docker/compose
1
0
Fork 0
mirror of https://github.com/docker/compose.git synced 2026-10-12 02:13:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,210 Commits 35 Branches 307 Tags
main
Commit Graph
292 Commits
Author SHA1 Message Date
Sebastiaan van Stijn b9d8a1a3e2 CODEOWNERS: add compose-reviewers 
Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-07-07 10:39:47 +02:00
CrazyMax a666b63a3c ci: fix docs-upstream workflow 
Signed-off-by: CrazyMax <[email protected]>
 2026-07-06 17:29:12 +02:00
CrazyMax be7b72e0ef fix zizmor findings 
Signed-off-by: CrazyMax <[email protected]>
 2026-07-06 17:11:24 +02:00
CrazyMax 50bd8945a1 chore: setup dependabot for github actions 
Signed-off-by: CrazyMax <[email protected]>
 2026-07-06 17:11:24 +02:00
CrazyMax 1c9aa35c21 ci: zizmor workflow 
Signed-off-by: CrazyMax <[email protected]>
 2026-07-06 17:11:24 +02:00
Sebastiaan van Stijn 26550b0d1f ci: remove unused desktop-edge-test workflow 
It's not currently used, and we can probably trigger this from the
desktop repository itself.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-07-06 11:18:38 +02:00
Derek Misler 81e420139a ci: add concurrency group to pr-review-trigger to prevent duplicate reviews 
Signed-off-by: Derek Misler <[email protected]>
 2026-07-06 10:25:22 +02:00
Docker Agent a3c1c0dc2e chore: migrate to docker-agent-action v2.0.1 
- Bump docker-agent-action to v2.0.1 (e96a4bb)
- Add review_requested to pr-review-trigger.yml pull_request types

Signed-off-by: Docker Agent <[email protected]>
 2026-06-24 14:51:31 +02:00
Docker Agent 899e88475a chore: migrate cagent-action to docker-agent-action (v2.0.0) 
Signed-off-by: Derek Misler <[email protected]>
 2026-06-23 22:42:46 +02:00
Sebastiaan van Stijn 79d63a8b84 gha: update docs-upstream to pin workflows by sha 
This workflow was updated in 56e2dba366
but it looks to have pinned to a version before the workflows were
pinned; https://github.com/docker/docs/blob/464a44a6e72b37cf1755968477e242a5e5f6ef7d/.github/workflows/validate-upstream.yml

This patch updates the workflow to a version that uses pinned actions;
https://github.com/docker/docs/blob/00aefd5eae73898c4d3bcd7a6fe95a039293706b/.github/workflows/validate-upstream.yml

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-06-09 17:57:47 +02:00
securityeng-bot[bot] f3969cdc7f ci: add Dependabot cooldown 2026-06-03 19:18:53 +02:00
derekmisler 60584e72b2 chore: update cagent-action to v1.4.4 
Signed-off-by: Derek Misler <[email protected]>
 2026-05-05 10:43:37 +02:00
Guillaume Lours 9fd9dc7ca9 ci: remove unused e2e job from merge workflow 
The e2e job targets desktop runners (desktop-windows, desktop-macos,
desktop-m1) that are not configured anymore for this project.

Signed-off-by: Guillaume Lours <[email protected]>
 2026-04-16 09:23:06 +02:00
Guillaume Lours 977a4310f9 remove 'provenance' attribute' 
Signed-off-by: Guillaume Lours <[email protected]>
 2026-04-15 15:46:06 +02:00
Guillaume Lours 7a97400bea Fix typo in SECURITY.md 
Signed-off-by: Guillaume Lours <[email protected]>
 2026-04-15 10:38:54 +02:00
Guillaume Lours d518da2419 build and push Docker Desktop module image on release 
Add workflow to build and push docker/compose-desktop-module image
  to Docker Hub on version tag push, used by Docker Desktop's update
  system to deliver the Compose CLI plugin.

Signed-off-by: Guillaume Lours <[email protected]>
 2026-04-10 16:12:09 +02:00
Guillaume LoursandClaude Opus 4.6 7aeb90c9a3 Skip PR review workflow for Dependabot PRs 
Dependabot PRs don't have access to the secrets required by the
cagent-action reusable workflow (CAGENT_ORG_MEMBERSHIP_TOKEN), causing
the org membership check to fail with "github-token not supplied".

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Signed-off-by: Guillaume Lours <[email protected]>
 2026-03-31 10:58:45 +02:00
Guillaume LoursandClaude Opus 4.6 0de456bc76 chore: bump GitHub Actions to latest versions 
- actions/checkout v4 -> v6
- actions/upload-artifact v4/v6 -> v7
- actions/download-artifact v4/v7 -> v8
- docker/setup-buildx-action v3 -> v4
- docker/bake-action v6 -> v7
- actions/stale v9 -> v10
- actions/create-github-app-token v1 -> v3
- actions/github-script v7 -> v8
- ossf/scorecard-action v2.4.0 -> v2.4.3
- ncipollo/release-action v1.10.0 -> v1.21.0
- mxschmitt/action-tmate v3.11 -> v3.23
- codecov/codecov-action, test-summary/action, github/codeql-action: bump to latest patch

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Signed-off-by: Guillaume Lours <[email protected]>
 2026-03-25 10:19:36 +01:00
Guillaume Lours 56e2dba366 chore: pin GitHub Actions to commit SHA, remove pr-review workflow 
- Pin all action references to full commit SHA instead of mutable
  version tags. Tag retained as inline comment for readability.
- Remove pr-review.yml workflow.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Signed-off-by: Guillaume Lours <[email protected]>

# Conflicts:
#	.github/workflows/pr-review.yml
 2026-03-25 10:19:36 +01:00
Derek MislerandCopilot 46d75d0bea Update .github/workflows/pr-review.yml 
Co-authored-by: Copilot <[email protected]>
Signed-off-by: Derek Misler <[email protected]>
 2026-03-25 09:52:29 +01:00
Derek MislerandCopilot bd351d7f96 Update .github/workflows/pr-review.yml 
Co-authored-by: Copilot <[email protected]>
Signed-off-by: Derek Misler <[email protected]>
 2026-03-25 09:52:29 +01:00
Derek Misler ece1886824 update cagent-action to latest (with better permissions) 
Signed-off-by: Derek Misler <[email protected]>
 2026-03-25 09:52:29 +01:00
Guillaume Lours 2b9f60ba58 Add AI-powered PR review workflow via docker/cagent-action 
Introduce a GitHub Actions workflow that triggers an AI-powered code
  review on pull requests using docker/cagent-action's reusable workflow.

  - Restrict comment-triggered runs to OWNER/MEMBER/COLLABORATOR
  - Gate on github.repository to prevent execution on forks
  - Filter out draft PRs and bot actors
  - Only trigger on PR comments, not plain issue comments
  - Serialize reviews per PR via concurrency group

Signed-off-by: Guillaume Lours <[email protected]>
 2026-03-23 17:38:46 +01:00
maks2134 b043368028 Update docker/github-builder to v1.4.0 
Fixes template validation error in CI by updating to latest stable version
of docker/github-builder workflow. This resolves the JToken parsing error
in bake.yml@v1 that was causing bin-image-test to fail.

Signed-off-by: maks2134 <[email protected]>
 2026-03-18 16:23:34 +01:00
CrazyMax af0029afe1 ci: use bin-image edge tag directly for e2e tests 
Signed-off-by: CrazyMax <[email protected]>
 2026-02-03 15:11:49 +01:00
CrazyMax b76feb66e1 ci: fix missing dependency on bin-image job 
Signed-off-by: CrazyMax <[email protected]>
 2026-02-03 15:11:49 +01:00
CrazyMax 9dc7f1e70c ci: use docker/github-builder to build, sign and push bin image 
Signed-off-by: CrazyMax <[email protected]>
 2026-02-03 14:19:21 +01:00
CrazyMax 03205124fe ci: use docker/github-builder to build, sign binaries 
Signed-off-by: CrazyMax <[email protected]>
 2026-02-03 14:19:21 +01:00
Salman Muin Kayser Chishti d91fc63813 Upgrade GitHub Actions to latest versions 
Signed-off-by: Salman Muin Kayser Chishti <[email protected]>
 2026-01-23 15:34:48 +01:00
Austin Vazquez 359d2f076e ci: use .go-version file for actions/setup-go 
Signed-off-by: Austin Vazquez <[email protected]>
 2025-12-09 20:33:00 +01:00
Austin Vazquez c9e0d83e14 ci: upgrade actions/setup-go from v5 to v6 
Signed-off-by: Austin Vazquez <[email protected]>
 2025-12-09 20:33:00 +01:00
Sebastiaan van Stijn f2b14fe1aa gha: use custom names for matrix 
Manually enumerate the combinations ((plugin|standalone), (version))
so that we can assign a predictable name ("stable", "oldstable") and
prevent having to update the branch-protection rules for each update
to mark the tests as required.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2025-11-16 14:42:03 +01:00
Sebastiaan van Stijn bd2257b6d1 gha: test against docker v29, v28 
Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2025-11-16 14:42:03 +01:00
Sebastiaan van Stijn 9ded1684cd gha: update test-matrix: remove docker 26.x 
- Mirantis Container Runtime (MCR) 23.0 reached EOL, and the next LTS
  version of MCR is 25.x, but download.docker.com does not have 25.x
  packages for the latest Ubuntu release.
- Docker 26.x reached EOL and is no longer maintained

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2025-09-29 14:27:41 +02:00
Nicolas De Loof 5fc2b2a71c fix yaml indentation 
Signed-off-by: Nicolas De Loof <[email protected]>
 2025-07-18 11:59:56 +02:00
Nicolas De Loof b1cd40c316 swarm 
Signed-off-by: Nicolas De Loof <[email protected]>
 2025-07-18 11:58:25 +02:00
Nicolas De Loof ee1b1e0a93 run docker model configure 
Signed-off-by: Nicolas De Loof <[email protected]>
 2025-06-30 19:22:35 +02:00
Nicolas De Loof 26e46d7cc8 e2e tests in CI 
Signed-off-by: Nicolas De Loof <[email protected]>
 2025-06-30 19:22:35 +02:00
Guillaume Lours 5a063b7510 fix provider concurrent environment map accesses 
Signed-off-by: Guillaume Lours <[email protected]>
 2025-06-30 19:07:10 +02:00
Nicolas De Loof 93b597ccec remove Docker EULA licensing which isn't relevant since Docker switched to a subscription model 
Signed-off-by: Nicolas De Loof <[email protected]>
 2025-05-14 15:02:13 +02:00
Guillaume Lours 51907d9f72 fix zizmor security alerts on GHA workflows 
Signed-off-by: Guillaume Lours <[email protected]>
 2025-04-11 16:45:19 +02:00
CrazyMax 29e642e232 ci(bin-image): free disk space 
Signed-off-by: CrazyMax <[email protected]>
 2025-04-10 17:01:52 +02:00
Sebastiaan van Stijn 49575ef499 gha: add docker engine v28.x to the test-matrix 
currently v28.0.0-rc.1

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2025-02-09 17:38:01 +01:00
CrazyMax f160333e9e ci: use main branch for docs upstream validation workflow 
Signed-off-by: CrazyMax <[email protected]>
 2025-01-22 19:27:02 +01:00
Guillaume Lours bd2b49a1cf add codeowners file 
Signed-off-by: Guillaume Lours <[email protected]>
 2025-01-20 14:09:53 +01:00
CrazyMax 433a60e122 ci: fix provenance for binaries and generate sbom 
Signed-off-by: CrazyMax <[email protected]>
 2025-01-20 09:46:05 +01:00
Guillaume Lours ef1931c8de add missing tag for build during merge workflow 
Signed-off-by: Guillaume Lours <[email protected]>
 2025-01-15 18:26:03 +01:00
Guillaume Lours 9be7a3c9a1 ci: re-use local source to build binary images 
Signed-off-by: Guillaume Lours <[email protected]>
 2025-01-15 18:02:23 +01:00
CrazyMax 666996bee2 ci: use local source for binary builds 
Signed-off-by: CrazyMax <[email protected]>
 2025-01-15 16:50:20 +01:00
CrazyMax 083f676214 ci: update bake-action to v6 
Signed-off-by: CrazyMax <[email protected]>
 2025-01-13 12:41:14 +01:00