service/customer-profiles: Updates service API and documentation
service/ec2: Updates service API
Fix EC2 multi-protocol info in models.
service/qbusiness: Updates service API and documentation
service/ssm: Updates service API
Add sensitive trait to SSM IPAddress property for CloudTrail redaction
service/workspaces-web: Updates service API and documentation
Release v1.54.6 (2024-06-20)
Service Client Updates
service/bedrock-runtime: Updates service API and documentation
service/codeartifact: Updates service API and documentation
service/compute-optimizer: Updates service API and documentation
service/cost-optimization-hub: Updates service API, documentation, and waiters
service/dynamodb: Updates service API, documentation, waiters, paginators, and examples
Doc-only update for DynamoDB. Fixed Important note in 6 Global table APIs - CreateGlobalTable, DescribeGlobalTable, DescribeGlobalTableSettings, ListGlobalTables, UpdateGlobalTable, and UpdateGlobalTableSettings.
service/glue: Updates service paginators
Fix Glue paginators for Jobs, JobRuns, Triggers, Blueprints and Workflows.
service/ivs-realtime: Updates service API, documentation, and waiters
service/sagemaker: Updates service API and documentation
Adds support for model references in Hub service, and adds support for cross-account access of Hubs
service/securityhub: Updates service API and documentation
containerd image store: Add --platform flag to docker image push and improve the default behavior when not all platforms of the multi-platform image are available locally. docker/cli#4984, moby/moby#47679
Add support to docker stack deploy for driver_opts in a service's networks. docker/cli#5125
Consider additional /usr/local/libexec and /usr/libexec paths when looking up the userland proxy binaries by a name with a docker- prefix. moby/moby#47804
Bug fixes and enhancements
*client.Client instances are now always safe for concurrent use by multiple goroutines. Previously, this could lead to data races when the WithAPIVersionNegotiation() option is used. moby/moby#47961
Fix a bug causing the Docker CLI to leak Unix sockets in $TMPDIR in some cases. docker/cli#5146
Don't ignore a custom seccomp profile when used in conjunction with --privileged. moby/moby#47500
rootless: overlay2: support native overlay diff when using rootless-mode with Linux kernel version 5.11 and later. moby/moby#47605
Fix the StartInterval default value of healthcheck to reflect the documented value of 5s. moby/moby#47799
Fix docker save and docker load not ending on the daemon side when the operation was cancelled by the user, for example with Ctrl+C. moby/moby#47629
The StartedAt property of containers is now recorded before container startup, guaranteeing that the StartedAt is always before FinishedAt. moby/moby#47003
The internal DNS resolver used by Windows containers on Windows now forwards requests to external DNS servers by default. This enables nslookup to resolve external hostnames. This behaviour can be disabled via daemon.json, using "features": { "windows-dns-proxy": false }. The configuration option will be removed in a future release. moby/moby#47826
Print a warning when the CLI does not have permissions to read the configuration file. docker/cli#5077
Fix a goroutine and file-descriptor leak on container attach. moby/moby#45052
Clear the networking state of all stopped or dead containers during daemon start-up. moby/moby#47984
Write volume options JSON atomically to avoid "invalid JSON" errors after system crash. moby/moby#48034
Allow multiple macvlan networks with the same parent. moby/moby#47318
Allow BuildKit to be used on Windows daemons that advertise it. docker/cli#5178
Networking
Allow sysctls to be set per-interface during container creation and network connection. moby/moby#47686
In a future release, this will be the only way to set per-interface sysctl options.
For example, on the command line in a docker run command,--network mynet --sysctl net.ipv4.conf.eth0.log_martians=1 will be rejected.
Instead, you must use --network name=mynet,driver-opt=com.docker.network.endpoint.sysctls=net.ipv4.conf.IFNAME.log_martians=1.
IPv6
ip6tables is no longer experimental. You may remove the experimental configuration option and continue to use IPv6, if it is not required by any other features.
ip6tables is now enabled for Linux bridge networks by default. moby/moby#47747
This makes IPv4 and IPv6 behaviors consistent with each other, and reduces the risk that IPv6-enabled containers are inadvertently exposed to the network.
There is no impact if you are running Docker Engine with ip6tables enabled (new default).
If you are using an IPv6-enabled bridge network without ip6tables, this is likely a breaking change. Only published container ports (-p or --publish) are accessible from outside the Docker bridge network, and outgoing connections masquerade as the host.
To restore the behavior of earlier releases, no ip6tables at all, set "ip6tables": false in daemon.json, or use the CLI option --ip6tables=false. Alternatively, leave ip6tables enabled, publish ports, and enable direct routing.
With ip6tables enabled, if ip6tables is not functional on your host, Docker Engine will start but it will not be possible to create an IPv6-enabled network.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the dependabot group with 4 updates in the / directory: github.com/aws/aws-sdk-go, github.com/docker/docker, github.com/go-test/deep and google.golang.org/api.
Updates
github.com/aws/aws-sdk-go
from 1.54.5 to 1.54.7Release notes
Sourced from github.com/aws/aws-sdk-go's releases.
Commits
33c5946
Release v1.54.7 (2024-06-24) (#5295)38baa50
Merge pull request #5294 from aws/fix-opsworks7ca485f
remove opsworks smoke test9bdfe74
Release v1.54.6 (2024-06-20) (#5292)Updates
github.com/docker/docker
from 27.0.0+incompatible to 27.0.1+incompatibleRelease notes
Sourced from github.com/docker/docker's releases.
... (truncated)
Commits
Updates
github.com/go-test/deep
from 1.1.0 to 1.1.1Release notes
Sourced from github.com/go-test/deep's releases.
Changelog
Sourced from github.com/go-test/deep's changelog.
Commits
9e863ff
Release v1.1.1dc5b2f6
Update SECURITY.md185886d
Restore 100% test coverage (NilPointersAreZero case)47ae1b8
Merge pull request #61 from seveas/nil-pointers-are-zero93c35ac
Merge branch 'master' into nil-pointers-are-zero2982c5c
Update test matrix to latest 3 Go versions2b8252e
Add an option to consider nil pointers to be equivalent to zero values95fb3b1
Merge pull request #58 from bartleyg/patch-11127c84
fix copy pasta test7ff4e92
Update changelog for v1.1.0Updates
google.golang.org/api
from 0.184.0 to 0.185.0Release notes
Sourced from google.golang.org/api's releases.
Changelog
Sourced from google.golang.org/api's changelog.
Commits
e732ee3
chore(main): release 0.185.0 (#2635)0c868b2
feat(all): auto-regenerate discovery clients (#2638)324ae13
chore(all): update all (#2640)51ff8a4
feat(all): auto-regenerate discovery clients (#2636)ea513cb
fix(internal/gensupport): update shouldRetry for GCS uploads (#2634)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show