Bump github.com/docker/cli to v27.1.2+incompatible

containerd / stargz-snapshotter

Fast container image distribution plugin with lazy pulling

https://github.com/containerd/containerd/issues/3731

Apache License 2.0

1.13k stars 114 forks source link

Bump github.com/docker/cli to v27.1.2+incompatible #1773

Closed brandond closed 3 weeks ago

brandond commented 3 weeks ago

Removes indirect dependency on github.com/docker/docker

@ktock I see that https://github.com/containerd/stargz-snapshotter/pull/1763 did the same thing and was closed, can I ask why? We'd really like to eliminate the indirect dependency on github.com/docker/docker since it is showing up in vuln scans when we bundle stargz-snapshotter into k3s and rke2.

brandond commented 3 weeks ago

I see you're rolling these together in https://github.com/containerd/stargz-snapshotter/pull/1765 - I'll wait for that. Thanks! We're excited to see this gone.