Commit Graph
524 Commits
Author SHA1 Message Date
Tonis Tiigi c5154b3169 update linters for go1.25 base version
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-09 18:54:15 -08:00
CrazyMaxandTonis Tiigi c3514fea5d vendor: github.com/moby/buildkit@master ed6dc749ce40b9fdc308676d10343fd00f56c717
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-01-07 11:45:01 -08:00
Sebastiaan van Stijn 7762411537 vendor: github.com/containerd/containerd/v2 v2.2.1
The pull request that was needed has been released now as part of v2.2.1;
full diff: https://github.com/containerd/containerd/compare/efd86f2b0bc2...v2.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-07 11:33:39 +01:00
Sebastiaan van Stijn 77571f56f2 vendor: github.com/docker/cli v29.1.3
full diff: https://github.com/docker/cli/compare/v29.1.2...v29.1.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-16 11:08:53 +01:00
Sebastiaan van Stijn 3bc50aece8 vendor: github.com/klauspost/compress v1.18.2
No changes in vendored code

Fixes a regression in v1.18.1 that resulted in invalid flate/zip/gzip encoding.
The v1.18.1 tag has been retracted.

full diff: https://github.com/klauspost/compress/compare/v1.18.1...v1.18.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-16 11:08:52 +01:00
Tõnis TiigiandGitHub c003c8617e Merge pull request #3558 from thaJeztah/bump_cli
vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
2025-12-12 09:43:24 -08:00
Sebastiaan van Stijn 9353c2c00e vendor: github.com/morikuni/aec v1.1.0
full diff: https://github.com/morikuni/aec/compare/v1.0.0...v1.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-11 17:51:11 +01:00
Sebastiaan van Stijn 304ab6d65d vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
reduce dependency on the archived go.yaml.in/yaml/v3 package

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-09 16:55:47 +01:00
Jonathan A. Sternberg 17952c617d chore: remove unneeded excludes
The upstream PR that used the pseudo-versions was merged so this no
longer causes an upgrade of those dependencies to pseudo-versions so the
exclude is no longer needed.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2025-12-04 10:46:27 -06:00
Sebastiaan van Stijn 5402d35f8d vendor: github.com/docker/cli v29.1.2
no changes in vendored code

full diff: https://github.com/docker/cli/compare/v29.1.1...v29.1.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-03 09:36:20 +01:00
Sebastiaan van Stijn 5efe75571f vendor: docker/cli v29.1.1, moby/client v0.2.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-02 15:52:11 +01:00
Sebastiaan van Stijn 4f77ae4858 vendor: github.com/moby/buildkit v0.26.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-02 15:52:08 +01:00
Sebastiaan van Stijn 72126c6a74 vendor: otel/exporters v1.38.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 22:29:28 +01:00
Sebastiaan van Stijn c7aa39fdeb vendor: otel/contrib v0.63.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 22:29:28 +01:00
Sebastiaan van Stijn 027fa165d0 vendor: golang.org/x/crypto v0.45.0
full diff: https://github.com/golang/crypto/compare/v0.44.0...v0.45.0

Hello gophers,

We have tagged version v0.45.0 of golang.org/x/crypto in order to address two
security issues.

This version fixes a vulnerability in the golang.org/x/crypto/ssh package and a
vulnerability in the golang.org/x/crypto/ssh/agent package which could cause
programs to consume unbounded memory or panic respectively.

SSH servers parsing GSSAPI authentication requests don't validate the number of
mechanisms specified in the request, allowing an attacker to cause unbounded
memory consumption.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-58181 and Go issue https://go.dev/issue/76363.

SSH Agent servers do not validate the size of messages when processing new
identity requests, which may cause the program to panic if the message is
malformed due to an out of bounds read.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-47914 and Go issue https://go.dev/issue/76364.

Cheers, Go Security team

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 19:17:06 +01:00
Sebastiaan van Stijn a2a2819d7d vendor: golang.org/x/net v0.47.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 19:13:50 +01:00
Sebastiaan van Stijn ae3eed7b80 vendor: golang.org/x/text v0.31.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 19:12:17 +01:00
Sebastiaan van Stijn 3f5c571f69 golang.org/x/term v0.37.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 19:09:59 +01:00
Sebastiaan van Stijn b20a9ecf67 vendor: golang.org/x/sync v0.18.0
full diff: https://github.com/golang/sync/compare/v0.17.0...v0.18.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 18:47:50 +01:00
Sebastiaan van Stijn 3858752e0a vendor: golang.org/x/sys v0.38.0
- cpu: add HPDS, LOR, PAN detection for arm64
- cpu: also use MRS instruction in getmmfr1
- cpu: use MRS instruction to read arm64 system registers
- unix: add consts for ELF handling
- unix: add SetMemPolicy and its mode/flag values
- unix: add SizeofNhmsg and SizeofNexthopGrp
- windows: add iphlpapi routing functions

full diff: https://github.com/golang/sys/compare/v0.37.0...v0.38.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 18:45:58 +01:00
Tonis Tiigi 42a2be1c4b vendor: update buildkit to v0.26.1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2025-11-17 16:07:17 +00:00
Tõnis TiigiandGitHub dd0cd08119 Merge pull request #3524 from crazy-max/containerd-update
vendor: update containerd to efd86f2b0bc2 (release/2.2)
2025-11-17 16:02:42 +00:00
Sebastiaan van Stijn 2f462a4945 vendor: github.com/docker/cli v29.0.1
full diff: https://github.com/docker/cli/compare/v29.0.0...v29.0.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-16 23:20:52 +01:00
Sebastiaan van Stijn b0b2a4e1ef vendor: github.com/docker/docker-credential-helpers v0.9.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-16 23:20:44 +01:00
CrazyMax c034ddfbde vendor: update containerd to efd86f2b0bc2 (release/2.2)
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2025-11-15 10:40:44 +01:00
Jonathan A. Sternberg fd8b77f36b vendor: github.com/moby/buildkit v0.26.0
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2025-11-12 12:38:10 -06:00
Sebastiaan van Stijn 18dc2e088a vendor: github.com/moby/moby/api v1.52.0, moby/client v0.1.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-12 01:30:02 +01:00
Jonathan A. Sternberg 1651da02d9 vendor: update buildkit v0.26.0-rc2
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2025-11-11 14:14:36 -06:00
Tonis Tiigi cc2a26c146 vendor: update buildkit v0.26.0-rc1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2025-11-05 15:55:57 -08:00
Tonis Tiigi ae33cdc550 vendor: update buildkit to e18be41828
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2025-11-05 12:53:09 -08:00
Tonis Tiigi faf30a2177 vendor: update containerd to v2.2.0-rc.1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2025-11-05 10:24:42 -08:00
Guillaume Lours 158f84f6a2 bump compose-go to version v2.9.1
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
2025-10-30 11:19:34 +01:00
CrazyMaxandCrazyMax 228a816bbb vendor: github.com/moby/buildkit@master 9b6f60ac8bf9
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2025-10-11 23:03:13 +02:00
Sebastiaan van Stijn 08322e90c5 vendor: github.com/docker/docker, docker/cli v28.5.1
full diff:

- https://github.com/docker/cli/compare/v28.4.0...v28.5.1
- https://github.com/docker/docker/compare/v28.4.0...v28.5.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-10-08 22:45:12 +02:00
Sebastiaan van Stijn f4fb1715a5 vendor: github.com/moby/buildkit v0.25.1
full diff: https://github.com/moby/buildkit/compare/v0.25.0...v0.25.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-10-08 22:44:44 +02:00
Jonathan A. Sternberg 3d9cc5128a vendor: update buildkit to v0.25.0
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2025-09-30 14:09:19 -05:00
Tonis Tiigi 3bea8ce3ad vendor: update buildkit to v0.25.0-rc1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2025-09-23 13:32:44 -07:00
Tõnis TiigiandGitHub bc8ede2d4c Merge pull request #3427 from glours/bump-compose-go-v2.9.0
bump compose-go to version v2.9.0
2025-09-19 14:36:35 -07:00
Sebastiaan van Stijn d1afe64cd1 vendor: github.com/spf13/cobra v1.10.1
full diff: https://github.com/spf13/cobra/compare/v1.9.1...v1.10.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-09-19 19:48:35 +02:00
Sebastiaan van Stijn df0b265314 vendor: github.com/spf13/pflag v1.0.10
full diff: https://github.com/spf13/pflag/compare/v1.0.6...v1.0.10

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-09-19 19:44:24 +02:00
Guillaume Lours 9784222a41 bump compose-go to version v2.9.0
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
2025-09-19 10:11:03 +02:00
CrazyMax f5665d2e42 vendor: update hcl dependencies
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2025-09-10 10:00:58 +02:00
CrazyMax 3d113f6397 go.mod: bump to go 1.24
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2025-09-09 14:09:38 +02:00
Guillaume Lours fb28ba3e85 bump compose-go to version v2.8.2
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
2025-09-09 10:46:00 +02:00
Sebastiaan van Stijn a923dbc1d9 vendor: github.com/docker/docker, docker/cli v28.4.0
full diffs:

- https://github.com/docker/docker/compare/v28.3.3...v28.4.0
- https://github.com/docker/cli/compare/v28.3.3...v28.4.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-09-04 00:11:44 +02:00
CrazyMax d136d2ba53 vendor: update buildkit to v0.24.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2025-09-03 16:14:35 +02:00
Tonis Tiigi 1f39ad2001 vendor: update buildkit to v0.24.0-rc2
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2025-08-29 14:49:16 -07:00
Tonis Tiigi ec3b99180b vendor: update buildkit to v0.24.0-rc1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2025-08-27 13:39:14 -07:00
Tõnis TiigiandGitHub 026e55b376 Merge pull request #3386 from crazy-max/winsymlink0
restore junctions to have os.ModeSymlink flag set on Windows
2025-08-27 08:38:43 -07:00
CrazyMax 300a136d4c restore junctions to have os.ModeSymlink flag set on Windows
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2025-08-27 15:06:48 +02:00