moby: update to v25.0.0

Bumping moby to version v25.0.0, which comprises the following commits:

    05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows
    ae6468b4b9 c8d/mount: Use ref-counted mounter by default
    bd481592ff ci: Always run snapshotter tests on Linux
    ed15f1d717 net=host: remove /var/run/docker/netns/default from OCI config
    568c064795 docker-py: unskip some tests
    e8f4bfb374 Root.Path for a process-isolated WCOW container must be the Volume GUID
    ec041193f9 Windows doesn't have 'host' mode networking, so use 'auto'.
    66325f7271 Implement GetLayerFolders for the containerd image store
    0dc07ccc3a Unmount RWLayer during Commit
    a1f6b64e24 Don't call setupInit in a temp mount if setupInit is nil
    efadb70ef8 The Windows snapshotter and graphdriver have different names
    641050c93f Typo fixes
    508a2d979a Revert "temporary: Disable deprecate-integration-cli validation"
    f7065ab207 Add testutil.TempDir function
    84d2229ffe dockerd-rootless-setuptool.sh: add `nsenter` subcommand
    7d08d84b03 dockerd-rootless.sh: set `rootlesskit --state-dir=DIR`
    ae9fbcb82c testutil/daemon: shorten XDG_RUNTIME_DIR
    bdc7d0c2db temporary: Disable deprecate-integration-cli validation
    8390bc5683 c8d/cache: Use ContainerConfig from content store
    f760cb4f97 c8d/builder: Store ContainerConfig
    a5a15c7782 c8d/cache: Optimize `FROM scratch` case
    71ebfc7c63 c8d: make the cache in classic builder work
    24da5233dd integration: Fix Parallel before setupTest
    d22c775e04 cdi: use separate feature-flag
    fa4deb02af environment: Error when t.Parallel was called before Protect
    97d32bb7d7 daemon: stop checkpointing health probes to disk
    a6d9462cb1 (*Daemon).fillRootlessVersion: fix nil panic
    e954cdc188 dockerd-rootless.sh: fix inconsistent description about "builtin" driver
    9de132dbf6 integration/image: Move Parallel after setupTest
    f0efb90f21 c8d/integration-cli: Skip tests checking `ContainerConfig`
    2a02403a94 c8d/exporter: Use WithSkipMissing
    9f50e06993 image/save: Refactor saveLayer
    b5a5ecf4a3 dockerd-rootless.sh: add comments about pasta
    f5d05b43d7 Dockerfile: update RootlessKit to v2.0.0
    ba86626642 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0
    312450d079 integration: test container healthcheck is reset
    c58acf06c2 image/save: Derive Descriptor from actual tar archive
    c4d2968183 vendor: github.com/moby/sys/mountinfo v0.7.1
    075e1141b8 vendor: golang.org/x/sys v0.16.0
    a759acd958 vendor: github.com/google/uuid v1.5.0
    3bcb01a84f vendor: github.com/google/go-cmp v0.6.0
    36dd2f029f doc: Correct typo in doc comments for volume/mounts/mounts/MountPoint
    92175dd78c vendor: containerd v1.7.12, and switch to dario.cat/mergo v1.0.0
    cd1709b0d4 update containerd binary to v1.7.12
    2c45df2ab4 image/save: Fix missing layers in manifest
    0790864064 Dockerfile: update buildx to v0.12.1
    a9d0128bd7 Dockerfile: update docker compose to v2.24.0
    28f48ce1ac c8d/commit-builder: Extract common code
    659d7b190f libcontainerd: create unstarted tasks
    d7141cfd06 update to go1.21.6
    0e62dbadcd daemon: reinit health monitor on live-restore
    71c9aec834 Add Rob Murray (robmry) to curators
    e8e20c0897 daemon/config: setPlatformDefaults: use debug for missing userland-proxy
    18a0e144c2 c8d/getImageLabelByDigest: Fix misspelled `labels` check
    e27ffdab0f Dockerfile: update rootlesskit to v1.1.1, and use tags as reference
    782fe1fe82 layer: ChecksumForGraphID: remove unused code for for migrating v1 layers
    1dd415df1a vendor: github.com/vbatts/tar-split v0.11.5
    372cd16b88 vendor: otelhttptrace v0.45.0 to align with other OTEL packages
    22597efa06 vendor: github.com/docker/go-connections v0.5.0
    1f9098e7d0 builder: remove redundant ExecBackend.ContainerKill()
    0aa96c5512 builder/dockerfile: containerManager.RemoveAll() prevent partial cleanup
    03a8188a9a builder/dockerfile: remove containerManager.removeContainer()
    a38b5d7430 daemon: Daemon.ContainerRename: move vars closer to where they're used
    00a863b25e daemon: Daemon.connectToNetwork: rename named return to prevent shadowing
    0f337e9c14 feat: make errdefs.IsXXX helper functions work with wrapped errors
    dd41f86339 hack/make: Refactor VERSION normalization
    2af17cd3f5 vendor: github.com/containerd/cgroups/v3 v3.0.3
    9a5393d500 hack/make: Strip "v" tag prefix name from VERSION
    12128189eb vendor: github.com/cilium/ebpf v0.11.0
    07d2ad30e5 daemon/cluster: Cluster.imageWithDigestString: include mirrors to resolve digest
    8aacbb3ba9 api: fix "GET /distribution" endpoint ignoring mirrors
    b9e27acabc libnet/d/bridge: dead code: no conflict on stale default nw
    0a26cdf344 libnet/d/bridge: remove dead ActiveEndpointsError
    6d2c4f87af daemon: work around go1.21 compiler bug
    69c23cc0c9 docs/api: add documentation for API v1.44
    ce574949f7 api: Deprecate outdated fields in NetworkSettingsBase
    d5a3fccb06 update golangci-lint to v1.55.2
    9b184e1268 daemon: remove dead code relying on SecondaryIPAddress
    7b0f8122b2 update AUTHORS
    fc8fcf85a2 vendor: github.com/opencontainers/runc v1.1.11
    5fa4cfcabf update runc binary to v1.1.11
    b8f2caa80a pkg/containerfs: deprecate ResolveScopedPath
    90f37f48e2 pkg/containerfs: unify CleanScopedPath implementation
    6fae583dba pkg/aaparser: remove, and integrate into profiles/apparmor
    53d405c37f pkg/aaparser: remove deprecated GetVersion utility
    f714730c40 libnetwork/portallocator: PortAllocator.ReleasePort: remove unused err-return
    4f9db655ed portmapper: move userland-proxy lookup to daemon config
    214ab2caef libnetwork/portmapper: PortMapper.MapRange: inline "cleanup" closure
    6ae6dcfc53 libnetwork/portmapper: PortMapper.MapRange: fix defer
    8712c6df22 libnetwork/portmapper: PortMapper.MapRange: rename err-return
    341e7b35a6 Updated manifest v2 URLs in image spec README
    882b79b254 Dockerfile: update crun to 1.12
    dc23efd3a2 vendor: github.com/klauspost/compress v1.17.4
    f74ca4ed36 Update commit id unmap to directly use active mounts
    0252a6f475 ci(bin-image): fix merge job run condition
    1ea1d561c7 ci: do not run ci workflow on push tag events
    141cb65e51 Check, then assume an IPv6 bridge has a subnet.
    437bc829bf Don't try to validate incomplete network config.
    52d9b0cb56 Remove unused error types.
    f9135cdeb5 libnet: Improve the debug log written when the extKeyListener is stopped
    13915f6521 libnet: document what Network.networkType represents
    6a2542dacf libnet: remove Endpoint.anonymous
    cf5a3bc531 c8d: Fix image commit with userns mapping
    5eaf898fcb libnetwork: write ServFail if DNS reply msg is bad
    1da85f7bdc libnetwork: assert DNS replies are well-formed
    f6a160d34e c8d/docker-py: Temporarily skip test_commit_*
    cf1ea9237c Add dangling image reference on delete when last image has children
    9603adb5b4 c8d/docker-py: Temporarily skip test_save_and_load*
    7a9b680a9c libnet: remove Endpoint.myAliases
    523b907359 daemon: no more IsAnonymousEndpoint
    8b7af1d0fc libnet: update dnsNames on ContainerRename
    3bb13c7eb4 libnet: Use Endpoint.dnsNames to create DNS records
    f5cc497eac libnet: populate Endpoint.dnsNames on UnmarshalJSON
    ab8968437b daemon: build the list of endpoint's DNS names
    0c6e9121b2 Add support for removing repo and digest
    c22fc41ddf vendor: golang.org/x/crypto v0.17.0
    87c87bccb5 Update cleanup logic to use resolve all images
    529d19bad8 Add resolve all images and unit test
    eb9ce779f6 Update OTEL in client hijack to use transport
    c84e889a69 Remove httputil lint exceptions
    35a51fd697 Update authz plugin test to not use httputil
    bb4e9c72d7 Replace use of httputil in client hijack
    dc1e73cbbf libnet: add a new dnsNames property to Endpoint
    1eb0751803 daemon: endpoints on default nw aren't anonymous
    27f3abd893 Allow overlapping change in bridge's IPv6 network.
    18b1aec0ee c8d/inspect: Fill `Parent` property
    e48b58e1be vendor: golang.org/x/crypto v0.16.0
    44511f9e43 vendor: golang.org/x/text v0.14.0
    2cdd4906ac vendor: golang.org/x/sys v0.15.0
    d6a656cf7f libnet: Remove unused cmd/readme_test
    aa5d1a8897 typo fixes
    2cf230951f add //go:build directives to prevent downgrading to go1.16 language
    9e6d012e9c docker info: expose runtime features ("rro" mount mode, etc.)
    1602e2f4f1 api: Deprecate `Container` and `ContainerConfig` for `/images/{id}/json`
    d91bf690ef ci(bin-image): fix conditional run for skipped job
    61d5e5ca9a ci(test): do not run on push tag events
    f8275cb303 c8d/docker-py: Skip test_build_squash
    279e6658ac Add devcontainer configuration
    d11a772080 c8d/tag: Remove duplicate label copy
    3b1d9f1a26 add validation and migration for deprecated logentries driver
    3a14b1235c docs/api: remove logentries
    30f739db44 api/swagger: remove logentries
    cd41f655f9 logger: remove logentries driver
    dbdfc71026 vendor: resenje.org/singleflight v0.4.1
    4d2a324fce update to go.opentelemetry.io/otel/semconv/v1.21.0, remove "httpconv" uses
    7d991b6e42 vendor: github.com/moby/buildkit v0.12.5-0.20231208203051-3b6880d2a00f
    fcf03cdfa9 vendor: github.com/containerd/containerd v1.7.11
    7028a03ffa vendor: github.com/containerd/containerd v1.7.10
    49ad10261e vendor: github.com/containerd/containerd v1.7.9
    c14bd4f1ad vendor: vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
    291eaf0a77 vendor: github.com/cyphar/filepath-securejoin v0.2.4
    b524ed2dda testing: update docker-py to 7.0.0
    33d2ec08ba update containerd binary to 1.7.11
    c51a262e34 update containerd binary to 1.7.10
    12c70b4386 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0
    a0615f6839 vendor: github.com/felixge/httpsnoop v1.0.4
    afe281964d daemon/logger/local: always use UTC for timestamps
    bea729c030 c8d/prune: Familiarize image names that were untagged
    8ba8a59697 c8d/prune: Default `dangling` filter to true
    eaaf1ea96d integration/prune: Run in a separate daemon
    90dfb1c8ad c8d/integration-cli: Adjust TestBuildClearCmd
    0f9f9a132e Move 'netip' utils from 'ipam' to 'internal'.
    1931a1bdc7 libnetwork/diagnostic: lock mutex in help handler
    424ae36046 libnetwork/diagnostic: use standard http.Handler
    bc94dfc7d2 hack: Load special images on demand
    7cb1efebec api/types: move NetworkListConfig to api/types/backend
    a58b0a3d9c api/types: move Plugin-types to api/types/backend
    862caf826c update to go1.21.5
    0bf6ffba43 update to go1.21.4
    08e4e88482 daemon: raise default minimum API version to v1.24
    484e6b784c api/types: move ContainerCreateConfig, ContainerRmConfig to api/types/backend
    c786c3a974 Dockerfile: update criu stage to Debian 12 (Bookworm)
    d5eba1bfe5 integration/build: Use setupTest
    713c7d49a1 integration(-cli): remove skips for old daemon versions (<20.10)
    7f68e3107e integration-cli: TestAPIClientVersionOldNotSupported: use daemon API version
    97549d923c integration/container: TestInfoAPIVersioned: adjust API version
    410feab962 integration/container: TestKillDifferentUserContainer: adjust API version
    757a004a90 libnetwork/diagnostic: drop Init method
    f270057e0c libnetwork/diagnostic: un-embed sync.Mutex field
    aa2fa2caa3 un-containerize TestDaemonNoSpaceLeftOnDeviceError
    49f3e7d233 Dockerfile: remove APT_MIRROR build-arg
    baca6cb417 Don't allow port in CIFS URL
    c8134fa046 vendor: github.com/moby/buildkit v0.12.4
    a189832454 add TaskStatus to swagger docs
    faa843fcef vendor: github.com/gorilla/mux v1.8.1
    028ed1bb22 vendor: github.com/spf13/cobra v1.8.0
    e18f5a5304 container: internalize InitAttachContext
    fcb89da9c2 c8d/integration-cli: Skip TestListDanglingImagesWithDigests
    61d94850a7 cmd/dockerd: make cobra templates a const
    0f163170a7 cmd/dockerd: remove various cobra templating
    3bfb6a9420 frozen images: update to debian:bookworm-slim
    fd40dfaf58 Dockerfile: remove uses of DEBIAN_FRONTEND
    e72c4818c4 Dockerfile: update to Debian "bookworm" (current stable)
    8ae94cafa5 cifs volume resolves hostname correctly.
    3a0af5ad30 integration/TestLiveRestore: Wait for process to exit
    61d8f57f2a daemon: kill: use log level to "warn" if container doesn't exit in time
    e262cd38ad c8d/integration-cli: Adjust DockerRegistryAuthTokenSuite
    49d088d9ce builder-next: fix timing filter for default policy
    c3eed9fa3e integration-cli: fix TestDaemonICC tests for newer iptables versions
    c5ea3d595c liverestore: Don't remove `--rm` containers on restart
    9b399814e7 integration-cli/TestCrossRepositoryLayerPush: Change repo name
    9709b7e458 quota: increase sparse test-image to 300MB
    65cfcc28ab hack/dind: update comments around AppArmor
    cfb8ca520a hack/dind-systemd: make AppArmor work with systemd enabled
    203bac0ec4 daemon/c8d: Unmount container fs after unclean shutdown
    964ab7158c Explicitly set MTU on bridge devices.
    05523e289b c8d/integration: Adjust TestSaveCheckTimes
    b1676a289c daemon: ContainerRename: move log args to log fields
    d2865f1e8a daemon: win: set DNS config on all adapters
    0fd0e8255f daemon: build ports-related ep options in a dedicated func
    7786f8512b Revert "testing: temporarily pin docker-py tests to use "bullseye""
    4394c61e6c testing: update docker-py to 7.0.0b1
    f877360dc1 api/t/swarm: Fix deprecation for ServiceSpec.Networks
    681c94ca17 Dockerfile: update buildx to v0.12.0
    68e73ceb67 update containerd binary to v1.7.9
    2f28582b55 vendor: github.com/Microsoft/hcsshim v0.11.4
    f4776ef9df ci(bin-image): skip dco on push tag events
    8641d2da3b client: update example in readme
    0ab7267ae3 Fix support for pull by digest
    ba46bda149 update authors and mailmap
    a3fdad84ad graphdriver/copy: faster copy of hard links
    fb53da508f vendor: github.com/opencontainers/runc v1.1.10
    15bcc707e6 update runc binary to v1.1.10
    84036d3e18 daemon/config: change DNSConfig.DNS to a []net.IP
    1eadfb0e28 opts: ValidateIPAddress: improve error, godoc, and tests
    981a878cf5 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev)
    677d41aa3b Plumb context through info endpoint
    f0b89e63b9 Fix missing import for "scope" package
    33564a0c03 libnetwork/d/overlay: support IPv6 transport
    e1d85da306 libnetwork/d/overlay: parse discovery data eagerly
    d47b3ef4c9 libnet: early return from updateSvcRecord if no addr available
    f5a611a74c daemon: ContainerRename: use named error-return
    8074e7a437 Bump go-connections for TLS 1.3 support
    d06af368ad c8d: "unremap" the user namespace on commit
    a7acfffea6 test: Add a test for userns remapped daemon commit
    876d4e5484 c8d: cleanup imports in the image builder file
    7995e3288f Add until filter to docker image ls Signed-off-by: Rachit Sharma <rachitsharma613@gmail.com>
    58785c2932 integration/networking: fix TestBridgeICC
    6979503a85 Include port in URL for locally built Swagger docs
    755f008c1e Default the auth config domain to the target image domain
    7d9d601e6d project: document supported containerd versions
    29ac09ee9d Revert "libcontainerd: work around exec start bug in c8d"
    c1a289e05a docs/api: update redirect metadata for hugo
    49e04102c1 Update container-device-interface to v0.6.2
    26f63600c1 daemon/snapshotter: Align mounter implementations
    d5d41c2849 daemon/config: Put params for the default network into a dedicated struct
    587ad8845a integration/system: update TestInfoAPI to not use string-matching
    c1ab6eda4b integration/networking: Test bridge ICC and INC
    409ea700c7 integration: Add a new networking integration test suite
    02a932d63f Fix case where health start interval is 0 uses default
    891241e7e7 seccomp: block io_uring_* syscalls in default profile
    3c2b06099d Skip TestPullManifestList when using containerd
    6ca1b9e4ce Skip the busybox digest check when containerd is enabled
    123ade3763 builder/dockerfile: errmsg: quote build target
    7257c77e19 libnetwork/ipam: refactor prefix-overlap checks
    4e8ba395f2 integration: TestSaveRepoWithMultipleImages: minor cleanup
    0dae0f2b5e integration: TestSaveRepoWithMultipleImages remove redundant remove
    30cd8b8fca integration: make TestSaveRepoWithMultipleImages less flaky
    1c50526092 daemon: improve daemon start informational log message
    a99bb24ea8 builder-next: make sure worker platforms normalized for containerd
    29977d5058 contrib/check-config: conditionally disable color output.
    d60de4cafd Move the golangci-lint configuration file to the root dir
    cd95cd0671 c8d/push: Return error when repository has no tags
    df34db1158 c8d/pull: Don't wrap `no basic auth` error
    5a83bebf76 ci: Setup otel tracing for windows integration tests
    29ddf2214d docs(API): Add reason to network connect 403
    63a9d72ee8 pkg/tarsum: handle xattrs like archive/tar does
    4356962c69 update containerd binary to v1.7.8
    38c4ceb00a vendor: github.com/containerd/containerd v1.7.8
    34f5793521 vendor: google.golang.org/grpc v1.58.3
    bd23c7729e vendor: golang.org/x/tools v0.10.0
    205e4de3fd vendor: golang.org/x/mod v0.11.0
    153d7e4038 exec/tests: add test for `--group-add` with `--user`
    27e064e7e9 c8d/history: Fix nil dereference
    808120e5b8 New `host_ipv6` bridge option to SNAT IPv6 connections
    9d578a2e6d Cleanup duplicate imports
    59c5f6e35b integration-cli: mark dockerCmdWithFail as an helper function
    61c78d9438 daemon: Validate MacAddress on container create
    ee9f0ed895 api: Deprecate ContainerConfig.MacAddress
    052562ffd5 api: Add a field MacAddress to EndpointSettings
    98323ac114 integration/container: target v1.43 in a soon-to-break test
    4f0cab3b74 api: ContainerCreate: re-organize BC conditions
    79589354df api: ContainerCreate: remove repetitive nil checks
    44a25f31a8 api: ContainerCreate: lowercase ErrEmptyConfig
    91eee33f62 api: ContainerCreate: return an error when config is nil
    417018659b daemon: remove redundant withResetAdditionalGIDs option
    8f756fe679 c8d: show the real image creation date when listing images
    a73dfe68d3 api: ContainerCreate: init hostConfig and networkingConfig when nil
    7e0cb4c46f c8d: Use the labels to get the children of an image
    f5535d516f c8d: Preserve image labels when tagging
    70158284b7 api: fix a nil check on the wrong var
    d7266afc7e c8d/exec: Add additional groups on exec
    df3a321164 migrate to github.com/moby/sys/user
    aeb8972281 daemon: daemon.containerRestart: don't cancel restart on context cancel
    52da88201c hack/validate: stop suppressing Xattrs deprecation
    c44c9dfa79 pkg/tarsum: migrate to (tar.Header).PAXRecords
    3cf409aa9e pkg/archive: migrate to (tar.Header).PAXRecords
    6a8a792019 pkg/archive: test tar headers are interoperable
    f2c67ea82f vendor: github.com/klauspost/compress v1.17.2
    a7b44ea10f Dockerfile: update github.com/tc-hib/go-winres v0.3.1
    0cf113e250 Add unit tests for outgoing NAT rules
    619d98ab49 vendor: github.com/moby/buildkit v0.12.3
    aad51c0b4e daemon: daemon.shutdownContainer: use context.WithoutCancel
    dca89c67ef daemon: daemon.containerStop: use context.WithoutCancel
    8166818791 c8d: Return the "tag does not exist error"
    4af420f978 libnetwork/internal/kvstore: prune unused method
    4039b9c9c4 libnetwork/datastore: drop (KVObject).DataScope()
    4f4a897dda libnetwork/datastore: drop (*Store).Scope() method
    4b40d82233 libnetwork/datastore: un-embed mutex from cache
    9536fabaa8 libnetwork/datastore: minor code cleanup
    43dccc6c1a libnetwork/datastore: unconditionally use ds.cache
    5a72ed3406 integration-cli: remove deprecated dockerCmd and waitRun utilities
    06115bf82c integration-cli: DockerCLIPruneSuite: replace dockerCmd
    285ab8c861 integration-cli: DockerCLIPluginsSuite: replace dockerCmd
    e28da7686e integration-cli: DockerCLIPluginLogDriverSuite: replace dockerCmd
    a837cb444c integration-cli: DockerExternalVolumeSuite: replace dockerCmd
    5f884478e5 integration-cli: DockerCLIImportSuite: replace dockerCmd
    885eceba1d integration-cli: DockerCLITopSuite: replace dockerCmd
    6ce6b63482 integration-cli: DockerCLIHistorySuite: replace dockerCmd
    268e72f10f integration-cli: DockerCLIRestartSuite: replace dockerCmd and waitRun
    c388416aac integration-cli: DockerCLICreateSuite: replace dockerCmd and waitRun
    5c297fcc09 integration-cli: DockerCLIStatsSuite: replace dockerCmd and waitRun
    7d2a6f2030 integration-cli: DockerCLICommitSuite: replace dockerCmd
    a4522b6a8f integration-cli: DockerCLIStartSuite: replace dockerCmd
    f7ddfdbae6 integration-cli: DockerCLIUpdateSuite: replace dockerCmd and waitRun
    d1108b8a06 integration-cli: DockerDaemonSuite: replace dockerCmd
    9c161cc65a integration-cli: DockerCLIVolumeSuite: replace dockerCmd
    f482857959 integration-cli: DockerCLIImagesSuite: replace dockerCmd
    f1102e98bb integration-cli: DockerCLIPortSuite: replace dockerCmd and waitRun
    ba4d491562 integration-cli: DockerCLIRmiSuite: replace dockerCmd
    5b3086db1f libnetwork/datastore: prevent accidental recursion
    16e4bc9827 integration-cli: DockerCLISearchSuite: replace dockerCmd
    89d7b77022 integration-cli: DockerRegistrySuite: replace dockerCmd
    c867ac4527 integration-cli: DockerCLICpSuite: replace dockerCmd
    980a5bc72a integration-cli: DockerCLIBuildSuite: replace dockerCmd
    4292f42308 integration-cli: DockerCLISaveLoadSuite: replace dockerCmd
    50062b413c integration-cli: DockerCLIRunSuite: replace dockerCmd and waitRun
    d63cab5193 integration-cli: DockerCLILogsSuite: replace dockerCmd and waitRun
    8e2e1f3d28 integration-cli: DockerRegistryAuthHtpasswdSuite: replace dockerCmd
    d3f4580519 integration-cli: DockerCLILinksSuite: replace dockerCmd and waitRun
    58c5986f8b integration-cli: DockerCLIHealthSuite: replace dockerCmd and waitRun
    707bb9b9ed integration-cli: DockerBenchmarkSuite: replace dockerCmd and waitRun
    eafb618594 integration-cli: findContainerIP: replace dockerCmd
    ba32bebd05 integration-cli: DockerCLIInfoSuite: replace dockerCmd and waitRun
    4562f07887 integration-cli: DockerCLIExecSuite: replace dockerCmd and waitRun
    8c661b5e9a integration-cli: DockerCLIEventSuite: replace dockerCmd and waitRun
    cf95278122 integration-cli: DockerCLIAttachSuite: replace dockerCmd and waitRun
    1baec48367 integration-cli: DockerAPISuite: replace dockerCmd and waitRun
    908821d48a integration-cli: dockerCmdWithFail: remove unused return
    02fd8485fa integration-cli: DockerCLINetmodeSuite: replace dockerCmd and waitRun
    dbb2bd727d integration-cli: DockerNetworkSuite: replace dockerCmd and waitRun
    5cc978c6a0 integration-cli: DockerCLIInspectSuite: replace dockerCmd and waitRun
    86fb048e59 integration-cli: DockerCLIPsSuite: replace dockerCmd and waitRun
    b4ff5234bd integration-cli: remove transformCmd utility
    cdb44010c9 c8d/history: Fill ID for parents without the label
    d28bd54f2a c8d/history: Fix Tags assigned from parents
    e97716a95a Fix disk usage test
    cf9073397c Update check-config.sh
    7bb54c3dc5 vendor: gotest.tools/v3 v3.5.1
    bcca214e36 libnetwork: open-code updating svc records
    33cf73f699 libnetwork: drop (*Controller).nmap
    804ef16822 libnetwork: only delete svc db entry on network rm
    c85398b020 libnetwork: drop vestigial endpoint-rename logic
    29da565133 libnetwork: change netWatch map to a set
    0456c0db87 libnetwork: refactor isDistributedControl()
    749d4abd41 libnetwork: get rid of watchLoop goroutine
    f05dce8d3a replace some strings with OCI consts
    e3feb05175 vendor: github.com/opencontainers/image-spec v1.1.0-rc5
    0d27579fc7 Ensure that non-JSON-parsing errors are returned to the caller
    26730c891a vendor: google.golang.org/grpc v1.56.3
    6f625ae65a c8d integration: skip TestImportWithCustomPlatform
    9357bcb582 c8d/pull: Return same access denied error as graphdrivers
    488559a330 c8d/push: Set distribution source recursively
    d9b5445f39 c8d/pull: Handle pull all tags
    095d2a29a3 distribution: Add Tags
    9664f33e0d daemon: release sandbox even when NetworkDisabled
    2df698025c HealthCheck: add validation for minimum accepted start-interval
    25fb4dd50d switch to go.opentelemetry.io/otel/semconv/v1.17.0
    96f85def5b s/HostIP/HostIPv4/ for `com.docker.network.host_ipv4` setting
    2a14b6cf60 Use `iptRule` to simplify `setIcc` (code health)
    d7c6fd2f80 Move `programChainRule` logic to `iptRule` methods (code health)
    e260808a57 Move duplicate logic to `iptRule.Exists` method (code health)
    14d2535f13 Move `iptables.IPVersion` into `iptRule` struct (code health)
    4e219ebafb Eliminate unnecessary `iptRule.preArgs` field (code health)
    4662e9889c Simplify `setupIPTablesInternal` parameters (code health)
    919fe72f60 vendor: github.com/moby/buildkit v0.12.3-dev
    40fde69be9 Revert "Return no basic auth creds error when needed"
    e1bacd18a3 ci: continue-on-error on non-PR with snapshotter enabled
    70892220c8 ci: use matrix to test containerd backed image store
    03decbc1e6 ci: split tests in a reusable workflow
    bb7408e851 c8d/changes: Fix concurrents diffs
    e3d8e979de integration-cli/TestSaveAndLoadWithProgressBar: Skip with c8d
    f51c5e1a5c c8d/save: Don't save name if exported by digest
    b5f5987959 c8d/load: Fix `Loaded image` message
    42af8795a3 c8d/save: Implement exporting all tags
    f20abbc96c libnetwork: use conntrack and --ctstate for all rules
    c279c48a0e Skip TestPullAllTagsFromCentralRegistry
    8777592397 Return no basic auth creds error when needed
    ebef4efb88 api/types: move ContainerLogsOptions to api/types/container
    9670d9364d api/types: move ContainerListOptions to api/types/container
    7bce33eb0f api/types: move ContainerStartOptions to api/types/container
    0f77875220 api/types: move ContainerRemoveOptions to api/types/container
    9498d897ab api/types: move ContainerCommitOptions to api/types/container
    30f09b4a1a api/types: move ContainerAttachOptions to api/types/container
    95b92b1f97 api/types: move ResizeOptions to api/types/container
    ec69501e94 api/types: move ServiceCreateResponse, and generate from swagger
    5b3e6555a3 api/types: move ServiceUpdateResponse
    48cacbca24 api/types: move image-types to api/types/image
    44dbbeb196 c8d/progress: Remove unused mountable
    bcbbd9538f c8d/progress: Show Mounted/Exists status
    bb8bc1ffc8 update to go1.21.3
    3bc45d78c9 update to go1.21.2
    1800dd0876 vendor: golang.org/x/net v0.17.0
    1946aead21 vendor: golang.org/x/crypto v0.14.0
    0679ae984b vendor: golang.org/x/text v0.13.0
    bc33c27796 vendor: golang.org/x/sys v0.13.0
    db806533e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
    b81b27c21f vendor: github.com/go-logr/logr v1.2.4
    cff4f20c44 migrate to github.com/containerd/log v0.1.0
    e1d0aacb6a vendor: github.com/docker/distribution v2.8.3
    0cd02ab1b4 integration/c8d: Skip TestBuildSquashParent
    aca9ea42bd vendor: github.com/moby/buildkit 0.12.3-dev
    d871a665de daemon/RegistryHosts: Don't lose mirrors
    a293cd6ab9 vendor: github.com/containerd/containerd v1.7.7
    f3aa9e151d c8d: Simplify error handling and distribution source label
    5f062032f7 TestPullNonExistingImage: Move to integration
    53345fe357 TestPullNonExistingImage: Use subtests
    2edb858b18 vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0
    87de23a6cd vendor: golang.org/x/text v0.11.0
    23f2e0fea7 Skip tests that check max concurrency
    37ca57e9d5 libnet/d/bridge: inline error checks
    fcabc48ee4 c8d/load: Handle compressed archives
    cbc2a71c27 libnet/d/bridge: Don't set container's gateway when network is internal
    491758a446 Dockerfile: upgrade Delve
    c587ba3422 registry: allow mirror path prefix in config
    2c4551d86d libnet: resolver: remove direct use of logrus
    4de8459265 libnet: add OTEL tracing to the embedded DNS
    b8ba263099 c8d/rmi: Handle explicit dangling name
    25a813e924 c8d/rmi: Don't emit Untagged for dangling images
    f99c4ec798 c8d/history: Fill ID and Tags for all entries
    1f6bacc486 TestDaemonNoSpaceLeftOnDeviceError: Adjust to snapshotters
    28d057cb0e c8d/TestPsListContainersSize: Only check if size increased
    34400dd4a2 TestPsListContainersSize: Fix size parsing/formatting
    e0e6ae741e daemon/c8d: Use WithoutCancel instead of context.Background
    c47cdd5f39 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw"
    6f27bef9fc daemon/c8d: Use non cancellable context in defers
    77f7c83114 c8d/push: Show progress only on blobs
    e8a7a9435f Dockerfile: update test-registry to v2.8.3
    5b16dd6469 Remove duplicated trace logs
    ad877271f3 Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless")
    3d70af4ee4 adjust stats sampling order
    16063c7456 vendor.mod: bump go line to 1.20
    a4822abe37 c8d: Skip TestPullFailsWithAlteredManifest
    f9f439763a c8d/TestPullFailsWithAlteredManifest: Adjust error message
    4001241ccf c8d/TestPullByDigestNoFallback: Adjust error message
    9e3ed7b429 pkg/chrootarchive: fix Darwin build
    e465ebf2f3 update to go1.21.1, and fix download-URL
    aa282973d4 Dockerfile: use GOTOOLCHAIN=local
    f66c000229 c8d: Fix getting the platform of a single-platform image
    2c89640ab9 distribution: TestPullSchema2Config fix test response
    a9fcb775e5 integration-cli: fix getTestTokenService not sending header
    3197160114 daemon: Daemon.SetNetworkBootstrapKeys: make error-handling idiomatic
    f91c3cfda6 daemon: Daemon.initNetworkController: remove intermediate var
    dcc75e1563 libnetwork: Controller: agentInit, agentDriverNotify rm intermediate vars
    a384102fdf libnetwork/datastore: Store.Map, Store.List: remove intermediate vars
    bb5402e6fb libnetwork: Controller: getKeys, getPrimaryKeyTag: slight refactor
    603f49706e libnetwork: Controller: getKeys, getPrimaryKeyTag: prevent panic
    f6e44bc0e8 internal: Add compatcontext.WithoutCancel
    95aea39348 Make one-shot stats faster
    618d9b5d54 libnetwork: nwAgent: un-export mutex
    7cda3fb7b5 libnetwork: inline populateSpecial NetworkWalker
    ca1307c56e libnetwork: Controller: remove mutex for "store"
    a8ea752a93 libnetwork: Controller.cleanupLocalEndpoints: return errors
    2e60051c92 libnetwork: Controller.sandboxCleanup: return errors
    642cf261a8 libnetwork: Controller.NetworkByID: remove redundant error-handling
    430a5f8581 api: Add method and path to trace operation string
    41c186c344 hack: Run integration tests through Delve
    42a51cb285 Add support for swarm seccomp and apparmor
    0c66111c40 daemon: containers list code refactor
    13b775a96e integration-cli/TestSaveAndLoadRepoFlags: Ignore LastTagTime difference
    7c202d2fa4 integration-cli/SaveLoad: Don't check `repositories` file
    724db8650c integration-cli: Skip TestLoadZeroSizeLayer with c8d
    1337a66130 integration-cli: Skip Parent tests with c8d
    d5b067e04a ci(buildkit): remove regex skipping tests with digest inconsistency
    286704bf6f ci(buildkit): expose github runtime for gha tests
    34e71b374b builder-next/a/ci/pull: strongly type flightcontrol.Group
    c8773e10b1 builder-next/wrapper: use new exptypes constants
    a728bd0ee9 builder-next/pull: use ResolveMode.String() helper
    221b73e23d builder-next: apply source policies on config resolve
    2246297ae6 builder-next: adopt new wrapped types
    c217e3c87a vendor: github.com/moby/buildkit v0.12.2
    8cd5f04ea3 daemon/c8d: use new containerd LabelDistributionSource constant
    fd6dd6935b vendor: github.com/containerd/containerd v1.7.6
    79a4cbbec9 builder-next: make stub executor generic
    d7a31cfb2d libnetwork: Sandbox.resolveName: slightly simplify locking
    f549aaa205 libnetwork: Sandbox.resolveName: add fast-path for alias lookups
    9249b34be8 libnetwork: Sandbox.resolveName: rename vars for clarity
    4401ccac22 libnetwork: Sandbox: remove some intermediate vars
    0e80073e01 daemon: strongly type containerd log.OutputFormat
    4ff252456b libnetwork: rewrite Network.isClusterEligible to return agent
    6203e3660d libnetwork: Endpoint: return early if no agent was found
    6eeef51c6a libnetwork: Controller.agentSetup: use structured logs
    8b95ea4a35 libnetwork: Controller.agentSetup: remove redundant condition
    e852ba55a5 vendor: github.com/Microsoft/hcsshim v0.11.1
    06a640084f Fix graphdriver lookup in makefile
    093481618d c8d: Skip the test that checks Config.Image
    e6907243af client: negotiate api version before handling version-specific code
    3936c57294 c8d: test a backend dependent error on pull
    207c4d537c c8d: Fix `docker diff`
    601c9b29e6 c8d/pull: Fix stale Downloading progress
    313a090c0e libnetwork/osl: add some TODOs
    9d3b1f9419 libnetwork/osl: make constructing Interfaces more atomic
    47f9e70385 libnetwork/osl: Namespace.Restore: conditionally fetch IPs
    ee5a91e663 libnetwork/osl: Namespace.Restore: flatten nested conditions
    299bd58c5a libnetwork/osl: Namespace.Restore: rename vars for readability
    7b96663082 libnetwork/osl: Namespace: inline setGateway and setGatewayIPv6
    bd17d27658 libnetwork/osl: Namespace: make error-handling more idiomatic
    0b4a70ca2c libnetwork/osl: Namespace: programRoute, removeRoute rm path arg
    542fe0da40 libnetwork/osl: Namespace: make mutex private
    338fc49060 libnetwork/osl: implement Namespace.RemoveInterface
    3ff75aeb07 c8d/pull: Deprecation notice for schema1 manifests
    2cb94ade6c distribution: Extract schema1 deprecation notice
    39fe25b69e c8d: Fix  getting image with platform
    68b67b3230 c8d/pull: Support legacy schema1 prettyjws manifests
    d5425f28ae Don't run tests twice
    bddd826d7a profiles/apparmor: deny /sys/devices/virtual/powercap
    83cac3c3e3 oci/defaults: deny /sys/devices/virtual/powercap
    2394b07bce c8d: Number of containers using an image
    e19e541e2c libnet: add comment to ipamType
    acf825def2 api/t/net: test EndpointIPAMConfig.Validate()
    3092b261e2 daemon: move most of validateEndpointSettings into api/t/net
    554036040b vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24
    6fc3ead321 vendor: google.golang.org/grpc v1.56.2
    73041028b6 vendor: google.golang.org/protobuf v1.31.0
    54dc8d2968 vendor: github.com/cenkalti/backoff/v4 v4.2.1
    d97e4300ee vendor: google.golang.org/api v0.114.0
    d50585b05b vendor: golang.org/x/tools v0.8.0
    51d8a975ab vendor: golang.org/x/oauth2 v0.7.0
    9670db3904 vendor: golang.org/x/crypto v0.9.0
    a046616249 vendor: golang.org/x/sys v0.10.0
    f29155950f vendor: golang.org/x/sync v0.3.0
    0354791147 vendor: github.com/klauspost/compress v1.16.5
    87dd1de046 vendor: github.com/tonistiigi/vt100 v0.0.0-20230623042737-f9a4f7ef6531
    bd6cadffb0 vendor: github.com/containerd/continuity v0.4.2
    6d93db06db vendor: github.com/vbatts/tar-split v0.11.3
    171ecf8cf2 vendor: github.com/vishvananda/netns v0.0.4
    81ab8db1c3 api/t/net: add missing comment to ValidateIPAM
    04a47e88d2 api/t/net: move endpoint structs into endpoint.go
    19c07198b6 daemon: Check if endpoint address is in allowed range
    bfd8c6deb7 daemon: Validate EndpointSettings.IPAMConfig.LinkLocalIPs
    4bd0553274 daemon: Return all validation errors for NetworkingConfig and EndpointSettings
    ff503882f7 daemon: Improve NetworkingConfig & EndpointSettings validation
    4c03618fab registry: remove jsonmessage dependency
    6c563cda82 c8d: fix TestRemoveContainerAfterLiveRestore
    0c4397deaf api/pull: Validate repo name
    ccb37fa567 imageService/PullImage: Move reference parse to api
    28861e0c47 c8d: Skip TestRemoveImageGarbageCollector
    bf692d47fb deprecate pkg/loopback (utility package for devicemapper)
    96faee9762 libcontainer: client.processEventStream: use locally scoped variables
    32e2c53467 c8d: Fix pull progress update
    5a4962f80d c8d: Refuse images with digest algo when tagging
    bd523abd44 remove more direct uses of logrus
    1ffbbe798a vendor: github.com/containerd/containerd v1.6.24
    7f281907dd c8d/push: Add missing message about repository
    babf907bfd c8d/push: Support pushing all tags
    7ec9f304e9 daemon/cluster: create managed ctr with multiple EndpointsConfig
    5e15ed314b api: Improve error on ContainerCreate with multiple endpoints
    cc9c930e29 vendor: github.com/Microsoft/hcsshim v0.9.10
    24102aa8ca update containerd binary to v1.7.6
    bbcd662532 api: Allow ContainerCreate to take several EndpointsConfig for >= 1.44
    35e9d688ba libnetwork: remove netWatch.remoteEps, as it's unused
    8ae5dc4aae libnetwork: Network.updateSvcRecord: remove unused localEps arg
    37b2ea9a8d libnetwork: Controller.processEndpointCreate, Delete: remove nmap arg
    62e55fd58a Add support for registry token in containerd pull logic
    14c5f7bf1d contrib: outline purpose of download-frozen-images-v2.sh
    0937aef261 libcontainerd/windows: Don't reap on failure
    b805599ef6 libcontainer/windows: Remove unneeded var declaration
    55b664046c libcontainer/windows: Fix process not being killed after stdio attach failure
    9c84994830 libnetwork/portmapper: remove unused PortMapper.checkIP
    f5d6af13d0 libnetwork/portmapper: un-export PortMapper.Allocator
    863909a749 libnetwork/portmapper: New(): remove unused argument
    5ab8d41d9f Add dmcgowan as curator
    de2447c2ab daemon: overlay2: Write layer metadata atomically
    78479b1915 libnet: Make sure network names are unique
    5fa011dc0c vendor: resenje.org/singleflight v0.4.0
    fd15ddbc30 daemon: GetImageAndReleasableLayer: simplify "FROM scratch" case
    4229032676 daemon/containerd: use "DiffID" type for diff fields
    5d5eeac310 daemon: automatically set network EnableIPv6 if needed
    0313544f4a c8d: Handle userns properly
    c63a952dc9 c8d/builder: Don't append empty tar layer to manifest
    9127285985 c8d/builder: Lease layer snapshots
    f22b112005 c8d/commit: Unpack committed image
    8832cdf6e1 c8d: Common unpack code for specific manifest
    c6bded3475 c8d/builder: Don't use diffID as snapshot parent
    8c7e19c5ff c8d/builder: Set empty diffID for rolayer
    6ebfa57364 c8d/builder: Don't mount the rolayer snapshot
    c41121cc48 update to go1.20.8
    4acbf7d8c3 c8d: disable schema1 registry integration tests
    833b514d98 c8d/mount: Create same directory owners as graphdrivers
    a8975c9042 api: Add consts for predefined networks
    12e27dfd8f Fix host_ipv4 bridge option when IPv6 and ip6tables are enabled
    7c0f6741eb go mod tidy
    cd204f1118 libnetwork/osl: Namespace.DeleteNeighbor: remove intermediate vars
    4215a1542b libnetwork/osl: Namespace.DeleteNeighbor: remove osDelete argument
    bc77104fed libnetwork/osl: Namespace.DeleteNeighbor: don't warn on non-existing neighbor
    5e7eade1f7 integration: don't poll for containers to be running
    b7d29c1e23 registry: un-skip some tests that don't require root
    de27973538 registry: merge validateEndpoint into newV1Endpoint
    6cc6682f5f daemon: fix under what conditions container's mac-address is applied
    820f37b1a6 hack: compile w/o optimizations & inlining when debugging
    c44f8958f6 vendor: github.com/cncf-tags/container-device-interface v0.6.1
    fa3ddc5116 distribution: newRepository: remove naked return and intermediate vars
    43740ab642 registry: remove intermediate vars in mock
    550e628f05 registry: newV1Endpoint: make it clear we skip validation for Docker Hub
    5728516371 c8d/image: Allow truncated id to have sha256: prefix
    c2004fb8c4 hack: Add TEST_IGNORE_CGROUP_CHECK
    7e506f71f3 registry: v1Endpoint.ping: include URL in debug log
    0c6f8f9290 registry: v1Endpoint.ping: don't io.Readall the response
    e9ad878df6 registry: v1Endpoint.ping: add fast-path for X-Docker-Registry-Standalone
    9e797a6db9 c8d: Remove the panic from UpdateConfig
    4982c70db4 integration-cli: Skip TestRmiParentImageFail when using c8d snapshotters
    0f7a65e59b registry: remove use of v1 Version field and X-Docker-Registry-Version
    3d8b8dc09a Use process substitution to redirect to tee
    c0ece8d4f3 integration-cli: Use different label in TestBuildMultiStageGlobalArg
    081b74b97d c8d/builder: Store parent in c8d image label
    5f59f7bb49 integration/container: combine TestResize tests into subtests
    a4ceb0e4ac integration/container: TestResize, TestResizeWithInvalidSize: rm poll.WaitOn
    ee7ca6822a integration/container: fix flaky TestResizeWhenContainerNotStarted
    da5ed8b35b CI: Switch to use tracing action
    a3c97beee0 image: implement CheckOS, deprecate pkg/system IsOSSupported
    150b657bad pkg/system: move ErrNotSupportedOperatingSystem to where it's used
    9b7784781d Add test for buildkit history trace propagation
    3b4ccb2eca CI: Setup otel tracing for integration tests
    e8dc902781 Wire up tests to support otel tracing
    642e9917ff Add otel support
    776c376227 c8d: Better pull progress
    1cb45e582c c8d/import: Don't close compressed stream twice
    b5376c7cec pkg/idtools: remove sync.Once, and include lookup error
    0be416dfdc distribution: filterManifests split complicated condition
    150b1c8c73 daemon: daemon.createSpec: remove uses of logrus
    dbb4d54e01 c8d: Add image save events
    09470db089 c8d: Add image pull events
    1847dc4b7f c8d: Add image push events
    1148a24e64 migrate to new github.com/distribution/reference module
    dffccfd0f1 integration-cli/build: Alias `cmp` as `is`
    5dbd198b53 integration-cli/build: Parse multiline `images -q` output
    96516002cc c8d: Print the tag, digest and size after push
    417328e44e libnetwork/osl: remove dead code
    237eb3b5f1 docs(api): rephrase description for /images/create
    0ffa3dd870 daemon/c8d: Use Docker imagespec
    14af90b868 c8d/integration/TestBuildOnBuildCache skip parent check
    366a5f1d74 image/spec: Add Go structs
    536826d66f image/spec: Add Healthcheck.StartInterval (v1.3)
    75097cf09a test: remove platform related timeout values
    6dd78a9ac2 image/spec: Fix typo in "superseded"
    84a4f37cf7 test: use info from the version endpoint for arch checks
    159b168eea test/integration: Remove checks for "not arm" in tests
    ebb9fade23 makefile: use info -f to get the current storage driver
    c243efb0cd client: TestImageTagInvalidSourceImageName remove invalid test-case
    3a4a04e462 distribution: simplify mocks
    d864d1eb97 image/spec: add back versioned files
    b8de6c01b5 image/spec: rename v1.2.md to spec.md
    c3f2bd1009 image/spec: rename v1.1.md to spec.md
    7ff38506ab image/spec: rename v1.0.md to spec.md
    32d5e6312d image/spec: use permalink to versioned documents
    7b7019a4da image/spec: add missing "Shell" field (v1.2)
    5380f3f0c4 image/spec: add missing "ArgsEscaped" field (v1.1, v1.2)
    f33370219b image/spec: add missing "OnBuild" field
    e19edd3f25 image/spec: minor fixes and touch-ups in markdown files
    b9f9e20f01 daemon: Daemon.killWithSignal(): don't discard snapshotting errors
    af535233cc daemon: Daemon.killWithSignal(): don't discard handleContainerExit error
    8c6a46f643 libnetwork: Endpoint.AddStaticRoute don't create StaticRoute if unused
    1dcb11f81d libnetwork: Endpoint.InterfaceName: remove redundant nil check
    a9a0ffaf51 testing: update docker-py 6.1.3
    f6959bc597 test-docker-py: skip AttachContainerTest::test_run_container_reading_socket_ws
    e0f171f342 testing: update docker-py 6.0.1
    79a0f82ca1 test-docker-py: remove comment about docker 17.06 limitations
    be90e5e1d4 libnetwork: Controller.addServiceBinding: fix duplicate word in comment
    77c2613d3a libnetwork: fix some missing imports on macOS and FreeBSD
    5da2dd98e9 registry: move search-related code to separate files
    f1a7028900 registry: rename v1-endpoint tests to have a common prefix
    19f6f0b3db registry: move v1 endpoint tests to endpoint_test.go
    47bf587f84 registry: ResolveAuthConfig: rename var that collided with import
    a0a8d9d057 libnetwork: notify another driver registerer
    2689484402 volume/local: Don't unmount, restore mounted status
    f1a6e16258 errdefs: remove redundant import comments
    b6ba2a4f75 errdefs: remove gotest.tools dependency
    3f8cbd8ec9 registry: update some godoc
    e10eca3d1a daemon/containerd: rename some vars that collided with imports
    aefbd49038 daemon/containerd: newROLayerForImage: remove unused args
    28d201feb7 daemon/containerd: log errors when releasing leases
    d43e61758a registry: deprecate APIEndpoint.Version and APIVersion type
    aef703fa1b integration/liveRestore: Check volume content
    4e4f62b6db distribution: use registry consts for API version in tests
    aa59b0f5a2 registry: improve error for invalid search endpoints
    14b53c6318 registry: simplify `trimV1Address`
    062c80199f registry: combine TestEndpointParse and TestEndpointParseInvalid
    0f871f8cb7 api/types/events: define "Action" type and consts
    10a3a3bc49 daemon: inline some variables when emitting events
    9331d6de1e daemon/events; fix TestLoadBufferedEventsOnlyFromPast
    f6f6c32138 api: ValidateRestartPolicy: improve errors for invalid policies
    333e04e84e integration-cli: TestEventsFormat: rewrite test to not use deprecated fields
    fa79b5d59f integration/container: TestPause: don't depend on deprecated fields
    0161aad462 client: TestEvents: don't depend on deprecated fields
    5123ae4352 daemon: TestLogContainerEventCopyLabels: inline vars
    2928c5ae92 daemon: TestHealthStates: don't depend on deprecated fields
    62ec14d9ec daemon/events: verify non-deprecated fields
    f443006fa2 daemon/events: rewrite test-assertions with gotest.tools
    70ad5b818f api/types/events: make events.Type an actual type
    5a02ed5e84 integration: use events-consts in tests
    9ea50365d6 daemon/events: use events-consts in tests, and fix vars that collided
    2f8e957713 Dockerfile: update crun binary to v1.8.7
    32e79c464a libnetwork: Network: return early where possible
    5512c7e838 libnetwork: Network.Services: remove some intermediate vars
    d6b8298cfd libnetwork: Network.Services: return early and don't lock in a loop
    8b21609654 libnetwork: remove Endpoint.Interface
    f8181b8875 libnetwork: Endpoint.Iface, Endpoint.Interface remove redundant "if"
    6a61bacafe libnetwork/drivers/remote: rollbackEndpoint.Interface: return concrete type
    dc061d2ed3 libnetwork/drivers/remote: driver.DeleteNetwork: remove var that collided
    40b1389917 libnetwork/drivers/remote: remove unused testEndpoint.Interface
    15435f7293 libnetwork/drivers/bridge: testEndpoint.Interface: return concrete type
    9afb688f5f libnetwork/drivers/bridge: getIPv4Data: remove unused argument
    639449f84e libnetwork: nwAgent.bindAddr: change to net.IP
    b75e831567 libnetwork: resolveAddr: add GoDoc
    ebe2347ac6 daemon: remove LogPluginEventWithAttributes as it's not used
    aa764e6009 daemon: logNetworkEvent, logSecretEvent, logConfigEvent rm unused args
    fa13b0715f integration/internal/swarm: rename max/min as it collides with go1.21 builtin
    79495c5b6a pkg/tailfile: rename max/min as it collides with go1.21 builtin
    df2f25a977 pkg/plugins: rename max/min as it collides with go1.21 builtin
    6c036f267f pkg/sysinfo: rename max/min as it collides with go1.21 builtin
    55192de9e3 pkg/archive: rename max/min as it collides with go1.21 builtin
    a3867992b7 daemon: rename max/min as it collides with go1.21 builtin
    f6b2e34268 Update example in README.md to close cli object
    318b3d4fe5 api/types/versions: rename max/min as it collides with go1.21 builtin
    cb394a62e5 restartmanager: rename max/min as it collides with go1.21 builtin
    8f64e2e925 daemon: daemon.logClusterEvent: use events.Type for event-types
    3dea2f230a daemon: inline some vars when producing events
    385f6429be api/server/router/network: remove empty file
    350223201e integration/container: TestCheckpoint: remove intermediate vars
    b688af2226 api/types: move checkpoint-types to api/types/checkpoint
    70baaec6a5 Dockerfile: remove libdevmapper-dev
    12d1f4f385 hack: remove devicemapper leftovers and build-tags
    f6a5318f94 Dockerfile: Windows: update Golang download domains to cut down redirects
    2aabd64477 hack: update link to GOPATH documentation
    b18e170631 CONTRIBUTING.md: update links to golang docs and blog
    136e86bb5c api: swagger: update link to Go documentation
    4862d39144 docs/api: update links to Go documentation
    cd49f9affd update golangci-lint to v1.54.2
    d52f20048d api/server: format code with gofumpt
    e9b09b49fd builder/builder-next: format code with gofumpt
    73894af9ff contrib/apparmor: format code with gofumpt
    ce01d779df daemon: format code with gofumpt
    211d3a8c32 pkg/stack: format code with gofumpt
    95e99e629c pkg/fileutils: format code with gofumpt
    6c6e1fb13d pkg/containerfs: format code with gofumpt
    1e579a7a2a pkg/sysinfo: format code with gofumpt
    263c00f27c testutil: format code with gofumpt
    b71951c70c container: format code with gofumpt
    87cedbe443 image: format code with gofumpt
    976da91fb7 pkg/loopback: format code with gofumpt
    b4d6eca9b8 pkg/chrootarchive: format code with gofumpt
    07e6b0ac70 integration: format code with gofumpt
    498da44aab remove some remaining pre-go1.17 build-tags
    210abfaef6 libnetwork: add godoc to Endpoint
    04422f5ec1 daemon: WithNamespaces(): add notes about user-namespaces
    dd26e6b15e daemon: Daemon.getIpcContainer: make errors less repetitive
    3d94eb9bcd daemon: Daemon.getPidContainer: change to accept "id" argument
    bc7f341f29 daemon: WithNamespaces(): fix incorrect error for PID, IPC namespace
    bd5d6480e7 daemon: WithNamespaces(): remove redundant "if"
    6eaefe5bf5 daemon: WithNamespaces(): use switch instead of if/else if/else
    43aa67a982 daemon: WithNamespaces(): use OCI-spec consts for namespaces
    759698581e daemon: WithNamespaces(): inline variables
    13648a0e21 daemon: remove Daemon.checkContainer and related utils
    78828f9b58 test/integration: Download the registry binary
    bd2c553870 Fix some broken executable flags
    143b3b2ef3 test: update registry version to latest
    01214bafd2 c8d/builder: Don't drop fields from created image
    b92cf68add libnetwork/osl: remove Sandbox and Info interfaces
    c881360e88 libnetwork/osl: remove Interface.Master() as it's unused
    b9bf407929 libnetwork/osl: remove Interface Interface
    8631e69cdf libnetwork/osl: remove Sandbox.InterfaceOptions() etc.
    f3d29db6a2 libnetwork/osl: remove Sandbox.NeighborOptions() etc.
    a365fb0e9d libnetwork: move more osl.Sandbox related code to Linux-only files
    95abde479a libnetwork: implement Controller.setupOSLSandbox
    35456d2eb1 libnetwork/osl: add godoc to networkNamespace
    aecfa55c4c libnetwork/iptables: (Add|Del)InterfaceFirewalld: check firewalld status
    4b0d38de06 TestDiskUsage: don't panic if results don't match
    c0568a95d8 integration/container: check some error-types in tests
    2b583c0923 daemon: cleanupContainer: slightly cleanup error messages
    69cf2ad6a5 daemon: cleanupContainer: don't fail if container is already stopped
    20b770237c daemon/network: Settings: move sandbox fields together
    405f571ae8 daemon: updateSandboxNetworkSettings: remove unused error-return
    2eccf0e8d1 libnetwork: Controller.NewSandbox: don't generate ID if not used
    6cbe06ff3f test: Skip graph driver tests when using containerd snapshotters
    3553b4c684 replace dockerfile/dockerignore with patternmatcher/ignorefile
    a479b287c7 vendor: github.com/moby/patternmatcher v0.6.0
    bedcc94de4 daemon: Handle NotFound when deleting container lease
    dfaff9598c c8d/run: Allow running container without image
    eb56493f4e c8d/commit: Don't produce an empty layer
    3e8af0817a ipam: Replace ChildSubnet with parent Subnet when its mask is bigger
    4f47013feb api: Validate IPAM config before creating a network
    2be118379e api/types/container: add RestartPolicyMode type and enum
    b8ff8ea58e Don't return an error if the lease is not found
    dff53a02ef libnetwork: remove Controller.Sandboxes as it's no longer used
    d6f340e784 gha: set 10-minute timeout on "report" actions
    f44fbab3ec libnetwork: remove Controller.WalkSandboxes and related code
    6dba98cf38 libnetwork: implement Controller.GetSandbox(containerID)
    6c4153f348 libnetwork: parallelTester: move vars closer to where they're used
    e690cdb6a3 libnetwork: remove redundant sandboxTable type
    3c10db669e libnetwork: remove unused SandboxKeyWalker
    cc414a2012 libnetwork/osl: remove Sandbox.Info()
    3b9f4395cf libnetwork: remove InterfaceInfo interface
    d146e592d8 api/t/network: Move IPAM types to their own file
    219d4d9db9 ci(bin-image): check repo origin
    d125823d3f hack: use long SHA for DOCKER_GITCOMMIT
    2010f4338e ci(bin-image): clean up metadata
    ad91fc1b00 ci(bin-image): clean up env var handling
    5dc44f03f0 classic builder: align "removing intermediate container" output
    06e540c271 libnetwork: move all SandboxOptions to a separate file
    2afa4eba43 libnetwork: resolver: Resolver.dialExtDNS use joinHostPort and cleanup
    3218e26a22 libnetwork: resolver: remove some intermediate variables
    986de11464 libnetwork: resolver: remove setCommonFlags, use createRespMsg
    7f965d55c7 volume/local: Fix debug log typo
    678ce73907 windows: update default base image for dev container
    0c522c6bbf libnetwork/datastore: remove deprecated scope consts
    73ffb48bfb ci(bin-image): populate DOCKER_GITCOMMIT, take 2
    9aed6308d4 ci(bin-image): populate DOCKER_GITCOMMIT
    c22ec82477 libnet: Fix error capitalization
    bd0111c1f4 libnet: Replace NoServiceError with UnavailableError
    42d34e40f9 libnet: Replace BadRequest with InvalidParameter
    a64adda4e7 c8d/inspect: Ignore manifest with missing config
    c85a33d74b libnetwork/iptables: un-export ZoneSettings, and slight refactor
    d979d2af45 libnetwork/iptables: fix TestFirewalldInit
    513063bcf9 libnetwork/iptables: ProgramChain: don't fail if interface not found
    64de635626 Add a temporary drop-in replacement for errors.Join
    cff341e5e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230815220644-3f2e40b3ed51
    56b62640a2 libnetwork: Controller.NewSandbox: use named error-return
    cbe692ffd1 libnetwork: Controller.NewNetwork: use named error-return
    e2f9d6c4c3 libnetwork: rename vars that collided with builtins
    e8f0f5a4ce libnetwork: rename agent type to reduce collisions
    0503cf2510 libnetwork/drivers/bridge: setupIPChains(): name output variables
    b9d9504df5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230808164555-1983e41a9fff
    7b66ae1531 vendor: golang.org/x/crypto v0.3.0
    59aa3dce8a remove s390x and ppc64ls pipelines
    ea2d686468 libnetwork/iptables: DeleteConntrackEntries: remove "totals" returns
    f1240393d9 libnetwork/iptables: reduce DeleteConntrackEntriesXX debug logs
    18a0ff2b2b daemon: Daemon.handleContainerExit(): rename err-var for clarity
    178125ae39 libcontainerd/supervisor: explicitly ignore process kill errors
    f8363690ca daemon: Daemon.handleContainerExit(): reduce ambiguity in error handling
    72648f0ba6 oci: DefaultLinuxSpec: use OCI-spec consts for namespaces
    17571ff199 integration/internal/container: add WithPIDMode option
    917dae58e1 integration/internal/container: remove import aliases
    e0f5bb4820 daemon: withLibnetwork(): return early if networking is disabled
    225691e258 daemon: withLibnetwork(): use OCI-spec consts for namespaces
    8376595621 libnetwork: un-export SetExternalKey
    91a3a95385 libnetwork/options: OptionExecRoot: skip osl.SetBasePath on non-Linux
    48ea7ec970 libnetwork/osl: use filepath.Join() only when changing basedir
    8bf62010a4 libnetwork: merge linux-only test-files
    c0562d4eed libnetwork: rename unix-only testfiles
    8070f15966 libnetwork/drivers/bridge: rename some linux-only files
    014fefee1d libnetwork/drivers/bridge: minor formatting fixes
    80d158e0de daemon: remove containerNotModifiedError
    dffe634c19 daemon: Daemon.ContainerStart(): make validateState a regular function
    6da42ca830 c8d/diff: Reuse mount, mount parent as read-only
    051d51b222 c8d/export: Use ref counted mounter
    303e2b124e integration: Add test for not breaking overlayfs
    05deecaa45 internal/testutils/netnsutils: move utils that were not used on Windows
    d4e1c072e2 libnetwork: move resolverIPSandbox closer to where it's used
    f661bd8ee5 libnetwork: Resolved.SetupFunc() minor cleanup
    de4ba13400 libnetwork: move resolver tests that were skipped on Windows
    1e4e9161c5 libnetwork: move TestDNSOptions to a non-windows file
    bf1fb97575 daemon: Daemon.containerStart(): add comment to clarify error-type
    b039bbc678 update runc binary to v1.1.9
    79b467808e vendor.mod: github.com/opencontainers/runc v1.1.9
    74feadacf8 integration/internal/container: refactor CreateExpectingErr
    0899ba4a3f integration/internal/container: add NewTestConfig utility
    3cb52a6359 integration/internal/container: use consistent name for api-client
    26be2bc6b9 integration/container: use consistent name for api-client
    38e26c4717 daemon/create.go: Fix error capitalization
    435ecfe6e0 test/volume: Replace Check with NilError where suitable
    3d3ce9812f integration/tag: Move to client unit test
    742475bc8d daemon/create.go: Supersede github.com/pkg/errors
    4cc796ab93 client: Client.buildRequest: use http.NewRequestWithContext
    58dc0fcd1e client: Client.Ping: re-use request when falling back to GET
    87fff769f4 client: Client.checkResponseErr: change errorMessage to an error
    71da8c13e1 integration/tag: Use subtests and make parallel
    11a0c2779b pkg/plugins: Rewrite with assert.Check
    43956e1b71 hack/test: Don't exit early when all tests are filtered out
    ae008570ff hack/test: Split -test.run for integration and integration-cli
    510cac5f5b hack/test: Fix checking if integration-cli are filtered out
    8a1ca49657 libnetwork/osl: nwIface: add godoc
    16785b9b7b libnetwork/osl: move all networkNamespace methods together
    5b0fa7aaca libnetwork/osl: some minor nits
    972d80b596 libnetwork/osl: clean up newInfo() a bit
    0da721ec38 libnetwork/osl: make newKey and newInfo a t.Helper()
    d9442aab88 libnetwork/osl: nwIface: remove mutex altogether
    2afe18d2ce libnetwork/osl: nwIface: unexport sync.Mutex
    8b989ac665 libnetwork/osl: let's not do this, etc.
    3d0a7d819c libnetwork: remove Network.Info() and remove NetworkInfo interface
    74354043ff remove uses of libnetwork/Network.Info()
    36a0946aa9 libnet/ipamapi: Remove unused errors
    fd4ec26313 daemon/network.go: Fix error capitalization
    64e01c627f daemon/network.go: Remove github.com/pkg/errors pkg
    94dc10378d libnetwork: network.requestPoolHelper: slightly optimize order of checks
    67e2c1d482 libnetwork: network.requestPoolHelper: remove dead code
    ad68883c5a libnetwork: network.requestPoolHelper: don't defer in a loop
    32fcde6d9e libnetwork: network.IpamConfig, network.IpamInfo: name output vars
    df03357d19 libnetwork/ipam: move PoolID.FromString() to a PoolIDFromString() func
    808fed550d libnetwork/ipam: PoolID.String(): don't use fmt.Sprintf
    87fc8c772b libnetwork/ipam: Allocator.RequestPool: name args, output vars
    6dbc9c1c53 libnetwork/ipam: Allocator.RequestPool: mark options arg as unused
    7047964bd6 libnetwork/ipam: Allocator.RequestPool: make parseErr only handle errors
    821ef5cbaf libnetwork/ipams/null: use consts for fixed values
    05ef5559c3 pkg/plugins: override timeouts during tests
    6841a53d17 hack/test: Don't fail-fast before integration-cli
    2aa24519da ibnetwork/drivers/bridge: newLink: validate before creating
    5d722b35d9 libnetwork/drivers/bridge: bridgeNetwork.getEndpoint(): move lock
    eba15fe905 libnetwork/drivers/bridge: driver.link: don't defer in a loop
    76b736c242 libnetwork/drivers/bridge: driver.link: name return var for defer handling
    ea5f21ceac libnetwork/drivers/bridge: don't convert IP to string and back again
    8b6203b613 libnetwork/drivers/bridge: link.Enable: don't register reload on error
    0f4ba145ee libnetwork/drivers/bridge: link.Enable, link.Disable use iptables.Action
    40adb4317b api: Remove duplicated check on CheckDuplicate
    3e52785aae volume/drivers: use plugin Content-Type headers v1.2
    481dde8b70 libnetwork: use plugin Content-Type headers v1.2
    93b5c31541 integration-cli: use plugin Content-Type headers v1.2
    b663c7c5c3 pkg/plugins: add convenience alias for VersionMimeType
    c8930105bc fix: Normalize `RLIMIT_NOFILE` to sensible defaults
    4f9540f19f daemon: remove some intermediate vars and some cleanup
    8153a7760e daemon: Daemon.tryDetachContainerFromClusterNetwork: cleanup
    a018bb1da7 daemon: Daemon.initializeNetworking: remove var declaration
    12d8029d56 daemon: Daemon.getNetworkedContainer: remove intermediate var
    d1aa1979b4 daemon: buildEndpointInfo: minor refactor
    7a59913b1a Add CDISpecDirs to Info output
    0034a98eb1 pkg/plugins: Guard storage and unparallel racy tests
    bbb9255562 Skip CDI driver registration if CDISpecDirs is empty
    3b71197fb8 Set default CDI spec dirs after parsing args
    f3e62199ea daemon: Remove unneeded error wrapping in verifyNetworkingConfig
    d7a9f15775 bakefile: Remove default value of DOCKER_GITCOMMIT
    2b028dc55b daemon: Daemon.buildSandboxOptions: use range when looping
    33b4285eb1 daemon: Daemon.buildSandboxOptions: don't use PortBinding.GetCopy()
    ddb3d46533 daemon: Daemon.buildSandboxOptions: remove intermediate vars
    27a27db73f daemon: Daemon.buildSandboxOptions: move vars to where they're used
    91cab53a3e libnetwork: make OptionDNS, OptionDNSOptions, OptionDNSSearch take a slice
    2cbed9d2a8 daemon: inline Daemon.getDNSSearchSettings
    603547fa19 daemon: change Daemon.setupPathsAndSandboxOptions to a regular func
    07f2df69c7 daemon: buildCreateEndpointOptions: minor nits
    5158a33f15 daemon: buildCreateEndpointOptions: use range when looping
    1c6dae1291 daemon: buildCreateEndpointOptions: don't use PortBinding.GetCopy()
    cc79024761 daemon: buildCreateEndpointOptions: remove intermediate vars
    45de99aa06 daemon: buildCreateEndpointOptions: don't parse empty vip
    7d429125d2 daemon: buildCreateEndpointOptions: move vars to where they're used
    6ce92aa523 daemon: buildCreateEndpointOptions: skip getPortMapInfo() if not needed
    9e9a17950a daemon: FindNetwork: minor cleanups
    8c4af5dacb distribution: show image schema deprecation on all registries
    982bc0e228 distribution: update warning for deprecated image formats
    5bd8aa5246 integration: Add RunAttach helper
    d7fb4dd170 integration: Extract stream demultiplexing from container.Exec
    584f016e99 docs/api: remove stray underscore in version-history.md
    d5cb7cdeae update to go1.20.7
    fced566714 client: move resolveTLSConfig to a Client.tlsConfig()
    47af265234 client: Dialer: inline fallbackDial
    74d9850bb9 client/buildkit: ClientOpts: update docs to use doc-links, and inline
    971083d419 api: search: deprecate is_automated field, and is-automated filter
    5e2a1195d7 swap logrus types for their containerd/logs aliases
    1a51898d2e TestDaemonProxy: use new scanners to check logs
    476e788090 Fix daemon proxy test for "reload sanitized"
    e2d400bea9 libnet/d/bridge: Inline InvalidLinkIPAddrError
    6df4a00bb9 libnet/d/bridge: Remove pointless BadRequestError impl
    7c13985fa1 libnet/d/bridge: Inline InvalidIPTablesCfgError
    d8f42ee21a libnet/d/bridge: Inline IPTableCfgError
    a40d00c421 libnetwork: remove ErrDataStoreNotInitialized
    66b379785e libnetwork: remove unused InvalidContainerIDError
    d8cd4f6421 libnetwork: remove unused UnknownEndpointError
    fc5c16f491 libnetwork: remove unused NetworkTypeError
    e9f1888560 libnetwork: remove unused ErrInvalidConfigFile
    eadaaa7f79 libnetwork: remove unused ErrNoContainer
    99ab11bb90 libnetwork: remove unused ErrInvalidJoin
    9174eb00e2 libnetwork: remove unused ErrInvalidNetworkDriver
    7c2665298a libnetwork/types: move GetMinimalIP to overlay-driver and un-export
    d9b7a5f01a libnetwork/types: remove ErrInvalidProtocolBinding
    4445169cb5 libnetwork/types: remove PortBinding.Equal
    4269712d06 libnetwork/types: remove unused UUID type
    c203171ef6 libnetwork/types: remove unused RetryError and TimeoutError
    6d37ab0a83 libnet/d/bridge: Change interface implemented by error types
    03db2f8c3d libnet/d/bridge: Remove unused error types
    8197752d68 TestDaemonProxy: check proxy settings early
    4d674897f3 vendor: github.com/containerd/containerd v1.6.22
    5438356348 libnetwork: rename vars that collided with builtin and type
    ce053a14aa vendor: gotest.tools/v3 v3.5.0
    be0f4a4737 libnetwork/driver: remove discoverAPI from Windows and Windows overlay
    6ec03d6745 libnetwork: move datastore Scope consts to libnetwork/scope
    86299bbd35 vendor: github.com/opencontainers/image-spec v1.1.0-rc4
    fca38bcd0a libnetwork/driverapi: make discoverAPI an optional part of the interface
    490fee7d45 api/types/filters: fix errors not being matched by errors.Is()
    bf48d3ec29 update containerd binary to v1.7.3
    a78381c399 update containerd binary to v1.7.2
    0d76fc431a libnetwork/remote: newDriver(): return concrete type
    3e8fda0a70 windows: fix --register-service when executed from within binary directory
    d69b1fdb72 volume/mounts: cleanup tests
    da9e44a620 libnet/d/bridge: Allow IPv6 ICC from any IP address
    31d09f6ee9 testutils: move Logger interface to testutils
    492c09276d tests: Move libnetwork/testutils to internal/testutils/netnsutils
    13180c1c49 daemon/list: Drop unused arg from containerReducer
    68991ae240 daemon/list: Refactor refreshImage
    e5cffc07b3 c8d: Fix TestImagesFilterMultiReference
    1d8108b009 c8d: images/json, add image labels to the response
    a0bba26919 c8d: Populate RepoTags instead of adding a new image to the list
    ad2760ec80 integration: Move image filter tests to integration
    4d8e3f54cc c8d/container: Follow snapshot parents for size calculation
    5a39bee635 daemon/list: Replace ErrImageDoesNotExist check
    7379d18018 c8d/readConfig: Translate c8d NotFound to errdefs
    f3b76bc1da daemon: refactor buildNetworkResource to use a struct-literal
    a8c0b05052 daemon: split buildDetailedNetworkResources into two functions
    8caf974dcd daemon: refactor buildEndpointResource
    437ced91ec daemon: refactor buildIpamResources
    ca5ac19ea4 daemon: refactor buildPeerInfoResources
    02dc5ea720 libnetwork/datastore: remove Store.KVStore()
    0f7bf67f83 pkg/plugins: TestGet(): use sub-tests
    e1ad4aa002 pkg/plugins: make package-level socketsPath var a LocalRegistry field
    5bd44cf3c4 pkg/plugins: remove "load()" function
    77c03221c9 pkg/plugins/transport: remove RequestFactory interface
    d12ec5f796 pkg/plugins/transport: remove unused Transport interface
    dfd331b2c8 pkg/plugins/transport: export httpTransport, and return concrete type
    77103c7c03 pkg/plugins/transport: inline newHTTPRequest
    4af4adc7ba pkg/plugins: remove LocalRegistry.SpecsPaths()
    a44c25c2f1 pkg/plugins: split exported from implementation
    954d50b88a plg/plugins: rename vars that collided, or poorly cased
    20889dbac6 pkg/plugins: move Plugin.ScopedPath to platform-agnostic file
    a5ee0d6af8 libnetwork: don't access KVStore directly in tests
    b378669836 libnetwork/datastore: don't access KVStore directly in tests
    65978e6982 libnetwork/datastore: cleanup tests
    478f4aed63 libnetwork/datastore: ScopeCfg.IsValid(): un-wrap conditions
    37cbdeb1f2 libnetwork: remove most of kvstore
    d713b7ed45 api/server/router/network: remove unused Backend.FindNetwork
    1bc7a2aacd daemon/containerd: ImageService. LoadImage fix stray slash in comment
    126a089382 vendor: github.com/opencontainers/runtime-spec v1.1.0
    42fa7a1951 Integration test for capabilities
    5ef9e2632f libnetwork/datastore: prevent data races in Key()
    48cc28e4ef hack/integration: Add TEST_INTEGRATION_FAIL_FAST
    f70e1b315f libnetwork/datastore: remove unused ParseKey() utility
    704a19b25d libnetwork/datastore: remove DataStore interface
    d5b1e43b8f libnetwork/datastore: move MockData to a _test file
    0ec73a7892 vendor: github.com/moby/buildkit v0.11.7-dev
    64c6f72988 libnetwork: remove Network interface
    edafcb2c39 libnetwork/iptables: un-export ErrConntrackNotConfigurable, IsConntrackProgrammable
    e57b807a42 libnetwork: Controller.NewNetwork: inline arrangeUserFilterRule()
    be8ff186d6 libnetwork: refactor TestErrorInterfaces into a test
    9484520327 libnetwork: arrangeUserFilterRule: don't return early
    a5f45b47a3 libnetwork: Controller: combine iptablesEnabled and ip6tablesEnabled
    483a1933a2 volume: remove the short RRO forms in favor of the long forms
    5da84141c4 vendor: github.com/prometheus/common v0.42.0
    44ab4d44e0 vendor: github.com/prometheus/procfs v0.9.0
    6791b8051a vendor: github.com/felixge/httpsnoop v1.0.3
    9d3590f375 vendor: github.com/Microsoft/go-winio v0.6.1
    35d180126a vendor: google.golang.org/protobuf v1.30.0
    b835c28383 vendor: golang.org/x/oauth2 v0.6.0
    3cfc1ffb0a pkg/ioutils: some cleanups in tests
    df86d855f5 Dockerfile: update runc binary to v1.1.8
    f5e64a9eaa vendor: github.com/containerd/stargz-snapshotter/estargz v0.14.3
    d431345bf3 vendor: google.golang.org/protobuf v1.29.1
    30916df3d3 vendor: github.com/containerd/ttrpc v1.2.2
    4f4dd2d995 vendor: github.com/containerd/go-cni v1.1.9
    287130a254 vendor: github.com/cenkalti/backoff/v4 v4.2.0
    7145129f27 vendor: k8s.io/klog/v2 v2.90.1
    410a52b763 vendor: github.com/fsnotify/fsnotify v1.6.0
    741c28ae9f vendor: github.com/containerd/cgroups v1.1.0
    e84b72710b vendor: github.com/aws/aws-sdk-go-v2/config v1.18.16
    e235763a38 vendor: github.com/aws/aws-sdk-go-v2/credentials v1.13.16
    4c30bf1667 vendor: github.com/aws/aws-sdk-go-v2 v1.17.6
    cb53ce9f89 vendor: github.com/aws/smithy-go v1.13.5
    f463e50719 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1
    359ab384fd vendor: google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4
    b11bdb9212 vendor: cloud.google.com/go/logging v1.7.0
    64609120d8 vendor: github.com/googleapis/gax-go/v2 v2.7.0
    2990defea7 vendor: go.opencensus.io v0.24.0
    d7aa47ddb8 vendor: github.com/googleapis/enterprise-certificate-proxy v0.2.3
    296040b1f4 vendor: github.com/cespare/xxhash/v2 v2.2.0
    033f882314 vendor: golang.org/x/oauth2 v0.5.0
    b615d195b2 vendor: github.com/golang/protobuf v1.5.3
    c5c8f433e6 vendor: github.com/containerd/typeurl/v2 v2.1.1
    2659f7f740 c8d/inspect: Include platform Variant
    a8fd1e3135 Dockerfile: update compose to v2.20.1
    d78893921a Dockerfile: update buildx to v0.11.2
    f3a6b0fd08 c8d: Make sure the content isn't removed while we export
    6cba44277f AUTHORS,.mailmap: update with recent contributors
    8b843732b3 pkg/chrootarchive: fix FreeBSD build
    eaf141c86a c8d/resolveImage: Fix Digested and Named reference
    028eab9ebb c8d/inspect: Don't duplicate digested ref
    7310a7cd0c ci(buildkit): remove early-return from buildkit-ref
    4ecc01f3ad ci(buildkit): remove misleading code from buildkit-ref
    48ff8a95cc hack/with-go-mod.sh: warn on stderr
    750c441dfd daemon: remove intermediate var
    468d6616bf daemon: configureLocalContentStore: return concrete types
    375c4eb31c daemon: rename vars that shadowed package-level types
    034e7e153f daemon: rename containerdCli to containerdClient
    1aa17222e7 quota: remove gotest.tools from testhelpers
    a972dbd682 hack/make/.binary: use with-go-mod.sh
    5563b09ac2 hack: use Git-free ROOTDIR convention
    780e8b2332 hack/d/cli.sh: properly handle errors in curl
    12a19dcd84 Dockerfile: improve CLI/rootlesskit caching
    235cd6c6b2 Dockerfile(.simple): align APT_MIRROR support
    bcea83ab9b Makefile: pass through APT_MIRROR
    f8c0d92a22 ci: extract buildkit version correctly with replace-d modules
    010c3718e3 vendor: github.com/tonistiigi/fsutil v0.0.0-20230629203738-36ef4d8c0dbb
    531dbd7af5 vendor: github.com/containerd/continuity v0.4.1
    eb68c5e747 daemon: support using CIDR notation for getting registry hosts
    e0b065cc33 daemon: use the registry service config for getting registry hosts
    2da589d454 client: return explicit "nil" for no errors, and remove nil check
    738b16d873 libnetwork/config: add Config.DriverConfig() and un-export DriverCfg
    82bb3d8d2b libnetwork: TestUserChain: use assert.Check and is.ErrorContains
    4e709e75da libnetwork: TestUserChain: re-use IPTables instances
    c471255153 libnetwork: TestUserChain: don't manually manipulate Controller.cfg.DriverCfg
    ddd33c6bbd libnetwork/iptables: move IPTable.LoopbackByVersion() to a utility
    aad2dbb93d libnetwork/iptables: GetIptable: validate provided IPversion
    47063ca3ae libnetwork/iptables: un-export IPTable.Version
    9c2cd65c0d libnetwork/iptables: make some vars local, and move bestEffortLock lock
    93d050f504 libnetwork/iptables: NewChain, RemoveExistingChain: validate chain, table
    ad0c928ab5 libnetwork/iptables: resetIptables(): don't pass empty table name
    1198fe8f6b libnetwork/iptables: un-export FirewalldInit
    20900b76f9 libnetwork/iptables: make xLockWaitMsg a const
    995da1e51d libnetwork/iptables: group "enum" consts per type
    c74a083672 libnetwork/iptables: IPTable.ExistChain(): remove redundant if/else
    9f9d57590b libnetwork: getTestEnv(): use literals for options
    534858aaed libnetwork/drivers: rewrite some strings to reduce quote-escaping
    7c360778bb libnetwork/drivers/bridge: driver.configure: remove redundant err-check
    e21ff6c0c9 libnetwork/config: remove IsValidName utility
    948f55d0b7 libnetwork/options: remove unused NewGeneric, and use map[string]any
    fa5c13542c libnetwork/drivers/bridge: setupBridgeNetFiltering: improve error handling
    077049d0b9 client: WithTLSClientConfig: return early if no transport is set
    6846c63252 client: WithTLSClientConfig, WithTLSClientConfigFromEnv: inline vars
    9d1e690751 client: TestGetAPIPath: don't use un-keyed structs
    6552441b46 client: TestClientRedirect: cleanup
    8d514f4e2e client: touch-up docs, and user doc-links
    c219b09d4a client: Client.postHijacked: use Client.buildRequest
    e11555218b client: Client.setupHijackConn: explicitly ignore errors
    41f235a2f8 gha: add note about buildkit using older go version
    1ead2dd35d update go to go1.20.6
    e1db9e9848 testutil: use dummyhost for non-tcp connections
    6b7705d5b2 pkg/plugins: use a dummy hostname for local connections
    92975f0c11 client: define a "dummy" hostname to use for local connections
    2a59188760 client: TestSetHostHeader: don't use un-keyed literals
    f93cfb2e31 Support for health start interval to swarm mode
    16e6d8af55 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5
    79c72390b9 integration/container: use subtests for TestAttach
    f9e2eed55d integration: Don't env cleanup before parallel subtests
    cdac084fb4 Add t.Helper() to the cli test helper functions
    c395496e06 testutil: rename variable that collided with import
    1370b3c679 client: minor test improvements for requests
    f7f0a17ea2 client: TestSetHostHeader: use sub-tests
    2cb982b506 pkg/plugins: run tests with t.Parallel()
    b39362295a pkg/plugins: don't share plugin server between tests
    ee9fe2c838 ci(buildkit): match moby go version for buildkit tests
    3379414c76 vendor: github.com/moby/buildkit@v0.11 (0a15675)
    5e4878ed2b Dockerfile/shell: install compose cli plugin
    ecfa4f5866 ci(bin-image): add SHA-based tags
    ce2e6b5cda Bump container-device-interface dependency to v0.6.0
    0a126a85a4 ci(bin-image): fix meta step
    749d7449f9 ci(bin-image): fix typo
    1686540594 ci(bin-image): don't set tags when pushing by digest
    83477ce8d0 client: remove custom "headers" type, and use "http.Header" instead
    e4ce676d3d client: ServiceCreate, ServiceUpdate: omit "version" header on API >= 1.30
    d29240d9eb libnet: Return a 403 when overlay network isn't allowed
    21dcbada2d libnet: Return proper error when overlay network can't be created
    93853eca94 pkg/fileutils: GetTotalUsedFds(): slight optimization for macOS
    c5c977855d registry: session.searchRepositories(): return typed error, and small cleanup
    68ebfa2f18 registry: session.searchRepositories(): log actual search URL
    27698f1d13 registry: ParseSearchIndexInfo: remove redundant error-handling
    a0e1155b28 daemon/containerd: fix assignment to entry in nil map during commit
    6b1b71ced4 Disable tls when launching dockerd through hack/make.sh
    079a9d4562 Sort unconsumed build arguments before usage
    41261ea4ec ci: push bin image to Docker Hub
    5b3acc15d1 libnetwork: drop legacy driver cruft
    f9a83daebb libnetwork: delete package bitseq
    8b167535db libnetwork: delete package idm
    7366e44019 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05
    a490248f4d daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume
    c90229ed9a api/types: move system info types to api/types/system
    3aef732e61 Do not drop effective&permitted set
    d519bde5da libnet/drivers: stop passing config to drivers...
    1980deffae libn: refactor platform driver registration
    c87c4b5bbf Add Albin Kerouanton (@akerouanton) as maintainer
    0066138379 Add Kevin Alvarez (@crazy-max) as maintainer
    d8056ddecd Add Laura Brehm (@laurazard) as maintainer
    2216d3ca8d Add health start interval
    2ab2503b6c Put integration daemon socket in /run
    914888cf8b Improve test daemon logging
    51bcf5954f libnet/d/overlay: parse VNI list w/o allocating
    96ca669fa4 libnet/d/overlay: extract VNI option parsing...
    a940462fc7 libnetwork/drivers/bridge: minor cleanups for iptables funcs
    6817b3697b libnetwork/iptables: signalHandler(): use s switch
    51bbcdb3c5 libnetwork/iptables: merge Conn.initConnection into newConnection
    0921360133 libnetwork/iptables: checkRunning(): use early return
    98592608d4 libnetwork/iptables: remove unused Ebtables const
    126525c03e libnetwork/iptables: TestReloaded(): minor cleanup
    b216669a02 libnetwork/iptables: TestPassthrough(): skip without firewalld
    753c190ef9 libnetwork/drivers/bridge: rename vars that collided with type
    d1ebe6689f libnetwork/iptables: errors should not be capitalized
    afe8d3076f libnetwork/iptables: remove ErrIptablesNotFound
    16f80f649b libnetwork/iptables: ChainInfo: don't pass whole IPTable as value
    42653787ea libnetwork/iptables: ChainInfo.Output(): explicitly suppress errors
    ea4baa24b1 libnetwork/iptables: IPTable.RemoveExistingChain() slight refactor
    04e54c6bb0 libnetwork/iptables: IPTable.exists(): return early on error
    829374337f libnetwork/iptables: don't use err.Error() if not needed
    9717734d1c libnetwork/iptables: IPTable.NewChain() minor cleanups
    9bb0e7a5ee libnetwork/iptables: inline some args
    564a13285f libnetwork/bitmap: improve documentation
    0fc6bf9a6e libn/d/o/ovmanager: assign vxlans using bitmap pkg
    f0127f1617 libn/d/o/ovmanager: inline obtainVxlanID method
    e97492e579 libn/d/o/ovmanager: drop mutex from network type
    6fb6635ceb libn/d/o/ovmanager: make mutexes private fields
    cdcb7c28c5 integration: disable iptables in parallel tests
    9cee34bc94 pkg/plugins: make unit test less time sensitive
    3721a525ce daemon: initBridgeDriver(): pass BridgeConfig, instead of daemon config
    b8220f5d0d daemon/config: move MTU to BridgeConfig
    11abd0742e dockerd: "--mtu": update description, hide on Windows and warn if set
    6944d2dddb libnetwork: TestBoltdbBackend(): use t.TempDir()
    2fd88c7ca4 libnetwork: inline store config options
    cda187222e libnetwork/config: remove options that were only used in tests
    bc80c5d067 libnetwork: rename vars that shadowed with pkg vars and imports
    332ffe8d74 libnetwork/networkdb: NetworkDB.Watch(): remove unused "key" argument
    4c4149a09c libnetwork/internal/kvstore: remove unused Delete()
    4d09e60f5b libnetwork/internal/kvstore: remove unused Watch() method
    c14a9f5b3d libnetwork/datastore: un-export Mutex
    e21e802fc6 libnetwork/datastore: remove unused DeleteTree() method
    58d2f21dae libnetwork/datastore: remove unused PutObject(), DeleteObject()
    a3b0181503 libnetwork/datastore: remove Watch(), Watchable(), RestartWatch()
    2409a36e29 libnetwork/datastore: cache.get(): remove unused "key" argument
    824abbf8d9 libnetwork/datastore: remove redundant datastore.sequential
    e9b6965079 libnetwork/datastore: remove unused datastore.Active()
    b32e41f016 libnetwork/internal/kvstore/boltdb: un-export Mutex
    7e7c7bbc17 libnetwork/internal/kvstore/boltdb: BoltDB.List(): minor cleanup
    95b96eebdd libnetwork/internal/kvstore/boltdb: BoltDB.Get(): don't shadow error
    fb61b07bcf libnetwork/internal/kvstore/boltdb: BoltDB.Exists(): fix error handling
    c94ccd4207 libnetwork/internal/kvstore/boltdb: minor cleanup/refactor
    acfd3934a7 libnetwork/internal/kvstore: AtomicDelete(): remove unused "deleted" return
    b576682bdc libnetwork/internal/kvstore: AtomicPut(): remove unused "created" return
    c37b58bbc3 libnetwork/internal/kvstore: remove unused WriteOptions
    e515bef423 libnetwork/internal/kvstore: remove unused WatchTree and NewLock methods
    a373983a86 libnetwork/internal/kvstore: fix some linting issues
    05988f88b7 libnetwork/internal/kvstore: remove unused Config options
    ec11aea880 pkg/jsonmessage: use string-literals for easier grep'ing
    fded42c3bd pkg/ioutils: use string-literals for easier grep'ing
    1da079f211 pkg/idtools: use string-literals for easier grep'ing
    84000190d3 opts: use string-literals for easier grep'ing
    ddec605aef integration: use string-literals for easier grep'ing
    96a1c444cc libnetwork: use string-literals for easier grep'ing
    0db4a32b9c daemon/cluster: use string-literals for easier grep'ing
    4e69e16fde client: use string-literals for easier grep'ing
    c3d533f37f cli/debug: use string-literals for easier grep'ing
    02815416bb daemon: use string-literals for easier grep'ing
    6331a3a346 integration-cli: use string-literals for easier grep'ing
    2f61620339 builder/builder-next: use string-literals for easier grep'ing
    202907b14c builder/dockerfile: use string-literals for easier grep'ing
    a1c9a686b0 api: use singleflight for /info endpoint
    8846c7e0ae daemon/cluster/executor/container: fix mixed pointer/value receiver
    8ea78b34ab rename some variables that shadowed imports or package types
    9f4acceb6a remove redundant alias for libnetwork/datastore imports
    cffe563d4d pkg/system: remove windows stubs for MkDev/MkNod
    6b6fed06b1 integration: don't use pkg/system MkNod/mkDev
    94c975e25a api: info: don't use ad-hoc type for compatibility with old api versions
    9ffca1fedd libnetwork/drivers/remote: rename vars that collided
    f6258f70cb docs: api  v1.28 - v1.40: add missing "force" query arg on plugin disable
    892e9f2c23 docs: api v1.41: add missing "force" query arg on plugin disable
    a4bdfb963f docs: api v1.42: add missing "force" query arg on plugin disable
    85ccb25eb8 docs: api v1.43: add missing "force" query arg on plugin disable
    aba8e04ab1 docs: api: amend changelog for API 1.28 for "force" option
    7055244547 docs: api v1.32 - v1.40: remove outdated information from ServerVersion
    ed0dbb8518 docs: api v1.41: remove outdated information from ServerVersion
    b770a50dee docs: api v1.42: remove outdated information from ServerVersion
    18d77ff455 docs: api v1.43: remove outdated information from ServerVersion
    92f1ddaf0a api: remove outdated information from ServerVersion
    e8f206972a docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields
    e58a60902c docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields
    3c905d0db9 api: remove "ClusterStore" and "ClusterAdvertise" fields
    e4d809b2b0 vendor: github.com/tinylib/msgp v1.1.8
    f379af6d17 vendor: github.com/containerd/cgroups/v3 v3.0.2
    e638351ef9 c8d/prune: Handle containers started from image id
    a93298d4db c8d/prune: Exclude dangling tag of the images used by containers
    a6d5db3f9b c8d/softDelete: Deep copy Labels
    2b0655a71a c8d/softDelete: Extract ensureDanglingImage
    a96e6044cc testutil/environment: Add GetTestDanglingImageId
    13472c6cf1 daemon/config: remove unused CommonConfig.Context
    40908c5fcd libnetwork/drivers: inline capabilities options
    97285711f3 libnetwork/drivers/overlay: Register does not require DriverCallback
    a718ccd0c5 libnetwork/drivers: remove unused "config" parameters and fields
    264dbad43a gha: don't fail if no daemon.json is present
    ec79d0fc05 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up
    eaa9494b71 pkg/fileutils: GetTotalUsedFds: reduce allocations
    03390be5fa pkg/fileutils: add BenchmarkGetTotalUsedFds
    252e94f499 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD
    7747327561 AUTHORS,.mailmap: update with recent contributors
    60d2eeaa5b MAINTAINERS: update my email
    a764cd5a40 pkg/chrootarchive: format code with gofumpt
    210932b3bf daemon: format code with gofumpt
    e236994b76 daemon/snapshotter: format code with gofumpt
    9213e35011 daemon/containerd: format code with gofumpt
    4b3900a257 daemon/logger: format code with gofumpt
    050de1e4f6 daemon/logger/journald: format code with gofumpt
    a083677af2 daemon/logger/local: format code with gofumpt
    74db0e9339 daemon/logger/loggertest: format code with gofumpt
    48124bac18 daemon/logger/loggerutils: format code with gofumpt
    011a32a4ad daemon/logger/gelf: format code with gofumpt
    7ed5a30b5c daemon/logger/splunk: format code with gofumpt
    bb5a1eb99d daemon/logger/jsonfilelog: format code with gofumpt
    1437037ed2 daemon/logger/awslogs: format code with gofumpt
    f930559076 pkg/stdcopy: format code with gofumpt
    1216328c2d pkg/plugins: format code with gofumpt
    651086d1d9 pkg/jsonmessage: format code with gofumpt
    1291bbfa50 pkg/capabilities: format code with gofumpt
    79af23e1ea pkg/ioutils: format code with gofumpt
    ac1514abf4 reference: format code with gofumpt
    99968eec3f restartmanager: format code with gofumpt
    f18ac2d0bc quota: format code with gofumpt
    b2663a0f73 layer: format code with gofumpt
    83b2daca6a plugin: format code with gofumpt
    169fab5146 profiles/seccomp: format code with gofumpt
    4175a550fd libcontainerd: format code with gofumpt
    091991606a opts: format code with gofumpt
    784ba59a08 registry: format code with gofumpt
    dd5ea7e996 libnetwork: format code with gofumpt
    bba21735bf libnetwork/ipamutils: format code with gofumpt
    0b75c02276 libnetwork/resolvconf: format code with gofumpt
    801cd50744 libnetwork/portallocator: format code with gofumpt
    6187ada21f libnetwork/options: format code with gofumpt
    882f7bbf1f libnetwork/osl: format code with gofumpt
    32e716e848 libnetwork/networkdb: format code with gofumpt
    65e2149b3e libnetwork/netutils: format code with gofumpt
    1cd937a867 libnetwork/etchosts: format code with gofumpt
    540e150e4e libnetwork/cmd: format code with gofumpt
    fffcbdae4c libnetwork/iptables: format code with gofumpt
    6f3fcbcfe1 libnetwork/ipam(s): format code with gofumpt
    eb6437b4db libnetwork/datastore: format code with gofumpt
    defa8ba7b4 ibnetwork/bitmap: format code with gofumpt
    f349754b55 libnetwork/bitseq: format code with gofumpt
    3af2963c74 libnetwork/drvregistry: format code with gofumpt
    dc17f5e613 libnetwork/drivers/remote: format code with gofumpt
    485977de57 libnetwork/drivers/windows: format code with gofumpt
    2cc5c2d2e6 libnetwork/drivers/overlay: format code with gofumpt
    e74028554e libnetwork/drivers/macvlan: format code with gofumpt
    7b02ccda86 libnetwork/drivers/ipvlan: format code with gofumpt
    17a35bc645 libnetwork/drivers/bridge: format code with gofumpt
    d2a6956afb daemon/graphdriver: format code with gofumpt
    8d923c60b9 daemon/config: format code with gofumpt
    425ccb1241 runconfig: format code with gofumpt
    c0edf0861b integration/system: format code with gofumpt
    5cc1c6eca0 integration/service: format code with gofumpt
    bb5ace2efb integration/plugin: format code with gofumpt
    9bd3e011e1 integration/internal: format code with gofumpt
    89a4e6b889 integration/container: format code with gofumpt
    846bcd7dd1 distribution: format code with gofumpt
    b7f5db432f daemon/images: format code with gofumpt
    2d12dc3a58 daemon/cluster: format code with gofumpt
    316c7331eb pkg/parsers: format code with gofumpt
    fb017754e1 pkg/system: format code with gofumpt
    ee2ac6c205 cmd/dockerd: format code with gofumpt
    47276bdb28 cmd/docker-proxy: format code with gofumpt
    0af6d9e291 client: format code with gofumpt
    3146ecbae6 api/types: format code with gofumpt
    b9833a2059 builder: format code with gofumpt
    540d6539be builder/remotecontext: format code with gofumpt
    3e0565e17c builder/dockerfile: format code with gofumpt
    9d4abbbc30 builder/builder-next: format code with gofumpt
    6592646632 api/server: format code with gofumpt
    5e9a354ff1 pkg/tarsum: format code with gofumpt
    2aac054f52 pkg/authorization: format code with gofumpt
    f7552f1de4 pkg/archive: format code with gofumpt
    7c697f58f2 Makefile: remove unused BUILD_APT_MIRROR
    a1d2132bf6 Dockerfile: use default apt mirrors
    225e2562c9 integration-cli: format code with gofumpt
    a31411c679 testutil: format code with gofumpt
    4c281fb29a volume: format code with gofumpt
    a08abec9f8 Update dockerd to support JSON logging format
    b335e3d305 seccomp: add name_to_handle_at to allowlist
    6d3bcd8017 c8d/images: handle images without manifests for default platform
    8caf63896c docs: document more buildx targets
    647c2a6cdd Restore active mount counts on live-restore
    d8bc5828cd gha: Setup Runner: add missing sudo
    fdc9b7cceb remove name_to_handle_at(2) from filtered syscalls
    9f6dbbc7ea Dockerfile: make cli stages more resilient against unclean termination
    19bd0730ef vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa
    e2dad6c3ff Revert "Temporarily skip DCO check"
    1741771b67 Skip cache lookup for "FROM scratch" in containerd
    7d7225fae6 Temporarily skip DCO check
    e60cda7051 libnetwork/internal/kvstore/boltdb: fix linting issues
    d18b89ced6 libnetwork/internal/kvstore: remove some unused code
    b873d70369 replace libkv with local fork
    5d25143ef3 libnetwork/kvstore: rewrite code for new location
    dd1c95edcd integration/windows: Unskip some kill tests
    3c1de2e667 pkg/homedir: deprecate Key() utility
    ddd9665289 pkg/homedir: deprecate GetShortcutString() utility
    6876e45f9e pkg/homedir: unify implementations
    0aca7f2a0d pkg/homedir: use os.UserHomeDir()
    0215a62d5b integration-cli: don't use pkg/homedir in test
    76d8bfdff4 testutil/environment: remove Execution.OSType field
    325786430b testutil/environment: remove unused TEST_OSTYPE env-var
    0fe2ac0437 testutil/environment: rename var that collided with import
    74da6a6363 Switch all logging to use containerd log pkg
    cdb1293eea Fix missing Topology in NodeCSIInfo
    165dfd6c3e daemon: fix restoring container with missing task
    786c9adaa2 daemon: fix double-unlock in health check probe
    3b28a24e97 daemon: fix panic on failed exec start
    e010223186 contrib/busybox: Update to FRP-5007-g82accfc19
    21e50b89c9 builder: pass host-gateway IP as worker label
    21c0a54a6b c8d: mark stargz as requiring reference-counted mounts
    4d831949a7 Dockerfile: update buildx to v0.11.0
    fc94ed0a86 don't cancel container stop when cancelling context
    19d860fa9d testing: temporarily pin docker-py tests to use "bullseye"
    cfa08f8366 builder-next: enable OTLP tracing for history records
    98a44bb18e update go to go1.20.5
    3ba67ee214 daemon: registerName(): don't reserve name twice
    2a6ff3c24f Use OCI "History" type instead of inventing our own copy
    59b5c6075f pkg/rootless: remove GetRootlessKitClient, and move to daemon
    3cc5d62f8a run `getent` with a noop stdin
    71589848a0 daemon: test runtimeoptions runtime options
    a6048fc792 client: add WithUserAgent() option
    197b0b16e3 vendor: github.com/sirupsen/logrus v1.9.3
    038a361a91 daemon/cluster: convert new BindOptions
    d41d2c3751 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed1876
    32d58144fd c8d: Use reference counting while mounting a snapshot
    8a094fe609 daemon: ensure OCI options play nicely together
    dea870f4ea daemon: stop setting container resources to zero
    8c4dfc9e6a vendor: github.com/rootless-containers/rootlesskit v1.1.1
    0b1c1877c5 update RootlessKit to v1.1.1
    9ff169ccf4 daemon: modernize oci_linux_test.go
    0f9c8e684a Dockerfile: Move dockercli to base-dev
    5433b88e2d hack/cli.sh: Quiet origin cleanup
    800ea039ec contrib/check-config: move xt_bpf check to overlay section
    49f76a34b5 Dockerfile/shell: Install buildx cli plugin
    17c99f7164 Dockerfile: Use separate cli for shell and integration-cli
    1910fdde81 contrib/check-config: check for xt_bpf
    d63569c73d builder-next: Set moby exporter as default
    4295806736 c8d/handlers: Handle error in walkPresentChildren
    ff2342154b Dockerfile: use COPY --link for source code as well
    0f6eeecac0 daemon: consolidate runtimes config validation
    d222bf097c daemon: reload runtimes w/o breaking containers
    0b592467d9 daemon: read-copy-update the daemon config
    742ac6e275 daemon: make config reloading more transactional
    038449467e Update BuildKit registry config on daemon reload
    982e4fb448 api/server: get features from a callback fn
    d099e47e00 containerd: add c8d version and storage-driver to User-Agent
    a6da1480b5 dockerversion: DockerUserAgent(): allow custom versions to be passed
    9a1f2e6d7c dockerversion: remove insertUpstreamUserAgent()
    ff40d2d787 dockerversion: simplify escapeStr()
    eb9a5392bc dockerversion: add a basic unit-test
    66137ae429 containerd: set user-agent when pushing/pulling images
    06aaf87aab vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b
    637ca59375 Dockerfile: use COPY --link to copy artifacts from build-stages
    4d3238dc0b c8d/load: Don't unpack pseudo images
    b08bff8ba3 c8d/load: Use walkImageManifests
    5210f48bfc c8d/list: Use walkImageManifests
    fabc1d5bef c8d: Add walkImageManifests and ImageManifest wrapper
    1178319313 libn: fix resolver restore w/ chatty 'iptables -C'
    50eb2d2782 libnetwork: fix sandbox restore
    18bf3aa442 libnetwork: log why osl sandbox restore failed
    ed32f5e241 Make sure the image is unpacked for the current snapshotter
    d58df1fc6c Update blogpost URL
    44124ab6b0 builder/remotecontext: remove CachableSource, NewCachableSource
    5efe72415d remove Dockerfile.e2e
    fd72b134d5 update generated files
    735537d6b1 replace gogofast with gogofaster extension
    1eaea43581 fix protos and "go generate" commands
    7daaa00120 hack: generated files update and validation
    f1ca793980 use tools build constraint for proto dependencies
    1e55ace875 Add oci index and layout files to exported tars
    487ea81316 Fix npe in exec resize when exec errored
    9a692a3802 libn/d/overlay: support encryption on any port
    e410e27547 builder/remotecontext: remove mimeTypes struct, use consts
    b42e367045 vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    37d4b0bee9 builder/remotecontext: deprecate CachableSource, NewCachableSource
    fb7ec1555c libcontainerd: work around exec start bug in c8d
    79ca6630d4 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f
    5045a2de24 Support recursively read-only (RRO) mounts
    3512b04093 vendor: github.com/containerd/go-runc v1.1.0
    b9b8b6597a c8d/inspect: Fill `Created` time if available
    f17c9e4aeb c8d: ImageService.softImageDelete: rename var that collided with import
    df5deab20b c8d: ImageService.softImageDelete: use OCI and containerd constants
    9b9c5242eb daemon: lock in snapshotter setting at daemon init
    53d1b12bc0 hack/make/.binary: don't use "netgo" when building Windows binaries
    a7bc65fbd8 c8d/pull: Use same progress action as distribution
    6506579e18 integration: Add TestImageInspectEmptyTagsAndDigests
    a93aadc2e6 hack: Rename .ensure-emptyfs to .build-empty-images
    3a31f81838 hack/ensure-emptyfs: Create dangling image
    4373547857 Add testenv.UsingSnapshotter utility
    d3d2823edf Dockerfile: temporarily skip CRIU stage
    86108812b8 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1
    ddd67b2535 Make image save more like the OCI layout for blobs
    871cf72363 libnetwork: check for netns leaks from prior tests
    6d79864135 libnetwork/osl: restore the right thread's netns
    d4f3858a40 libnetwork: leave global logger alone in tests
    0cc6e445d7 libnetwork: make resolver tests less confusing
    411a9e1b86 daemon: remove devicemapper driver-warnings
    424a1c5d21 daemon: remove warning for overlay/overlay2 without d_type
    ab35df454d remove pre-go1.17 build-tags
    34964c2454 c8d/list: Show layerless images
    61757032da d/graphdriver/vfs: fix unit test
    6e4bd3bbc2 vendor: github.com/spf13/cobra v1.7.0
    6690d2969c pkg/archive: bail if setting xattrs is unsupported
    0cdfd5f275 pkg/system: return rich errors from L(g|s)etxattr
    41356227f2 libnetwork: just forward the external DNS response
    6d139e5e95 build: use daemon id as worker id for the graph driver controller
    668af4be82 ci(bin-image): distribute build across runners
    1be26e9f0c api/inspect: Fix nil RepoTags and RepoDigests
    f450ea64e6 fix: `docker pull` with platform checks wrong image tag
    f3645a2aa3 reorder load funcs to match newServiceConfig()'s order
    3b15156e4d add mirror to daemon reload test for insecure registries
    0d8087fbbc Remove Upstart scripts
    967c7bc5d3 api/server: allow empty body for POST /commit again
    3ceb3810d7 client: don't marshal typed nils in request body
    ae737656f9 Remove Upstart and cgroups bits from Debian sysvinit script
    c2630c93f2 Update vendoring
    dedf5747cc Remove need to set Capabilities for cdi driver
    7ec9561a77 Add support for CDI devices to docker daemon under linux
    5a200ade7c Rename daemon/devices_liunx.go to daemom/devices.go
    484785456c update containerd binary to v1.7.1
    348a79958d c8d: The authorizer needs to be set even if AuthConfig is empty
    2f0ba0a7e5 more robust dockerd-rootless-setuptools.sh
    135d8f04f9 ci: bin-image workflow
    ae1ca67178 bin-image bake target
    3309e45ca1 c8d: Don't create authorizer for empty AuthConfig
    2ad499f93e c8d/authorizer: Default to docker.io
    bd6868557d c8d/builder: implement cache
    7821d2d788 vendor: github.com/docker/distribution v2.8.2
    e46674b6a7 c8d: implement classic builder
    8d76acfe6c testutil: replace uses of client.IsErrNotFound
    56fb56ccf0 integration: update error-assertions in tests
    0538cdd226 integration-cli: update error-assertions in tests
    66ff1e063e client: update error-assertions in tests
    685b3d820a client: make IsErrNotFound an alias for errdefs.IsNotFound
    9e817251a8 libnetwork/docs: fix broken link
    17882ed614 libnetwork: update example in README.md
    4603b6d6b6 c8d: fix image history for dangling images
    4e0319c878 [chore] clean up reexec.Init() calls
    9e43c11480 AUTHORS: regenerate
    5fee4439a0 .mailmap: update with my new email
    e8be792130 c8d: fix missing image history
    e3e715666f pkg/aaparser: deprecate GetVersion, as it's no longer used
    71d7908656 added alias validation
    ecaab085db profiles/apparmor: remove use of aaparser.GetVersion()
    f445ee1e6c contrib/apparmor: remove remaining version-conditionals (< 2.9) from template
    307b09e7eb fixing consistent aliases for OCI spec imports
    2ad37e1832 daemon: handleContainerExit(): add execDuration in attributes
    cad97135b3 c8d: implement missing image delete logic
    de363f1404 daemon: handleContainerExit(): use logrus.WithFields
    fb96b94ed0 daemon: remove handling for deprecated "oom-score-adjust", and produce error
    316781be48 api/types/container: remove deprecated ContainerChangeResponseItem
    9c14f98583 api/types: remove deprecated AuthConfig
    55608d8381 pkg/system: remove deprecated IsProcessAlive, IsProcessZombie, KillProcess
    a3b12ec420 pkg/system: remove deprecated DefaultPathEnv()
    dc76b90705 pkg/system: remove deprecated MemInfo, ReadMemInfo()
    7d0488b11e pkg/ioutils: remove deprecated TempDir() alias
    152c482fee pkg/platform: remove deprecated OSType const
    913b0f51ca API: omit deprecated VirtualSize field for API v1.44 and up
    fdc7a78652 docs/api: version-history: also mention /system/df for VirtualSize
    fd0b109bf7 API: bump version to 1.44
    43b1afb2cf make chownComment easy to read
    7665feeb52 hack: enable Go modules when building dockerd and docker-proxy
    5400366b90 Set BuildKit version using buildinfo
    c33b31116c daemon/graphdriver: remove isDeprecated() utility
    dc11d2a2d8 remove deprecated devicemapper storage-driver
    1e195acee4 libn/d/overlay: stop programming INPUT ACCEPT rule
    eb0edeafdd api: swagger: add missing "force" query arg on plugin disable
    ea4dd1bbf6 boltdb/bolt is not maintained. Used bbolt
    6c0e0d6250 Allow client to set boltdb timeout
    a0f6d0798a Do not return boltdb bucket not found error
    deb21faad0 Add support for etcd authentication
    cc0ed694ee fix typo
    fbdb24ec6a Fix typo in error text
    dcf8828165 Return store.ErrKeyExists on AtomicPut
    002f9c37ca Synchronize boltbd libkv apis
    15e5d4067a Change unsupported call error in boltdb backend to use general store error
    3b5fb3ec87 Remove docs in libkv.go
    2603af65e5 Migration to the new Etcd client
    f06f78e638 boltDB AtomicDelete fails for non-existent key
    0b81042dc3 Add transient connection option to bolt db
    7225aba3af add TTL to consul lock using store.LockOptions and add tests for the Lock ttl behavior
    1f9cf17713 Fix AtomicPut panic if previous KVPair is not nil and key not exists in boltdb
    599deba8c7 nits and refactor for etcd tls config
    cc9e627f8e Add etcd TLS client code and update README.md. Signed-off-by: Adam Thornton <adam.thornton@gonkulator.io>
    64eb25dff9 Honoring ConnectionTimeout in boltdb
    3ec6dfa346 Refactor libkv to not directly import storage backends
    f817826408 Create dir first before opening data file of boltdb
    29af4e0f27 BoltDB backend support for libkv
    06f01227c5 change heartbeat/ephemeral combination to use a single ttl field
    f26e4f4c52 Minor fix of store comment
    6b43181cfa Notify user of supported backend storage
    a961b70b2b Remove unused type WatchCallback
    06151b8a4d add top-level godoc: sample some parts of the README
    a2d4e1c246 API Change: AtomicPut with previous = nil is create.
    fcb98254b1 Use Backend type for stores
    79c320c1cf remove testify dependency through mock package
    48f5dca2ce Remove logging in library
    dbc1a6fa9a refactor and move store backends in sub-packages

Bumping docker-cli to version v25.0.0-7-g01f933261, which comprises the following commits:

    21c12847b docs: move base command to docker.md
    22e1f2cbf docs: fix broken links to alias pages
    68abf14c1 vendor: github.com/docker/docker v25.0.0
    9e1e07657 docs: add documentation for CDI
    cdb1c105f vendor: github.com/docker/docker v25.0.0-rc.3
    3df149545 docs(plugins): fix typos and formatting
    22bbdc798 docs: add "builder" key to full daemon.json example
    d2efc5b09 deprecate old API versions (1.23 and lower)
    508346ef6 plugins: fix plugin socket being closed before use
    f722e07c6 gha: update to use macos-12 runners
    5f6c55a72 plugins: don't handle signal/notify if TTY
    26560ff93 Revert "plugins: run plugin with new process group ID"
    37f551566 docs: fix broken link to tmpfs (missing anchor)
    b35361e8d docs: regenerate stubs for non-canonical commands
    dfa2930af ci: Add bin-image workflow
    21c253605 vendor: golang.org/x/sys v0.16.0
    a6774de68 docs: rename cli reference aliases to canonical
    cf9d3692a docs: remove empty cli reference stubs
    d868dca00 vendor: github.com/docker/docker v25.0.0-rc.2
    1609916f2 Revert "Dockerfile/binary: Output the binary directly"
    ff25c4334 Revert "ci: Add bin-image workflow"
    ef5e5fa03 plugins: run plugin with new process group ID
    6d0b329b0 cli-plugins: use non-abstract socket on darwin
    dbf992f91 cli-plugins: move socket code into common package
    8b6ffbdf7 vendor: github.com/containerd/containerd v1.7.12
    ccc7ad2f2 Dockerfile: update buildx to v0.12.1
    fdcb78a0f Dockerfile: update docker compose to v2.24.0
    15d4c99f3 ci: Add bin-image workflow
    ecf338f43 scripts/build: Handle VERSION containing git ref
    6ad07f2a4 Dockerfile/binary: Output the binary directly
    0e37dd49f cmd/docker: registerCompletionFuncForGlobalFlags: take store.Store as argument
    c0a0b05dc cli-plugins: helloworld: rename var that collided with import
    11b2e871b cmd/docker: move main() to the top
    4dc2c895b cli-plugins/manager: getPluginDirs: take ConfigFile as argument
    79992184e docs: dockerd: rephrase environment-variables intro
    4d2b4e7fb docs: dockerd: fix stray column-separateor in env-var table
    a5e5563f1 vendor: github.com/docker/docker-credential-helpers v0.8.1
    4f4950886 update to go1.21.6
    26f59b2f6 cli/compose/loader: use golden.Assert() for readability
    9db56ea2f vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0
    efae960e5 vendor: golang.org/x/net v0.19.0
    996cce909 vendor: golang.org/x/sync v0.6.0
    4b10e5525 vendor: github.com/google/go-cmp v0.6.0
    1ebc233b4 vendor: github.com/creack/pty v1.1.21
    b4fe77a12 vendor: github.com/docker/go-connections v0.5.0
    909111b3a docs: fix incorrect heading levels in docker run reference
    b43ea528b vendor: github.com/docker/docker v25.0.0-rc.1
    6d0aa0a52 cli/command/container: parseSecurityOpts: fix --security-opt seccomp=builtin
    9be600a97 Docker build command docs refresh
    878b1c55b docs: add links to volume ls, network ls, stack ps formatting examples
    f0edc7953 change back nolint -> nosec
    c1016c05c vendor: github.com/mitchellh/mapstructure v1.5.0
    58524685d vendor: github.com/mattn/go-runewidth v0.0.15
    1e38fc3b9 vendor: github.com/klauspost/compress v1.17.4
    0fa3a365f vendor: github.com/docker/docker v25.0.0-beta.3
    d1a51582e update authors and mailmap
    60af715d6 id and name filter in service ls is the prefix not a part
    90a1887d3 Fix wrong docker run command
    64e9cadd1 Add networking reference link
    924ec7f4c docs/deprecated: update "oom-score-adjust" status for daemon
    800a728e1 deprecated: fix anchor and add missing version
    c1c6198ae docs: deprecate short cid in Aliases field
    336787c50 vendor: github.com/docker/docker 7bc56c53657d (v25.0.0-dev)
    53a129e3d docs(plugins): remove Weave engine network plugin
    3ecd6b6c7 docs(plugins): remove inline CSS markup
    a4d805f9c docs(plugins): add Kathará engine network plugin
    1dcd5487f docs(plugins): update Docker Store to Docker Hub
    46355a194 export RunStat, StatsOptions, and add Filters option
    e9a5590ad cli/command/container: statsOptions: add GoDoc
    b642078c8 prevent "docker stats" from hanging if the initial API call fails
    633ba88c2 cli/command/container: runStats(): move code to where it's used
    5ed6c128e cli/command/container: runStats(): don't register unused event handlers
    2389768fb cli/command/container: runStats(): minor cleanup and fixes
    4d434dc69 vendor: github.com/docker/docker 388216fc45ab (v25.0.0-dev)
    5eac07b10 update typos and style in docs
    6fd4cff1f docs: minor editorial improvements, typo fixes
    0de84f019 vendor: golang.org/x/crypto v0.17.0
    3cf0bf84a vendor: golang.org/x/crypto v0.16.0
    36d4db27d vendor: golang.org/x/text v0.14.0
    3d70100d5 vendor: golang.org/x/sys v0.15.0
    70216b662 add //go:build directives to prevent downgrading to go1.16 language
    88e647435 build(deps): bump github/codeql-action from 2 to 3
    ca9ff8daf docs: run-reference: use table for health options
    77e67a0f9 docs/deprecated: mark logentries logging-driver as "removed"
    8f13b0416 cli/command: remove "logentries" driver from tests and fixtures
    d79dd7c53 docs, man: remove logentries logging-driver
    b14094df5 contrib/completion: remove logentries logging-driver
    f63065a58 vendor: github.com/docker/docker f3cc93630ed8 (v25.0.0-dev)
    fa1914426 vendor: github.com/docker/docker v25.0.0-beta.2
    e81a66661 docs/deprecated: mark logentries log-driver for removal
    f8dd8f074 docs: refresh --publish, add --publish-all
    5400a48aa Plumb contexts through commands
    aec7ec7f6 vendor: github.com/docker/docker 92884c25b394 (v25.0.0-dev)
    0a3a16d2b vendor: github.com/containerd/containerd v1.7.11
    54c103aff vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
    d49970590 vendor: github.com/felixge/httpsnoop v1.0.4
    7af509c7f cli/command: merge DockerCliOption and InitializeOpt types
    1554ac3b5 cli-plugins: terminate plugin when CLI exits
    2e394eb5f docs: rewrite section on working directory
    4a8451455 docs: rewrite section on setting user id
    259aa9005 docs: rewrite section on filesystem mounts
    52716c813 docs: move --tmpfs to docker run reference
    5ede4c82a docs: minor improvements to the healthcheck section
    7585d66a0 docs: rewrite section on overriding environment variables
    3eeac2059 docs: rewrite section on exposing ports
    0a94d85cd docs: fix typo in "network create" docs
    b01e28752 docs: rewrite section on default entrypoint
    c695ad9d7 docs: rewrite section on overriding image defaults
    4a6cde885 docs: move --log-driver to docker run reference
    72df1960e docs: move --cgroup-parent to docker run reference
    9e75a4cf6 docs: move --init to docker run reference
    92c664b0d docs: move info about --security-opt to docker run reference
    f98444490 docs: move --rm to docker run reference
    32189ca27 docs: improve description about container exit codes
    dbffa0d12 docs: move --restart to docker run reference
    73620975d docs: simplify container networking intro
    5dd6e9a4d docs: move --ipc to docker run reference
    ff62bf47b docs: move --uts to docker run reference
    d66fe7881 docs: move --pid to docker run reference
    03dc8832e docs: improve docs on container identification
    fad227d3f docs: move info about fg/bg flags to run reference
    2f48f41fc docs: improve introduction to docker run
    3f519b824 docs/deprecated.md: add version for "-g" / "--graph" removal
    6dc92b667 docs/deprecate.md: add version for devicemapper removal to table
    a682b8e65 Permit '=' separator and '[ipv6]' in --add-host
    626e64ccf build(deps): bump actions/setup-go from 4 to 5
    0cf7bff0b vendor: github.com/docker/docker 4046ae5e2fd4 (v25.0.0-dev)
    bdb45a9c2 update to go1.21.5
    afc62d8d1 update to go1.21.4
    8bbc97c86 prune: fix build cache prune warning
    e93ec2f6a Fix typo in dockerd reference documentation
    5a0470888 vendor: github.com/docker/docker 029519a1498b (v25.0.0-dev)
    aa9fdb4dd vendor: github.com/gorilla/mux v1.8.1
    a431b1dda exec.md: remove misleading part
    b62b5d48f Readme: remove reference to "Docker EE"
    354f62f0c docs: reference/commandlin/cli: remove redundant italic
    e2626200a docs: remove "{% raw %}" / "{% endraw %}" Jekyl (liquid) leftovers
    174cbb588 docs/man: fix -name flag with single hyphen
    539537ddf vendor: github.com/docker/docker cfdca8dc1d4c (v25.0.0-dev)
    6a74a63ee Dockerfile: update ALPINE_VERSION to 3.18
    35c6e915d Dockerfile: update buildx to v0.12.0
    6468c63c8 docs: update debian examples to use bookworm
    0d95231cc Dockerfile: use "debian" in stages instead of distro name
    c5194a9e5 Dockerfile: update to debian bookworm
    7be05a6f4 mount: bind-recursive: remove boolean convenience values
    dad4a1962 vendor: github.com/docker/docker v25.0.0-beta.1
    30d36e977 templates: linting: fix "error return value is not checked (errchkjson)
    4e2477f85 golangci-lint: enable more linters
    0e73168b7 golangci-lint: revive: enable use-any
    9c0c49a5f golangci-lint: revive: enable empty-lines
    8e9aec690 golangci-lint: revive: enable import-shadowing
    f387558b5 Add zstd as supported in load command doc
    f4962c65b vendor: github.com/Microsoft/hcsshim v0.11.4
    391668f57 golangci-lint: enable perfsprint linter
    8bbdb93cf golangci-lint: enable nilerr linter
    7e9d2c78c golangci-lint: enable dupword linter
    2d61f70f0 golangci-lint: govet: enable shadow check
    606cbd60a golangci-lint: enable predeclared linter
    8661552e7 golangci-lint: enable thelper linter
    8e98c765f cli/command/system: fix deprecated comments (gocritic)
    9d7e21be2 cli/command/manifest: rename vars that collided with import
    3f0c189e4 linting: address slice-append issues found by gocritic
    a2c9f3c6c linting: address else/if/elseif statements found by gocritic
    888df0987 linting: address assorted issues found by gocritic
    d0dee3ceb linting: Consider pre-allocating sliceVar (prealloc)
    efbcdce9b linting: cli/command/trust: unusedwrite: unused write to field Hashes (govet)
    580ebf41a dockerfiles: update golangci-lint to v1.55.2
    8642b3c35 update authors and mailmap
    685d1baa0 vendor: github.com/docker/docker 34e923e3e31b (v25.0-dev)
    f0816bf67 opts: remove unused IPOpt option
    b0ee27d65 opts: ValidateIPAddress: improve error, godoc, and tests
    b24e7f85a Fix setting ServerAddress property in NativeStore
    f65d4a479 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev)
    b7c31c36f not actually a maintainer
    f9622b659 vendor: update go-connections for TLS 1.3 support
    4cf1c50ad Revert "update to go1.21.4" due to regressions / breaking changes.
    6472dabe4 update to go1.21.4
    3cd77c9d5 cli/command/container: ForwardAllSignals: rewrite to use ContainerAPIClient
    a2ec50a46 make `container` an explicit, required parameter
    a4abe42cb make runAttach public and allow passing context
    2b1f5a2e3 TestParseWithMacAddress: check endpoint-specific MacAddress field
    8f59f841a cli/command/container: mustParse: return network.NetworkingConfig
    d46de7087 vendor: github.com/docker/docker c14694a424ab (v25.0.0-dev)
    efc923679 --env-file about comments doc updated Signed-off-by: Saurabh Kumar <saurabhkumar0184@gmail.com>
    07338fe96 docs: update redirect metadata for hugo
    0239b8fd9 vendor: github.com/spf13/cobra v1.8.0
    848fe622c docs: add default-network-opt daemon option
    54eee599b Update container-device-interface to v0.6.2
    e08866098 vendor: github.com/docker/docker ed1a61dcb789 (v25.0.0-dev)
    13d34b21e vendor: github.com/containerd/containerd v1.7.8
    aa24d611b vendor: google.golang.org/grpc v1.58.3
    784149382 vendor: golang.org/x/tools v0.10.0
    1a0ae8c6b vendor: golang.org/x/mod v0.11.0
    39b1d37b3 Update CodeQL workflow
    663a89b7a vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev)
    6891974ee vendor: github.com/opencontainers/image-spec v1.1.0-rc5
    827c404ca vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
    137c495f7 vendor: github.com/go-logr/logr v1.2.4
    6372c6aae vendor: github.com/klauspost/compress v1.17.2
    8073525c0 vendor: google.golang.org/grpc v1.56.3
    b7b5b31a7 update to golangci-lint v1.55.0
    9e1f8d646 image/build: use "nolint" comment to work around gosec regression
    2294b17e7 cli/command/network: runCreate: inline types.NetworkCreate
    594aeb390 cli/command: remove dot-imports and unhandled errors
    b08e34b9f swarm: TestSwarmUpdate: remove non-existing "--quiet" flag
    defa52b8c stacks: Add support for start interval
    9df7be5d5 cli/compose: add schema 3.12 (no changes with 3.11 yet)
    7a2ea5c53 vendor: gotest.tools/v3 v3.5.1
    f2fced487 cli/compose/loader: remove platform-specific path handling
    74990623e cli/compose/loader: use gotest.tools/v3/golden
    8bf121c3b Add docker ps status descriptions
    a252a106c - What I did 	Removed broken link in #937 - How I did it 	Removed first section of CONTRIBUTING.md - How to verify it 	Check CONTRIBUTING.md - Description for the changelog 	Removed broken link in contributing to Docker documentation. A picture of a cute animal (not mandatory but encouraged) Closes #937
    74bace156 docs: add `bind-recursive` mount option
    46d0ba20f vendor: github.com/docker/docker cdb3f9fb8dca (v25.0.0-dev)
    3441151e0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230823155524-12f0c246fed0
    412ebb677 vendor: github.com/containerd/containerd v1.7.7
    78eaac75c vendor: update OTEL dependencies
    a27466fb6 vendor: golang.org/x/net v0.17.0
    612a17155 vendor: golang.org/x/crypto v0.14.0
    392db31e2 vendor: golang.org/x/term v0.13.0
    ac307788a vendor: golang.org/x/text v0.13.0
    48655f794 vendor: golang.org/x/sys v0.13.0
    6de525416 vendor: github.com/docker/distribution v2.8.3
    ceab9b5e8 update to go1.21.3
    d249ce279 update to go1.21.2
    3f1195e4e update go-md2man to v2.0.3
    fc6976db4 mount: add `bind-recursive=<bool|string>` and deprecate `bind-nonrecursive=<bool>`
    0f59f04f5 Update minimum Go version to 1.19
    d254cc3bb update golang to go1.21.1
    4c75107a6 vendor: github.com/distribution/reference v0.5.0
    112d79a41 appcontext: remove unused parts
    febb37a38 remove buildkit as dependency
    e9759cee6 Dockerfile: use GOTOOLCHAIN=local
    f07e7e1ee Dockerfile: build gotestsum and goversioninfo without cgo
    9e424af5d e2e: update to use compose v2, and don't depend on distro-packages
    3e2187b4c vendor: github.com/docker/docker d3afa80b96bf (v25.0.0-dev)
    f90890fb4 vendor: github.com/Microsoft/hcsshim v0.11.1
    23f50a066 vendor: github.com/containerd/containerd v1.6.24
    497b13c66 vendor: github.com/klauspost/compress v1.16.5
    e0ad0127b vendor: google.golang.org/grpc v1.56.2
    c2308ad6f vendor: google.golang.org/protobuf v1.31.0
    56396ba35 vendor: golang.org/x/tools v0.8.0
    c9d56b850 vendor: golang.org/x/crypto v0.9.0
    ffea6940e vendor: golang.org/x/sys v0.10.0
    1554b4932 vendor: golang.org/x/sync v0.3.0
    78012b00a vendor: container-device-interface v0.6.1
    3a16c3bb0 docs: fix duplicate words in "docker tag" reference
    7e9467506 build(deps): bump docker/bake-action from 3 to 4
    315ff202c build(deps): bump docker/setup-buildx-action from 2 to 3
    4b00be585 update to go1.20.8
    9e1b42e64 Add missing opts to --network advanced syntax
    58f426087 Rename expectedCfg into expectedHostCfg
    f1048e1a3 Create default EndpointSettings if no --network provided
    2c193b59d Fix extremely minor typo in docker-run man page
    40dc66b26 vendor: github.com/docker/docker 06499c52e2b1 (v25.0.0-dev)
    f13b78672 vendor: github.com/docker/docker 032797ea4bcb (v25.0.0-dev)
    fb2ba5d63 migrate reference github.com/distribution/reference
    04af12821 vendor: github.com/docker/docker 7abd7fa73965 (v25.0.0-dev)
    dee40053f build(deps): bump actions/checkout from 3 to 4
    6dfdd1eae cli/command/system: fix "docker events" not supporting --format=json
    db6209abd update golangci-lint to v1.54.2
    9ad079244 cli/registry/client: remove some redundant conditions
    22b4bab90 cli/registry: client.iterateEndpoints: remove check for APIVersion1
    5250f1bab cli/registry: fix client.pullManifestList not de-referencing manifest
    d40fc1a0f vendor: github.com/docker/docker a65c948e7edf (v25.0.0-dev)
    261c18f9e ParseRestartPolicy: validate for missing policy-names
    3d2aac6a0 docs/reference: run.md: remove stray whitespace
    4cce7bb2f rewrite TestParseRestartPolicy to use sub-tests
    42ac5d4bf force TestNewHistoryCommandSuccess to use UTC timezone
    17f4c8259 update cli-docs-tool to v0.6.0
    be219b317 adding -c option for docker run/build in manpages
    273f2cd95 cli/command/manifest: update link to Go documentation
    722e3aae4 man: update links to Go documentation
    dc4feccb8 docs/reference: update links to Go documentation
    1d3af726e CONTRIBUTING.md: update links
    af05a6882 Dockerfile: use COPY --link where possible
    1da67be9c Stop slowing bash init by caching plugins path slowly
    5bff12354 replace dockerfile/dockerignore with patternmatcher/ignorefile
    55ff9e609 vendor: github.com/moby/patternmatcher v0.6.0
    e050312e6 update flag-description for --cgroup-parent
    d2047b954 cli/registry/client: set actions when authn with token
    1c2cc4bbe info: add CDI spec directories to output
    bb57783ab cmd/docker: areFlagsSupported: don't Ping if not needed
    6e2e92d77 Update docs/command output for volume pruning
    4fc3f0e6f search: deprecate "is-automated" filter and "IsAutomated" field
    299925f4c docs: document special host-gateway value for add-host
    211220cbb cli/command: ResolveAuthConfig, GetDefaultAuthConfig: take ConfigFile as arg
    57f0e46de cli/command/registry: cleanup login tests
    84c956a17 cli/command/registry: cleanup search tests
    3d0b14c3e vendor: github.com/docker/docker 4b19b2f4babd (25.0-dev)
    f38870e68 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5
    a53b03520 vendor: github.com/opencontainers/image-spec v1.1.0-rc4
    8d51f36ca login: Add message about using PATs
    6517db939 update to go1.20.7
    373fa57ed vendor: github.com/containerd/containerd v1.6.22
    0b535c791 vendor: gotest.tools/v3 v3.5.0
    7a89e897e cli/command/container: waitExitOrRemoved: take APIClient as argument
    ce038e77b vendor: github.com/prometheus/common v0.42.0
    bffe277c9 vendor: github.com/prometheus/procfs v0.9.0
    92906a993 vendor: github.com/Microsoft/go-winio v0.6.1
    aacdca0fe vendor: google.golang.org/protobuf v1.30.0
    3cf34c6d9 vendor: google.golang.org/grpc v1.53.0
    5b138189b vendor: github.com/cespare/xxhash/v2 v2.2.0
    c1d065702 vendor: github.com/golang/protobuf v1.5.3
    0b7c72c3b cli/command/container: RunStart: inline variable
    ad43df5e8 configfile: Initialize nil AuthConfigs
    b52fd79f1 docs: add missing docs for "DOCKER_TLS" env-var
    298bddcc2 cli/command/container: deprecate NewStartOptions
    00870d68f Dockerfile: update buildx to v0.11.2
    78e463392 vendor: github.com/docker/docker-credential-helpers v0.8.0
    ff9f1be19 Dockerfile: update buildx to v0.11.1
    680fafdc9 update go to go1.20.6
    223bf80d4 cli/context/docker: Endpoint.ClientOpts, withHTTPClient: inline variables
    3469beb80 replace uses of deprecated api/types that moved to api/types/system
    1f87420b5 vendor: github.com/docker/docker dab9ffb252186f4c47416addb136d579f9314c6a (25.0-dev)
    4d03b935c vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05
    fe7afb700 cli/container: Don't ignore error when parsing volume spec
    323ca1d56 Bump container-device-interface dependency to v0.6.0
    fca67dd81 Dockerfile: update to xx 1.2.1
    de9f1f5b9 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa
    125eeb7ab Add docs for health-start-interval
    986879c07 Add flags to container/service for health start interval
    9bfaa6ff7 revendor docker/docker from master
    dbd9d5d74 Update vendoring for CDI parser
    dad225d1e Support CDI devices in --device flag
    d5f564ada commandconn: return original error while closing
    92d7a234d docker info: fix condition for printing debug information
    88f44ec15 cli: SetupRootCommand: remove redundant flags return
    3cad05fbf cli: move "config" flag to cli/flags/ClientOptions.InstallFlags()
    1c1329fc7 cli/flags: add EnvEnableTLS const for "DOCKER_TLS"
    0b3cadb05 cli/config: add EnvOverrideConfigDir const
    13e842a11 cli/config: add synchronisation for configDir (Dir, SetDir)
    9f4af6cb7 vendor: docker/docker 7f8b1cd7f928dee54174d51dc9da17f443c31480 (v25.0-dev)
    b32264a1a rename and update mergo module
    5936fd2a8 docs: fix static ip example, network needs a subnet
    b85d6a8f9 docs: fix broken link
    79ff64f06 cli/command/context: don't use pkg/homedir in test
    6c7d17fa0 docs: update the runtime configuration section
    bf5d1ce97 Dockerfile: update buildx to v0.11.0
    2133d0446 cli/command/context: remove deprecated k8s / orchestrator option-stubs
    2d06cfcde cli/command: newAPIClientFromEndpoint: use WithUserAgent
    8181aa887 cli/command/context: don't pass CLI if we only need context-store
    3b8d5da66 update go to go1.20.5
    acb248f8d Dockerfile: update ALPINE_VERSION to 3.17
    9c2694d2b Dockerfile: update gotestsum to v1.10.0
    c2535aa46 build: error if Dockerfile name is passed with Dockerfile from stdin
    77dd05caa cli/command/image: remove errStdinConflict
    d68b36153 cli/compose/convert: convertEnvironment: sort results
    f4bde6869 replace some basic uses of fmt.Sprintf()
    6a50c4f70 cli-plugins: remove deprecated Metadata.Experimental
    58ec4161b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed18760
    bf492bffd vendor: docker/docker ed798d651a50cbd0af4dca127c4bfa243dda9cf7 (v25.0.0-dev)
    54c80d49d vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    9ad605acc vendor: github.com/sirupsen/logrus v1.9.3
    e15ae9e2e vendor: golang.org/x/net v0.10.0
    3b62102ea vendor: golang.org/x/term v0.8.0
    db7886eef vendor: golang.org/x/text v0.9.0
    45fd37aaa vendor: golang.org/x/sys v0.8.0
    a5ebe2282 commandconn: don't return error if command closed successfully
    2331e4d52 cli/command/container: don't mutate ConfigFile.DetachKeys
    23e26f40f cli/command/container: createContainer(): return container-ID
    c2c6fbe23 cli/command/container: TestCreateContainerImagePullPolicy: use sub-tests
    0c5adb2e9 cli/command/container: attach: rename var that collided with import
    47951ff44 docs: add "--detach-keys" example to docker run reference
    c17b0df2a docs: move "--detach-keys" example to examples section
    e4ceed468 docs: added example for specifying socket path with -H
    5251d3748 cli/command: add EnvOverrideContext const for "DOCKER_CONTEXT"
    6458dcbe5 Dockerfile.vendor: update GOPROXY to use default with fallback
    0692d762a cli/command: fix GoDoc referencing wrong const
    982857531 docs: rephrase section on credential stores for docker login
    5d6612798 docs: remove devicemapper
    4cf04988a remove uses of golang.org/x/sys/execabs
    db5e1fa54 vendor: update docker/docker to latest v25.0.0-dev
    2713d0bcd docs: fix example for proxies in daemon.json
    b22290052 docs: remove AuFS from glossary
    e4211c91e docs: remove Docker Toolbox from glossary
    c246ea851 docs: remove boot2docker and docker-machine from glossary
    4c11f73dc man: remove devicemapper from examples
    c61b56518 docs/deprecated: remove "disabled by default" for AuFS, overlay
    9f537a756 docs: remove aufs and legacy overlay
    73fbcdea0 contrib/completion: remove aufs, legacy overlay
    1ec68fabe cli/command/system: remove aufs from fixtures
    6460eea54 docs/deprecated: remove .patch release from deprecation status
    035e26fb0 docs: update link location for the overlay driver
    988e37956 Correct "ps --no-trunc" example output
    2fc30fd45 replace uses of client.IsErrNotFound for errdefs.IsNotFound
    537b88dab cli/command: don't use legacy "notfound" error-type in tests
    353e0a942 vendor: github.com/docker/distribution v2.8.2
    379122b03 cli/config: remove warning for deprecated ~/.dockercfg file
    9b791b4fe cli/config: Load: remove outdated FIXME
    ff7111ae2 cli/command: remove deprecated EncodeAuthToBase64
    d3ac80127 cli/command/stack: remove deprecated RunDeploy, RunPS, RunRemove, GetServices
    72e3813ab cli-plugins/manager: fix deprecation comment of Metadata.Experimental
    4119d268e Update tag docs to clarify name
    28bc90f3b vendor: update docker/docker to v25.0.0-dev, API v1.44
    60b4cdf04 Update version to v25.0.0-dev
    759fa585c docs: update description for docker -H flag
    1d8e2b652 vendor: github.com/docker/docker v24.0.0-rc.2
    ce11b28d8 cli/config/credentials: skip unneeded exec.LookPath()
    2ae223038 remove pre-go1.17 build-tags
    1073b0269 cli/context/docker: rename receiver for Endpoint
    2b7bfb399 cli/command/image/build: GetContextFromReader: rename var that collided
    ab17029c6 cli/command/container: hijackedIOStreamer: explicitly ignore err
    f5e224e94 un-skip history test and fix golden mismatches

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

2 files changed, 8 insertions, 8 deletions

diff --git a/recipes-containers/docker/docker-moby_git.bb b/recipes-containers/docker/docker-moby_git.bb
index 4682ab4e..f8c4c9e5 100644
--- a/recipes-containers/docker/docker-moby_git.bb
+++ b/recipes-containers/docker/docker-moby_git.bb
@@ -44,14 +44,14 @@ DESCRIPTION = "Linux container runtime \
 # so we get that tag, and make it our SRCREVS:
 #
 
-SRCREV_moby = "afcd2cde957e5d3c33b79652645163dcb277b95d"
+SRCREV_moby = "615dfdf67264ed5b08dd5e86657bf0e580731cea"
 SRCREV_libnetwork = "67e0588f1ddfaf2faf4c8cae8b7ea2876434d91c"
-SRCREV_cli = "ed223bc820ee9bb7005a333013b86203a9e1bc23"
+SRCREV_cli = "01f933261885c0126edb3f47fd56d048ae31265a"
 SRCREV_FORMAT = "moby_libnetwork"
 SRC_URI = "\
-        git://github.com/moby/moby.git;branch=24.0;name=moby;protocol=https \
+        git://github.com/moby/moby.git;branch=25.0;name=moby;protocol=https \
         git://github.com/docker/libnetwork.git;branch=master;name=libnetwork;destsuffix=git/libnetwork;protocol=https \
-        git://github.com/docker/cli;branch=24.0;name=cli;destsuffix=git/cli;protocol=https \
+        git://github.com/docker/cli;branch=25.0;name=cli;destsuffix=git/cli;protocol=https \
         file://docker.init \
         file://0001-libnetwork-use-GO-instead-of-go.patch \
         file://0001-cli-use-external-GO111MODULE-and-cross-compiler.patch \
@@ -66,7 +66,7 @@ require docker.inc
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=4859e97a9c7780e77972d989f0823f28"
 
-DOCKER_VERSION = "24.0.7"
+DOCKER_VERSION = "25.0.0"
 PV = "${DOCKER_VERSION}+git${SRCREV_moby}"
 
 CVE_PRODUCT = "docker mobyproject:moby"
diff --git a/recipes-containers/docker/files/0001-dynbinary-use-go-cross-compiler.patch b/recipes-containers/docker/files/0001-dynbinary-use-go-cross-compiler.patch
index 696eeaa7..160a3bca 100644
--- a/recipes-containers/docker/files/0001-dynbinary-use-go-cross-compiler.patch
+++ b/recipes-containers/docker/files/0001-dynbinary-use-go-cross-compiler.patch
@@ -100,12 +100,12 @@ Index: import/hack/make/.binary
                 fi
         fi
  
-@@ -78,7 +57,7 @@
+@@ -82,7 +61,7 @@
         if [ -n "$DOCKER_DEBUG" ]; then
                 set -x
         fi
--       ./hack/with-go-mod.sh go build -mod=vendor -modfile=vendor.mod -o "$DEST/$BINARY_FULLNAME" "${BUILDFLAGS[@]}" -ldflags "$LDFLAGS $LDFLAGS_STATIC $DOCKER_LDFLAGS" "$GO_PACKAGE"
-+       ./hack/with-go-mod.sh ${GO} build -trimpath -mod=vendor -modfile=vendor.mod -o "$DEST/$BINARY_FULLNAME" "${BUILDFLAGS[@]}" -ldflags "$LDFLAGS $LDFLAGS_STATIC $DOCKER_LDFLAGS" "$GO_PACKAGE"
+-       ./hack/with-go-mod.sh go build -mod=vendor -modfile=vendor.mod -o "$DEST/$BINARY_FULLNAME" "${BUILDFLAGS[@]}" -ldflags "$LDFLAGS $LDFLAGS_STATIC $DOCKER_LDFLAGS" -gcflags="${GCFLAGS}" "$GO_PACKAGE"
++       ./hack/with-go-mod.sh ${GO} build -trimpath -mod=vendor -modfile=vendor.mod -o "$DEST/$BINARY_FULLNAME" "${BUILDFLAGS[@]}" -ldflags "$LDFLAGS $LDFLAGS_STATIC $DOCKER_LDFLAGS" -gcflags="${GCFLAGS}" "$GO_PACKAGE"
  )
  
  echo "Created binary: $DEST/$BINARY_FULLNAME"