This release contains a fix for CVE-2024-41110 / GHSA-v23v-6jw2-98fq
that impacted setups using authorization plugins (AuthZ)
for access control. No other changes are included in this release, and this
release is otherwise identical for users not using AuthZ plugins.
rootless: add Requires=dbus.socket to prevent errors when starting the daemon on a cgroup v2 host with systemd moby/moby#48141
containerd integration: image tag event is now properly emitted when building images with BuildKit moby/moby#48182
CLI: enable shell completion for docker image rm, docker image history, and docker image inspectmoby/moby#5261
CLI: add and improve shell completions for various flags moby/moby#5261
CLI: add OOMScoreAdj to docker service create and docker stackdocker/cli#5274
CLI: add support for DOCKER_CUSTOM_HEADERS environment variable (experimental) docker/cli#5271
CLI: containerd-integration: Fix docker push defaulting the --platform flag to a value of DOCKER_DEFAULT_PLATFORM environment variable on unsupported API versions docker/cli#5248
CLI: fix: context cancellation on login prompt docker/cli#5260
CLI: fix: wait for the container to exit before closing the stream when sending a termination request to the CLI while attached to a container docker/cli#5250
Deprecated
The pkg/rootless/specconv package is deprecated, and will be removed in the next release moby/moby#48185
The pkg/containerfs package is deprecated, and will be removed in the next release moby/moby#48185
The pkg/directory package is deprecated, and will be removed in the next release moby/moby#48185
This release includes support for Redis Community Edition (CE) 7.4.0, ensuring compatibility with the latest features and improvements introduced in Redis CE 7.4.0.
🧰 Maintenance
... (truncated)
Commits
c3610cd cp retracts and bump version to 9.6.1 (#3069)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the gomod-packages group with 7 updates in the / directory:
27.0.3+incompatible27.1.1+incompatible27.0.3+incompatible27.1.1+incompatible0.20.00.20.19.5.49.6.12.2.42.3.00.30.20.30.30.30.20.30.3Updates
github.com/docker/clifrom 27.0.3+incompatible to 27.1.1+incompatibleCommits
6312585Merge pull request #5274 from thaJeztah/27.1_backport_compose_oomc599566Allow for OomScoreAdjfb19defMerge pull request #5271 from thaJeztah/27.1_backport_custom_headers_env_varbccd478Merge pull request #5270 from thaJeztah/27.1_backport_test_spring_cleaning8992378add support for DOCKER_CUSTOM_HEADERS env-var (experimental)f90273cMerge pull request #5269 from thaJeztah/27.1_backport_add_macos_apple_siliconca9636atest spring-cleaningad47d2agha: update to macOS 13, add macOS 14 arm64 (Apple Silicon M1)a2a0fb7Merge pull request #5263 from thaJeztah/27.1_backport_relax_pr_check16d6c90Merge pull request #5265 from thaJeztah/27.1_backport_bump_buildx_composeUpdates
github.com/docker/dockerfrom 27.0.3+incompatible to 27.1.1+incompatibleRelease notes
Sourced from github.com/docker/docker's releases.
... (truncated)
Commits
cc13f95Merge commit from forka21b1a2Merge pull request #48196 from thaJeztah/27.1_backport_vendor_containerd_1.7.201bc907cvendor: github.com/containerd/containerd v1.7.204bb4575Merge pull request #48191 from thaJeztah/27.1_backport_update_containerd_bina...df7f275Merge pull request #48195 from thaJeztah/27.1_backport_fix_pr_title_check1c0885dgha: check-pr-branch: fix branch check regressionfb3ec9fMerge pull request #48187 from thaJeztah/27.1_backport_bump_buildx_composeed83a9eupdate containerd binary to v1.7.2071b59bfMerge pull request #48178 from thaJeztah/27.1_backport_relax_pr_checkf8f926bMerge pull request #48185 from thaJeztah/27.1_backport_internalize_pkg_directoryUpdates
github.com/google/go-containerregistryfrom 0.20.0 to 0.20.1Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
c3d1dccCreateremote.Push(#1978)Updates
github.com/redis/go-redis/v9from 9.5.4 to 9.6.1Release notes
Sourced from github.com/redis/go-redis/v9's releases.
... (truncated)
Commits
c3610cdcp retracts and bump version to 9.6.1 (#3069)b0b94e7Change CI to 7.4.0-RC2 (#3070)44ba2eefeat: reduce the type assertion of CheckConn (#3066)9cfeb30Bump version of go-redis to 9.6.0 (#3059)49bfbf2chore(deps): bump golangci/golangci-lint-action from 4 to 6 (#2993)2c146dcAvoid unnecessary retry delay following MOVED and ASK redirection (#3048)233ff45add test for tls connCheck #3025 (#3047)5c9c468Support Hash-field expiration commands in Pipeline & Fix HExpire HExpireWithA...1a0a68fSupport Hash-field expiration for 7.4 CE RC2 (#3040)27dd84cfix node routing in slotClosestNode (#3043)Updates
github.com/sigstore/cosign/v2from 2.2.4 to 2.3.0Release notes
Sourced from github.com/sigstore/cosign/v2's releases.
Changelog
Sourced from github.com/sigstore/cosign/v2's changelog.
Commits
deed363chore(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0 (#3792)c6f89f8chore(deps): bump github.com/buildkite/agent/v3 from 3.74.1 to 3.75.1 (#3793)aeba473Add CHANGELOG for v2.3.0 (#3789)20d4724chore(deps): bump github.com/google/go-containerregistry (#3790)4684fd6chore(deps): bump the gomod group with 5 updates (#3780)3c6c5c9chore(deps): bump github.com/sigstore/fulcio from 1.4.5 to 1.5.1 (#3784)05026eechore(deps): bump github.com/google/go-containerregistry (#3783)f9270c0chore(deps): bump google.golang.org/api from 0.187.0 to 0.188.0 (#3782)4fd699cchore(deps): bump go.step.sm/crypto from 0.48.1 to 0.50.0 (#3781)13d3a56chore(deps): bump the actions group across 1 directory with 2 updates (#3785)Updates
k8s.io/apifrom 0.30.2 to 0.30.3Commits
83bdab1Update dependencies to v0.30.3 tagUpdates
k8s.io/apimachineryfrom 0.30.2 to 0.30.3Commits
Updates
k8s.io/client-gofrom 0.30.2 to 0.30.3Commits
ece8c00Update dependencies to v0.30.3 tagDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show