moby: update to v29.5.2-tip

Bumping moby to version docker-v29.5.2-37-g19592a8ad2, which comprises the following commits:

    96597f3098 daemon/libnetwork: Network.ResolveService: slight optimization
    1574d48db0 daemon/libnetwork: inline some variables
    059d3f36ee Update RootlessKit (3.0.1)
    4c670ed4da github: Improve Pull Request template
    88ff811d71 Minimal AGENTS instruction
    f82846d702 renovate: Add release-age cooldown
    db84483b7e chore(deps): update github/codeql-action action to v4.36.0
    c208231f46 vendor: golang.org/x/net v0.55.0
    ce6db0fd2c vendor: golang.org/x/crypto v0.52.0
    76adc5038e vendor: golang.org/x/sys v0.45.0
    09b0b8c3a0 c8d: tolerate NotFound when walking children for disk usage
    caba5b0e6a Dockerfile: update containerd binary to v2.2.4
    2e61f4b067 fix(deps): update module github.com/opencontainers/selinux to v1.15.0
    ec2abbc300 fix(deps): update module github.com/containerd/containerd/v2 to v2.2.4 [security]
    b7f738a9cb project: add issue types for bugs and features, remove status-triage auto-label
    8c0420eac0 chore(deps): update docker/bake-action action to v7.2.0
    3be04ad413 releases: Clarify last released Docker version
    fd39b7c206 chore(deps): update docker/github-builder action to v1.9.0
    1b9dbf6d02 chore(deps): update docker/compose-bin docker tag to v5.1.4
    79d50b27ee releases: Bump Docker version
    af35f3716e chore(deps): update docker/buildx-bin docker tag to v0.34.1
    fb3702d033 daemon: resolve in-container symlinks before os.Root mount ops
    8e35bde599 chore(deps): update codecov/codecov-action action to v6.0.1
    dd24a3adc1 releases: Bump patch
    2022313ffe daemon: Decompress archives before entering container filesystem
    ea952feee6 fix(deps): update module github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.74.0
    43fa458a9c Fix bind mount target redirection via symlink swap during docker cp
    64a22d80b9 daemon/copy: Fix symlink escape in mount destination creation
    df58acf56e libnet/iptables: don't filter on unspecified IP to delete conntrack
    79e9b906b3 chore(deps): update github/codeql-action action to v4.35.5
    1cd87fbcb2 gha/validate-check: Target the branch, not ref
    e922f63b0c gha/workflows: Validate milestone debug
    ee4b4f46e8 releases: Bump version
    854307e013 dockerversion: touch-up escapeStr to mention RFC and add TODO
    91ae7ea8c8 dockerversion: un-export UAStringKey, add WithUpstreamUserAgent
    1dcbfd6181 dockerversion: DockerUserAgent: touch-up GoDoc
    bb71630486 chore(deps): update docker/buildx-bin docker tag to v0.34.0
    b384e7b123 daemon: fix AppArmor support check for detached-netns
    160a0112e1 integration-cli: Deflake TestBuildEmitsEvents
    54af635140 daemon: isPermissibleC8dRuntimeName: fx link to c8d runtime conventions
    db8aba0b93 daemon: TestContainerWarningHostAndPublishPorts: use sub-tests
    9418053039 The 28.x is unmaintained
    71f6a9695b integration: Make some tests Parallel
    60a04c7e9b vendor: update buildkit to v0.30.0
    08eec0204c hack: authenticate BuildKit ref resolution
    316c72d72b daemon/logger/jsonfilelog: cleanup tests
    6d39b4ebed daemon/config: set userland-proxy default value in config.New
    c4122f3bc2 daemon/config: set default log-driver in config.New
    1143f413f6 libnetwork: ref-count service aliases for VIP DNS records
    a222ebcfdb dockerversion: improve user-agent handling
    323293bf44 dockerversion: rewrite TestDockerUserAgent as table-test
    7f3b187795 fix(deps): update module github.com/opencontainers/selinux to v1.14.1
    a97c3eb91d daemon: init container rootfs at end of create
    d1da585846 daemon: make getInspectData() reusable
    5420d83a53 vendor: update buildkit to v0.30.0-rc2
    2d9e93a38e Revert "builder-next: Stop using libnetwork-setkey reexec for BuildKit networking"
    c2075797fa c8d/resolver: Use per-host HTTP client for auth requests
    00eb59541c vendor: update buildkit to 1da7e716224c
    9160ad1dd7 integration/build: Add userns-remap test
    b9fe5eb4ab integration/build: Add error assertion in GetImageIDFromBody
    ee281d16a1 integration/internal/build: let Do accept ImageBuildOptions
    d3adafd853 volume: Fix file subpath mount over existing image file
    57db5dedd0 hack: Fix test-integration-flaky
    64872ca6e2 gha: Fix test-integration-flaky
    40e9500da9 vendor: golang.org/x/tools v0.45.0
    81bde7da97 vendor: golang.org/x/net v0.54.0
    530b434cb7 vendor: golang.org/x/crypto v0.51.0
    b1613d564e vendor: golang.org/x/text v0.37.0
    87fc1c0454 vendor: golang.org/x/tools v0.44.0, golang.org/x/mod v0.36.0
    62e124ee1e vendor: golang.org/x/term v0.43.0
    41d5112707 vendor: golang.org/x/sys v0.44.0
    982e463743 vendor: go.yaml.in/yaml/v2 v2.4.4
    8bc239f340 hack: preserve pseudo-version hashes in buildkit-ref
    f186f6154e Update crazy-max/.github action to v1.8.0
    cfb2ed2acd integration/d/nri: block until plugin is registered
    9bf222b218 daemon: log event after reload is committed
    704210f9e6 daemon: preserve CDI additional GIDs
    14efa29c44 daemon: fix healthcheck empty-cmd panic
    730c96a59d Minor cleanup
    24872eb985 daemon: add "time-namespaces" feature-flag to disable time-namespaces
    daf25751d5 image list: match reference filter against canonical names
    4d5cba3544 daemon: remove uses of deprecated selinux.ReserveLabel
    05c1fd6373 Update module github.com/opencontainers/selinux to v1.14.0
    09a42a319b Update module cloud.google.com/go/logging to v1.18.0
    d92a8c97de container/logs: add support for JSON streams (experimental)
    0cf2b69edc daemon/logger/local: optimize extraAttributes
    dbe72c6f8f add support for custom attributes with the "local" logger
    0fdc152a31 update to go1.26.3
    4cf35bf09d Update github/codeql-action action to v4.35.4
    17a4b09bb9 Update github.com/moby/policy-helpers digest to a39d601
    c2d6c1e4a7 libnet/iptables: DeleteConntrack: use structured logs
    2ed9c69d99 libnet/drivers/bridge: clearConntrackEntries: move vars where used
    f26de9b9c4 libnet/iptables: DeleteConntrack: add early returns
    79f5ddc271 gha/ci: Store slim test-results-* artifacts
    aea02086d9 gha/copilot: Add dependency bump review instructions
    6ca030ca39 daemon: separate reserving SELinux label from loading
    f6319f0cc2 vendor: update buildkit to v0.30.0-rc1
    c082826b4d Update module github.com/in-toto/in-toto-golang to v0.11.0
    326dc53861 Update docker/github-builder action to v1.8.0
    70ac493e97 server/router/build: replace output buffering workaround with EnableFullDuplex
    c40d3572c9 gha: set timeouts for buildkit tests
    e1ad921905 Update actions/labeler action to v6.1.0
    3ffdbf6bce Update aws-sdk-go-v2 monorepo
    4ee90199a4 Update github/codeql-action action to v4.35.3
    35797366d7 vendor: github.com/moby/profiles/seccomp v0.2.3 (Drop socketcall block)
    34e3b001b7 integration/container: Handle socketcall return EPERM
    e66731a919 vendor: github.com/moby/profiles/apparmor v0.2.1 (deny network alg)
    d4fc496755 integration/container: skip socketcall test without AppArmor or SELinux
    9e6a3c6ea2 contrib/selinux: Add CIL policy to deny AF_ALG sockets in containers
    b9e11cf1a6 integration/container: Verify AF_INET socketcall still works
    dc163512bd daemon/containerd: ignore missing snapshots in shared size calculation
    9f19521146 daemon/containerd: include shared content blobs in image SharedSize
    b9f5899fc1 Update module github.com/pelletier/go-toml/v2 to v2.3.1
    c4df56a7aa daemon/libnetwork: waitForLocalDNSServer: rm error-type assert
    528a806141 daemon: Always reload AppArmor profile at daemon startup
    175eefc064 integration/container: Drop i386 cross-compile socketcall test
    125decc558 gha/buildkit/windows: Fix flaky Docker info
    d5951a317d Dockerfile: update registry to v3.1.1
    943f46c425 cmd/docker-proxy: remove redundant error-type asserts
    f52bb0e33c vendor: github.com/moby/profiles/seccomp v0.2.2
    5a345809bc integration/container: Add socketcall AF_ALG denial tests
    1cc7757e7e fix(deps): update module cloud.google.com/go/logging to v1.17.0
    d8b0c6a0c0 vendor: github.com/moby/profiles/seccomp v0.2.1
    ccabd78d73 integration/container: Add test for denied socket address families
    4482047ac3 daemon/logger: refine the Logger contract
    bf486b74f6 gha/windows: Retry busybox image build on transient registry failures
    d9690cb8e2 fix(deps): update module pgregory.net/rapid to v1.3.0
    744014b622 fix(deps): update module github.com/containerd/nri to v0.12.0
    70050681f7 builder-next: Stop using libnetwork-setkey reexec for BuildKit networking
    16c0107b42 gha/windows: Fix flaky Docker info
    28810d88d1 docker-proxy: Retry UDP write on ECONNREFUSED from stale ICMP errors
    69b8515bb5 daemon/cluster: Fix race in Stop() accessing fields after unlock
    3b5ce461a7 daemon/cluster: Move context creation outside of critical section
    748c5200cf daemon/cluster: Rename nodeRunner.stopping to stopped
    0acd23fce0 daemon/cluster: Alway set stopping flag on Stop
    93dce63433 layer: Close archive reader to prevent deadlock in ChecksumForGraphID
    3da0279804 fix(deps): update module github.com/containerd/continuity to v0.5.0
    92bb8ad731 layer: Migrate off deprecated NewInputTarStream
    9fc0179fa5 vendor: github.com/vbatts/tar-split v0.12.3
    217c9de0a0 integration: Try to fix flaky TestNslookupWindows
    25e44d9eb0 fix(deps): update module github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.71.0
    d5370d34d3 use private time-namespace for containers on supported kernels
    c735877246 pkg/sysinfo: add detection for time-namespaces support
    25985f61ac fix(deps): update module github.com/aws/smithy-go to v1.25.1
    368ab244b6 integration: reduce `skip.If(t, testEnv.IsRootless)`
    eeec56601b hack/dockerfile/install: fix RootlessKit version
    038086f408 ci: validate: remove old "default-seccomp" validation
    e6b36ed6da ci: validate module-replace: ignore _test.go files
    3feaea7d8b fix(deps): update module github.com/moby/profiles/apparmor to v0.2.0
    4444bc40db fix(deps): update aws-sdk-go-v2 monorepo
    5249b1d165 Update RootlessKit (3.0.0)
    3bfa6901be go.mod: github.com/rootless-containers/rootlesskit/v3 v3.0.0
    f2607daded fix(deps): update module github.com/moby/profiles/seccomp to v0.2.0
    f3e4b626be libnetwork: expose proxy information in FirewallInfo
    21eabccd8c fix(deps): update module github.com/moby/swarmkit/v2 to v2.1.2
    08e7501fb4 gha/validate-milestone: Handle PR updating versions.yaml
    a818993815 releases/docker: Bump minor
    dbaa2f6f79 libnetwork/drivers/overlay: minor cleanups in peerdb
    a836506d19 Change Conntrack to delete by Both Port And IP
    1ccbff10a5 integration/container: Fix flaky TestContainerRestartWithCancelledRequest on Windows
    5d143db66b fix formatting strings for go1.26
    785732e10e gha/validate-milestone: Read versions.yaml from base branch
    ed4700b1c6 daemon: explicitly mark some arguments as unused
    f3b931bfb2 pkg/sysinfo: TestNew: fix copy/paste mistake
    2200a66cee chore(deps): update crazy-max/.github action to v1.7.1
    a65bd0440b releases: Bump patch
    34bd1ebdf4 vendor: github.com/moby/moby/client v0.4.1
    b63208b64b vendor: github.com/moby/moby/api v1.54.2
    5be108f817 vendor: github.com/sigstore/timestamp-authority/v2 v2.0.6
    727b81991c vendor: github.com/sigstore/sigstore v1.10.5
    bad8e1b799 vendor: github.com/go-openapi/* deps
    f3cadf69dc vendor: github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0
    5c6a343842 vendor: google.golang.org/api v0.272.0
    463f4c0943 No longer a reviewer; update email address
    98c7106fbe vendor: github.com/hashicorp/memberlist v0.5.4, hashicorp/serf v0.10.2
    f69fed1350 fix(deps): update module github.com/aws/smithy-go to v1.25.0
    eb2672a3b9 chore(deps): update actions/github-script action to v9
    75c2f4fb37 fix(deps): update module go.opentelemetry.io/contrib/processors/baggagecopy to v0.16.0
    6fa46cf8c7 fix(deps): update golang.org/x packages
    0aaa2d3e3a README: Add Go modules section documenting the v29 module split
    68d1d1a947 vendor: go.opentelemetry.io/contrib v0.68.0
    8384598603 vendor: go.opentelemetry.io/otel v1.43.0
    836b06d8da vendor: google.golang.org/genproto 9d38bb4040a9
    0aa66fca01 fix(deps): update module google.golang.org/grpc to v1.80.0
    7ab051cf89 daemon/logger/local: marshal: remove redundant resetProto
    23020513e6 chore(deps): update docker/github-builder action to v1.6.0
    6e22bc8095 chore(deps): update docker/bake-action action to v7.1.0
    b1637ed54b vendor: github.com/hashicorp/golang-lru v1.0.2
    d994daf576 daemon/containerd: fix label!= filter ignoring images without label
    c255b67c0f Update github/codeql-action action to v4.35.2
    9136afe4fe Update actions/upload-artifact action to v7.0.1
    dc48cea266 api/docs: cleanup changelog
    9c084cad3e ci: skip using xargs
    c621624e2f libnetwork: Always clean up endpoint driver info in sbLeave
    6e9f9bc0a5 ci: fix workflow permission errors
    10b0401423 Update actions/cache action to v5.0.5
    b7e7d3f065 libnetwork: Remove montanaflynn/stats dependency
    70907e2988 libnetwork: Drop golang-set dependency
    2437d5d646 ci: use bake matrix subaction
    1743957d3f fix zizmor findings
    c8513239bf daemon/listeners: Support Unix socket on Windows
    7136f5e946 Dockerfile: update delve to v1.26.1
    0f5a7ae948 Dockerfile: update Docker CLI to v29.4.0
    270b511972 Dockerfile: update docker compose to v5.1.3
    cdb3fc279d Dockerfile: update buildx to v0.33.0
    c6d4830c14 vendor: github.com/docker/go-connections v0.7.0
    5c80a6e826 api: align Topology in versioned OpenAPI specs with Segments JSON shape
    0c878186d3 ci: zizmor workflow
    97cb71d7ed pkg/registry: use stdlib's x509.SystemCertPool on Windows
    ba1f3e8aa8 Dockerfile: update containerd binary to v2.2.3, runhcs v0.14.1
    a2cdd57812 vendor: github.com/containerd/containerd/v2 v2.2.3
    c4f4eb3f5f api: align Topology swagger with Segments JSON shape
    f8873b7796 daemon/logger: use consts for common log-options
    30b7b3f919 daemon/logger: define consts for common log-options
    9008249e8a daemon/logger/local: add a constructor for config
    33261e9a45 daemon/logger/local: unify constructors
    5d5797002d daemon/logger/local: test cleanups
    69caf3d4c7 daemon/logger/local: improve TestDecode, rename to TestDecodeIncompleteRecord
    f3f3040713 daemon/logger/local: use struct-literal for pmetadata
    a331d4d7a3 gha: Add milestone validation workflow
    10eb86543f Cleanup releases dir
    3b22c500d5 daemon: retry secrets dir remount on transient EBUSY
    0ea9255e50 daemon/logger/splunk: tryPostMessages use http.NewRequestWithContext
    0677030570 daemon/logger: use uniform location for registering drivers
    8e79aacee6 daemon/logger/journald: remove outdated comment
    e0b5ab2f98 daemon/logger/loggerutils: ParseLogTag: add fast path
    3ba0b72b78 daemon/logger/loggerutils: ParseLogTag: fix panic and image ID
    4f2553e81a daemon/logger/loggerutils: ParseLogTag: improve test-coverage
    7bfa790f2b daemon/logger/jsonfilelog: be more explicit on handling optional "tag"
    ec909a2239 daemon/logger/jsonfilelog: JSONFileLogger: remove unused "tag" field
    6a5e00fe5f daemon/logger: Info: touch-up godoc
    1a45789c04 client: imageDiskUsageFromLegacyAPI: explicitly exclude "-1" for containers
    25ffdb23d9 daemon: Daemon.imageDiskUsage: explicitly exclude "-1" for containers
    e0fc07b8cf gha/labeler: Only assign Windows to Windows-only changes
    b3bd13ad10 daemon/pkg/registry: minor cleanups
    84aedb8055 rootless: support detach-netns mode
    377e85700f vendor: github.com/Microsoft/hcsshim v0.14.1
    e30a6fa93b libnetwork: respect gw priority per address family
    3541b0d0fd update to Go 1.26.2
    2601915b10 client/internal: touch-up godoc
    689accfe29 client/internal: fix RSFilterReader returning (0, nil) after filtering
    159b3317f0 client/internal: RSFilterReader: un-export, and remove unused buffer
    ba66582228 client/internal: Stream.JSONMessages: improve error handling
    5f08008342 client/internal: Stream.JSONMessages: move reader inside the func
    d5d18015e1 client/internal: Stream.Wait: return errdefs errors
    82ff7e9f76 client/internal: Stream.Wait: fix missing error-handling
    4d1d9ee358 go.mod: add back replace rules
    00840cd39c ci: buildkit: pin registry to v3.0.0
    a2eaebb011 api/docs: lower deprecation heading to a h4
    f44956451a CI: add back ubuntu-24.04 + rootless
    ca69153e28 api/docs: restore changelog for API v1.0 - v1.13
    1055b7a1a6 api/docs: restore API versions v1.0 - v1.13
    0d2d3f348d api/docs: restore API versions v1.14 - v1.17
    dc824e3d8d api/docs: restore API versions v1.18 - v1.23
    70043cd439 ci: fix bin-image workflow
    f42ff6a603 internal/testutil/daemon.New: cleanup test paths
    7094e8c3ef integration/daemon: TestLiveRestore remove quote from test-name
    3a7e8e285e vendor: github.com/moby/moby/client v0.4.0
    f8946fc137 vendor: github.com/moby/moby/api v1.54.1
    f1b420bf02 Drop replace rules
    c286d4ce13 Dockerfile: go install: use Git SourceOp
    d3a677d730 Dockerfile: use Git SourceOp
    07a5e924ce Fix typos and misspellings in comments, tests, and docs
    6604bd0ddc update AUTHORS and .mailmap
    84743bdda3 client/internal/mod: swap order of "ok" bool
    9dec3bf78f daemon: include moby module version in version response
    de68dce70d daemon/internal/mod: also check main module
    1bed74db50 daemon/internal/mod: reimplement without golang.org/x/mod dependency
    74e74ed5ee builder-next/worker: move mod package to daemon/internal
    80c22f0982 daemon: respect explicit AppArmor profile on privileged containers
    b8057a3a58 api/types/network: fix handling of unmapped ports (ephemeral ports)
    2d35a29f63 vendor: github.com/microsoft/hcsshim v0.14.0
    4975231ecc daemon/volume/local: New: ignore non-volume directories
    538f407103 daemon/volume/local: store path to opts.json
    5eeb08ae1c fix: use t.Cleanup to prevent goroutine leak in TestCancelledUpload
    735d17e1a5 fix: return 400 instead of 500 for invalid request parameters
    9aa5ac3034 client/pkg/jsonmessage: use functional options for display funcs
    06b31dcd12 daemon/pkg/opts: fix ValidateIPAddress docstring
    ad67096edf gha: validate-api-swagger: remove redundant 'make image'
    8769bda667 gha: buildkit: fix go version
    e0999bd5ec update to go1.26.1
    6ddd4ff73d integration/plugin: remove redundant assert
    9295e2cd84 client: fix race in cancelReadCloser
    6bfde409bd client: fix typo: TestWithHTTTPHeaders -> TestWithHTTPHeaders
    72142ab278 daemon: buildSandboxOptions: warn, not panic on invalid extra host
    98840db4d3 daemon: Daemon.restore: trim whitespace in extra-hosts
    dd11127524 daemon/pkg/opts: ValidateIPAddress: use netip.Parse
    333f39ce02 remove uses of jsonmessage.DisplayJSONMessagesStream in tests
    6aedc6ba32 client/pkg/jsonmessage: add DisplayStream and DisplayMessages utils
    5672c51b00 vendor: update buildkit to v0.29.0
    abb2a31c8a daemon: Daemon.SystemVersion: align fields with api type
    65ce470c2a fix(deps): update module github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.66.0
    281f4b6767 chore(deps): update actions/setup-go action to v6.4.0
    38c77a9189 daemon/libnetwork/ns: make NetlinkSocketsTimeout a const
    5378f5427f daemon/libnetwork/ns: remove ParseHandlerInt, add NsHandle
    af73684bc3 daemon/libnetwork/ns: use sync.OnceValues
    635f4c3dc4 daemon/libnetwork/ns: remove windows stub
    579280d444 daemon/libnetwork/ns: suppress some unhandled errors
    dee7411f05 fix(libnetwork): nil pointer will cause panic
    434ec1655c daemon/volume/service: deprecate OpErr.Cause (Causer interface)
    57d0f88684 golangci-lint: enable godoclint linter
    dee3c452d7 daemon/volume/local: remove duplicate package doc
    28aeae20dc client: WithHTTPHeaders: produce error if duplicate headers are detected
    1ec892c555 client: WithHTTPHeaders: improve doc and add test coverage
    d7d856927b daemon: fix typo in filedescriptors filenames
    d71f3ea5da ci: fix upload sarif action
    1769b3eb5d chore(deps): update github/codeql-action action to v4.35.1
    beba95c819 vendor: update buildkit to v0.29.0-rc1
    5da773a71d chore(deps): update codecov/codecov-action action to v6
    1293d50b38 fix(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0
    12ae6dd67e fix(deps): update module github.com/montanaflynn/stats to v0.9.0
    3fa5ec578b chore(deps): update github/codeql-action action to v4.34.1
    0c7f2b3d38 chore(deps): update codecov/codecov-action action to v5.5.4
    c66815426c chore(deps): update docker/github-builder action to v1.4.0
    615cf6345f chore(deps): update actions/setup-go action to v6.3.0
    fb146a3806 fix(deps): update aws-sdk-go-v2 monorepo
    c36e70524b chore(deps): update actions/labeler action to v6.0.1
    0d0751397d Dockerfile: update runc binary to v1.3.5
    96343dd0b5 chore(deps): update actions/download-artifact action to v8.0.1
    49a4a47df5 chore(deps): update actions/checkout action to v6.0.2
    45ec277dd5 vendor: go.opentelemetry.io/otel/exporters v1.42.0
    bb79587d84 fix(deps): update opentelemetry-go-contrib monorepo
    ce7b3aaa0e chore(deps): update actions/cache action to v5.0.4
    f7e4fff10b docs: fix remaining broken links in contributing docs
    9e26694618 vendor: github.com/moby/policy-helpers b7c0b994300b
    044d59bbd1 Dockerfile: use set -x in here-docs for visibility in build-logs
    695e8b3074 vendor: golang.org/x/tools v0.43.0
    e18b58d6a4 vendor: golang.org/x/oauth2 v0.36.0
    cb3065011c vendor: golang.org/x/mod v0.34.0
    c02c294e81 vendor: golang.org/x/net v0.52.0
    7b9fe27a4d vendor: golang.org/x/time v0.15.0
    07304a4ffc vendor: golang.org/x/text v0.35.0
    37ece0f46e vendor: golang.org/x/sync v0.20.0
    c0e612d623 vendor: golang.org/x/sys v0.42.0
    21d4e2525a fix(deps): update opentelemetry-go monorepo to v1.42.0
    dcbc18d954 fix(deps): update module github.com/aws/smithy-go to v1.24.2
    b24c8272e5 go fix "omitempty"
    f7aea04bb3 go fix (GOOS=linux and windows)
    5cf47c0d15 pkg/plugins/pluginrpc-gen: go fix, and tidy up
    91cd097119 docs: fix broken docker docs links in CONTRIBUTING.md
    830ddb26a2 vendor: update buildkit to v0.28.1
    b588d1a594 ci: pin all actions
    99a095ecf0 plugin: Fix off-by-one in privilege validation
    6f80a57b4f chore(deps): update docker/setup-qemu-action action to v4
    849efd0d3e chore(deps): update docker/setup-buildx-action action to v4
    ec76e94183 pkg/authz: Increase body limit to 4 MiB
    7a767b27fd pkg/authz: Reject requests exceeding body size limit
    b66b2f77e0 ci: renovate: pin actions to digests
    968fb5787c daemon: restore: register containers without rwlayer
    1bd71d5d87 vendor: github.com/moby/patternmatcher v0.6.1
    391789a6e1 vendor: github.com/klauspost/compress v1.18.5
    435fd64319 client: fix TestNewClientWithOpsFromEnv
    673e2e2467 client: WithTraceProvider don't wrap WithTraceOptions
    760f375400 client: WithTLSClientConfig, WithTLSClientConfigFromEnv: touch-up docs
    d85e410aa6 daemon/containerd: register Sigstore media type prefixes to suppress unknown-type warnings
    619ecc9b53 transport: enable HTTP keep-alive for registry connections
    26d0774539 integration: ignore container Status field in DiskUsage test comparisons
    d74953b829 fix(deps): update module cloud.google.com/go/logging to v1.13.2
    5220d603f9 chore(deps): update docker/compose-bin docker tag to v5.1.1
    04c1d25809 daemon/internal/containerfs: Retry on ENOTEMPTY error during directory deletion
    46dba49ec8 Fix reclaimable image disk usage calculation for in-use images
    a17a5647f8 fix(deps): update module google.golang.org/grpc to v1.79.3 [security]
    3cb98cb1b3 ci: update docker/bake-action v7
    7d06c6c502 add example for go fix
    20f84d21ee client: add //go:fix inline directives to deprecated functions
    d0a29867e7 api/types/strslice: add //go:fix inline directives for deprecated type
    8582136c90 golanci-lint: gocheckcompilerdirectives: ignore "//go:fix"
    28b29bd8b0 builder-next: replace duplicated oneOffProgress with progress.OneOff
    da4a6385e6 client: New: ignore nil-Opt instead of panicking
    b5bc84bec3 Fix issue moby#48093: set SystemTemp environment variable On Windows also set the SystemTemp environment variable, because for system processes GetTempPath2() uses it rather than TEMP/TMP: https://learn.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-gettemppath2w
    f04f350568 dockerd-rootless.sh: check containerd-rootless.sh conflict
    405a787917 daemon/server: don't log context cancelation as error
    f401a9678b daemon/server/backend: ContainerLogsOptions: use time.Time for since, until
    210cdcbd46 daemon/server/router: fix "no stream selected" error and status
    568312cb85 daemon/internal/timestamp: replace ParseTimestamps with ParseUnixTimestamp
    cfeceed9c0 daemon/internal/timestamp: improve unix timestamp parsing
    553420b8f3 daemon/internal/timestamp: replace GetTimestamp for Parse
    fc3cb00398 daemon/internal/timestamp: don't return value on err
    f37fc9fb63 daemon/internal/timestamp: use table-tests
    282297aa0c daemon/internal: GetTimestamp: don't discard nanosecs, and trim zero
    8f8b23c729 daemon: fix some untyped "invalid parameter" errors
    2d0676b8bb daemon: prevent invalid swarm events from unknown action kinds
    3debf539c0 fix: typos in comments

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

docker-moby/cli: update to v29.5.2-tip

Bumping docker-cli to version v29.5.2-13-gd476e1d9bf, which comprises the following commits:

    07bb5e458c build(deps): bump docker/bake-action from 7.1.0 to 7.2.0
    45fc3b034a scripts/build: set grpcnotrace build-tag to reduce binary size
    20f5e7c08c vendor: golang.org/x/net v0.55.0
    20debc9c01 vendor: golang.org/x/sys v0.45.0
    cf5f060b4d build(deps): bump github/codeql-action from 4.35.4 to 4.35.5
    d6eded1632 bump VERSION to v29.5.3-dev
    9177c7fc6b gha: Port validate milestones from Moby
    382a92daa8 Dockerfile: update buildx to v0.34.1
    a68dd7a4fb bump VERSION to v29.5.2-dev
    066d508bd3 docs: further clarify authz plugins
    9f18a0a70c docs: clarify authz content type
    ae9f429677 Update dockerd.md
    c41489ac39 bump VERSION to v29.5.1-dev
    50712c9326 README: simplify instructions for using dev container
    f99747b9e0 docs: fix stale links in CONTRIBUTING.md
    ddac061db7 PR template: remove outdated contributing guide link
    10b1e87d09 docs: remove outdated README
    e3802b8a0e experimental: sync with actual features gated by experimental
    18bd1e7ce0 metrics-addr is not experimental since 20.10
    8aa8342502 docs: remove stub for builder
    a6dc278db3 build(deps): bump github/codeql-action from 4.35.3 to 4.35.4
    cc962d598a docs: Fix template error in cli example
    e4d651d792 docs: fix config, secret examples
    fb09d828e3 document `--rm` also removing anonymous volumes
    88e93954a6 docs, completion: use symlinks instead of symbol(ic) links
    f550901e65 docs: minor grammar fixes
    a6d65ea31d Fix nits
    80ad53b064 add commands of how to run the test
    fe78dc0be6 Reflect the new github URL for completion/zsh/_docker
    f12fc152a7 cli/config/configfile: use more idiomatic receiver name
    8d8d405dc7 container/ps: add HealthStatus formatter field
    517ca50506 docs: add more space in ps format table
    7cbcd2f720 cli/command/image: rm redundant TestPrintImageTreeNoWarningWhenRedirected
    970afd5cc4 vendor: golang.org/x/net v0.54.0
    7e07bf127c vendor: golang.org/x/mod v0.36.0
    5aeb52681b vendor: golang.org/x/text v0.37.0
    644d046721 vendor: golang.org/x/term v0.43.0
    a853f40a30 vendor: golang.org/x/sys v0.44.0
    87f06ec70a refactor parsing restart-policies
    033f8a1fd2 cli/compose/convert: use test-table for restart-policy tests
    27bee792a0 decorate --env-file, --label-file errors
    6d38b7a71a docs: clarify 64 KiB response-body buffer in authz plugin docs
    1e1384fae2 vendor: github.com/docker/docker-credential-helpers v0.9.7
    976d97dd23 build(deps): bump github/codeql-action from 4.35.2 to 4.35.3
    77435c59ec update to go1.26.3
    e93fe9083b cli/config/credentials: DetectDefaultStore: update GoDoc
    b7ab63387a cli-plugins/hooks: limit maximum number of lines / messages
    e03b8373c7 docs: clarify docker context use is sticky
    6f144c6d70 cli/command/image/build: remove deprecated ResolveAndValidateContextPath util
    b124c707f0 cli/command/image/build: remove deprecated WriteTempDockerfile util
    3dd0c846cd cli/command/image/build: remove deprecated DetectArchiveReader util
    403bebeea2 cli/command/image/build: remove deprecated DefaultDockerfileName const
    8e7ec44f9f cli/command/image/build: remove deprecated IsArchive utility
    55fcffe743 cli/config/configfile: normalize hostname when resolving auth
    e8a0beb909 cli/compose/schema: TestValidatePorts: use subtests
    9013c33372 bump VERSION to v29.5.0
    7059ef4c9c formatter: Sort labels for stable output
    9bbe02848d vendor: github.com/moby/swarmkit/v2 v2.1.2
    b03176ddff build(deps): bump github/codeql-action from 4.35.1 to 4.35.2
    9d8c1e4b70 bump VERSION to v29.4.2
    d0f5b279e9 cmd/docker-trust: bump moby/client v0.4.1, moby/api v1.54.2
    b7f37e86da vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2
    266f039bb5 Dockerfile: update compose to v5.1.3
    d74d3c3b16 Dockerfile: update buildx to v0.33.0
    58a7c3155b golangci-lint: fix lint failures from v2.10.1 upgrade
    f37a9e663f Dockerfile: update golangci-lint to v2.10.1
    ee56098b07 cmd/docker-trust: bump dependencies
    efbbc0c68c gha: Add milestone validation workflow
    beac1144a6 vendor: github.com/containerd/platforms v1.0.0-rc.4
    a75ab98e43 vendor: github.com/mattn/go-runewidth v0.0.23
    b9549d3ab5 vendor: golang.org/x/net v0.53.0
    2edf815a80 vendor: golang.org/x/term v0.42.0
    258010c788 vendor: golang.org/x/text v0.36.0
    cfa80d8644 vendor: golang.org/x/mod v0.35.0
    c20b2479e0 vendor: golang.org/x/sys v0.43.0
    573dd31bf7 vendor: github.com/docker/docker-credential-helpers v0.9.6
    2988338b99 docs/reference: remove deprecated "--kernel-memory" flag
    58c7328df6 man: remove deprecated "--kernel-memory" flag
    5468871a02 contrib/completion: remove deprecated "--kernel-memory" flags
    acbbeb3c3a docs: refresh legacy plugin references
    3362ae31d0 vendor: go.opentelemetry.io/contrib v0.68.0
    a1edb22832 vendor: go.opentelemetry.io/otel v1.43.0
    0a24da3382 vendor: google.golang.org/grpc v1.80.0
    f24c779887 vendor: google.golang.org/genproto/* 9d38bb4040a9
    99aaff1807 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
    f3c060c382 build(deps): bump docker/bake-action from 7.0.0 to 7.1.0
    b9a052a987 vendor: github.com/docker/go-connections v0.7.0
    0d32fde8e3 internal/registry: use stdlib's x509.SystemCertPool on Windows
    ad641e5d61 cmd/docker-trust: use stdlib's x509.SystemCertPool on Windows
    14aa781767 build(deps): bump docker/login-action from 4.0.0 to 4.1.0
    d1920f0b2c update to Go 1.26.2
    b23c1a2d76 build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
    c88681f8d8 vendor: moby/api v1.54.1, moby/client v0.4.0
    5ddc1553ae bump version to v29.4.0-dev
    a347d9e103 update AUTHORS and .mailmap
    5fca671ef4 vendor: github.com/mattn/go-runewidth v0.0.22
    42da40a605 vendor: moby/client and moby/api master
    0029d5936a build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
    e7cbaafa9d cli/command/container: statsFormatWrite: inline render func
    c44a4d9758 cli/command/container: RunStats: avoid bytes to strings conversions
    d92d1187fc cli/command/container: RunStats: rename buffer var for brevity
    ee88c60a5e cli/command/container: stats: add snapshot method
    4c5efd61ea cli/command/container: fix buffer reuse when printing stats
    b309524f60 cli/command/formatter: NewStats: update GoDoc and add TODO
    abd2e211b9 cli/command/formatter: add Format.templateString, remove Context.preFormat
    cb615a9772 cli/command/formatter: Context.postFormat: remove redundant buffer
    f7a909d56b cli/command/formatter: optimize ContainerContext.Names
    94d4929a04 cli/streams: Out, In: preserve original os.File when available
    526dfffc26 cli/streams: simplify CheckTty
    48721c2340 cli/streams: don't depend on embedding
    39e82e6524 cli/streams: move constructors to the start
    34805dd013 cli/streams: (In|Out).SetRawTerminal: dry
    6e1f03c2e0 cmd/docker-trust: bump dependencies
    87a222158d Updated example tokens in swarm docs
    98d978df6b vendor: go.opentelemetry.io/otel v1.42.0, otel/contrib v1.67.0
    a48ff6b591 cli/command/completion: don't provide duplicate completions
    091afa4957 vendor: github.com/go-jose/go-jose/v4 v4.1.4
    968ad0ea6c vendor: golang.org/x/net v0.52.0
    78fb018754 vendor: golang.org/x/time v0.15.0
    18739a5ef6 vendor: golang.org/x/term v0.41.0
    9b21846cde vendor: golang.org/x/text v0.35.0
    c22bf3c77e vendor: golang.org/x/mod v0.34.0
    d792fc53b7 vendor: golang.org/x/sync v0.20.0
    e9664a72ea vendor: golang.org/x/sys v0.42.0
    fb776458cb update to go1.26.1
    62d80156e1 ci: pin remaining actions
    ea74248e8e cli/command/formatter: modernize
    5efed5fa30 vendor: github.com/klauspost/compress v1.18.5
    cd9e5ae84f vendor: github.com/moby/patternmatcher v0.6.1
    bf6a1e1fcf cli-plugins/socket: modernize
    8f7dc04070 update minimum go version to go1.25
    a14db81c9c vendor: google.golang.org/grpc v1.79.3
    e660030f3a docs: fix typo in run reference
    58c1585b49 gha: validate gocompat
    ea42337d01 implement module compatibility check
    d573c171fe docs: clarify multiple --filter behavior in prune commands
    07bb479a45 cli-plugins/hooks: add missing "go:build" comments
    97b9e04a94 ci: pin actions to digests
    2bc4307816 fix(cmd/docker): prevent race between force-exit goroutine and plugin wait
    9c117d3c5d cli/command/container: add shell completion for docker rm --link
    df57ff7201 cli/command/completion: ContainerNames: skip legacy link names
    dfda342e51 cli/command/formatter: StripNamePrefix only strip "/" prefix
    b5efd66ba6 cli/command/container: stats: make stripping "/" prefix deterministic
    64c8d68045 cli/command/image: getPossibleChips: simplify
    4bf4d567bd cli-plugins/hooks: PrintNextSteps: slight cleanup
    dd1f7f5856 cli-plugins/hooks: simplify templating formats
    9243240346 cli-plugins/hooks: add commandInfo type for templating
    4a1b2ef2c5 cli-plugins/hooks: update godoc
    4142d4026e cli-plugins/hooks: detect if templating is needed
    cd053606a6 cli-plugins/hooks: slight tweaks in templates
    aadfe6214f cli-plugins/hooks: update tests
    dce201d6ee cli-plugins/hooks: move template utils separate from render code
    e26f94d823 cli-plugins/hooks: add JSON labels, omitzero
    0431e4d23c cli-plugins/hooks: rename HookType to ResponseType
    607ebfca5d cli-plugins/hooks: rename HookMessage to Response
    60180924e3 cli-plugins/manager: move HookPluginData to hooks.Request
    dd91ed3f2d cli-plugins/manager: refactor for easier debugging
    0501cf8293 cli-plugins/manager: simplify ctx-cancel check
    5343bdc792 cli-plugins/manager: Plugin.RunHook: improve error message
    5fb5e0b0da docker stats --all: remove containers when removed
    560db7d451 vendor: github.com/mattn/go-runewidth v0.0.21
    dc4abf8b99 golangci-lint: gocheckcompilerdirectives: ignore "//go:fix"
    7f781688ed golangci-lint: remove outdated exclusion
    21293265b1 cli/command/image/build: use t.Chdir() in tests
    3f51d0a9d2 cli/command/container: RunStats: refactor to DRY
    9645db767a cli/command/container: RunStats: pass ctx to stats event handlers
    2bc66ecbc7 docker cp: report both content size and transferred size
    33790e88d0 docs: use generic myplugin example for plugin documentation
    6b1ba1ad84 fix: restore os.Args after plugin completion and fix error return
    300d8231da feat: add linux/riscv64 to bin-image-cross release target
    9a471180cb cli/command: add missing "go:build" comments
    f7d83cbae8 update to go1.25.8
    39d676c72d build(deps): bump docker/metadata-action from 5 to 6
    6453c4c3a7 build(deps): bump docker/bake-action from 6 to 7
    eef3c957be cli/config/credentials: ConvertToHostname: update godoc
    71db1520de scripts/warn-outside-container: fix font representation
    206fc8c165 vendor: github.com/moby/moby/client v0.3.0
    874a8df0eb vendor: github.com/moby/moby/api v1.54.0
    668b3671bd build(deps): bump docker/setup-buildx-action from 3 to 4
    30a2ace7f2 build(deps): bump docker/login-action from 3 to 4
    32aa575aff docs/service: Document bind-create-src
    c747cff9ab container/opts: Add bind-create-src mount option
    ba349f5afd build(deps): bump docker/setup-qemu-action from 3 to 4
    e2cafd657e cli/command/registry: preserve all whitespace in secrets
    10ebb3b204 build(deps): bump go.opentelemetry.io/otel/sdk
    681f15674c Fix typos in code and documentation
    0bf060f777 vendor: github.com/moby/moby/client v0.2.3-rc.1
    139b58d7f4 vendor: github.com/moby/moby/api v1.54.0-rc.1
    8eedbdc6a8 vendor: moby/api v1.54.0-dev, moby/client v0.2.3-dev
    cd070a5ed5 vendor: github.com/mattn/go-runewidth v0.0.20
    8c3d05398e Dockerfile: update mvdan.cc/gofump to v0.9.2
    b206927e0c Dockerfile: update buildx to v0.31.1
    6b5acd3a6e Dockerfile: update compose to v5.1.0
    caa8a50468 vendor: github.com/klauspost/compress v1.18.4
    5c498778ec vendor: go.opentelemetry.io/contrib v0.65.0
    fbd0e7f7c4 vendor: go.opentelemetry.io/otel v1.40.0
    95a5a9e709 build(deps): bump actions/upload-artifact from 6 to 7
    a7b95f228f chore: use canonical url for buildx build cli doc
    13c993f101 cli/compose/loader: merge: use errors.Join
    8b6f23d18b cli/compose/loader: remove some wrapper utilities
    b35a2d0837 cli/compose/loader: remove getLoggingDriver
    42a211162c cli/compose/loader: mergeServices: inline mapByName
    6e1393089b cli/compose/loader: mergeServices: remove intermediate map for overrides
    78458e11e1 cli/compose/loader: mergeServices: tidy up and modernize
    09cf89e82e cli/compose/convert: convertEndpointSpec: fix sorting of ports
    db28780976 cli/compose/convert: convertUlimits: modernize
    830d05d16e error-hooks approach
    9bc18993a4 Fix: run plugin hooks on command failure, not just success
    fdebf0afae cli/command/container: fix some unhandled errors in test
    e47a5c7734 remove redundant uses of streamformatter in tests
    2fa6b736d0 scripts/build/.variables: don't use "netgo" when building Windows binaries
    61f03db682 cli/command/registry: refactor reading from stdin
    74d4554ccd github/issues: Add emojis
    2ebd137abc github/issues: Add links for Docker Desktop and Sandboxes
    f5b6055bd1 cli/command/registry: add unit test for --password-stdin
    b82e30e58d cli/command/registry: remove uses of "gotest.tools/v3/fs"
    c4fd2406e0 e2e: use docker v29.x dind as default
    fddfe63ef9 modernize: fmtappendf
    6d4b3b5f66 modernize: slicescontains
    835d510b78 modernize: stringsseq
    dd73e2df77 modernize: reflecttypefor
    7f5bb1e99c modernize: testingcontext
    2875e48024 modernize: stringscut
    4c7d40cf77 modernize: mapsloop
    85ebca52fd modernize: minmax
    e8dc2fce32 modernize: rangeint
    e4f6019e62 vendor: golang.org/x/net v0.50.0
    464e14c68e vendor: golang.org/x/term v0.40.0
    1e31c2825e vendor: golang.org/x/text v0.34.0
    355f7bb602 vendor: golang.org/x/sys v0.41.0
    a934c75de7 Dockerfile: update golangci-lint to v2.9.0
    ab06aebd4b internal/volumespec: fix prealloc linting
    9a0c78fdc0 cli-plugins/manager: fix prealloc linting
    2e544d6308 cli/command: fix prealloc linting
    12a0b0b7b9 cli/compose: fix prealloc linting
    99cef6f700 opts: fix prealloc linting
    8a8a3e1309 opts/swarmopts: fix prealloc linting
    9d2816c8a5 remove outdated "nolint" comments
    eaba9ecf18 cli/connhelper/ssh: remove outdated "nolint" comment
    1f6b319d60 Dockerfile: update alpine to 3.23
    b598f8f0b8 docs: fix docker volume prune example
    5eb91665d1 docs: fix typos
    02dee5c2d2 Fix: Remove inconsistent human readability warning from docker images

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 3 insertions, 3 deletions

diff --git a/recipes-containers/docker/docker-moby_git.bb b/recipes-containers/docker/docker-moby_git.bb
index 56d94675..18984585 100644
--- a/recipes-containers/docker/docker-moby_git.bb
+++ b/recipes-containers/docker/docker-moby_git.bb
@@ -44,8 +44,8 @@ DESCRIPTION = "Linux container runtime \
 # so we get that tag, and make it our SRCREVS:
 #
 
-SRCREV_moby = "1da6517e1a4381297e56862f6f373f265c28d102"
-SRCREV_cli = "df016a3a9538efb6d7d6e7c3baf291dbbe28eee0"
+SRCREV_moby = "19592a8ad2ece47d8226e6330d8a2ccad886cb3d"
+SRCREV_cli = "d476e1d9bfd74bbeeb30c6ebd5c851dbfee69742"
 SRCREV_FORMAT = "moby"
 SRC_URI = "\
         git://github.com/moby/moby.git;nobranch=1;name=moby;protocol=https;destsuffix=${GO_SRCURI_DESTSUFFIX} \
@@ -64,7 +64,7 @@ require docker.inc
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=4859e97a9c7780e77972d989f0823f28"
 
-DOCKER_VERSION = "v29.3.0"
+DOCKER_VERSION = "v29.5.2"
 PV = "${DOCKER_VERSION}+git${SRCREV_moby}"
 
 CVE_PRODUCT = "docker mobyproject:moby"