mirror of
https://github.com/docker/compose.git
synced 2026-10-12 02:13:08 +00:00
Alano Terblanche
fd4dae8351
Docker Hub credentials are now read first from the session of the account signed in to Docker Desktop, through the Docker Desktop secrets engine (github.com/docker/secrets-engine/client), and from the Docker CLI config file and its credential helpers otherwise. Other registries keep using the config file only. The OAuth access token is passed as the password of the signed-in account, never as an IdentityToken, which containerd sends as a refresh token. It flows unchanged to the engine in X-Registry-Auth and through the OCI resolver as an OAuth password grant. Compose falls back to the config file when Desktop is not running, nobody is signed in, the session is expired or about to expire, or the lookup fails (the last logged as a warning). The session is shared process wide, cached until shortly before it expires, and an unusable session is not asked for again. Lookups are bounded by a 5s timeout, as the SDK applies none by default. Used by pull, push, publish, config --resolve-image-digests, oci:// remote resources and dry-run. The classic builder and use_api_socket keep config file credentials, as a short-lived token copied into a container would go stale. Signed-off-by: Alano Terblanche <[email protected]>
143 lines
6.6 KiB
AMPL
143 lines
6.6 KiB
AMPL
module github.com/docker/compose/v5
|
|
|
|
go 1.26.8
|
|
|
|
require (
|
|
github.com/DefangLabs/secret-detector v0.0.0-20260916192156-3e28d7ed64df
|
|
github.com/Microsoft/go-winio v0.6.3-0.20251027160822-ad3df93bed29
|
|
github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d
|
|
github.com/buger/goterm v1.0.4
|
|
github.com/compose-spec/compose-go/v2 v2.16.1
|
|
github.com/containerd/console v1.0.5
|
|
github.com/containerd/containerd/v2 v2.4.1
|
|
github.com/containerd/errdefs v1.0.0
|
|
github.com/containerd/platforms v1.0.0-rc.5
|
|
github.com/creack/pty v1.1.24
|
|
github.com/distribution/reference v0.6.0
|
|
github.com/docker/cli v29.8.2+incompatible
|
|
github.com/docker/cli-docs-tool v0.11.0
|
|
github.com/docker/go-units v0.5.0
|
|
github.com/docker/secrets-engine/client v0.1.2
|
|
github.com/docker/secrets-engine/x v0.8.2
|
|
github.com/eiannone/keyboard v0.0.0-20220611211555-0d226195f203
|
|
github.com/fsnotify/fsevents v0.2.0
|
|
github.com/google/go-cmp v0.7.0
|
|
github.com/google/uuid v1.6.0
|
|
github.com/hashicorp/go-version v1.9.0
|
|
github.com/mattn/go-runewidth v0.0.30
|
|
github.com/mattn/go-shellwords v1.0.15
|
|
github.com/mitchellh/go-ps v1.0.0
|
|
github.com/moby/buildkit v0.33.1
|
|
github.com/moby/go-archive v0.3.3
|
|
github.com/moby/moby/api v1.56.1
|
|
github.com/moby/moby/client v0.6.1
|
|
github.com/moby/patternmatcher v0.6.1
|
|
github.com/moby/sys/atomicwriter v0.1.0
|
|
github.com/morikuni/aec v1.1.0
|
|
github.com/opencontainers/go-digest v1.0.0
|
|
github.com/opencontainers/image-spec v1.1.1
|
|
github.com/otiai10/copy v1.14.1
|
|
github.com/sirupsen/logrus v1.10.2
|
|
github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966
|
|
github.com/spf13/cobra v1.10.2
|
|
github.com/spf13/pflag v1.0.10
|
|
github.com/tilt-dev/fsnotify v1.4.8-0.20220602155310-fff9c274a375
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0
|
|
go.opentelemetry.io/otel v1.46.0
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0
|
|
go.opentelemetry.io/otel/metric v1.46.0
|
|
go.opentelemetry.io/otel/sdk v1.46.0
|
|
go.opentelemetry.io/otel/trace v1.46.0
|
|
go.uber.org/goleak v1.3.0
|
|
go.uber.org/mock v0.6.0
|
|
go.yaml.in/yaml/v4 v4.0.0-rc.6
|
|
golang.org/x/sync v0.23.0
|
|
golang.org/x/sys v0.48.0
|
|
google.golang.org/grpc v1.84.0
|
|
gotest.tools/v3 v3.5.2
|
|
tags.cncf.io/container-device-interface v1.1.1
|
|
)
|
|
|
|
require (
|
|
connectrpc.com/connect v1.19.1 // indirect
|
|
github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
|
|
github.com/cenkalti/backoff/v5 v5.0.3 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/clipperhouse/uax29/v2 v2.2.0 // indirect
|
|
github.com/containerd/containerd/api v1.12.0 // indirect
|
|
github.com/containerd/continuity v0.5.0 // indirect
|
|
github.com/containerd/errdefs/pkg v0.3.0 // indirect
|
|
github.com/containerd/log v0.2.0 // indirect
|
|
github.com/containerd/log/otel v0.1.0 // indirect
|
|
github.com/containerd/ttrpc v1.2.9 // indirect
|
|
github.com/containerd/typeurl/v2 v2.3.0 // indirect
|
|
github.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect
|
|
github.com/docker/distribution v2.8.3+incompatible // indirect
|
|
github.com/docker/docker-credential-helpers v0.9.9 // indirect
|
|
github.com/docker/go-connections v0.8.1 // indirect
|
|
github.com/felixge/httpsnoop v1.1.0 // indirect
|
|
github.com/fvbommel/sortorder v1.2.0 // indirect
|
|
github.com/go-logr/logr v1.4.4 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
|
|
github.com/gofrs/flock v0.13.1 // indirect
|
|
github.com/golang-jwt/jwt/v5 v5.3.1 // indirect
|
|
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
|
|
github.com/gorilla/mux v1.8.1 // indirect
|
|
github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0 // indirect
|
|
github.com/in-toto/attestation v1.2.0 // indirect
|
|
github.com/in-toto/in-toto-golang v0.11.0 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/inhies/go-bytesize v0.0.0-20220417184213-4913239db9cf // indirect
|
|
github.com/klauspost/compress v1.20.0 // indirect
|
|
github.com/moby/docker-image-spec v1.3.1 // indirect
|
|
github.com/moby/locker v1.0.1 // indirect
|
|
github.com/moby/sys/capability v0.4.0 // indirect
|
|
github.com/moby/sys/sequential v0.7.0 // indirect
|
|
github.com/moby/sys/signal v0.7.1 // indirect
|
|
github.com/moby/sys/symlink v0.3.0 // indirect
|
|
github.com/moby/sys/user v0.4.1 // indirect
|
|
github.com/moby/sys/userns v0.2.1 // indirect
|
|
github.com/moby/term v0.5.2 // indirect
|
|
github.com/otiai10/mint v1.6.3 // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
|
|
github.com/russross/blackfriday/v2 v2.1.0 // indirect
|
|
github.com/santhosh-tekuri/jsonschema/v6 v6.0.3 // indirect
|
|
github.com/secure-systems-lab/go-securesystemslib v0.11.0 // indirect
|
|
github.com/shibumi/go-pathspec v1.3.0 // indirect
|
|
github.com/tonistiigi/fsutil v0.0.0-20260819142231-83cac42c1c52 // indirect
|
|
github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0 // indirect
|
|
github.com/tonistiigi/units v0.0.0-20180711220420-6950e57a87ea // indirect
|
|
github.com/tonistiigi/vt100 v0.0.0-20240514184818-90bafcd6abab // indirect
|
|
github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
|
|
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.71.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.71.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.46.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.46.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0 // indirect
|
|
go.opentelemetry.io/otel/sdk/metric v1.46.0 // indirect
|
|
go.opentelemetry.io/proto/otlp v1.11.0 // indirect
|
|
go.yaml.in/yaml/v3 v3.0.5 // indirect
|
|
golang.org/x/crypto v0.56.0 // indirect
|
|
golang.org/x/mod v0.41.0 // indirect
|
|
golang.org/x/net v0.58.0 // indirect
|
|
golang.org/x/text v0.41.0 // indirect
|
|
golang.org/x/time v0.16.0 // indirect
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20260825221802-da73d73af1c5 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20260825221802-da73d73af1c5 // indirect
|
|
google.golang.org/protobuf v1.36.12 // indirect
|
|
gopkg.in/ini.v1 v1.67.3 // indirect
|
|
)
|
|
|
|
exclude (
|
|
// FIXME(thaJeztah): remove this once kubernetes updated their dependencies to no longer need this.
|
|
//
|
|
// For additional details, see this PR and links mentioned in that PR:
|
|
// https://github.com/kubernetes-sigs/kustomize/pull/5830#issuecomment-2569960859
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
|
|
)
|