dependabot / cli

A tool for testing and debugging Dependabot update jobs.
MIT License
251 stars 38 forks source link

Bump the docker group with 3 updates #305

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps the docker group with 3 updates: github.com/docker/cli, github.com/docker/docker and github.com/moby/moby.

Updates github.com/docker/cli from 25.0.4+incompatible to 26.0.2+incompatible

Commits
  • 3c863ff Merge pull request #5028 from vvoland/vendor-docker
  • c1b7df3 vendor: github.com/docker/docker v26.0.2-dev (7cef0d9c)
  • d260a54 Merge pull request #5007 from vvoland/vendor-docker
  • 3369ffe vendor: github.com/docker/docker v26.0.1-dev (60b9add796ae)
  • 3cf84fb Merge pull request #5006 from vvoland/v26.0-5005
  • b1b03b3 cli-bin/windows: Add .exe extension
  • 57d2fbb Merge pull request #4999 from thaJeztah/26.0_backport_bump_x_net
  • c33cc92 vendor: golang.org/x/net v0.23.0
  • 156e20c vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0
  • 7522a62 vendor: golang.org/x/term v0.18.0
  • Additional commits viewable in compare view


Updates github.com/docker/docker from 25.0.5+incompatible to 26.0.2+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v26.0.2

26.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains a security fix for CVE-2024-32473, an unexpected configuration of IPv6 on IPv4-only interfaces.

Bug fixes and enhancements

v26.0.1

26.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • Fix a regression that meant network interface specific --sysctl options prevented container startup. moby/moby#47646
  • Remove erroneous platform from image config OCI descriptor in docker save output. moby/moby#47694
  • containerd image store: OCI archives produced by docker save will now have a non-empty mediaType field in index.json moby/moby#47701
  • Fix a regression that prevented the internal resolver from forwarding requests from IPvlan L3 networks to external resolvers. moby/moby#47705
  • Prevent the use of external resolvers in IPvlan and Macvlan networks created with no parent interface specified. moby/moby#47705

Packaging updates

v26.0.0

26.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

... (truncated)

Commits
  • 7cef0d9 Merge pull request from GHSA-x84c-p2g9-rqv9
  • 841c4c8 Disable IPv6 for endpoints in '--ipv6=false' networks.
  • 60b9add Merge pull request #47705 from robmry/backport-26.0/47662_ipvlan_l3_dns
  • 8ad7f86 Run ipvlan tests even if 'modprobe ipvlan' fails
  • dc27552 Stop macvlan with no parent from using ext-dns
  • 7b570f0 Enable DNS proxying for ipvlan-l3
  • 8cdcc4f Move dummy DNS server to integration/internal/network
  • ed752f6 Merge pull request #47701 from vvoland/v26.0-47691
  • 9db1b6f Merge pull request #47702 from vvoland/v26.0-47647
  • 6261281 Merge pull request #47700 from vvoland/v26.0-47673
  • Additional commits viewable in compare view


Updates github.com/moby/moby from 25.0.4+incompatible to 26.0.2+incompatible

Release notes

Sourced from github.com/moby/moby's releases.

v26.0.2

26.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains a security fix for CVE-2024-32473, an unexpected configuration of IPv6 on IPv4-only interfaces.

Bug fixes and enhancements

v26.0.1

26.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • Fix a regression that meant network interface specific --sysctl options prevented container startup. moby/moby#47646
  • Remove erroneous platform from image config OCI descriptor in docker save output. moby/moby#47694
  • containerd image store: OCI archives produced by docker save will now have a non-empty mediaType field in index.json moby/moby#47701
  • Fix a regression that prevented the internal resolver from forwarding requests from IPvlan L3 networks to external resolvers. moby/moby#47705
  • Prevent the use of external resolvers in IPvlan and Macvlan networks created with no parent interface specified. moby/moby#47705

Packaging updates

v26.0.0

26.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

... (truncated)

Commits
  • 7cef0d9 Merge pull request from GHSA-x84c-p2g9-rqv9
  • 841c4c8 Disable IPv6 for endpoints in '--ipv6=false' networks.
  • 60b9add Merge pull request #47705 from robmry/backport-26.0/47662_ipvlan_l3_dns
  • 8ad7f86 Run ipvlan tests even if 'modprobe ipvlan' fails
  • dc27552 Stop macvlan with no parent from using ext-dns
  • 7b570f0 Enable DNS proxying for ipvlan-l3
  • 8cdcc4f Move dummy DNS server to integration/internal/network
  • ed752f6 Merge pull request #47701 from vvoland/v26.0-47691
  • 9db1b6f Merge pull request #47702 from vvoland/v26.0-47647
  • 6261281 Merge pull request #47700 from vvoland/v26.0-47673
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 7 months ago

Superseded by #313.