)]}' { "log": [ { "commit": "ff3273f3e49bb37bcc3970e89ec8028f9635bb36", "tree": "c7465a82f036740aa370c54202b0529ff36a016d", "parents": [ "6fccf3535556da103fee19c1a51248b46451d3ef", "3cd22ff935d28d18524cd254b444ca0edee91e91" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Aug 27 16:50:25 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 27 16:50:25 2026" }, "message": "Merge pull request #7243 from thaJeztah/bump_go_metrics\n\nvendor: github.com/docker/go-metrics v0.1.0" }, { "commit": "6fccf3535556da103fee19c1a51248b46451d3ef", "tree": "5e605f63cbfba5e6115a5eb9cc2acb5ad9a36a30", "parents": [ "511f1369276d467519cf89106cc70bf458a8ea4d", "dc47c19e55ad2b7b517217e6e633b48626251e24" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Aug 27 16:50:15 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 27 16:50:15 2026" }, "message": "Merge pull request #7246 from thaJeztah/bump_userns\n\nvendor: github.com/moby/sys/userns v0.2.0" }, { "commit": "511f1369276d467519cf89106cc70bf458a8ea4d", "tree": "0b7432376f5d820256fd585c4da9c80b8ea55730", "parents": [ "45f589590bb7f0bc1577f89b727d73d28ecded97", "b17df8fea3e2f551fb41364ffd2b538e54357c28" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Aug 27 16:50:05 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 27 16:50:05 2026" }, "message": "Merge pull request #7247 from thaJeztah/bump_connections\n\nvendor: github.com/docker/go-connections v0.8.1" }, { "commit": "b17df8fea3e2f551fb41364ffd2b538e54357c28", "tree": "0b7432376f5d820256fd585c4da9c80b8ea55730", "parents": [ "45f589590bb7f0bc1577f89b727d73d28ecded97" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 15:04:54 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Aug 27 15:06:54 2026" }, "message": "vendor: github.com/docker/go-connections v0.8.1\n\nfixes support for BSD variants\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "dc47c19e55ad2b7b517217e6e633b48626251e24", "tree": "b3135729f072f8eb045e0f2d58a7fe8dd23e5c35", "parents": [ "45f589590bb7f0bc1577f89b727d73d28ecded97" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 15:02:24 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Aug 27 15:06:09 2026" }, "message": "vendor: github.com/moby/sys/userns v0.2.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "3cd22ff935d28d18524cd254b444ca0edee91e91", "tree": "e546d9bbd02258e3e5a57cf4f1becae11c1ae658", "parents": [ "45f589590bb7f0bc1577f89b727d73d28ecded97" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 14:45:12 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Aug 27 15:05:24 2026" }, "message": "vendor: github.com/docker/go-metrics v0.1.0\n\n- Add support for creating timers with custom histogram buckets.\n- Update `github.com/prometheus/client_golang` to v1.20.5.\n- Update the minimum supported Go version to Go 1.21.\n- Improve HTTP handler instrumentation, including minor performance improvements and cleanup.\n- Avoid mutating shared label maps when creating namespaces and metrics.\n- Encapsulate the Prometheus collector used by `HTTPMetric`.\n- Improve package and API documentation.\n- Update `golang.org/x/sys` and other dependencies.\n\nfull diff: https://github.com/docker/go-metrics/compare/v0.0.1...v0.1.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "45f589590bb7f0bc1577f89b727d73d28ecded97", "tree": "3e3e861b344f89ae970f6ac7b88cb66aa4bb507d", "parents": [ "6b8da057155f9d3d93b614cf49b8ae98e3acc871", "4f7a1841ba5d274196e1848cb2a03f9433aa30af" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Aug 27 12:10:47 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 27 12:10:47 2026" }, "message": "Merge pull request #7248 from thaJeztah/bump_runewidth\n\nvendor: github.com/mattn/go-runewidth v0.0.28" }, { "commit": "6b8da057155f9d3d93b614cf49b8ae98e3acc871", "tree": "6fd0f40a7944e0679dee89f83bad64163a7748ea", "parents": [ "65ad909cdeb991080d63ac8bb756921b47d26ee2", "bb631259691c84abb8c32bdf24316a5964438dae" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Aug 27 12:10:18 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 27 12:10:18 2026" }, "message": "Merge pull request #7245 from thaJeztah/bump_otels\n\nvendor: go.opentelemetry.io/otel v1.46.0, go.opentelemetry.io/contrib v0.71.0" }, { "commit": "65ad909cdeb991080d63ac8bb756921b47d26ee2", "tree": "242bc45407ae6acda55ecbcc98cc0e6c35b217f4", "parents": [ "52eb28a51211a971bdf27b41f6e3dc509cdd0b94", "ef48c25aed24dbd6bbd0dc0049f048e9a7205549" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Aug 27 12:10:06 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 27 12:10:06 2026" }, "message": "Merge pull request #7244 from thaJeztah/bump_logrus\n\nvendor: github.com/sirupsen/logrus v1.10.2" }, { "commit": "52eb28a51211a971bdf27b41f6e3dc509cdd0b94", "tree": "17a56b739d407641da6139dd4ba941384778746d", "parents": [ "3f096b4ffd8e30329221c583db6dfc9279673b96", "f2514827f4f966db0f3530bd52b650d4b4dfccd0" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Aug 27 12:09:02 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 27 12:09:02 2026" }, "message": "Merge pull request #7242 from thaJeztah/bump_platforms\n\nvendor: github.com/containerd/platforms v1.0.0-rc.5" }, { "commit": "bb631259691c84abb8c32bdf24316a5964438dae", "tree": "ba68ae33bfd3673b8b5edac92d4cca90ea1a0053", "parents": [ "2a24c3c77deee758235eb0c7db2e680ab0ee6885" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 14:56:50 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 23:56:22 2026" }, "message": "vendor: go.opentelemetry.io/otel v1.46.0, go.opentelemetry.io/contrib v0.71.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "2a24c3c77deee758235eb0c7db2e680ab0ee6885", "tree": "4202584dccab49ca64b9bc4db2dc305ab805ea09", "parents": [ "3f096b4ffd8e30329221c583db6dfc9279673b96" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 14:58:20 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 23:56:22 2026" }, "message": "vendor: google.golang.org/genproto/* da73d73af1c5\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "3f096b4ffd8e30329221c583db6dfc9279673b96", "tree": "77172f3ca18170058ed6ed64c14b2858356a488f", "parents": [ "ebc3d5aeab00a934b3da82190472fb0aef66f224", "f8d6265672c9f9b6e12de73a0c8a4bc25ff1c01a" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Aug 26 18:18:16 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 26 18:18:16 2026" }, "message": "Merge pull request #7241 from thaJeztah/bump_protobuf\n\nvendor: google.golang.org/protobuf v1.36.12" }, { "commit": "ebc3d5aeab00a934b3da82190472fb0aef66f224", "tree": "8df7f26365bf5cc1ff3aa5d9aafa4ee5b465efc2", "parents": [ "6261c55c569f55b4690f49fc1d4ad02a8ebaeb96", "244404379d9fbff175d7448ded6f728821a2b982" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Wed Aug 26 15:16:22 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 26 15:16:22 2026" }, "message": "Merge pull request #7055 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0\n\nbuild(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0" }, { "commit": "6261c55c569f55b4690f49fc1d4ad02a8ebaeb96", "tree": "b1b0615bf435462171260154610e91de81a7ca6e", "parents": [ "2c36f84eaf66e1dd319c4ecdb882f971043ee66d", "f755f48a12e918b09135a9be643f3bf1131c67b2" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Wed Aug 26 15:15:31 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 26 15:15:31 2026" }, "message": "Merge pull request #7187 from docker/dependabot/github_actions/crazy-max/dot-github/dot-github/workflows/zizmor.yml-1.11.0\n\nbuild(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.10.1 to 1.11.0" }, { "commit": "2c36f84eaf66e1dd319c4ecdb882f971043ee66d", "tree": "f2fbb3453fe01c3bf738675fd3459407c6515eb2", "parents": [ "744eee4bd49db60fbd166ba84c3aa645553d696a", "06275f9094c75b8450cdfb9059b4a6c8b5aef5be" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Wed Aug 26 15:15:00 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 26 15:15:00 2026" }, "message": "Merge pull request #7225 from docker/dependabot/github_actions/codeql-actions-79dea28a82\n\nbuild(deps): bump the codeql-actions group across 1 directory with 3 updates" }, { "commit": "4f7a1841ba5d274196e1848cb2a03f9433aa30af", "tree": "bcbed03df31bc30ba471b543bb1150262bdc21e9", "parents": [ "744eee4bd49db60fbd166ba84c3aa645553d696a" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 15:08:29 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 15:08:29 2026" }, "message": "vendor: github.com/mattn/go-runewidth v0.0.28\n\nfull diff: https://github.com/mattn/go-runewidth/compare/v0.0.24...v0.0.28\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "ef48c25aed24dbd6bbd0dc0049f048e9a7205549", "tree": "4c69580b0b6c9b6af10daac6330fe4200a267626", "parents": [ "744eee4bd49db60fbd166ba84c3aa645553d696a" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 14:48:02 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 14:48:02 2026" }, "message": "vendor: github.com/sirupsen/logrus v1.10.2\n\nremoves some transitive dependencies\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "f2514827f4f966db0f3530bd52b650d4b4dfccd0", "tree": "0cc890b41adb032413ed1d06465a7c8387355fb0", "parents": [ "744eee4bd49db60fbd166ba84c3aa645553d696a" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 14:41:30 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 14:41:30 2026" }, "message": "vendor: github.com/containerd/platforms v1.0.0-rc.5\n\nfull diff: https://github.com/containerd/platforms/compare/v1.0.0-rc.4...v1.0.0-rc.5\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "f8d6265672c9f9b6e12de73a0c8a4bc25ff1c01a", "tree": "5f8ac9816d58091f4829bea3c46bdf25d06ed3ff", "parents": [ "744eee4bd49db60fbd166ba84c3aa645553d696a" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 14:20:43 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 14:20:43 2026" }, "message": "vendor: google.golang.org/protobuf v1.36.12\n\nfull diff: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.11...v1.36.12\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "744eee4bd49db60fbd166ba84c3aa645553d696a", "tree": "e97c067b6f17af7d23d1f973593b6b755e3155e7", "parents": [ "bf6f62cc7cede71f83621b830d0c72e6fbaca9d6", "d6041d1abcf96d3f55076710857a8012c16a36cd" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Aug 26 11:06:45 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 26 11:06:45 2026" }, "message": "Merge pull request #7240 from thaJeztah/bump_grpc\n\nvendor: google.golang.org/grpc v1.83.2" }, { "commit": "d6041d1abcf96d3f55076710857a8012c16a36cd", "tree": "e97c067b6f17af7d23d1f973593b6b755e3155e7", "parents": [ "bf6f62cc7cede71f83621b830d0c72e6fbaca9d6" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 10:25:17 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 26 10:25:17 2026" }, "message": "vendor: google.golang.org/grpc v1.83.2\n\ncontains a fix for [GHSA-2v4p-qf9q-27wj] and other vulnerabilities\nfixed in v1.83.0, v1.83.1\n\nfull diff: https://github.com/grpc/grpc-go/compare/v1.82.1...v1.83.2\n\n[GHSA-2v4p-qf9q-27wj]: https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "06275f9094c75b8450cdfb9059b4a6c8b5aef5be", "tree": "239953352b486cdbfa9df4566d7d01a2099bb777", "parents": [ "bf6f62cc7cede71f83621b830d0c72e6fbaca9d6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Aug 26 08:46:02 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 26 08:46:02 2026" }, "message": "build(deps): bump the codeql-actions group across 1 directory with 3 updates\n\nBumps the codeql-actions group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.37.6 to 4.37.7\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd)\n\nUpdates `github/codeql-action/autobuild` from 4.37.6 to 4.37.7\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd)\n\nUpdates `github/codeql-action/analyze` from 4.37.6 to 4.37.7\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.37.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/autobuild\n dependency-version: 4.37.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/init\n dependency-version: 4.37.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "bf6f62cc7cede71f83621b830d0c72e6fbaca9d6", "tree": "5878c7d04440929b55f71cd433b1bfae7692eeec", "parents": [ "376f03c8589f6876c027a951601bfcdceda16557", "eed270f65611c2cf528f8c16f73bb9e8364b6483" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Tue Aug 25 19:55:32 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 25 19:55:32 2026" }, "message": "Merge pull request #7195 from thaJeztah/modern_jsonschema\n\ncli/compose/schema: migrate to github.com/santhosh-tekuri/jsonschema/v6" }, { "commit": "376f03c8589f6876c027a951601bfcdceda16557", "tree": "44770f945664ba0397b49127efdb7b5f36af8827", "parents": [ "de4a0086146805b26b733f95646ada35c185bb35", "1612f4c7672ce61cc61e2f3b63546390bae85351" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Tue Aug 25 19:50:33 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 25 19:50:33 2026" }, "message": "Merge pull request #7192 from thaJeztah/bump_x_deps\n\nvendor: update golang.org/x/* dependencies" }, { "commit": "de4a0086146805b26b733f95646ada35c185bb35", "tree": "3d3996dd2e555a8ac16aafa18bfea2c400a0c211", "parents": [ "d072fe407fdf90b470920297fbabba2b976670d0", "f3f7da9f3d067f1588c62b2e7038a40266234531" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Tue Aug 25 12:54:22 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 25 12:54:22 2026" }, "message": "Merge pull request #7233 from docker/dependabot/github_actions/docker-actions-1a2b39a443\n\nbuild(deps): bump the docker-actions group across 1 directory with 2 updates" }, { "commit": "f3f7da9f3d067f1588c62b2e7038a40266234531", "tree": "3d3996dd2e555a8ac16aafa18bfea2c400a0c211", "parents": [ "d072fe407fdf90b470920297fbabba2b976670d0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Aug 25 08:43:06 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 25 08:43:06 2026" }, "message": "build(deps): bump the docker-actions group across 1 directory with 2 updates\n\nBumps the docker-actions group with 2 updates in the / directory: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [docker/docker-agent-action/.github/workflows/review-pr.yml](https://github.com/docker/docker-agent-action).\n\n\nUpdates `docker/setup-buildx-action` from 4.2.0 to 4.3.0\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...37fe631027851001ddb9b187196cc803df7f5f0e)\n\nUpdates `docker/docker-agent-action/.github/workflows/review-pr.yml` from 2.0.3 to 2.0.4\n- [Release notes](https://github.com/docker/docker-agent-action/releases)\n- [Commits](https://github.com/docker/docker-agent-action/compare/baf90543d81f5de59751dfd10e6cf45e21a5a982...b08367e7e9a471822464be2bb9fdaa1c0fb6061b)\n\n---\nupdated-dependencies:\n- dependency-name: docker/docker-agent-action/.github/workflows/review-pr.yml\n dependency-version: 2.0.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: docker-actions\n- dependency-name: docker/setup-buildx-action\n dependency-version: 4.3.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: docker-actions\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "eed270f65611c2cf528f8c16f73bb9e8364b6483", "tree": "42f8ffea953504f2b08236b25f716de5345b456a", "parents": [ "d072fe407fdf90b470920297fbabba2b976670d0" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Aug 15 13:08:36 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Aug 24 10:53:45 2026" }, "message": "cli/compose/schema: migrate to github.com/santhosh-tekuri/jsonschema/v6\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "d072fe407fdf90b470920297fbabba2b976670d0", "tree": "1dc4ce11e067d0d9328f4bc474c3bc9afc4a046e", "parents": [ "28f756087eea5fa301f3fbf12b01ae62f91521c2", "3fe73079aa36e511a83d653aa4db6345db424151" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Mon Aug 24 10:16:16 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 24 10:16:16 2026" }, "message": "Merge pull request #7234 from vvoland/update-dco\n\ndocs: Update DCO identity guidance" }, { "commit": "3fe73079aa36e511a83d653aa4db6345db424151", "tree": "1dc4ce11e067d0d9328f4bc474c3bc9afc4a046e", "parents": [ "28f756087eea5fa301f3fbf12b01ae62f91521c2" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Aug 24 09:04:50 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Aug 24 09:41:24 2026" }, "message": "docs: Clarify DCO identity guidance\n\nThe DCO policy used here appears to have been derived from the Linux\nkernel\u0027s guidance. In 2023, that guidance changed to relax the \"real\nname\" requirement to a \"known identity\".\n\nThe DCO sign-off identifies the person certifying that they have the\nright to submit a contribution. The previous wording required a \"real\nname\" and rejected pseudonyms, which could discourage contributors\nwhose preferred or community name is the identity by which they can be\nknown.\n\nThe requirement is not anonymity: the identity in the sign-off must be\nknown enough for the project to follow up about the contribution if a\nquestion arises. It does not require a legal name or a government-issued\nidentity. Use the clarified wording from the Linux kernel so known\npseudonyms and preferred names remain acceptable while anonymous\ncontributions remain excluded.\n\nThis also reflects concerns raised in the CNCF community about whether\n\"real name\" means a legal name, a government-issued identity, or a\npublic identity that is sufficient to identify and contact a\ncontributor. The discussion emphasized that attribution and future\naccountability do not require publishing a legal identity, and that\nstrict public-name rules can exclude people who cannot safely contribute\nunder that name.\n\nSource: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id\u003dd4563201f33a022fc035\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "28f756087eea5fa301f3fbf12b01ae62f91521c2", "tree": "00723e106f9ebf94867d3509128c02f6a338c71a", "parents": [ "55e4a7eef5d0232f84d6ad4b49dad727125c4891", "387b8e2af80036f8b8915217d0cae601c15bd6b8" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Aug 20 10:38:49 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 20 10:38:49 2026" }, "message": "Merge pull request #7224 from vvoland/update-go\n\nupdate to go1.26.7" }, { "commit": "387b8e2af80036f8b8915217d0cae601c15bd6b8", "tree": "00723e106f9ebf94867d3509128c02f6a338c71a", "parents": [ "55e4a7eef5d0232f84d6ad4b49dad727125c4891" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Aug 19 18:23:09 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Aug 19 18:23:24 2026" }, "message": "update to go1.26.7\n\nThis release includes a fix to address a breakage affecting unencrypted\nHTTP/2 (h2c) connections caused by a security patch included in last\npatch release.\n\nSee go.dev/issue/80876 for details.\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "55e4a7eef5d0232f84d6ad4b49dad727125c4891", "tree": "ddb57ed7d4d71470177b51fb60a19c5e0c235da5", "parents": [ "8659aa5d4c94008efb258f8a0b9187245ad7ca8b", "58d9cdd2d94572b3705cbdd13e31ccd9276f35cb" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Aug 19 10:34:56 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 19 10:34:56 2026" }, "message": "Merge pull request #7222 from thaJeztah/bump_logrus\n\nvendor: github.com/sirupsen/logrus v1.10.1" }, { "commit": "58d9cdd2d94572b3705cbdd13e31ccd9276f35cb", "tree": "ddb57ed7d4d71470177b51fb60a19c5e0c235da5", "parents": [ "8659aa5d4c94008efb258f8a0b9187245ad7ca8b" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 19 09:34:53 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 19 09:34:53 2026" }, "message": "vendor: github.com/sirupsen/logrus v1.10.1\n\nNotable changes:\n\n- Add bidirectional `log/slog` integration with a Logrus hook and `slog.Handler`.\n- Add minimal, composable logging interfaces for individual log levels.\n- Fix reentrant logging deadlocks and improve concurrency safety around formatters, hooks, and entries.\n- Fix generic `Log`, `Logf`, `Logln`, and `LogFn` methods unexpectedly panicking at `PanicLevel`.\n- Allow `Entry.Caller` to be set explicitly and preserved across derived entries.\n- Improve `TextFormatter` performance and reduce allocations significantly.\n- Improve common Logger and Entry hot paths and caller-reporting performance.\n- Update `TextFormatter` handling for `[]byte`, debug/trace colors, and Windows ANSI terminals.\n- Raise the minimum supported Go version to Go 1.23.\n- Deprecate `Entry.HasCaller` and `MutexWrap`.\n\nrelease-notes: https://github.com/sirupsen/logrus/releases/tag/v1.10.0\nrelease-notes: https://github.com/sirupsen/logrus/releases/tag/v1.10.1\nfull diff: https://github.com/sirupsen/logrus/compare/v1.9.4...v1.10.1\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "1612f4c7672ce61cc61e2f3b63546390bae85351", "tree": "d7db4bab6f673ab361010c24f71301d2ddfc07fb", "parents": [ "cf53a284da37f3239acbd6c6bbd70f68e6246d7e" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Aug 15 12:44:44 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Aug 15 12:44:44 2026" }, "message": "vendor: golang.org/x/mod v0.40.0\n\nfull diff: https://github.com/golang/mod/compare/v0.39.0...v0.40.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "cf53a284da37f3239acbd6c6bbd70f68e6246d7e", "tree": "cb0ec94dd0493a37cb3cbdbf1512050c7e1cd802", "parents": [ "0da5f456514882bd9031767b4c844144fc46aec8" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Aug 15 12:43:34 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Aug 15 12:43:34 2026" }, "message": "vendor: golang.org/x/net v0.58.0\n\nfull diff: https://github.com/golang/net/compare/v0.57.0...v0.58.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "0da5f456514882bd9031767b4c844144fc46aec8", "tree": "e9e9878518da5a57cd7863512efcbb65cf87bcfb", "parents": [ "ce152029680dcf82611c64feb3928f0b96fab812" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Aug 15 12:42:34 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Aug 15 12:42:34 2026" }, "message": "vendor: golang.org/x/text v0.41.0\n\nfull diff: https://github.com/golang/text/compare/v0.40.0...v0.41.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "ce152029680dcf82611c64feb3928f0b96fab812", "tree": "ad8f50490d16c32cc79793c03215eb30a8b00a9c", "parents": [ "8659aa5d4c94008efb258f8a0b9187245ad7ca8b" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Aug 15 12:41:51 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Aug 15 12:41:51 2026" }, "message": "vendor: golang.org/x/mod v0.39.0\n\nfull diff: https://github.com/golang/mod/compare/v0.38.0...v0.39.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "8659aa5d4c94008efb258f8a0b9187245ad7ca8b", "tree": "f29f06caf6f25fb554fafab6232cb939f79cc3be", "parents": [ "8d08c75e8164a40e4f158374e6fa94c86a1937b3", "a7c0741fa7a3e6cbccedcbf85e689561cdfbb5f0" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Fri Aug 14 16:42:04 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Aug 14 16:42:04 2026" }, "message": "Merge pull request #7185 from thaJeztah/duplicate_normalize\n\ncli/command/manifest: remove redundant normalization" }, { "commit": "8d08c75e8164a40e4f158374e6fa94c86a1937b3", "tree": "cbd894bc744faa646cca92e8f826d035c8f1215b", "parents": [ "eb68ed19d2f0b11f308eefc930bfe5c077c57a7e", "24af004cbf2aa1dd4e3161917e6f9cfb3e57bf45" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Fri Aug 14 12:52:56 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Aug 14 12:52:56 2026" }, "message": "Merge pull request #7191 from thaJeztah/bump_go\n\nupdate to go1.26.6" }, { "commit": "24af004cbf2aa1dd4e3161917e6f9cfb3e57bf45", "tree": "cbd894bc744faa646cca92e8f826d035c8f1215b", "parents": [ "eb68ed19d2f0b11f308eefc930bfe5c077c57a7e" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Aug 14 12:02:40 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Aug 14 12:02:40 2026" }, "message": "update to go1.26.6\n\nThis release includes 10 security fixes following the security policy:\n\n- x/mod/sumdb/tlog: fix transparency log tile verification bypass\n\n A malicious GOPROXY was previously capable of forging\n up to two sumdb tiles that allow for a requested module\n to bypass the GOSUMDB check and persist attacker-controlled\n module content to a local Go module cache.\n\n This attack allows for a malicious GOPROXY to serve\n malicious module content that cannot be detected\n by evaluating the transparency log.\n\n All tiles are now correctly verified against their parents.\n\n In order to determine if you have been affected:\n\n rm -r go.sum go.work.sum vendor/ \u0026\u0026 go mod tidy\n\n Thanks to Filippo Valsorda (Geomys) for reporting this issue.\n\n This is CVE-2026-56865 and Go issue https://go.dev/issue/80744.\n\n- x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup\n\n A malicious GOSUMDB was capable of serving arbitrary\n module content not contained within the transparency\n log.\n\n This attack allows for a coordinating GOPROXY and\n GOSUMDB to serve a client malicious module content\n that cannot be detected by evaluating the transparency\n log.\n\n In order to determine if you have been affected:\n\n rm -r go.sum go.work.sum vendor/ \u0026\u0026 go mod tidy\n\n Thanks to mundur for reporting this issue.\n\n This is CVE-2026-56864 and Go issue https://go.dev/issue/80745.\n\n- encoding/xml: add recursion depth guard during decode\n\n Previously, DecodeElement would reset the depth counter\n causing it to never fire; this could lead to stack\n exhaustion.\n\n This is CVE-2026-56859 and Go issue https://go.dev/issue/80481.\n\n net/http: apply ReadHeaderTimeout when doing unencrypted HTTP/2 check\n\n When a server is configured to support unencrypted HTTP/2, it reads a\n few bytes from each new connection to see if they contain the HTTP/2\n client preface. Previously, this was being done with no timeout applied.\n ReadHeaderTimeout is now applied for this.\n\n This is CVE-2026-56853 and Go issue https://go.dev/issue/80205.\n\n- net/url: avoid quadratic complexity in resolvePath\n\n Previously, resolving relative paths containing parent directory (..) segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead.\n\n Now, path resolution operates on a byte buffer using index-based backtracking for .. segments, eliminating the quadratic time complexity and significantly reducing memory allocations.\n\n This is CVE-2026-56860 and Go issue https://go.dev/issue/80494.\n\n- golang.org/x/net/dns/dnsmessage: panic when parsing invalid SVCB record\n\n Parsing an invalid SVCB or HTTPS RR can panic when\n the size of a parameter value overflows the message buffer.\n\n Thanks to Mundur (https://github.com/M0nd0R) for reporting this issue.\n\n This is CVE-2026-46600 and Go issue https://go.dev/issue/79795.\n\n- crypto/tls: limit handshake messages we are willing to accept post-handshake\n\n Previously, we always counted handshake messages, such as KeyUpdate, as\n state-advancing, regardless of whether a handshake has been completed or\n not. As a result, a malicious client can keep sending KeyUpdate messages\n to force the server to keep performing key derivation operations\n indefinitely.\n\n Thanks to Qi Deng of Aurascape.ai for reporting this issue.\n\n This is CVE-2026-56862 and Go issue https://go.dev/issue/80528.\n\n- html/template: fix Javascript regexp context tracking\n\n Previously, pathological inputs could close an\n unescaped / early, allowing for attack-controlled\n data to inject arbitrary content, potentially\n leading to XSS.\n\n Thanks to Ali Sherif for reporting this issue.\n\n This is CVE-2026-56858 and Go issue https://go.dev/issue/80435.\n\n- x/net/idna: failure to reject ASCII-only Punycode-encoded labels\n\n The ToASCII and ToUnicode functions incorrectly accepted Punycode-encoded labels\n that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\")\n incorrectly returned the name \"example.com\" rather than an error.\n\n The idna package implements the processing algorithm from UTS 46.\n Older versions of UTS 46 included a specification bug which permitted\n multiple ASCII labels to decode to the same Unicode label.\n UTS 46 revision 33 fixed the specification bug.\n The idna package now implements the updated specification.\n\n This behavior can lead to privilege escalation in programs using the idna package.\n For example, a program which performs privilege checks on the ASCII hostname\n may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently\n converts the ASCII hostname to Unicode, it will inadvertently permits access\n to the Unicode name \"example.com\".\n\n Thanks to KC1zs4 (https://github.com/KC1zs4) for reporting this issue.\n\n This is CVE-2026-39821 and Go issue https://go.dev/issue/78760.\n\n- encoding/asn1: enforce maximum recursion depth\n\n Enforce a recursion limit in Unmarshal to prevent stack exhaustion\n when parsing deeply-nested, recursive structures.\n\n Thanks to Marwan Atia (marwans...@gmail.com) for reporting this issue.\n\n This is CVE-2026-33818 and Go issue https://go.dev/issue/80405.\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "eb68ed19d2f0b11f308eefc930bfe5c077c57a7e", "tree": "2935362a2429f01d18c53263bb86539b94a53ffc", "parents": [ "12892075d2e1689b33f38db43706a270134d74dc", "8a375034e261f119a71152de840bb8f3e7c07c5d" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Aug 13 20:42:40 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 13 20:42:40 2026" }, "message": "Merge pull request #7157 from docker/dependabot/github_actions/codeql-actions-8417568871\n\nbuild(deps): bump the codeql-actions group across 1 directory with 3 updates" }, { "commit": "8a375034e261f119a71152de840bb8f3e7c07c5d", "tree": "2935362a2429f01d18c53263bb86539b94a53ffc", "parents": [ "12892075d2e1689b33f38db43706a270134d74dc" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Aug 13 08:46:20 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 13 08:46:20 2026" }, "message": "build(deps): bump the codeql-actions group across 1 directory with 3 updates\n\nBumps the codeql-actions group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.37.3 to 4.37.6\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...5595ccaf912efad79be6eef63a5619ff05969be3)\n\nUpdates `github/codeql-action/autobuild` from 4.37.3 to 4.37.6\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...5595ccaf912efad79be6eef63a5619ff05969be3)\n\nUpdates `github/codeql-action/analyze` from 4.37.3 to 4.37.6\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...5595ccaf912efad79be6eef63a5619ff05969be3)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.37.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/autobuild\n dependency-version: 4.37.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/init\n dependency-version: 4.37.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "f755f48a12e918b09135a9be643f3bf1131c67b2", "tree": "d2ef2a3e63ec58d219ac6f4d3cac845840c32f91", "parents": [ "12892075d2e1689b33f38db43706a270134d74dc" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Aug 13 08:43:11 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 13 08:43:11 2026" }, "message": "build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml\n\nBumps [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github) from 1.10.1 to 1.11.0.\n- [Release notes](https://github.com/crazy-max/.github/releases)\n- [Commits](https://github.com/crazy-max/.github/compare/46267a6e61cd56aac2fc79943df180152f4c89d6...f91220cba053bd54299ba645a599ee8ed436f222)\n\n---\nupdated-dependencies:\n- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml\n dependency-version: 1.11.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "a7c0741fa7a3e6cbccedcbf85e689561cdfbb5f0", "tree": "a7d1dca468c3684ae477420854eadbe6ca601932", "parents": [ "12892075d2e1689b33f38db43706a270134d74dc" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 12 14:38:26 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Aug 12 14:38:26 2026" }, "message": "cli/command/manifest: remove redundant normalization\n\ncommit 55fcffe743c2ca097796d19492ee4f4c768c3940 added normalization\nin config/configfile, so it\u0027s no longer needed to normalize here as\nwell.\n\nupdates 55fcffe743c2ca097796d19492ee4f4c768c3940\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "12892075d2e1689b33f38db43706a270134d74dc", "tree": "b7805d6b4fc7abea9f76fd19828d8b8dc929725e", "parents": [ "4f84911bfe8811e9b028e4b1fee8e7510be79387", "e1f9b284df441f90710e360b84928080fb5f1fe5" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Wed Aug 12 13:37:56 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 12 13:37:56 2026" }, "message": "Merge pull request #7180 from docker/dependabot/github_actions/docker-actions-ebe691cc85\n\nbuild(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.15.0 to 1.16.0 in the docker-actions group" }, { "commit": "e1f9b284df441f90710e360b84928080fb5f1fe5", "tree": "b7805d6b4fc7abea9f76fd19828d8b8dc929725e", "parents": [ "4f84911bfe8811e9b028e4b1fee8e7510be79387" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Aug 12 08:43:00 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 12 08:43:00 2026" }, "message": "build(deps): bump docker/github-builder/.github/workflows/bake.yml\n\nBumps the docker-actions group with 1 update: [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder).\n\n\nUpdates `docker/github-builder/.github/workflows/bake.yml` from 1.15.0 to 1.16.0\n- [Release notes](https://github.com/docker/github-builder/releases)\n- [Commits](https://github.com/docker/github-builder/compare/27ade872c1e2296e62ef15ab3b10d37665e57cf7...a492c6d04fd3315f67230809b44d60cc0acd50b3)\n\n---\nupdated-dependencies:\n- dependency-name: docker/github-builder/.github/workflows/bake.yml\n dependency-version: 1.16.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: docker-actions\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "4f84911bfe8811e9b028e4b1fee8e7510be79387", "tree": "3017614391caba9bccd7a041dd0abfe56cc1c1ba", "parents": [ "228f29e810219d960fa208186b205fdffc090d64", "2dd7b7e15b1073ed28d93387edcaa78ee3e4928e" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Aug 06 13:50:28 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 06 13:50:28 2026" }, "message": "Merge pull request #7144 from hirehamir/fix/ps-port-sort\n\ncli/command/formatter: sort published ports numerically by IP" }, { "commit": "228f29e810219d960fa208186b205fdffc090d64", "tree": "0d745567a88bef083cfb93f2f563172855967d2f", "parents": [ "a7dcaa6fdb6ed04aacbfdc76357fdae01605609e", "d8c354340742f607cf5e73a4a1d0989bb75ed3b0" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Aug 06 13:47:41 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 06 13:47:41 2026" }, "message": "Merge pull request #7159 from thaJeztah/version_29.8\n\nVERSION: 29.8.0" }, { "commit": "d8c354340742f607cf5e73a4a1d0989bb75ed3b0", "tree": "0d745567a88bef083cfb93f2f563172855967d2f", "parents": [ "a7dcaa6fdb6ed04aacbfdc76357fdae01605609e" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Aug 06 13:34:41 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Aug 06 13:34:41 2026" }, "message": "VERSION: 29.8.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "2dd7b7e15b1073ed28d93387edcaa78ee3e4928e", "tree": "5c8927d6934b6cc51a98eb213761407db773da98", "parents": [ "a7dcaa6fdb6ed04aacbfdc76357fdae01605609e" ], "author": { "name": "Hamir", "email": "hirehamir@gmail.com", "time": "Wed Aug 05 18:37:41 2026" }, "committer": { "name": "Hamir", "email": "hirehamir@gmail.com", "time": "Wed Aug 05 18:38:20 2026" }, "message": "cli/command/formatter: sort published ports numerically by IP\n\n`comparePorts` compared host IPs with `i.IP.String() \u003c j.IP.String()`, which\nsorts them lexicographically, so \"10.0.0.2\" ordered before \"9.0.0.1\" in\n`docker ps` output.\n\nThis also avoids formatting both addresses as strings on every comparison.\n\nports before after\n64 1540 allocs/op 394 allocs/op\n256 5364 allocs/op 1548 allocs/op\n\nThat\u0027s a ~74% (3.9x) reduction in allocations.\n\nSigned-off-by: Hamir \u003chirehamir@gmail.com\u003e\n" }, { "commit": "a7dcaa6fdb6ed04aacbfdc76357fdae01605609e", "tree": "b846a5ed67b26f9796e9dabcdcc21ceb3995b5e7", "parents": [ "38887ec4ed491996ce3a069aa4c859fec1e5aaa0", "400b45f68221b78016470fcce4d771174b79749f" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Aug 05 17:34:15 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 05 17:34:15 2026" }, "message": "Merge pull request #7151 from vvoland/update-archive\n\nvendor: github.com/moby/go-archive v0.3.3" }, { "commit": "400b45f68221b78016470fcce4d771174b79749f", "tree": "3e16b0ab0674bd764ac0a55f15ec4b283b1ddd92", "parents": [ "904aef7f69c9996f1fbfdf2a4ee845caae84acea" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Aug 05 17:11:05 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Aug 05 17:11:05 2026" }, "message": "vendor: github.com/moby/go-archive v0.3.3\n\nfull diff: https://github.com/moby/go-archive/compare/v0.3.2...v0.3.3\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "38887ec4ed491996ce3a069aa4c859fec1e5aaa0", "tree": "7375613abca9d34bca388ff0e01694d997ca47e5", "parents": [ "904aef7f69c9996f1fbfdf2a4ee845caae84acea", "8717af7168e05632c834ba32826be52d21d6064b" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Wed Aug 05 17:10:29 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 05 17:10:29 2026" }, "message": "Merge pull request #7145 from winklemad/fix-service-duplicate-removal-panic\n\ncli/command/service: fix panic when removing duplicate values" }, { "commit": "904aef7f69c9996f1fbfdf2a4ee845caae84acea", "tree": "7bd3830f437b44557bd379c46f6800c73be40f6d", "parents": [ "abfd89157dc60e356f2ed51e5e0c88d15c47b64c", "f08e60eb0931dabfe56334af7acd6cd23201b7e6" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Tue Aug 04 11:11:45 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 04 11:11:45 2026" }, "message": "Merge pull request #7147 from docker/dependabot/github_actions/docker-actions-269857e486\n\nbuild(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml from 2.0.2 to 2.0.3 in the docker-actions group across 1 directory" }, { "commit": "f08e60eb0931dabfe56334af7acd6cd23201b7e6", "tree": "7bd3830f437b44557bd379c46f6800c73be40f6d", "parents": [ "abfd89157dc60e356f2ed51e5e0c88d15c47b64c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Aug 04 08:42:59 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 04 08:42:59 2026" }, "message": "build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml\n\nBumps the docker-actions group with 1 update in the / directory: [docker/docker-agent-action/.github/workflows/review-pr.yml](https://github.com/docker/docker-agent-action).\n\n\nUpdates `docker/docker-agent-action/.github/workflows/review-pr.yml` from 2.0.2 to 2.0.3\n- [Release notes](https://github.com/docker/docker-agent-action/releases)\n- [Commits](https://github.com/docker/docker-agent-action/compare/774b6e0e60d6c648b0f2dc43bd5221377a0a7420...baf90543d81f5de59751dfd10e6cf45e21a5a982)\n\n---\nupdated-dependencies:\n- dependency-name: docker/docker-agent-action/.github/workflows/review-pr.yml\n dependency-version: 2.0.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: docker-actions\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "abfd89157dc60e356f2ed51e5e0c88d15c47b64c", "tree": "8eeed2cea673cf287c6eb590db5aec302c81fa41", "parents": [ "e9452d6e785f6e365712b9d71bd7517591773c86", "519eb45d036c9644ee78b5553a653e009da45fd4" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Aug 03 16:24:10 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 03 16:24:10 2026" }, "message": "Merge pull request #7149 from vvoland/update-docker\n\nVERSION: 29.7.2" }, { "commit": "519eb45d036c9644ee78b5553a653e009da45fd4", "tree": "8eeed2cea673cf287c6eb590db5aec302c81fa41", "parents": [ "e9452d6e785f6e365712b9d71bd7517591773c86" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Aug 03 16:18:56 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Aug 03 16:18:56 2026" }, "message": "VERSION: 29.7.2\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "8717af7168e05632c834ba32826be52d21d6064b", "tree": "6e2d6a4e45a425807b4e98d15ff84bc2cf45a52d", "parents": [ "e9452d6e785f6e365712b9d71bd7517591773c86" ], "author": { "name": "Madan Kumar", "email": "winklemad@outlook.com", "time": "Sun Aug 02 01:43:16 2026" }, "committer": { "name": "Madan Kumar", "email": "winklemad@outlook.com", "time": "Sun Aug 02 01:43:16 2026" }, "message": "cli/command/service: fix panic when removing duplicate values\n\nBoth makeEnv and updateHosts removed elements from a slice while ranging\nover that same slice. The range expression is evaluated once, so after a\nremoval the loop keeps using the original length: it reads stale elements\nthat shifted down, skips a live element, and can slice past the end of the\nshrunken slice, which panics.\n\nIn makeEnv, the \"no update required\" continue also applied to the inner\nloop instead of skipping the re-append, so an env-var passed twice with\nthe same value was stored twice. A third occurrence with a different value\nthen tried to remove both entries and panicked:\n\n docker service create --env A\u003d1 --env A\u003d1 --env A\u003d2 --name repro nginx\n panic: runtime error: slice bounds out of range [2:1]\n\nThe same happens with an env-file that lists a variable twice, and the\npanic occurs before any API call, so no daemon is needed to hit it.\n\nupdateHosts has the same problem when a hostname is listed more than once\nin a single entry: --host-rm either leaves a copy behind or panics with\n\"slice bounds out of range\". That needs a spec written through the API or\nswarmkit directly, as the CLI does not produce such entries itself, so it\nis less likely to be hit in practice.\n\nUse slices.DeleteFunc for both, which removes every match in one pass, and\nadd tests for makeEnv, which had no coverage.\n\nSigned-off-by: Madan Kumar \u003cwinklemad@outlook.com\u003e\n" }, { "commit": "e9452d6e785f6e365712b9d71bd7517591773c86", "tree": "2334ab58f4ae8af24bee02be1be286817bbe9980", "parents": [ "2465fca604972c663b83783037dd23effe070f64", "a6014a702b4173d98054144e21cee60672837841" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Fri Jul 31 17:03:37 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 31 17:03:37 2026" }, "message": "Merge pull request #7142 from thaJeztah/bump_go_archive_0.3.2\n\nvendor: github.com/moby/go-archive v0.3.2" }, { "commit": "a6014a702b4173d98054144e21cee60672837841", "tree": "2334ab58f4ae8af24bee02be1be286817bbe9980", "parents": [ "2465fca604972c663b83783037dd23effe070f64" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Jul 31 16:53:47 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Jul 31 16:53:47 2026" }, "message": "vendor: github.com/moby/go-archive v0.3.2\n\nfull diff: https://github.com/moby/go-archive/compare/v0.3.1...v0.3.2\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "2465fca604972c663b83783037dd23effe070f64", "tree": "9895559949271f4b3f7f2560fa2da58969dd5a23", "parents": [ "52b15cc571f187b521c090bae2be05a54f2090d1", "0b505454713ef719ce0c17e27f1c253c0e420322" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Fri Jul 31 16:33:04 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 31 16:33:04 2026" }, "message": "Merge pull request #7140 from thaJeztah/bump_go_archive_0.3.1\n\nvendor: github.com/moby/go-archive v0.3.1" }, { "commit": "52b15cc571f187b521c090bae2be05a54f2090d1", "tree": "3c8907029b7891adec01d9df2215169d49192c30", "parents": [ "c1eba931e3d15d204bedeadeb55ad8880be14ad3", "13590921a424348888e5b00feccca0cb2c438628" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Fri Jul 31 16:20:09 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 31 16:20:09 2026" }, "message": "Merge pull request #7141 from thaJeztah/bump_version2\n\nupdate version to 29.7.1" }, { "commit": "13590921a424348888e5b00feccca0cb2c438628", "tree": "3c8907029b7891adec01d9df2215169d49192c30", "parents": [ "c1eba931e3d15d204bedeadeb55ad8880be14ad3" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Jul 31 16:11:45 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Jul 31 16:11:45 2026" }, "message": "update version to 29.7.1\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "0b505454713ef719ce0c17e27f1c253c0e420322", "tree": "89682b2ac85a2d19fc8208d7d1ad974f3fc09382", "parents": [ "c1eba931e3d15d204bedeadeb55ad8880be14ad3" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Jul 31 16:09:40 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Jul 31 16:10:04 2026" }, "message": "vendor: github.com/moby/go-archive v0.3.1\n\nfull diff: https://github.com/moby/go-archive/compare/v0.3.0...v0.3.1\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "c1eba931e3d15d204bedeadeb55ad8880be14ad3", "tree": "0350e6b2c24e41795bc00cf576d0cd709e798fda", "parents": [ "1a305be3765f51772eb63d931bd090f153d508da", "2d978b80aebc051152406822252cd23b93989756" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Jul 30 20:16:32 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 30 20:16:32 2026" }, "message": "Merge pull request #7086 from mickael-docker/docs-authz-decoding\n\ndocs(authz): clarify daemon parsing semantics" }, { "commit": "1a305be3765f51772eb63d931bd090f153d508da", "tree": "1db522cc437fb48d0b0305badcbc3a601176e14a", "parents": [ "4c1c648df1e16ac49dd43ac0b944b07b06d75481", "2abf92e95c110e47a38ace9e4f5cf0b27739d2dc" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Jul 30 20:15:34 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 30 20:15:34 2026" }, "message": "Merge pull request #7084 from thaJeztah/prompt_cleans\n\ncli/command: PromptUserForCredentials: don\u0027t mutate cli" }, { "commit": "4c1c648df1e16ac49dd43ac0b944b07b06d75481", "tree": "888f5d7294423468951699f624f2c260c2c86bc3", "parents": [ "ee046d35c075188119f09cd9282f3bfa03c5d0d5", "af626e1ed768354f1188a3905252c7854f54f9f1" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Jul 30 19:56:12 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 30 19:56:12 2026" }, "message": "Merge pull request #7129 from docker/dependabot/github_actions/codeql-actions-f42a4cd18a\n\nbuild(deps): bump the codeql-actions group across 1 directory with 3 updates" }, { "commit": "ee046d35c075188119f09cd9282f3bfa03c5d0d5", "tree": "698298b610f7937edc1c676c0a97ce3162eeb91c", "parents": [ "d70c3fd5e73f7aeff9f4dfa7ba807fbe42c638b5", "844210bd0f90be3ec0128f88f76f08f13233d2f0" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Jul 30 19:54:54 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 30 19:54:54 2026" }, "message": "Merge pull request #7134 from hirehamir/fix/flaky-client-hangs\n\ncli/command: fix flaky TestInitializeFromClientHangs" }, { "commit": "d70c3fd5e73f7aeff9f4dfa7ba807fbe42c638b5", "tree": "3b75ae782d1b404889d74ec8c2b69668ed3b40f8", "parents": [ "b47659808ae5fdbfe0f0b065b3fbad33b99b0255", "f6d6bede46bc8f358c927d9872c59af7e6306f13" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Jul 30 19:49:42 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 30 19:49:42 2026" }, "message": "Merge pull request #7139 from thaJeztah/vendor_go_archive\n\nvendor: github.com/moby/go-archive v0.3.0" }, { "commit": "f6d6bede46bc8f358c927d9872c59af7e6306f13", "tree": "3b75ae782d1b404889d74ec8c2b69668ed3b40f8", "parents": [ "b47659808ae5fdbfe0f0b065b3fbad33b99b0255" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Jul 30 17:17:27 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Jul 30 17:17:27 2026" }, "message": "vendor: github.com/moby/go-archive v0.3.0\n\nfull diff: https://github.com/moby/go-archive/compare/v0.2.1...v0.3.0\n\nv0.3.0\n\nThis release fixes CVE-2026-17106 / GHSA-hfg8-hc9c-6c3h, where a crafted\ntar archive could use links to cause extraction operations to create or\noverwrite files outside the intended destination directory.\n\nThe issue affected Unpack, UnpackLayer, Untar, UntarUncompressed, and the\nApplyLayer helpers. Users should upgrade and avoid extracting untrusted\narchives with earlier versions.\n\nWhat\u0027s Changed\n\n* archive: harden tar extraction against path traversal\n* archive: do not follow reparse points in chtimes\n* archive: fix creation time updates on Windows\n* archive: minor cleanups and godoc touch-up\n* archive: RebaseArchiveEntries: fix archive path rebasing\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "b47659808ae5fdbfe0f0b065b3fbad33b99b0255", "tree": "52a41a989d2d105d13b476298308e18f9fd94f9a", "parents": [ "6d35de4601ae387df7781080524f484954fb9ecb", "3cc61496db33ab4bdd6326ba749f787fb599125f" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Jul 30 13:51:46 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 30 13:51:46 2026" }, "message": "Merge pull request #7026 from vvoland/fix-hostname\n\ncli/file_store: Go 1.26 compatibility" }, { "commit": "af626e1ed768354f1188a3905252c7854f54f9f1", "tree": "47f418f83c53d41f1eb518cc44703d060a18e1dc", "parents": [ "6d35de4601ae387df7781080524f484954fb9ecb" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 30 08:46:12 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 30 08:46:12 2026" }, "message": "build(deps): bump the codeql-actions group across 1 directory with 3 updates\n\nBumps the codeql-actions group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.37.1 to 4.37.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)\n\nUpdates `github/codeql-action/autobuild` from 4.37.1 to 4.37.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)\n\nUpdates `github/codeql-action/analyze` from 4.37.1 to 4.37.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.37.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/autobuild\n dependency-version: 4.37.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/init\n dependency-version: 4.37.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "6d35de4601ae387df7781080524f484954fb9ecb", "tree": "5725da2af9a968dda372ba46ffdf7592b3476fb4", "parents": [ "bd719d6703d46b2f8e9be5c74636997681430f27", "ad8dce1012707026feb7fd066d4551ac3c58c33d" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Wed Jul 29 14:58:14 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 29 14:58:14 2026" }, "message": "Merge pull request #7137 from crazy-max/bin-image-github-builder\n\nci: use docker github builder to build bin image" }, { "commit": "ad8dce1012707026feb7fd066d4551ac3c58c33d", "tree": "5725da2af9a968dda372ba46ffdf7592b3476fb4", "parents": [ "bd719d6703d46b2f8e9be5c74636997681430f27" ], "author": { "name": "CrazyMax", "email": "crazy-max@users.noreply.github.com", "time": "Wed Jul 29 11:59:24 2026" }, "committer": { "name": "CrazyMax", "email": "1951866+crazy-max@users.noreply.github.com", "time": "Wed Jul 29 14:32:49 2026" }, "message": "ci: use docker github builder to build bin image\n\nSigned-off-by: CrazyMax \u003c1951866+crazy-max@users.noreply.github.com\u003e\n" }, { "commit": "844210bd0f90be3ec0128f88f76f08f13233d2f0", "tree": "f24ec5f5577467173e05f5a2e8263354a2c4c781", "parents": [ "bd719d6703d46b2f8e9be5c74636997681430f27" ], "author": { "name": "Hamir", "email": "hirehamir@gmail.com", "time": "Tue Jul 28 22:00:30 2026" }, "committer": { "name": "Hamir", "email": "hirehamir@gmail.com", "time": "Tue Jul 28 22:06:53 2026" }, "message": "cli/command: fix flaky TestInitializeFromClientHangs\n\nSigned-off-by: Hamir \u003chirehamir@gmail.com\u003e\n" }, { "commit": "bd719d6703d46b2f8e9be5c74636997681430f27", "tree": "04adf414b65389cdeaa94ab5717f9d790987045c", "parents": [ "775dd503643289f530d40c97c89deca47ecd880f", "52b1160c85d9017cd1bb1795fd87d0279fba97c8" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Tue Jul 28 15:10:00 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 28 15:10:00 2026" }, "message": "Merge pull request #7131 from vvoland/build-oidc\n\ngha/build: Use OIDC for Docker Hub login" }, { "commit": "52b1160c85d9017cd1bb1795fd87d0279fba97c8", "tree": "04adf414b65389cdeaa94ab5717f9d790987045c", "parents": [ "5ff2ff631183baacf8e2bad36e1c49128383abd6" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Tue Jul 28 13:37:47 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Tue Jul 28 13:38:23 2026" }, "message": "gha: bump docker/login-action from 4.4.0 to 4.5.0\n\nOIDC login requires docker/login-action v4.5.0 or newer\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "5ff2ff631183baacf8e2bad36e1c49128383abd6", "tree": "f2aba4de4d483e9c735a3c7457b180d9e5fea8ef", "parents": [ "775dd503643289f530d40c97c89deca47ecd880f" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Tue Jul 28 12:20:25 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Tue Jul 28 12:28:40 2026" }, "message": "gha/build: Use OIDC for Docker Hub login\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "775dd503643289f530d40c97c89deca47ecd880f", "tree": "99fdb0431933850a284d4710e210d3364e3aa74b", "parents": [ "33209967180fdb9c2f57a4289db622f32bd2b44f", "f6dfb40875d00e95fc84e28f6da32a3c07de30cd" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Jul 27 20:13:35 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 20:13:35 2026" }, "message": "Merge pull request #7111 from thaJeztah/bump_go_archive\n\nvendor: github.com/moby/go-archive main / v0.3.0-dev" }, { "commit": "33209967180fdb9c2f57a4289db622f32bd2b44f", "tree": "2a323b8fd42365fb31da4a26434f7820ef4cfb6b", "parents": [ "4b02fd04b0ba9d2e3020303194d9e1b82423c94d", "487686142c10f5bd27c95da7838c4f30c0c6efa3" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Jul 27 20:13:17 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 20:13:17 2026" }, "message": "Merge pull request #7122 from thaJeztah/bump_x_deps\n\nvendor: update golang.org/x/* dependencies" }, { "commit": "4b02fd04b0ba9d2e3020303194d9e1b82423c94d", "tree": "8f6047a238b0f89b314eb350890c0f62294d3e74", "parents": [ "977f88900ecbd7216bc24f7f00ce0e0f27f35140", "89e882a80821f64693575178e2a4d0bc024d50fc" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Mon Jul 27 19:30:07 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 19:30:07 2026" }, "message": "Merge pull request #7124 from JessThrysoee/completion-swarm-filters\n\ncompletion: add completion for swarm \"--filter\" flags" }, { "commit": "487686142c10f5bd27c95da7838c4f30c0c6efa3", "tree": "a7949260d120fc685e17d6acfe655468d014c975", "parents": [ "e03b83ef06ca3b82eefb9a454ac3fee329f8d648" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Jul 25 01:20:15 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Jul 27 19:28:05 2026" }, "message": "vendor: golang.org/x/net v0.57.0\n\nRelevant changes (in vendor):\n\n- bpf: add security considerations to package docs\n- http2: initialize Transport on NewClientConn\n fixes: x/net/http2: zero Transport not ready for use\n- idna: reject all-ASCII xn-- labels on all Go versions\n fixes x/net/idna: ToUnicode accepts Punycode labels encoding pure ASCII labels\n\nfull diff: https://github.com/golang/net/compare/v0.56.0...v0.57.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "e03b83ef06ca3b82eefb9a454ac3fee329f8d648", "tree": "fdab730d4bf5d56e58233500896cfe537089c40d", "parents": [ "8dfca49e6bc39c29fdc804d9f8b7bcd31ab3b6a3" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Jul 25 01:17:30 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Jul 27 19:28:05 2026" }, "message": "vendor: golang.org/x/text v0.40.0\n\n- unicode/norm: avoid infinite loop on invalid input\n\nfull diff: https://github.com/golang/text/compare/v0.38.0...v0.40.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "8dfca49e6bc39c29fdc804d9f8b7bcd31ab3b6a3", "tree": "66956e3e99ea65acb3b9f1744d1a451b4579d994", "parents": [ "808405b67d7cb3ac2a01fd803d632eb4bec8d999" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Jul 25 01:13:01 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Jul 27 19:28:05 2026" }, "message": "vendor: golang.org/x/mod v0.38.0\n\nfull diff: https://github.com/golang/mod/compare/v0.37.0...v0.38.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "808405b67d7cb3ac2a01fd803d632eb4bec8d999", "tree": "e8c37f3ed41ec3b8f10cb2a15f82f994c7ef62d0", "parents": [ "3f5a7b50ab10076c65d0cfeff51ac4dccf9924e4" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Jul 25 01:11:57 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Jul 27 19:28:05 2026" }, "message": "vendor: golang.org/x/term v0.45.0\n\nfull diff: https://github.com/golang/term/compare/v0.44.0...v0.45.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "3f5a7b50ab10076c65d0cfeff51ac4dccf9924e4", "tree": "7b5ab8f9478ccf85348265b23121b6502ab6f377", "parents": [ "40c63db4c8fc6375084e004f9ad56fe489b273cc" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Jul 25 01:11:16 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Jul 27 19:28:05 2026" }, "message": "vendor: golang.org/x/sys v0.47.0\n\n- cpu: handle vendor suffixes in parseRelease\n- unix: update glibc to 2.43\n- unix: use epoll_pwait rather than epoll_wait\n- windows: avoid length overflow in NewNTString\n- windows: document safe usage of TrusteeValue\n\nfull diff: https://github.com/golang/sys/compare/v0.46.0...v0.47.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "40c63db4c8fc6375084e004f9ad56fe489b273cc", "tree": "4ae74ab2efdcbf38c9412a56a76e3116ff326129", "parents": [ "977f88900ecbd7216bc24f7f00ce0e0f27f35140" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Jul 25 01:10:26 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Jul 27 19:28:03 2026" }, "message": "vendor: golang.org/x/sync v0.22.0\n\nsemaphore: panic on negative weights\n\nfull diff: https://github.com/golang/sync/compare/v0.21.0...v0.22.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "977f88900ecbd7216bc24f7f00ce0e0f27f35140", "tree": "f3e25494ff82d22fac4053462f4b29337bfa430d", "parents": [ "a9ac44ea6b5dfede177deeb1ca623ff31c5b1a25", "4e6e8fe5c88ee4b32c441695223c25056e779487" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Mon Jul 27 19:26:50 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 19:26:50 2026" }, "message": "Merge pull request #7121 from thaJeztah/bump_go_connections\n\nvendor: github.com/docker/go-connections v0.8.0" }, { "commit": "f6dfb40875d00e95fc84e28f6da32a3c07de30cd", "tree": "d4d6499cb809d5ff8bfa1d4f3d1731fafd3a7db1", "parents": [ "a9ac44ea6b5dfede177deeb1ca623ff31c5b1a25" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Jul 17 10:08:40 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Jul 27 19:24:52 2026" }, "message": "vendor: github.com/moby/go-archive main / v0.3.0-dev\n\nfull diff: https://github.com/moby/go-archive/compare/v0.2.0...2ff9bfb8b2ee\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "a9ac44ea6b5dfede177deeb1ca623ff31c5b1a25", "tree": "67dac94f1dd987404477066508f29e8c09ff9d24", "parents": [ "358f0135e392d30bc1d294af0a3ab949d34fb9f0", "aa610f321dde17a4f706d34595ac33448f7c4562" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Mon Jul 27 19:21:13 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 19:21:13 2026" }, "message": "Merge pull request #7128 from vvoland/update-docker\n\nvendor: github.com/moby/moby/client v0.5.1" }, { "commit": "358f0135e392d30bc1d294af0a3ab949d34fb9f0", "tree": "1e6f8cec3cfe270593bc21c7421d17caf6914d5b", "parents": [ "be7865c09e9c0eb0db58a9a96516fe3e7476ed4c", "0d32eed829db75785d209b5ad41f681c5ef9e6ff" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Mon Jul 27 19:20:26 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 19:20:26 2026" }, "message": "Merge pull request #7127 from vvoland/win-unix\n\ndocs: Document Unix socket support on Windows" }, { "commit": "aa610f321dde17a4f706d34595ac33448f7c4562", "tree": "8109aaa2c9ab8962ed26152fe726e775bd1612a4", "parents": [ "be7865c09e9c0eb0db58a9a96516fe3e7476ed4c" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Jul 27 19:15:05 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Jul 27 19:15:05 2026" }, "message": "vendor: github.com/moby/moby/client v0.5.1\n\nfull diff: https://github.com/moby/moby/compare/client/v0.5.0...client/v0.5.1\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "0d32eed829db75785d209b5ad41f681c5ef9e6ff", "tree": "8a79302d43b4e547a16851068144ace5cee57f3f", "parents": [ "5b21d378b0db9eda911a169fd72cacb9f00da685" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Jul 27 18:29:50 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Jul 27 18:29:50 2026" }, "message": "docs: Document Unix socket support on Windows\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "be7865c09e9c0eb0db58a9a96516fe3e7476ed4c", "tree": "6d3e2ffc7f21ffa78244f986106e0d188c04091c", "parents": [ "186b7283e1f7bcdb5ae2976d0773e1cdcd971511", "532dcc37f547cf04c9e9b7c131dfdd1e2428189c" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Jul 27 15:00:54 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 15:00:54 2026" }, "message": "Merge pull request #7123 from thaJeztah/bump_grpc\n\nvendor: google.golang.org/grpc v1.82.1" }, { "commit": "186b7283e1f7bcdb5ae2976d0773e1cdcd971511", "tree": "7c726557719da7091057dcecb74bf630082c10a2", "parents": [ "5b21d378b0db9eda911a169fd72cacb9f00da685", "9f4301e8f527ef13e92bdd633dcf24fea8c4f41d" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Jul 27 14:59:57 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 14:59:57 2026" }, "message": "Merge pull request #7126 from thaJeztah/bump_yaml\n\nvendor: go.yaml.in/yaml/v3 v3.0.5" }, { "commit": "9f4301e8f527ef13e92bdd633dcf24fea8c4f41d", "tree": "7c726557719da7091057dcecb74bf630082c10a2", "parents": [ "5b21d378b0db9eda911a169fd72cacb9f00da685" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Jul 27 12:43:56 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Jul 27 12:43:56 2026" }, "message": "vendor: go.yaml.in/yaml/v3 v3.0.5\n\nremoves transitive dependencies on gopkg.in/check.v1\n\nfull diff: https://github.com/yaml/go-yaml/compare/v3.0.4...v3.0.5\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "89e882a80821f64693575178e2a4d0bc024d50fc", "tree": "441519bfa2c16ffe117479ada4fbf14c1cc46bc1", "parents": [ "5b21d378b0db9eda911a169fd72cacb9f00da685" ], "author": { "name": "Jess Thrysoee", "email": "jess@thrysoee.dk", "time": "Sun Jul 26 10:31:34 2026" }, "committer": { "name": "Jess Thrysoee", "email": "jess@thrysoee.dk", "time": "Sun Jul 26 13:52:58 2026" }, "message": "completion: add completion for swarm \"--filter\" flags\n\nThe migration to the generated (V2) shell completions dropped the\n\"--filter\" key/value suggestions that the legacy bash completion used to\nprovide for the swarm commands, so e.g. \"docker service ps \u003cservice\u003e\n--filter \u003cTAB\u003e\" no longer completed anything.\n\nRegister filter completions for \"docker service ps\", \"docker service\nls\", and \"docker node ps\", following the same approach as the existing\ncompletion for \"docker events --filter\".\n\nSigned-off-by: Jess Thrysoee \u003cjess@thrysoee.dk\u003e\n" }, { "commit": "4e6e8fe5c88ee4b32c441695223c25056e779487", "tree": "5afa2f73919419d95a314a844cb13b2aab340e6b", "parents": [ "9391c9889c710259b17fd4f1b8bad76713115291" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Jul 24 22:29:34 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Jul 25 17:47:59 2026" }, "message": "vendor: github.com/docker/go-connections v0.8.0\n\n- sockets: set socket permissions without overriding umask\n- sockets: improve abstract Unix socket handling\n- sockets: InmemSocket: add DialContext\n- sockets: remove double error decoration\n- sockets: test-enhancements and improve coverage\n\nfull diff: https://github.com/docker/go-connections/compare/v0.7.0...v0.8.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "5b21d378b0db9eda911a169fd72cacb9f00da685", "tree": "d6e44d8a3ce7558dfe3fd0d85f2f22036c53b908", "parents": [ "19a0ee392636a009d964821a86d4058833210a3d", "a3ea9a43e0a008daae6818305158ce4f41d59c39" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Sat Jul 25 02:05:04 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jul 25 02:05:04 2026" }, "message": "Merge pull request #7118 from docker/dependabot/github_actions/codeql-actions-15f4d34eb1\n\nbuild(deps): bump the codeql-actions group with 3 updates" } ], "next": "532dcc37f547cf04c9e9b7c131dfdd1e2428189c" }