This release contains a fix for CVE-2024-41110 / GHSA-v23v-6jw2-98fq
that impacted setups using authorization plugins (AuthZ)
for access control. No other changes are included in this release, and this
release is otherwise identical for users not using AuthZ plugins.
rootless: add Requires=dbus.socket to prevent errors when starting the daemon on a cgroup v2 host with systemd moby/moby#48141
containerd integration: image tag event is now properly emitted when building images with BuildKit moby/moby#48182
CLI: enable shell completion for docker image rm, docker image history, and docker image inspectmoby/moby#5261
CLI: add and improve shell completions for various flags moby/moby#5261
CLI: add OOMScoreAdj to docker service create and docker stackdocker/cli#5274
CLI: add support for DOCKER_CUSTOM_HEADERS environment variable (experimental) docker/cli#5271
CLI: containerd-integration: Fix docker push defaulting the --platform flag to a value of DOCKER_DEFAULT_PLATFORM environment variable on unsupported API versions docker/cli#5248
CLI: fix: context cancellation on login prompt docker/cli#5260
CLI: fix: wait for the container to exit before closing the stream when sending a termination request to the CLI while attached to a container docker/cli#5250
Deprecated
The pkg/rootless/specconv package is deprecated, and will be removed in the next release moby/moby#48185
The pkg/containerfs package is deprecated, and will be removed in the next release moby/moby#48185
The pkg/directory package is deprecated, and will be removed in the next release moby/moby#48185
This release contains a fix for CVE-2024-41110 / GHSA-v23v-6jw2-98fq
that impacted setups using authorization plugins (AuthZ)
for access control. No other changes are included in this release, and this
release is otherwise identical for users not using AuthZ plugins.
rootless: add Requires=dbus.socket to prevent errors when starting the daemon on a cgroup v2 host with systemd moby/moby#48141
containerd integration: image tag event is now properly emitted when building images with BuildKit moby/moby#48182
CLI: enable shell completion for docker image rm, docker image history, and docker image inspectmoby/moby#5261
CLI: add and improve shell completions for various flags moby/moby#5261
CLI: add OOMScoreAdj to docker service create and docker stackdocker/cli#5274
CLI: add support for DOCKER_CUSTOM_HEADERS environment variable (experimental) docker/cli#5271
CLI: containerd-integration: Fix docker push defaulting the --platform flag to a value of DOCKER_DEFAULT_PLATFORM environment variable on unsupported API versions docker/cli#5248
CLI: fix: context cancellation on login prompt docker/cli#5260
CLI: fix: wait for the container to exit before closing the stream when sending a termination request to the CLI while attached to a container docker/cli#5250
Deprecated
The pkg/rootless/specconv package is deprecated, and will be removed in the next release moby/moby#48185
The pkg/containerfs package is deprecated, and will be removed in the next release moby/moby#48185
The pkg/directory package is deprecated, and will be removed in the next release moby/moby#48185
Add MountedFast by @kolyshkin in moby/sys#100
Note: most users should keep using Mounted, which already incorporates all optimizations from MountedFast
Add the new go.opentelemetry.io/contrib/detectors/azure/azurevm package to provide a resource detector for Azure VMs. (#5422)
Add support to configure views when creating MeterProvider using the config package. (#5654)
The go.opentelemetry.io/contrib/config add support to configure periodic reader interval and timeout. (#5661)
Add log support for the autoexport package. (#5733)
Add support for disabling the old runtime metrics using the OTEL_GO_X_DEPRECATED_RUNTIME_METRICS=false environment variable. (#5747)
Add support for signal-specific protocols environment variables (OTEL_EXPORTER_OTLP_TRACES_PROTOCOL, OTEL_EXPORTER_OTLP_LOGS_PROTOCOL, OTEL_EXPORTER_OTLP_METRICS_PROTOCOL) in go.opentelemetry.io/contrib/exporters/autoexport. (#5816)
The go.opentelemetry.io/contrib/processors/minsev module is added.
This module provides and experimental logging processor with a configurable threshold for the minimum severity records must have to be recorded. (#5817)
The go.opentelemetry.io/contrib/processors/baggagecopy module.
This module is a replacement of go.opentelemetry.io/contrib/processors/baggage/baggagetrace. (#5824)
Changed
Improve performance of go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
Improve performance of go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
Update go.opentelemetry.io/contrib/config to latest released configuration schema which introduces breaking changes where Attributes is now a map[string]interface{}. (#5758)
Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0. (#5847)
Fixed
Custom attributes targeting metrics recorded by the go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are not ignored anymore. (#5129)
The double setup in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace/example that caused duplicate traces. (#5564)
The superfluous response.WriteHeader call in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp when the response writer is flushed. (#5634)
Use c.FullPath() method to set http.route attribute in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#5734)
Out-of-bounds panic in case of invalid span ID in go.opentelemetry.io/contrib/propagators/b3. (#5754)
Deprecated
The go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho package is deprecated.
If you would like to become a Code Owner of this module and prevent it from being removed, see #5550. (#5645)
The go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron package is deprecated.
If you would like to become a Code Owner of this module and prevent it from being removed, see #5552. (#5646)
The go.opentelemetry.io/contrib/samplers/aws/xray package is deprecated.
If you would like to become a Code Owner of this module and prevent it from being removed, see #5554. (#5647)
The go.opentelemetry.io/contrib/processors/baggage/baggagetrace package is deprecated.
Use the added go.opentelemetry.io/contrib/processors/baggagecopy package instead. (#5824)
Use baggagecopy.NewSpanProcessor as a replacement for baggagetrace.New.
NewSpanProcessor accepts a Fitler function type that selects which baggage members are added to a span.
NewSpanProcessor returns a *baggagecopy.SpanProcessor instead of a trace.SpanProcessor interface.
The returned type still implements the interface.
Add the new go.opentelemetry.io/contrib/detectors/azure/azurevm package to provide a resource detector for Azure VMs. (#5422)
Add support to configure views when creating MeterProvider using the config package. (#5654)
The go.opentelemetry.io/contrib/config add support to configure periodic reader interval and timeout. (#5661)
Add log support for the autoexport package. (#5733)
Add support for disabling the old runtime metrics using the OTEL_GO_X_DEPRECATED_RUNTIME_METRICS=false environment variable. (#5747)
Add support for signal-specific protocols environment variables (OTEL_EXPORTER_OTLP_TRACES_PROTOCOL, OTEL_EXPORTER_OTLP_LOGS_PROTOCOL, OTEL_EXPORTER_OTLP_METRICS_PROTOCOL) in go.opentelemetry.io/contrib/exporters/autoexport. (#5816)
The go.opentelemetry.io/contrib/processors/minsev module is added.
This module provides and experimental logging processor with a configurable threshold for the minimum severity records must have to be recorded. (#5817)
The go.opentelemetry.io/contrib/processors/baggagecopy module.
This module is a replacement of go.opentelemetry.io/contrib/processors/baggage/baggagetrace. (#5824)
Changed
Improve performance of go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
Improve performance of go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
Update go.opentelemetry.io/contrib/config to latest released configuration schema which introduces breaking changes where Attributes is now a map[string]interface{}. (#5758)
Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0. (#5847)
Fixed
Custom attributes targeting metrics recorded by the go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are not ignored anymore. (#5129)
The double setup in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace/example that caused duplicate traces. (#5564)
The superfluous response.WriteHeader call in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp when the response writer is flushed. (#5634)
Use c.FullPath() method to set http.route attribute in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#5734)
Out-of-bounds panic in case of invalid span ID in go.opentelemetry.io/contrib/propagators/b3. (#5754)
Deprecated
The go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho package is deprecated.
If you would like to become a Code Owner of this module and prevent it from being removed, see #5550. (#5645)
The go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron package is deprecated.
If you would like to become a Code Owner of this module and prevent it from being removed, see #5552. (#5646)
The go.opentelemetry.io/contrib/samplers/aws/xray package is deprecated.
If you would like to become a Code Owner of this module and prevent it from being removed, see #5554. (#5647)
The go.opentelemetry.io/contrib/processors/baggage/baggagetrace package is deprecated.
Use the added go.opentelemetry.io/contrib/processors/baggagecopy package instead. (#5824)
Use baggagecopy.NewSpanProcessor as a replacement for baggagetrace.New.
NewSpanProcessor accepts a Fitler function type that selects which baggage members are added to a span.
NewSpanProcessor returns a *baggagecopy.SpanProcessor instead of a trace.SpanProcessor interface.
The returned type still implements the interface.
The IsEmpty method is added to the Instrument type in go.opentelemetry.io/otel/sdk/metric.
This method is used to check if an Instrument instance is a zero-value. (#5431)
Store and provide the emitted context.Context in ScopeRecords of go.opentelemetry.io/otel/sdk/log/logtest. (#5468)
The go.opentelemetry.io/otel/semconv/v1.26.0 package.
The package contains semantic conventions from the v1.26.0 version of the OpenTelemetry Semantic Conventions. (#5476)
The AssertRecordEqual method to go.opentelemetry.io/otel/log/logtest to allow comparison of two log records in tests. (#5499)
The WithHeaders option to go.opentelemetry.io/otel/exporters/zipkin to allow configuring custom http headers while exporting spans. (#5530)
Changed
Tracer.Start in go.opentelemetry.io/otel/trace/noop no longer allocates a span for empty span context. (#5457)
Upgrade go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0 in go.opentelemetry.io/otel/example/otel-collector. (#5490)
Upgrade go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0 in go.opentelemetry.io/otel/example/zipkin. (#5490)
Upgrade go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0 in go.opentelemetry.io/otel/exporters/zipkin. (#5490)
The exporter no longer exports the deprecated "otel.library.name" or "otel.library.version" attributes.
Upgrade go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0 in go.opentelemetry.io/otel/sdk/resource. (#5490)
Upgrade go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0 in go.opentelemetry.io/otel/sdk/trace. (#5490)
SimpleProcessor.OnEmit in go.opentelemetry.io/otel/sdk/log no longer allocates a slice which makes it possible to have a zero-allocation log processing using SimpleProcessor. (#5493)
Use non-generic functions in the Start method of "go.opentelemetry.io/otel/sdk/trace".Trace to reduce memory allocation. (#5497)
service.instance.id is populated for a Resource created with "go.opentelemetry.io/otel/sdk/resource".Default with a default value when OTEL_GO_X_RESOURCE is set. (#5520)
Improve performance of metric instruments in go.opentelemetry.io/otel/sdk/metric by removing unnecessary calls to time.Now. (#5545)
Bumps the all group with 12 updates in the / directory:
26.1.4+incompatible27.1.1+incompatible26.1.4+incompatible27.1.1+incompatible26.1.4+incompatible27.1.1+incompatible0.7.00.7.11.7.181.7.200.5.00.6.00.1.00.3.00.52.00.53.00.21.00.24.00.16.00.17.00.5.00.6.00.22.00.24.0Updates
github.com/docker/clifrom 26.1.4+incompatible to 27.1.1+incompatibleCommits
6312585Merge pull request #5274 from thaJeztah/27.1_backport_compose_oomc599566Allow for OomScoreAdjfb19defMerge pull request #5271 from thaJeztah/27.1_backport_custom_headers_env_varbccd478Merge pull request #5270 from thaJeztah/27.1_backport_test_spring_cleaning8992378add support for DOCKER_CUSTOM_HEADERS env-var (experimental)f90273cMerge pull request #5269 from thaJeztah/27.1_backport_add_macos_apple_siliconca9636atest spring-cleaningad47d2agha: update to macOS 13, add macOS 14 arm64 (Apple Silicon M1)a2a0fb7Merge pull request #5263 from thaJeztah/27.1_backport_relax_pr_check16d6c90Merge pull request #5265 from thaJeztah/27.1_backport_bump_buildx_composeUpdates
github.com/docker/dockerfrom 26.1.4+incompatible to 27.1.1+incompatibleRelease notes
Sourced from github.com/docker/docker's releases.
... (truncated)
Commits
cc13f95Merge commit from forka21b1a2Merge pull request #48196 from thaJeztah/27.1_backport_vendor_containerd_1.7.201bc907cvendor: github.com/containerd/containerd v1.7.204bb4575Merge pull request #48191 from thaJeztah/27.1_backport_update_containerd_bina...df7f275Merge pull request #48195 from thaJeztah/27.1_backport_fix_pr_title_check1c0885dgha: check-pr-branch: fix branch check regressionfb3ec9fMerge pull request #48187 from thaJeztah/27.1_backport_bump_buildx_composeed83a9eupdate containerd binary to v1.7.2071b59bfMerge pull request #48178 from thaJeztah/27.1_backport_relax_pr_checkf8f926bMerge pull request #48185 from thaJeztah/27.1_backport_internalize_pkg_directoryUpdates
github.com/moby/mobyfrom 26.1.4+incompatible to 27.1.1+incompatibleRelease notes
Sourced from github.com/moby/moby's releases.
... (truncated)
Commits
cc13f95Merge commit from forka21b1a2Merge pull request #48196 from thaJeztah/27.1_backport_vendor_containerd_1.7.201bc907cvendor: github.com/containerd/containerd v1.7.204bb4575Merge pull request #48191 from thaJeztah/27.1_backport_update_containerd_bina...df7f275Merge pull request #48195 from thaJeztah/27.1_backport_fix_pr_title_check1c0885dgha: check-pr-branch: fix branch check regressionfb3ec9fMerge pull request #48187 from thaJeztah/27.1_backport_bump_buildx_composeed83a9eupdate containerd binary to v1.7.2071b59bfMerge pull request #48178 from thaJeztah/27.1_backport_relax_pr_checkf8f926bMerge pull request #48185 from thaJeztah/27.1_backport_internalize_pkg_directoryUpdates
github.com/moby/sys/signalfrom 0.7.0 to 0.7.1Release notes
Sourced from github.com/moby/sys/signal's releases.
Commits
cafbe42Merge pull request #138 from thaJeztah/fix_symlink_docs41a565esymlink: touch-up documentation35f6c4eMerge pull request #137 from thaJeztah/refresh_ci057bd48ci/gha: drop Go 1.20, add Go 1.222a29ebeci/gha: add macos-14 (m1, arm64)83479f0ci/gha: add ubuntu-24.04 (current LTS)05d90a3mountinfo: rm unneeded errorlint annotation9c5e9e2Makefile: bump golangci-lint to v1.59.12152420ci/gha: bump actions/checkout to v42ca03f0ci/gha: bump actions/setup-go to v5Updates
github.com/containerd/containerdfrom 1.7.18 to 1.7.20Release notes
Sourced from github.com/containerd/containerd's releases.
... (truncated)
Commits
8fc6bcfMerge pull request #10481 from dmcgowan/prepare-v1.7.207f2d4cdPrepare release notes for v1.7.207eb0501Merge pull request #10413 from austinvazquez/cherry-pick-78421616e0a6ba76ac25...34ea461Merge pull request #10461dims/automated-cherry-pick-of-#836787c908eMerge pull request #10462dims/automated-cherry-pick-of-#9730b06e353Merge pull request #10469dims/automated-cherry-pick-of-#8356209ee4fCRI: An empty DNSConfig != unspecifiedce65228Support for dropping inheritable capabilitiesdf86bddCRI Sbserver: Make PodSandboxStatus friendlier to shim crashes923bb1fMerge pull request #10423 from dims/cri-ttrpc-closed-during-ListPodSandboxStatsUpdates
github.com/moby/sys/sequentialfrom 0.5.0 to 0.6.0Release notes
Sourced from github.com/moby/sys/sequential's releases.
Commits
03b9f8dMerge pull request #94 from thaJeztah/bump_mountinfobdd898emount: update github.com/moby/sys/mountinfo v0.5.0fbd276cMerge pull request #93 from kolyshkin/ci-f35afb7f50Merge pull request #92 from kolyshkin/more-linters9372d68ci: bump Fedora to 359a90d6dFormat code with gofumpt, enable linter85e4bfdMakefile: update golangci-lint to 1.43.0f0fb439.gitattributes: addb016007ci: add unconvert and errorlint linters to golanci6056970Fix errorlint warningsUpdates
github.com/moby/sys/userfrom 0.1.0 to 0.3.0Release notes
Sourced from github.com/moby/sys/user's releases.
... (truncated)
Commits
5447519Merge pull request #145 from thaJeztah/separate_userns370a9eduser: move userns package to separate module, and retract v0.2.086870e7Merge pull request #140 from thaJeztah/integrate_libcontainer_userns5cd502cuser: require go1.21 or highera40602buser/userns: add godoc for packagebc3a8a5libct/userns: implement RunningInUserNS with sync.OnceValuebc0de32libct/userns: make fuzzer Linux-only, and remove stub for uidMapInUserNS333fe31libct/userns: change RunningInUserNS to a wrapper instead of an aliasbb72464remove pre-go1.17 build-tags87e38c8libcontainer/userns: simplify, and separate from "user" package.Updates
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttpfrom 0.52.0 to 0.53.0Release notes
Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.
... (truncated)
Changelog
Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.
Commits
af75717Release v1.28.0/v0.53.0/v0.22.0/v0.8.0/v0.3.0/v0.1.0 (#5847)b6a9271fix(deps): update module github.com/aws/aws-sdk-go to v1.54.13 (#5843)66306feAdd@XSAMand@dmathieuas repository maintainers (#5838)f783d1fUpgrade Go versions in CI (#5845)d6e791cfix(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.58.0 (...efde831Removeotelmongodeprecation while we onboard a Code Owner (#5840)32d3e6afix(deps): update module google.golang.org/grpc to v1.65.0 (#5837)1ce0d1cRevert toolchain addition to autoexport (#5841)53f34f2fix(deps): update module cloud.google.com/go/compute/metadata to v0.4.0 (#5835)56e279efix(deps): update module github.com/aws/aws-sdk-go to v1.54.12 (#5834)Updates
go.opentelemetry.io/otelfrom 1.27.0 to 1.28.0Changelog
Sourced from go.opentelemetry.io/otel's changelog.
Looks like these dependencies are updatable in another way, so this is no longer needed.