Tonis Tiigi
47e852f061
image: pull/load/save attestation manifest and signatures with image
...
Updates docker pull to pull related attestation manifest and
any signatures for that manifest in cosign referrer objects.
These objects are transferred with the image when running
docker save and docker load and can be used to identify
the image in future updates.
Push is not updated atm as the currect push semantics
in containerd mode do not have correct immutability
guaranteed and don't work with image indexes.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2025-11-12 07:53:46 -08:00
Sebastiaan van Stijn
fb2ca99227
Merge pull request #51411 from tonistiigi/update-buildkit-v0.26.0-rc1
...
vendor: update buildkit v0.26.0-rc2
2025-11-12 01:05:05 +01:00
Tonis Tiigi
3874ca5984
vendor: update buildkit to v0.26.0-rc2
...
Currently requires replace rule for swarmkit etcd.
BuildKit itself doesn't use etcd but version gets bumped
via unused dependency.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 23:15:07 +01:00
Sebastiaan van Stijn
d558896fae
vendor: github.com/secure-systems-lab/go-securesystemslib v0.9.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 23:14:54 +01:00
Sebastiaan van Stijn
bb07fdcd14
vendor: github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.2
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 23:14:54 +01:00
Sebastiaan van Stijn
f1d0fe47c9
vendor: github.com/golang-jwt/jwt/v5 v5.3.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 23:14:54 +01:00
Sebastiaan van Stijn
79344e1c9a
vendor: github.com/gofrs/flock v0.13.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 23:14:53 +01:00
Sebastiaan van Stijn
d36617d2c1
vendor: github.com/containerd/nydus-snapshotter v0.15.4
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 23:14:53 +01:00
Sebastiaan van Stijn
1e48c34345
vendor: github.com/containerd/stargz-snapshotter/estargz v0.17.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 23:14:53 +01:00
Sebastiaan van Stijn
c169cc9629
vendor: github.com/google/certificate-transparency-go v1.3.2
...
full diff: https://github.com/google/certificate-transparency-go/compare/v1.1.4...v1.3.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 23:14:53 +01:00
Sebastiaan van Stijn
940c8d6b71
vendor: cloud.google.com/go v0.121.6
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 23:14:52 +01:00
Rob Murray
dbbfb4f90d
Merge pull request #51486 from locnnil/bump-docker-cli
...
Dockerfile: update cli to v29.0.0
2025-11-11 22:11:11 +00:00
Lincoln Wallace
621cee8dbe
Dockerfile: update cli to v29.0.0
...
Signed-off-by: Lincoln Wallace <lincoln.wallace@canonical.com >
2025-11-11 17:09:46 -03:00
Sebastiaan van Stijn
07453d15d0
Merge pull request #51482 from thaJeztah/vendor_containerd_2.2.0
...
vendor: github.com/containerd/containerd/v2 v2.2.0
2025-11-11 17:35:23 +01:00
Sebastiaan van Stijn
f740e0fefa
vendor: github.com/containerd/containerd/v2 v2.2.0
...
full diff: https://github.com/containerd/containerd/compare/v2.1.5...v2.2.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 16:13:34 +01:00
Sebastiaan van Stijn
1639703e56
vendor: github.com/containernetworking/plugins v1.8.0
...
full diff: https://github.com/containernetworking/plugins/compare/v1.7.1...v1.8.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 16:13:31 +01:00
Sebastiaan van Stijn
e4278c4c54
vendor: github.com/containerd/go-cni v1.1.13
...
full diff: https://ithub.com/containerd/go-cni/compare/v1.1.12...v1.1.13
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 16:12:25 +01:00
Sebastiaan van Stijn
7c798d012a
vendor: sigs.k8s.io/yaml v1.6.0
...
full diff: https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.6.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 16:12:25 +01:00
Sebastiaan van Stijn
d8f2aa4e3b
vendor: github.com/containerd/containerd/api v1.10.0
...
full diff: https://github.com/containerd/containerd/compare/api/v1.9.0...api/v1.10.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 16:12:24 +01:00
Sebastiaan van Stijn
1da018e2e7
Merge pull request #51461 from tonistiigi/update-swarmkit-etcd-3.6.5
...
vendor: github.com/moby/swarmkit/v2 v2.1.2-0.20251110192100-17b8d222e7dd
2025-11-11 16:11:22 +01:00
Sebastiaan van Stijn
81d9fdb838
Merge pull request #51477 from thaJeztah/discovery_enum
...
libnetwork/discoverapi: use DiscoveryType for enum
2025-11-11 15:01:25 +01:00
Sebastiaan van Stijn
b74e6fefba
Merge pull request #51469 from thaJeztah/daemon_rm_deadcode
...
remove some dead code
2025-11-11 15:01:02 +01:00
Tonis Tiigi
0a494a7303
vendor: github.com/moby/swarmkit/v2 v2.1.2-0.20251110192100-17b8d222e7dd
...
Brings in etcd update to v3.6.5
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 14:58:36 +01:00
Sebastiaan van Stijn
bba948f4ab
Merge pull request #51479 from thaJeztah/bump_hcsshim
...
vendor: github.com/Microsoft/hcsshim v0.14.0-rc.1
2025-11-11 14:43:58 +01:00
Sebastiaan van Stijn
74d4e5b382
Merge pull request #51478 from thaJeztah/bump_otel_grpc
...
vendor: go.opentelemetry.io/otel v1.38.0, google.golang.org/grpc v1.76.0, google.golang.org/protobuf v1.36.10
2025-11-11 14:43:34 +01:00
Sebastiaan van Stijn
ede54ceb49
Merge pull request #51271 from austinvazquez/update-containerd-binary-2.2.0
...
Dockerfile: update containerd binary to v2.2.0 (static binaries and CI only)
2025-11-11 14:22:12 +01:00
Sebastiaan van Stijn
a040664176
vendor: github.com/Microsoft/hcsshim v0.14.0-rc.1
...
full diff: https://github.com/Microsoft/hcsshim/compare/v0.13.0...v0.14.0-rc.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 13:22:25 +01:00
Sebastiaan van Stijn
e65995d896
vendor: google.golang.org/grpc v1.76.0, google.golang.org/protobuf v1.36.10
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 13:12:09 +01:00
Sebastiaan van Stijn
65bb1bb21f
vendor: go.opentelemetry.io/otel v1.38.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 13:12:08 +01:00
Sebastiaan van Stijn
4b2e073bdb
Merge pull request #51473 from thaJeztah/bump_compress
...
vendor: github.com/klauspost/compress v1.18.1
2025-11-11 13:11:50 +01:00
Sebastiaan van Stijn
6b8285f965
libnetwork/discoverapi: use DiscoveryType for enum
...
This type describes the options defined as consts below it, so make
those consts typed. While updating, I also removed the use of iota
to prevent accidentally changing their values (and if this API is
implemented elsewhere)
(but mostly because I'm not a fan of iota ':))
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 13:10:17 +01:00
Sebastiaan van Stijn
b66e501cad
Merge pull request #51474 from thaJeztah/bump_google_logging
...
vendor: cloud.google.com/go/logging v1.13.0
2025-11-11 12:55:58 +01:00
Sebastiaan van Stijn
9e86f904d7
Merge pull request #51472 from thaJeztah/bump_prometheus
...
vendor: golang.org/x/oauth2 v0.30.0, github.com/prometheus/client_golang v1.23.2
2025-11-11 12:31:20 +01:00
Sebastiaan van Stijn
409d0cf4fc
Merge pull request #51470 from thaJeztah/bump_cgroups
...
vendor: github.com/containerd/cgroups/v3 v3.1.0
2025-11-11 12:30:18 +01:00
Sebastiaan van Stijn
602da551ce
Merge pull request #51471 from thaJeztah/bump_tarsplit
...
vendor: github.com/vbatts/tar-split v0.12.2
2025-11-11 12:29:55 +01:00
Sebastiaan van Stijn
7eaf25ee59
vendor: cloud.google.com/go/logging v1.13.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 11:20:47 +01:00
Sebastiaan van Stijn
3f6f3b9ed2
vendor: cloud.google.com/go/compute/metadata v0.8.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 11:20:47 +01:00
Sebastiaan van Stijn
94eb87f4c0
vendor: github.com/klauspost/compress v1.18.1
...
full diff: https://github.com/klauspost/compress/compare/v1.18.0...v1.18.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 11:18:07 +01:00
Sebastiaan van Stijn
1621c4e7ad
vendor: github.com/prometheus/client_golang v1.23.2
...
full diff: https://github.com/prometheus/client_golang/compare/v1.22.0...v1.23.2
Also updating to go.yaml.in/yaml/v2 v2.4.3
- Retract v2 tags that cannot be installed
full diff: https://github.com/yaml/go-yaml/compare/v2.4.2...v2.4.3
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 10:33:47 +01:00
Sebastiaan van Stijn
efc3e93b1e
vendor: golang.org/x/oauth2 v0.30.0
...
full diff: https://github.com/golang/oauth2/compare/v0.29.0...v0.30.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 10:33:46 +01:00
Sebastiaan van Stijn
e773a0cf50
vendor: github.com/vbatts/tar-split v0.12.2
...
- archive/tar: set a limit on the size of GNU sparse file 1.0 regions
- fixes CVE-2025-58183
full diff: https://github.com/vbatts/tar-split/compare/v0.12.1...v0.12.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 10:07:19 +01:00
Sebastiaan van Stijn
ebcf9bb0c4
vendor: github.com/containerd/cgroups/v3 v3.1.0
...
Notable changes:
- support network metrics for cgroupv2
- cgroupv2: simplify parseCgroupFile
- introduce cpu burst stat
- add cgroupV2 CPUQuotaPeriodUSec support
- addresses: cgroup v2 does not set CPUQuotaPeriodUSec
- read cpu.stat regardless if controller enabled
- addresses: support cgroup v2 CPU stats when controller not enabled
- add cgroup2 hugetlb failcnt metric
- cgroup2: should add IN_CLOEXEC for inotify fd
- cgroup2: cpu shares: follow the behavior of runc v1.3.2
- cgroup2: fix event loss and resource issues in EventChan
full diff: https://github.com/containerd/cgroups/compare/v3.0.5...v3.1.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 09:53:02 +01:00
Sebastiaan van Stijn
7c29edf1b4
hack: remove cpexp package
...
This looks to have been accidentally committed in
1b1608f2cd
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 09:37:43 +01:00
Sebastiaan van Stijn
bb56c4d7e7
daemon: remove some deprecated and unused code
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-11 09:05:41 +01:00
Austin Vazquez
365e588d0f
Dockerfile: update containerd binary to v2.2.0 (static binaries and CI only)
...
Signed-off-by: Austin Vazquez <austin.vazquez@docker.com >
2025-11-10 21:06:12 -05:00
Austin Vazquez
d166f42ef2
Merge pull request #51467 from thaJeztah/client_test_context
...
client: use t.Context in tests
2025-11-10 20:00:12 -06:00
Sebastiaan van Stijn
c950796596
client: use t.Context in tests
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-11-10 23:23:23 +01:00
Paweł Gronowski
d105562bef
Merge pull request #51466 from vvoland/vendor-client
...
vendor: github.com/moby/moby/client v0.1.0
docker-v29.0.0
v2.0.0-beta.3
2025-11-10 22:31:38 +01:00
Paweł Gronowski
20b831c59a
vendor: github.com/moby/moby/client v0.1.0
...
full diff: https://github.com/moby/moby/client/compare/da8fb63a73c0...v0.1.0
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2025-11-10 22:05:24 +01:00
Paweł Gronowski
818ddd3b27
Merge pull request #51464 from vvoland/vendor-api
...
vendor: github.com/moby/moby/api v1.52.0
client/v0.1.0
2025-11-10 21:55:07 +01:00