chore(deps): update dependency docker to v24 #5
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
20.10.7->v24.0.7Release Notes
moby/moby (docker)
v24.0.7Compare Source
24.0.7
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
dockerd-rootless-setuptools.shwhen username contains a backslash. moby/moby#46407dockerd --bridge=noneis used. moby/moby#46702--ip-rangewith a range larger than the subnet. docker/for-mac#6870Packaging updates
docker.socketnot getting disabled when uninstalling thedocker-ceRPM package. docker/docker-ce-packaging#852go1.20.10. docker/docker-ce-packaging#951v1.7.6(static binaries only). moby/moby#46103containerd.iopackage tov1.6.24.Security
/sys/devices/virtual/powercapby default. This change hardens against CVE-2020-8694, CVE-2020-8695, and CVE-2020-12912, and an attack known as the PLATYPUS attack. For more details, see advisory, commit.v24.0.6Compare Source
24.0.6
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
docker psfailing when a container image is no longer present in the content store. moby/moby#46095docker ps -s -aanddocker container prunefailing when a container image config is no longer present in the content store. moby/moby#46097docker inspectfailing when a container image config is no longer (or was never) present in the content store. moby/moby#46244overlayfssnapshotter by using reference-counted rootfs mounts. moby/moby#46266FROM scratchDockerfile instruction with the classic builder. moby/moby#46302mismatched image rootfs and manifest layerserrors with the classic builder. moby/moby#46310dockerd.exe --register-servicenot working when the binary is in the current directory on Windows. moby/moby#46215docker loginagainst Docker Hub. docker/cli#4500GET /_pingwhen possible. docker/cli#4508docker manifest inspectan image on Docker Hub. docker/cli#4512docker eventsnot supporting--format=json. docker/cli#4544Packaging updates
go1.20.7. moby/moby#46140, docker/cli#4476, docker/docker-ce-packaging#932v1.7.3(static binaries only). moby/moby#46103v2.21.0. docker/docker-ce-packaging#936v24.0.5Compare Source
24.0.5
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
Host:header, in order to be compatible with changes introduced ingo1.20.6. moby/moby#45962, moby/moby#45990Variantnot being included indocker image inspectandGET /images/{name}/json. moby/moby#46025RepoDigests. moby/moby#46014EXPOSEwhen building containers with the legacy builder. moby/moby#45921overlaynetwork on a non-Swarm node. moby/moby#45974auths: nullis found in the CLI config file. docker/cli#4450Packaging updates
contrib/init. docker/docker-ce-packaging#914, docker/docker-ce-packaging#926contrib/init. moby/moby#46044go1.20.6. docker/cli#4428, moby/moby#45970, docker/docker-ce-packaging#921v2.20.2. docker/docker-ce-packaging#924v0.11.2. docker/docker-ce-packaging#922v24.0.4Compare Source
24.0.4
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
v24.0.3Compare Source
24.0.3
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
FROM scratchin container builds. moby/moby#45822docker cpwith snapshotters that cannot mount the same content multiple times. moby/moby#45780, moby/moby#45786type=imagenot being correctly unpacked/stored. moby/moby#45692docker load. moby/moby#45688name_to_handle_at(2)is now always allowed in the default seccomp profile. moby/moby#45833host-gatewaywith BuildKit by passing the IP as a label (also requires docker/buildx#1894). moby/moby#45790POST /containers/{id}/stopwould forcefully terminate the container when the request was canceled, instead of waiting until the specified timeout for a 'graceful' stop. moby/moby#45774docker cp -afrom the root (/) directory would fail. moby/moby#45748GET /info. moby/moby#45856docker infowhen only the client is in debug mode. docker/cli#4393Packaging updates
go1.20.5. moby/moby#45745, docker/cli#4351, docker/docker-ce-packaging#904v2.19.1. docker/docker-ce-packaging#916v0.11.1. docker/docker-ce-packaging#918v24.0.2Compare Source
24.0.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
exit code: 4294967295when performing many concurrent build stages. moby/moby#45620etc/hosts(%WINDIR%\System32\Drivers\etc\hosts), including resolution oflocalhost. moby/moby#45562docker execcommands to take significantly longer than expected. moby/moby#45625Createdfield would contain an incorrect value. moby/moby#45623v24.0.1Compare Source
24.0.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Removed
Bug fixes and enhancements
docker pull --platformwould reportNo such imageregarding another tag pointing to the same image. moby/moby#45562docker images -amoby/moby#45588GET /images/{id}/jsonwould returnnullinstead of emptyRepoTagsandRepoDigests. moby/moby#45564POST /commitdid not accept an empty request body. moby/moby#45568Packaging updates
v2.18.1. [master] bump compose to v2.18.1 docker/docker-ce-packaging#896v24.0.0Compare Source
24.0.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
--hostCLI flag now supports a path component in assh://host address, allowing use of an alternate socket path without configuration on the remote host. docker/cli#4073docker infoCLI command now reports a version and platform field. docker/cli#4180--default-network-optto configure options for newly created networks. moby/moby#43197AF_VSOCKin thesocket(2)family of syscalls in the default seccomp profile. moby/moby#44562daemon.json, enabling runtime names to be aliased and options to be passed. moby/moby#45032docker-initbinary will now be discovered in FHS-compliant libexec directories, in addition to thePATH. moby/moby#45198--no-new-privilegesinGET /info. moby/moby#45320Removed
docker infono longer reportsIndexServiceAddress. docker/cli#4204xt_u32kernel module from encrypted Swarm overlay networks. moby/moby#45281buildinfoin favor of standard provenance attestations. moby/moby#45097overlaystorage drivers. moby/moby#45342, moby/moby#45359overlay2.override_kernel_checkstorage driver option. moby/moby#45368apparmor_parserfrom the AppArmor profiles. moby/moby#45500GET /images/jsonno longer represents empty RepoTags and RepoDigests as<none>:<none>/<none>@​<none>. Empty arrays are be returned instead on API >= 1.43. moby/moby#45068Deprecated
--oom-score-adjustdaemon option. moby/moby#45315VirtualSizefield inGET /images/jsonandGET /images/{id}/json. moby/moby#45346Bug fixes and enhancements
docker stackcommand no longer validates thebuildsection of Compose files. docker/cli#4214overlay2storage driver. moby/moby#44285before=andsince=filters inGET /images. moby/moby#44503execDurationfield to the map of event attributes. moby/moby#45494internal,l2bridge, andnatdrivers. moby/swarmkit#3121, moby/moby#45291Packaging updates
1.20.4. docker/cli#4253, moby/moby#45456containerdtov1.7.1. moby/moby#45537buildkittov0.11.6. moby/moby#45367v23.0.7Compare Source
23.0.7
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug Fixes and Enhancements
insecure-registriesdaemon configuration. https://github.com/moby/moby/pull/45572POST /commitagain. https://github.com/moby/moby/pull/45569docker build. https://github.com/moby/moby/pull/45791NodeCSIInfo. https://github.com/moby/moby/pull/45809name_to_handle_at(2). https://github.com/moby/moby/pull/45834--security-opt=no-new-privileges. https://github.com/moby/moby/pull/46222deviceortypevolume option to be unmounted when restarting the daemon and not live-restoring it properly. https://github.com/moby/moby/pull/46367--register-servicewhen executed from within binary directory. https://github.com/moby/moby/pull/46216Packaging Updates
v23.0.6Compare Source
23.0.6
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
Packaging Updates
1.19.9. docker/docker-ce-packaging#889, docker/cli#4254, moby/moby#45455containerdto v1.6.21runcto v1.1.7v23.0.5Compare Source
23.0.5
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
--all/-aoption when pruning volumes. docker/cli#4229--format=jsonfordocker info. docker/cli#4320buildx. moby/moby#45410Packaging Updates
2.17.3. docker/docker-ce-packaging#883v23.0.4Compare Source
23.0.4
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
docker cpnot functioning as intended docker/cli#4157.docker compose --filedocker/cli#4177.daemon.jsonmoby/moby#45246.Packaging Updates
1.19.8. docker/docker-ce-packaging#878,docker/cli#4164, moby/moby#45277,
which contains fixes for CVE-2023-24537,
CVE-2023-24538,
CVE-2023-24534,
and CVE-2023-24536
v23.0.3Compare Source
23.0.3
Bug fixes and enhancements
to fail to uphold their guarantees, addressing CVE-2023-28841,
CVE-2023-28840, and
CVE-2023-28842.
as an error.
multiple nodes to attach.
through the use of the
xt_bpfkernel module.to ensure that unintentional exposure has not occurred.
Packaging Updates
v23.0.2Compare Source
23.0.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
apparmor_parserwhen an AppArmor enabled kernel is detected. containerd/containerd#8087, moby/moby#45043VOLUMEline in a Dockerfile being excluded from volume prune. moby/moby#45159COPY --linkby disabling mergeop/diffop optimization. moby/moby#45112--dns-optor--dns-searchwhensystemd-resolvedis used outside the container. moby/moby#45000docker psby allowing users to opt out of size calculations with--size=false. docker/cli#4107docker stack deployfailing on Windows when special environment variables set bycmd.exeare present. docker/cli#4083<none>. docker/cli#4065Packaging
1.19.7. docker/docker-ce-packaging#857, docker/cli#4086, moby/moby#45137containerdtov1.6.19. moby/moby#45084, moby/moby#45099v0.10.4. docker/docker-ce-packaging#855v2.17.2. [23.0 backport] bump compose version to v2.17.2 docker/docker-ce-packaging#867v23.0.1Compare Source
23.0.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
apparmor_parseris not available. moby/moby#44942ipvlannetworks created prior to upgrading would prevent the daemon from starting. moby/moby#44937overlay2storage driver failing early inmetacopytesting when initialized on an unsupported backing filesystem. moby/moby#44922execexit events being misinterpreted as container exits under some runtimes, such as Kata Containers. moby/moby#44892runccompiled using Go 1.20. docker/cli#4004--device-write-bpsas a path. docker/cli#4004Packaging
/etc/dockerto RPM and DEB packaging. docker/docker-ce-packaging#842mkdir -p /etc/docker.v2.16.0. docker/docker-ce-packaging#844v23.0.0Compare Source
23.0.0
For more information about:
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
docker buildtodocker buildx build. docker/cli#3314DOCKER_BUILDKIT=0.Multi-stage builds.
zstdcompressed layers. moby/moby#41759, moby/moby#42862runhcsshim on Windows (off by default). moby/moby#42089dockerd --validateto check the daemon JSON config and exit. moby/moby#42393ipvlan_flagand using thel3sipvlan_modein theipvlannetwork driver. moby/moby#42542metacopyoption for theoverlay2storage driver. moby/moby#43557IDType://ID. moby/moby#43368RootlessKit,slirp4netns, andVPNKitversion reporting. moby/moby#42330docker volume. docker/cli#3606docker stack. docker/cli#3662docker stack deploy. docker/cli#2907docker stack configcommand to output the merged and interpolated config files as utilized bystack deploy. docker/cli#3544docker context showcommand that prints the name of the current context. docker/cli#3567--format=jsonshorthand variant of--format="{{ json . }}"to all commands supporting the--formatflag. docker/cli#2936--quietoption todocker createanddocker runcommands to suppress output when pulling an image. docker/cli#3377--forceoption todocker network rmsubcommand. Causes CLI to return a 0 exit code even if the network doesn't exist. Has no effect on the server-side procedure for removing a network. docker/cli#3547--signaloption todocker stopanddocker restart. docker/cli#3614-v/--versionflag todocker-proxy. moby/moby#44703STOPSIGNALviadocker commit. moby/moby#43369awslogslog driver to allow skipping log stream creation in CloudWatch. moby/moby#42132awslogslog driver to specify the log format that's sent to CloudWatch. moby/moby#42838fluentdlog driver to set the reconnection interval. moby/moby#43100WithTLSClientConfigFromEnv(),WithHostFromEnv(), andWithVersionFromEnv(). moby/moby#42224docker completionsubcommand. docker/cli#3429Swarmheader toGET /_pingandHEAD /_ping, allowing single-request detection of Swarm support. moby/moby#42064signalparameter toPOST /containers/{id}/stopandPOST /containers/{id}/restartto set the signal used. moby/moby#43206CreateMountPointparameter toPOST /containers/create. moby/moby#43484shared-sizeparameter toGET /images/jsonto enable shared-size computation of images. moby/moby#42531typeparameter toGET /system/df, to control what object types to are considered when computing disk usage. moby/moby#42559docker.serviceaftertime-set.target. moby/moby#43107Removed
~/.dockercfg. docker/cli#2504-gand--graphdaemon options in favor of--data-root. docker/cli#3739Experimentalclient field fromdocker version. docker/cli#3543overlayandoverlay2storage drivers on backing filesystems withoutd_typesupport. moby/moby#43472overrideKernelCheckoption from theoverlay2storage driver. moby/moby#44279Deprecation notice
io.containerd.runtime.v1.linuxOCI runtime. moby/moby#43695--cluster-xxoptions fromdockerd. moby/moby#40383host-discoveryand overlay networks with external k/v stores. moby/moby#42247armplatform fallback.--platform linux/arm/vYwill now return a error whenarm/vYisn't available instead of pulling the wrong image. moby/moby#44414SetCustomHTTPHeaders(),CustomHTTPHeaders()options-setters from the Go client API. moby/moby#42694WithDialer()option-setter from the Go client API. moby/moby#44022WithDialContext()instead.opts.QuotedString. The implementation has moved to the CLI. moby/moby#43250KernelMemoryoption fromPOST /containers/createon API version >= 1.42. moby/moby#43214Deprecated
BuilderSizein API versions >= 1.42 moby/moby#42608BuildCache.Parentin favor of the newly introducedBuildCache.Parentsin API version >= 1.42. moby/moby#43908pkg/urlutil, moving the implementation tobuilder/remotecontext/urlutil. moby/moby#43477Upgrades
1.19.5. docker/cli#3958, moby/moby#44794rootlesskittov0.14.4. moby/moby#42708buildkittov0.10.6. moby/moby#43239buildxtov0.10.2. docker/docker-ce-packaging#840swarmkittov2.0.0-20230119195359-904c221ac281. moby/moby#44858containerdtov1.6.16. moby/moby#44766, moby/moby#44769, moby/moby#44881runctov1.1.4. moby/moby#44039hcsshimv0.9.6. moby/moby#44658btrfsstorage driver now depends on Linux kernel headers (>= 4.12) instead of headers from btrfs-progs. moby/moby#44776Security
hostconfig.jsonfiles to0600(was0644). moby/moby#41620--seccomp-profilenot acceptingunconfinedand renamed the default seccomp profile tobuiltin. moby/moby#42481seccompbuild tag. moby/moby#42501riscv64. moby/moby#43553seccomp(2)in seccomp profiles. moby/moby#42648ErrnoRet. moby/moby#42005DefaultErrnoRetinseccompprofiles. moby/moby#42604DefaultErrnoRetfield to the default seccomp profile, with no behavior change. moby/moby#42649socketwithAF_VSOCKin the default seccomp profile. moby/moby#44563process_vm_readvandprocess_vm_writevin the default seccomp profile. moby/moby#42083clock_settime64withCAP_SYS_TIME. moby/moby#43775bpfwithCAP_BPFandperf_event_openwithCAP_PERFMON. moby/moby#43988clone3syscall to returnENOSYSin the default seccomp profile, in order to ensureglibcwill correctly fallback to usingclone. moby/moby#42681Bug fixes and enhancements
overlay2to be the default storage driver (btrfsandzfsare now opt-in). moby/moby#42661docker cpcommand. docker/cli#2708ElectAuthServerfunction, and made it return the default registry without calling theGET /infoAPI endpoint. docker/cli#2819net.JoinHostPort()to fix formatting with IPv6 addresses docker/cli#2972stderr. docker/cli#3044docker infoif a custom--formatis used that only uses local information. With this change, the CLI only uses the daemon API if it detects that information from the daemon is needed. docker/cli#3179--stop-signalflag, as it may not reflect the actual default used by the daemon. docker/cli#32453.10todocker stack; allow omitting theversionfield (resulting inlatest). docker/cli#32573is now equivalent to3.x(latest) indocker stack. docker/cli#3445<Ctrl-c>hanging on Windows to exit afConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.