dilim/moby
1
0 Fork 0
mirror of https://github.com/moby/moby.git synced 2026-11-06 05:17:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
59,367 Commits 19 Branches 618 Tags
a90fedf5806e34758ff9cc804ccda4de27387f46
Commit Graph
59367 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastiaan van Stijn a90fedf580 Merge pull request #54058 from vvoland/work-docs 
docs: Import daemon reference and deprecation history
 2026-11-04 22:59:19 +01:00
Sebastiaan van Stijn 54d812f66e Merge pull request #54125 from thaJeztah/fix_httpstatus 
httpstatus: handle missing errdefs HTTP status codes
 2026-11-04 22:54:49 +01:00
Sebastiaan van Stijn 43cc79083a Merge pull request #54124 from thaJeztah/fix_stream_errs 
streamformatter: handle wrapped errors and remove uses of deprecated "errors" field
 2026-11-04 20:23:16 +01:00
Paweł Gronowski b9ce036ac8 docs: Import daemon reference and Engine deprecation history 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-11-04 19:43:36 +01:00
Sebastiaan van Stijn 1f98bfc847 Merge pull request #54100 from renovate-bot/renovate/aws-sdk-go-v2-monorepo 
fix(deps): update aws-sdk-go-v2 monorepo
 2026-11-04 17:02:26 +01:00
Sebastiaan van Stijn 7ec2f1d2d3 httpstatus: simplify distribution error status handling 
Remove the redundant ErrorCoder type assertion and let the
recursive call handle unsupported error types.

Make all switch cases return explicitly.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-11-04 16:05:45 +01:00
Sebastiaan van Stijn 5df4160942 httpstatus: handle missing errdefs HTTP status codes 
Add missing mappings for ErrFailedPrecondition (412) and
ErrResourceExhausted (429), aligning with containerd's errhttp
implementation.

Add table-driven tests covering the errdefs mappings, gRPC and
distribution errors, and wrapped and joined errors.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-11-04 16:05:40 +01:00
Sebastiaan van Stijn b56dc7e027 Merge pull request #54117 from renovate-bot/renovate/github-codeql-action-4.x 
chore(deps): update github/codeql-action action to v4.39.2
 2026-11-04 13:40:55 +01:00
Sebastiaan van Stijn f17fe622c7 streamformatter: FormatError: handle wrapped JSON errors 
Use errors.AsType to preserve the original JSON error details
when the error is wrapped, instead of replacing them with a
generic error containing only the message.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-11-04 13:18:21 +01:00
Sebastiaan van Stijn 2097d62051 streamformatter: FormatError: remove uses of deprecated error field 
This error response was added in [moby@1421293], at which time the response
only contained a flat `error` field. This field was deprecated in favor of
an `errorDetails` struct in [moby@3043c26], but failed to update `FormatError`,
which continued to use the deprecated
`error` field.

Update `FormatError` to use the non-deprecated field, and update the error
message to be more descriptive. We're intentionally not preserving the actual
JSON marshal error, as it should be very unlikely to happen, and quoting the
error-message is not guaranteed to produce a JSON-compatible format.

[moby@1421293]: https://github.com/moby/moby/commit/14212930e40439d0cfc635d56e084736867f9e30
[moby@3043c26]: https://github.com/moby/moby/commit/3043c2641990d94298c6377b7ef14709263a4709

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-11-04 12:52:56 +01:00
Sebastiaan van Stijn 37645965de streamformatter: TestFormatError: rewrite to a table-test 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-11-04 12:22:50 +01:00
Paweł Gronowski 9c39c6583d Merge pull request #54119 from thaJeztah/tagged_release 
vendor: cloud.google.com/go/auth v0.24.1
 2026-11-04 12:15:10 +01:00
Sebastiaan van Stijn a2f4aa4040 Merge pull request #54121 from renovate-bot/renovate/docker-cli-29.x 
chore(deps): update dependency docker/cli to v29.9.3
 2026-11-04 08:47:19 +01:00
Mend Renovate 3ed5da60b7 chore(deps): update dependency docker/cli to v29.9.3 
Signed-off-by: Mend Renovate <bot@renovateapp.com>
 2026-11-04 02:48:35 +00:00
Sebastiaan van Stijn 7d66540389 vendor: cloud.google.com/go/auth v0.24.1 
use a tagged release

- fix(auth): return empty tls.Certificate on secureconnect helper failure

full diff: https://github.com/googleapis/google-cloud-go/compare/dbc26066f70a...auth/v0.24.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-11-03 22:48:29 +01:00
Paweł Gronowski a82d77b3c6 Merge pull request #54114 from vvoland/update-swarmkit 
vendor: github.com/moby/swarmkit/v2 v2.1.3
 2026-11-03 22:32:30 +01:00
Mend Renovate 96ec77b60b chore(deps): update github/codeql-action action to v4.39.2 
Signed-off-by: Mend Renovate <bot@renovateapp.com>
 2026-11-03 20:46:20 +00:00
Sebastiaan van Stijn 92c11378c5 Merge pull request #54111 from renovate-bot/renovate/docker-buildx-bin-0.x 
chore(deps): update docker/buildx-bin docker tag to v0.38.2
 2026-11-03 21:18:13 +01:00
Sebastiaan van Stijn f296630d5e Merge commit from fork 
libn/d/overlay: reapply rules on firewalld reload
 2026-11-03 21:14:30 +01:00
Paweł Gronowski 4788efb563 vendor: github.com/moby/swarmkit/v2 v2.1.3 
full diff: https://github.com/moby/swarmkit/compare/49925db4331f...v2.1.3

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-11-03 21:11:37 +01:00
Cory Snider f006a6abcf libn/d/overlay: reapply rules on firewalld reload 
With the iptables firewall backend, the overlay driver programs iptables
rules which mark VXLAN datagrams of encrypted networks for encryption,
drop cleartext VXLAN datagrams received for those networks, and strip
the encryption mark from datagrams marked by local processes. A
firewalld reload can flush these rules. The node then sends the
network's VXLAN datagrams in cleartext and accepts forged cleartext
datagrams for it until the last local endpoint of the network leaves and
another joins, or the daemon restarts.

On firewalld reload, restore all rules which were previously programmed
by the overlay driver.

Signed-off-by: Cory Snider <csnider@mirantis.com>
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-11-03 21:10:27 +01:00
Paweł Gronowski d242cde968 Merge pull request #54094 from thaJeztah/rm_network_methods 
daemon: remove unused Daemon.GetNetworkByName, Daemon. GetNetworksByIDPrefix
 2026-11-03 20:55:15 +01:00
Mend Renovate 67dcad5345 chore(deps): update docker/buildx-bin docker tag to v0.38.2 
Signed-off-by: Mend Renovate <bot@renovateapp.com>
 2026-11-03 18:02:48 +00:00
Sebastiaan van Stijn 8bffe38a06 Merge pull request #54109 from thaJeztah/bump_yamlv2 
vendor: go.yaml.in/yaml/v2 v2.4.5 (security)
 2026-11-03 18:58:17 +01:00
Sebastiaan van Stijn 16de272a08 vendor: go.yaml.in/yaml/v2 v2.4.5 
v2: Fix YAML unmarshaler validation bypass

Quoted null and tilde scalars bypass UnmarshalYAML, allowing invalid
values to escape application-defined validation. In applications
accepting configuration from less-trusted sources, this can lead to
denial of service or shared configuration corruption.

Require implicit scalar resolution before treating untagged scalars
as null. Add regression tests covering custom validation, both quote
styles, explicit tags, and actual null values.

full diff: https://github.com/yaml/go-yaml/compare/v2.4.4...v2.4.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-11-03 15:40:42 +01:00
Paweł Gronowski 0c86697d0b Merge pull request #54106 from crazy-max/buildkit-0.34.2 
vendor: update buildkit to v0.34.2
 2026-11-03 15:00:36 +01:00
Paweł Gronowski 9eb10da37f Merge pull request #54101 from thaJeztah/bump_yaml 
vendor: go.yaml.in/yaml/v3 v3.0.6
 2026-11-03 14:49:47 +01:00
Mend Renovate 8713fb081d fix(deps): update aws-sdk-go-v2 monorepo 
Signed-off-by: Mend Renovate <bot@renovateapp.com>
 2026-11-03 13:33:31 +00:00
CrazyMax b29d4222a3 vendor: update fsutil to e075fd9305eb 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-11-03 13:51:47 +01:00
CrazyMax 0f7dd638fd vendor: update buildkit to v0.34.2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-11-03 13:18:28 +01:00
Sebastiaan van Stijn b1bf12766e Merge pull request #54098 from renovate-bot/renovate/github.com-moby-swarmkit-v2-digest 
fix(deps): update github.com/moby/swarmkit/v2 digest to 49925db
 2026-11-03 09:23:47 +01:00
Sebastiaan van Stijn 8163ca3ec3 Merge pull request #54095 from renovate-bot/renovate/go.yaml.in-yaml-v3-3.x 
fix(deps): update module go.yaml.in/yaml/v3 to v3.0.6 (security)
 2026-11-03 09:23:19 +01:00
Sebastiaan van Stijn 40e5168df6 vendor: go.yaml.in/yaml/v3 v3.0.6 
resolve: hint-class literal merge-key string "<<" so it's quoted on encode

full diff: https://github.com/yaml/go-yaml/compare/v3.0.5...v3.0.6

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-11-03 09:18:30 +01:00
Sebastiaan van Stijn 02e0f82cb4 Merge pull request #54096 from renovate-bot/renovate/docker-compose-bin-5.x 
chore(deps): update docker/compose-bin docker tag to v5.7.0
 2026-11-03 08:43:58 +01:00
Mend Renovate 54372359af fix(deps): update github.com/moby/swarmkit/v2 digest to 49925db 
Signed-off-by: Mend Renovate <bot@renovateapp.com>
 2026-11-02 18:24:45 +00:00
Sebastiaan van Stijn aed2b781ab Merge pull request #54053 from vvoland/c8d-version 
daemon: Hide empty containerd Git revisions in docker version
 2026-11-02 19:14:30 +01:00
Sebastiaan van Stijn f7886407b2 Merge pull request #54093 from vvoland/update-profiles 
vendor: github.com/moby/profiles/apparmor & seccomp v0.3.0
 2026-11-02 19:12:58 +01:00
Mend Renovate a979a9c1f1 chore(deps): update docker/compose-bin docker tag to v5.7.0 
Signed-off-by: Mend Renovate <bot@renovateapp.com>
 2026-11-02 18:00:21 +00:00
Mend Renovate 80b95abecc fix(deps): update module go.yaml.in/yaml/v3 to v3.0.6 
Signed-off-by: Mend Renovate <bot@renovateapp.com>
 2026-11-02 18:00:16 +00:00
Sebastiaan van Stijn 8c4b229c2b Merge pull request #54084 from renovate-bot/renovate/cloud.google.com-go-logging-1.x 
fix(deps): update module cloud.google.com/go/logging to v1.21.1
 2026-11-02 18:34:03 +01:00
Paweł Gronowski 1f4db24e32 Merge pull request #53947 from vvoland/ext-containerstate 
Initial ContainerState extension point
 2026-11-02 17:52:22 +01:00
Sebastiaan van Stijn 5c9d95b673 Merge pull request #54038 from vvoland/work-autogenerated 
.gitattributes: Mark extension autogenerated files
 2026-11-02 17:35:37 +01:00
Sebastiaan van Stijn 2824ea7f65 daemon: remove unused Daemon.GetNetworksByIDPrefix 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-11-02 17:15:23 +01:00
Sebastiaan van Stijn 978b5d3551 daemon: remove unused Daemon.GetNetworkByName 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-11-02 17:15:20 +01:00
Paweł Gronowski 59c7b426b1 .gitattributes: Mark extension autogenerated files 
Mark files generated by protobuf and mobyextgen as autogenerated to make
diffing easier.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-11-02 17:14:36 +01:00
Sebastiaan van Stijn 0a2b0f0051 Merge pull request #54078 from vvoland/bk-gha 
.github/workflows/buildkit: Preserve Windows test reports on failure
 2026-11-02 17:10:49 +01:00
Paweł Gronowski 9d58f27ab0 vendor: github.com/moby/profiles/seccomp v0.3.0 
- Remove obsolete socket families from the default socket-domain
  allowlist, including DECnet and the families denied by the AppArmor
  update.
- Update the generated JSON profile to match the revised allowlist.
- Correct the architecture-map keys from `loong64` to `loongarch64` and
  from `mipsle` to `mipsel`.

full diff: https://github.com/moby/profiles/compare/seccomp/v0.2.4...seccomp/v0.3.0
release notes: https://github.com/moby/profiles/releases/tag/seccomp/v0.3.0

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-11-02 17:08:40 +01:00
Paweł Gronowski 07dd4e3c66 vendor: github.com/moby/profiles/apparmor v0.3.0 
- Escape embedded quotes in profile declarations.
- Escape AppArmor pattern metacharacters in signal and ptrace peer
  selectors so profile names are matched literally rather than
  interpreted as patterns.
- Preserve the special `unconfined` selector when the daemon is not
  confined.
- Explicitly deny obsolete socket families, including AX.25, IPX,
  AppleTalk, NET/ROM, ROSE, Econet, ATM SVC, IrDA, WANPIPE, ISDN, and
  CAIF.

full diff: https://github.com/moby/profiles/compare/apparmor/v0.2.2...apparmor/v0.3.0
release notes: https://github.com/moby/profiles/releases/tag/apparmor/v0.3.0

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-11-02 17:08:35 +01:00
Paweł Gronowski f8a648cbb7 Merge pull request #54008 from renovate-bot/renovate/aws-sdk-go-v2-monorepo 
fix(deps): update aws-sdk-go-v2 monorepo
 2026-11-02 16:36:29 +01:00
Sebastiaan van Stijn a508694abf Merge pull request #54089 from thaJeztah/rro_oncevalue 
daemon: kernelSupportsRecursivelyReadOnly: use sync.OnceValue
 2026-11-02 16:01:30 +01:00