chore(deps): update dependency moby/moby to v28 #1807
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
from
6d7481c to
55e72e7
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
4 times, most recently
from
c1aa62c to
3b72095
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
3 times, most recently
from
8d8d563 to
19e930e
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
2 times, most recently
from
f9f84b0 to
b3157be
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
from
b3157be to
5f417ee
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
3 times, most recently
from
84fe4a1 to
d47a407
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
from
d47a407 to
af7598a
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
2 times, most recently
from
cda6b33 to
cd47494
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
from
cd47494 to
2b0e1f7
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
from
2b0e1f7 to
090c11a
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
3 times, most recently
from
1275e71 to
abb527d
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
2 times, most recently
from
5fa0ab0 to
f9f777d
Compare
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
from
f9f777d to
add3e0d
Compare
Signed-off-by: Renovate Bot <[email protected]>
renovate
bot
force-pushed
the
renovate/moby-moby-28.x
branch
from
add3e0d to
4a1773e
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5:27.5.1->v28.5.227.5.1->28.5.2Release Notes
moby/moby (moby/moby)
v28.5.2Compare Source
28.5.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Packaging updates
Bug fixes and enhancements
Deprecations
DefaultDockerfileName,DetectArchiveReader,WriteTempDockerfile,ResolveAndValidateContextPath. These utilities were only used internally and will be removed in the next release. docker/cli#6610ValidateMACAddress. docker/cli#6560v28.5.1Compare Source
28.5.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
Deprecations
ParentandDockerVersionfields. moby/moby#51105Config.DockerVersionfield. moby/moby#51110v28.5.0Compare Source
28.5.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
docker infofor broken symlinks in CLI-plugin directories. docker/cli#6476statson empty eventActor.ID. docker/cli#6471Packaging updates
Networking
endpoint_countfrom the data store. moby/moby#51064API
KernelMemoryTCP). moby/moby#51067GET containers/{name}/checkpointsreturningnullinstead of empty JSON array when there are no checkpoints. moby/moby#51052Go SDK
WithUserAgentoption. docker/cli#6477Deprecations
DockerCli.Apply. This method is no longer used and will be removed in the next release if there are no remaining uses. docker/cli#6497DockerCli.ContentTrustEnabled. This method is no longer used and will be removed in the next release. docker/cli#6495DockerCli.DefaultVersion. This method is no longer used and will be removed in the next release. docker/cli#6491ResolveDefaultContextutility. docker/cli#6529WithContentTrustFromEnv,WithContentTrustoptions. These options were used internally, and will be removed in the next release.. docker/cli#6489IsNotFound(). docker/cli#6514v28.4.0Compare Source
28.4.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
GODEBUGenvironment variable when the key-value pair ("GODEBUG":"...") exists inside the docker context metadata. docker/cli#6399Bug fixes and enhancements
docker pullanddocker image pull. docker/cli#6420docker pushif the client did not send anX-Registry-Authheader. moby/moby#50738docker historyfailing withsnapshot X does not existwhen calling on a non-native image that was built locally. moby/moby#50875docker image pruneto emit correctuntaganddeleteevents and list only the deleted images root digests instead of every blob. moby/moby#50837docker pushanddocker pullafter a failure caused by missing authentication. docker/cli#6256Packaging updates
runcto v1.3.0. moby/moby#50699Networking
API
AuthConfig.Emailfield. moby/moby#50797Go SDK
Deprecations
--tlscacert,--tlscert, and--tlskeycommand-line flags. docker/cli#6291DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS) as deprecated in v28.4 and set for removal in v30.0. docker/cli#6309NetworkSettingsBase.Bridge, structNetworkSettingsBase, all the fields ofDefaultNetworkSettings, and structDefaultNetworkSettings. moby/moby#50839build.CacheDiskUsage,container.DiskUsage,images.DiskUsageandvolumes.DiskUsageare now deprecated and will be removed in the next major release. moby/moby#50768ReexecEnvvar. docker/cli#6411CommandAnnotationPlugin,CommandAnnotationPluginVendor,CommandAnnotationPluginVersion,CommandAnnotationPluginInvalid,CommandAnnotationPluginCommandPath) in favor of their equivalent incli-plugins/manager/metadata. docker/cli#6298NamePrefix,MetadataSubcommandName,HookSubcommandName,Metadata,ReexecEnvvar) in favor of their equivalent incli-plugins/manager/metadata. docker/cli#6269Candidateinterface, which was only for internal use. docker/cli#6269NewPluginErrorfunction, which was only for internal use. docker/cli#6269ResourceAttributesEnvvarconst. docker/cli#6269NewBuilderCommandandNewBakeStubCommand. These functions will be removed in the next release. docker/cli#6312NewPruneCommand. docker/cli#6343NewCheckpointCommand. This function will be removed in the next release. docker/cli#6312NewFormat,FormatWrite. docker/cli#6341NoComplete. docker/cli#6405ValidArgsFn. docker/cli#6259NewConfigCommand. This function will be removed in the next release. docker/cli#6312NewFormat,FormatWrite,InspectFormatWrite. docker/cli#6341RunConfigCreate,CreateOptions,RunConfigInspect,InspectOptions,RunConfigList,ListOptions,RunConfigRemove, andRemoveOptions. docker/cli#6369NewBuildCommand,NewPullCommand,NewPushCommand,NewImagesCommand,NewImageCommand,NewHistoryCommand,NewImportCommand,NewLoadCommand,NewRemoveCommand,NewSaveCommand,NewTagCommand,NewPruneCommand. These functions will be removed in the next release. docker/cli#6312NewDiffFormat,DiffFormatWrite. These functions were only used internally and will be removed in the next release. docker/cli#6341NewRunCommand,NewExecCommand,NewPsCommand,NewContainerCommand,NewAttachCommand,NewCommitCommand,NewCopyCommand,NewCreateCommand,NewDiffCommand,NewExportCommand,NewKillCommand,NewLogsCommand,NewPauseCommand,NewPortCommand,NewRenameCommand,NewRestartCommand,NewRmCommand,NewStartCommand,NewStatsCommand,NewStopCommand,NewTopCommand,NewUnpauseCommand,NewUpdateCommand,NewWaitCommand,NewPruneCommand. These functions will be removed in the next release. docker/cli#6312NewContextCommand. This function will be removed in the next release. docker/cli#6312RunCreateandCreateOptions. docker/cli#6403RunExportandExportOptions. docker/cli#6403RunImport. docker/cli#6403RunRemoveandRemoveOptions. docker/cli#6403RunUpdateandUpdateOptions. docker/cli#6403RunUse. docker/cli#6403AuthResolverutility. docker/cli#6357NewHistoryFormat,HistoryWrite. docker/cli#6341, docker/cli#6341NewManifestCommand. This functions will be removed in the next release. docker/cli#6312NewFormat,FormatWrite. docker/cli#6341NewNetworkCommand. These functions will be removed in the next release. docker/cli#6312NewFormat,FormatWrite,InspectFormatWrite. docker/cli#6341NewNodeCommand. This functions will be removed in the next release. docker/cli#6312NewFormat,FormatWrite. docker/cli#6341NewPluginCommand. This function will be removed in the next release. docker/cli#6312NewLoginCommand,NewLogoutCommand,NewSearchCommand. These functions will be removed in the next release. docker/cli#6312NewSearchFormat,SearchWrite. docker/cli#6341OauthLoginEscapeHatchEnvVarconst. docker/cli#6413NewFormat,FormatWrite,InspectFormatWrite. docker/cli#6341NewSecretCommand. This functions will be removed in the next release. docker/cli#6312NewFormat,InspectFormatWrite. docker/cli#6341NewServiceCommand. This function will be removed in the next release. docker/cli#6312NewStackCommand. This function will be removed in the next release. docker/cli#6312RunList,RunServices. docker/cli#6391NewSwarmCommand. This function will be removed in the next release. docker/cli#6312NewVersionCommand,NewInfoCommand,NewSystemCommand,NewEventsCommand,NewInspectCommand. These functions will be removed in the next release. docker/cli#6312NewTaskFormat,FormatWrite. docker/cli#6341NewTrustCommand. This function will be removed in the next release. docker/cli#6312SignedTagInfo,SignerInfo,NewTrustTagFormat,NewSignerInfoFormat,TagWrite,SignerInfoWrite. docker/cli#6341NewVolumeCommand,NewPruneCommand. These functions will be removed in the next release. docker/cli#6312AddTrustSigningFlags,AddTrustVerificationFlags, andAddPlatformFlagutilities, which were only used internally. docker/cli#6311ConfigureAuthutility. docker/cli#6257CopyToFileutility. docker/cli#6257AuthConfig.Emailfield. docker/cli#6392VisitAll,DisableFlagsInUseLineutilities. These utilities were only used internally and will be removed in the next release. docker/cli#6276HasCompletionArgutility. This utility was only used internally. docker/cli#6276cli/command.RegistryAuthenticationPrivilegedFunc. docker/cli#6256NewNamedListOptsRef,NewNamedMapOpts,NamedListOpts,NamedMapOpts, andNamedOption. These types and functions are no longer used and will be removed in the next release. docker/cli#6292ParseEnvFilein favour ofkvfile.Parse. docker/cli#6381QuotedString. This utility is no longer used, and will be removed in the next release. docker/cli#6275ValidateHostutility. This function is no longer used, and will be removed in the next release. docker/cli#6280JSONMessage.From,JSONMessage.Time, andJSONMessage.TimeNanofields, as they are no longer returned by the API for progress messages. Use theevents.Messagetype instead to unmarshal the/eventsresponse. moby/moby#50762v28.3.3Compare Source
28.3.3
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Security
This release fixes an issue where, after a firewalld reload, published container ports could be accessed directly from the local network, even when they were intended to be accessible only via a loopback address. CVE-2025-54388 / GHSA-x4rx-4gw3-53p4 / moby/moby#50506.
Packaging updates
Go SDK
TrunateID()utility as alternative forgithub.zerozr99.workers.dev/docker/docker/pkg/stringid.TrunateID(). docker/cli#6180v28.3.2: 28.3.2Compare Source
28.3.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
--use-api-socketnot working correctly when targeting a remote daemon. docker/cli#6157DOCKER_AUTH_CONFIGis set duringdocker loginanddocker logout. docker/cli#6163Packaging updates
v28.3.1: 28.3.1Compare Source
28.3.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Packaging updates
models:key in Docker Compose. docker/docker-ce-packaging#1222v28.3.0: 28.3.0Compare Source
28.3.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
docker run --gpus. moby/moby#49952DOCKER_AUTH_CONFIGas a credential store. docker/cli#6008Bug fixes and enhancements
docker image inspect inspectomitting empty fields. moby/moby#50135docker images --treenot marking images as in-use when the containerd image store is disabled. docker/cli#6140docker pull/pushhang in non-interactive when authentication is required caused by prompting for login credentials. docker/cli#6141docker pullwould show Docker Hub-specific hints when logging in on other registries. docker/cli#6135docker removecommand that was accidentally introduced in Docker 23.0. docker/cli#6144dockerd --validateand improve error messages for invalid mirrors. moby/moby#50240dockerd-rootless-setuptool.sh: Fix the script from silently returning with no error message when subuid/subgid system requirements are not satisfied. moby/moby#50059docker pushnot creating a tag on the remote repository. moby/moby#50199docker pull/push. moby/moby#50176Packaging updates
Networking
docker network inspect --verbosecould sometimes crash the daemon (#49937).0.0.0.0and others are mapped to specific host addresses. moby/moby#50054network inspectresponse for an overlay network now reports thatEnableIPv4is true. moby/moby#50147"Mirrored". moby/moby#50155docker system pruneanddocker network pruneonly remove networks created by Docker. moby/moby#50154API
GET /images/jsonnow sets the value of theContainersfield for all images to the count of containers using the image. moby/moby#50146Deprecations
GET /images/{name}/jsonresponse are now deprecated and will be removed in v29.0. docker/cli#6129ExecOptions.Detach. This field is not used, and will be removed in a future release. moby/moby#50219IdentityMappingandIdentity.Chown. moby/moby#50210v28.2.2: 28.2.2Compare Source
28.2.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
docker build --pushto fail. This reverts the fix fordocker buildnot persisting overridden images as dangling. moby/moby#50105Networking
DOCKER-USERchain, do not add an explicitRETURNrule, allowing users to append as well as insert their own rules. Existing rules are not removed on upgrade, but it won't be replaced after a reboot. moby/moby#50098v28.2.1: 28.2.1Compare Source
28.2.1
Packaging updates
dockergroup/user on fresh installations. docker-ce-packaging#1209v28.2.0: 28.2.0Compare Source
28.2.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
{{.Platform}}as formatting option fordocker psto show the platform of the image the container is running. docker/cli#6042../) on bind mount sources when usingdocker run/createwith-v/--volumeor--mount type=bindoptions. docker/cli#4966docker info. docker/cli#6078docker image rm: add--platformoption to remove a variant from multi-platform images. docker/cli#6109DOCKER_BUILDKIT=1). moby/moby#49740Bug fixes and enhancements
fluentd-write-timeout), which enables specifying write timeouts for fluentd connections. moby/moby#49911DOCKER_AUTH_CONFIGfor the experimental--use-api-socketoption. docker/cli#6019docker execwaiting for 10 seconds if a non-existing user or group was specified. moby/moby#49868docker swarm initignoringcacertoption of--external-ca. docker/cli#5995~/.docker/config.json) if it was a relative symbolic link. docker/cli#5282--restart alwayspolicy using CDI devices failing to start on daemon restart. moby/moby#49990plugin does not implement PluginAddr interfaceerror for Swarm CSI drivers. moby/moby#49961docker loginerror messages for invalid options. docker/cli#6036listmount,statmount,lsm_get_self_attr,lsm_list_modules,lsm_set_self_attr,mseal,uretprobe,riscv_hwprobe,getxattrat,listxattrat,removexattrat, andsetxattrat. This prevents containers from receiving EPERM errors when using them. moby/moby#50077docker inspect: add shell completion, improve flag-description for--typeand improve validation. docker/cli#6052docker buildnot persisting overridden images as dangling. moby/moby#49702docker system dfreporting a negative reclaimable space amount. moby/moby#49707PUTrequests when pushing a multi-platform image. moby/moby#49949Packaging updates
docker-ceman-pages. docker/docker-ce-packaging#1203Networking
"com.docker.network.bridge.trusted_host_interfaces", accepting a colon-separated list of interface names. These interfaces have direct access to published ports on container IP addresses. moby/moby#49832"allow-direct-routing"to disable filtering of packets from outside the host addressed directly to containers. moby/moby#49832com.docker.network.enable_ipv4orcom.docker.network.enable_ipv6in inspect output if they have been overridden byEnableIPv4orEnableIPv6in the network create request. moby/moby#49866docker network inspect --verbosecould sometimes crash the daemon. moby/moby#49937API
1.50.DELETE /images/{name}now supports aplatformsquery parameter. It accepts an array of JSON-encoded OCI Platform objects, allowing for selecting a specific platforms to delete content for. moby/moby#49982GET /infonow includes aDiscoveredDevicesfield. This is an array ofDeviceInfoobjects, each providing details about a device discovered by a device driver. moby/moby#49980Go SDK
api/types/container: addContainerStateand constants for container state. moby/moby#49965api/types/container: changeSummary.Stateto aContainerState. moby/moby#49991api/types/container: defineHealthStatustype for health-status constants. moby/moby#49876api/types: deprecateBuildResult,ImageBuildOptions,ImageBuildOutput,ImageBuildResponse,BuilderVersion,BuilderV1, andBuilderBuildKiwhich were moved toapi/types/build. moby/moby#50025Deprecations
GET /images/{name}/jsonno longer returns the following fields:Config,Hostname,Domainname,AttachStdin,AttachStdout,AttachStderr,Tty,OpenStdin,StdinOnce,Image,NetworkDisabled(already omitted unless set),MacAddress(already omitted unless set),StopTimeout(already omitted unless set). These additional fields were included in the response due to an implementation detail but not part of the image's Configuration, were marked deprecated in API v1.46, and are now omitted. moby/moby#48457filepath.Rel(). moby/moby#49843BuildCachePruneOptionsin favor ofapi/types/builder.CachePruneOptions. moby/moby#50015BuildCachePruneReportin favor ofapi/types/builder.CachePruneReport. moby/moby#50015NodeListOptions,NodeRemoveOptions,ServiceCreateOptions,ServiceUpdateOptions,RegistryAuthFromSpec,RegistryAuthFromPreviousSpec,ServiceListOptions,ServiceInspectOptions, andSwarmUnlockKeyResponsewhich were moved toapi/types/swarm. moby/moby#50027SecretCreateResponse,SecretListOptions,ConfigCreateResponse,ConfigListOptionswhich were moved to api/types/swarm. moby/moby#50024IsErrNotFound. moby/moby#50012IsValidHealthStringin favor ofapi/types/container.ValidateHealthStatus. moby/moby#49893StateStatus,WaitCondition, and the relatedWaitConditionNotRunning,WaitConditionNextExit, andWaitConditionRemovedconsts in favor of their equivalents inapi/types/container. moby/moby#49874ListOpts.GetAllin favor ofListOpts.GetSlice. docker/cli#6032IsAutomatedformatting placeholder fromdocker search. docker/cli#6091docker.pkg.github.comregistry. moby/moby#50094DOCKER_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGEenvironment-variable. moby/moby#50036, moby/moby#42300BridgeNfIptablesandBridgeNfIp6tablesfields in theGET /inforesponse were deprecated in API v1.48, and are now omitted in API v1.50. moby/moby#49904errdefs.FromStatusCode. Use containerd'serrhttp.ToNativeinstead. moby/moby#50030v28.1.1Compare Source
28.1.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
dockerd-rootless-setuptool.shincorrectly reporting missingiptables. moby/moby#49833docker loadwith archives containing zero-size tar headers. moby/moby#49837Packaging updates
Networking
/etc/resolv.confwhen no upstream DNS servers were found. moby/moby#49827v28.1.0Compare Source
28.1.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
docker bakesub-command as alias fordocker buildx bake. docker/cli#5947--use-api-socketflag ondocker runanddocker createto enable access to Docker socket from inside a container and to share credentials from the host with the container. docker/cli#5858docker image inspectnow supports a--platformflag to inspect a specific platform of a multi-platform image. docker/cli#5934Bug fixes and enhancements
docker images --treenot including non-container images content size in the total image content size. docker/cli#6000docker loadnot preserving replaced images. moby/moby#49650docker loginhints when logging in to a custom registry. docker/cli#6015docker statsnot working properly on machines with high CPU core count. moby/moby#49734docker pull/pushto fail when interacting with a private repository. docker/cli#5964ip_tableskernel module. moby/moby#49727docker service scale. docker/cli#5968docker images --treenow hides both untagged and dangling images by default. docker/cli#5924docker system infowill provide an exit code if a connection cannot be established to the Docker daemon. docker/cli#5918image tagevent not being emitted when building with BuildKit. moby/moby#49678docker push/pullhandling of remote registry errors. moby/moby#49770Packaging updates
Networking
docker psanddocker inspect. moby/moby#49724Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.