docker/compose
1
0
Fork 0
mirror of https://github.com/docker/compose.git synced 2026-10-12 02:13:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,829 Commits 35 Branches 307 Tags
f4bc599fdb0ef5cea2bead65bc003661f28bfabc
Commit Graph
892 Commits
Author SHA1 Message Date
dependabot[bot] dc8e27bea2 build(deps): bump github.com/docker/cli 
Bumps [github.com/docker/cli](https://github.com/docker/cli) from 29.6.0+incompatible to 29.6.1+incompatible.
- [Commits](https://github.com/docker/cli/compare/v29.6.0...v29.6.1)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.6.1+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-07-06 10:45:35 +02:00
dependabot[bot] 077d09592f build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to 4.0.0-rc.6 
Bumps [go.yaml.in/yaml/v4](https://github.com/yaml/go-yaml) from 4.0.0-rc.4 to 4.0.0-rc.6.
- [Commits](https://github.com/yaml/go-yaml/compare/v4.0.0-rc.4...v4.0.0-rc.6)

---
updated-dependencies:
- dependency-name: go.yaml.in/yaml/v4
  dependency-version: 4.0.0-rc.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-07-06 10:30:27 +02:00
Sebastiaan van Stijn 133914bc46 build(deps): bump github.com/moby/sys/user to v0.4.1 
- user: prevent possible DoS via unbounded parsing of user and group
  database files in GHSA-mjcv-p78q-w5fw. This fixes a similar issue
  as CVE-2026-47262 in containerd.
- user: prevent falling back to looking up numeric usernames
  Improve handling of numeric user/group to prevent looking up numeric
  values as usernames. This fixes a similar issue as [CVE-2026-46680] in
  containerd.
- user: update minimum go version to go1.18
- assorted testing and linting fixes.

[CVE-2026-46680]: https://github.com/advisories/GHSA-fqw6-gf59-qr4w

full diff: https://github.com/moby/sys/compare/user/v0.4.0...user/v0.4.1

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-07-06 10:12:18 +02:00
dependabot[bot] bab62f4d6f build(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1 
Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.31.0 to 0.31.1.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](https://github.com/moby/buildkit/compare/v0.31.0...v0.31.1)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-07-06 10:04:43 +02:00
Guillaume Lours a2fb49dc68 bump compose-go to version v2.13.0 
Signed-off-by: Guillaume Lours <[email protected]>
 2026-06-29 17:30:09 +02:00
Guillaume Lours 913b500140 bump compose-go to version v2.12.1 
Signed-off-by: Guillaume Lours <[email protected]>
 2026-06-23 10:35:10 +02:00
Sebastiaan van Stijn 9b55a6e9c1 chore(deps): github.com/docker/buildx v0.35.0, buildkit v0.31.0 
Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-06-22 09:00:18 +02:00
Sebastiaan van Stijn 81867eafa5 chore(deps): github.com/docker/cli v29.6.0 
Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-06-22 09:00:18 +02:00
Sebastiaan van Stijn fcd38aa0f6 chore(deps): go.opentelemetry.io/otel v1.44.0, go.opentelemetry.io/contrib v0.69.0 
Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-06-22 09:00:18 +02:00
Sebastiaan van Stijn 5d0f6e2ff3 chore(deps): bump github.com/golang-jwt/jwt/v5 to v5.3.1 
full diff: https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-06-19 17:06:10 +02:00
Sebastiaan van Stijn 6042df78f0 chore(deps): bump github.com/containerd/containerd/v2 to v2.2.5 
- full diff: https://github.com/containerd/containerd/compare/v2.2.4...v2.2.5
- release notes: https://github.com/containerd/containerd/releases/tag/v2.2.5

The fifth patch release for containerd 2.2 contains various fixes
and updates including security patches.

-  CVE-2026-50195 / [GHSA-cvxm-645q-p574] CRI: checkpoint import allows local image tag poisoning
-  CVE-2026-53488 / [GHSA-xhf5-7wjv-pqxp] CRI: image-config LABEL flows to host-root command execution from an image pull
-  CVE-2026-53492 / [GHSA-33vj-92qq-66hc] CRI: CDI annotation smuggling during CRI checkpoint restore
-  CVE-2026-53489 / [GHSA-rgh6-rfwx-v388] CRI: Arbitrary host file read via symlink following in CRI checkpoint restore
-  CVE-2026-47262 / [GHSA-jpcc-p29g-p8mq] containerd image-triggered runtime DoS via unbounded group parsing

[GHSA-cvxm-645q-p574]: https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574
[GHSA-xhf5-7wjv-pqxp]: https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp
[GHSA-33vj-92qq-66hc]: https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc
[GHSA-rgh6-rfwx-v388]: https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388
[GHSA-jpcc-p29g-p8mq]: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-06-19 11:24:37 +02:00
dependabot[bot] f82a21324a build(deps): bump github.com/containerd/containerd/v2 
Bumps the go_modules group with 1 update in the / directory: [github.com/containerd/containerd/v2](https://github.com/containerd/containerd).


Updates `github.com/containerd/containerd/v2` from 2.2.3 to 2.2.4
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v2.2.3...v2.2.4)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.2.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-06-15 14:34:43 +02:00
Sebastiaan van Stijn cd4f21647d chore(deps): golang.org/x/crypto v0.53.0 
golang.org/x/crypto v0.52.0 has various fixes for vulnerabilities.
These do NOT impact docker compose, but may show up in vulnerability
scanners;

    govulncheck --version
    Go: go1.26.4
    Scanner: [email protected]
    DB: https://vuln.go.dev
    DB updated: 2026-06-02 21:39:47 +0000 UTC

    govulncheck -show verbose ./...
    Fetching vulnerabilities from the database...

    Checking the code against the vulnerabilities...

    === Package Results ===

    Vulnerability #1: GO-2026-5023
        Invoking VerifiedPublicKeyCallback permissions skip enforcement in
        golang.org/x/crypto/ssh
      More info: https://pkg.go.dev/vuln/GO-2026-5023
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #2: GO-2026-5020
        Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
      More info: https://pkg.go.dev/vuln/GO-2026-5020
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #3: GO-2026-5019
        Invoking bypass of FIDO/U2F security keys physical interaction in
        golang.org/x/crypto/ssh
      More info: https://pkg.go.dev/vuln/GO-2026-5019
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #4: GO-2026-5018
        Invoking pathological RSA/DSA parameters may cause DoS in
        golang.org/x/crypto/ssh
      More info: https://pkg.go.dev/vuln/GO-2026-5018
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #5: GO-2026-5017
        Invoking client can cause server deadlock on unexpected responses in
        golang.org/x/crypto/ssh
      More info: https://pkg.go.dev/vuln/GO-2026-5017
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #6: GO-2026-5016
        Invoking memory leak when rejecting channels can lead to DoS in
        golang.org/x/crypto/ssh
      More info: https://pkg.go.dev/vuln/GO-2026-5016
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #7: GO-2026-5015
        Invoking server panic during CheckHostKey/Authenticate in
        golang.org/x/crypto/ssh
      More info: https://pkg.go.dev/vuln/GO-2026-5015
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #8: GO-2026-5014
        Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
      More info: https://pkg.go.dev/vuln/GO-2026-5014
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #9: GO-2026-5013
        Invoking byte arithmetic causes underflow and panic in

        golang.org/x/crypto/ssh
      More info: https://pkg.go.dev/vuln/GO-2026-5013
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    === Module Results ===

    Vulnerability #1: GO-2026-5033
        Invoking pathological inputs can lead to client panic in
        golang.org/x/crypto/ssh/agent
      More info: https://pkg.go.dev/vuln/GO-2026-5033
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #2: GO-2026-5021
        Invoking auth bypass via unenforced @revoked status in
        golang.org/x/crypto/ssh/knownhosts
      More info: https://pkg.go.dev/vuln/GO-2026-5021
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #3: GO-2026-5006
        Invoking agent constraints dropped when forwarding keys in
        golang.org/x/crypto/ssh/agent
      More info: https://pkg.go.dev/vuln/GO-2026-5006
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Vulnerability #4: GO-2026-5005
        Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent
      More info: https://pkg.go.dev/vuln/GO-2026-5005
      Module: golang.org/x/crypto
        Found in: golang.org/x/[email protected].0
        Fixed in: golang.org/x/[email protected].0

    Your code is affected by 2 vulnerabilities from 1 module.
    This scan also found 9 vulnerabilities in packages you import and 4
    vulnerabilities in modules you require, but your code doesn't appear to call
    these vulnerabilities.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-06-15 13:22:55 +02:00
dependabot[bot] 0094ece2e3 build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.45.0 to 0.46.0.
- [Commits](https://github.com/golang/sys/compare/v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-06-15 12:59:34 +02:00
Sebastiaan van Stijn df75f82a6b chore(deps): github.com/docker/buildx v0.34.1, buildkit v0.30.0 
Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-06-15 12:45:57 +02:00
Sebastiaan van Stijn cadb8dc6d9 chore(deps): github.com/docker/cli v29.5.3 
Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-06-15 12:45:57 +02:00
dependabot[bot] 86744b571c build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.20.0 to 0.21.0.
- [Commits](https://github.com/golang/sync/compare/v0.20.0...v0.21.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-06-15 12:10:37 +02:00
Sebastiaan van Stijn 8cf557ad06 chore(deps): github.com/containerd/typeurl/v2 v2.3.0 
full diff: https://github.com/containerd/typeurl/compare/v2.2.3...v2.3.0

removes the github.com/gogo/protobuf dependency

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-06-15 11:56:24 +02:00
dependabot[bot] 40a2262a0f build(deps): bump github.com/docker/cli 
Bumps [github.com/docker/cli](https://github.com/docker/cli) from 29.5.1+incompatible to 29.5.2+incompatible.
- [Commits](https://github.com/docker/cli/compare/v29.5.1...v29.5.2)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.5.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-05-21 16:44:46 +02:00
dependabot[bot] 4732a2ed20 build(deps): bump golang.org/x/sys from 0.42.0 to 0.44.0 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.42.0 to 0.44.0.
- [Commits](https://github.com/golang/sys/compare/v0.42.0...v0.44.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-05-20 16:45:12 +02:00
dependabot[bot] 5fb09a9b85 build(deps): bump github.com/docker/cli 
Bumps [github.com/docker/cli](https://github.com/docker/cli) from 29.4.3+incompatible to 29.5.1+incompatible.
- [Commits](https://github.com/docker/cli/compare/v29.4.3...v29.5.1)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.5.1+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-05-20 16:29:48 +02:00
dependabot[bot] 32c78147ba build(deps): bump github.com/compose-spec/compose-go/v2 
Bumps [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) from 2.10.2 to 2.11.0.
- [Release notes](https://github.com/compose-spec/compose-go/releases)
- [Commits](https://github.com/compose-spec/compose-go/compare/v2.10.2...v2.11.0)

---
updated-dependencies:
- dependency-name: github.com/compose-spec/compose-go/v2
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-05-20 16:16:28 +02:00
dependabot[bot] 0e25711caa build(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.0 to 1.81.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.81.0...v1.81.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-05-20 15:45:40 +02:00
dependabot[bot] 4f69a8c997 build(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.80.0 to 1.81.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-05-07 14:42:07 +02:00
dependabot[bot] 9581337d2d build(deps): bump github.com/docker/cli 
Bumps [github.com/docker/cli](https://github.com/docker/cli) from 29.4.2+incompatible to 29.4.3+incompatible.
- [Commits](https://github.com/docker/cli/compare/v29.4.2...v29.4.3)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.4.3+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-05-07 14:01:30 +02:00
dependabot[bot] e1267ec108 build(deps): bump github.com/moby/moby/client from 0.4.0 to 0.4.1 
Bumps [github.com/moby/moby/client](https://github.com/moby/moby) from 0.4.0 to 0.4.1.
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.4.1/CHANGELOG.md)
- [Commits](https://github.com/moby/moby/compare/v0.4.0...v0.4.1)

---
updated-dependencies:
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-05-07 10:41:01 +02:00
dependabot[bot] 0fcbaff454 build(deps): bump github.com/docker/cli 
Bumps [github.com/docker/cli](https://github.com/docker/cli) from 29.4.0+incompatible to 29.4.2+incompatible.
- [Commits](https://github.com/docker/cli/compare/v29.4.0...v29.4.2)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.4.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-05-07 10:13:55 +02:00
dependabot[bot] baaaaa3ff5 build(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 
Bumps [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords) from 1.0.12 to 1.0.13.
- [Commits](https://github.com/mattn/go-shellwords/compare/v1.0.12...v1.0.13)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-shellwords
  dependency-version: 1.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-16 09:25:55 +02:00
dependabot[bot] 6ed7625d43 build(deps): bump github.com/containerd/containerd/v2 
Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v2.2.2...v2.2.3)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-15 11:35:57 +02:00
Guillaume Lours ba417e4392 use new moby/moby modules instead of docker/docker dependency 
Signed-off-by: Guillaume Lours <[email protected]>
 2026-04-08 08:50:50 +02:00
Guillaume Lours 9085f7bda1 bump compose-go to version v2.10.2 
Signed-off-by: Guillaume Lours <[email protected]>
 2026-04-08 08:50:04 +02:00
Sebastiaan van Stijn 89e3517f29 build(deps): bump github.com/docker/cli v29.4.0 
full diff: https://github.com/docker/cli/compare/v29.3.1...v29.4.0

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-04-07 12:21:18 +02:00
Sebastiaan van Stijn d1296c346d build(deps): github.com/moby/moby/client v0.4.0, moby/api v1.54.1 
Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-04-03 16:53:26 +02:00
dependabot[bot] c1aefc74c8 build(deps): bump github.com/containerd/platforms 
Bumps [github.com/containerd/platforms](https://github.com/containerd/platforms) from 1.0.0-rc.3 to 1.0.0-rc.4.
- [Release notes](https://github.com/containerd/platforms/releases)
- [Commits](https://github.com/containerd/platforms/compare/v1.0.0-rc.3...v1.0.0-rc.4)

---
updated-dependencies:
- dependency-name: github.com/containerd/platforms
  dependency-version: 1.0.0-rc.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-02 21:32:33 +02:00
dependabot[bot] 148ad64eea build(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.3 to 1.80.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.3...v1.80.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-04-02 21:17:16 +02:00
Sebastiaan van Stijn 3ecc082946 build(deps): bump github.com/docker/buildx v0.33.0, buildkit v0.29.0 
Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-04-01 08:48:39 +02:00
Sebastiaan van Stijn 92a7ac1fa2 fix mixed assertion libraries in tests 
Before this, assertion libraries were mixed, sometimes
even in the same file.

    git grep -l '"gotest.tools/v3/' | wc -l
    75
    git grep -l '"github.com/stretchr/testify' | wc -l
    24

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-03-31 17:32:51 +02:00
dependabot[bot] 3d2d03cd39 build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 
Bumps [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/hashicorp/go-version/releases)
- [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/go-version/compare/v1.8.0...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-version
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-31 11:14:29 +02:00
dependabot[bot] fa9762b15d build(deps): bump github.com/docker/cli 
Bumps [github.com/docker/cli](https://github.com/docker/cli) from 29.2.1+incompatible to 29.3.1+incompatible.
- [Commits](https://github.com/docker/cli/compare/v29.2.1...v29.3.1)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.3.1+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-30 10:35:59 +02:00
Sebastiaan van Stijn 5bbdd239df pkg/compose: fix TestRunHook_ConsoleSize on macOS 
containerd/console is broken on macOS, and panics; use creack/pty
instead for this test.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-03-30 09:43:35 +02:00
Guillaume LoursandClaude Opus 4.6 ef86a6ef0f build(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.42.0 
Fixes CVE-2026-24051 (PATH hijacking in otel SDK).
Bumps all otel packages to v1.42.0 for consistency.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Signed-off-by: Guillaume Lours <[email protected]>
 2026-03-25 10:21:00 +01:00
dependabot[bot] 0c39d8a20f build(deps): bump github.com/moby/patternmatcher from 0.6.0 to 0.6.1 
Bumps [github.com/moby/patternmatcher](https://github.com/moby/patternmatcher) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/moby/patternmatcher/releases)
- [Commits](https://github.com/moby/patternmatcher/compare/v0.6.0...v0.6.1)

---
updated-dependencies:
- dependency-name: github.com/moby/patternmatcher
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-25 10:15:05 +01:00
dependabot[bot] 72bf113b0c build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.78.0 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-23 11:47:25 +01:00
dependabot[bot] 27d9d50630 build(deps): bump github.com/containerd/platforms 
Bumps [github.com/containerd/platforms](https://github.com/containerd/platforms) from 1.0.0-rc.2 to 1.0.0-rc.3.
- [Release notes](https://github.com/containerd/platforms/releases)
- [Commits](https://github.com/containerd/platforms/compare/v1.0.0-rc.2...v1.0.0-rc.3)

---
updated-dependencies:
- dependency-name: github.com/containerd/platforms
  dependency-version: 1.0.0-rc.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-23 10:15:37 +01:00
dependabot[bot] e8c2143498 build(deps): bump github.com/moby/moby/client from 0.2.2 to 0.3.0 
Bumps [github.com/moby/moby/client](https://github.com/moby/moby) from 0.2.2 to 0.3.0.
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.3.0/CHANGELOG.md)
- [Commits](https://github.com/moby/moby/compare/v0.2.2...v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-12 14:06:28 +01:00
dependabot[bot] 0ffb171173 build(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.19.0 to 0.20.0.
- [Commits](https://github.com/golang/sync/compare/v0.19.0...v0.20.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-12 14:06:03 +01:00
dependabot[bot] eb6afa8d3d build(deps): bump github.com/containerd/containerd/v2 
Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v2.2.1...v2.2.2)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-11 10:14:46 +01:00
dependabot[bot] 79d4fe3c14 build(deps): bump golang.org/x/sys from 0.41.0 to 0.42.0 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.41.0 to 0.42.0.
- [Commits](https://github.com/golang/sys/compare/v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-09 10:15:41 +01:00
dependabot[bot] ffa8576d92 build(deps): bump github.com/moby/moby/api from 1.53.0 to 1.54.0 
Bumps [github.com/moby/moby/api](https://github.com/moby/moby) from 1.53.0 to 1.54.0.
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](https://github.com/moby/moby/compare/api/v1.53.0...api/v1.54.0)

---
updated-dependencies:
- dependency-name: github.com/moby/moby/api
  dependency-version: 1.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-03-06 10:14:55 +01:00
Sebastiaan van Stijn 8193d86d2f pkg/bridge: remove uses of go-connections 
Signed-off-by: Sebastiaan van Stijn <[email protected]>
 2026-02-11 12:32:37 +01:00