn
5402d35f8d
vendor: github.com/docker/cli v29.1.2
...
no changes in vendored code
full diff: https://github.com/docker/cli/compare/v29.1.1...v29.1.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-12-03 09:36:20 +01:00
Tõnis Tiigi and GitHub
f72bd30200
Merge pull request #3548 from crazy-max/bake-contexts-override
...
docs: named contexts override with bake
2025-12-02 16:33:31 -08:00
Tõnis Tiigi and GitHub
a4a02b07e8
Merge pull request #3545 from thaJeztah/bump_moby
...
vendor: docker/cli v29.1.1, moby/client v0.2.1
2025-12-02 16:33:04 -08:00
Sebastiaan van Stijn
5efe75571f
vendor: docker/cli v29.1.1, moby/client v0.2.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-12-02 15:52:11 +01:00
Sebastiaan van Stijn
4f77ae4858
vendor: github.com/moby/buildkit v0.26.2
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-12-02 15:52:08 +01:00
CrazyMax and GitHub
6acb14ebf6
Merge pull request #3547 from thaJeztah/bump_otels
...
vendor: otel/contrib v0.63.0, otel/exporters v1.38.0
2025-12-02 15:32:37 +01:00
CrazyMax and GitHub
3bc343ea41
Merge pull request #3549 from docker/dependabot/github_actions/softprops/action-gh-release-2.5.0
...
build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0
2025-12-02 15:30:20 +01:00
dependabot[bot] and GitHub
7f250c2db1
build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.4.2 to 2.5.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/5be0e66d93ac7ed76da52eca8bb058f665c3a5fe...a06a81a03ee405af7f2048a818ed3f03bbf83c7b )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 2.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-01 20:49:29 +00:00
CrazyMax
9173ef69ec
docs: named contexts override with bake
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2025-11-28 15:05:47 +01:00
Akihiro Suda and GitHub
c6ec16cbc0
Merge pull request #3546 from thaJeztah/int_convert
...
driver/kubernetes: change DeploymentOpt.Replicas to int32
2025-11-28 09:36:04 +09:00
Sebastiaan van Stijn
88b4d5ae03
driver/kubernetes: change DeploymentOpt.Replicas to int32
...
Directly convert to a int32 instead of later conversion so that
we can return an error if the value is out of range.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-27 22:41:57 +01:00
Sebastiaan van Stijn
72126c6a74
vendor: otel/exporters v1.38.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-27 22:29:28 +01:00
Sebastiaan van Stijn
c7aa39fdeb
vendor: otel/contrib v0.63.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-27 22:29:28 +01:00
CrazyMax and GitHub
50236f7452
Merge pull request #3544 from thaJeztah/bump_x_deps
...
vendor: update various golang.org/x/xxx dependencies
2025-11-27 21:51:26 +01:00
Sebastiaan van Stijn
027fa165d0
vendor: golang.org/x/crypto v0.45.0
...
full diff: https://github.com/golang/crypto/compare/v0.44.0...v0.45.0
Hello gophers,
We have tagged version v0.45.0 of golang.org/x/crypto in order to address two
security issues.
This version fixes a vulnerability in the golang.org/x/crypto/ssh package and a
vulnerability in the golang.org/x/crypto/ssh/agent package which could cause
programs to consume unbounded memory or panic respectively.
SSH servers parsing GSSAPI authentication requests don't validate the number of
mechanisms specified in the request, allowing an attacker to cause unbounded
memory consumption.
Thanks to Jakub Ciolek for reporting this issue.
This is CVE-2025-58181 and Go issue https://go.dev/issue/76363 .
SSH Agent servers do not validate the size of messages when processing new
identity requests, which may cause the program to panic if the message is
malformed due to an out of bounds read.
Thanks to Jakub Ciolek for reporting this issue.
This is CVE-2025-47914 and Go issue https://go.dev/issue/76364 .
Cheers, Go Security team
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-27 19:17:06 +01:00
Sebastiaan van Stijn
a2a2819d7d
vendor: golang.org/x/net v0.47.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-27 19:13:50 +01:00
Sebastiaan van Stijn
ae3eed7b80
vendor: golang.org/x/text v0.31.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-27 19:12:17 +01:00
Sebastiaan van Stijn
3f5c571f69
golang.org/x/term v0.37.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-27 19:09:59 +01:00
Sebastiaan van Stijn
b20a9ecf67
vendor: golang.org/x/sync v0.18.0
...
full diff: https://github.com/golang/sync/compare/v0.17.0...v0.18.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-27 18:47:50 +01:00
Sebastiaan van Stijn
3858752e0a
vendor: golang.org/x/sys v0.38.0
...
- cpu: add HPDS, LOR, PAN detection for arm64
- cpu: also use MRS instruction in getmmfr1
- cpu: use MRS instruction to read arm64 system registers
- unix: add consts for ELF handling
- unix: add SetMemPolicy and its mode/flag values
- unix: add SizeofNhmsg and SizeofNexthopGrp
- windows: add iphlpapi routing functions
full diff: https://github.com/golang/sys/compare/v0.37.0...v0.38.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-27 18:45:58 +01:00
CrazyMax and GitHub
f1a0fc5d63
Merge pull request #3535 from docker/dependabot/github_actions/peter-evans/create-pull-request-7.0.9
...
build(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9
2025-11-25 18:37:22 +01:00
dependabot[bot] and GitHub
b1c71b29c4
build(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.8 to 7.0.9.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/271a8d0340265f705b14b6d32b9829c1cb33d45e...84ae59a2cdc2258d6fa0732dd66352dddae2a412 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 7.0.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-25 17:16:34 +00:00
Tõnis Tiigi and GitHub
e084a7f6b6
Merge pull request #3536 from crazy-max/fix-provnance-metadata
...
fix empty provenance metadata for multi-platform builds
2025-11-25 09:10:36 -08:00
CrazyMax
1b9791f6fe
fix empty provenance metadata for multi-platform builds
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2025-11-25 17:39:46 +01:00
Tõnis Tiigi and GitHub
1aa6b6cad9
Merge pull request #3538 from crazy-max/update-freebsd-box
...
ci: switch to bento/freebsd-14 vagrant box
2025-11-25 08:14:15 -08:00
CrazyMax
2625451e61
ci: switch to bento/freebsd-14 vagrant box
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2025-11-25 11:36:20 +01:00
CrazyMax and GitHub
5fd9e1a88c
Merge pull request #3533 from docker/dependabot/github_actions/actions/checkout-6
...
build(deps): bump actions/checkout from 5 to 6
2025-11-25 11:21:49 +01:00