linux/meta-virtualization.git/recipes-containers/docker, branch master

docker: fix contrip -> contrib typo

2026-04-07T14:23:36+00:00

It has been like this for many years now, so clearly not causing an issue, but we might as well fix it. Signed-off-by: Bruce Ashfield

moby: update to docker-v29.3.0

2026-03-18T13:21:05+00:00

Bumping moby to version docker-v29.3.0-46-g1da6517e1a, which comprises the following commits: da4a6385e6 client: New: ignore nil-Opt instead of panicking fd8c58b1dc chore(deps): update docker/buildx-bin docker tag to v0.32.1 4e3929c00c fix "make validate" ed24fb9f77 client: fix "gosec" linting false positives 571080854b client: go fix 7a2c307dee daemon: fix QF1012: Use fmt.Fprintf(...) instead of WriteString(fmt.Sprintf(...)) 2058a7e917 golangci-lint: ignore "G120: Parsing form data without limiting request body" in tests 64cd0966df golangci-lint: ignore "G101: Potential hardcoded credentials' in tests aecf26ec02 client: go.mod: remove patch version df294b20dd api: go.mod: remove patch version 44e1ccd0a3 client: add missing doc comments to config, secret, and node types 63fcb9ff6f client: add missing doc comments to container copy types e0e4afd325 client: add missing doc comments to image tag, build cancel, and info types a722b68f5c api/types/network: use blackbox testing for ports 91f3ec65e6 api/types/network: Port, PortRange: update godoc for "String()" 19ef53a52f api/types/network: add Port.Port() 4c24542e95 api/types/network: Port,PortRange: don't panic on zero values d2bfe414bd client/internal/mod: also consider main module 835a376948 client: set default user-agent based on module version 1bb13378c5 client: update examples 6c0524748e vendor: github.com/containerd/containerd v2.2.2 011c4451b4 go.mod: add back replace rules 143022931e Dockerfile: update containerd to v2.2.2 c266b4fe9b update to go1.25.8 2f457226ae hack/test/unit: avoid unbound pkg vars with set -u 588e5adf41 bugfix: handle duplicate exit events via task status e064824bbf ci: module-replace: ignore Dockerfile for api changes fe8c9d94c4 vendor: github.com/containerd/ttrpc v1.2.8 5af43607b0 vendor: github.com/moby/moby/client v0.3.0 36771868a6 vendor: github.com/moby/moby/api v1.54.0 4569055e13 Drop replace rules 2fa6029be4 network/connect: Support MacAddress 5db1685516 daemon: add regression test for getSourceMount 71c48150eb gha/labeler: Remove *_test.go from area/testing label 13a8626eeb daemon/devices: Turn RegisterGPUDeviceDrivers into func 561a5a9b36 Use CDI for GPU injection for AMD devices for --gpus 23b30dc35d vendor: update buildkit to v0.28.0 e5a54400b5 chore(deps): update crazy-max/ghaction-github-runtime action to v4 36b2266e75 internal/testutil: drop semconv dependency 5e87fcdc73 Update cloudflare/circl to v1.6.3 17aa4f26e7 client: remove WithAPIVersionNegotiation from example 7bf688478b client, api: add back replace rules e04bd2649e Rename disk usage properties in v1.54.yamlBackport c07043e36f11c060992fb11b2ca3aa8200c393b4 to api/docs/v1.54.yaml. 5272ef1422 Backport c07043e36f11c060992fb11b2ca3aa8200c393b4 to api/docs/v1.53.yaml. 076100ddcc Backport c07043e36f11c060992fb11b2ca3aa8200c393b4 to api/docs/v1.52.yaml. c07043e36f Fix /system/df in swagger.yaml. 425bc6efcb integration/image: pull ppc64le and s390x in TestSaveAndLoadPlatform 36a89adc82 integration/capabilities: Switch to debian:trixie-slim 5f63e8548e integration/container: use page-aligned shm size to fix test on ppc64le f966ff43e3 vendor: github.com/moby/moby/client v0.2.3-rc.1 6e4c253e04 vendor: github.com/moby/moby/api v1.54.0-rc.1 badfa8b3ae Drop replace rules 74ad89c189 api: Cut v1.54 57e197fd21 chore(deps): update github artifact actions be312cbe79 fix(deps): update module golang.org/x/net to v0.51.0 4e606a0154 gha/vm: Limit to cgroup-related integration packages 1433bee87d image: refresh identity cache entries before expiry 59bf6b30c1 image: add identity cache backend walk and prune expired support ab58f4fa4a vendor: update buildkit to v0.28.0-rc2 3aef780b0a image: identity unit and integration tests fae834d543 image: warm identity cache on image changes 2ba7c77be1 image: cache image identity signature lookups e22eb8cb2d image: move image identity logic to dedicated file 6d133c5ec6 image: add opt-in identity support to image list API 434b8a2a51 chore(deps): update docker/compose-bin docker tag to v5.1.0 dbc13e8e43 fix(deps): update module github.com/containerd/cgroups/v3 to v3.1.3 b6073b1016 fix(deps): update aws-sdk-go-v2 monorepo 205266169b fix(deps): update module github.com/godbus/dbus/v5 to v5.2.2 90b19dc740 fix(deps): update opentelemetry-go monorepo to v1.40.0 40f06bf418 Reapply: daemon/command: add support for sd_notify "reload" notifications 2ac82f44af container/prune: Don't fail early on layer size errors 989e590f52 vendor: update buildkit to v0.28.0-rc1 0e7c8176e8 api/types: add MediaType pseudo-type, and touch-up docs 0d4d067f68 client: fix some comments 2283e0351c daemon/server/httputils/logstream: Write: tidy-up stream handling b55842c85f daemon/server/httputils/logstream: Write: handle context cancellation d593a7b427 daemon/server/httputils: move WriteLogStream to its own package f9a213ffc4 client: Client.Events: prefer json-lines, ndjson over json-seq 41e7a3de0a client: container, service logs: skip "tail" parameter if not needed 35fdcb802c api: improve, fix content-negotiation for /events endpoint dff0d87430 daemon/server/httputils: contenttype package and MatchAcceptStrict utility 99add78b1f daemon: send systemd READY=1 after API serve loops start 320b010add api/docs: add "platform" param for `GET /image/{name}/json` (API v1.49-v1.53) 927d7d1045 api: swagger: document "platform" param for `GET /image/{name}/json` 71b5e2cc7d daemon: CDI: fix missing error in logs aa011fc482 daemon: fix spurious "ShouldRestart failed" warning on shutdown 5f3c4002bd daemon: fix "Daemon shutdown complete" log arriving too early be32017b9d daemon/containerd: don't log warning for stopped containers on startup a436529bbc libnetwork: nftabler.Cleanup: pass context and make logs more useful 78d8942c66 daemon/logger: cleanup some tests a2edf4798d client/pkg/streamformatter: refactor 81414a6eb1 client/pkg/streamformatter: use blackbox testing 5f10e5fdfa client/pkg/streamformatter: add TODO for NewLines option dee810c0dc client/pkg/streamformatter: jsonProgressFormatter: remove unused code fe6838cf4c client/pkg/streamformatter: optimize appendNewline 71025997bc client/pkg/streamformatter: remove redundant nil check cf4d504c29 client/pkg/streamformatter: fix faulty TestNewJSONProgressOutput e3e1167c00 client/pkg/streamformatter: remove redundant cmp-opts in test 21706fb5cd client/pkg/progress: reduce some wrapping 8b4edd73b3 client/pkg/jsonmessage: make DisplayJSONMessages accept a iter.Seq2 eb14c7bfd8 daemon: Daemon.getInspectData: unify platform-specific fields d71f8560e4 daemon: remove obsolete warning for legacy "overlay" f96921e5e5 api: lower default minimum API version to v1.40 e2fad779f7 api: restore support for API v1.41, v1.42, and v1.43 225a61e5f0 integration: raise timeout for "vm" tests 9eb56a9225 client/internal: export stream type e30b1d5495 daemon: Fix DNS config corruption on reload c5a0bfd9ff client/pkg/jsonmessage: fix typo in godoc bdede35717 api/types/jsonstream: add sanity-check for Message marshaling d00882aff2 api/types/jsonstream: prevent panic on nil-Error 02c0f96405 hack/dockerfile: fix tini build with newer CMake versions 254158991a daemon: remove deprecation warning for "windows-dns-proxy" feature flag 9d77f4a0e4 daemon/container: Container.TrySetNetworkMount: use switch 9a9106b71a api/types/swarm: PortConfig: add Compare method 7cfe94a34e daemon/libnetwork/osl: don't chain "WithXXX" for logs b7a404d94d migrate TestSwarmCAHash to Integration Test fadc29b86f libnetwork: send neighbor advertisements on restore 21d383fca5 modernize: waitgroup 9e093be715 daemon: Daemon.loadContainers: use WaitGroup.Go 62f1a1772c daemon/internal/metrics: CleanupPlugin: use WaitGroup.Go cc5d36b2db daemon: Daemon.restore: use WaitGroup.Go c6ca7d49f9 Revert "daemon/command: don't make notifyReady(), notifyStopping() asynchronous" 5bdfdc0919 Revert "daemon/command: send notifyReady, notifyStopping synchronous" ddb636c2bd Revert "daemon/command: add support for sd_notify "reload" notifications" 538c494d2b daemon/containerd: singlePlatformImage: remove contentStore arg a85d62fdfa Makefile: fix DOCKER_LDFLAGS example 34653f13ee daemon/libnetwork: update go:generate import paths 786528f38f integration/daemon: remove stray "import" comment c59fad9140 fix(deps): update github.com/moby/policy-helpers digest to 824747b fea88ec7da daemon/internal/metrics: CleanupPlugin: minor cleanup eda57913fc daemon: NewDaemon: update log that chained "WithField" f3fae5d18c daemon: Daemon.restore: pass through context to daemon.register 53232b1319 daemon: Daemon.restore: use correct logger 3ba816f747 daemon: Daemon.restartSwarmContainers(): reduce nested if 107724f022 Remove direct dependency on code.cloudfoundry.org/clock 146c702f24 Fix missing error check in ContainerTop on Windows 381ca65f34 vendor: golang.org/x/oauth2 v0.35.0 9db7dfa93b vendor: golang.org/x/tools v0.42.0 fa509b5b4a vendor: golang.org/x/mod v0.33.0 05918ae874 vendor: golang.org/x/net v0.50.0 873288917c vendor: golang.org/x/crypto v0.48.0 a464d5ce05 vendor: golang.org/x/term v0.40.0 c69b6a1ea1 vendor: golang.org/x/text v0.34.0 641cf3c34e vendor: golang.org/x/sys v0.41.0 8e5c906a3c daemon/internal/builder-next: add executorOpts struct 52c122b7f1 Dockerfile: update docker CLI to v29.2.1 39d5be178b builder-next: prevent "invalid IP" used for DNS 9e172b47d4 builder-next: remove some intermediate vars f758cf5f00 builder-next: close boltdb instances on error 83b04feb86 daemon/volume: cleanup some logs 7fef0b66f6 daemon/volume: don't print warnings for non-volume directories d9f16785f9 daemon: warn for unmet system requirements after service registration 8ba81896fb daemon: CheckSystem: use sync.OnceValue b8c6046f74 daemon: allow service registration on Windows with missing system dependencies 5bb55365c5 forwardExtDNS: Don't cancel context then use it b29dbcf5ca migrate to github.com/pelletier/go-toml/v2 c50290185f vendor: github.com/mistifyio/go-zfs/v4 v4.0.0 52836336a9 daemon/container: Container.Reset: use early return 80bfc74230 daemon/container: Container.Reset: use structured logs 7378207260 daemon/container: Container.Reset: remove "lock" argument 1b9e1c8add daemon: fix getSourceMount to handle multiple mounts at same path Bumping docker-cli to version v29.2.1-10-gdf016a3a9, which comprises the following commits: 5eb91665d docs: fix typos Signed-off-by: Bruce Ashfield

moby: update to docker-v29.2.1

2026-02-10T21:04:20+00:00

One cli patch is refreshed, otherwise, no build changes required. Bumping moby to version docker-v29.2.1-34-g8abd12c5bb, which comprises the following commits: 7fef0b66f6 daemon/volume: don't print warnings for non-volume directories d809806f2f daemon/volume: Drop BindOptions for image mounts 8014653ecc fix(deps): update github.com/moby/policy-helpers digest to 77d5435 eb0a1bc455 integration: run more Buildkit tests on Windows 5fc3ea8426 .github: actually use snapshotter in Windows tests efc2f55cc1 .github: install buildx in Windows CI 5d963f26fe hack/make.ps1: respect $TEST_INTEGRATION_FAIL_FAST f889c34627 Dockerfile: upgrade Delve to v1.26.0 8f66e0c150 update to go1.25.7 897575142a gha/bin-image: Fix build not running for tags af18206630 daemon/command: add support for sd_notify "reload" notifications 0e523625f8 daemon/command: send notifyReady, notifyStopping synchronous 236fc46b5a daemon/command: don't make notifyReady(), notifyStopping() asynchronous ae7e72b626 gha: update OTEL collector to v0.144.0 f478a9212d go.mod: add back replace rules 899446ca81 fix(deps): update module code.cloudfoundry.org/clock to v1.60.0 a1056edad1 golangci-lint: make exclusions more specific, and combine some 8f45db8414 daemon/pkg/registry: use lazyregexp again 3f9885fa1f hack/validate: golangci-lint: rm deprecated --print-resources-usage flag 7648df07ad fix(deps): update module github.com/coreos/go-systemd/v22 to v22.7.0 3a583a570b c8d/system: Fix race between `df` and `prune` 4ec7c53f1f ci: renovate: replace uses of deprecated matchPaths option 3068dc540f chore(deps): update github/codeql-action action to v4 54501c09fc Bump go-tuf from v2.3.1 to v2.4.1 21dd960a73 d/libnetwork: fix (*Controller).getLBIndex panics 420cdd1737 ci: update docker/github-builder to v1 750a2014a5 vendor: update buildkit v0.27.1 b3babf3419 chore(deps): update docker/buildx-bin docker tag to v0.31.1 e396e5a6ea ci: renovate: tweak settings for golang.org/x/ c622002eb9 ci: renovate: group google.golang.org/genproto packages 2796980dbc vendor: github.com/theupdateframework/go-tuf/v2 v2.3.1 d5ddaeddce vendor: github.com/secure-systems-lab/go-securesystemslib v0.10.0 178106be33 daemon: shouldIgnoreExitEventWithLock: fix minor nits b0e62bdf59 vendor: github.com/moby/policy-helpers eeebf1a0ab2b d7218ec6c1 daemon/pkg/plugin/v2: use namespace consts 51664a25d7 libn/d/overlay: calculate SPI like older engines 13422acb53 renovate: ignore docker/github-builder-experimental 1200f5e45c daemon: Fix panic in shutdown after daemon init fails b7b572a3e0 vendor: github.com/moby/moby/client v0.2.2 655828b656 vendor: github.com/moby/moby/api v1.53.0 4fa326fa85 api: Cut v1.53 f9ed31aa95 Drop replace rules 59abc76746 daemon/pkg/opts: remove unused ParseHost 8afb45b42f loadDaemonCliConfig: explicitly set default host f6c0f41e6d api/pkg/authconfig: reject multiple JSON documents in Decode 62c1a719b3 api/types: use "omitzero" instead of "omitempty" for "netip" fields 9d839a236c chore(deps): update actions/checkout action to v6 7e8adf4d33 ci: renovate: disable for api and client modules f187929e87 retrigger github action 86fd73d8bc ci: renovate: fix regex escaping 8ff66aa5dc ci: renovate: add comment about Graylog2/go-gelf dependency c36b44b21a ci: rename renovate.json to renovate.json5 c75070b9b4 chore(deps): update actions/cache action to v5 ab3be3c68b typo: called to caller 5589d5a1ea fix(deps): update module code.cloudfoundry.org/clock to v1.59.0 2cafa78953 vendor: github.com/cloudflare/cfssl v1.6.5 3b5a0c1e4c vendor: github.com/zmap/zlint/v3 v3.5.0 35aa470f73 vendor: github.com/weppos/publicsuffix-go v0.30.0 d5e23b680c daemon: ignore duplicate task exit events in daemon state 7b38ece108 integration: gofumpt 17de27ffc2 daemon: gofumpt 5bde1565a6 client: gofumpt f3343bf846 api/types: gofumpt 3380c52740 vendor: github.com/klauspost/compress v1.18.3 0a3af47d89 vendor: golang.org/x/tools v0.41.0 2d5c1cdb02 vendor: golang.org/x/mod v0.32.0 818ec93592 vendor: golang.org/x/net v0.49.0 7a12d1bcea vendor: golang.org/x/crypto v0.47.0 d163d3326b vendor: golang.org/x/term v0.39.0 5b62347a5f vendor: golang.org/x/text v0.33.0 dceb87f58b vendor: golang.org/x/sys v0.40.0 4bc3a76891 daemon/command: slight cleanup of normalizeHosts 20c801f9e1 daemon/pkg/opts: export ParseDaemonHost 7f16c4fee0 vendor: github.com/sigstore/rekor v1.5.0 bb43161e2f vendor: google.golang.org/api v0.260.0 b21163a330 vendor: github.com/googleapis/enterprise-certificate-proxy v0.3.9 644af76187 vendor: github.com/googleapis/gax-go/v2 v2.16.0 a39cf56355 vendor: go.uber.org/zap v1.27.1 ca49081e4e vendor: cloud.google.com/go/auth v0.18.0 c7657f8d73 client: ResponseHook: remove error return 2bc7febeb6 client: implement WithResponseHook option 48bbed596e fix(deps): update module google.golang.org/grpc to v1.78.0 b30e701b73 vendor: update github.com/go-openapi dependencies fd1679ac13 vendor: github.com/sigstore/sigstore v1.10.4 b92173f68a fix(deps): update aws-sdk-go-v2 monorepo 5819d10989 client: deprecate ContainerListOptions.Latest d9cead55b2 client: deprecate ContainerListOptions.Since, ContainerListOptions.Before 311bfe9cc9 fix(deps): update module github.com/aws/smithy-go to v1.24.0 36b94c251c chore(deps): update tonistiigi/xx docker tag to v1.9.0 1b665b6af6 chore(deps): update lima-vm/lima-actions action to v1.1.0 edcbbba6d4 chore(deps): update docker/buildx-bin docker tag to v0.31.0 686c611b25 chore(deps): update alpine docker tag to v3.23 59083a9057 fix(deps): update module github.com/miekg/dns to v1.1.72 d204cc202e chore(deps): update docker/compose-bin docker tag to v5.0.2 9c2e4d9295 renovate: Always run go mod tidy 8a7e012563 renovate: Ignore go-gelf 695f158716 pkg/homedir: fix broken links to basedir specs fba5998d26 vendor: update buildkit v0.27.0 e8f088caf7 daemon: rename vars that shadowed imports 2f6011c05f daemon: daemon.registerMountPoints: use switch statement 26e8376a3c api: fix grammar: user defined / user specified -> user-(defined|specified) a10af4dc68 gha/labeler: Use "all" group for vendor exclusion 96df8d8a1f Add test case for ContainerList Latest option, use table-test d8e88a964b gha/labeler: Filter out vendor changes 1a75179857 daemon/volume/mounts: extract validation for extra fields 1f93820d1d vendor: github.com/miekg/dns v1.1.70 62cecee324 chore: Update outdated GitHub Actions versions 90c3f80735 go.mod: add back replace rules 86f122af27 Map nvidia --gpus request to CDI device requests 5961616a77 daemon/server/backend: ContainerListOptions: remove unused Latest field 3abbf46a6b daemon/server/backend: ContainerListOptions: remove unused Before and Since b0c8ff7d0c daemon: Check system requirements in newDaemonCLI 69d67e07fa vendor: github.com/moby/moby/client v0.2.2-rc.2 46ecbe09a9 vendor: github.com/containerd/stargz-snapshotter v0.18.1 bd660c390b api/docs: sync MountType to versioned swagger specs 721cb50a18 api: add MountType to definitions 2018b9e1f3 Use Debug instead of Debugf for device request logging 1b5b00c98c fix grammar: user defined / user specified -> user-(defined|specified) c1b3202150 integration/volume: Add test for image mount subpath daemon restart 1b427548b1 vendor: github.com/moby/moby/api v1.53.0-rc.2 6dac897ad4 daemon: Check system requirements before initialization ef5287fb08 migrate TestContainerAPIPostContainerStop to integration 89a04a8354 vendor: update buildkit to v0.27.0-rc2 26d292b3e4 inspect: add API-version gate for image identity 8890f815ca inspect: add signature identity support 0adfe6c856 inspect: add pull identity to track origin registry repo 3540989c71 inspect: add build identity support 7745b7135f api: add swagger definitions for new Identity type 1d4e04bed1 api: add inspect identity base type to expose trusted image origin bead7d7dd4 fix: goroutine leak in TestRingLogger 0100e94c49 renovate: Group golang/x packages 732379f8c2 renovate: Add git sign off e521c369e0 renovate: Move to .github 783d2fd8ce Add renovate.json 0408faabd6 vendor: github.com/moby/buildkit faed462a29ea (v0.27.0-rc2-dev) 2c66ddf907 vendor: github.com/moby/buildkit v0.27.0-rc1 cebb12ddaf update to go1.25.6 2fe5e8e04a vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 4a0f9759f9 vendor: github.com/jmoiron/sqlx v1.4.0 39e6e582c6 vendor: github.com/spdx/tools-golang v0.5.7 eb31710061 vendor: github.com/prometheus/procfs v0.17.0 3684a9cfc4 vendor: github.com/hashicorp/go-sockaddr v1.0.7 5ff9c6a9fd vendor: google.golang.org/genproto/xxx v0.0.0-20251103181224-f26f9409b101 09251e5855 vendor: github.com/googleapis/enterprise-certificate-proxy v0.3.7 184ee84190 vendor: github.com/containerd/nydus-snapshotter v0.15.10 25aec1f32d vendor: github.com/anchore/go-struct-converter v0.1.0 dc46ee9e1c vendor: github.com/Azure/azure-sdk-for-go/sdk/azcore v1.20.0 c7d9ac59c3 vendor: cloud.google.com/go/auth v0.17.0 54c9a0f6c4 vendor: github.com/aws/aws-sdk-go-v2/config v1.31.20 3ebfc369cb vendor: github.com/aws/aws-sdk-go-v2/credentials v1.18.24 2a87c9af9d vendor: github.com/aws/aws-sdk-go-v2 v1.39.6 18ea00a638 vendor: github.com/aws/smithy-go v1.23.2 6ff97c143b vendor: cloud.google.com/go/compute/metadata v0.9.0 8ff4021564 vendor: github.com/sirupsen/logrus v1.9.4 97ea303372 Dockerfile: update golangci-lint to v2.8.0 9ec65542a0 libnetwork: fix graceful service endpoint removal e709f27c80 ci: use docker github builder to build bin image 9f2faa5cec client: fix TestWithUserAgent fadd8dc47c daemon/libnetwork: Fix panic in findHNSEp when IP networks are nil cb88c6ba10 daemon/volumes: More fs friendly image mount layer names 9ebbf652bd client: do not modify user-provided HTTP client 41d19f6644 api/docs: backport assorted fixes and enhancements to older api versions f2f622ebf4 internal/testutil/daemon: fix minor linting issues 4bcf9665af vendor: cloud.google.com/go/logging v1.13.1 0d27c51913 hack/validate: only search repo-dir for modules 07e2a782c7 libnet/internal/resolvconf: Parse: improve error message 32d34c472c docs: fix type in comment 06704ef904 client: use stop function to deregister context.AfterFunc d85c1a258a daemon/server/httputils: remove badParameterError e529aa7d7c integration/container: TestStats: explicitly check zero-value 0fb55db037 docs: clarify healthcheck behavior dcb0149ee1 daemon: inline copyAttributes utilty 8a01dc2f90 daemon/cluster/executor/container: rename vars that shadowed 5c637b7209 fix: prevent potential panic in Shutdown when EventsService is nil 22345e3369 docs: improve description of image tag API endpoint 1b9f126ede docs: document healthcheck timeout termination behavior 955897fe21 docs: fix base64 encoding description for secrets and configs 917d66d833 docs: update stats API description for cgroups v2 compatibility 1fd2395cd3 docs: fix reversed descriptions of version.Arch and info.Architecture ae4c17fdb7 migrate TestAPIImageImportBadSrc to integration test 93afda3670 migrate TestAPINetworkInspectWithScope to integration test c8aaeea285 ci: run golangci-lint for each Go module e09afad3cb api/types/network: remove use of "reflect" in test 78c6b01902 api: add root doc.go to prevent fallback to github.com/moby/moby 9176746aba vendor: github.com/tetratelabs/wazero v1.11.0 2a9eb66ddc vendor: github.com/moby/go-archive v0.2.0 7239c72eca remove uses of deprecated go-archive consts 1a12717766 vendor: golang.org/x/oauth2 v0.34.0 595d00cb49 vendor: golang.org/x/tools v0.40.0 d9fa84260a vendor: golang.org/x/mod v0.31.0 98ec249d2b vendor: golang.org/x/net v0.48.0 e229e91247 vendor: golang.org/x/crypto v0.45.0 1a4e4dafe9 vendor: golang.org/x/text v0.32.0 e0795ef3ab vendor: golang.org/x/tools v0.39.0 48e96d4353 vendor: golang.org/x/sync v0.19.0 dccdb1b618 vendor: golang.org/x/sys v0.39.0 7ddc5f609a hack: add nri_no_wasm build tag to static builds 1175dd348e daemon/volume/mounts: Fix tests on Windows 6cbabb04b9 gha: Bump actions/download-artifact to v7 fae334b4c0 vendor: google.golang.org/protobuf v1.36.11 beeacde4b2 Remove restriction on anonymous read-only volumes 8452b64f32 Dockerfile: update containerd binary to v2.2.1 (static binaries and CI only) b293e73bdb vendor: github.com/containerd/containerd/v2 v2.2.1 01440122f2 vendor: github.com/containerd/nri v0.11.0 32d4f64a65 vendor: github.com/opencontainers/runtime-tools v0.9.1-0.20251114084447-edf4cb3d2116 6766ce7be2 vendor: tags.cncf.io/container-device-interface v1.1.0 2c533f9327 vendor: github.com/containerd/cgroup/v3 v3.1.2 4b4223a8d4 vendor: github.com/opencontainers/runtime-spec v1.3.0 9ae239e654 golangci-lint: iface: ignore identical interfaces in client module 7b74376ff1 client: testRoundTripper: remove unused skipConfigureTransport method 34ee29ceaa client: use errors.New (revive) e254a9f0f1 client: containerDiskUsageFromLegacyAPI: make switch exhaustive f39912a30e client: fix some missing error checks in tests (ineffassign) 8f3bfa3f34 client: fix missing import aliases (importas) 0fd5cc134b api/types/jsonstream: Message: fix godoc 6c845ded18 api/types/swarm: ResourceRequirements.MemorySwappiness: fix json tag f005e1cb73 vendor: update buildkit to d1e5d1a8f771 (master / v0.27.0-dev) 8c0e404f6f vendor: go.opentelemetry.io/contrib/* v0.63.0 c88c8a6547 Dockerfile: update RootlessKit to v2.3.6 307bcec726 vendor: github.com/rootless-containers/rootlesskit/v2 v2.3.6 c6d2d697eb docs: remove mention of DOCKER_CLIENTONLY 81c170a696 Makefile: remove DOCKER_BUILD_GOGC d5c81b1c01 Makefile: remove unused DOCKER_BUILD_PKGS 3a9a041092 Makefile: remove unused DOCKER_BUILD_OPTS 9dd2936e04 validate/module-replace: Also allow changing ref of the api module 05f9988fc8 hack/vendor/dropreplace: Make the auto-ref pick more reliable 354abbcb92 hack/vendor: Allow to specify ref to dropreplace 4b9e56156d Re-add replace rules 1acc9d3739 vendor: github.com/moby/moby/client v0.2.2-rc.1 3cee1aad22 vendor: github.com/moby/moby/api v1.53.0-rc.1 5070ad8dc1 Drop replace rules 614d9b966f daemon/libnetwork/options: GenerateFromModel: remove redundant check e1fb5ef4a7 api: update to go1.25.5 and remove version from Makefile 265bdc1a06 validate/module-replace: Ignore client diff if it only removes the replace rule aef5d996ce use mime-type application/jsonl to align with openapi 3.2 26bb1af7e6 daemon/layer_store: Use named return error for defer 72ce2c3f82 doc: fix module definition c63bf203bf vendor: github.com/moby/buildkit v0.26.3 1f532963ed golangci-lint: remove unused exclusion rule 9cd41375ce Dockerfile: update golangci-lint to v2.7.2 1f498c5ff0 fix linting issues 366044fc20 vendor: github.com/spf13/cobra v1.10.2 c2073cc7e2 vendor: go.etcd.io/etcd/* v3.6.6 0ae3f972ad daemon: Simplify slices.Contains usage 8802be9eca hack: Restore rootlesskit and tini installers 54a6ec374a Update client MaxAPIVersion to 1.53 1e209e788b Continue to backfill empty PortBindings in API 1.53 2cce7ff87f api/docs: move ImageHistoryResponseItem to definitions (API v1.25-v1.52) b48be08eb5 project: Update branches/tags and patch releases 51d1974500 daemon/cluster/test: Use `t.Context()` 6c5233e109 modernize: Use `strings.CutSuffix` 71fd582aa2 modernize: Use strings.Builder instead of string concatenation 62ed24a87c modernize: Use slices.Contains bce14ac5bc reflect: Use `TypeFor` instead of `TypeOf` 3df05205f4 modernize: Use range int e548a31d28 modernize: Use `min` built-in 39c19d9161 modernize: Use fmt.Appendf cdce8f4f92 modernize: Use maps.Copy instead of for loops ff33808a79 modernize: Use strings.Cut instead of strings.Index where possible a25907b485 modernize: Prefer `strings.SplitSeq` instead of `Split` c9b0a21bb1 modernize: Use `b.Loop` (introduced in Go 1.24) 37fdb6d775 ci: Remove concurrency setting from golangci-lint config f44b5abf0e api: deprecate /grpc and /session endpoints a0bd623959 api: remove docs/v1.53.yaml 53c67be034 daemon/c8d: Log correct error extractOCIErrors 98d196b714 NRI: error on unsupported adjustment ff553c5069 NRI: make config reloadable 3f938c6091 gha: Bump actions/upload-artifact to v6 3fdde529e7 layer: Clean up init layer if initialization fails 7c7a626e5d NRI: include in API Info response f6b1488468 Bump API to v1.53 29d5098ffd migrate TestAPINetworkInspectWithScope to integration test d7a6250b91 layer: Clean up RW layer if mount metadata save fails 10c0fc4de8 NRI: add TestNRIContainerCreateAddMount a30301b28d NRI: allow plugins to add mounts 52f33797f3 vendor: github.com/opencontainers/runtime-tools v0.9.1-0.20251111083745-e5b454202754 70004549fb layer: Fix orphan creation in registerWithDescriptor 413b4afcba vendor: github.com/tetratelabs/wazero v1.10.1 24bac4495e vendor: github.com/containernetworking/plugins v1.9.0 caaa9c9bb5 simplify swagger generation ec9315cd4f daemon: clean up dead containers on start 849afcc5be daemon: use WithExtraDialOpts for containerd client connection 8dd2c72fb6 gha/vm: Update lima template locators c74203adbb gha: Fix PR branch validation 0666108ebf api: move scripts to generate and validate swagger to api module a97b330c6c Makefile: Add simple dev loop 2a191665b8 daemon/container: Container.BackfillEmptyPBs: prevent nil map 43780fe40c daemon: disallow container port 0 695010ba2e daemon: buildCreateEndpointOptions: fix panic with "publish all" 8cf9e64738 NRI: report container state to plugins dc1fe0be82 NRI: minor cleanups 322dda3908 NRI: add TestNRIContainerCreateEnvVarMod b67f0c0449 NRI: add ContainerCreate hook, allow env-var adjustments 565f7dce18 integration-cli: TestUserDefinedNetworkAlias: adjust for API versions 93eb7962dc integration-cli: TestUserDefinedNetworkAlias: replace deprecated utils 83f17f77cf integration-cli: adjust some tests for API-specific event-types 35f1250685 integration-cli: use event-consts in some tests 33eb3b8d78 integration-cli: TestEventsFilterType: remove test for "build" events 99066209a2 libnetwork/options: GenerateFromModel: use generics 14c5cd377d libnetwork/options: GenerateFromModel: reduce reflection d210449d85 Natively support GRPC on the docker socket fcb23060fc integration-cli: rewrite some tests depending on intermediate images 751a6f9f33 integration-cli: improve TestBuildNoNamedVolume 5152c7c3ef integration-cli: DockerCLIBuildSuite: use more unique names for images a39e866aa8 integration-cli: rename var that shadowed package-level const 14906f8023 NRI: use the daemon's logger 282868dabf NRI: instantiate and start/stop NRI adaptation 4941b36883 NRI: import containerd's NRI adaptation package 5ab4a14fe8 gha/vm: update Lima to v2.0.2 cc30833181 integration: increase timeout a230544000 NRI: add daemon.json/command line options 29560eacda go.mod: add back replace rules 773aca9f5d api, client: add separate LICENSE file bb713e7fa8 Fix spelling error in comments for names-generator.go 3ac4fd1eba project: add End-of-maintenance date for 25.0 e874083bdb Dockerfile: update compose to v5.0.0 da1e638566 Dockerfile: update cli to v29.1.2 b56d077034 fix: Correct typo in error message 9e72c44dae rm -r hack/dockerfile/install 6f9d1ec3fb update to go1.25.5 81d930f527 gha: update to actions/setup-go@v6 7000f92763 gha: update actions/download-artifact@v6 69963d84f8 gha: update actions/upload-artifact@v5 43ed81ed85 gha: update actions/checkout@v6 4b8f9dd251 vendor: github.com/klauspost/compress v1.18.2 a0e5e0525b Improve description of tmpfs mode 7687298e0a hack/validate/module-replace: relax check a828af4d8d Dockerfile: Update buildx to 0.30.1 f97f234729 Dockerfile: update runc binary to v1.3.4 b9d18a107a integration: cdi: add TestEtcCDI to verify /etc/cdi is used in rootless mode a55f610e2a cdi: resolve symlinks e29eaedf65 cdi: skip scanning non-readable dirs cd4397b4dc cdi: read XDG_CONFIG_HOME/cdi and XDG_RUNTIME_DIR/cdi for rootless 2e3a23c8ec c8d/inspect: Fix image inspect for incomplete images 69c4ea7aad system: df: fix SharedUsage on non-containerd 8c0751aa4d dockerd-rootless-setuptool.sh: fix `nsenter: no namespace specified` 7517464283 PublishAllPorts: don't crash with nil PortBindings 87583c9029 integration: migrate TestAPIImagesSizeCompatibility to integration test 310aa9241a libnet/pm: log when stopping userland proxy 52fae09ec0 libnet/pms/nat: don't bind IPv6 ports if not supported by port driver 955650b33f gha/test-validate: Reuse the dev image 56e8e43339 Revert "libnet: populateNetworkResourcesOS: updateDNS only if !needResolver" 83f00e9f2b Revert "libnet: rebuildDNS: update the hash file" 14a955db2f Revert "libnet: setupDNS: don't overwrite user-modified resolv.conf" 4219768511 vendor: update to client 0.2.1 ea539d267d client - use tagged api module c74559df60 gha/validate: Actually dont fail fast ecf4446e46 gha/validate: Don't fail fast 46ca7f19cd validate/module-replace: Fix check f745fe7f14 vendor: client/0.2.0 a60bea5412 Drop replace rules 04ab3d562c client: don't downgrade when failing to negotiate 189942570a client: enable API-version negotiation by default e752ec0f8e client: fix typo in comment bec7ab7f62 client: TestTLSCloseWriter: test with version negotiation enabled 701f2fdade client: improve mocking responses ef588715b6 client: add mockPingResponse utility acb5c5a390 client: mockResponse: prevent sharing body reader 45c9f460b8 client: checkResponseErr: don't read body for HEAD requests 77858fab6e client: ensureBody: also ensure the request is preserved e51a4306e2 client: ensureReaderClosed: small optimizations 89bd3150e1 client: client.ping(): use fresh request for HEAD -> GET 75520d1f5b client: resolveContainerSpecImage, resolvePluginSpecRemote: early returns 366ea9e9af client: ServiceCreate,ServiceUpdate: don't add empty warnings e94ed33de1 vendor: github.com/mistifyio/go-zfs/v3 v3.1.0 0389d3b13e vendor: github.com/opencontainers/selinux v1.13.1 bda87b7de8 vendor: golang.org/x/crypto v0.45.0 163cc95aea Add TestGatewayErrorOnNetDisconnect 8f2aa3e0f5 Network disconnect: log rather than error on gateway update e4a1657762 Check containerd client before using on Windows a3916290da vendor: golang.org/x/mod v0.30.0 10d68d4399 vendor: golang.org/x/net v0.47.0 633acaa5b3 vendor: golang.org/x/crypto v0.44.0 e4900958c3 vendor: golang.org/x/text v0.31.0 bd79eb0da5 vendor: golang.org/x/tools v0.38.0 421bda22d1 vendor: golang.org/x/sync v0.18.0 3054fdd8b2 vendor: golang.org/x/sys v0.38.0 997837376a vendor: github.com/cloudflare/circl v1.6.1 5a5d5b4c5f integration: add Windows network driver and isolation tests 731ae07e65 Endpint.sbLeave: when deleting container, no new gateway 7639e193ff libnet: setupDNS: don't overwrite user-modified resolv.conf eb18b398d4 libnet: rebuildDNS: update the hash file 937246a868 libnet: populateNetworkResourcesOS: updateDNS only if !needResolver 85b260fba8 PublishAllPorts: create port mappings for exposed ports a2de9bb334 Unmap more netip.Addr vars created using AddrFromSlice 2effc1bfd4 inspect: unmap IPv6-mapped IPv4 host address 84a251d039 Allow configured address with no configured subnet 7e14b4d931 Update docker-py in test-docker-py 517ae20be8 .github: collect all the OTEL traces 54d269a3b4 vendor: update buildkit to v0.26.2 442f0115cd docs: update contributing guides for clarity and consistency (#49891) 93825e00e8 migrate TestAPIImagesSaveAndLoad to integration test ed10b98506 Restore missing nwEndpointsMu.Lock 9fbc9d6e6d integration: migrate TestAPIGetEnabledCORS to integration test 774bb532f1 vendor: update buildkit to v0.26.1 e59d1b4563 libnetwork/drivers/overlay: DiscoverNew: move logic to setKeys, updateKeys f40b45ca1f libnetwork/drivers/overlay: use structured logs in some places c9f0314f21 libnetwork: controller.handleKeyChange: slight cleanup of logs de11467756 daemon/containerd: cleanup registry error-handling de546caa92 daemon/containerd: translateRegistryError: add early return 029770595d integration-cli: remove TestVolumeCLINoArgs 9ab033cc8a client: TestTLSCloseWriter: assorted cleanups / fixes 96b8f9c8ca Daemon.createContainerOSSpecificSettings - remove redundant param 33032b0454 Daemon.setSecurityOptions: remove redundant param 34925e5be9 Remove Daemon.setHostConfig 22c5c78bfb Move Daemon.registerMountPoints out of Daemon.setHostConfig 48709e502f Split OS-specific container config and volume creation 4434236088 Daemon.setHostConfig - don't set default network mode e757bbb4ea Move call to Daemon.registerLinks out of Daemon.setHostConfig 92b4902b8d Daemon.registerMountPoints: var 'container' -> 'ctr' 5c9f2e0388 rootless: ignore error when enabling IPv6 forwarding 4622dd0ccc client: Client.buildRequest, jsonEncode improve handling of content 20d65620f9 client: Client.buildRequest: don't set content-header if not set b17eee7aad Update DOCKERCLI_VERSION to v29.0.1 4e2e2cde7e client: simplify logic for manual vs auto API versions 1731e9e729 Don't try to remove cleared docker_gwbridge endpoint 6857132911 client: client.Ping: allow ForceNegotiate with manual override 8f1134b46d integration/image: migrate TestAPIImagesDelete to the new integration test framework 3e4a3cb03e integration: skip TestBuildWithHugeFile 53764de815 client: make WithAPIVersion, WithAPIVersionFromEnv order-independent a5c7f3f9c8 client: don't negotiate malformed responses bcc1db1ce5 client: WithAPIVersion, WithAPIVersionFromEnv: validate well-formedness 83ad5c92f7 client: Client.ping() fix duplicate ping 49c8d77639 vendor: github.com/ishidawataru/sctp v0.0.0-20251114114122-1 611c7dce43 client: export fallbackAPIVersion as MinAPIVersion 4535d63c91 daemon: install OpenCensus-to-OTEL trace bridge 0af2962fdd daemon: reduce use of pointer-slices in backend 53ea70ea46 inte/networking: TestDisableIPv6OnInterface: add '-c1' to ping 47bd247d4d inte/networking: test DNS resolution for non swarm-scoped nws 2e41476a5f libnet: create DNS records on sbJoin (if not agent node) 94e83af71a client: TestImageListWithSharedSize: merge with TestImageList 62589a6961 client: TestTLSCloseWriter: cancel context after test a5dec0a779 client: make sure context is canceled for ContainerWait tests 76a4381d45 client: TestImageListWithSharedSize slight reformat 9af7fbff2a client: TestImageList: use subtests 391247ce96 daemon: Fix image store choice priority for prior graphdriver state c5d0e3e6fa daemon: Add TestDetermineImageStoreChoice 17a3357e32 vendor: github.com/moby/buildkit v0.26.0 dae3650dcc client: rename/deprecate WithVersion, WithVersionFromEnv e5db2380f5 client: rename options.go to client_options.go 5cf1fb3954 hack/validate: Check if replace rules are needed 0f597561e8 hack/test/unit: Fix api and client module testing without replace rules 2729703967 client: fix example in README (align with ExampleNew()) b29990916d client: fix unused imports 47e852f061 image: pull/load/save attestation manifest and signatures with image 16b95ba758 go.mod: add back replace rules b4f9bd1cb3 c8d/builder-next: Don't force unpack 3874ca5984 vendor: update buildkit to v0.26.0-rc2 d558896fae vendor: github.com/secure-systems-lab/go-securesystemslib v0.9.1 bb07fdcd14 vendor: github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.2 f1d0fe47c9 vendor: github.com/golang-jwt/jwt/v5 v5.3.0 79344e1c9a vendor: github.com/gofrs/flock v0.13.0 d36617d2c1 vendor: github.com/containerd/nydus-snapshotter v0.15.4 1e48c34345 vendor: github.com/containerd/stargz-snapshotter/estargz v0.17.0 c169cc9629 vendor: github.com/google/certificate-transparency-go v1.3.2 940c8d6b71 vendor: cloud.google.com/go v0.121.6 621cee8dbe Dockerfile: update cli to v29.0.0 ce739870fb vendor: github.com/opencontainers/cgroups v0.0.6 7e78088f8f daemon: remove workaround for c8d client connection timeout f740e0fefa vendor: github.com/containerd/containerd/v2 v2.2.0 1639703e56 vendor: github.com/containernetworking/plugins v1.8.0 e4278c4c54 vendor: github.com/containerd/go-cni v1.1.13 7c798d012a vendor: sigs.k8s.io/yaml v1.6.0 d8f2aa4e3b vendor: github.com/containerd/containerd/api v1.10.0 0a494a7303 vendor: github.com/moby/swarmkit/v2 v2.1.2-0.20251110192100-17b8d222e7dd a040664176 vendor: github.com/Microsoft/hcsshim v0.14.0-rc.1 e65995d896 vendor: google.golang.org/grpc v1.76.0, google.golang.org/protobuf v1.36.10 65bb1bb21f vendor: go.opentelemetry.io/otel v1.38.0 6b8285f965 libnetwork/discoverapi: use DiscoveryType for enum 7eaf25ee59 vendor: cloud.google.com/go/logging v1.13.0 3f6f3b9ed2 vendor: cloud.google.com/go/compute/metadata v0.8.0 94eb87f4c0 vendor: github.com/klauspost/compress v1.18.1 1621c4e7ad vendor: github.com/prometheus/client_golang v1.23.2 efc3e93b1e vendor: golang.org/x/oauth2 v0.30.0 e773a0cf50 vendor: github.com/vbatts/tar-split v0.12.2 ebcf9bb0c4 vendor: github.com/containerd/cgroups/v3 v3.1.0 7c29edf1b4 hack: remove cpexp package bb56c4d7e7 daemon: remove some deprecated and unused code 365e588d0f Dockerfile: update containerd binary to v2.2.0 (static binaries and CI only) c950796596 client: use t.Context in tests 20b831c59a vendor: github.com/moby/moby/client v0.1.0 e0a877b487 vendor: github.com/moby/moby/api v1.52.0 854ccbfcf5 Drop replace rules 15241265dc client, api: update go.mod to go1.24 e8f156110a api/types/plugin: remove deprecated Config.DockerVersion 34fb9de7f3 api/docs: remove links to docs.docker.com from changelog d192a63467 daemon: Ensure buildkit created container's isolation mode consistent with daemon's config db71c6a914 api/types/container: make HealthStatus a concrete type 1fd87e9fdf api/types/container: make ContainerState a concrete type 18000fe371 api/types/volume: change ListResponse.Volumes to a non-pointer slice fe1a505cbf simplify some commit tests, and work around change in CLI behavior c477a68fb9 TestBuildForceRm: use assert to help debugging failures b0ab0b4078 TestBridgeIPIsExcludedFromAllocatorPool: don't use deprecated fields 9b7452e903 TestDockerNetworkValidateIP: relax string-matching errors 82a5eec1aa DockerSwarmSuite: relax string-matching errors and output 2e3c523579 TestAttachPausedContainer: relax error-message matching 598618b6f2 TestBuildWithInaccessibleFilesInContext: use sub-tests 7aa036ef2e client: rename CheckpointDelete to CheckpointRemove, and add output struct e2bdc51508 client: CheckpointCreate: add output struct da25838fc3 client: CheckpointListResult: rename Checkpoints to Items fda54735c9 client: move CheckpointAPIClient together with other interfaces d087d3c057 daemon: close EventsService on shutdown 46090e88e4 daemon/internal/builder-next: Builder.DiskUsage(): use singleflight fb94e241f5 daemon: disk-usage: fix incorrect key for singleflight 15a048c396 api, client: don't use a pointer-slice for plugins ed428234bd api: remove / internalize LegacyDiskUsage 71bcd22d6d daemon/server/router/system: simplify constructing response f5e319c950 daemon/server/router/system: use early return for disk-usage 20870f13c2 daemon: remove intermediate vars when collecting diskUsage 0dcb1fe344 daemon: align build.DiskUsage() with other disk-usages f1a3387633 daemon/server/backend: align DiskUsage types with api 04de584531 daemon/server/router/system: use shorter names and comments 32319028e5 daemon/server/router/system: slightly rewrite logic for legacy bd5e6bab1d go.mod: add back replace 34b6fb783d vendor: github.com/moby/moby/client v0.1.0-rc.1 f66f1b451c vendor: github.com/moby/moby/api v1.52.0-rc.1 e8745c2157 Drop replace rules 8db3118ac9 client: remove uses of deprecated NewClientWithOpts 1745075b24 client: DiskUsage: rename fields to match API dcfcfd33e9 client: cleanup and re-group interfaces 931c347b36 api/types: rename disk usage fields 745c483e42 client: pkg/streamformatter: un-export unused utilities 4c6d0ebc40 Fix disk usage result from legacy response logic bc3c37098c vendor: github.com/opencontainers/selinux v1.13.0 10f6eeb56d daemon: Refactor image store choice logic 4a3e139e3c daemon/command: NewDaemonRunner: set both stdout and stderr 0678de9c87 cmd/dockerd: main(): remove "onError" func 922cd97491 update to go1.25.4 d6ceff48bf delete redundant/incorrect cmd/dockerd/README.md d0fbae6e44 gha/vm: Force Lima v1.2.2 0029924181 api/types/system: change legacyDiskUsage to a non-pointer slice ff019cd853 internal/sliceutil: add Deref utility e509a7cefe daemon/command: remove `__dummy_command` workaround for completion 6881ae72c7 api/types: use regular slices for disk usage types c351539358 Dockerfile: test containerd v2.1.5 (linux), v2.0.7 (windows) 37d75fc46c vendor: github.com/containerd/containerd v2.1.5 f76f1fc013 client: Client.ImageSave: close reader on context cancellation 175e4e5048 client: Client.TaskLogs: close reader on context cancellation d35d8ec81b client: Client.ContainerLogs: close reader on context cancellation cc9969bfed client: Client.ServiceLogs: close reader on context cancellation c5aedacb4f client: Client.ContainerExport: close reader on context cancellation 08cd02cab6 client: Client.ImageImport: close reader on context cancellation 849239cedf client: Client.ImageLoad: close reader on context cancellation be96014740 client: Client.ContainerStats: close reader on context cancellation d11232bad9 client: add newCancelReadCloser utility fabdccbe10 api/types: move disk usage structs to per type packages de9ab07188 client: ExecCreateOptions: change ConsoleSize to a ConsoleSize type 443b548efa client: ExecCreate: rename Tty to TTY ebc1dfbb64 client: singularize prune methods 52a917d48a gha/bin-image: Fix dco running on non-v tags 39ccd04ca8 api/types/swarm: define type for RegistryAuthSource 39f2dbffa1 vendor: github.com/moby/buildkit v0.25.2 d299e5be83 api/types/swarm: define type for UpdateOrder b552b8b729 api/types/swarm: define type for FailureAction 47edd80d97 integration-cli: Adjust nofile limits 35f6a78082 Dockerfile: update runc binary to v1.3.3 5ad71c5ddf vendor: github.com/containerd/platforms v1.0.0-rc.2 3a105f4e0c daemon/internal: adjust some build-tags a69abdd90d api/types/system: add type specific usage fields to `DiskUsage` 2af22d3512 Fix TestHandleMACAddressBC dc22f2c8bf client: make ImageSaveResult an interface 5c8a9b7b9e client: make TaskLogsResult an interface 7dc9d39ca1 client: make ContainerLogsResult an interface 8d0b09c722 client: make ServiceLogsResult an interface 0257c642c7 client: make ContainerExportResult an interface 5bfc628e97 client: make ImageImportResult an interface 5fc866fbfd client: make ImageLoadResult an interface 1051c7f89e client: Client.ImageLoad: move description of platform parameter b30eb86b31 go.mod: add back replace rules 668b546d2c docker/save: stable timestamp for blobs/digest dir 31f7f62d6c client/pkg/security: simplify 9b749d7c85 integration-cli: migrate TestAPIStatsContainerNotFound to integration tests b6dab24a43 dockerd-rootless.sh: restore missing `exit 1` 76b1d304e4 dockerd-rootless.sh: reject DOCKERD_ROOTLESS_ROOTLESSKIT_NET=host 5369540dd2 go.mod: remove "exclude" rules 9b8419f6ed daemon/config: export "min-api-version" through daemon.json 3d772829ba vendor: github.com/moby/moby/client v0.1.0-beta.3 93c273dc11 vendor: github.com/moby/moby/api v1.52.0-beta.4 56bd456694 Drop replace rules 1e56b87f7f hack/vendor: Make dropreplace vendor latest version 73455ce01a client: Remove ImageCreate in favor of ImagePull/ImageImport fd1593c067 api/container_inspect: Ensure Config is not nil in inspect response 6aea8c2591 Dockerfile: update integration-cli CLI to v25.0.5 4bcd446f03 Deprecate cgroup v1 a087d03e0c client: refactor create network api implementation to wrap options/results 12c9de37e9 api/types: move Version to api/types/system 3d28cb8bbd client: ServerVersionResult: add back legacy fields ebe464ea45 api/types: remove PushResult type, and move internal 22c037982c API compat: replace nil values when adding fields 19f4c27d81 api/t/network: represent MAC addrs as byte slices 433023a03d Move namesgenerator to internal d1f70d4f54 client: deprecate NewClientWithOpts in favor of New 137adde33d client: prepare option-structs for multiple platforms 860307c4ea client: refactor ServerVersion to return ServerVersionResult 6c042389a3 client: use sub-tests for ServiceLogs e8e7f1a500 client: use sub-tests for ContainerLogs af40d2bfed vendor: cloud.google.com/go/logging v1.12.0 15a1256f21 vendor: genproto v0.0.0-20240903143218-8af14fe29dc1 88cbd467f6 vendor: cloud.google.com/go/compute/metadata v0.7.0 a5c0f152a7 daemon: improve validation for container rename 0eba2989e0 api/types/registry: rename AuthenticateOKBody to AuthResponse 6cf02b5cba client: remove unused import 3c62b06de2 client: fix example, and add runnable example 90e7232c8e Dockerfile: update runc binary to v1.3.2 1cc2ab16ce client/container_copy: Wrap options and result struct 38d703ff6f client/container_update: Wrap options and result e9f28e2a41 client: refactor NetworkConnect, NetworkDisconnect, NetworkRemove 2d6bf9332b client: un-export NewVersionError, rename to requiresVersion 29ad05b130 client: ContainerWaitResult: use singular for channels 51a0584088 client: ContainerWait: touch-up GoDoc, remove legacy code bae45f766d api/types/network: define `ConnectRequest` and `DisconnectRequest` fc97a2ff0d client: Rename ContainerUnPause* to ContainerUnpause* f8b9396c2c gha/labeler: Fix dependencies d2e7465293 client: refactor `ContainerRename` to wrap options/result structs 28ed1ef927 client: refactor `ContainerLogs` to wrap result e46058cbae client: refactor Events, Info, RegistryLogin 749c980d4e client: refactor `ContainerExport` to wrap options/result structs ec22a1e5b2 client: refactor `ContainerTop` to wrap options and results c5ddef1122 client: refactor `ContainerList` to wrap result cf173bc941 client: refactor ContainerWait to use client defined options/results structs bbaeb9036f client/pkg/jsonmessage: use api message def'ns 848b0452d3 client: VolumesPrune: rename argument for consistency 1985a8979e client: VolumeUpdate: add output struct, and move "version" faee204c02 client: VolumeRemove: add output struct 1f5c82b9fa client: add option and output structs for various container methods edbf321ce6 client: remove NegotiateAPIVersion, NegotiateAPIVersionPing c4aee2a50e client: remove ContainerStatsResult.OSType field 6a2a1dd6cf api/types/container: StatsResponse: add OSType field 8118385ba8 client: ContainerStats: add option, output-structs, remove ContainerStatsOneShot 5df881f3a7 daemon: Daemon.ContainerStats: don't escape HTML in responses 7623979aba daemon: Daemon.ContainerStats: combine some conditions and remove error 95a3880197 daemon: Daemon.ContainerStats: inline getStatJSON closure f7003ef7de integration-cli: minor cleanups in stats tests 5742b40c87 integration-cli: simplify, improve some stats tests e690c84bed integration-cli: remove TestAPIStatsNetworkStatsVersioning 155d697010 integration/container: TestStats: use sub-tests 6040a2f686 fix some faulty defers in tests e410daf8f7 integration-cli: TestContainerAPIStatsWithNetworkDisabled: check result 7439f09cd2 daemon: Daemon.stats: fill-in container ID and Name when collecting 3088c4e192 api/types/container: StatsResponse: cleanup fields and GoDoc 9b795c53a7 client: remove ImageLoadResult.JSON field ef589ef824 client: fix ImageLoadResult GoDoc 5cf4d68121 daemon: subscribeToContainerStats: return cancel / unsubscribe function 99410827c7 daemon: use errdefs instead of string-matching in some places 4aac139fc0 client/container_exec: Separate structs for Start and Attach 425975313a client: merge ContainerInspectWithRaw with ContainerInspect 58356450fa client: remove redundant closing and draining of response ddbb503dc7 client: change Raw fields to be json.RawMessage 12123eb592 client: merge ExecInspectResult with ExecInspect 378116a84f client: ImageImportResult: prevent panic on nil reader 0b7b7625c6 client: rename NodeUpdateOptions.Node to NodeUpdateOptions.Spec 875c577711 client: consolidate node options with their methods 832590155c client: ExecCreateResult: define local type with ID field c6a45784f9 client: VolumeListResult: define local type 687c3d7f42 api/types/jsonstream: define Message type ae28867804 api/pkg/progress: move to client and daemon/internal 6baf274fa3 api/pkg/streamformatter: move to client and daemon/internal c246639baa client: rename ImageRemoveResult.Deleted to ImageRemoveResult.Items fb85d123c1 integration/service: fix tests for updated client f40e1a7582 api: move types/versions to client/pkg and daemon/internal c9b3c65f37 vendor: github.com/aws/aws-sdk-go-v2/config@v1.31.15 b3129817a7 vendor: github.com/aws/aws-sdk-go-v2/credentials v1.18.19 1b2015a26f vendor: github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.58.5 7f7588be22 vendor: github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.11 f82fa7a4b2 vendor: github.com/aws/aws-sdk-go-v2 v1.39.4 529076c7b4 vendor: github.com/aws/smith-go v1.23.1 031f30340b vendor: golang.org/x/net v0.46.0 8afa422f0c vendor: golang.org/x/time v0.14.0 8c88244d7f vendor: golang.org/x/text v0.30.0 8d3ae564e0 vendor: golang.org/x/mod v0.29.0 7563a498f0 vendor: golang.org/x/sys v0.37.0 8fb561ca9a client/container_create: Add `Image` outside of Config 3340c86db9 client/container_create: Rename ContainerName to Name bd31b8b1c7 client_(attach,commit,create,diff): Wrap result and options 47fd987af2 client: simplify test with mock-responses 3a43b5b559 client: refactor ServiceCreate, ServiceUpdate, SwarmUpdate 0fe6be8c38 client: remove roundTripFunc, bytesBufferClose b9dd7c0d59 client: tidy-up mock-utilities a315437e1c client: rename transportFunc -> testRoundTripper 0971a3bcb8 Inspect: API v1.51 compatibility f733b411a1 client: remove unused hasEndpointSpecificMacAddress utility 5a5d39205c client: rename `ServiceListResult.Services` to `ServiceListResult.Items` 94ab385eb5 client/container_exec: Wrap options and result, rename to Exec ea0d934ff2 Allow requesting networks with a custom prefix size from the default pools 5c67034952 Dockerfile: upgrade Delve to v1.25.2 5b46429122 client: please the linters c7fe7136d2 client: gofumpt 909e32b27d client: refactor plugin api client functions to define options/results structs 362e9d088f client/distribution_inspect: Wrap options and result f09ca78b45 api/types: fix godoc 7ceea4148a client/node: Wrap options and output 8dc5d1e64d api/types: move Ping and swarm.Status to client 6819a9fc1e client/image_tag: Wrap options and result 347693a580 client/image_remove&search: Wrap options and result b3974f07f5 client/image_list: Wrap options and result a7f409014f client/image_create&import: Wrap options and result 5cc1e5f800 client/build_cancel: Wrap options and result 51ed1a9a37 client/image_build: Rename output to ImageBuildResult cd08b79c02 client: refactor service api client functions for defined options/result structs e3c6dc2a91 client: VolumeInspect: add options struct 8f50d38231 client: SwarmInspect: add options struct 95fac07ccc client/secrets: Wrap results and options ebc92e015a client: PluginInspectWithRaw: refactor and rename to PluginInspect 8cd377bd9c internal/testutil/daemon: remove "Config" utilities f5b0ce3988 integration/network: TestServiceWithDefaultAddressPoolInit fix log 2c5e0a008a client: rename ConfigListResult.Configs to ConfigListResult.Items 67cbf36ac9 client: remove VolumeInspectWithRaw, merge with VolumeInspect 5a04a9718d client: rename VolumeListResult.List to VolumeListResult.Items 485b95600a client: NetworkList: wrap result 3fbf5a3bd1 client: NetworkInspect: wrap result and remove NetworkInspectWithRaw 612342198c client: refactor swarm api functions to wrap params/responses 343185cf1a libnetwork: move Network.resolveDriver to Controller 68e1a8805b Dockerfile: test against containerd v2.1.4 ee3cab4158 libnetwork/drivers/overlay: pass context for logger 38ef4fd576 client: refactor task responses 2d69edd28a client/image_(inspect,history,load,save): Wrap return values 35acf347eb hack: disable go telemetry in integration tests 9fe856a5f3 integration-cli: move some tests to integration 62a71a8261 test: migrate test api error not found json 33fc45e5c5 libnetwork: EndpointInterface: cleanup marshal/unmarshal 48c2d8c458 libnetwork: support custom DNS servers in Windows overlay driver a8950e0192 api/types/container: remove deprecated Config.MacAddress 79912d4c7f daemon: Daemon.getInspectData: move migration code to router 91ce33d4b0 daemon/server/router/container: remove uses of deprecated MacAddress 0030ba21e3 client: ContainerCreate: remove handling of legacy MacAddress e5864a51ac integration/networking: TestWatchtowerCreate: rewrite with request util 8088de791c integration/networking: TestInspectCfgdMAC: rewrite with request util b4b0b6f10f integration/container: rewrite with request for MacAddress 4b22807a0f gha/labeler: Exclude client and api modules from dependencies label abf5679049 client/inspect: Better Raw handling ee22a50b75 client/config: Use Config instead of Spec as field f4b06e66e1 client/config: Wrap results and options 42ba5466c7 api: rename `volumes.CreateOptions` to `volumes.CreateRequest` a2fd724453 client: wrap volume create api options with client options 600edfe55c Move container platform migration logic 3a90dd8b8f Adding support for memory swap settings for services d4e6d4f697 client/volume: refactor volume options and responses 975e46f726 libnetwork/datastore: small cleanups 10faa629fe libnetwork/drivers/macvlan, ipvlan: assorted minor cleanups a013147c40 libnetwork/drivers/macvlan: parentHasSingleUser: don't create copy of networks 65296cd0e7 libnetwork/drivers/macvlan, ipvlan: un-embed mutexes a2f4f09f91 libnetwork/drivers/macvlan, ipvlan: remove unused sync.Once 5276dd8e9a libnetwork/drivers/ipvlan: remove ifaceGateway utility d481c09fa7 libnetwork/drivers/macvlan, ipvlan: make driver.leave a stub aec6e7f7b6 libnetwork/drivers/macvlan, ipvlan: remove networkTable, endpointTable bf7277f8fe libnetwork/drivers/macvlan, ipvlan: remove getSubnetforIPv6, getSubnetforIPv4 a294445345 ibnetwork/drivers/macvlan, ipvlan: align and fix potential panic 17425cff08 libnetwork/drivers/macvlan, ipvlan: driver.Join: don't fetch endpoint twice 3906199019 internal/testutil/request: add ReadJSONResponse utility ee043729a0 integration/container: Make tests runnable on SELinux enabled daemon 5061d0a74d api/types/swarm: remove deprecated ServiceSpec.Networks field acda47637c ci: update docker-py to main (v7.2.0-dev) 6da63a3ed5 client: VolumePruneOptions: add "All" option 2d1429c62c introduce ImagePushResponse e1722eb8d8 daemon/command: disable c8d snapshotter when userns remapping enabled docker-moby/cli: update to v29.2.1 5eb91665d docs: fix typos d6c6bbf57 docker-bake.hcl: use default GO_VERSION from Dockerfile 2d5d0842c update to go1.25.7 def41fe65 docs: fix typo in dockerd.md for 'replacement' 58413ca11 Dockerfile: update tonistiigi/xx to v1.9.0 df3e9237d opts: MountOpt: extract utility functions and don't set empty values d781df8b5 opts: MountOpt: extract validation to a separate function f35fb0f5a cli/command: TestGetDefaultAuthConfig: cleanup test file fe1af9206 opts: MountOpt: improve validation of boolean values 5de99e672 opts: MountOpt: improve validation for whitespace in values 9620e4178 opts: MountOpt: improve validation for whitespace in options e888a6e00 opts: remove outdated comment bcc14559c opts: MountOpt: relax client-side validation of mount target defbe23de opts: MountOpt: improve error for empty value 77e02a92e opts: MountOpt: add test-coverage for volume options 2c8bf677f opts: MountOpt: remove duplicate test 7ebc2f7c2 opts: MountOpt: rewrite TestMountOptVolumeNoCopy to a table-test a850b054a opts: MountOpt: rewrite TestMountOptDefaultEnableReadOnly to a table-test f3efc27a1 opts: MountOpt: combine error tests into a test-table 9c9ec7358 vendor: github.com/moby/moby/client v0.2.2 bab3e81e1 vendor: github.com/moby/moby/api v1.53.0 e34a3422c templates: make "join" work with non-string slices and map values 771660a17 vendor: github.com/go-viper/mapstructure/v2 v2.5.0 08ed2bc6e cli/command/container: make injecting config.json failures a warning e9ceb2f5a vendor: golang.org/x/net v0.49.0 faf8a0836 vendor: golang.org/x/term v0.39.0 daa4d4e4a vendor: golang.org/x/text v0.33.0 a4aee9bf5 vendor: golang.org/x/sys v0.40.0 ce489e0db vendor: github.com/klauspost/compress v1.18.3 ef0847596 cli/command/container: ignore "not found" error on cidfile.Close 16bbf5d07 cli/command/container: cidFile.Write: include CID in error message ed566e723 cli/command/container: createContainer: remove intermediate vars cfb71de7d cli/command/container: createContainer: remove redundant closure adfb40ceb cli/command/container: remove outdated TODO ceea57b46 cli/command/container: copyDockerConfigIntoContainer: close TarWriter effdf1b45 cli/command/container: rename vars to use correct camelCase ccbe206a8 cli/command/containerd: parseSecurityOpts: remove redundant sprintf c8841ac1b vendor: moby/api v1.53.0-rc.2, moby/client v0.2.2-rc.2 7e8457115 update to go1.25.6 86bd884ac docs: Fix daemon.json typo 16873675b vendor: github.com/sirupsen/logrus v1.9.4 b21139c30 internal/jsonstream: TestDisplay use streamformatter d6cdb71e2 cli/command: RetrieveAuthTokenFromImage: remove redundant conditions b13b774e2 man: reformat docker-run.1.md to prevent linting warnings 816f4556c internal/registryclient: simplify notFoundError d61519f99 internal/registryclient: allEndpoints: pass through context fe3157419 improve validation of "--detach-keys" options 6a93e7803 cli/command: add WithAPIClientOptions option db762956d login: touch-up error for non-TTY 4b0ec0d4e cli/command: DockerCli: store API-client options as field f9f2d822b cli/command: make TestSetGoDebug more predictable 391acef40 Improve clarity of environment variables description a6f8391c9 vendor: github.com/docker/docker-credential-helpers v0.9.5 14cffdbfa gha: run unit-tests in go modules mode, to prevent traversing nested modules 0cd2c1858 vendor: golang.org/x/net v0.48.0 647ab775d vendor: golang.org/x/term v0.38.0 a1799eacd vendor: golang.org/x/text v0.32.0 a78533373 vendor: golang.org/x/sync v0.19.0 e2a368fa4 vendor: golang.org/x/sys v0.39.0 ab5d4d4f8 cli/compose/loader: rewrite with reflect.TypeFor 3ce8f1d80 vendor: github.com/moby/go-archive v0.2.0 8205124d5 cli/command/node: nodeContext: remove uses of reflect 40f052c7e cli/command/container: use reflect IsZero f28565d17 cli/command/service: replace reflect for gotest.tools assertion e715dd507 cli/command/volume: remove uses of reflect in test 3811f24f4 cli/connhelper: replace reflect for gotest.tools assertion a89b2e19f cli/command/formatter: rewrite some tests with gotest.tools 90ae5b813 cli/command: replace reflect for gotest.tools assertion a0e303a0e opts/swarmopts: add missing build-tag 03dfab401 remove uses of deprecated go-archive consts dd6d0cd80 vendor: tags.cncf.io/container-device-interface v1.1.0 4743d1d89 Makefile/yamldocs: Don't require TTY 485106679 docs/container: Update dead link 226af6814 cli/command/service: fix API version for memory-swap, memory-swappiness 13759330b cli-plugins/manager: remove legacy system-wide cli-plugin path 302498c33 vendor: github.com/moby/moby/client v0.2.2-rc.1 def847be9 vendor: github.com/moby/moby/api v1.53.0-rc.1 2a903c52d Include NRI in info output d8351dbe6 Vendor moby/[api|client] from moby master f7ddc8a7d docs: Update --all flag description to clarify it shows dangling images 4d7a8b0fd build(deps): bump actions/upload-artifact from 5 to 6 0f03c31ab image/list: Fix `dangling=false` handling 1e259062f cli/tree: Remove unused `all` field 09a46645a image/tree: Add golden test 0d88411f1 image/tree: Remove --all flag check for untagged images in non-expanded view b31598389 image/tree: Fix width calculation for untagged images 150a25b9f image/tree: Extract untagged image name to const 67f5e3413 image: Fix dangling image detection with graphdrivers 2e3425fbd cli/command/container: use consistent casing for dockerCLI arg de098367d cli/command/container: inline parseWindowsDevice 15de6ce8f vendor: github.com/klauspost/compress v1.18.2 5c406f5ee vendor: github.com/morikuni/aec v1.1.0 a6335c422 docker run, create: don't swallow connection errors during validate 49021ad98 vendor: github.com/spf13/cobra v1.10.2, migrate to go.yaml.in/yaml/v3 6f75c0c8e add TODOs for replacing nat.ParsePortSpecs 9c10a9c9a opts/swarmopts: remove use of nat.ParsePortRange 9dfe779ab internal/test: remove unused FakeStore c81e05eed add shell completion for "docker stack deploy --compose-file" d54488531 update to go1.25.5 ba683d8df opts/swarmopts: use sub-tests dd2be022c gha/e2e: Switch to rc and 29 latest 1abfbf298 vendor: github.com/moby/moby/client v0.2.1 e0d30db11 docs: update buildgc example config to use new buildkit v0.17 options 6a0099bc8 cmd/docker-trust: bump golang.org/x/crypto v0.45.0 c90166ffa cmd/docker-trust: update dependencies ac5e88612 vendor: golang.org/x/net v0.47.0 3ec414638 vendor: golang.org/x/term v0.37.0 616e93a0c vendor: golang.org/x/text v0.31.0 1202f8a64 vendor: golang.org/x/sync v0.18.0 b67055c96 vendor: golang.org/x/sys v0.38.0 475961583 image/tree: Allow image names to overflow instead of truncating 3099d4716 build(deps): bump actions/checkout from 5 to 6 d84396d4e image ls: allow custom format in cli config 6751cd169 docker version: restore top-level BuildTime to RFC3339Nano 3a842587f chore: update link/linktext to dockerd proxy config dd2c49382 cli/command/system: Fix missing components in version output 207bf52c2 image/tree: Only show untagged images when --all flag is used be9e6308f image/tree: Respect NO_COLOR env variable ed281ddf5 image/list: Print legend only if limiting width aa5d00a3a image/tree: Don't limit name width if non tty b66b93130 image/tree: Fix untagged images in non-expanded view bff56f049 cli/command/system: define struct for formatting version d787e70a1 cli/connhelper/commandcon: remove warn logs ebc1995f9 vendor: github.com/moby/moby/api v1.52.0, moby/client v0.1.0 ad96811f1 swarm: Add memory swap support (no stack/compose support) 6ba06b5fb Revert "cli/compose: add schema 3.14 (no changes from 3.13 yet)" e0716b571 Revert "Add memory swap to swarm" 4b450f113 vendor: github.com/moby/moby/api, moby/client master 1d789e409 cli/command/system: add missing "go:build" b3824015d vendor: github.com/moby/moby/api v1.52.0-rc.1, moby/client v0.1.0-rc.1 d67291026 vendor.mod: remove replace 41088ed7d vendor: go.opentelemetry.io/auto/sdk v1.2.1 712f569f1 vendor: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 7736f5e60 vendor: align other otel packages to v1.38.0 d45551dac cli/command: update to semconv v1.37.0, otel v1.38.0 71828f279 Add memory swap to swarm d0c86d39e cli/compose: add schema 3.14 (no changes from 3.13 yet) 5039eee77 vendor: github.com/moby/moby/api master, moby/client master cee9ea67f lint: run in go-modules mode b2aa690b2 scripts/build/binary: remove pkcs11 build tag c1a53ae7b cmd/docker-trust: remove dependency on cli/internal 06914dd0f make trust-plugin a separate module c9bb29115 implement `docker trust` as plugin dd70b43bc chore: update broken link to restrucured docker desktop documentation f2755b02d update to go1.25.4 880ef756b Fix static build + CGO 0976389e1 vendor: golang.org/x/net v0.46.0, golang.org/x/crypto v0.43.0 c733cb053 vendor: golang.org/x/time v0.14.0 1f77c6f1c vendor: golang.org/x/term v0.36.0 dcce972f4 vendor: golang.org/x/text v0.30.0 b11d143cd vendor: golang.org/x/sync v0.17.0 0c8ce84a6 vendor: golang.org/x/sys v0.37.0 d9f7e4b0c cli/command/service: use enum-consts defined in API 774f1d60a cli/command/service: parse generic resources without protobufs 437ed4c1e Dockerfile: update golangci-lint to v2.6.1 c4a28d0d3 vendor: github.com/go-jose/go-jose/v4 v4.1.3 f8d036512 fix perfsprint (concat-loop) linting 7b624841c update minimum go version to go1.24 82b47c8e5 vendor: github.com/moby/swarmkit/v2 v2.1.1 3a9178813 vendor: github.com/containerd/platforms v1.0.0-rc.2 61d88c951 lint: don't disable modules 9bce085b1 vendor: github.com/mattn/go-runewidth v0.0.19 e0b1ab68f cli/command/container: fix use of generics e5f46499b image/tree: Fix table header having escape codes when not tty d5d2ed5ba image/tree: Add test for checking ansi escape output 1a261e3f5 image/tree: Use streams interface 4893a5d5e completion/zsh: Allow multiple volumes of 'volume rm' 700875b66 Plugin may set itself as hidden ad776d1e1 remove support for client-side docker content trust validation 259df25a9 cli: allManagementSubCommands: improve handling of plugin stubs aa62a6a97 docs: update link to libnetwork protocol doc ef16d8230 vendor: github.com/moby/moby/api v1.52.0-beta.4, client v0.1.0-beta.3 6fa590033 image/tree: Remove longest->shortest sort 5836040ec Update golden files f6feef8fe image/test: Fix `go test` args being used by CLI commands 631f32ee9 images/list: Add print ambiguous warning for tree c41815f17 image/list: Show collapsed tree by default 5d599e932 e2e: add docker v29-rc 50598d21c skip TestBuildIidFileSquash cf9e1778d Dockerfile: remove notary c98d9647d e2e: remove DCT tests 8444c911b vendor: github.com/moby/moby master 7f86de931 docs: deprecated: deprecate cgroup v1 7bdb4df07 cli/command/container: use ImagePull instead of ImageCreate 9e7937746 image/tree: Fix dangling filter condition 8e2943c6c image/tree: Sort image tree by name instead of creation date 8767904ae vendor: github.com/moby/moby/api master, moby/client master b8b4f54a8 fix typo in TODO comment 65496c555 cli/trust: use local definition for PushResult Aux message e636a2a06 cli/container_rename: Move to API validation af255acca vendor: github.com/moby/moby master 053aa376e vendor: github.com/moby/moby/api, moby/moby/client master 83319f09f cli/command/container: use per-stats OSType if present 6ed16a2cc vendor: github.com/moby/moby/api, moby/moby/client master 5007c96b0 cli/command/container: collect(): split windows/unix branches c467ebafd cli/command/container: calculateCPUPercentWindows minor cleanup 689152a80 cli/command/container: calculateCPUPercentUnix: simplify e01ce69ff cli/command/container: collect: handle context-cancellation 292001a45 cli/command/container: RunStats: early return for non-streaming 0b1c7bc0f cli/command/container: RunStats: small tweaks on closeChan d309027d5 cli/command/container: RunStats: gracefully handle io.EOF 15b422b31 cli/command/container: RunStats: handle context-cancellation 832fc66ca cli/command/container: RunStats: simplify stats loop dad1d367c cli/command/container: move debug logs to call-site f594a7f09 cli/command/image: remove uses of JSON field 4b498addc cli/command/container: don't depend on result.OSType 4a608069a vendor: github.com/moby/moby/api, moby/moby/client master 153f7f10c telemetry: lock the semconv version of the otel sdk aef2ef8c7 build(deps): bump actions/upload-artifact from 4 to 5 4afbd6146 implement some ad-hoc mocks for responses 056e31464 vendor: github.com/moby/moby/api, moby/moby/client master 64805c295 image/list: Respect `dangling` filter when not using `--all` e9a941001 image/list: Hide untagged images without `--all` 4f7c07cfc update local code for updated modules aeb78091a vendor: github.com/moby/moby/api, moby/moby/client master 563f5fe33 vendor: github.com/moby/moby/api, moby/moby/client master 5ba4c17d7 cli/command/container: Simplify with slices.Contains d252afa6b cli/command/container: add go1.23 build constraint for range-over-func Signed-off-by: Bruce Ashfield

recipes/golang: improve reproducibility

2026-02-09T20:22:07+00:00

Refer [1], cgo will embeded cgo_ldflags in the intermediary output, which make content ID will be incfluenced by cgo_ldflags. '--sysroot=xxx' includes build path, which will make the binary not reproducible, these recipes can build successfully without --sysroot, so remove it [1] https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448 Signed-off-by: Changqing Li Signed-off-by: Bruce Ashfield

docker-moby: update to docker-v29.0.0-rc.1

2025-10-18T17:33:14+00:00

Along with the listed updates, we also update the cli, adjust our build path (it is now under moby), refresh patches and explicitly export trimpath to avoid QA warnings. Bumping moby to version docker-v29.0.0-rc.1-54-gd1a720cb15, which comprises the following commits: 5fa3c65682 client: Client.PluginList: add options-struct aa36c44ef9 api/types/volume: move `UpdateOptions` to `client.VolumeUpdateOptions` 709336a2c3 api/types/network: EndpointSettings: make MacAddress "operational data" e84bbc09b1 integration/container: fix daemon min API version 1caf3dd3b2 integration-cli: TestDockerCLIBuildSuite/TestBuildEmitsEvents: reduce logs acfe4e8613 gha: add support for docker-v* tags b87ed4512a integration/container: fix test using wrong daemon ecd7551310 daemon/server/router/container: fix back-filling of top-level network fields 865cfe9a7f client: VolumesPrune: rewrite to use option structs and result b11d9d410f client: NetworksPrune: rewrite to use option structs and result 0672a0f999 client: ImagesPrune: rewrite to use option structs and result 91323b7a35 client: ContainersPrune: rewrite to use option structs and result d9a03a374f daemon: consolidate "log-level" and "log-format" options and flags 4e6c955e78 daemon/command: configureDaemonLogs: don't panic 06ff7d9cd4 daemon/config: add validateDaemonLogConfig function c73fe6d26e daemon/config: move daemon log-config to a separate struct a6cf5e19e8 daemon/command: remove placeholder c584855329 daemon/command: configureProxyEnv: accept smaller struct 0a2ab376ff daemon/config: slight cleanup of Config struct 69702bd821 fix minor linting issues 3b075a79b9 api: remove image inspect `Parent`, `DockerVersion` from swagger docs d62a521c7d daemon: initialize volumes if nil on decode a65293c036 libnetwork/osl/kernel: ApplyOSTweaks: don't log errors if not found adb4269928 api/types/image: remove deprecated Summary.VirtualSize field 2537eae6f3 api/types/container: remove support for config mac address e77f116c9c integration: remove some version-gates for API < v1.44 2c59be7011 daemon: raise default minimum API version to v1.44 47fe719b33 api/types/build: remove deprecated BuildCache.Parent field 36f1c830bb add back replace rules and re-vendor 45caa74e3b api/types/sytem: remove deprecated DiskUsage.BuilderSize a5d9619093 api/docs: remove BuildCache.Parent field for API v1.42 and up e1722eb8d8 daemon/command: disable c8d snapshotter when userns remapping enabled 1aa73144f2 update to go1.25.3 5e9e261107 vendor: github.com/moby/moby/client v0.1.0-beta.2 01a19e9d95 vendor: github.com/moby/moby/api v1.52.0-beta.2 b1e57881c3 gha/labeler: disable sync-labels to preserve human-added labels 3848b16bca Removed all occurrences of wrapError in libcontainerd/remote 28018a51d8 update to go1.25.2 39cf847787 api: regenerate with go-swagger v0.33.1 b4c3b29245 Dockerfile: update to go-swagger v0.33.1 (for go1.25) bbdd24d145 api/templates: align with go-swagger v1.32.3 b3f74e85aa Dockerfile: bump gotest.tools/gotestsum v1.13.0 ac3960a44c api/types/container: omit `Config.OnBuild` when empty 0ee0283c9d gha/labeler: Some more file-based rules 15289ad2dc client: Filters: add Clone method a6206f2da9 dockerd-rootless: default MTU 65520 for slirp4netns 7e63d2a81b dockerd-rootless.sh: if no slirp4netns, try pasta cfdb9068f0 client: ImagePullResponse: use sync.OnceValue 3c44bd67b2 client: ImagePullResponse: don't panic without reader 4210e4ad16 daemon/internal/netiputil: make "MaybeXXX" functions a function, not var 4c6e571d38 api/pkg/stdcopy: move stdWriter to daemon/internal 8cf0529a8c api/types/swarm: add documentation to clarify virtual IP address type c2812dc285 api: fix swarm network field from addr to prefix 9912ccd7b3 Clean up bridge device on network create error e6bac8983b introduce ImagePullResponse to manage JSONMessage stream decoding 7652f38c28 client: remove API-version compatibility for API < v1.44 7ea066c8d1 client: add Filters type 778e5bfad3 api/types/filters: move to daemon/internal 96b29f5a1f client: remove support for negotiating API version < v1.44 (docker 25.0) ef5feb4992 vendor: golang.org/x/net v0.45.0 3f75e2116f vendor: golang.org/x mod v0.28, net v0.44, text v0.29, crypto v0.42, tools v0.37 6de0417884 vendor: golang.org/x/sync v0.17.0 4bc628581d vendor: golang.org/x/sys v0.36.0 9169ed2873 client: touch-up some godoc 04318e0d86 client: update some tests using obsolete API versions ca9c5c6f7b vendor: github.com/moby/swarmkit/v2 v2.1.1 1b1608f2cd hack: add patch to buildkit tests 3c418bea4e vendor: update buildkit to v0.25.1 0aed907a86 update to go1.24.8 0cc04d0c5c Network restore, don't update config to match state b1e20b6a3a api/types/system: remove deprecated Commit.Expected field 1a7d7cc015 builder: use proper percentage calculations for default gc policy dbcbe87d52 ci: fix cache for go modules f8d3c4e4a7 api/types/image: InspectResponse: remove deprecated Parent, DockerVersion 1a81903854 api/types/image: InspectResponse: remove deprecated fields a8dd9c5025 daemon/pkg/plugin: stop propagating Plugin.Config.DockerVersion field 1d3687aeee ci: update gha cache attributes a99b7947e1 daemon: stop propagating Image.DockerVersion field f6e1bf2808 Rework Go mod tidy/vendor checks 45a728a13b image inspect: fix legacy fields for API < v1.52 response fdd61821da use consistent alias for docker image spec c4fda95bea api/types/plugin: deprecate Config.DockerVersion field a9a1ac3c45 Dockerfile: update compose to v2.40.0 94ab6a9c5e Dockerfile: update buildx to v0.29.1 b9ac2cea0c Dockerfile: update cli to v28.5.0 222a3fe94e integration-cli: remove deprecated buildImage utility bd8a99b400 api/types/image: InspectResponse: deprecate Parent, DockerVersion 288b9f033b integration-cli: remove deprecated buildImageSuccessfully utility 15bef6ff1a daemon/server: move GetImageOpts, ImageInspectOpts to imagebackend 95e77d6861 daemon/images: minor linting fixes e204ba1dca daemon/internal/compat: add extra fields recursively, and don't replace 50269e6e39 api/types/swarm: remove `PortConfigProtocol` ea76dbefeb api/types/swarm: deprecate PortConfigProtocol c646091d57 api: move container port type to network package 038bfbfbd4 api: omit legacy fields from image inspect if not set f289cb2d7c api: docs: sync v1.52 yaml d6899ca5a5 api/types/registry: use netip types as appropriate fd4329a620 api/types/container: use netip types as appropriate d5c838dc5e internal: move sliceutil from daemon/internal a90adb6dc1 api/types/network: use netip types as appropriate ef31514a9f api/t/network: move IPAM validation to daemon 4d6a2be79d api/t/network: validate EndpointIPAMConfig in daemon 2da472b1a5 api/types/system: use netip types where appropriate cc082add87 api/types/swarm: use netip types as appropriate 46ab36ae46 daemon/internal: move netiputil from libnetwork 470f5b50a5 internal/sliceutil: map nil to nil df506c107e negociate content-type used by /events API 0ad35e3ef0 Add existence check for go.mod and go.sum files cb3abacc52 api/types/container: add network port and port range types c46704a80f client/build_prune: Wrap result in a struct a35b3cd149 client/build_cancel: Add options struct 3f3bbe4430 vendor: github.com/moby/buildkit v0.25.0 9a32a7e0d1 daemon, client: remove version-gate for daemon-side AutoRemove af5988238a client: reduce uses of obsolete API versions in tests eafca64a6b daemon/server: implement image-inspect with "compat" package 51cbd2ed16 api: swagger: remove VirtualSize fields for API > v1.43 a7edbe8e5f api: remove support for `KernelMemoryTCP` fb2f8115c8 api: deprecate `KernelMemoryTCP` support eff4f064a3 daemon/libnetwork/internal/kvstore: remove unused ErrBackendNotSupported 1697aecbd5 daemon/libnetwork/internal/kvstore: remove unused BOLTDB and Backend type 94bcf89412 Eliminate warning about endpoint count store delete 08d014cac8 api/docs: remove email field from example auth 344ab458a1 api/types/registry: remove deprecated AuthConfig.Email field 3241d46525 client: Client.doRequest: adjust error matching for TLS1.3 handshake b8fbd0539e vendor: github.com/deckarep/golang-set/v2 v2.8.0 178d697484 integration-cli: adjust TestHTTPSInfoRogueCert for TLS1.3 handshake efa077848f api/types/storage: define generic `Storage` type for container inspect 77bf85647c contrib: add docker_client SELinux policy module to access socket in container b48fcf6cdb client/checkpoint_list: Wrap result in a struct 646e068cf1 api/checkpoint: Don't return null if no checkpoints 38fb0dd10c Add build tag "no_libnftables" 062479f95c vendor: github.com/hashicorp/go-memdb v1.3.5 3912ffacd6 integration/nw: TestEmptyPortBindingsBC use context e80e2908ba dockerversion: use t.Context() in tests aca0adfb97 daemon: use t.Context() in tests 8905c3052b daemon/libnetwork: use t.Context() in tests 01f9186d6d daemon/logger: use t.Context() in tests c1c9087404 daemon/containerd: use t.Context() in tests 544f8f53ed daemon/builder: use t.Context() in tests 415274d62a vendor: github.com/opencontainers/cgroups v0.0.5 73ed41ef79 vendor: github.com/coreos/go-systemd/v22 v22.6.0 0f393630f8 vendor: opencontainers/runtime-tools v0.9.1-0.20250523060157-0ea5ed0382a2 6db6de2c20 Use libnftables in dynamically linked binary e8d3609031 hack: use custom ref for buildkit tests 21d2d55500 vendor: update buildkit to v0.25.0-rc1 de5e64b3bd Add option WithSetNsHandles for testutil SetupTestOSContextEx 0fb46d08ad api: docs: remove deprecated BridgeNfIptables, BridgeNfIp6tables 362d4d9538 testutil:SetupTestOSContext - don't leak namespaces, netlink handles a32a53ae01 daemon/containerd: pass custom metaHeaders to resolver 2223b7f582 daemon/server/imagebackend: add PushOptions struct 9d53093db6 daemon/server/imagebackend: add PullOptions struct cbafff64e4 project: mark 23.0 branch as unmaintained (EOL) 5d22d9bec9 integration/service: rename var to prevent shadowing 471f24bafc daemon/server/backend: CreateImageConfig: change "Pause" to "NoPause" bad3dfe9cb client: ContainerCommitOptions: change "Pause" to "NoPause" 1135ab0283 Dockerfile: update xx to v1.7.0 f5847040cc client: Client.negotiateAPIVersionPing: trim v-prefix before handling af3f971431 client: TestNegotiateAPIVersionAutomatic: gofumpt a8cb35f01a client: TestPingHeadFallback: check method, path, and fix example response 87d1da50f0 test: migrate test api network get defaults and filter d9cdfd2887 client: remove unused Client.HTTPClient() method d4d93bf558 daemon/container: remove State.ExitCode() method ee4b7a8374 daemon/container: remove NewState() constructor d06f0d008d explicitly access Container.State.Health.Health 0df791cb72 explicitly access Container.State instead of through embedded struct aa492314a1 ipams: Re-enable legacy remote plugins support 41a6ad5def client: remove deprecated ImageListOptions.ContainerCount 02c4bb6a0c daemon/config: More tests for DNS addresses f7ed1b84d2 client: ImageList: don't discard reference filter on API < 1.25 d60b4ea278 client: fix version-gate for readonly-recursive mounts validation on service 0673d43663 client: remove "version" header for service create, update 9fc12daf80 client: remove version-gate for "--force" on "volume remove" 839c2709af client: WithMockClient: match version behavior of actual client 8f8a2db52c client: rename validateAPIVersion to validateServiceSpecForAPIVersion 0468dac252 client: Client.ContainerCreate: fix panic when passing a nil config 6d0551e13a api/types/network: CreateRequest: remove deprecated CheckDuplicate field 50ea842e17 client: separate exec methods to ExecAPIClient interface 94309db0aa daemon/server: Server.makeHTTPHandler: pass Route as argument 81506ad8b1 daemon/server/router: NewRoute: don't use un-keyed struct literal 82e5d3064a client: ImageBuildResponse: remove OSType field 5028ff1f40 integration-cli: remove startContainerGetOutput, runCommandWithOutput 2a867f0c4d daemon/server/backend: remove ExecInspect, ExecProcessConfig alias ff21989215 api/types/container: move ExecInspect type to client c1be6ef5de api/docs: remove KernelMemory option from old API versions c5991341eb remove support for deprecated kernel memory limit 20d8342a4b move endpoint API version constraints to API server b70c1a439d gha: add missing dependency to Windows workflows 18b289f9df daemon/server: fix requests not logged with --log-level=trace 839e46f97c client: remove support for API < v1.22 filter format a83d91f427 API: /info: remove `SecurityOptions` re-formatting for API < 1.25 082b4e8d77 client: move ExecOptions to client 6a642300f0 client: move ExecStartOptions, ExecAttachOptions to client c8c13fe058 API: /info: remove magic `` values for API < 1.39 c600f62c25 api/docs: sync swagger and update changelog 6084882b98 client: tidy go.mod 2bb0443ae9 Release IPv6 address if unused due to sysctl setting 252659278e Configure addresses before adding them to DNS or /etc/hosts 18b8e369ae Split OS-specific code out of Sandbox.populateNetworkResources a8b9eff902 Don't set up DNS in Network.createEndpoint ddf10ee1cd Delay Endpoint config until the osSbox exists b043980e6f daemon/config: remove deprecated CommonConfig.CorsHeaders 4c7deaf832 Windows containers: restore network name after reboot 9129094b98 Windows containers: report HNS network name in inspect aa78f19066 ipvlan-l2: do not allocate a gateway address from IPAM 468e3521b0 macvlan: do not allocate a gateway address from IPAM caae209d25 api/types/container: remove deprecated ExecOptions.Detach 19edf44896 daemon/config: remove deprecated Config. fabe66322f builder/remotecontext: remove deprecated "Rel()" utility cf243b64aa daemon: fix build after revendoring api module c2c2b80e90 daemon: report IPAM status for Swarm networks b092c8ca64 api/t/container: drop NetworkSettingsBase fc1ff44bc2 api/t/container: drop DefaultNetworkSettings d5d3716705 daemon/i/compat: disable HTML encoding 8efe6b0183 Add TestJoinError 73413ea693 bridge_linux_test.go: gofumpt 52c9cfd016 Use sbLeave to roll back on error from sbJoin 53390f85dd Put clearNetworkResources() inline in its only caller 916fa31ab5 Acquire Sandbox.joinLeaveMu for Endpoint force-Delete a9db1e9a26 Endpoint.sbLeave: don't load ep from store b192d06ec7 Remove network info from container when endpoint join fails 1b74b3e1ce api/types/events: Message: remove deprecated Status, ID, and From fields 5815eb82ee daemon/events: omit deprecated event fields on API >= v1.52 c4eb791dba daemon/events: remove tests for deprecated API fields 33a05ac344 daemon/internal: add "compat" package for legacy responses 3f86797d3f api,daemon: report IPAM status for network ee8abb845d d/libnetwork: move uint128 to its own package 65ffac3dbf internal/iterutil: add Chain, Chain2 iterators ee24728b1e go.mod: replace client 139b6464b5 api/docs: fix events example response f8925bac6f daemon: Do not default to c8d image store on Windows bdd0a2a970 gha: extract vm test to a separate workflow 8c8324b37f Dockerfile.windows: remove deprecated 7Zip4Powershell 9d2e74d43d gha: Add automatic PR labeling for modules 705f26010e client/image_inspect: Unexport ImageInspectOptions 67c8064bb3 client: remove ImageInspectWithAPIOpts function 5303799297 go.mod: re-add replace github.com/moby/moby/api 2f1015482f libnet/d/windows: ReleasePorts: use errors.Join fc86411353 libnet/d/windows: inline releasePort 9efc1cc264 libnet/portmapper: rename, move PortMapper to portallocator 4b230a4909 internal/testutils: merge with internal/testutil d3e45f8743 testutil: move back to internal af677b61a5 libnet/portmapper: clean up windows port mapper 90f31c6c27 libnet/portmapper: remove dead field bridgeName f6e5b3afc5 libnet/portmapper: drop unused NewWithPortAllocator 9e7de1b679 libnet/portmapper: remove unused field proxyPath f6c59f9779 libnet/portmapper: merge mapper.go & mapper_windows.go b48442db4c libnet/portmapper: remove dead DeleteForwardingTableEntry 32710d3e5e libnet/portmapper: remove dead AppendForwardingTableEntry eb2e296711 daemon: GetContainerStats: use errdefs for error-type handling 97eceb266a errdefs: remove deprecated IsXXX utilities 2d73fed24e update AUTHORS 37de02378c Prepare release notes for v2.0.0-beta.0 de4ae66d08 Update client vendor to use tag b5dde0234c add back replace 1499623a9d go.mod: update client to v0.1.0-beta.0 0525ae2aed api: image inspect: remove temporary backfill for Config fields d98a8c59ab testutil/daemon: fail gracefully if DEST is unset 8995619b9d testutil/daemon: fix DOCKER_USERLANDPROXY env var b5035def03 Prepare release notes for client/v0.1.0-beta.0 76964752d3 Update client api version to v1.52.0-beta a1e3a109ee api/docs: sync v1.52 docs with latest 0fe1af95f3 api/docs: remove temporary "full" example for image config (v1.50, v1.51) 7bfbb6e8ca api/swagger: remove temporary "full" example for image config 2d1af4e4e4 api/types/build: move build options to client and backend 5232d82c1b daemon/server/backend: move build options to buildbackend 8b8a3cb14c api/types/image: move LoadResponse to client a8afc2c6fb api/types/checkpoint: move checkpoint options to client f1da80e8d3 contrib/check-config: check SCTP protocol option d904f3b625 Prepare api/1.52.0-beta releases 4e30076e4d Add mailmap entry for Austin e656f39952 api/t/network: generate more structs from Swagger ea1c2530da api/t/network: generate Inspect, Summary structs 26e335b647 api/types/build: move `CachePruneOptions` to client mod 798abe8965 vendor: github.com/spf13/cobra v1.10.1 02a50be1f9 vendor: github.com/spf13/pflag v1.0.10 aaa9dd4e26 gha: skip "vm" checks if `ci/validate-only` label is set ccf1363680 api/docs: update v1.52 docs with current swagger c208f90796 api/templates: vendor structfield template 57ce548341 client: move container options together with their users 4d20b6fe56 api/types/container: move container options to client c441b2ef19 api/types/image: make `InspectResponse.GraphDriver` optional 1a86389419 api/types/network: separate Summary from Inspect f8bd170b2a daemon: validate args in network.New*Filter ea1dfbda9e daemon: prune networks using network.Filter f0d10ae733 d/network: filter networks individually a4a90c2248 api: fix deprecation of "keep-storage" /build/prune query parameter e46a991dc5 api: remove unused DefaultVersion, MinSupportedAPIVersion consts 30406d42e3 update to go1.24.7 e2e9f36c5f api/types/system: move `SecurityOpt` type and `DecodeSecurityOptions` to client d47b0db4f9 vendor: update buildkit to v0.24.0 ca97d071b7 fix: client vendor with config struct changes 37d6a1909b libcontainerd/remote: wrapError: don't convert c8d errdefs error 36303969b9 libcontainerd/remote: container.NewTask: move vars to where used f37094ad4f libnet/d/bridge: CreateEndpoint: use d.config directly ae24edfc0d libnet/d/bridge: merge configure into newDriver 2436458227 libnet/d/bridge: Register: pass a Configuration struct 386a3a6bba libnet/config: mv config_{unsupported,windows}.go 18f2e61d08 libnet/config: rm config_freebsd.go e099f1e409 daemon: Daemon.ContainerExecStart: fix typo in log field 6e512cc292 libnet/d/ipvlan: Register: remove unused config param 459f4f431d libnet/d/macvlan: Register: remove unused config param 43014a891b libnet/d/overlay: Register: remove unused config param 18efa5513d libnet: makeDriverConfig: drop support for label-based config 1470048e00 libnet: remove drivers_freebsd.go 4ea085187a libnet/d/bridge: export Configuration 7b75f355e5 daemon/srv/r/ctr: handlePortBindingsBC: fix warning fbad7b568d libcontainerd/remote: task.Exec: log warning on cleanup failure e67b3b0b90 libcontainerd/remote: task.Exec: rename processID -> execID 003e17ff5a libcontainerd/remote: task.Exec: preserve parent context during cleanup 167b0e9ea6 libcontainerd/remote: task.Exec: make defer error-handling more explicit 55c929c97f libcontainerd/remote: rename var that shadowed import 023ae2e218 contrib: remove udev rules for hiding loopback devices 0ca7ac3258 daemon: backfill empty PBs slices for backward compat 4d2a293ff3 libnet/drvapi: make NetworkAllocate optional cbd04b6f08 libnet/cnmallocator: use a list of local netdrivers 478d1fc8ba Bump go.mod minimum-go-version to 1.24 269960a4c6 integration-cli: TestConcurrentPush: refactor to improve failure logs 8031b077bc gha/arm64: Setup qemu ce338dec81 integration/internal: Print Buildkit logs 27fca93b65 c8d/history: Fix non-native platforms ad830a47af integration/internal: Handle Buildkit in GetImageIDFromBody f66f555ad4 graphdriver/windows: Potential fix for access denied ea73c88d12 libnet/cnmallocator: rm drivers_darwin.go 18b21a32a1 libnet/cnmallocator: rm drivers_unsupported.go 60fa39d559 hack: temporarily use custom buildkit ref for testing 5682f65cca hack/dind-systemd: collect firewalld logs 03df89b84a hack/dind-systemd: enable firewalld debug logs 77ce202515 vendor: update buildkit to v0.24.0-rc2 3c83038936 hack: use heredocs in generate-swagger-api.sh 854ec0a1ad d/libn/internal/addrset: add popcount methods b7c597ec35 api/t/ctr: deprecate DefaultNetworkSettings c9fdad2552 daemon: marshal legacy `registry.ServiceConfig` extra fields for compatability d0de293513 testutil/daemon: remove unused FindContainerIP 80bb864fd6 api/t/ctr: deprecate NetworkSettingsBase 16dc39136c api/t/ctr: deprecate NetworkSettingsBase.Bridge 20b679b4a6 client: Extract clientConfig for opt applying 9ddf9d87e7 client: Remove newMockClient 7cd089edd9 client/volume_test: Use functional option to create mock client 72e11d78d7 client/task_test: Use functional option to create mock client a1e304f76c client/system_test: Use functional option to create mock client 407af72993 client/swarm_test: Use functional option to create mock client 124bba478a client/service_test: Use functional option to create mock client 98434a5ea4 client/secret_test: Use functional option to create mock client c99f2eaf34 client/request_test: Use functional option to create mock client 8581a15c25 client/plugin_test: Use functional option to create mock client 0b577c703a client/ping_test: Use functional option to create mock client d401228b43 client/options_test: Use functional option to create mock client 643e94ebf5 client/node_test: Use functional option to create mock client 5a82c3397e client/network_test: Use functional option to create mock client be76beee8f client/image_test: Use functional option to create mock client 005a289703 client/distribution_test: Use functional option to create mock client bc1d436aa9 client/container_test: Use functional option to create mock client c70aac772e client/config_test: Use functional option to create mock client 6452807fb4 client/client_test: Use functional option to create mock client a3d073e160 client/checkpoint_test: Use functional option to create mock client 17396e5d94 client: Add WithMockClient opt 09ecd74cf3 CI: add oraclelinux-8 for running tests with cgroup v1 1570ca934d Dockerfile: install fuse-overlayfs e15c51a03d Makefile: propagate DOCKER_IGNORE_BR_NETFILTER_ERROR ed78637b9a nftables: iterate over rules 9dc0c094e6 cmd/docker-proxy: set O_NONBLOCK unconditionally 12897011fa vendor: github.com/ishidawataru/sctp v0.0.0-20250829011129-4b890084db30 785ae9a0f9 Rework the interface to libnet/internal/nftables cf913f5b0a d/cluster: use lockedManagerAction in more places 4b866fdcef d/cluster: add context param to lockedManagerAction 8839f53175 d/libnet: TestUserChain: fix error matching for nonexistent chains fbde2bcb9a nftabler,nftablesdoc: stringify numerical dstnat prio a4949b669e iptablesdoc: remove -n from iptables -L invocations fc045ad139 libnet/pmapi: remove firewaller arg from Map/UnmapPorts 9b1c4ad3b1 libnet/pm/routed: don't set up firewall rules directly 9d9b05446c libnet/pm/nat: move back fw / proxy steps into the bridge driver 268e636b2b libnet/pmapi: let portmappers specify NAT/fwding rules c6717f4387 libnetwork: provide endpoint name for IPAM drivers 5349095cd1 vendor: github.com/docker/go-events 605354379745 (main) 229a29649f vendor: github.com/moby/buildkit v0.24.0-rc1 071e6472db Unmap IPv4 addresses loaded from store b721c4f4a8 daemon: minor touchups for backend system info response marshal 60c6e57b82 hack/make/test-integration: disable firewalld integration 1b4fcb8da7 api/types/network: move `CreateOptions` type to client module b0b7260c77 ImageCache.restoreCachedImage: rename var that shadowed import 1e249cc309 api/types/network: move connect/disconnect options types to client module 3003c5fe45 d/libnet: fix CreateOptionIPAM capitalization 853aed171b api/types/image: move image option types to client 33066cddb1 api/types/swarm: move `SecretListOptions` type to client 33cdcd62f5 daemon: Daemon.getInspectData: also set Config fae54e03af api/types/container: merge InspectResponse and ContainerJSONBase c9a0c93b04 d/libnet: remove unused arg from CreateOptionIpam b85c91f1b8 fix vendor 44972d7427 daemon: Daemon.getInspectData: inline struct-literals 94d0b10503 api/types/swarm: move `ServiceInspectOptions` type to client a2291e5eac api/types/swarm: move `ServiceListOptions` type to client 3b1e16594b api/types/swarm: move `ServiceUpdateOptions` type to client bb4125e89f api/types/swarm: move `ServiceCreateOptions` type to client 4dcc7af116 api/types/swarm: move `UpdateFlags` type to client ad0fa5a872 api/types/swarm: move `TaskListOptions` type to client 2718f953f0 api/types/swarm: move `NodeRemoveOptions` to client 7d2b87e95f api/types/swarm: move `NodeListOptions` to client mod b1260cd493 api/types/swarm: move `ConfigListOptions` to client bdce1608c8 api: move authconfig package from types/registry to pkg ff0e644c88 daemon/cluster: use authconfig package for decoding 9f1d8be252 docs/contributing: minor fixes dbe19a506e fluentd logger: add read timeout configuration. 28ba0fcaae vendor: github.com/fluent/fluent-logger-golang v1.10.1 3bcaf1c4da vendor: github.com/tinylib/msgp v1.3.0 27b609b401 vendor: github.com/philhofer/fwd v1.2.0 1d6c7663c4 d/libnet/i/nftables: move golden files into subdir 28afa75c39 d/libnet: TestIptabler: move golden files into subdir ce4a331287 d/libnet: TestNftabler: move golden files into subdir c5e75cc485 daemon/containerd: remove convertError utility 6fbea5f5c1 image delete: inline some variables, and touch-up TODOs 7f8ce05f6e client: check for Digested reference instead of Canonical eed354379c api: docs: update v1.52 swagger with latest changes 0de3d2ec51 Dockerfile: update rootlesskit to v2.3.5 70d096313f vendor: github.com/rootless-containers/rootlesskit/v2 v2.3.5 fe8516cf4b client: refactor `InspectOptions` to `NetworkInspectOptions` 5eaed0366c api/types/network: move `InspectOptions` to client mod 6084c6ae78 client: refactor `ListOptions` to `NetworkListOptions` d6aa6ae9bd api/types/network: move `ListOptions` to client d867f9f0f1 api/docs: update description for AuthConfig.Email field 6cfff7e880 api/types/registry: update deprecation comment for AuthConfig.Email 7aa50424e3 daemon: decouple daemon backend from client volume list options 9fc6a1e437 api/types/volume: refactor volume options to prune report ee22a62dd5 client: refactor `ListOptions` to `VolumeListOptions` c48585f104 api/types/volume: move `ListOptions` to client mod 56626a1222 api/types/system: move `DiskUsageOptions` to client mod 4665aa11ce client: refactor `SearchOptions` to `ImageSearchOptions` 40025bdf43 api/types/registry: move `SearchOptions` to client e8d0aba254 vendor: golang.org/x/sync v0.16.0 60125b888c contrib: update dockerfiles to debian 13 "trixie" 39d4dbea9c Dockerfile: update debian frozen image to trixie-slim 15f92925f0 vendor: go.etcd.io/bbolt v1.4.3 eb9774cbf9 client: rename `ListOptions` type to `EventsListOptions` d73dd4990c api/types/events: move `ListOptions` type to client db72cc28c7 Rename test helper function input parameters to not shadow client package f07d359043 client: rename `ResizeOptions` type to `ContainerResizeOptions` 882fd68b1b api/types/container: move `ResizeOptions` type to client 14262696d7 libnet/pa: OSAllocator: retry allocations 201968cc03 libnet/pa: OSAllocator: listen after bind 86ae7a56d2 daemon: Fix container restore with automatic driver selection 555e3939c9 daemon: Fix forceful switch to containerd image store 47bdbf5a4b client/pkg/jsonmessage: remove unused fields c4e82bab70 api/types/volume: move `DiskUsage` type internal to daemon backend 0d61b55add api/types/image: move `DiskUsage` type internal to daemon backend 566c44edfe api/types/container: move `DiskUsage` type internal to daemon backend d588092be2 api/types/build: move internal to daemon backend eac4c43aaa integration/system: remove TestEventsBackwardsCompatible b0d9a90f45 integration/system: add TestEventsNonBlocking 000f5e8d10 daemon: Daemon.ContainerStats: small cleanups f4ae01a38a daemon/server/router/system: getEvents: use event consts for filtering 6b52a16f14 integration/network/bridge: add "generated" header to markdown docs 48557f72f9 daemon/libnetwork: TestUserChain: rename golden files ff8364a39f hack/test/unit: use empty default values fbd3cdc007 fix vendor da2b1a2930 Fix image prune events for containerd backend b68ff62ab7 daemon/libnetwork/bitmap: add OnesCount method be7a769b69 Dockerfile: disable CGO for building utilities 8de606beb1 Dockerfile: remove trailing slashes for GOBIN aa80ad2572 Copy the daemon/internal/timestamp package to internal client package 812aa46d81 Move the api/types/time package to internal daemon package 033ec8be44 daemon/router/image: initialize default authConfig f0c069ffc9 gha: Add conditional skip for jobs with 'ci/validate-only' label 8013d80c24 hack/test/unit: run in the right module when TESTDIRS is used 97587945ef .github/workflows: Add kind label validation to PR workflow d2e0895b9b daemon: deprecate env vars set by legacy links b13ea83488 api: bump github.com/google/go-cmp v0.7.0 56c48e8708 d/libn/bitmap: tidy up constants, branchy math 82ba7fef17 api/types/container: rename Port to PortMapping 48038347d7 Match device driver on name and ignore capabilities 2aba802ae6 daemon: don't strong-type filters a2aa7be724 vendor: go.etcd.io/bbolt v1.4.2 1c34ff94bc client: consistently use defer for ensureReaderClosed f6b63e6013 client.sendRequest: clean-up logic for error-handling 2a4f70309d client.doRequest: improve GoDoc to clarify behavior d69fde4c60 client: Client.Ping: improve error handling and fallback b2e6fd31cf Restore DOCKER_DRIVER environment variable for storage driver configuration. 80294ddb60 client: make checkResponseErr a regular function 423980614e daemon: use slices.Clone, maps.Collect in some places 6505e8d605 daemon/libnetwork/types: rename StaticRoute.GetCopy to Copy 1e11e64c9c daemon/libnetwork/types: remove TransportPort.Equal() 561e14ea3f daemon/libnetwork/types: remove TransportPort.GetCopy() 385297ee40 daemon/libnetwork/types: remove unused IsIPNetValid utility 7960f742a2 daemon/libnetwork: Endpoint.CopyTo: use maps/slices.Clone a82a68a445 daemon/libnetwork: replace endpointJoinInfo.CopyTo with Copy() 2d5100749d daemon/libnetwork: replace EndpointInterface.CopyTo with Copy() 80452e5d4a daemon/libnetwork/types: PortBinding.Equal: use non-pointer receiver 7d5312ab56 daemon/libnetwork/types: rename PortBinding.GetCopy to Copy and non-pointer e387dc977e daemon/libnetwork/types: cleanup GetIPNetCopy, GetIPNetCanonical 68a94ecbb5 daemon/libnetwork/types: remove GetIPCopy; use slices.Clone 115b801a3b daemon/libnetwork/types: remove GetMacCopy; use slices.Clone cfad3ed6b9 daemon/libnetwork: replace IpamInfo.CopyTo with IpamInfo.Copy() 2f74f245b6 daemon/libnetwork: replace IpamConf.CopyTo with IpamConf.Copy() 796a4ce952 daemon/libnet/drv/bridge: stubPortMapper.UnmapPorts: fix slices.Delete a4fbbc1570 Add context to restore and load containers 85b79f83f4 Fix hardlink handling in containerd snapshot remap ead007f1f1 Use native snapshotter for integration tests and run 99181f56ce Fix symlink evaluation to a directory that may not exist 4816383c0b Add environment variable to define the threshold 185ae7ec2c docs: api: Tweak type of ForceUpdate to uin64 c8173c5c1f api: swagger: Tweak type of ForceUpdate to uint64 0a89d98bad daemon/libnetwork/types: remove errdefs aliases 892ebd2f17 daemon/libnet/drivers/windows: small cleanup in error-handling 11094e27b0 api/types/network: modernize EndpointIPAMConfig.Copy, EndpointSettings.Copy b48df69b02 daemon: Daemon.ContainerInspect: move vars closer to where used 582ee7ea57 daemon/builder/dockerfile: copyRunConfig: use slices/maps.Clone 0ded8645b6 Fix custom runtimes handling on Windows aa6838ae54 vendor: go.uber.org/zap v1.27.0 daf843b72f vendor: go.uber.org/multierr v1.11.0 aa85a44139 vendor: github.com/google/btree v1.1.3 fe32e4a999 vendor: github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 76fc74317a vendor: github.com/golang/gddo v0.0.0-20190904175337-72a348e765d2 632fb0c89a Update graphdriver check logic to account for disabling of snapshotter b41babafaa Fix windows test graphdriver setting 8700bca2bf Update migration test to use graphdriver env 00463b9216 Fix containerd image count 7f87cf9d8a Check for snapshotter plugin availability 632de98f75 Enable containerd snapshotters by default 9f5f4f5a42 Add containerd migration to daemon startup 2fff6b442e check-config.sh: report IP forwarding sysctl state f71e86eed5 rootless: enable IP forwarding f802d8a08e When cleaning iptables rules, warn on filter-FORWARD DROP 67ffa47090 nftables: don't enable IP forwarding 7dfeee8460 Drop FirewallCleanerSetter interface 200a75b34a Return concrete types from NewNftabler/NewIptabler 050fbbccca chore: use errors.Join instead of github.com/hashicorp/go-multierror 96f8c6395e chore: enable use-any rule from revive c6be4ad999 libnet/pa: don't set SO_REUSEADDR on UDP sockets 3862a0875c check for net.ErrClosed instead of "use of closed network connection" 9cae3fb167 docs/contributing: remove GIT_BRANCH image tag references 04d95003fd Stabilize TestSaveAndLoadPlatform integration test. 1f323d5035 client: README: add badges 662154a940 api: README: add badges b4e353c02b README: add license and OpenSSF badge df3aea43aa remove references to "vendor.mod" 98790830eb Deprecate api/types/strslice.StrSlice and remove its use b25b421f97 update to go1.24.6 677c2a19d9 vendor: github.com/docker/go-connections v0.6.0 50789e2bab testutil/fakestorage: inline go code and remove contrib/httpserver d49a354cb2 testutil/fakestorage: use local paths, fix port-mapping and optimize 8be1b2372a Dockerfile: update containerd binary to v1.7.28 b9b52d59b8 download-frozen-image-v2: Use curl -L 359a881cea download-frozen-image-v2: handle 307 responses without decimal 12c6345d3a libn/d/overlay: don't deref nil PeerRecord on error dcaf8893a0 windows: do not forgot IPAM configuration when re-creating networks 0ad765c67d add back replace and vendor, tidy f5f984eec6 Dockerfile: update runc binary to v1.3.0 234349d173 api/docs: sync v1.52 swagger with current version 833dc69ad9 docs: improve the description of the `outputs` parameter for `/build` endpoint c145229828 update some fixtures in tests 90c3d29bfb go.mod: tidy 78ccee32b3 update various "doc" links in code d82f50557e Bump api version in client and main module to v1.52.0-alpha.1 a0a7d9a3d7 Add release notes for client/v0.1.0-alpha.0 32ec26be6c Update client and main module api version to latest alpha tag e30b8e3393 update golangci-lint settings 57256a9b62 fix error-capitalization c13266d2c0 api/types: move plugin types to api/types/plugin c17d43ae67 api/types: move ErrorResponse to common/ErrorResponse 15f78b752c daemon: make buildSandboxOptions, buildSandboxPlatformOptions more atomic 77c2e3279d daemon/libnetwork: Sandbox.EnableService/DisableService slight cleanup bfce6556c4 client: use stdlib errors 3fe93532e4 client: tidy go.mod 3b14c5488f go.mod: github.com/containerd/containerd/v2 v2.1.4 259eb259bc go.mod: dario.cat/mergo v1.0.2 d8b622b315 go.mod: github.com/docker/go-events v0.0.0-20250114142523-c867878c5e32 8e63b55146 go.mod: github.com/fernet/fernet-go v0.0.0-20240119011108-303da6aec611 044234f847 api/docs: add v1.52 swagger 59e8fe8479 Prepare release notes for v1.52.0 dfac16c297 hack: Update cosmetic occurences of the old package name 83267a0fda go.mod: github.com/docker/docker v28.3.3 5b3e1a6425 go.mod: tidy 0ae3cb000e validate/pkgimports: Fix package name 22bd59010e hack: Fix dockerversion not being set correctly 79148460b0 hack/make.ps1: Replace old package name with moby/v2 2dcd8b8def golangci: Replace old package name with moby/v2 cad3a5775b docs: fix URI fragment by changing it to the existing subheading 778d8e3a26 libnet/d/bridge: handleFirewalldReloadNw: fix deadlock 519adb26c3 libnet/d/bridge: driver: un-embed mutex 752a3b302c api/pkg/stdcopy: add example 26cf610e6e api/pkg/stdcopy: improve docs c010c84ade api/pkg/stdcopy: don't use iota for consts 195a6bbb1e client: touch-up godoc e7c784c270 Dockerfile: add GO_SWAGGER_VERSION build-arg 908895b9c3 api: update "interface{}" to "any" 51bbc37f64 api/types/strslice: use slices.Equal dab42db691 contrib: remove editorconfig 5fbbf040aa contrib: remove mac-install-bundle.sh 5a40d4ed9f contrib: remove syntax (Dockerfile syntax) files 62545ddf90 daemon/internal/image: remove image-spec markdown 4cfc260a5f TESTING.md fix links to gotest.tools, and some touch-ups 1205a15db1 libnetwork/types: define RouteType type 6aab881534 libnetwork/types: make Protocol consts strong-typed ec5dbaf233 libnetwork/types: define IPFamily options using syscall.AF_XXX consts 95eeb0b3b0 libnetwork/types: define IPFamily type for IP-family consts ee560a3b23 api/types: fix Plugin.Config.Interface.Types def'n 2783f80ecf api/types: generate with latest go-swagger 5365f08ae2 daemon/config: make DNSConfig.DNS a netip.Addr a43198845b daemon/pkg/registry: un-export ResolveAuthConfig 5fbf680f5d daemon/pkg/registry: move newIndexInfo to search 6a7f0008a3 daemon/pkg/registry: move searchRepositories to where it's used 17d0ac56f3 daemon/pkg/registry: remove session; make searchRepositories a func 0c73c459b4 daemon/pkg/registry: un-export GetAuthConfigKey eda6a499e3 router/distribution: fetchManifest; detach from distributionRouter aac2623115 integration/container: TestCheckpoint: inline containerExec util 03991f4846 builder-next: puller.Snapshot: cleanup handling of v1 images 0156a42200 daemon/libnetwork/resolvconf: remove unused code bbec7a5150 migrated test container API rename to docker/cli 1e499bae79 daemon: consolidate platform-specific inspectExecProcessConfig 49aa38e9e7 update links to swarmkit v2 docs c98e5cb60b update github links to moby/moby cf15d5bbc6 remove obsolete //go:build tags 02b3f1cd99 integration: remove stray "distribution" directory 297ea75204 check_config: add nftables modules to optional features 83357620e2 Update unit test script for windows 58c95cde9b Replace uses of code which requires 1.24+ 900a0516de Update hack/test/unit for go module 1d571e619d Rename build package to moby v2 module 65867642d3 Remove go module workarounds f74e5d48b3 Create github.com/moby/moby/v2 module a954a0f4a2 Remove profiles 53bd828853 Remove libnetwork e55d294ea7 api/types/registry: add TODO/note about empty authConfigs 8b68b977b1 Revert "api/types/registry: EncodeAuthConfig: use empty string for zero value" 5bbf3af980 daemon: fix linting S1016 (staticcheck) false positive d58dc493fe replace direct uses of nat types for api/types/container aliases 494677f93f api/types/container: add aliases for go-connections/nat types f3ba0b2dc2 client/pkg/jsonmessage: remove Stream interface 19edf5c53c client/pkg/jsonmessage: remove DisplayJSONMessagesToStream fdaccdb233 pkg/jsonmessage: stop printing deprecated progressDetail, errorDetail 94ac102e4b api: remove deprecated NoBaseImageSpecifier 0d8ca8eefe Move pkg/jsonmessage to client/pkg/jsonmessage d00ecdc479 Move pkg/streamformatter to api/pkg/streamformatter 66862e14d1 Move pkg/progress to api/pkg/progress 1da417980c Move api/stdcopy to api/pkg/stdcopy ebef4a44fd Split streamformatter from jsonmessage 5a144c40e2 pkg/streamformatter: reduce jsonmessage.JSONMessage dependency f4127d76c5 pkg/jsonmessage: move JSONProgress to api/types/jsonstream 0515e1c991 pkg/jsonmessage: move JSONError to api/types/jsonstream 9a52e474a3 pkg/jsonmessage: suppress unhandled errors 02fcde0c18 Add separate const for daemon httputils to avoid jsonmessage import e257027903 pkg/jsonmessage: remove github.com/morikuni/aec dependency d7082848a6 tidy vendor.mod 6c7e2909c2 api/types/filters: remove deprecated ToParamWithVersion 5535e81a79 pkg/system: move to daemon/internal d94171bfaa pkg/system: make XattrError linux-only aa9de914ca pkg/system: remove unused ErrNotSupportedPlatform 28b822d5b3 pkg/system: remove Lgetxattr, Lsetxattr stubs for non-Linux 450ac30e4a pkg/system: LUtimesNano: remove stub for non-Linux 03f44e6d14 pkg/system: MkdirAllWithACL: remove stubs and unused os.FileMode arg 6f9e099fd3 pkg/system: remove deprecated IsAbs 53a3085256 pkg/system: remove deprecated EscapeArgs 1313b8caff pkg/fileutils: move ReadSymlinkedDirectory to daemon ae0a3d6918 pkg/fileutils: move ReadSymlinkedDirectory internal to daemon bae46854c5 pkg/fileutils: remove unused CopyFile utility 46854ca5ab daemon/pkg/registry: remove copy of rootless.RunningWithRootlessKit f1c65c1dd6 daemon/pkg/registry: Service.Auth: remove unused statusMessage return f797ced96a daemon/pkg/registry: remove unused ParseRepositoryInfo, RepositoryInfo e30d541da0 daemon/pkg/registry: remove unused ReadCertsDirectory d80e16bb18 daemon/pkg/registry: remove unused ParseSearchIndexInfo 4c1ab68c6c daemon/builder/remotecontext: remove detection of system.XattrError 1dc53e8ec7 Update client go.mod 03d7f47f31 Update api go.mod 5bbb7182e7 Move logdriver to internal under daemon/logger d7cfe97984 Update logdriver to remove proto definitions f866621303 contrib/check-config: fix kernel version range check df8d45c7c9 contrib/check-config: fix MEMCG_SWAP ee24dcec3d Move swarm runtime plugin storage type to internal 86190e7366 Move swarm runtime plugin spec to swarm types d761d9d358 pkg/rootless: move to daemon/internal 17959aff2c remove pkg/stdcopy as it has moved to the api module c055c3e098 remove pkg/stringid as it has moved to the client module 76e2ca1d41 pkg/stack: move to daemon/internal f78d595c96 runconfig: move to daemon/internal/runconfig 75bc4c5292 daemon/server/router/container: request sysInfo from daemon / backend 02867f9473 runconfig: rewrite ContainerDecoder to DecodeCreateRequest 5e567a3856 daemon/server/httputils: remove ContainerDecoder interface ec3e83a7b5 api/types/container: move StateStatus, NewStateStatus internal again 667cb4bec8 fix vendor 26fda349b8 runconfig: remove exported errors 969b293778 iptables: remove SCTP checksum rule e6298db297 cli/ is not in moby repo (anymore) 83510a26b3 api/types: move backend types to daemon/server be27300c6e daemon/server/router/checkpoint: remove unused httputils.ContainerDecoder b448dc5575 daemon/server/router/container: postCommit: only decode Config 6b4dfb0135 integration-cli: migrate TestPostContainersCreateShmSizeXXX to integration 617326a40c testutil, integration-cli: fix minor linting issues da92ea2837 integration-cli/daemon: rewrite CheckActiveContainerCount with client 6adbeff449 integration-cli: remove parseEventTime utility 281a3f6c41 integration-cli: remove deprecaed inspectMountSourceField 6124c00827 integration-cli: buildImageSuccessfully: don't wrap buildImage 877529c62d integration-cli: remove deprecated inspectFieldWithError utility 68480dc11d integration-cli: remove createTmpFile utility 29a7d4039e integration-cli: remove deprecated inspectFieldMap utility d100fd6a77 integration/system: remove "hdr" utility 97827e1a58 integration-cli: TestContainerAPIGetExport: fix minor linting issues f73aba83dc client: TestContainerStats: fix minor linting issues f67e6555bf api/types/container.StatsResponseReader: move to client 4dda328af8 client: rename files for system-commands to their canonical name 96a6884cb3 api/types: move DiskUsage types to api/types/system 82c069c857 api/types/system: move DiskUsage, DiskUsageOptions to api/types/backend 24aa86991c api/types: move PluginCreateOptions to client b93ad81898 api/types: move plugin client options into client 44ae4cd2b7 api/types: move HijackedResponse into client f491b70aa4 integration-cli: remove "requirement" package ca1c5ee08f pkg/stringid: move to daemon, and provide copy in client 0abcdb7405 Update golangci for lazyregexp 6514282136 Move internal/testutils/networking to integration/internal/testutils/networking 14eb2770b9 Move internal/unshare to daemon/internal/unshare 28de87fb28 Move internal/unix_noeintr to daemon/internal/unix_noeintr 5b913b3ea0 Move internal/sliceutil to daemon/internal/sliceutil 20cc1a6203 Move internal/rootless to daemon/internal/rootless 8042010175 Move internal/platform to daemon/internal/platform c3b0e0130a Move internal/otelutil to daemon/internal/otelutil b62b542c2e Move internal/opts to daemon/internal/opts 713d7f5ed1 Move internal/nlwrap to daemon/libnetwork/nlwrap fd21e3b935 Move internal/multierror to daemon/internal/multierror baea1c5092 Move internal/ioutils to daemon/internal/ioutils 50743e3f38 Move internal/containerfs to daemon/internal/containerfs ca9c4dffb7 Move internal/cleanups to daemon/internal/cleanups 222b2b8b2f Move internal/lazyregexp to daemon/internal/lazyregexp 9566272f30 Move pkg/tarsum to daemon/builder/remotecontext/internal/tarsum ca5d2348d0 Move pkg/idtools to daemon/internal/idtools 7bfb804dbe Move registry to daemon/pkg/registry f1f83dae55 Move reference to daemon/internal/refstore c74ba95583 Move oci to daemon/pkg/oci f24455c90b Move image to daemon/internal/image 1ff6011e04 Move distribution to daemon/internal/distribution fa9a3c383d Move layer to daemon/internal/layer 3003c56c57 Delete TestRunDNSOptionsBasedOnHostResolvConf 3205fcf6c7 pkg/stringid: TruncateID: touch-up doc 6ed00d5044 registry: ConvertToHostname: use strings.Cut 547a2db21d registry: TestNewIndexInfo: inline testIndexInfo (thelper) 5ea78575e7 registry: fix assorted gocritic issues 406ee2feb5 registry: translateV2AuthError: fix singleCaseSwitch (gocritic) ecb0354da5 registry: isCIDRMatch: fix captLocal (gocritic) 1ceda96864 registry: serviceConfig.loadInsecureRegistries: fix ifElseChain (gocritic) d4e85443ff registry: remove deprecated RepositoryInfo.Class field cc2d564a9e registry: remove deprecated RepositoryInfo.Official field 38453db513 contrib: remove gitdm 0d9304c9e1 docs: remove old rootless placeholder a1f68bf5a6 overlay: Reload Ingress iptables rules in swarm mode 8b208f1b95 libnetwork: split programIngress() and dependent functions on Add and Del functions 50e6f4c4cb libnetwork: refactor ingress chain management for improved rule handling and initialization 4f0485e45f libnetwork: add FlushChain methods for improved iptables management 262c32565b libnetwork: refactor rule management to use Ensure method for Append and Insert operations 19a8083866 libnetwork: refactor iptable functions to include table parameter for improved rule management c2e2e7fe24 libnetwork: extract plumpIngressProxy steps in a separate function 51ed289b06 libnetwork: extract programIngressPorts steps in a separate functions 752758ae77 libnetwork: extract creation/initiation of INGRESS-DOCKER chains in separate function 07393071ad bridge: Reapply endpoint iptables rules on firewalld reload 6d457d9695 bridge: Trigger firewalld reload during bridge integration tests f1a97bda3d api/types/container: remove deprecated Stats type 4d5a7289a0 api: move docs to api module bdcf4e8c85 adjust minimum API-version for multiple platforms on save/load a401c0c046 runconfig: update fixtures for TestDecodeContainerConfig 1378604cc3 integration-cli: remove tests for pre-docker 1.7 clients 8d8bbefb90 client: remove deprecated CommonAPIClient interface 728f0769e1 client: remove deprecated ImageInspectWithRaw 2f200f9e05 client: remove deprecated IsErrNotFound helper 5ed9891eed client: remove deprecated ErrorConnectionFailed helper a0fa5da2ab client: remove deprecated NewClient and NewEnvClient functions 30322dd649 client: fix example, and update refs to old modules 4859497098 pkg/stdcopy: fix missing alias for stdcopy.Systemerr 01c7b4233c hack/validate: remove obsolete exception b91ebbde6d Refactor containerd platform matchers. fcc8209e12 Add support for multiple platforms in image export and loading. 2303e6bff6 client: Client.doRequest: add special handling for DNS resolution errors 67596f01e2 client: Client.doRequest: add special handling for "not found" errors 462d0ff5aa client: Client.doRequest: simplify permission check and unwrap error 7072acac79 client: Client.doRequest: preserve wrapped error 3b4fbaacd7 client: Client.doRequest: use early return cf1695bef1 Add option --bridge-accept-fwmark 2a342079c6 api/types/container: add missing type for exec-inspect response. a600da91f4 profiles/apparmor, seccomp: migrate to separate module 30752f0780 Always allow access to routed endpoints 4538a1de0a libnetwork: handle coalesced endpoint events e1a586a9a7 libnetwork/d/overlay: handle coalesced peer updates 8340e109de libn/d/win/overlay: dedupe NetworkDB definitions c7b93702b9 libn/d/overlay: extract hashable address types 844023f794 libnetwork/driverapi: make EventNotify optional 69c3c56eba libn/networkdb: report prev value in update events 34fb2486ef test: migrate test api client version old not supported cc9e6a13a2 api/types/swarm/runtime: remove module path for generating proto 76c1afeb97 api/types/plugins/logdriver: remove module path for generating proto 85ecf8c0f4 api: update references to old module name a17a2e8f3d api/stdcopy: touch-up godoc 5b8ef1aff2 api: remove redundant //go:build lines 260cc008f4 fix vendor 4e246efcd1 libnet/d/bridge: mv portmapper to libnet/pms/{nat,routed} 289ef96d8b libnet/d/bridge/i/rlkclient: move to libnet/i/rlkclient 41cd92f6c0 libnet/portmapperapi: add PortMapper interface, registry afb231d027 libnet/d/bridge: add a new Hairpin config flag 6f59a8e665 libnet/d/bridge: call setChildHostIP while binding 43f384c452 libnet/d/bridge: connectivityConfiguration: use PortBindingReq type aa36cc5d25 libnet/d/bridge: move portBinding to portmapperapi 429818f969 libnet/d/bridge: move portBindingReq to portmapperapi 090c319f2e Don't allow the daemon to start with nftables and Swarm enabled 26e487db78 testutil: Fix sense of hasFwBackendArg check 6e7a2c830d Add Health attribute on the docker ps command c4f9616c4a client: cleanup encoding body and add test-coverage 024414b47e integration: rename vars that shadowed import 20d594fb79 deprecate pkg/stdcopy, move to api/stdcopy f651a5d5e9 registry: remove uses of lazyregexp b33b4bd290 internal/testutils/networking: rm uses of lazyregexp daa991c3d8 testutil/environment: don't use regex for string-matching error 0dc3193b2b integration-cli: remove uses of lazyregexp 6f9758047d fix: add create log stream awslog driver log option to validate list c47afd41c8 Create github.com/moby/moby/client module afd6487b2e Create github.com/moby/moby/api module 135cea2a10 Update test-unit for client module 7e708a5416 Update unit tests for api module 0971099c5f Add options to vendor to add and remove replace eab076f217 Gocompat tests no longer needed with go modules c469e5ebab daemon/server: rename vars that shadowed imports 61b19a494a oci: deprecate SetCapabilities b9196ed703 oci: fix godoc for SetCapabilities, TweakCapabilities 5c683e8603 oci: sort defaultLinuxMaskedPaths 0433def57d internal/platform: remove NumProcs() stub for Linux 1a504f68fd Add nftables+firewalld tests to CI 02d7a3026a Support nftables+firewalld d95dceb3b1 build: device entitlement support 655dbe69d0 pkg/tailfile: rename vars that shadowed type a089c51160 pkg/idtools: remove deprecated functions and types 3bc64b312e runconfig: decodeContainerConfig: fix godoc referencing wrong type ab5d348b77 integration-cli: remove uses of "runconfig" 0c3185a835 daemon: killProcessDirectly: use "WithFields" for logging 1cc42643ae hack/buildkit-ref: temporarily bump BuildKit to head of v0.23 branch 18e463a082 api/types: remove deprecated RequestPrivilegeFunc type a3920ae6a0 api/types: remove deprecated IDResponse type 3e5a06179e api/types: remove deprecated container-inspect types 8347b05435 api/types: remove deprecated Container type f050df0329 api/types: remove deprecated ContainerState type 7abeb4d5a4 api/types: remove deprecated container-networksettings types c5a2194b5d api/types: remove deprecated container Health types 76bf0e2929 api/types: remove deprecated MountPoint 207db8792e api/types: remove deprecated Port fa8177ba7a api/types: remove deprecated GraphDriverData 836ec65d5f api/types: remove deprecated ImageInspect, RootFS 7d3459e7fb api/types: remove deprecated SecretCreateResponse, SecretListOptions 68744c8b05 api/types: remove deprecated ConfigCreateResponse, ConfigListOptions 33f07ff3f4 api/types: remove deprecated NodeListOptions, NodeRemoveOptions f13796d2af api/types: remove deprecated TaskListOptions 72b1e11264 api/types: remove deprecated ServiceCreateOptions 3faead6fc1 api/types: remove deprecated ServiceUpdateOptions 55ad118eaf api/types: remove deprecated ServiceListOptions, ServiceInspectOptions 91558ae3f3 api/types: remove deprecated SwarmUnlockKeyResponse 74fe646ac2 api/types: remove deprecated build-cache types 3eac6e7888 api/types: remove deprecated BuildResult 088cb2ffa6 api/types: remove deprecated build-related types 1359046a36 pkg/process: call out that "Zombie" is only supported on Linux 94618ac3ab pkg/process: separate exported funcs from implementation a88e13f4f9 client: fix datarace when accessing cli.Version field e6cdf24bcd windows: include labels when re-creating non-default nat networks d4e026fe20 Wait for container dependencies upon daemon start up 39ab393274 Add daemon option --firewall-backend 7b9bd987bf api: deprecate NoBaseImageSpecifier a632b8495b daemon: define default (and maximum) API version 2b17ab0ec6 libnet/internal/resolvconf: fix naming of error (errname) aa757e591d libnet/internal/resolvconf: don't use rc.WriteFile in tests 8d54d36bce libnet/internal/resolvconf: fix naming of error 60a3a28a04 libnet/internal/resolvconf: minor optimizations f22a3dfdb7 libnet/internal/resolvconf: optimize Generate() without text/template 0775ab6661 libnet/internal/resolvconf: add benchmark for Generate() 41da5700a4 client: define default (and maximum) API version b54bde4376 Move testutils image load to integration internal b83f36877f Move internal/mod to daemon/internal/builder-next/worker/mod af86e80825 Move daemon/build to daemon/builder/backend 7d48302134 Move builder to daemon/builder 6ff9bea6a7 Move builder/builder-next to daemon/internal/builder-next 3a447bc079 api/types/registry: EncodeAuthConfig: use empty string for zero value 472e09ac47 api/types/registry: DecodeAuthConfig: add early returns and improve errors 6865032baa api/types/registry: add BenchmarkDecodeAuthConfig c1b95c0ca2 ci/windows: Always run tests with c8d 967daa627a integration: Skip TestRunMountImageMultipleTimes on Windows a615ec798d builder/remotecontext/git: fix linting issues 6a8654a808 api: bump to 1.52 ac5f464649 libnetwork/networkdb: improve quality of randomness 5799deb853 libnetwork/networkdb: test quality of mRandomNodes d8730dc1d3 libnetwork/networkdb: add convergence test 7771a38896 Remove integration test using daemon internals 17d5f731f1 Move internal/safepath to daemon/volume/safepath 7edd7c68b1 Move internal/mounttree to daemon/internal/mounttree daeaac0d3c Move internal/directory to daemon/internal/directory 33d824b838 Move quota to daemon/internal/quota 04f5276267 Move volume to daemon/volume fdd9ae3465 libnet/internal/resolvconf: use slices.Clone b1ce0c89f0 client: always send (empty) body on push 50d2dafc7f libnet/portallocator: introduce OSAllocator 14bd3451d8 client: ContainerExecAttach: update GoDoc links 830e0d79f5 vendor: github.com/opencontainers/cgroups v0.0.4 d66cf14a87 registry: replace pkg/homedir.GetConfigHome for os.UserConfigDir 14d9be4978 daemon: Fix mounting same image multiple times with different destinations a28f031298 Fix libnetwork proto generation b1884b6bba Restore libnetwork/resolvconf 3b5f7c2a29 Move internal/modprobe to daemon/libnetwork/internal/modprobe 7f4713a364 Move internal/maputil to daemon/libnetwork/internal/maputil 22ed8b1327 hack/make/test-docker-py: split test-exclusions to separate lines 7a720df61f Move libnetwork to daemon/libnetwork f05652867d Move opts to daemon/pkg/opts fb2117987d Dockerfile: upgrade Delve to v1.25.0 18438f3c13 Dockerfile: update compose to v2.38.2 8c3e10a011 Dockerfile: update buildx to v0.25.0 4dee288b51 Dockerfile: update cli to v28.3.2 9bcb12aa48 daemon: ContainerExtractToDir: make AllowOverwriteDirWithFile opt-in fd8fec18cd integration/container: XFAIL flaky TestExecResize on Windows 4a8d77c958 api/types/container: remove deprecated ContainerTopOKBody alias 3d8d9c2bb3 api/types/container: remove deprecated ContainerUpdateOKBody alias f8a2550a22 pkg/system: deprecate IsAbs and move internal 63bada41e5 pkg/system: deprecate EscapeArgs and move internal 0fc1493654 pkg/system: remove EnableContainerdRuntime, ContainerdRuntimeSupported a327a9f341 integration-cli: fix flaky TestRestartStoppedContainer 59d5743a43 testutil/daemon: Daemon.Stop() don't log when already stopped 1c8b09ccf6 integration-cli: TestDockerNetworkHostModeUngracefulDaemonRestart start, not restart 9e69fc567e testutil/daemon: remove string-matching for error cf41e9ac60 testutil/daemon: gofumpt d6c90dcb87 integration/container: fix flaky TestRemoveContainerWithVolume d30e61bff4 api/types/registry: add some tests for encoding/decoding authconfig c31368fffb Don't raise an error when stopping a stopped docker-proxy f6b3b257c8 implement test api images history integration test on dedicated file 669163c416 remove test api images history integration cli test suite 04dbcddd6a migrate test api images history integration cli test to integration test adad33b30e Fix expected results for nftablesdoc tests dde698a2e8 integration/container: add basic test for ContainerInspectWithRaw 16ed75572f client: TestContainerInspectWithEmptyID test both inspect variants 7f602d3b94 When switching between iptables/nftables, delete old rules a5e3f39770 integration/container: avoid ContainerInspectWithRaw with "size" 88b67eb2fc integration/container: cleanup TestCreateWithCustomReadonlyPaths bd091c1a9d integration/container: cleanup TestCreateWithCustomMaskedPaths 779052873d Add nftablesdoc ad579b8a1d daemon/container: remove deprecated IsValidStateString 312eebde49 daemon/container: remove deprecated IsValidHealthString e9fb208e87 daemon/container: remove deprecated StateStatus, WaitCondition 0d24798529 daemon/graphdriver: remove error or deprecated graphdriver-plugins 7767525ccd daemon/graphdriver: remove deprecated GetDriver() 1fe4a0a7ad daemon/graphdriver: remove redundant init() bd8f9c3c1b registry: remove deprecated APIEndpoint.AllowNondistributableArtifacts 65d424e126 registry: remove deprecated APIEndpoint.Official 7252c3c78d registry: remove deprecated APIEndpoint.TrimHostName 11a18d3b00 api/types/registry: remove deprecated fields for non-distributable artifacts b3e513f80a registry: remove deprecated Service.ResolveRepository() 5862b926f5 registry: remove deprecated SetCertsDir and unify CertsDir code 924cd22d1d registry: remove deprecated HostCertsDir 178416334f Run CI tests with nftables ea29dffaa5 daemon/server: remove compatibility with API v1.4 auth-config on push 54e67d0054 daemon: AuthenticateToRegistry: remove statusMessage return e8396af484 nftabler: add per-port rules b677c1a671 Replace integration import test use of image type d90277372f libn/d/overlay: drop obsolete writeToStore comment 30b9480107 Create legacy links during endpoint Join dd9e289b6e Don't pass sandbox options to ProgramExternalConnectivity 4f7afb8ac9 Remove libnet's logic to track a driver's port mapping state 89d3419093 libnetwork/d/overlay: fix logical race conditions 843cd96725 libn/d/overlay: fix encryption race conditions a1d299749c libn/d/overlay: inline secMapWalk into only caller 74713e1a7d libnetwork/d/overlay: un-embed mutexes a05080c26c libnet/d/bridge: split NATed and routed port mappings d229c1ba31 libnet/d/bridge: norm pb reqs before forming groups e2034267f6 nftabler: add per-endpoint rules b5bf89c315 libnet/d/bridge: pass SCTP sock to the proxy 0a047e825c update to go1.24.5 0ea28fede0 integration/networking: increase context timeout for attach c833bd598e vendor: github.com/ishidawataru/sctp v0.0.0-20250708014235-1989182a9425 03a662b80e vendor: code.cloudfoundry.org/clock v1.37.0 08bde5edfa libnetwork/networkdb: fix broadcast queue deadlocks aff444df86 libn/networkdb: make TestNetworkDBIslands not flaky 1e1be54d3e libn/networkdb: prevent spurious rejoins in tests 21d9109750 libn/networkdb: stop forging tombstone entries 428dbe617a nftabler: add network level rules a55fede2d4 Pass context to nftables functions 1c5d6d1ee3 Mark iptabler/nftabler golden results as generated ee6a6b061f daemon/pkg/plugin: remove dependency on legacy distribution package 09689298e3 distribution: fix detection of v1 images and remove libtrust dependency ac9d5a6068 integration-cli: TestPullFailsWithAlteredLayer: use OCI manifest fd47ccef7b integration-cli: TestPullFailsWithAlteredManifest: use OCI manifest 4e818970e2 integration-cli: TestPullManifestList: use OCI media-types f6ef56a0bc integration-cli: TestPullManifestList: rewrite using OCI types 51d6687754 api: swagger: Tweak type of GwPriority to integer bfc0c7cff5 docs: api: Tweak type of GwPriority to integer 557b5d60d3 layer: remove LogReleaseMetadata utility 7d18f65eb2 distribution/xfer: improve test reporting 291872e086 remove type conversions ade244f97d deprecate layer.CreateChainID for OCI identity 10e9ab66f9 image/tarexport: inline validateManifest utility 471f173170 image/tarexport: improve error messages for invalid archives 033750cf80 image/tarexport: remove suport for loading v0/v1 images ebfafa1561 contrib: add Wireshark plugins for NetworkDB aae26b80fe Remove client buildkit dep e93e15afb0 Replace use of env test util with standard library call 4754c15e2b Dockerfile: bump gotest.tools/gotestsum v1.12.3 (for go1.25) fa4f3c979f gha: remove GO_VERSION build-arg from builds 136c0e591b image: RootFS.Clone: simplify aea776332b pkg/stack: suppress some unhandled errors e32d26cb59 libnet/diag: remove /stackdump endpoint a881e9e057 Remember port binding state in the bridge driver 7ea50c14d6 Remote network driver: remember gateway state 054738bce3 Pass gateway endpoint ids to ProgramExternalConnectivity 07e5be0a18 image: remove special handling for legacy "layers+base" windows images 5efd2286da vendor: update buildkit to v0.23.2 e1b70074ec distribution/xfer: LayerDownloadManager.Download: remove initialRootFS arg 173436c702 distribution/xfer: rename var that shadowed type 0683bc6355 fix some inconsistency in import aliases d207ee97ff daemon/listeners: extract utility for DACL, and improve docs 18dc570918 remove project dev "reports" 93bbd21d82 rename codecov.yml to .codecov.yml ce3c8785dc restartmanager: move to daemon/internal 256f96ef59 remove VENDORING.md 717188201a contrib: remove mkimage-xxx scripts 3f8630cb84 internal/usergroup: move to daemon/internal cbe6e31487 internal/usergroup: move windows consts to builder/dockerfile 8dbe0f45a9 integration-cli: debug TestPushToCentralRegistryUnauthorized 5fe253cd79 builder/dockerfile: BuildFromConfig: combine loops a30b63eafc integration-cli: remove uses of deprecated dockerCmdWithResult utility 90f9ce14f1 Move libcontainerd to daemon/internal/libcontainerd 3ee8c1e3a9 Move libcontainerd/types to daemon/internal/libcontainerd/types 841a369b8f Move libcontainerd/supervisor to daemon/internal/libcontainerd/supervisor fe959261d3 Move libcontainerd/shimopts to daemon/internal/libcontainerd/shimopts 4e8bd050bf Move libcontainerd/remote to daemon/internal/libcontainerd/remote dd1656e6bc Move libcontainerd/queue to daemon/internal/libcontainerd/queue 6835f367e5 Move libcontainerd/local to daemon/internal/libcontainerd/local 5419eb1efc Move container to daemon/container a02ba3c7df Move container/stream to daemon/internal/stream 9d9cb00d50 Move container/stream/bytespipe to daemon/internal/stream/bytespipe 3581b982f7 Move plugin to daemon/pkg/plugin 1c700c876f Move plugin/v2 to daemon/pkg/plugin/v2 f5ceed8719 Move plugin/executor/containerd to daemon/internal/plugin/executor/containerd 0b2582dc8f Move internal/metrics to daemon/internal/metrics 87238882e0 Move api/server to daemon/server 3a6e3f85c6 Move api/server/backend/build to daemon/build 79f802d46a Move api/server/httputils to daemon/server/httputils c7a87f0dee Move api/server/httpstatus to daemon/server/httpstatus d64bd2cceb Move api/server/middleware to daemon/server/middleware 72a020fcd8 Move api/server/router to daemon/server/router f293628f55 Move api/server/router/volume to daemon/server/router/volume 15c8007064 Move api/server/router/system to daemon/server/router/system 45172bbf23 Move api/server/router/swarm to daemon/server/router/swarm f6ba5a5241 Move api/server/router/session to daemon/server/router/session 3eb5fe0277 Move api/server/router/plugin to daemon/server/router/plugin baa58ddc6a Move api/server/router/network to daemon/server/router/network 0cbb4ac8e6 Move api/server/router/image to daemon/server/router/image a063389af7 Move api/server/router/grpc to daemon/server/router/grpc 9ff489863c Move api/server/router/distribution to daemon/server/router/distribution ced7798ed8 Move api/server/router/debug to daemon/server/router/debug 3a9db5fbd6 Move api/server/router/container to daemon/server/router/container fcf3ff1b2f client: remove getDockerOS utility in favor of "Ostype" header d6136b660f Move api/server/router/checkpoint to daemon/server/router/checkpoint 31b6886eb1 Move api/server/router/build to daemon/server/router/build 1c0d381f4e client: client.tryImagePush: accept registry.RequestAuthConfig ca0afe91b9 client: client.tryImageCreate: accept registry.RequestAuthConfig 79b4e18883 client: add staticAuth utility 871543a8c5 client: Client.ServiceUpdate: don't manually construct header value a824db247f Add progress aux emitter to build backend 374fa24a53 Add multierror function to api network 0964fa01ba Remove dependency on testutil from client 58404b0c28 Remove dependency on httputil for client hijack test e7289e7e02 hack: check windows resources are set in the binary 44623fb856 cmd: use dockerfile to generate win event messages 0ea20c9f72 cmd: fix winresources and move them out cli package 6b8afec95b fix redefines-builtin-id from revive 90ab64cbda fix increment-decrement from revive 381d9d0723 fix use-errors-new from revive f0136d1dba fix superfluous-else from revive 369c8f828e fix var-declaration from revive d72f219a11 gha/bin-image: update tags comment b40fe5cb8b pluginrpc-gen: align generator with generated f8fcc20c3b Update maintainer info for austinvazquez 38b98bcf68 gha/bin-image: add major and minor version image tags 057e35dd65 libnetwork/d/overlay: ref-count encryption params 1c2b744ca2 libnetwork/d/overlay: properly model peer db 59437f56f9 libnetwork/d/overlay: refactor peer db impl 33139da522 Split part of dockerd main to command under daemon 98047c5190 Move cmd/dockerd/trap to daemon/command/trap ea11b5f3fe Move cmd/dockerd/debug to daemon/command/debug 53475e1adf integration/container: TestCreateByImageID: minor improvements fcf666f9b0 dockerfile: update govulncheck to v1.1.4 8c067c5223 client: Client.addHeaders: remove special handling for api < 1.25 ef50844a0b docs: cut api docs for v1.51 5a02e7f4e3 vendor: update buildkit to v0.23.1 b466c35da1 Update containerd to v2.1.3 7a12bbe5d3 libn/d/overlay: delete FDB entry from AF_BRIDGE 1d8545d60c daemon/config: Validate: add missing validation for registry mirrors 307c18598d registry: ValidateMirror: improve validation for missing schemes a90da2edc3 vendor: github.com/opencontainers/cgroups v0.0.3 a7f01d238e libnetwork: fix flaky Swarm service DNS 062082ec9b daemon: containerStop: fix ordering of "stop" and "die" events bf002e51a0 Split [Program|Revoke]ExternalConnectivity out of libnet driverapi 4ccbca1efe Add TestRoutedNonGateway d85513e1a3 daemon: LogContainerEventWithAttributes: minor optimisation ec185e57cf Test Nftabler params e43968d7ed vendor: github.com/moby/buildkit v0.23.0 0c182d4d57 api/types/container: deprecate ExecOptions.Detach 126f99d776 Add a way to undo nftables.Enable(), for unit tests 1289519b03 vendor: update buildkit to v0.13.0-rc2 c3ac979ecf vendor: github.com/moby/swarmkit/v2 v2.0.0 4891396da6 docs(client/ContainerExecAttach): add a mention to stdcopy.StdCopy b7ef527bdc pkg/idtools: deprecate IdentityMapping, Identity.Chown 66e9cd97f2 remove deprecated pkg/archive, pkg/chrootarchive d06c22f27d remove deprecated pkg/reexec 98015c21ec remove deprecated pkg/atomicwriter cf91441a1b pkg/ioutils: remove deprecated atomicwriter functions 1f0e9077e4 remove deprecated pkg/parsers c66abe486b nftabler: add mirrored WSL2 loopback0 workaround d31956b2f7 Add an outline nftabler 04618dfc0b remove deprecated pkg/platform f1e93a1770 pkg/system: remove deprecated MkdirAll ce31bf3f0b gha: dco: bump alpine to 3.22 1ad9599da7 Drop DOCKER-ISOLATION rules 2d60b8eacd vendor: github.com/moby/swarmkit/v2 v2.0.0-20250613170222-a45be3cac15c 6ec6e0991a libnetwork/networkdb: prioritize local broadcasts e9a7154909 libnetwork/networkdb: improve TestCRUDTableEntries dbb0d88109 libn/networkdb: use distinct type for own networks 51f31826ee libnetwork/networkdb: don't clear queue on rejoin 30b27ab6ea libnetwork/networkdb: drop id field from network 9316396db0 gha: run windows 2025 on PRs, 2022 scheduled 6f484d0d4c gha: update to windows 2022 / 2025 0a30b98447 gha: lower timeouts on "build" and "merge" steps accbfde61e client: use go-winio.DialPipe directly df6b405796 libnetwork/d/overlay: drop initEncryption function 713f887698 libnetwork/d/overlay: drop checkEncryption function cb4e7b2f03 libnetwork/d/overlay: make setupEncryption a method 0d893252ac libnetwork/d/overlay: checkEncryption: drop isLocal param 4b1c1236b9 libnetwork/d/overlay: peerdb: drop isLocal param 48e0b24ff7 libnetwork/d/overlay: elide vtep for local peers a9e2d6d06e libnetwork/d/overlay: filter local peers explicitly Signed-off-by: Bruce Ashfield

docker: make ca-certificates a packageconfig

2025-09-19T02:17:13+00:00

Moving ca-certificates into a packageconfig allows using docker without installing all the certificates. Signed-off-by: Patrick Vogelaar Signed-off-by: Bruce Ashfield

docker: update to v28.3.3

2025-08-21T15:40:45+00:00

Bumping moby to version v28.3.3-53-g80947b5724, which comprises the following commits: 553c3b8c9f vendor: go.etcd.io/bbolt v1.4.2 7d7edf46a6 go.mod: github.com/containerd/containerd/v2 v2.1.4 993eae423e go.mod: dario.cat/mergo v1.0.2 2c93d2f909 go.mod: github.com/docker/go-events v0.0.0-20250114142523-c867878c5e32 6305a44e58 go.mod: github.com/fernet/fernet-go v0.0.0-20240119011108-303da6aec611 03a4cd8d9a vendor: code.cloudfoundry.org/clock v1.37.0 687cd8ebae integration/system: remove TestEventsBackwardsCompatible 95c3340e75 integration/system: add TestEventsNonBlocking e364b6c466 ci: add golangci-lint configuration to ignore deprecated api type usage in daemon 9396c31e13 api/types: deprecate disk usage types for build cache, container, images, and volumes bcbccc6eec pkg/jsonmessage: JSONMessage: deprecate From, Time, and TimeNano fields 5a0d62cab0 Add multierror function to api network 8a89fe5c19 daemon/router/image: initialize default authConfig e53cd07fcc client: remove getDockerOS utility in favor of "Ostype" header cf0958f89b docs: api: Tweak type of ForceUpdate to uin64 fd89baef7e api: swagger: Tweak type of ForceUpdate to uint64 3fc876cd7b update to go1.24.6 85aaa37c08 Dockerfile: update containerd binary to v1.7.28 16c7a35584 Dockerfile: update runc binary to v1.3.0 61443a72c2 integration/container: XFAIL flaky TestExecResize on Windows 492b3c94cb integration-cli: fix flaky TestRestartStoppedContainer d5b47b8fdf integration/container: fix flaky TestRemoveContainerWithVolume 30663d3e86 Dockerfile: bump gotest.tools/gotestsum v1.12.3 (for go1.25) 3a15e3ed23 download-frozen-image-v2: Use curl -L ad243becbe download-frozen-image-v2: handle 307 responses without decimal 648c74d243 Add separate const for daemon httputils to avoid jsonmessage import eadee3e5b9 [28.x] api/types/filters: reimplement ToParamWithVersion 60e84e7350 api/types/system: move DiskUsage, DiskUsageOptions to api/types/backend 7d6a75b342 runconfig: update fixtures for TestDecodeContainerConfig 596404f3aa integration-cli: remove tests for pre-docker 1.7 clients 9fd8eaa95d Delete TestRunDNSOptionsBasedOnHostResolvConf b2f03f45ea profiles/apparmor, seccomp: migrate to separate module 3e9ff78b94 bridge: Reapply endpoint iptables rules on firewalld reload 29ed80aa86 bridge: Trigger firewalld reload during bridge integration tests e4b1f89996 daemon/server: remove compatibility with API v1.4 auth-config on push 0c9e14dcce hack/buildkit-ref: temporarily bump BuildKit to head of v0.23 branch 4205776b85 client: always send (empty) body on push 38c0abffce update to go1.24.5 bfade89ec2 integration/networking: increase context timeout for attach a818cfd87b gha: run windows 2025 on PRs, 2022 scheduled 653777a522 gha: update to windows 2022 / 2025 1ad3df4768 api: swagger: Tweak type of GwPriority to integer 6323db8e78 docs: api: Tweak type of GwPriority to integer a3c8f7fa8c dockerfile: update govulncheck to v1.1.4 dfbba63a34 gha: remove GO_VERSION build-arg from builds e17e96e3c5 vendor: update buildkit to v0.23.2 a2af8bdebd gha/bin-image: add major and minor version image tags docker/cli: update to v28.3.3 873609d790 cli/command/*: remove deprecated cobra command constructors 570a17b3bc internal/commands: RegisterLegacy: remove redundant copy 4405c0bd50 internal/commands: remove mutexes / synchronisation 56cab16779 Register CLI commands implicitly e650803f09 opts: deprecate ParseEnvFile bd8e3e4440 Unexport trust commands c6b7268932 Unexport plugin commands 2ce94e4fff internal/registryclient: repositoryEndpoint: memoize repoName bf39340294 Unexport swarm commands d4588c711c Unexport registry commands 630fe430ff Unexport stack commands 3b0edc794c Unexport context command 9961e39d40 Unexport volume commands 88178eda32 Unexport service commands e00762ed7d Unexport secret commands 02fda07211 Unexport manifest command ab3fcf9f9b Unexport node commands 78a8856c14 Unexport network commands 4286883b95 cli/command: inline resolveAuthConfigFromImage 2d3b0b33b4 cli/command: fix godoc links 9b9d103b29 cli/flags: remove special quote handling for `--tlsXXX` flags cfb8cb91f2 Unexport system commands 1d571d178d docs: deprecated: fix formatting of deprecated/removed in 13010ba673 cli/registry/client: deprecate and move internal 5c76f7f2d8 docs/deprecated: legacy links env vars e66a1456d3 Unexport image commands ae1727c41e cli/command: TestRetrieveAuthTokenFromImage: don't decode authconfig 38595fecb6 Unexport container commands cce29da061 Unexport config command 3265cead1d Unexport checkpoint command 1b9d0762a5 Unexport the builder command and bake stub command 72f76f2720 cli-plugins/manager: deprecate annotation metadata aliases f9777d2517 cli: remove deprecated VisitAll, DisableFlagsInUseLine utilities 5934553198 opts: remove deprecated NewNamedListOptsRef, NewNamedMapOpts a056cc6164 opts: remove deprecated ListOpts.GetAll 15f3e910d1 opts: remove deprecated ValidateHost 0c07d81a03 opts: remove deprecated QuotedString ee05a71513 Deprecate special handling for quoted values for TLS flags 6f0c66c152 opts: deprecate NewNamedListOptsRef, NewNamedMapOpts 4ead8784d0 Add command registration helpers 69854c4e08 cli/command/container: TestRunPullTermination: rewrite with streamformatter f14eeeb361 cli/flags: add "hostVar" to handle --host / -H as a single string 5ee2906e78 cli/flags: use a regular StringArray for the `--host` / `-H` flag d0ac0acff0 opts: deprecate ValidateHost utility 187a942a88 opts: deprecate QuotedString 5a38118956 cmd/docker: fix some minor linting issues 6bd8a4b2b5 cli: deprecate VisitAll, DisableFlagsInUseLine utilities 5a99022556 cli: remove HasCompletionArg utility bf13010df8 docs: fix output example for docker system prune 4cd9833d7c gha/validate-pr: Replace `continue-on-error` 1456b53e4e .github/workflows: Add kind label validation to PR workflow 6d9b06d227 gha/validate-pr: Run on synchronize eb5b03a8a3 cli/command/container: copyToContainer: improve error-handling c5ea9079af cli/command/container: copyToContainer rename error-return f2af519f2e build(deps): bump actions/checkout from 4 to 5 27a7947535 cli/command/image/build/internal/git: use stdlib errors 53183396d7 internal/volumespec: use stdlib errors 70f1147394 cli/command/trust: use stdlib errors a8f11a2fa2 cli/command/formatter: use stdlib errors c612e141b5 cli/command/registry: use stdlib errors 9b7ee0e201 cli/config: use stdlib errors 3b677449d8 cli/context: use stdlib errors d38317c781 cli/compose: use stdlib errors 2dd462cc36 cli/command/idresolver: use stdlib errors 4c89455378 cli/registry/client: use stdlib errors adbe04b5fc cli/manifest, cli/command/manifest: use stdlib errors 097cc9ca64 cli/trust: use stdlib errors e069ded4c3 cli: reduce uses of pkg/errors for stdlib errors 3529651fa7 vendor: github.com/docker/go-connections v0.6.0 3035b6685b e2d skip flaky test: TestPromptExitCode/plugin_upgrade, plugin_install 6769f62746 update to go1.24.6 5052a39915 cli/command/completion: remove deprecated ValidArgsFn 7026e68a71 cli/command: remove AddPlatformFlag utility c0fbbe05ca cli/command: remove AddTrustVerificationFlags 8c22927978 cli/command: remove AddTrustSigningFlags 3f5b1bdd32 cli/command/plugin: remove DCT d3c23a223c e2e/global: TestPromptExitCode: group plugin preparation steps 081add2fc5 e2e/testutils: SetupPlugin: return path of directory 8972e53ad0 cli/command: remove prompt utilities that were for internal use a93ed48d06 vendor: dario.cat/mergo v1.0.2 abfe4d4629 remove deprecated `bind-nonrecursive` option for `--mount` f9431e3b35 vendor: moby/moby/api v1.52.0-alpha.1, moby/moby/client v0.1.0-alpha.0 22cc0e90ae cli/command: remove deprecated ConfigureAuth utility de54347518 cli/command: remove deprecated CopyToFile utility 2abcbf842f cli/connhelper: remove dependency on pkg/process 513ceeec0a cli-plugins/manager: remove deprecated ResourceAttributesEnvvar 5876b2941c cli-plugins/manager: deprecate metadata aliases 50963accec cli-plugins/manager: wrapAsPluginError: don't special-case nil d789bac04a cli-plugins/manager: pluginError: remove Causer interface 71460215d3 cli-plugins/manager: deprecate "IsNotFound" 1cc698c68f cli-plugins/manager: un-export "NewPluginError" 549d39a89f cli-plugins/manager: fix Plugin marshaling with regular errors 54367b3283 cli-plugins/manager: un-export "Candidate" interface 057f3128b6 cli-plugins/manager: reformat TestValidateCandidate table dfbac70efa remove some remnants from CLI "experimental" config option 3b6a556533 cli/command: remove exported "RunPrune" functions bf8cb43025 system prune: delegate version check a888c4091c system prune: delegate confirmation message and validation 02d578b637 system prune: use register function for prune functions 21e8bbc8a2 internal/registry: remove RepositoryInfo, add NewIndexInfo 066710ba7b opts/swarmopts: minor cleanup and refactor b8df4abeb5 bump version to v29.0.0-dev 3f0ccd1b71 dockerd.md: Add --firewall-backend 6176a7686e dockerd.md: add --bridge-accept-fwmark f937e62c89 replace direct uses of github.com/docker/go-connections/nat types bf16dd1251 vendor: docker/docker, moby/moby/api and moby/moby/client 4faedf2bec36 149503a32c migrate e2e container rename test 5c3577ff9f cli/command/service: credentialSpecOpt: use strings.Cut b6d7ac34be vendor: docker/docker, moby/moby/api and moby/moby/client 2574c2b2e917 83e507377a vendor: docker/docker, moby/moby/api and moby/moby/client 25e2b4d48551 86b5b528a6 internal/registry: ParseRepositoryInfo: remove unused error return 89d8c8a2a7 remove aliases for containerd/errdefs, disallow docker/errdefs d63cae6f1c cli/command/formatter: use alias/wrapper for TruncateID 4bd6b6897f vendor: update docker, api, client to master 7ab3e7e774 templates: deprecate NewParse() c6f935eba5 cli/command/plugin: fix linting issues, and assorted cleanups ef7fd8bb67 refactor(cli/compose/loader): extract ParseVolume() to its own package 9257cc7f68 image/tree: Unmark as experimental, warn when redirected f214f860b6 image/tree: Remove extra newline after legend f907c7a4b0 internal/registry: fix linting issues (revive) cd277a5815 cli/command/system: remove use of Mirrors field in test c297770d2d internal/registry: remove pkg/errors 219cfc8b7d internal/registry: define local serviceConfig 2607ba8062 internal/registry: remove ValidateIndexName 5322affc9f internal/registry: remove duplicate endpoint methods dc41365b56 internal/registry: remove NewStaticCredentialStore dad2e67860 internal/registry: remove PingResponseError 7cf245d2f7 internal/registry: Service.Auth remove unused statusmessage return e0b351b3d9 internal/registry: remove code related to mirrors 7716219e17 internal/registry: remove dead code f6b90bc253 add internal fork of docker/docker/registry 20181d4363 vendor: github.com/docker/docker master fa169b6933 vendor: docker/docker, moby/api, and moby/client master a87bde0068 cli/registry/client: remove deprecated RepoNameForReference 323ef1997f vendor: docker/docker, moby/api, moby/client to latest e504faf6da cli/command/registry: remove uses of registry.ParseSearchIndexInfo 644dc16b16 vendor: github.com/docker/docker master (v29.0-dev) 7609dde8d0 build: remove DCT support for classic builder e2cab2c64c cli/command/image: remove use of api.NoBaseImageSpecifier 64f33cd463 TestCloneArgsSmartHttp: fix unhandled error a3bea24086 Include FirewallBackend in docker info output b05aa464a6 Dockerfile: install git-daemon for use in tests e34616574f fix linting issues 260f1dbebb cli/command/image: move build-context detection to build e95d133612 remove some redundant import aliases 3dec3879c8 opts: minor cleanup in tests fdc90caeee cli/command/container: deprecate DiffFormatWrite 0db7b9f774 cli/command/container: newDiffContext: use struct-literal 239b727834 cli/command/container: DiffFormatWrite: remove intermediate var 907507e22a cli/command/container: deprecate NewDiffFormat 29263e865b cli/command: remove usages of RegistryAuthenticationPrivilegedFunc ea4c161067 Dockerfile: update to alpine 3.22 3d985799d4 cli/command: remove some redundant import-aliases 8b6436ecee Dockerfile: document ALPINE_VERSION build-arg 2b56b66b10 cli/command: remove interactive login prompt from docker push/pull 0f2b709c7c cli/command/container: diff: remove redundant validation and cleanup 53d02ece89 remove use of github.com/docker/docker/pkg/longpath 3600ebca76 remove uses of github.com/docker/docker/pkg/ioutils ReadCloserWrapper 9b047a501f remove uses of pkg/stringid.GenerateRandomID() e0f4bc699c cli/command/formatter: add TrunateID utility 1264a59779 Dockerfile: bump gotest.tools/gotestsum v1.12.3 (for go1.25) e6b8cc1c7d Dockerfile: update buildx to v0.25.0 50fa436c21 Dockerfile: update compose to v2.38.2 0be687acc0 cli/command/container: don't set CopyToContainerOptions.AllowOverwriteDirWithFile 8eac03d5fa docs: fix CDI device configuration anchor 0c5e258f8a e2e/global: TestPromptExitCode: check for trailing newline 9bcc88611f update to go1.24.5 ccd5bd8d57 registry: warn of DOCKER_AUTH_CONFIG usage in login and logout dec07e6fdf tui/note: add warning note type 7e040d91ef docs: cdi is not experimental anymore 76524e7d0e vendor: github.com/docker/docker v28.3.1 3262107821 cli/config: export const dockerEnvConfig 4ea6fbf538 cli/debug: fix OTELErrorHandler logging messages if there's no error 94f097da28 rename codecov.yml to .codecov.yml e7e238eb4b cli/command/container: remove redundant uses of strslice.StrSlice 2ba7cb8b44 mount /var/run/docker.sock for --use-api-socket 52e1e4fb21 vendor: github.com/docker/docker v28.3.0 88d1133224 cli/connhelper: quote ssh arguments to prevent shell injection 82eda48066 cli/connhelper/internal/syntax: fix linting issues 52d2a9b5ae cli/connhelper/internal/syntax: remove unused code from fork 64a9a6d0c8 cli/connhelper: add fork of mvdan.cc/sh/v3/syntax v3.10.0 0ba4362d69 Update markdown docs to indicate multi-platform support in image load/save. 8993f54fc3 Add support for multiple platforms in docker image save 38b99adc10 Add support for multiple platforms in docker image load. 342f8bca25 builder: remove // import comments 09a3c93f96 fix(QF1001): Apply De Morgan’s law a10a1e619b builder/remotecontext: remove unused named and "naked" returns 75f791d904 builder: use lazyregexp to compile regexes on first use 8d3c0fb6dc tests: migrate to assert.ErrorContains when possible 45f09a1504 builder/remotecontext/git: remove redundant capturing of loop vars (copyloopvar) 52c62bd13b Fix isGitURL regular expression 8f865184a6 builder/remotecontext: format code with gofumpt 6291744fa4 builder/remotecontext/git: use strings.Cut() 60b326f814 builder/remotecontext/gitutils: switch back to os/exec 66713384c3 builder/remotecontext/git: allow building on go1.18 5c21ec520e builder: add missing doc comment 212213e81e builder: fix running git commands on Windows bcd6c45731 builder: make git config isolation opt-in 876fc1dac4 builder: isolate git from local system 3bfb30acd7 builder: explicitly set CWD for all git commands 3f4cc89f64 builder: modernize TestCheckoutGit a12090d787 gofmt GoDoc comments with go1.19 26a11366a7 builder/remotecontext/urlutil: simplify and improve documentation 9e39630a05 pkg/urlutil: deprecate, and move to builder/remotecontext/urlutil 6d2a901118 refactor: move from io/ioutil to io and os package 389ada7188 Use golang.org/x/sys/execabs a4c8c72411 replace pkg/symlink with github.com/moby/sys/symlink 5896d383ca bump gotest.tools v3.0.1 for compatibility with Go 1.14 ea850377cd builder/remotecontext: allow ssh:// urls for remote context 2d0d4ce4af builder/remotecontext: use net/url instead of urlutil a0d9b0cf0d TestParseRemoteURL: use subtests 70aef9f502 gosec: add ignore comments for reported issues that can be ignored 04e2a24a9e gitutils: add validation for ref 71672ece9c Update tests to use gotest.tools 👼 db857b5d9c Post migration assertion fixes 242f176825 Automated migration using 6ea4877cff Add canonical import comment 7bc503344a gitutils: remove checkout directory on error e2cc22d076 gitutils: fix checking out submodules e9831d75e2 Fix shallow git clone in docker-build 9450481b7e Move IsGitTransport() to gitutils a6cc6cd878 Fix handling of remote "git@" notation e907d54fe6 Move pkg/gitutils to remotecontext/git Signed-off-by: Bruce Ashfield

Docker: add more required kernel modules as RRECOMMENDS:${PN}

2025-07-31T17:44:59+00:00

With a very minimal image recipe that just pulls in docker, the daemon won't start due to missing modules, so add the missing ones. The list of new modules was created by diffing the output of `lsmod` before installing all kernel-modules and the output after launching docker with all modules installed. Signed-off-by: Koen Kooi Signed-off-by: Bruce Ashfield

docker: update to v28.3.0

2025-07-07T15:42:27+00:00

Bumping moby to version v28.3.0-2-ge0183475e0, which comprises the following commits: a2af8bdebd gha/bin-image: add major and minor version image tags b2a9318a1e docs: cut api docs for v1.51 8c713c1af4 gha: lower timeouts on "build" and "merge" steps 8e7ea470cf vendor: update buildkit to v0.23.1 222baf4ccb vendor: github.com/moby/buildkit v0.23.0 0e0ca09ddc daemon: containerStop: fix ordering of "stop" and "die" events e62b0e2234 vendor: github.com/opencontainers/cgroups v0.0.3 06ab9cd1ed daemon/config: Validate: add missing validation for registry mirrors 97aa4e8550 registry: ValidateMirror: improve validation for missing schemes e18a9c95b8 Update containerd to v2.1.3 09fef2b26e api/types/container: deprecate ExecOptions.Detach 44c8cd2e8f vendor: update buildkit to v0.13.0-rc2 78b6204f9e vendor: github.com/moby/swarmkit/v2 v2.0.0 cf98237186 vendor: github.com/moby/swarmkit/v2 v2.0.0-20250613170222-a45be3cac15c fd96b01b0e pkg/idtools: deprecate IdentityMapping, Identity.Chown 987b8a88a6 c8d/push: Extract shared push logic d9e7b86de4 c8d/push: Fix fallback single-manifest push not creating a tag 53d12c96f8 vendor: github.com/containerd/containerd/v2 v2.1.2 aac0260d21 Fix flaky test TestDaemonRestartRestoreBridgeNetwork cfcbfabb0f api/image/list: Return `Containers` count 6d737371b8 fix comparison rule from errorlint 941d09e265 Handle error message from token server with containerd backend e4e7fcf668 vendor: github.com/moby/buildkit v0.23.0-rc1 d3d20b9195 integration-cli: TestCopyFromContainerPathIsNotDir: adjust for win 2025 cf86f3a082 vendor: github.com/containerd/nydus-snapshotter v0.15.2 9a85f50aaa vendor: github.com/pelletier/go-toml/v2 v2.2.4 1764909076 vendor: github.com/fsnotify/fsnotify v1.9.0 102adcab57 vendor: github.com/containerd/console v1.0.5 5230692cad vendor: cloud.google.com/go/longrunning v0.5.5 5fb6604642 vendor: google.golang.org/api v0.160.0 d2954c4e05 vendor: otel v1.35.0, otel/contrib v0.60.0, grpc v1.72.2 05f892190c vendor: github.com/prometheus/client_golang v1.22.0 952cddd05b vendor: google.golang.org/protobuf v1.36.6 ccf5f8036c vendor: golang.org/x/sys v0.33.0 c81e03bc0b vendor: golang.org/x/sync v0.14.0 05e8b1701c daemon/containerd remove leftover schema1 compatibility code 2ff281e33a daemon/containerd: update link to containerd code d54f713d95 daemon/containerd: rename var that shadowed type 8e6cd44ce4 daemon: ensuring state of stopped container is visible to other queries when container is stopped and before API response is sent (fix for https://github.com/moby/moby/issues/50133). 7acb079403 Revert "libn/networkdb: don't exceed broadcast size limit" 0df31cf585 Revert "libn/networkdb: fix data race in GetTableByNetwork" 83b2fc245d Revert "Fix possible overlapping IPs when ingressNA == nil" e079583ab4 Revert "libnetwork/networkdb: use correct index in GetTableByNetwork" cfd5e5e4d4 Revert "libn/networkdb: b'cast watch events from local POV" 576cf73add Revert "libn/networkdb: record tombstones for all deletes" 2297ae3e64 Revert "libn/networkdb: Watch() without race conditions" cc60ec8d3c Revert "libn/networkdb: stop table events from racing network leaves" b5b349dbd6 Revert "libn/osl: drop unused AddNeighbor force parameter" 35916f0869 Revert "libn/osl: refactor func (*Namespace) AddNeighbor" 3eb59ba5a2 Revert "libnetwork/osl: remove superfluous locks in Namespace" 5d6ae34753 Revert "libnetwork/osl: stop tracking neighbor entries" ea818a7f6f Revert "libnetwork/internal/setmatrix: make keys generic" 78ccc20545 Revert "libn/d/overlay: use netip types more" 23c56099ee daemon/logger/loggerutils: use defer to fix gocritic "badlock" linter 0069360e3b volume/mounts: windowsDetectMountType: rewrite using switch 027355d7b3 container/stream: TestRaceUnbuffered: put unused testing.T to use 2bbf5f5a39 daemon/containerd: ImageService.resolveImage: cleanup resolve by name:tag 2e25775c83 libnetwork: Replace deprecated usages 3dd8f03f25 vendor: go.etcd.io/bbolt v1.4.0 55f47f9e34 Windows: don't try to load "mirrored" network plugin 20b6075380 fix badCall from go-critic 10c4715a62 openrc: allow customizing containerd service name c466ae0f71 fix badLock from go-critic 19f5ac3c81 fix initClause from go-critic aa632664b6 fix mapKey from go-critic 5ad4e4edf7 fix deprecatedComment from go-critic b8a4f6534f fix stringsCompare and stringConcatSimplify from go-critic a62de57aa1 fix sprintfQuotedString from go-critic bc9ec5fc02 fix emptyStringTest from go-critic 469afa5f8f fix httpNoBody from go-critic 8f7faa01d1 fix boolExprSimplify from go-critic e5be7b54b1 fix yodaStyleExpr from go-critic 64075850fc fix go-critic linter 793dd8385a Only "prune" Windows networks created by Docker 071d27cd3d Add contributor guidelines for where to put source code in packages 1603ad636e update to go1.24.4 9b5d8cd186 fix thelper linter ea581c96b9 Validate BIND_DIR variable in Makefile e32715ec03 Added support for AMD GPUs in "docker run --gpus". 6bac5ca833 Set EnableIPv4=true in overlay network inspect response 27f2e0ecc5 api: bump to 1.51 bd20bfdc41 all: remove redundant import-aliases for "go-winio" f85394dd5d api: image inspect: add back fields that did not omitempty 284904119a Dockerfile: update cli to v28.2.2 8ba832cc8f docs/api: swagger: quote maxUint64 example value affe1d6335 api/swagger: quote maxUint64 example value b6fa565cba libnetwork/resolvconf: Build: decorate error for invalid nameservers 35e062dde1 libnetwork/resolvconf: rewrite TestBuild tests to a table-test 16ed51d864 libnetwork/networkdb: always shut down memberlist c1a27ea5af pkg/stack: remove // import comments dd382769bd pkg/rootless: remove // import comments ce191648c7 pkg/useragent: remove // import comments ad1a388895 pkg/tailfile: remove // import comments b6f99f6d7f pkg/stringid: remove // import comments ca2cca1286 pkg/stdcopy: remove // import comments 225b7ca6b7 pkg/progress: remove // import comments 0f9818ad03 pkg/pools: remove // import comments f0f4fa0038 pkg/plugingetter: remove // import comments 5f4da92972 pkg/platform: remove // import comments 7a703f3772 pkg/pidfile: remove // import comments 511cf09e75 pkg/namesgenerator: remove // import comments 864e3f9348 pkg/longpath: remove // import comments cc329af619 pkg/jsonmessage: remove // import comments 0c70c762b2 pkg/streamformatter: remove // import comments fd8b6a24ab pkg/tarsum: remove // import comments 17845556f2 pkg/system: remove // import comments 18a1b61b49 pkg/sysinfo: remove // import comments 126246ae39 pkg/plugins: remove // import comments 0380c952a6 pkg/parsers: remove // import comments 4800a9b50d pkg/ioutils: remove // import comments ca3982adea pkg/homedir: remove // import comments c93f18e0b8 pkg/fileutils: remove // import comments 6a9f7c543c pkg/authorization: remove // import comments a4411f497f errdefs: remove // import comments 0ea03c4add opts: remove // import comments 7ce4e9685a oci: remove // import comments 23009a700a testutil: remove // import comments fe1bc3e7fd runconfig: remove // import comments 4656712b82 restartmanager: remove // import comments 134f20c828 reference: remove // import comments 97b20f6b79 registry: remove // import comments 2548254317 quota: remove // import comments 66055ea07c plugin: remove // import comments 3bbb38f1d2 volume: remove // import comments 021dd75bc4 libcontainerd: remove // import comments fe34e89992 layer: remove // import comments 9abf9f2d0d internal: remove // import comments 4970333621 integration: remove // import comments a4b0d32fa6 integration-cli: remove // import comments 7eecd04c7b image: remove // import comments c1a3c51d9e dockerversion: remove // import comments c7cb2d9783 distribution: remove // import comments 5318877858 daemon: remove // import comments 076e98e8f3 daemon/links, daemon/network: remove // import comments 2b42088bd5 daemon/listeners: remove // import comments 241e0bca8b daemon/events: remove // import comments 27956106d5 daemon/config: remove // import comments 69c34390c0 daemon/logger: remove // import comments 7d4caf4ba8 daemon/images: remove // import comments 9876c9fbcf daemon/graphdriver: remove // import comments 986ec3f877 daemon/cluster: remove // import comments 89aa33001e container: remove // import comments d469079338 cmd: remove // import comments c6bbc3bb6e builder: remove // import comments 4856e8ffad client: remove // import comments bf9d739561 api: remove // import comments fca97dae9d libnet/d/overlay/overlayutils: prevent uint32 overflow 3d8195a20f daemon/logger/fluentd: cap max-retries to MaxInt32 404f29c42d gha/bin-image: Don't push sha tags 7994426e61 Revert "containerd: images overridden by a build are kept dangling" a2652d4b81 Don't set up iptables chain DOCKER-USER when using nftables d3289dda4b Add nftables NAT rules for internal DNS resolver c299ba3b38 Update worker.Platforms() in builder-next worker. 6889039d76 Fix silent stop on error due to using output redirection together with `set -eu`. d6620915db portallocator: always check for ports allocated for 0.0.0.0/:: 027588eba0 builder: Pass cdi cache instead of CDISpecDirs bc6bc7aafa daemon/cdi: Log not found dirs as INFO 9856bf52a2 daemon: Configure default CDI cache ae2fc2ddd1 PortAllocator: Use netip.Addr instead of string as map key 19dc38f79b Listen on mapped host ports before mapping more ports dc519a0f18 iptables: Drop explicit RETURN rule from DOCKER-USER 148a19b6d6 seccomp: Require CAP_SYS_ADMIN for lsm_* syscalls 0ab8108b57 seccomp: Fix typo in lsm_set_self_attr 21a165de23 Use env-var DOCKER_FIREWALL_BACKEND=nftables to enable nftables 637e8142ce clean up golangci-lint config for deprectated errdefs.* 37caf3881a volume: replace uses of errdefs package 08768e4d9d testutil: replace uses of errdefs package 416dc8c1bf runconfig: replace uses of errdefs package 8803b58259 refernce: replace uses of errdefs package dcf253ffe2 plugin: replace uses of errdefs package 8561016335 libnetwork: replace uses of errdefs package f06c450a8e libcontainerd: replace uses of errdefs package 528f2284ee integration-cli: replace uses of errdefs package 14852fcd82 integration: replace uses of errdefs package a1a789dbd0 image: replace uses of errdefs package 6ee53a6831 errdefs: replace uses of errdefs package 083ccfa486 distribution: replace uses of errdefs package 55da8ea276 daemon: replace uses of errdefs package 364d8d8b31 container: replace uses of errdefs package 415fc7b41e builder: replace uses of errdefs package f0eaf228c1 api: replace uses of errdefs package f98b7005d2 remove fallback for non-OCI-compliant docker.pkg.github.com registry 048199f191 Dockerfile: update cli to v28.2.0-rc.2 d188df0039 libn/d/overlay: use netip types more 0317f773a6 libnetwork/internal/setmatrix: make keys generic e48ea1c6e0 Make integration tests ready for nftables f9f0db0789 Add nftables support to testutil SetFilterForwardPolicies 7ea0e60dde Skip test TestBridgeINCRouted in rootless mode 0d6e7cd983 libnetwork/osl: stop tracking neighbor entries 9866738736 libnetwork/osl: remove superfluous locks in Namespace b6d76eb572 libn/osl: refactor func (*Namespace) AddNeighbor 3bdf99d127 libn/osl: drop unused AddNeighbor force parameter f834a0bd82 vendor: github.com/miekg/dns v1.1.66 4da3b4bf2d run/pull: Warn/reject AI model images 339be4e2ae Dockerfile: install nano as alternative to vim 588a05a1ce docs/api: Cut docs for API v1.50 94daa36f03 libnetwork: don't reinvent mutexes cd2702e04e Dockerfile: update compose to v2.36.2 01fec904e4 Dockerfile: update buildx to v0.24.0 072483f9d7 c8d/delete: Require --force when deleting platforms 30da69d694 c8d/delete: Support deleting specific platforms acf6b6542e daemon/images: Make ImageDelete take opts struct 871675be9b c8d/delete: Extract untagReferences 153b16ad27 c8d: Extract memoryLabelStore d7cca3f997 docs/api: update deprecation version for erroneous fields 4dc961d0e9 image-inspect: remove Config fields that are not part of the image 0ec3278d48 profiles/seccomp: kernel v6.13 6aa8288cfb profiles/seccomp: kernel v6.12 e03ac1fad9 daemon: createCDICache: fix error-capitalization 7263ae74cd contrib: systemd: update deprecated StartLimit options 888cbfddf2 vendor: github.com/opencontainers/cgroups v0.0.2 42970fc461 registry: replace uses of errdefs package 979f18691a daemon: restore: fix fluentd-async-connect migration for downgrades c6b9bb00f9 api/server/router/build: BuilderVersion: allow buildkit on Windows 560299a16f validation: re-enable check for changes in integration-cli" e354e42e14 vendor: update buildkit to v0.22.0 a2ada6b258 daemon/create: Simplify GetImage args 2c57455339 vendor: github.com/containerd/containerd/api v1.9.0 a3ce441ae0 client: Use containerd errdefs to convert http errors 86187b2606 vendor: github.com/vishvananda/netlink v1.3.1 e8c269843c builder-next: remove support for deprecated schema1 images a9ec07a005 builder-next: add buildkit executor for wcow e655763837 client/volume: use containerd errdefs checks 6bde39b729 client/utils: use containerd errdefs checks 144363fea2 client/task_list_test: use containerd errdefs checks 6cd9eaf5ab client/task_inspect_test: use containerd errdefs checks 68a8a8f3c8 client/swarm: use containerd errdefs checks 0b4495463f client/service: use containerd errdefs checks ad4a3d32c6 client/secret: use containerd errdefs checks df96159df0 client/request: use containerd errdefs checks 7e8b26ecb9 client/plugin: use containerd errdefs checks 2356f435a6 client/node: use containerd errdefs checks 4a830df491 client/network: use containerd errdefs checks 8f2bf4aef5 client/info_test: use containerd errdefs checks a1035ec59b client/image: use containerd errdefs checks 370b7e65fc client/events_test: use containerd errdefs checks 27e64d3bdb client/distribution_inspect_test: use containerd errdefs checks f030c7bf10 client/disk_usage_test: use containerd errdefs checks c75ca8ef10 client/container: use containerd errdefs checks eafa2266f6 client/config: use containerd errdefs checks 685fa0bb91 client/checkpoint: use containerd errdefs checks bb41e5a32e Replace platforms.Format with platforms.FormatAll in functional code. 9319fefe35 vendor: github.com/moby/buildkit v0.22.0-rc2 cf11cd1aac Replace platforms.Format with platforms.FormatAll in user-visible messages and logs. 0b1c7a8306 api/types: move ServiceUpdateOptions to api/types/swarm 31d62930f7 api/types: move ServiceCreateOptions to api/types/swarm 5ad0867236 api/types: move TaskListOptions to api/types/swarm 7e8f630bec api/types: move SwarmUnlockKeyResponse to api/types/swarm f008d85edc api/types: move NodeListOptions, NodeRemoveOptions to types/swarm b13528522a api/types: move ServiceListOptions, ServiceInspectOptions to types/swarm 5e8fd897e1 client/volume: use gotest.tools-style asserts 9432eff6bc client/utils_test: use gotest.tools-style asserts adf7ecc366 client/task_list_test: use gotest.tools-style asserts b781699ee2 client/task_inspect_test: use gotest.tools-style asserts d8ee5caf9a client/swarm: use gotest.tools-style asserts a6cd40de6b client/service: use gotest.tools-style asserts 3658dae265 client/secret: use gotest.tools-style asserts 2e65796c86 client/request_test: use gotest.tools-style asserts 44f30261da client/plugin: use gotest.tools-style asserts 832efcd672 client/options_test: use gotest.tools-style asserts 88453254af client/node: use gotest.tools-style asserts 047343d070 client/network: use gotest.tools-style asserts 6402a106e7 client/image: use gotest.tools-style asserts 043c7fa539 client/hijack_test: use gotest.tools-style asserts a8ed3bd734 client/events_test: use gotest.tools-style asserts c88f921331 client/disk_usage_test: use gotest.tools-style asserts 051dae4fdc client/container: use gotest.tools-style asserts cae3ccd34b client/config_create: use gotest.tools-style asserts bfc684d3f7 client/client_test: use gotest.tools-style asserts 19f3259093 client/checkpoint: use gotest.tools-style asserts a411a39be0 api/types: move ConfigCreateResponse, ConfigListOptions to types/swarm 23117afca8 api/types: move SecretCreateResponse, SecretListOptions to types/swarm 3d1e4d9002 api/types: move build-related types to api/types/build bb7dbaafcd api/types: move BuildResult to api/types/build.Result 6505d3877c API: /info: remove BridgeNfIptables, BridgeNfIp6tables fields 114b8a4fa9 Remove unused image/v1 code 7130cd4f16 Remove DockerSchema1RegistrySuite schema 2 version 1 tests 7c09fa25fd distribution: remove v2 schema1 push a891e4e3e1 validation: temporarily allows changes in integration-cli 2a96d2eb8d align //go:build versions c1b2be0399 client/info_test: Use gotest.tools asserts 9095698a5c daemon: Discover devices and include in system info f95a7c47e8 api: bump API version to 1.50 b70b496505 testutil/daemon: Don't use devcontainers daemon.json 23bbfea718 daemon: Fix error log when CDI cache creation failed 6d7a370fe5 Refactor CPU usage stats test to use go:embed eefe68a37c api/types: move build cache types to api/types/build 7aa7369f1f client: deprecate IsErrNotFound a022e916c8 update authors and mailmap 4cecce03f6 daemon: Enable CDI by default 07466d2e9b daemon: Daemon.ContainerExecStart: rename err-return, and minor refactor d5c370dee6 libnetwork/networkdb: use correct index in GetTableByNetwork 270a4d41dc libn/networkdb: stop table events from racing network leaves 205ba05feb fix usestdlibvars 23fa0ae74a Cleanup http status error checks fadb571106 Update api status checks to use containerd/errdefs 5c16f2d091 Use standard library interface to unwrap errors a90a9d899b Ignore deprecations for internal errdefs package f1bb44aeee Use containerd errdefs for error checks ba2ddd75e4 Dockerfile: update crun to 1.21 f07242f6d7 containerd: include present content size in disk usage calculations 3ded7b97d0 vendor: github.com/containerd/accelerated-container-image v1.3.0 68e025a11b daemon: startIngressWorker: fix S1000: should use for range (staticcheck) 7bc6fd09da Dockerfile: update compose to v2.36.0 76b24759f0 container: Snapshot.Health: change type to container.HealthStatus 7a7d72e874 api/types/container: Summary.State change type to ContainerState 8e57a019dc fix: load the CDI driver before the dockerd daemon starts b3ed54db81 integration/networking: mark TestPortMappedHairpinWindows as flaky 7b5d2b4ec3 chore: bump golangci-lint to v2 3d1cfb4de0 vendor: update buildkit to v0.22.0-rc1 c9b01e0c4c libn/networkdb: SetPrimaryKey() under a write lock 61646c8bfc containerd: remove unleaseSnapshotsFromDeletedConfigs 350bb5197a nftables: attempt a table-reload after an Apply error 06afbe9618 Check nftables is enabled before applying updates 976f855f68 Add OTEL span for nftables updates eeba428939 Make WSL2Mirrored a Firewaller param 1028b123e8 integration, libnetwork: fix some godoc comments (ST1020) a3aea15257 libn/networkdb: Watch() without race conditions ada8bc3695 libn/networkdb: record tombstones for all deletes c68671d908 libn/networkdb: b'cast watch events from local POV ba0ad9e80f Unit test the bridge driver in terms of its firewaller a7ef4a208d Fix multiarch image push tag for containerd snapshotter 854f3f62db container: don't persist State.RemovalInProgress on disk 44b653ef99 container: deprecate IsValidStateString e477df3b31 daemon/cluster/executor: use container.ContainerState consts 3bbdda696d use container.ContainerState consts in tests b811829595 api/types/container: add ContainerState and const for container state 8b6d6b9ad5 d/cluster/convert: expose Addr() on plugins 37259540e9 Remove/replace integration-cli tests that use iptables directly daeb080ff1 Test Iptabler params ea2e147c4c TestPruneDontDeleteUsedDangling: rename var that shadowed import 02e800dcbb plugin: use t.TempDir 57b27f2e9e image: use t.TempDir and rename vars that shadowed 08c5ebe040 layer: use t.TempDir and minor cleanups f84694ebdc container: use defer for locks 24f305b666 Makefile: set BIND_DIR to "." by default 4b6a9d23af cmd/dockerd/trap: use t.TempDir ea37a1f040 integration/build: use t.TempDir 900bd88848 internal/directory: use t.TempDir 46baf7deb0 distribution: use t.TempDir 1b4ba20708 distribution/metadata: use t.TempDir, rename var that shadowed 735ccfbc6f pkg/stack: use t.TempDir 72a11b84d4 testutil/fakestorage: use t.TempDir b38f73afe3 daemon: cleanupContainer: leave decorating container-id/name to caller d44b2e4bd7 daemon: cleanupContainer: use state-fields instead of string form 4a00ce10fa daemon: rmLink, cleanupContainer: rename args that shadowed import 1cf7d7ea4b hack/make/.binary: update link to go source for "pie" support e991c7185d update to go1.24.3 89ee292709 container: update GoDoc for State 7dae7c54dd fluentd: add write timeout log option 56ad941564 Fix possible overlapping IPs when ingressNA == nil dc1d23c646 Revert "rootless: skip tests that need br-netfilter loaded" 4b9092aa27 Load br-netfilter for rootless test-integration 7957a28859 container: remove GoDoc for deprecated aliases. fe403362b4 container: State.Wait(): don't use deprecated type 0bd82bfac2 chore: add systemd-sysusers configuration df662ebc59 container: deprecate IsValidHealthString f9c4601760 volume/mounts: MountPoint.Setup: rename output-var, and simplify err-handling 6ac3afe483 volume: remove/rename err-returns 986988a394 testutil/daemon: Daemon.StopWithError: rename output-var to prevent shadowing 3606712e2d testutil: remove named returns fe2d323c82 registry: remove/rename err-returns, and minor refactor 79b1b561a3 registry/resumable: remove named err-return, fix minor linting issue e67b6bfc69 plugin: remove/rename err-returns 943dfa985d oci: remove named err-return 0b169d34e4 libnetwork: remove named (err)-returns 154230cdd7 libnetwork/portallocator: getDynamicPortRange: fix err-handling on freeBSD 962fd8bc41 libnetwork/ipams/remote: inline decodeToMap cfdfbfab9b libnetwork/drivers/remote: inline decodeToMap 152db74d96 libcontainerd: remove/rename err-returns f87dcbe350 layer: remove/rename err-returns and remove naked returns 6981aad790 internal/testutils: remove named returns d1c58bdbbe integration-cli: remove/rename err-returns and remove naked returns 1b317b0323 distribution: remove named err-returns and minor refactor 1244685329 Optimization methods in internal\metrics\metrics.go 84ef7e4899 Allow TestIsolated/ipv6 to unexpectedly pass 4c4810e5d2 rootless: skip tests that need br-netfilter loaded dacf445614 libn/networkdb: don't exceed broadcast size limit 697c17ca95 libn/networkdb: take most tests off flaky list 90ec2c209b libn/networkdb: listen only on loopback in tests e3f9edd348 libn/networkdb: advertise the configured bind port ec65f2d21b libn/networkdb: fix data race in GetTableByNetwork d0af7c3c08 Move Cory from Reviewers to Committers b0777be89e Use firewaller.IPVersion instead of iptables.IPVersion for gwmode 3cbb1ae736 Move filter-FORWARD DROP setting to the firewaller 44843d9917 Pass context to more places a9bf151260 Put Iptabler behind a Firewaller interface. 92e497b9dc Create api interface to define build usage backend aef409dfb2 Remove unused reference store in image api 9eec936eb0 project: update status of branches for Moby 28.x 9315b15dc6 fix(ST1006): Poorly chosen receiver name 70139978d3 fix(ST1016): Use consistent method receiver names 9e9b6cc42e fix(ST1019): Importing the same package multiple times 27bf320a72 fix(ST1017): Don’t use Yoda conditions 98fa4bcfeb fix(exhaustive): missing cases in switch of type snapshots.Kind 95af77d038 fix(ST1015): A switch’s default case should be the first or last case f770f6c5ec fix(QF1012): Use fmt.Fprintf(x, ...) instead of x.Write(fmt.Sprintf(...)) a88c49f38e fix(QF1011): Omit redundant type from variable declaration 4f9214c156 fix(QF1007): Merge conditional assignment into variable declaration be54c79d9c fix(QF1006): Lift if+break into loop condition 2cce9a51ca fix(QF1004): Use strings.ReplaceAll instead of strings.Replace with n == -1 e2e7f9964f fix(QF1003): Convert if/else-if chain to tagged switch b0711d5fe9 fix(QF1001): Apply De Morgan’s law 7d8df25d16 fix misused error fef139ccc1 fix import 44a3453d73 Add daemon option --allow-direct-routing c16caabe36 Add TestNetworkConfigurationMarshalling a94643a1b3 bridge: add option com.docker.network.bridge.trusted_host_interfaces 33f5b9e963 Don't add stub Endpoint/Network object to cache on Sandbox restore c129c0fa9f Improve logging and readability of Controller.sandboxRestore 5d8192fcce Report endpoint id as well as name in ActiveEndpointsError 9aa66be7ec vendor: github.com/moby/buildkit v0.21.1 a79d081aa5 config: set buildkit gc enabled to default to true 19ccb75c62 daemon: remove/rename err-returns and remove naked returns 9ed975a247 daemon: NewDaemon: rename err-return 3e586094fc daemon: parseXXVersion: rewrite to be slightly more iodiomatic 2145cf6309 daemon: Daemon.ContainerStatPath, ContainerArchivePath: minor refactor 6da1ff6bf9 builder/builder-next: fix vars that shadowed (govet) 692610414a pkg/plugins: fix vars that shadowed (govet) 0fcd23ec13 daemon/logger/loggertest: fix vars that shadowed (govet) 4c57ffaca7 api/server/router/build: fix vars that shadowed (govet) eef5c75276 api/server/router/network: fix vars that shadowed (govet) 7edd83a1b3 libnetwork: fix vars that shadowed, and slight refactor (govet) 7dbe2f1fb6 libnetwork/portallocator: fix vars that shadowed (govet) 357b136ee9 libnetwork/drivers: fix vars that shadowed (govet) f831618e5b libnetwork/networkdb: fix vars that shadowed (govet) f633e8f03f libnetwork/cmd/diagnostic: fix vars that shadowed (govet) 190ad0610d daemon/logger: remove/rename err-returns and linting warnings ba15bbc422 daemon/images: rename err-returns to prevent shadowing 48220008d8 daemon/graphdriver: remove/rename err-returns and remove naked returns 088c180a9e daemon/containerd: remove named err-returns dc79403f7b daemon/cluster: remove/rename err-returns and remove naked returns 9b62592bfe Dockerfile.windows: update github.com/tc-hib/go-winres to v0.3.3 d6b2aec809 pkg/progress: remove named err-return 029f267d9b pkg/pidfile: remove named err-returns fdbf246889 pkg/parsers: remove named err-returns b0f93d5283 pkg/fileutils: remove named err-returns ab8e3da82c pkg/stdcopy: remove/rename err-returns d17a62592f pkg/ioutils: remove named err-returns f193ff1317 pkg/broadcaster: remove named err-returns 91f6e00ffa hack: Update broken links from README 7868d3ee3e vendor: github.com/opencontainers/runtime-spec v1.2.1 100102108b Use container status values from api 878de14c8d man: vendor github.com/cpuguy83/go-md2man/v2 v2.0.7 11f65b566d vendor: github.com/spf13/cobra v1.9.1 ea7152e493 volume/local: use t.TempDir 4b41198e3c volume/mounts: use t.TempDir 2b869baea3 volume/service: use t.TempDir 88f6dd72e5 volume/service: rename interface that collided with vars 3b4e21081f container: remove unused named-returns 35167dc616 client: Client: PluginInstall, PluginUpgrade: remove/rename err-returns bb57656932 builder/remotecontext: remove unused named and "naked" returns 5416f2d57c builder/dockerfile: remove unused named and "naked" returns f38b1fa30d builder/builder-next: SanitizeRepoAndTags: remove named err return c025dd74f0 builder/builder-next: wrapRC.Read: remove intermediate err-var 49d5b2cc8e builder/builder-next: puller.resolve: rename err-return 3f2296cfc1 api/server/router: remove named (err) returns 1e4bb14bcd api/types/container: define HealthStatus "pseudo" type c690e0076a use consts for health-status in tests 91473ce253 api/server/backend/build: sanitizeRepoAndTags: remove named err return c5031c8632 api/types/time: remove named err return 50a856157c containerd: images overridden by a build are kept dangling eee14cff72 builder/remotecontext: use t.TempDir 5749bc242a builder/dockerfile: use t.TempDir, rename vars that shadowed b54a038bec docker exec: fail early on exec create if specified user doesn't exist 37725b5eae Drop "-o com.docker.network.enable_ipv[46]" if overridden 8d0c272e4a Add TestLegacyLink dfd59c0a95 Dockerfile: Fetch vpnkit from moby org af0232d52b integration/build: Unskip TestBuildEmitsImageCreateEvent for c8d a0ff0a361e iptables: Direct routing DROP rules per-container, not per-port dea236e0ce Split iptabler into multiple files 282b3f7b97 Move bridge driver iptables code into its own package 8c36a22e79 Rename function insertMirroredWSL2Rule aa4abaf820 Use firewaller (iptabler) structs in iptables unit tests 75c60598b7 Move clearConntrackEntries to bridge_linux.go 42d149e45d fix duplicate import, and force consistent alias for bolt eede75c9d4 testing: remove some defer cleanup in favor of test.Cleanup() e3a0f2e690 vendor: github.com/vbatts/tar-split v0.12.1 bcc720abde builder/remotecontext: MakeGitContext: use "WithFields" for logs 54a556a5ef builder/remotecontext: Deprecate Rel() 2808e59f4c Dockerfile: update compose to v2.35.1 a75be33ba0 Dockerfile: update buildx to v0.23.0 dd36139b1a Dockerfile: update cli to v28.1.1 f1e3ed0c48 Dockerfile: don't pin syntax to 1.7 fc8361c078 vendor: github.com/containerd/containerd v2.0.5 62f51e4367 vendor: golang.org/x/oauth2 v0.29.0 bbbb0036df cleanup ignore files ead379a464 contrib/rootless-setuptool: Fix iptables detection 7c52c4d92e update go:build tags to go1.23 to align with vendor.mod 619f1ddd05 Warn when no external DNS nameservers are found 6083fad7df Reset default bridge addresses after integration tests c2b7abacf8 Use setupTest instead of testutil.StartSpan in tests d4e0d6f2a1 Integration tests: use different docker0 addresses fd550344b1 vendor: github.com/moby/go-archive v0.1.0 fd5e772aec CI: deduplicate execution of unit tests b8067d159f docs/api: update image tarball format a38ca9a548 daemon/initlayer: Setup: remove uses of idtools.Identity 380ded6309 Store an endpoint count for networks, for downgrade ae0331d8f5 vendor: update buildkit to v0.21.0 57bf7a8c70 bridge: Add a missing error check for firewaller setup c49ce64514 integration/TestStopContainerWithTimeout: Attempt to fix flakiness 7eda35fd05 profiles/apparmor: IsLoaded: optimize 0462b5e318 profiles/apparmor: add BenchmarkIsLoaded b23d267cb5 profiles/apparmor: add basic unit-test for IsLoaded 0dd5959eeb profiles/apparmor: InstallDefault: slight cleanup and optimization 0bb761698c profiles/apparmor: loadprofile: fix double command in error message 8e1c366773 profiles/apparmor: remove "// import" comments 1fa6a46c5d profiles/seccomp: remove "// import" comments 89604f1df1 profiles/seccomp: use stdlib for asserting 14623770e1 vendor: github.com/moby/buildkit v0.21.0-rc2 eacbbdeec6 Revert "API: /info: remove BridgeNfIptables, BridgeNfIp6tables fields" ece7e02b86 Update AUTHORS adb9e9135a docs/api: add documentation for API v1.49 099d3ee008 daemon: containerStart: add filtered labels to OTel span 0c5e816638 daemon: trace containerCreate f96dc9d1a5 Dockerfile: update registry to v3.0.0 4d35864c3d Fix removal of legacy links 5d2006256f API: /info: remove BridgeNfIptables, BridgeNfIp6tables fields 499e15d4ab api/server/middleware: fix debug-logs missing form-data 97688e8d06 container: Container.SetupWorkingDirectory: remove use of pkg/idtools 5f9d99b4cc integration-cli/swarm: Update to use gotest.tools ea6c76ee03 integration-cli/TestSwarmInit: Skip failing part on CLI after 18.06 fab94808f5 integration-cli: Update default CLI version to v18.06.3-ce 6c73266a71 Add registry error handling for push and pull ae3a1ac602 vendor: github.com/moby/buildkit v0.21.0-rc1 cd89a35ea0 Run CLI tests with cgroups v2 7435e4a1be registry: remove deprecated ServiceConfig.AllowNondistributableArtifacts ba03cd7a63 daemon/config: add test for deprecated daemon.json fields d72e434d30 vendor: golang.org/x/mod v0.24.0 224b393eb3 vendor: golang.org/x/net v0.39.0 b1ac2a53ed vendor: golang.org/x/crypto v0.37.0 a8af27bbae vendor: golang.org/x/text v0.24.0 7d49b014b6 vendor: golang.org/x/sync v0.13.0 9d04c28def vendor: golang.org/x/time v0.11.0 cdb3590e1a vendor: golang.org/x/sys v0.32.0 970fc1b6f7 Basic compose file for testing OTEL bits d8a5e8928b replace uses of idtools.MkdirAllAndChown, MkdirAllAndChownNew d96d20d45f update golangci-lint exceptions 29e0db25e7 Factor out top-level iptables setup into its own object 241d685574 libnet: add ep name in 'has active endpoints' error 489cd7edfc api, daemon, libnet: add a 'trigger' baggage member 31ac5cb6d9 libnet: New: plumb context 667c7d70b3 libnet/d/bridge: trace network setup steps eaae4b5fb6 libnet/d/bridge: put span prefix in var 78be7ebad7 libnet/d/bridge: trace createNetwork f8806f2b80 libnet/osl: independent OTel trace for advertiseAddrs d0154d3e59 Update to use github.com/moby/go-archive 45f9d679f8 Update remaining Ubuntu 20.04 uses to 22.04 and 24.04 57a042b77c deprecate pkg/(chroot)archive for github.com/moby/go-archive 564abf9157 api: info: omit deprecated "Commit.Expected" fields on API >= 1.49 f410dbda88 dockerfile: dind target to build docker image for testing c3fa7c1779 Test that firewalld reload doesn't re-create deleted iptables rules dbea045e0d Report firewalld reload time in Info.FirewallBackend a527e5a546 Restore iptables for current networks on firewalld reload 7d9c50db2b api: /info: omit non-distributable-artifacts fields for API >= 1.49 a0a86d0982 Add Info.FirewallBackend 25a80bd48e vendor: github.com/moby/sys/atomicwriter v0.1.0 4eebd2c920 libnet: TestNetworkStore: replace assert.Equal with Check e22d04e8a9 Improve CPU usage parsing and error reporting 40650c6982 libnet: de-flake TestNetworkStore 1c79c893b1 libnet: de-flake TestEndpointStore 8a5f141b0e registry: Service.lookupV2Endpoints: wire-up context 9d8c8382d3 registry: authorizeClient: wire-up context 8b920b2812 registry: loginV2: wire-up context 4642704ed7 registry: newTransport: remove intermediate var 7acef8101e c8d/pull: Show progress for non-layer blobs b3791dea92 pkg/archive: fix linting issues a427477220 pkg/idtools: MkdirAllAndChownNew: improve deprecation message a91bcc677b vendor: github.com/klauspost/compress v1.18.0 2c54f6f316 vendor: github.com/google/go-cmp v0.7.0 6422ff2804 deprecate pkg/atomicwriter, migrate to github.com/moby/sys/atomicwriter f1ec5bf14f pkg/idtools: remove tests already covered in moby/sys/user 3fc36bcac4 Update daemon to use moby sys/user identity mapping b5c99c0e95 Update moby/sys/user to version which includes mapping 0a83a476d8 registry: v1Endpoint.ping: pass through context 2a272a0c5d registry: newV1Endpoint: pass through context f158d2e809 registry: ReadCertsDirectory: internalize, and pass context 51d7f95c4b libnet: remove struct endpointCnt d377cd3810 libnet: Controller: cache networks in-memory cc8bd2016e libnet: Controller: cache endpoints in-memory c6cdfbf495 pkg/atomicwriter: return early if parent directory is invalid 00c988caa4 pkg/atomicwriter: add test for parent dir not being a directory ad386f64e5 pkg/atomicwriter: error on unknown file-modes ec82bc35c3 pkg/atomicwriter: disallow symlinked files for now f3aebbf9d8 pkg/atomicwriter: add basic godoc for package f80feba181 Rootlesskit: check for module nf_tables 7d742ebf75 Add utils for manipulating nftables rules 59169d0f97 image/inspect: Add platform selection d4e70f6325 vendor: tags.cncf.io/container-device-interface v1.0.1 74b71c41ac update to go1.23.8 (fix CVE-2025-22871) fc58c829e8 registry: ParseRepositoryInfo: remove some intermediate vars 44b7a42fc6 registry: ReadCertsDirectory: return early on error 4f65e35f02 registry: NewService: return nil on error a7daab5df4 registry: authTransport: un-export AuthConfig, RoundTripper 795461eceb docs: api v1.48: Move ImageGet api docs under Image tag e1e58409a1 docs: API v1.48 Add missing platform parameter to ImageGetAll api docs db275ddbc1 libnet: fix duplicated port mappings in overlay networks a9e22ee5e7 Don't run unit tests with mode rootless 749e35cf5e Move ImageGet api docs under Image tag 094df015b1 Add missing platform parameter to ImageGetAll api docs 7243860557 Include per-port rules in iptablesNetwork 4390ab275a api: bump API version to 1.49 0b5e1f904a Use netip.Addr instead of net.IP for legacy links 725e699741 Simplify iptables setup for legacy links 31f9ae0d19 registry: TestValidateMirror: improve coverage cb0a9d713c registry: ValidateMirror: touch-up GoDoc 6b258ce567 registry: session.searchRepositories: pass through context 83aaa3428f distribution: pusher.push(): don't use APIEndpoint.Mirror field 6439824449 distribution: pushDescriptor: remove unused endpoint field 09ee47de39 distribution: cleanup some tests and add missing error-checks adfed82ab8 Install and run firewalld for CI's firewalld tests 409707b633 bridge: factor out creation of network-level iptables rules ec7fe73690 distribution: pushDescriptor: rename repoInfo to repoName b1c526b4a9 daemon/containerd: remove registryResolver interface 0d95e1680a registry: ResolveAuthConfig: inline newIndexInfo code 6c643bc366 lookup auth-config without depending on RepositoryInfo a18dae049f daemon/containerd: registryResolver: remove IsInsecureRegistry abcc70b9ef distribution: GetRepositories skip using Service.ResolveRepository 071d8b21e9 distribution: Push: skip using Service.ResolveRepository 8b6a045aa4 distribution; newPusher: don't require RepositoryInfo 8653af5854 distribution: pullEndpoints: skip using Service.ResolveRepository 20a2807caa distribution: pullEndpoints: don't return RepositoryInfo f1ecce6877 distribution: pullEndpoints: don't require RepositoryInfo d6afe88b3c distribution: newPuller: don't require RepositoryInfo 03918c5b07 distribution: layerDescriptor: don't require RepositoryInfo c91318e6c0 distribution: newRepository: don't require RepositoryInfo 2e8bf8b0ab distribution: remove vars that shadowed imports or types d8fa2f8071 registry: deprecate APIEndpoint.Official field 0ab6f07c31 Fix TestPassthrough 2d643b6835 Firewalld: skip unit tests that run in their own netns 4fbfb618c3 Skip flaky part of TestAccessPublishedPortFromHost b8323abe0a TestIsolated for IPv6 is broken under firewalld 86eff82789 Firewalld: Skip tests that run dockerd in an L3Segment dc963a00c1 Firewalld should use its nftables backend b8cacdf324 Add test util "FirewalldRunning" 8f506a51e5 containerd: ensure overwritten images from load are left dangling 7b2e47846c Run systemd/rootless when systemd/rootless unit testing 8d9e3502ab hack: Fix TestOverlay* test failure in pkg/archive f5d84a45cc Start containers, even when connected to a disabled bridge port 072ea62fcc vendor: github.com/opencontainers/image-spec v1.1.1 a60603bfa3 hack/validate: Add gocompat 2be7f48561 implement module compatibility check cc90726fb8 Add missing go1.22 build constraints 19a0f886da testutil: Update to `any` from `interface{}` f14c23a90f libnetwork: Update to `any` from `interface{}` 82ec984d10 daemon: Update to `any` from `interface{}` 003bf197d7 container: Update to `any` from `interface{}` 444a1597ff c8d/builder: Fix missing `image tag` event with BuildKit 2fce935df2 vendor: github.com/moby/buildkit v0.20.2 7c09e4e607 TestBuildEmitsEvents: Skip Windows only for buildkit 99356b6e17 integration-cli/TestBuildEmitsEvents: Verify event count 3e957c6240 remove some redundant import-aliases 4db84b197d switch to github.com/opencontainers/cgroups 697956a8c7 vendor: github.com/opencontainers/selinux v1.12.0 34bc972519 vendor: github.com/golang-jwt/jwt/v5 v5.2.2 d01ee23c15 Dockerfile: update registry to v3.0.0-rc.4 081987b647 Dockerfile: disable saving Golang telemetry in dev-container af14f3e7d3 Dockerfile: upgrade Delve to v1.24.1 d0b4bdbd25 api/router: postContainersAttach, wsContainersAttach: minor cleanups 73aa7e933c daemon: daemon.containerAttach: use structured logs d494520aa0 daemon: daemon.ContainerAttach: use Println instead of Printf 183ca46099 daemon: daemon.ContainerLogs: move vars closer to where used c164eec7e9 daemon: daemon.ContainerAttach: move vars closer to where used f7853799fc daemon: daemon.containerAttach: remove redundant defers 80bf93c9d7 daemon: daemon.containerAttach: rename vars for clarity and prevent shadow daeb6fb0b7 vendor: github.com/cilium/ebpf v0.17.3 eeee17eaad Dockerfile: update runc binary to v1.2.6 c1c5f16b8b vendor: github.com/opencontainers/runc v1.2.6 be6e92a57b pkg/atomicwriter: use sequential file access on Windows 452ff75159 Dockerfile.simple: avoid `Could not find installer for "proxy"` fa21996da5 containerd: prioritize non-dangling images with image list 126d4cf672 client: remove version-gate for JSON response errors 230f178f8b api: return plain-text errors for deprecated API versions c7fbe1c2ba integration-cli: fix duplicate close of body 1c00755826 integration-cli: fix some unhandled errors 8be5696c37 daemon/logger/journald: rename func that shadowed builtin f2a183a991 daemon: return port-mappings from all endpoints 6b3b479192 daemon: getEndpointPortMapInfo: err is never used 35766af7d2 Dockerfile: update containerd binary to v1.7.27 c9a763ecc9 daemon: remove redundant call to getEndpointPortMapInfo fb3cce1988 vendor: github.com/containerd/containerd/v2 v2.0.4 4276f330fc cmd/docker-proxy: do not eagerly GC one-sided UDP conns 0356854327 cmd/docker-proxy: make the conntrack timeout a property of UDPProxy d70fd32a18 cmd/docker-proxy: UDP: thread-safe Write and Close 485cb90b77 Remove duplicate iptables-enabled checks fce915897c Combine firewalld reload callbacks for IPv4/IPv6 ac34bd9bda integration/container: Remove Parallel from TestWait* dd7f9f08d8 integration/container: Increase stop timeout for TestWaitRestartedContainer a8f14e06d6 Improve performance of daemon.Containers(). c0ca783edb Allow macvlan endpoint to start with parent down 26fea35942 daemon: Fix panic on Windows when restoring pre v28 container 90a83063ee runconfig/errors: split `ErrConflictHostNetwork` a3fef5debc Mask Linux thermal interrupt info in /proc and /sys. cf3e42abaf Add an opt-out for iptables 'raw' rules 0f11ee1ae2 registry: ReadCertsDirectory: don't process same file multiple times dd7ab0e82b registry: deprecate HostCertsDir 3cc9881ab7 registry: always set a non-empty CertDir b633c4cc33 registry: deprecate SetCertsDir d0dd035278 builder-next: fix min-free-space prune with graphdriver backend 1daeaec333 pkg/atomicwriter: validate destination path 4d8cff7bd4 Don't skip DNAT for a routed network without userland-proxy 084b7cec1a pkg/atomicwriter: add additional test-cases ff061e28c1 pkg/atomicwriter: don't overwrite destination on close without write 88a5bca43c pkg/atomicwriter: add separate tests for New() 09e804f570 pkg/atomicwriter: refactor tests 2124706447 integration: Increase timeouts in TestStopContainerWithTimeout 946bf70f89 integration: Deduplicate TestStopContainerWithTimeout fee063f01e daemon/c8d: Refactor singlePlatformSize into separate functions f7d7fd9c52 contrib/check-config: add IPv6 modules 2a109e6c32 contrib/check-config: add ip_nf_raw 0e54920e01 Dockerfile: update RootlessKit to v2.3.4 7ae9e41ff6 vendor: github.com/rootless-containers/rootlesskit/v2 v2.3.4 55ff0062ca vendor: github.com/containernetworking/plugins v1.6.2 125aa3a682 vendor: golang.org/x/sys v0.31.0 5d6b56699d client: add API-version dependent validation for mount options aa33bdaa71 registry: move emptyServiceConfig to test-file 0823d76ec5 client: keep image refs in canonical format where possible 907773160b registry: rewrite ParseSearchIndexInfo to not depend on IndexInfo b22431ee9c pkg/atomicwriter: New(): use absolute path for temp-file 58bd93a625 pkg/atomicwriter: New(): prevent creating temp-file on errors 49c89b0177 docs/api: improve doc for Secret and Config data fields (API v1.31-v1.48) df0cefcc95 api/swagger: improve doc for Secret and Config data fields f2d53142b0 api/types/swarm: document Secret and Config data fields c2c3d593cf registry: rewrite ParseRepositoryInfo to not depend on IndexInfo 42f1e38e20 integration/image: TestRemoveImageGarbageCollector: don't set zero-values 42ca9154e9 layer: remove StoreOptions.ExperimentalEnabled df519e9e1a daemon: Fix giving up too early while connecting to containerd socket ace8c9c94f vendor: golang.org/x/net v0.36.0 bc0ca67b1c vendor: golang.org/x/net v0.35.0 9278110260 Dockerfile: update containerd binary to v1.7.26 0a58c73e0d integration/net: Retry TestAccessPublishedPortFromAnotherNetwork d34e1ff826 layer: remove StoreOptions.MetadataStorePathTemplate 556633ca47 cmd/dockerd: daemonCLI.start: scope local errors 8b59e1a398 cmd/dockerd: daemonCLI.start: return error instead of log.Fatal 8a8cdaaa11 cmd/dockerd: daemonCLI.start: don't log warnings before failing 6e30a4cc0c cmd/dockerd: explicitly access Config fields dfecaaf908 cmd/dockerd: rewrite getContainerdDaemonOpts to a func b95fdcd084 cmd/dockerd: createAndStartCluster: change to accept Config 29aa7e15bd cmd/dockerd: rewrite getSwarmRunRoot to a regular func 29c296e1dd cmd/dockerd: rename vars that shadowed imports f87ae7c914 gha: test-prepare: update to Ubuntu 24.04 c41ed7c98c gha: build, cross: update to Ubuntu 24.04 d29038d1cb gha: integration-cli-prepare: update to Ubuntu 24.04 a23058e0d7 gha: integration-cli-report: update to Ubuntu 24.04 de69b552ff gha: integration-report: update to Ubuntu 24.04 b61f409972 gha: test: update Ubuntu 22.04 -> 24.04 60276fafca gha: integration-prepare: update to ubuntu 24.04 651fb91c4d gha: arm64: update Ubuntu 22.04 -> 24.04 f6a9ed5f0a gha: arm64: test-integration-report: update to Ubuntu 24.04 13e1ef6277 gha: arm64: test-unit-report: update to ubuntu 24.04 27404044a6 gha: validate, build-dev: update to Ubuntu 24.04 3571982458 gha: smoke: update to Ubuntu 24.04 ee73f2e5da gha: docker-py: update to ubuntu 24.04 b9ca3d198e gha: unit: update to ubuntu 24.04 1a0afb0f9e gha: bin-image: update to ubuntu 24.04 4919bf9f41 gha: buildkit: update to ubuntu 24.04 7b1fd61864 gha: validate-pr: update to ubuntu 24.04 eeffc099ef gha: dco: update to ubuntu 24.04 06b87d80ee gha: docker-py: set TEST_SKIP_INTEGRATION_CLI=1 c9f53d506a Merge ps_test.go into list_test.go. 95bf53fb6c container/stream: Don't log error when streams are properly closed 6e55f83747 Remove unused toml validation bf8a27a55a Remove inactive maintainers with no activity in last two years 9e814fc0d7 Remove inactive former curators b868fad5e3 Update governance to replace TSC and add maintainer roles 690f758505 vendor: golang.org/x/oauth2 v0.27.0 55599fd9b3 vendor: golang.org/x/oauth2 v0.26.0 a47d9c5f58 vendor: golang.org/x/crypto v0.35.0 3a28163007 vendor: golang.org/x/crypto v0.34.0 ffc91fd76a vendor: golang.org/x/crypto v0.33.0 7cba8aef1c vendor: golang.org/x/text v0.22.0 995d71a033 vendor: golang.org/x/sync v0.11.0 e325564f38 vendor: golang.org/x/sys v0.30.0 65b460b9ef vendor: update buildkit to v0.20.1 6e8eb8a90f vendor.mod: update minimum go version to go1.23 26edf2d0a7 Flush iptables chains DOCKER-CT, DOCKER-BRIDGE on startup 5f912e4cf5 update to go1.23.7 a8178613af golangci-lint: enable nakedret linter c359cc6829 api/types/registry: fix naked returns b1c008c007 api/server/router/build: fix naked returns 4aecdd5744 image/tarexport: fix naked returns and slight refactor 99b6012a02 daemon/logger/awslogs: remove unused named return 4fa9ec3192 daemon/logger: fix naked returns and slight refactor eeb5651de5 daemon/graohdriver/fuse-overlayfs/: fix naked returns and slight refactor 02b4610246 daemon/graohdriver: fix naked returns 964413c3a1 daemon/cluster: fix naked returns 387ec71630 daemon: fix naked returns 85c8fb7fda daemon: getSystemCPUUsage(): fix naked returns, output vars 5c85847a55 registry: fix naked returns, output vars 17448ef1c8 plugin: fix naked returns, output vars faa9cb125b pkg/tarsum: fix naked returns b5b514ab04 pkg/stdcopy: fix naked returns d3d84bde4b pkg/pools: fix naked returns 52b8298975 pkg/chrootarchive: remove unused named return b38f0dd804 pkg/archive: fix naked returns, output variables in tests d59a9d9b10 pkg/archive: fix naked returns, output variables c62f5aff42 libnetwork: fix naked returns 8978b30b1a libnetwork/types: fix naked returns 619e8f8148 libnetwork/osl: fix naked returns 02b4c7cc52 libnetwork/drivers/overlay: fix naked returns, output variables 94afddb18d libnetwork/cmd/networkdb-test: fix naked return 379b82862f layer: fix naked returns b1c617681f internal/unix_noeintr: fix naked returns 51f574ea0e internal/mod: fix naked returns e1538336c7 integration-cli: fix naked returns, output vars 220b3c591f container/stream/bytespipe: fix naked returns, output vars 0cd39d7b23 builder/remotecontext: fix naked returns 0c1b37c50a builder/dockerfile: fix minor linting issues 8302cd2d29 builder/dockerfile: downloadSource: fix naked returns, output vars 00bd916203 libnetwork/resolvconf: Build: re-implement using new implementation 2f19577877 libnetwork/resolvconf: Build: align order with new implementation 03aeedcca9 libnetwork/resolvconf: update tests to use more correct values c34f8bbba3 integration/volume: setupTestVolume: minor cleanups and fixes 28bf578a40 integration/volume: TestRunMountImage: use test-util for container cleanup e41eaf2c8d integration/volume: TestRunMountVolumeSubdir: remove some logs f1bec97dfe registry: use literal for empty slice 7b4e21e5d0 registry: fix typo in godoc be9c4dd3c5 registry: TestNewIndexInfo: add more test-cases 949afd933b registry: TestNewIndexInfo: assert all fields 310d6d2fa5 registry: TestNewIndexInfo: use sub-tests 50d17676e4 registry: TestParseRepositoryInfo: add test-cases for IPv6 refs 328b808765 registry: TestParseRepositoryInfo: assert all index-info fields d9634c3b28 registry: TestParseRepositoryInfo: use sub-tests e2a5220ec3 registry: remove makeServiceConfig test-utility 52419cf933 golangci-lint: enforce "is" alias for gotest.tools/v3/assert/cmp 1c63f3983b volume/service: adjust "gotest.tools/v3/assert/cmp" import alias 9766a446ae integration/network: adjust "gotest.tools/v3/assert/cmp" import alias c16fcdfc4b integration/image: adjust "gotest.tools/v3/assert/cmp" import alias 6abe6a910a integration/container: adjust "gotest.tools/v3/assert/cmp" import alias 22069f2431 integration-cli: adjust "gotest.tools/v3/assert/cmp" import alias 605f02a59b distribution: adjust "gotest.tools/v3/assert/cmp" import alias 75b86c47d9 daemon/logger/loggerutils: adjust "gotest.tools/v3/assert/cmp" import alias 59e6d1d214 registry: TestLoadInsecureRegistries: don't mutate emptyServiceConfig 849f344ecc registry: split normalizing index name from validating fee40a9333 registry: create emptyServiceConfig without parsing a3583b4b58 registry: newRepositoryInfo only check for official images for Docker Hub 08654b0b30 registry: deprecate RepositoryInfo.Official field dbc9d56820 vendor: github.com/containerd/containerd v2.0.3 15895d8ead daemon/graphdriver: rename vars that shadowed aa9817b0c5 testutil: remove isErrNotFoundSwarmClassic 0ab7d41f9e testutil/environment: Execution.Clean: remove redundant condition b301c34b92 libcontainerd/local: remove arg-names for stubs 12f89cc19b libcontainerd/local: NewClient: remove unused cli, stateDir, ns args 620f26e1e3 libcontainerd/local: client.createWindows: remove unused runtimeOptions 9c4e10126e libcontainerd/local: client.NewContainer: use early return 7c1a2301f0 libcontainerd/local: client.extractResourcesFromSpec: use early return fc462d699a Dockerfile: update compose to v2.33.1 855563fc43 Dockerfile: update docker CLI to v28.0.1 ab7305c85a Check swarm's jump to DOCKER-INGRESS be14d9148c Make integration/service/network_test.go Linux-only cfc562c358 daemon/cluster: create "state" and "runtime-dir" closer to where used ef4f4d845d daemon/cluster: rename Cluster.root to Cluster.stateDir 4d3d4bbeeb daemon/cluster: remove Config.WatchStream and move to constructor cdbb62394c builder/dockerfile: remove intermediate var that shadowed 558da63444 Jump to DOCKER-INGRESS from DOCKER-FORWARD fdd534d2ca libcontainerd: windows: return errdefs type for pausing 60782e6d39 container: fix some errors on Windows c37690b98e libnet/portallocator: un-export errors that were not used as sentinel errors cfc049c938 Use iptables-nft in the dev container / CI 47ca352b0d vendor: github.com/opencontainers/runc v1.2.5, cyphar/filepath-securejoin v0.4.1 Signed-off-by: Bruce Ashfield

containers: adapt to UNPACKDIR changes

2025-06-26T02:40:08+00:00

This commit updates the container recipes to the OE core UNPACKDIR changes. - We drop references to WORKDIR - We adjust destsuffix fetches to use BB_GIT_DEFAULT_DESTSUFFIX instead of 'git' - Update our GOPATH references to use UNPACKDIR - Drop S = assignemnts where possible Signed-off-by: Bruce Ashfield