)]}' { "log": [ { "commit": "47e9dbf7b0cf7e61876a49754c70d78687eec9ce", "tree": "9f94c474384924e223f4add218a566b41eee1fd5", "parents": [ "6d274590f2f63276a54da8adf475a455d21c1fdd", "abf2f34c741ca1f05fee601c785bf839ac38217c" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Oct 26 19:12:30 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 26 19:12:30 2026" }, "message": "Merge pull request #7427 from renovate-bot/renovate/docker-actions\n\nUpdate docker GitHub Actions" }, { "commit": "abf2f34c741ca1f05fee601c785bf839ac38217c", "tree": "9f94c474384924e223f4add218a566b41eee1fd5", "parents": [ "6d274590f2f63276a54da8adf475a455d21c1fdd" ], "author": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Mon Oct 26 12:59:35 2026" }, "committer": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Mon Oct 26 12:59:35 2026" }, "message": "Update docker GitHub Actions\n\nSigned-off-by: Mend Renovate \u003cbot@renovateapp.com\u003e\n" }, { "commit": "6d274590f2f63276a54da8adf475a455d21c1fdd", "tree": "a35730d53004c31e69ec7c8ef8b5d9095e4cf016", "parents": [ "4e09976dddd630cd21b719f07f48243f00f904f5", "df9a0f430fa844ea674f9e8d01cc75c97adbd4aa" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Tue Oct 20 12:40:35 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 20 12:40:35 2026" }, "message": "Merge pull request #7414 from thaJeztah/interactive_login_nits\n\ninternal/oauth: assorted fixes and cleanups" }, { "commit": "4e09976dddd630cd21b719f07f48243f00f904f5", "tree": "8b3e162044386baff1e3fe9294b039d2e8889bb7", "parents": [ "69c9ccd358201c29d08d55b8a827b08133f35b91", "16004189445845a8921cbb4653d0a1dadbe29cca" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Tue Oct 20 11:23:25 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 20 11:23:25 2026" }, "message": "Merge pull request #7419 from thaJeztah/bump_sortorder\n\nvendor: github.com/fvbommel/sortorder v1.2.1" }, { "commit": "69c9ccd358201c29d08d55b8a827b08133f35b91", "tree": "d74463e27d0ac2b34beb661d4edbda19651ac5f3", "parents": [ "6f8369014a5eedea2764ac6d95eb29115d9a13dc", "1fab379bcc84a8cea50def3c7c53fddd0b9d254e" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Tue Oct 20 11:11:47 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 20 11:11:47 2026" }, "message": "Merge pull request #7417 from vvoland/update-go\n\nUpdate to go1.26.10" }, { "commit": "16004189445845a8921cbb4653d0a1dadbe29cca", "tree": "4b92413c500ad805a3f61b17eb9e4268da850db1", "parents": [ "6f8369014a5eedea2764ac6d95eb29115d9a13dc" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Tue Oct 20 10:46:38 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Tue Oct 20 10:46:38 2026" }, "message": "vendor: github.com/fvbommel/sortorder v1.2.1\n\nfull diff: https://github.com/fvbommel/sortorder/compare/v1.2.0...v1.2.1\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "1fab379bcc84a8cea50def3c7c53fddd0b9d254e", "tree": "d74463e27d0ac2b34beb661d4edbda19651ac5f3", "parents": [ "6f8369014a5eedea2764ac6d95eb29115d9a13dc" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Tue Oct 20 10:35:48 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Tue Oct 20 10:35:48 2026" }, "message": "Update to go1.26.10\n\nThis release includes 1 security fix following the security policy:\n\n- crypto/x509: mitigation for security concerns with a specific Certificate Authority\n\n We\u0027re blocking trust in a small set of intermediate certificates due to specific security concerns around their operation.\n\n Verify will now filter out chains which contain these intermediates, preventing them from being returned to the caller.\n\n We highly recommend immediately upgrading to this release.\n\n This is CVE-2026-111943 and Go issue https://go.dev/issue/82345.\n\nrelease notes: https://go.dev/doc/devel/release#go1.26.10\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "df9a0f430fa844ea674f9e8d01cc75c97adbd4aa", "tree": "3594d2b383fff585de132b99a15e4c2c68d369d0", "parents": [ "fa65e9a3a04b741164a66a5ce5a25b8ef64f184e" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 19 16:27:36 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 19 19:07:33 2026" }, "message": "internal/oauth: remove debug logs, and move them to the caller\n\nWrap errors in the OAuth manager instead of logging them, preserving\nthe underlying cause while allowing callers to detect startup failures.\n\nLog failures at the fallback handler and scope the device-code login\nresult to its branch.\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "fa65e9a3a04b741164a66a5ce5a25b8ef64f184e", "tree": "f0f4fd6fbf1ff29d3974b22d353ee460e0282be4", "parents": [ "dc66c2a8d0efa8e358f8a48eccfabffd5c23ad93" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 19 16:13:04 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 19 19:07:27 2026" }, "message": "internal/oauth: cleanup output\n\n- Remove extra newline before message\n- Include the token in the URL (instead of requiring the user to manually\n enter it on the website).\n- Improve the \"call to action\"; ENTER can be used to automatically open\n the browser (but the user can manually open it instead), and CTRL-C can\n be used to cancel the login.\n- Remove the \"Waiting for authentication in the browser…\" message, which\n could be confusing if no browser was opened (yet), instead print a message\n after successfully requesting the browser to be opened.\n\nWhen running `docker login`;\n\n docker login\n\n i Info → Using web-based login. To sign in with credentials on the command line, use \u0027docker login -u \u003cusername\u003e\u0027\n\n Your one-time device confirmation code is: NRJL-BLRL\n Open this URL to authenticate: https://login.docker.com/activate?user_code\u003dNRJL-BLRL\n\n Press ENTER to open the URL in your browser, or Ctrl+C to cancel.\n\nAfter pressing `ENTER`, it either prints the \"success\" message;\n\n Press ENTER to open the URL in your browser, or Ctrl+C to cancel.\n\n Opening browser…\n\nor a failure when unable to launch a browser;\n\n Press ENTER to open the URL in your browser, or Ctrl+C to cancel.\n\n No browser found. Open the URL above manually to continue.\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "dc66c2a8d0efa8e358f8a48eccfabffd5c23ad93", "tree": "95d68e17900a8c6aaa26171950f7c4b83a5b73e1", "parents": [ "ae317ab44a9075fff6baee8a8cdb4d6806fc9846" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 19 15:05:30 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 19 19:05:24 2026" }, "message": "internal/oauth: handle error when failing to open browser\n\nBefore this patch, pressing `ENTER` to open the browser would silently\ndiscard the error;\n\n docker login\n\n i Info → Using web-based login. To sign in with credentials on the command line, use \u0027docker login -u \u003cusername\u003e\u0027\n\n Your one-time device confirmation code is: VGTB-VKBG\n Press ENTER to open your browser or submit your device code here: https://login.docker.com/activate\n\n Waiting for authentication in the browser…\n\nWith this patch, a failure is printed, so that the user can manually open\nthe URL (or cancel the login);\n\n docker login\n\n i Info → Using web-based login. To sign in with credentials on the command line, use \u0027docker login -u \u003cusername\u003e\u0027\n\n Your one-time device confirmation code is: SZFX-BSGP\n Press ENTER to open your browser or submit your device code here: https://login.docker.com/activate\n\n Waiting for authentication in the browser…\n\n No browser found. Open the URL above manually to continue.\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "ae317ab44a9075fff6baee8a8cdb4d6806fc9846", "tree": "807bb8b398eb8c4377733176fd1be8b6c1b9d851", "parents": [ "3f2ad8bf059d8a3cea0bd7a9cfbf1c8d51dab39b" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 19 14:43:18 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 19 19:05:18 2026" }, "message": "internal/oauth: combine \"web-based login\" message with info note\n\nMake the output less verbose, and combine the \"web-based login\" message\nwith the info message that\u0027s already printed.\n\nBefore this patch:\n\n docker login\n\n USING WEB-BASED LOGIN\n\n i Info → To sign in with credentials on the command line, use \u0027docker login -u \u003cusername\u003e\u0027\n\n Your one-time device confirmation code is: VVPV-NSSL\n Press ENTER to open your browser or submit your device code here: https://login.docker.com/activate\n\n Waiting for authentication in the browser…\n\nWith this patch:\n\n docker login\n\n i Info → Using web-based login. To sign in with credentials on the command line, use \u0027docker login -u \u003cusername\u003e\u0027\n\n Your one-time device confirmation code is: QBBD-PQNS\n Press ENTER to open your browser or submit your device code here: https://login.docker.com/activate\n\n Waiting for authentication in the browser…\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "3f2ad8bf059d8a3cea0bd7a9cfbf1c8d51dab39b", "tree": "e7386279add1317aaa74a7146dad06a6d5344d66", "parents": [ "6f8369014a5eedea2764ac6d95eb29115d9a13dc" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 19 14:29:00 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 19 18:49:29 2026" }, "message": "internal/oauth: avoid opening browser after login cancellation\n\nCheck the context after reading stdin to avoid launching the browser\nif login was canceled while waiting for ENTER.\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "6f8369014a5eedea2764ac6d95eb29115d9a13dc", "tree": "f885b6050f3b0de88e41c1c31e0a4493174a9f36", "parents": [ "f522fffe52dbf035c100c69ba511b92b562791e9", "e08aa72569084897a277fd21223f0dcea5f4b571" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Oct 19 15:06:27 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 19 15:06:27 2026" }, "message": "Merge pull request #7408 from GitNimay/3833-unknown-command-version-flag\n\ncmd/docker: fail on unknown command with --version" }, { "commit": "e08aa72569084897a277fd21223f0dcea5f4b571", "tree": "d4390db94122173123268322bbbc1691d7c96c6d", "parents": [ "52a2671034814f1ec6145aa8238c5fd4f92d5ee7" ], "author": { "name": "Nimesh Kulkarni", "email": "167794819+GitNimay@users.noreply.github.com", "time": "Mon Oct 19 14:05:05 2026" }, "committer": { "name": "Nimesh Kulkarni", "email": "167794819+GitNimay@users.noreply.github.com", "time": "Mon Oct 19 14:05:05 2026" }, "message": "cmd/docker: fail on unknown command with --version\n\nRunning \"docker nonexistent --version\" printed the CLI version and\nexited 0, so it couldn\u0027t be used to check whether a command or plugin\nis available. Without \"--version\" the same invocation fails with an\n\"unknown command\" error.\n\nWhen no built-in command or plugin matches, runDocker falls through to\nexecuting the root command, and cobra handles the \"--version\" flag\nbefore the root command reports the unknown command. Unset the root\ncommand\u0027s version in that fallback, so the standard unknown-command\nerror is returned.\n\nA global \"--version\" flag (\"docker --version nonexistent\") is parsed\nbefore the command name and still prints the version, as do\n\"docker --version\" and \"docker nonexistent --help\".\n\nSigned-off-by: Nimesh Kulkarni \u003c167794819+GitNimay@users.noreply.github.com\u003e\n" }, { "commit": "f522fffe52dbf035c100c69ba511b92b562791e9", "tree": "e97b5424e78d84baf289843dab72779775a16adc", "parents": [ "e300e529d513c45c9935ec3d04f23053a5738b86", "5e1e84ee5d9f10167a21c500d5cdb564584e36cc" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Oct 19 12:32:57 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 19 12:32:57 2026" }, "message": "Merge pull request #7412 from vvoland/trust-clean\n\ncmd/docker-trust: Inline some cli dependencies" }, { "commit": "5e1e84ee5d9f10167a21c500d5cdb564584e36cc", "tree": "e97b5424e78d84baf289843dab72779775a16adc", "parents": [ "00bf2d970d2d52fbec0a45f23985f18ac5e24b9a" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Oct 19 11:17:13 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Oct 19 11:28:28 2026" }, "message": "cmd/docker-trust: Use standard regexps for name validation\n\nThe plugin only used lazyregexp for two small, fixed name patterns.\nReplaced it with regexp.MustCompile without changing validation.\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "00bf2d970d2d52fbec0a45f23985f18ac5e24b9a", "tree": "4b0964c0892e0442cf1f174cf17fb17a2d2af072", "parents": [ "4a93a41589fe4369ad48464f1e67051bf83a046b" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Oct 19 11:16:53 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Oct 19 11:28:28 2026" }, "message": "cmd/docker-trust: Remove unused command registration\n\nBoth entry points use NewRootCmd, which adds subcommands directly.\nRemoved the unused registry registration and constructor.\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "4a93a41589fe4369ad48464f1e67051bf83a046b", "tree": "66f722ed3f71ea2fa1a152f886f504b7cef34fea", "parents": [ "e300e529d513c45c9935ec3d04f23053a5738b86" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Oct 19 10:52:27 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Mon Oct 19 11:28:28 2026" }, "message": "cmd/docker-trust: Inline the JSON stream display helper\n\nThe plugin only needed progress display and an auxiliary callback.\nInlined that use while preserving cancellation and terminal handling.\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "e300e529d513c45c9935ec3d04f23053a5738b86", "tree": "8e1d445d009ba90cbeec23c1c1060162e57c730a", "parents": [ "52a2671034814f1ec6145aa8238c5fd4f92d5ee7", "72f6e50c62592f90d5507c80a4753b3279fcdda8" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Mon Oct 19 08:43:49 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 19 08:43:49 2026" }, "message": "Merge pull request #2012 from kolyshkin/build-man\n\nman/docker-build: fix/expand --build-arg" }, { "commit": "72f6e50c62592f90d5507c80a4753b3279fcdda8", "tree": "8e1d445d009ba90cbeec23c1c1060162e57c730a", "parents": [ "52a2671034814f1ec6145aa8238c5fd4f92d5ee7" ], "author": { "name": "Kir Kolyshkin", "email": "kolyshkin@gmail.com", "time": "Mon Oct 19 08:15:00 2026" }, "committer": { "name": "Kir Kolyshkin", "email": "kolyshkin@gmail.com", "time": "Mon Oct 19 08:15:00 2026" }, "message": "man/docker-build: fix/expand --build-arg\n\nExplain that variable value is optional and is taken from environment\nif not set.\n\nClarify the meaning of ARG, and mention that ENV overrides ARG of the\nsame name.\n\nMove example to the end, and refer to the Dockerfile and buildx docs\nfor more details (replacing the obsolete link).\n\nSigned-off-by: Kir Kolyshkin \u003ckolyshkin@gmail.com\u003e\n" }, { "commit": "52a2671034814f1ec6145aa8238c5fd4f92d5ee7", "tree": "6b7c38c849fa6de70ba7898860cdca3ccda7174e", "parents": [ "1d026405767c80b5fd961cb24359ed9c39428a6c", "ccac941dd9c95814e4035e516c1c46d701f92fe2" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Fri Oct 16 14:24:33 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 16 14:24:33 2026" }, "message": "Merge pull request #7396 from docker/dependabot/github_actions/codeql-actions-073aea62d7\n\nbuild(deps): bump the codeql-actions group with 3 updates" }, { "commit": "1d026405767c80b5fd961cb24359ed9c39428a6c", "tree": "1f1015554e0a103e3bd69d6b064680b39895d455", "parents": [ "4d745833973ca4980b1d7829f5712247023c0c4d", "e6beb40c0353e40e7cb6c6bdab4644bd267aff52" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Fri Oct 16 14:23:50 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 16 14:23:50 2026" }, "message": "Merge pull request #7391 from vvoland/revert-go\n\nRevert \"chore(deps): update dependency go to v1.27.1\"" }, { "commit": "4d745833973ca4980b1d7829f5712247023c0c4d", "tree": "0dd048d1a466dcb2764befb6994ea25712eb851c", "parents": [ "dfc520dcc28994c4c699b9b219fd2f5a6bcec0ff", "de4ddc4faefa15f68386b428abc313f01578c3d0" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Fri Oct 16 12:46:12 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 16 12:46:12 2026" }, "message": "Merge pull request #7398 from thaJeztah/bump_version\n\nbump version to 29.10.0" }, { "commit": "de4ddc4faefa15f68386b428abc313f01578c3d0", "tree": "0dd048d1a466dcb2764befb6994ea25712eb851c", "parents": [ "dfc520dcc28994c4c699b9b219fd2f5a6bcec0ff" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 15 19:32:57 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 15 19:32:57 2026" }, "message": "bump version to 29.10.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "ccac941dd9c95814e4035e516c1c46d701f92fe2", "tree": "463595538f16c338f91d278c574c75028971eb23", "parents": [ "dfc520dcc28994c4c699b9b219fd2f5a6bcec0ff" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 15 08:45:04 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 15 08:45:04 2026" }, "message": "build(deps): bump the codeql-actions group with 3 updates\n\nBumps the codeql-actions group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.38.2 to 4.38.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)\n\nUpdates `github/codeql-action/autobuild` from 4.38.2 to 4.38.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)\n\nUpdates `github/codeql-action/analyze` from 4.38.2 to 4.38.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n dependency-version: 4.38.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/autobuild\n dependency-version: 4.38.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.38.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "e6beb40c0353e40e7cb6c6bdab4644bd267aff52", "tree": "3090febf7336b12246edf0fb9b1177b3affd64b5", "parents": [ "dfc520dcc28994c4c699b9b219fd2f5a6bcec0ff" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 14 19:00:28 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 14 19:00:31 2026" }, "message": "Revert \"chore(deps): update dependency go to v1.27.1\"\n\nThis reverts commit a3a2bb6118c9f04edce1adc34b17140b5984ea1b.\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "dfc520dcc28994c4c699b9b219fd2f5a6bcec0ff", "tree": "b4740f270f1d984b954a17601373e082f3081243", "parents": [ "c11295afc4659438bd3c3d3bc81278db20d97490", "a3a2bb6118c9f04edce1adc34b17140b5984ea1b" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 14 18:09:52 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 18:09:52 2026" }, "message": "Merge pull request #7390 from renovate-bot/renovate/go-1.x\n\nchore(deps): update dependency go to v1.27.1" }, { "commit": "a3a2bb6118c9f04edce1adc34b17140b5984ea1b", "tree": "b4740f270f1d984b954a17601373e082f3081243", "parents": [ "c11295afc4659438bd3c3d3bc81278db20d97490" ], "author": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 18:03:30 2026" }, "committer": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 18:03:30 2026" }, "message": "chore(deps): update dependency go to v1.27.1\n\nSigned-off-by: Mend Renovate \u003cbot@renovateapp.com\u003e\n" }, { "commit": "c11295afc4659438bd3c3d3bc81278db20d97490", "tree": "3090febf7336b12246edf0fb9b1177b3affd64b5", "parents": [ "010e125d8bb18fcde0204e157cc77884b8f60c89", "66f6797582b9735eb072fc4c8422e3ddd96eb64e" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Wed Oct 14 16:11:18 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 16:11:18 2026" }, "message": "Merge pull request #7388 from renovate-bot/renovate/tonistiigi-xx-1.x\n\nchore(deps): update tonistiigi/xx docker tag to v1.10.0" }, { "commit": "010e125d8bb18fcde0204e157cc77884b8f60c89", "tree": "1de5f251cf0e54c18fb4c8befa31c84a081c271f", "parents": [ "5cdf2292302400bf41eecd624ccd201ed425f6a6", "529f66d2f9aa8cf2762a1aea04450133b31cf8de" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Wed Oct 14 16:10:45 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 16:10:45 2026" }, "message": "Merge pull request #7386 from renovate-bot/renovate/docker-buildx-bin-0.x\n\nchore(deps): update docker/buildx-bin docker tag to v0.38.0" }, { "commit": "5cdf2292302400bf41eecd624ccd201ed425f6a6", "tree": "e25743b98db4a6526b5b052faf69193baad30614", "parents": [ "4d6ff7d6462891ac2a1d1f536ab9c56f6f4e6545", "cb8870a5370ee4e887f234cf3cfddff0abc366bf" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Wed Oct 14 16:10:28 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 16:10:28 2026" }, "message": "Merge pull request #7387 from renovate-bot/renovate/docker-compose-bin-5.x\n\nchore(deps): update docker/compose-bin docker tag to v5.6.0" }, { "commit": "66f6797582b9735eb072fc4c8422e3ddd96eb64e", "tree": "e60a79317776959dd52d8e22cf738787ebeec74b", "parents": [ "4d6ff7d6462891ac2a1d1f536ab9c56f6f4e6545" ], "author": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 16:02:38 2026" }, "committer": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 16:02:38 2026" }, "message": "chore(deps): update tonistiigi/xx docker tag to v1.10.0\n\nSigned-off-by: Mend Renovate \u003cbot@renovateapp.com\u003e\n" }, { "commit": "cb8870a5370ee4e887f234cf3cfddff0abc366bf", "tree": "e25743b98db4a6526b5b052faf69193baad30614", "parents": [ "4d6ff7d6462891ac2a1d1f536ab9c56f6f4e6545" ], "author": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 16:02:33 2026" }, "committer": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 16:02:33 2026" }, "message": "chore(deps): update docker/compose-bin docker tag to v5.6.0\n\nSigned-off-by: Mend Renovate \u003cbot@renovateapp.com\u003e\n" }, { "commit": "529f66d2f9aa8cf2762a1aea04450133b31cf8de", "tree": "757a96b9d1eaaf7addf66839cfe77735a4e1245d", "parents": [ "4d6ff7d6462891ac2a1d1f536ab9c56f6f4e6545" ], "author": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 16:02:28 2026" }, "committer": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 16:02:28 2026" }, "message": "chore(deps): update docker/buildx-bin docker tag to v0.38.0\n\nSigned-off-by: Mend Renovate \u003cbot@renovateapp.com\u003e\n" }, { "commit": "4d6ff7d6462891ac2a1d1f536ab9c56f6f4e6545", "tree": "846ac34d0c27ebc9e2e4961fb21fbc711df313a6", "parents": [ "b997c5b7aa00778e567ffb2e09e0d0d898c8afd2", "37013cb262ada8d808007bfdfa7feb06fa521fa3" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 14 14:53:33 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 14:53:33 2026" }, "message": "Merge pull request #7380 from renovate-bot/renovate/actions-upload-artifact-7.x\n\nchore(deps): update actions/upload-artifact action to v7.0.2" }, { "commit": "b997c5b7aa00778e567ffb2e09e0d0d898c8afd2", "tree": "473968f652ad4cfe178902c8fb709f7d293a1827", "parents": [ "61ee187552a3ca53e3e8b932bb842272bb86fb09", "1822903c1dc0d728eeef7d9be729f594f00cced9" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 14 14:49:47 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 14:49:47 2026" }, "message": "Merge pull request #7381 from renovate-bot/renovate/docker-actions\n\nchore(deps): update docker/setup-buildx-action action to v4.4.1" }, { "commit": "1822903c1dc0d728eeef7d9be729f594f00cced9", "tree": "473968f652ad4cfe178902c8fb709f7d293a1827", "parents": [ "61ee187552a3ca53e3e8b932bb842272bb86fb09" ], "author": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 14:34:17 2026" }, "committer": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 14:34:17 2026" }, "message": "chore(deps): update docker/setup-buildx-action action to v4.4.1\n\nSigned-off-by: Mend Renovate \u003cbot@renovateapp.com\u003e\n" }, { "commit": "37013cb262ada8d808007bfdfa7feb06fa521fa3", "tree": "853fc54a0dce8746074dcd9001f34ece45aac7e4", "parents": [ "61ee187552a3ca53e3e8b932bb842272bb86fb09" ], "author": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 14:34:11 2026" }, "committer": { "name": "Mend Renovate", "email": "bot@renovateapp.com", "time": "Wed Oct 14 14:34:11 2026" }, "message": "chore(deps): update actions/upload-artifact action to v7.0.2\n\nSigned-off-by: Mend Renovate \u003cbot@renovateapp.com\u003e\n" }, { "commit": "61ee187552a3ca53e3e8b932bb842272bb86fb09", "tree": "18327195e9148e0d272b498ea7ea02dec4710772", "parents": [ "5c8bfb2844dc69430055313c175c80a09dc9d187", "433b13a24981e5e2dc8bff7a382c2ea13b48d763" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 14 14:32:20 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 14:32:20 2026" }, "message": "Merge pull request #7251 from vvoland/add-renovate\n\nAdd Renovate config" }, { "commit": "433b13a24981e5e2dc8bff7a382c2ea13b48d763", "tree": "46192409ebebb7676309992b9c4e7d6643380d5a", "parents": [ "45f589590bb7f0bc1577f89b727d73d28ecded97" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Aug 27 17:14:43 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 14 13:25:17 2026" }, "message": "Add Renovate config\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "5c8bfb2844dc69430055313c175c80a09dc9d187", "tree": "1088e92297726277dca87b6c82294efdc5db36e8", "parents": [ "528a2ada2ede6906bcf820878941e55536df169f", "de8f4032adab4a18658a6309a1e676b5f82afec3" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Tue Oct 13 15:27:57 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 13 15:27:57 2026" }, "message": "Merge pull request #7378 from thaJeztah/pr_7371_alt\n\ncli-plugins: Add generic hook messages (alternative)" }, { "commit": "528a2ada2ede6906bcf820878941e55536df169f", "tree": "136cf07468c244f33948523b389b3f6a182432f2", "parents": [ "e4078058de0a9f4d5cb65f946f4b8a090e19fffe", "8da8b005554195db6000451d3e29cba62eab139d" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Tue Oct 13 15:25:25 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 13 15:25:25 2026" }, "message": "Merge pull request #7375 from thaJeztah/bump_go_winio\n\nvendor: github.com/Microsoft/go-winio v0.6.3" }, { "commit": "de8f4032adab4a18658a6309a1e676b5f82afec3", "tree": "7d04a545b1d93ab562b9abc56dc9fec3cb1c7dad", "parents": [ "e4078058de0a9f4d5cb65f946f4b8a090e19fffe" ], "author": { "name": "Nicolas Beck", "email": "nicolas.beck@docker.com", "time": "Fri Oct 09 15:50:53 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Mon Oct 12 14:31:43 2026" }, "message": "cli-plugins: Add generic hook messages\n\nAllow plugins to return informational messages without the next-steps heading\nor indentation. Invoke each hook once and render generic messages before the\nshared next-steps block.\n\nCentralize grouping and formatting in PrintMessages, with a callback for\ntemplate evaluation and error handling. This avoids the need for an\nintermediate EvaluatedMessage type and simplifies hook collection to return\nthe original responses.\n\nSkip messages containing only whitespace while preserving empty lines\nwithin non-empty messages. Keep PrintNextSteps as a deprecated wrapper\nto preserve existing callers and output.\n\nUpdate the printer tests and remove the obsolete appendMessages helper\nand its tests.\n\nCo-authored-by: Nicolas Beck \u003cnicolas.beck@docker.com\u003e\nSigned-off-by: Nicolas Beck \u003cnicolas.beck@docker.com\u003e\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "e4078058de0a9f4d5cb65f946f4b8a090e19fffe", "tree": "4537adce6125f9afaefbc4498110a52a02c5f15b", "parents": [ "02fbbf3eb021c52fb483b7760b00d589dc5675a0", "067d069f0c6742a98dbb6cc8ede5ac0cd55c886a" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Sat Oct 10 14:03:08 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Oct 10 14:03:08 2026" }, "message": "Merge pull request #7373 from TanvirTian/7372-fix-remote-context-download-error\n\nfix: return remote context download errors" }, { "commit": "8da8b005554195db6000451d3e29cba62eab139d", "tree": "1c00156f1337f34c56fcaa9b14318169a7a321d6", "parents": [ "02fbbf3eb021c52fb483b7760b00d589dc5675a0" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Oct 10 13:28:26 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Sat Oct 10 13:28:26 2026" }, "message": "vendor: github.com/Microsoft/go-winio v0.6.3\n\n- improve interoperability with stdlib sentinel errors and deprecate aliases\n\nfull diff: https://github.com/Microsoft/go-winio/compare/f19d9717deb0...v0.6.3\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "067d069f0c6742a98dbb6cc8ede5ac0cd55c886a", "tree": "1013d1b5fa3f292b4ee0bedaa4c6b0d34b4161e7", "parents": [ "f415da838bed6a0e12ca6cb86ba198fdac6beb9c" ], "author": { "name": "Tanvir Tian", "email": "beachpilis@gmail.com", "time": "Sat Oct 10 12:14:12 2026" }, "committer": { "name": "Tanvir Tian", "email": "beachpilis@gmail.com", "time": "Sat Oct 10 12:16:02 2026" }, "message": "fix: return remote context download errors\n\nSigned-off-by: Tanvir Tian \u003cbeachpilis@gmail.com\u003e\n" }, { "commit": "02fbbf3eb021c52fb483b7760b00d589dc5675a0", "tree": "737b8485282b858db7f1a46996a678e448384097", "parents": [ "890976a13bd6cc0c9fa52f20f4ad1e44885b105d", "3e686a8b591733ee4689b8c90b903f46e8c455c1" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Fri Oct 09 16:08:27 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 09 16:08:27 2026" }, "message": "Merge pull request #7369 from nico1510/offload-plugin-guidance\n\ncmd/docker: Add guidance for unavailable offload commands" }, { "commit": "890976a13bd6cc0c9fa52f20f4ad1e44885b105d", "tree": "7ac30a14cd2a74d5f6cddce98ce100083b104cd4", "parents": [ "f415da838bed6a0e12ca6cb86ba198fdac6beb9c", "23c66ccd6139e7695c3cce60f2ee1ac5751dc1e1" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Fri Oct 09 13:12:08 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 09 13:12:08 2026" }, "message": "Merge pull request #7370 from thaJeztah/bump_version\n\nBump version to 29.9.1" }, { "commit": "23c66ccd6139e7695c3cce60f2ee1ac5751dc1e1", "tree": "7ac30a14cd2a74d5f6cddce98ce100083b104cd4", "parents": [ "f415da838bed6a0e12ca6cb86ba198fdac6beb9c" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Oct 09 08:47:07 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Fri Oct 09 11:45:39 2026" }, "message": "Bump version to 29.9.1\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "3e686a8b591733ee4689b8c90b903f46e8c455c1", "tree": "af68945f2c905f50da40b6706344b010ea741c19", "parents": [ "f415da838bed6a0e12ca6cb86ba198fdac6beb9c" ], "author": { "name": "Nicolas Beck", "email": "nicolas.beck@docker.com", "time": "Fri Oct 09 10:06:48 2026" }, "committer": { "name": "Nicolas Beck", "email": "nicolas.beck@docker.com", "time": "Fri Oct 09 10:06:48 2026" }, "message": "cmd/docker: Add guidance for unavailable offload commands\n\nShow installation guidance and a documentation link when the offload\nplugin is missing or invalid. Handle this before command execution so\nplugin-specific flags and --help also receive the guidance.\n\nSigned-off-by: Nicolas Beck \u003cnicolas.beck@docker.com\u003e\n" }, { "commit": "f415da838bed6a0e12ca6cb86ba198fdac6beb9c", "tree": "687900947292b56d41aeab392077094aca50dcec", "parents": [ "45c2317672c4469188b71d0507ad89a1fe890fd7", "cf809998ab8c05dd2abb5a8db26da276d18306ee" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Oct 08 20:29:49 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 20:29:49 2026" }, "message": "Merge pull request #7367 from thaJeztah/bump_trust_deps\n\ncmd/docker-trust: update dependencies" }, { "commit": "45c2317672c4469188b71d0507ad89a1fe890fd7", "tree": "a953b8bf6c49267dde2090c6bdc8ee5f7bad3d9a", "parents": [ "8308969edac5a7f7b3c83ed0b2e4261413893477", "e63e4fe49873bdc7f1d39ce553a47f49b059efba" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 08 20:27:38 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 20:27:38 2026" }, "message": "Merge pull request #7366 from thaJeztah/bump_runewidth\n\nvendor: github.com/mattn/go-runewidth v0.0.31" }, { "commit": "8308969edac5a7f7b3c83ed0b2e4261413893477", "tree": "52e98119a8f2d7d5bb608d0e1a9758bde37c5876", "parents": [ "e7df01fe6e0d1f19af565ab1deb3156a1e457aaa", "730c880b35e8e7d7f99b31ff388040748baeaba3" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 08 20:26:44 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 20:26:44 2026" }, "message": "Merge pull request #7368 from vvoland/update-docker\n\nvendor: github.com/moby/moby/client v0.6.2" }, { "commit": "cf809998ab8c05dd2abb5a8db26da276d18306ee", "tree": "9ac5cd0045acd175adc3a6f1077bfea639ccec5a", "parents": [ "e7df01fe6e0d1f19af565ab1deb3156a1e457aaa" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 08 19:58:50 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 08 20:23:38 2026" }, "message": "cmd/docker-trust: update dependencies\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "730c880b35e8e7d7f99b31ff388040748baeaba3", "tree": "52e98119a8f2d7d5bb608d0e1a9758bde37c5876", "parents": [ "e7df01fe6e0d1f19af565ab1deb3156a1e457aaa" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 08 20:08:10 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 08 20:08:10 2026" }, "message": "vendor: github.com/moby/moby/client v0.6.2\n\nfull diff: https://github.com/moby/moby/compare/client/v0.6.1...client/v0.6.2\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "e63e4fe49873bdc7f1d39ce553a47f49b059efba", "tree": "603eb35e02ad8ffcde4cdbe27f939d062d027078", "parents": [ "e7df01fe6e0d1f19af565ab1deb3156a1e457aaa" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 08 19:51:14 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 08 19:51:14 2026" }, "message": "vendor: github.com/mattn/go-runewidth v0.0.31\n\n- Treat the remaining invisible format controls as zero width\n- Treat bidi isolates and other invisible format characters as zero width\n- Measure ambiguous Latin letters as one cell in East Asian locales\n- Fix width mismatches found by the Hegel property tests\n- Recognise CJK locales regardless of charset spelling\n\nfull diff: https://github.com/mattn/go-runewidth/compare/v0.0.30...v0.0.31\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "e7df01fe6e0d1f19af565ab1deb3156a1e457aaa", "tree": "38975971bf222fa82153565ddd97cbca1f0ee6fe", "parents": [ "2e51107855144d4ffd40890371ad49d7aa70c21d", "63445d6b70df8a69fb518a649ec8db1405504cd5" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 08 18:31:48 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 18:31:48 2026" }, "message": "Merge pull request #7361 from thaJeztah/bump_go_connections\n\nvendor: github.com/docker/go-connections v0.8.2" }, { "commit": "2e51107855144d4ffd40890371ad49d7aa70c21d", "tree": "40e7baeb14ac6890703ecc4a8a2b77c6db253ec4", "parents": [ "fdb4ee3e75cf1055ab0144123a051c4642667afe", "949bf401dd8204107463c1fa24aeaeb49349f333" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Oct 08 18:31:01 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 18:31:01 2026" }, "message": "Merge pull request #7363 from vvoland/update-go\n\nUpdate to go1.26.9" }, { "commit": "949bf401dd8204107463c1fa24aeaeb49349f333", "tree": "40e7baeb14ac6890703ecc4a8a2b77c6db253ec4", "parents": [ "9db98021278ce511e75435bf23610f52880605ae" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 08 18:25:01 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 08 18:25:01 2026" }, "message": "vendor: golang.org/x/net v0.60.0\n\nfull diff: https://golang.org/x/net/compare/v0.59.0...v0.60.0\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "9db98021278ce511e75435bf23610f52880605ae", "tree": "9fe9d9dff3601bf2a03b033a9029c5e7c53c33a3", "parents": [ "fdb4ee3e75cf1055ab0144123a051c4642667afe" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 08 18:19:46 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 08 18:19:46 2026" }, "message": "Update to go1.26.9\n\nThis release includes 15 security fixes following the security policy:\n\n- net/http: HTTP/2 server crash due to HPACK encoder race\n\n HTTP/2 servers could end up crashing due to inadvertently\n modifying its HPACK encoder concurrently. This happens because the\n server modifies the HPACK encoder from two goroutines without\n synchronization: one uses the encoder to encode a HEADERS frame as part\n of a response sent to a client and the other modifies the encoder\u0027s\n table size when handling a SETTINGS frame containing\n SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can\n repeatedly send a request while changing the header table size to crash\n the server.\n\n Fix this issue by not applying SETTINGS_HEADER_TABLE_SIZE immediately.\n Instead, buffer any SETTINGS_HEADER_TABLE_SIZE received, and only apply\n the new value prior to the next time the server writes a frame.\n\n Thanks to RyotaK (https://ryotak.net) of GMO Flatt Security Inc. for reporting this issue.\n\n This is CVE-2026-97032 and Go issue https://go.dev/issue/81867.\n\n- net/http: HTTP/2 server memory exhaustion due to Trailer headers\n\n When \"Trailer\" headers are sent by a client, the HTTP server internally\n uses the header values to populate the Request.Trailer map passed to the\n server handler. Because Request.Trailer is a map, each entry incurs\n memory overhead. For HTTP/2 servers, a malicious client can exploit this\n by sending a \"Trailer\" header that declares a large number of fields,\n causing the server to allocate a disproportionate amount of memory while\n bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits.\n This exploit is not applicable for HTTP/1 servers, which do not support\n multiplexing a large number of requests over one TCP connection, and\n whose Server.MaxHeaderBytes are calculated differently.\n\n Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits are now\n applied towards the trailer fields declared in \"Trailer\" headers.\n\n Thanks to RyotaK (https://ryotak.net) of GMO Flatt Security Inc. for reporting this issue.\n\n This is CVE-2026-78659 and Go issue https://go.dev/issue/81857.\n\n- crypto/tls: reject malformed ECH outer extension references\n\n Multiple ECH outer extension references are not\n permitted under RFC 9849; previously, a client\n could send a well-crafted packet that could\n trigger memory exhaustion in the server process\n by specifying multiple references.\n\n We now reject these as malformed and curb the\n memory amplification vector as a result.\n\n This is CVE-2026-97031 and Go issue https://go.dev/issue/81855.\n\n- cmd/go: checksum bypass for golang.org/fips140\n\n Previously, a user operating inside of a malicious\n Go project that defines a bogus golang.org/fips140\n and operates a malicious GOMODPROXY the user chooses\n to connect to can serve an arbitrary module in its\n place.\n\n We now unpack the trusted ziphash for the bundled\n golang.org/fips140 module and construct its entry\n in the GOMODCACHE such that it can be verified by\n the toolchain.\n\n This is CVE-2026-94444 and Go issue https://go.dev/issue/81833.\n\n- cmd/go: checksum database bypass for golang.org/toolchain\n\n Previously, a user operating inside of a malicious\n Go project that defines a bogus golang.org/toolchain\n go.sum entry and operates a malicious GOMODPROXY the\n user chooses to use can bypass the intended checksum.\n\n We now ensure that golang.org/toolchain always goes\n to the network for the canonical checksum.\n\n This is CVE-2026-94447 and Go issue https://go.dev/issue/81834.\n\n- html/template: reset context tracking on consecutive template expressions\n\n When a JavaScript template literal contains\n consecutive expressions, the context tracking\n state was not properly reset upon entering a\n new expression.\n\n We now ensure that template-literal expression\n entries correctly reset context variables so all\n subsequent regular expression literals are\n accurately recognized and escaped.\n\n This is CVE-2026-94448 and Go issue https://go.dev/issue/81821.\n\n- html/template: recognize yield as regexp preceder keyword\n\n A trusted template author may have previously\n written a valid template wherein the use of\n the yield keyword would not be correctly\n escaped.\n\n We now ensure that valid keyword uses are\n escaped and non-keyword uses are not escaped.\n\n This is CVE-2026-97030 and Go issue https://go.dev/issue/81823.\n\n- net/textproto, mime/multipart: memory limit bypass when parsing MIME headers\n\n Parsing a multipart form could bypass memory limits and read an\n arbitrarily long line into memory when the remaining limit at the\n start of a part was less than 400 bytes.\n\n Multipart form memory limits are now properly enforced in this situation.\n\n Thanks to Jakub Ciolek (https://ciolek.dev) for reporting this issue.\n\n This is CVE-2026-94440 and Go issue https://go.dev/issue/81741.\n\n- net/http: HTTP/1 client connection desynchronization after CONNECT rejection\n\n When http.Transport sends an HTTP/1 CONNECT request with a non-empty\n Request.Body, it writes the body directly to the connection without\n framing after the request headers. If the server rejects the CONNECT\n request with a non-2xx keep-alive response, Transport returns the\n connection to the idle pool. Because CONNECT requests do not have a\n request body, the server may interpret the trailing body bytes as a\n subsequent pipelined HTTP/1.1 request on the connection, leaving the\n pooled connection desynchronized and causing the next caller that reuses\n it to read the response to the injected request. In reverse proxies\n (including httputil.ReverseProxy) that forward CONNECT requests through\n a shared Transport, this can lead to cross-user response poisoning.\n\n The HTTP/1 transport now closes a connection after sending a CONNECT\n request, regardless of the response status.\n\n In addition, ReverseProxy now rejects incoming CONNECT requests\n with a 405 Method Not Allowed response. ReverseProxy has never handled\n CONNECT requests in a useful fashion (it does not convert the\n connection into a bidirectional tunnel), so we do not expect this\n change to negatively affect any current users.\n\n Thanks to Xclow3n (Rajat Raghav) for reporting this issue.\n\n This is CVE-2026-56866 and Go issue https://go.dev/issue/81740.\n\n- net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response\n\n When an HTTP server handler sent a 2xx response to an HTTP/1 CONNECT request\n and returned without hijacking the connection, the server improperly continued\n to read and serve requests from the connection. Since a 2xx response to an\n HTTP/1 CONNECT converts the connection into a tunnel, the server should not\n treat the connection as continuing to contain HTTP.\n\n The impact of this misbehavior is mostly limited to potential request smuggling,\n where an intermediate proxy considers the data on the connection to be tunneled\n and the server considers it to be HTTP.\n\n The HTTP/1 server now always closes a connection after responding to a CONNECT\n request, regardless of the response status.\n\n Thanks to Jakub Ciolek (https://ciolek.dev) for reporting this issue.\n\n This is CVE-2026-94439 and Go issue https://go.dev/issue/81744.\n\n- net/http: excessive CPU consumption from repeated initial window changes\n\n A malicious HTTP/2 peer could cause excessive CPU consumption in the\n client or server by opening a large number of streams and then sending\n many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.\n\n The HTTP/2 client and server now efficiently handle changes to the\n initial window size (O(1) rather than O(number of streams)).\n\n Thanks to Jakub Ciolek (https://ciolek.dev) for reporting this issue.\n\n This is CVE-2026-78669 and Go issue https://go.dev/issue/81742.\n\n- net/http: HTTP/2 transport accepts malformed framing-related headers\n\n Historically, we have been rather lax about malformed framing-related\n headers in our HTTP/2 implementation, as they cannot interfere with\n HTTP/2 framing. However, this makes it possible for our HTTP/2\n implementation to forward responses containing such headers to an HTTP/1\n client when acting as a reverse proxy. If the HTTP/1 client also does\n not behave strictly enough, this can result in response smuggling.\n\n We now delete malformed framing-related headers when received by our\n HTTP/2 transport, so they will not be forwarded to a potentially\n vulnerable HTTP/1 client.\n\n Thanks to TJ Barton for reporting this issue.\n\n This is CVE-2026-78660 and Go issue https://go.dev/issue/81115.\n\n- os: Root.Mkdir(All) can follow junctions out of the root on Windows\n\n On Windows, when the target of Root.Mkdir or Root.MkdirAll was a junction\n pointing to an empty location, the operation would create a directory at\n the junction target even when that target was located outside the root.\n This only applies to operations where the last path component is a\n junction (path/to/junction, but not path/junction/target).\n\n Root.Mkdir and Root.MkdirAll now correctly avoid resolving junctions.\n\n Thanks to Daniele Ballarini for reporting this issue.\n\n This is CVE-2026-56857 and Go issue https://go.dev/issue/81739.\n\n- net/http: lack of limit on size of parsed Range headers\n\n When parsing a Range header containing a large number of small ranges,\n FileServer(FS), ServeContent, and ServeFile(FS) could consume an excessive\n amount of CPU.\n\n These functions now ignore Range headers containing more than 200 ranges.\n\n The limit is controlled by the new httpservecontentmaxranges\u003d\n GODEBUG setting. Setting GODEBUG\u003dhttpservecontentmaxranges\u003d0\n disables the limit.\n\n Thanks to Jakub Ciolek (https://ciolek.dev) for reporting this issue.\n\n This is CVE-2026-78667 and Go issue https://go.dev/issue/81858.\n\n- net/http: double flow control refund on HTTP/2 server streams\n\n The HTTP/2 server could refund connection-level flow control twice for the same data:\n Once when a client resets a stream (refunding data for any sent-but-unread portion\n of the stream), and again when a request handler reads the buffered data.\n A malicious client could exploit this to bypass the configured connection-level\n flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still\n limited by the concurrent stream limit and stream-level flow control.\n\n The HTTP/2 server now waits to refund connection-level flow control for reset\n streams until after the request handler is complete.\n\n Thanks to Ali Sherif (https://www.linkedin.com/in/ali-sherif-13812b276/) for reporting this issue.\n\n This is CVE-2026-78663 and Go issue https://go.dev/issue/81743.\n\nrelease notes: https://go.dev/doc/devel/release#go1.26.9\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "63445d6b70df8a69fb518a649ec8db1405504cd5", "tree": "dfbc679cd2f982f25cbbe4be7650a6df3cc51fce", "parents": [ "fdb4ee3e75cf1055ab0144123a051c4642667afe" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 08 14:03:13 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 08 14:03:13 2026" }, "message": "vendor: github.com/docker/go-connections v0.8.2\n\nv0.8.2\n\n- sockets: preserve configured TLS ALPN protocols\n- ci: add dependabot to update actions\n- ci: update runners to Ubuntu 26.04\n- build(deps): bump actions/checkout from 6.0.2 to 7.0.1\n- build(deps): bump actions/setup-go from 6.3.0 to 7.0.0\n- build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.3.0\n\nfull diff: https://github.com/docker/go-connections/compare/v0.8.1...v0.8.2\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "fdb4ee3e75cf1055ab0144123a051c4642667afe", "tree": "10e859b0ff93042954a0c4ba7d6ebfa4472b950e", "parents": [ "e7c0f5c53c079d9c6775069fe5cd87715d228d0f", "4ae247756e95990c51ae729d609fc1383b63b442" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 08 12:40:57 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 12:40:57 2026" }, "message": "Merge pull request #7360 from thaJeztah/bump_ansiterm\n\nvendor: github.com/Azure/go-ansiterm 8c912ac31dd4" }, { "commit": "4ae247756e95990c51ae729d609fc1383b63b442", "tree": "10e859b0ff93042954a0c4ba7d6ebfa4472b950e", "parents": [ "e7c0f5c53c079d9c6775069fe5cd87715d228d0f" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Oct 07 21:56:10 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Wed Oct 07 21:56:10 2026" }, "message": "vendor: github.com/Azure/go-ansiterm 8c912ac31dd4\n\n- update minimum go version to go1.17\n- update minimum golang.org/x/sys to v0.1.0\n\nfull diff: https://github.com/Azure/go-ansiterm/compare/e937bb47801a...8c912ac31dd4\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "e7c0f5c53c079d9c6775069fe5cd87715d228d0f", "tree": "dbf5e21299124bd088226e7987db6c7dc46c9c6f", "parents": [ "87fb2ebe7e923514fcd4c7f973edb5039d82384b", "e11705385d993d2718c121ddb0b5481459e50f53" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 07 17:28:07 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 07 17:28:07 2026" }, "message": "Merge pull request #7357 from thaJeztah/bump_runewidth\n\nvendor: github.com/mattn/go-runewidth v0.0.30" }, { "commit": "87fb2ebe7e923514fcd4c7f973edb5039d82384b", "tree": "a7852395ef7a0a7a666c5ec68c0d8e826e595ee6", "parents": [ "e8c098c8bf8de1697340e2c85562ae1b6bcad586", "862e7e6ad4138958ec703fcc8f5fbd77be0e6688" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 07 17:26:29 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 07 17:26:29 2026" }, "message": "Merge pull request #7359 from vvoland/gha-e2e-master\n\ngha/e2e: Also test against moby master" }, { "commit": "e8c098c8bf8de1697340e2c85562ae1b6bcad586", "tree": "8cef1938fb7cb9b0a0b325352e96ce2a1655f0fa", "parents": [ "3d2650ce76053393872e8389c2b77033146cb356", "374636ff15ddba8b09d6f444d8278cf0052fa499" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 07 17:26:04 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 07 17:26:04 2026" }, "message": "Merge pull request #7358 from nico1510/cloud-plugin-guidance\n\ncmd/docker: Add guidance for unavailable cloud plugins" }, { "commit": "374636ff15ddba8b09d6f444d8278cf0052fa499", "tree": "8cef1938fb7cb9b0a0b325352e96ce2a1655f0fa", "parents": [ "3d2650ce76053393872e8389c2b77033146cb356" ], "author": { "name": "Nicolas Beck", "email": "nicolas.beck@docker.com", "time": "Wed Oct 07 16:48:27 2026" }, "committer": { "name": "Nicolas Beck", "email": "nicolas.beck@docker.com", "time": "Wed Oct 07 16:48:27 2026" }, "message": "cmd/docker: Add guidance for unavailable cloud plugins\n\nExplain how to install the Offload plugin when --cloud cannot find it,\nand link to the cloud flag documentation. Preserve diagnostic details\nfor invalid or incompatible plugins and limit installation guidance\nto Offload.\n\nUse standard default-value handling in the resolution tests to satisfy\nthe lint complexity limit without changing test coverage.\n\nCo-authored-by: Allie Sadler \u003c102604716+aevesdocker@users.noreply.github.com\u003e\nSigned-off-by: Nicolas Beck \u003cnicolas.beck@docker.com\u003e\n" }, { "commit": "862e7e6ad4138958ec703fcc8f5fbd77be0e6688", "tree": "6f0a958886cceeec05a3a31c2bae894ffd1e26de", "parents": [ "3d2650ce76053393872e8389c2b77033146cb356" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 07 14:54:38 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Wed Oct 07 16:25:47 2026" }, "message": "gha/e2e: Also test against moby master\n\nAdd a \"master\" engine-version to the e2e matrix to catch regressions\nagainst the upcoming engine release before it reaches an rc.\n\nThere is no \"master\" dind image, so just copy the engine binary from the\nmoby/moby-bin:master image and put it into the latest dind image.\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "3d2650ce76053393872e8389c2b77033146cb356", "tree": "b3f270385e3ccd485853b1b972cf96a3c9557204", "parents": [ "5e6d8e3ab66042fbcd7f8eaeaddc2702b0003814", "fd58705f3a3273f23a39cdc118fcc49b04d3d1bd" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Tue Oct 06 17:31:33 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 06 17:31:33 2026" }, "message": "Merge pull request #7331 from docker/dependabot/github_actions/codeql-actions-4f351959ed\n\nbuild(deps): bump the codeql-actions group across 1 directory with 3 updates" }, { "commit": "e11705385d993d2718c121ddb0b5481459e50f53", "tree": "34a9c6f351bbe075997e04922cb6bc908213854f", "parents": [ "5e6d8e3ab66042fbcd7f8eaeaddc2702b0003814" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Tue Oct 06 09:05:44 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Tue Oct 06 09:07:44 2026" }, "message": "vendor: github.com/mattn/go-runewidth v0.0.30\n\n- Wrap: measure grapheme clusters, not runes\n- Skip grapheme segmentation for text that cannot form clusters\n- Keep strings that are not valid UTF-8 on the segmenter - #111\n- Take the rune fast path in the Truncate functions too\n\nfull diff: https://github.com/mattn/go-runewidth/compare/v0.0.29...v0.0.30\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "fd58705f3a3273f23a39cdc118fcc49b04d3d1bd", "tree": "b3f270385e3ccd485853b1b972cf96a3c9557204", "parents": [ "5e6d8e3ab66042fbcd7f8eaeaddc2702b0003814" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Oct 06 08:46:12 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 06 08:46:12 2026" }, "message": "build(deps): bump the codeql-actions group across 1 directory with 3 updates\n\nBumps the codeql-actions group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.38.0 to 4.38.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)\n\nUpdates `github/codeql-action/autobuild` from 4.38.0 to 4.38.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)\n\nUpdates `github/codeql-action/analyze` from 4.38.0 to 4.38.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.38.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/autobuild\n dependency-version: 4.38.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/init\n dependency-version: 4.38.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-actions\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "5e6d8e3ab66042fbcd7f8eaeaddc2702b0003814", "tree": "192007608ae0b2516c43192dcd6a66f9a1d3d129", "parents": [ "75d1d1a9e62f89d8284ad0b4b8678b936ae5bed9", "8503a98b68c761c2b537a34dc0dd8bd47865250d" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Mon Oct 05 21:47:38 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 05 21:47:38 2026" }, "message": "Merge pull request #7356 from nicksieger/cloud-resolver-interactive-input\n\ncmd/docker: Allow interactive cloud context resolution" }, { "commit": "8503a98b68c761c2b537a34dc0dd8bd47865250d", "tree": "192007608ae0b2516c43192dcd6a66f9a1d3d129", "parents": [ "488292ca1f1a6529098639bf801368106f553d9e" ], "author": { "name": "Nick Sieger", "email": "nick@nicksieger.com", "time": "Mon Oct 05 20:29:43 2026" }, "committer": { "name": "Nick Sieger", "email": "nick@nicksieger.com", "time": "Mon Oct 05 20:29:43 2026" }, "message": "refactor(cmd/docker): split resolveCloudContext to satisfy gocyclo\n\n- extract setResolverStdio for resolver terminal wiring\n- extract validateResolvedContext for context/endpoint checks\n\nSigned-off-by: Nick Sieger \u003cnick@nicksieger.com\u003e\n" }, { "commit": "488292ca1f1a6529098639bf801368106f553d9e", "tree": "45bb9a12bf7bb5e0dbac88a4de2922baf0a17970", "parents": [ "75d1d1a9e62f89d8284ad0b4b8678b936ae5bed9" ], "author": { "name": "Nicolas Beck", "email": "nicolas.beck@docker.com", "time": "Mon Oct 05 19:59:25 2026" }, "committer": { "name": "Nicolas Beck", "email": "nicolas.beck@docker.com", "time": "Mon Oct 05 19:59:25 2026" }, "message": "cmd/docker: Allow interactive cloud context resolution\n\nForward stdin and stderr to cloud context providers when both are\nterminals, allowing prompts during --cloud resolution. Pass file handles\ndirectly to preserve terminal detection and leave piped or redirected\ninput available to the requested command.\n\nUse the standard console handles when Windows terminal wrappers hide\ntheir underlying files. Keep stdout reserved for the JSON response.\n\nSigned-off-by: Nicolas Beck \u003cnicolas.beck@docker.com\u003e\n" }, { "commit": "75d1d1a9e62f89d8284ad0b4b8678b936ae5bed9", "tree": "aea941c1e0698eacd6c0e5808e81fc41cf833d23", "parents": [ "cb192aeb41bbee0f69e7fd5631d814b39e4bb5dc", "e8bb7f7c818691f013fa9c1ff38a1202e735a669" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Sat Oct 03 14:55:33 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Oct 03 14:55:33 2026" }, "message": "Merge pull request #7292 from vvoland/umasktest\n\nRevert \"e2e/container: Skip umask test until engine support\"" }, { "commit": "cb192aeb41bbee0f69e7fd5631d814b39e4bb5dc", "tree": "743b8fd586a6f77566e2a522c8582c48c7e00b61", "parents": [ "48988f5c12a5a12587af7917c39f68addc512193", "6cb63efe6f0df2dc8b5658404edc6d7c0ad8ed96" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Sat Oct 03 09:42:29 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Oct 03 09:42:29 2026" }, "message": "Merge pull request #7351 from nicksieger/docker-cloud-build-help-parsing\n\nfix(cli): recognize build/bake/builder aliasing before cloud help check" }, { "commit": "6cb63efe6f0df2dc8b5658404edc6d7c0ad8ed96", "tree": "743b8fd586a6f77566e2a522c8582c48c7e00b61", "parents": [ "48988f5c12a5a12587af7917c39f68addc512193" ], "author": { "name": "Nick Sieger", "email": "nick@nicksieger.com", "time": "Fri Oct 02 21:45:34 2026" }, "committer": { "name": "Nick Sieger", "email": "nick@nicksieger.com", "time": "Fri Oct 02 21:52:51 2026" }, "message": "fix(cli): recognize build/bake/builder aliasing before cloud help check\n\ndocker --cloud build rejected every BuildKit-only flag (--secret, --ssh,\n--push, --output, ...) because cloudHelpRequest parsed remaining args\nagainst the legacy build command\u0027s flag set before processAliases\nrewrites build into a buildx invocation. Treat build/bake/builder/image\nbuild the same as plugin commands: only recognize --help/-h immediately\nafter the resolved command path instead of validating flags.\n\nFixes #7350\n\nSigned-off-by: Nick Sieger \u003cnick@nicksieger.com\u003e\n" }, { "commit": "48988f5c12a5a12587af7917c39f68addc512193", "tree": "ae65a9660af62b8adebbf53fca9ce048de587d31", "parents": [ "e3559d29fb38d483f8cab8eaa9fb6aad7163b01e", "3caafba34fc32299bf9cf2fa372d62c12879983a" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 20:33:07 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 20:33:07 2026" }, "message": "Merge pull request #7347 from thaJeztah/bump_containerd_logs\n\nvendor: github.com/containerd/log v0.2.0" }, { "commit": "e3559d29fb38d483f8cab8eaa9fb6aad7163b01e", "tree": "1afeddf417f0e0d6cefe95ada53a6aa3a5b251a7", "parents": [ "4f8ad7605e71faeca1e1b3e7a18a5718b57e76ef", "886ab250f033477ba101771df6110dcee71c2d22" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Oct 01 20:32:20 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 20:32:20 2026" }, "message": "Merge pull request #7348 from thaJeztah/bump_client\n\nvendor: github.com/moby/moby/client v0.6.1, moby/api v1.56.1" }, { "commit": "4f8ad7605e71faeca1e1b3e7a18a5718b57e76ef", "tree": "990d0d729b0418aca80cf0ce489215ebe56ac309", "parents": [ "cd7b9082aa548bf3d7e7e5e49fa3990f25421a68", "58eea0606474d89f6b6f469def6293e0f62091c3" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 20:26:12 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 20:26:12 2026" }, "message": "Merge pull request #7346 from thaJeztah/bump_ansiterm\n\nvendor: github.com/Azure/go-ansiterm e937bb47801a" }, { "commit": "886ab250f033477ba101771df6110dcee71c2d22", "tree": "fb80a690b940f68a0f98803fe501f28f0c217c35", "parents": [ "cd7b9082aa548bf3d7e7e5e49fa3990f25421a68" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 20:23:55 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 20:23:55 2026" }, "message": "vendor: github.com/moby/moby/client v0.6.1, moby/api v1.56.1\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "58eea0606474d89f6b6f469def6293e0f62091c3", "tree": "990d0d729b0418aca80cf0ce489215ebe56ac309", "parents": [ "cd7b9082aa548bf3d7e7e5e49fa3990f25421a68" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 17:42:34 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 19:31:49 2026" }, "message": "vendor: github.com/Azure/go-ansiterm e937bb47801a\n\nfull diff: https://github.com/Azure/go-ansiterm/compare/faa5f7b0171c...e937bb47801ae0fd8fb8ff02743f6a93e2b51982\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "cd7b9082aa548bf3d7e7e5e49fa3990f25421a68", "tree": "0acd1513367ff7513d9dbe596ee4fd830d35d078", "parents": [ "482a140ce78d2c2a10a0c567f9d6288576562001", "fb1cc07c08300cf77fec2652072a907ad0f653c2" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Oct 01 18:56:40 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 18:56:40 2026" }, "message": "Merge pull request #7343 from vvoland/work-cloud\n\ncmd/docker: Add --cloud with configurable context resolution" }, { "commit": "fb1cc07c08300cf77fec2652072a907ad0f653c2", "tree": "2aac3d3e624c978a157d2811d0b37a1629484041", "parents": [ "b53372e86a35d4ca3c1e2b7b99018654962209c9" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 17:01:46 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 18:17:44 2026" }, "message": "cmd/docker: Add --cloud with configurable context resolution\n\nResolve it through the offload plugin by default, with a provider\noverride in features.cloud in the Docker config.\n\nRequire the selected plugin to declare the cloud-context-resolver\nfeature in its metadata before showing the flag in help and completion\nor invoking its __resolve-context operation.\n\nResolve through WithContextResolver, after the config file and context\nstore are loaded but before client initialization, without wrapping or\nre-executing Docker.\n\nForward --context to downstream plugins so they need not support\n--cloud or repeat provisioning. Skip provisioning for help, version,\nand completion requests. Report unknown flags and missing flag values\nbefore provisioning, so a mistyped invocation fails without creating\ncloud resources or contacting the engine selected before resolution.\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "482a140ce78d2c2a10a0c567f9d6288576562001", "tree": "a4b187e07004709868e161063856b6e53b9ff0e6", "parents": [ "0123ab82cc98a4bebe0e6cd32128906688f3e070", "6868874c983e4f55ba4e7a970e2ad7ba6e6db11c" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Oct 01 18:00:59 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 18:00:59 2026" }, "message": "Merge pull request #7345 from thaJeztah/bump_go_winio\n\nvendor: github.com/Microsoft/go-winio f19d9717deb0" }, { "commit": "0123ab82cc98a4bebe0e6cd32128906688f3e070", "tree": "5b7bf08ce9b6f596c8a30f16b7880e710b9cad35", "parents": [ "0932e7d9a8efb0dd45eb89bd689e9f1ad596b032", "07339fa78f92d29941a2a02380a1948e2e7b632d" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Thu Oct 01 17:46:10 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 17:46:10 2026" }, "message": "Merge pull request #7308 from thaJeztah/bump_compress\n\nvendor: github.com/klauspost/compress v1.20.1" }, { "commit": "3caafba34fc32299bf9cf2fa372d62c12879983a", "tree": "c050e4846ddb9b6c8d856e9e6cdcb6d38684894c", "parents": [ "0932e7d9a8efb0dd45eb89bd689e9f1ad596b032" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 17:44:52 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 17:44:52 2026" }, "message": "vendor: github.com/containerd/log v0.2.0\n\nfull diff: https://github.com/containerd/log/compare/v0.1.0...v0.2.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "07339fa78f92d29941a2a02380a1948e2e7b632d", "tree": "5b7bf08ce9b6f596c8a30f16b7880e710b9cad35", "parents": [ "637be3d60c561464a39297d1516b06652c1317ea" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 17:34:03 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 17:34:03 2026" }, "message": "vendor: github.com/klauspost/compress v1.20.1\n\nfull diff: https://github.com/klauspost/compress/compare/v1.20.0...v1.20.1\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "637be3d60c561464a39297d1516b06652c1317ea", "tree": "ea329335f2fe1bdfd52dc5a7ef9f3d4d90ddde80", "parents": [ "0932e7d9a8efb0dd45eb89bd689e9f1ad596b032" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Tue Sep 15 16:15:41 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 17:33:28 2026" }, "message": "vendor: github.com/klauspost/compress v1.20.0\n\n- Add lzw reader/writer\n- ci: test against go1.27.x, drop go1.24.x\n- flate: Writer L7-9 with dictionary can emit the dictionary to stream\n- gzhttp: limit jitter hash to jitterBuffer bytes\n- s2: arm64 assembly encoders, lowered from the amd64 avo program\n- s2: clamp the Go EncodeBetter skip to match the assembly\n- xpress: add Microsoft XPRESS (MS-XCA) decompression\n- xxhash: bound input of non-preemptive assembly\n- zstd, huff0: improved arm64 lowering, and narrow two table loads to MOVWQZX\n- zstd/huff0: break false partial-register dependencies in seqdec/4X decoders\n- zstd/huff0: fold two ISA-gap x86 idioms in the avo arm64 lowering\n\nfull diff: https://github.com/klauspost/compress/compare/v1.19.2...v1.20.0\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "6868874c983e4f55ba4e7a970e2ad7ba6e6db11c", "tree": "a34f8a4b2d83def0ef9c74879b1dd4f0ab033580", "parents": [ "0932e7d9a8efb0dd45eb89bd689e9f1ad596b032" ], "author": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 17:29:12 2026" }, "committer": { "name": "Sebastiaan van Stijn", "email": "github@gone.nl", "time": "Thu Oct 01 17:29:12 2026" }, "message": "vendor: github.com/Microsoft/go-winio f19d9717deb0\n\nfull diff: https://github.com/Microsoft/go-winio/compare/v0.6.2...f19d9717deb0a33bb37c3580481dd1909782fc03\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e\n" }, { "commit": "0932e7d9a8efb0dd45eb89bd689e9f1ad596b032", "tree": "44dde5e4c7f3cf390d7cae0c895210aeaab624b1", "parents": [ "7fc2dff9bceb96b266a3b2c3117c0955a0d9e616", "d6bc11318d18fb85988e101aba7e913609aadb7c" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 17:08:56 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 17:08:56 2026" }, "message": "Merge pull request #7344 from vvoland/process-release\n\nBump version to 29.9.0" }, { "commit": "b53372e86a35d4ca3c1e2b7b99018654962209c9", "tree": "cce9b6d678b5df29537b04ebbad5bf3f31a2e1b4", "parents": [ "b1f2c1dc060370c54e73d04f859f1107d8112ff8" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 17:01:41 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 17:04:26 2026" }, "message": "cli/command: Add WithContextResolver to override context selection\n\nCallers that choose the context from configuration had to do it before\nInitialize. That meant loading the config file and context store\nthemselves and handling --config a second time.\n\nWithContextResolver runs a callback inside Initialize after the config\nfile and context store are loaded, but before telemetry and endpoint\ninitialization. A non-empty result replaces the selected context, an\nempty result keeps normal selection, and an error aborts\ninitialization.\n\nThe API client and endpoint are resolved lazily, so they use the\noverridden context.\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "b1f2c1dc060370c54e73d04f859f1107d8112ff8", "tree": "19ef2ccb35245c0df358e09957312f9849664b5b", "parents": [ "7fc2dff9bceb96b266a3b2c3117c0955a0d9e616" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 17:01:36 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 17:04:25 2026" }, "message": "cli-plugins/metadata: Add Features for optional plugin contracts\n\nPlugins had no generic way to declare support for optional CLI\ncontracts, so each one would need its own top-level metadata field.\n\nAdd Features, keyed by feature name. Values are arbitrary JSON so a\nfeature can carry more than a boolean.\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "d6bc11318d18fb85988e101aba7e913609aadb7c", "tree": "44dde5e4c7f3cf390d7cae0c895210aeaab624b1", "parents": [ "7fc2dff9bceb96b266a3b2c3117c0955a0d9e616" ], "author": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 16:58:38 2026" }, "committer": { "name": "Paweł Gronowski", "email": "pawel.gronowski@docker.com", "time": "Thu Oct 01 16:58:38 2026" }, "message": "Bump version to 29.9.0\n\nSigned-off-by: Paweł Gronowski \u003cpawel.gronowski@docker.com\u003e\n" }, { "commit": "7fc2dff9bceb96b266a3b2c3117c0955a0d9e616", "tree": "c03fddcd86db533ccfbeb303e66464cc312a9992", "parents": [ "39f182cbaaf7af01e1d646e6672b8a1ca676e434", "ca5a266c813b97f099ff35c8c6ce291079e31906" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Wed Sep 23 09:45:10 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 23 09:45:10 2026" }, "message": "Merge pull request #7325 from docker/dependabot/github_actions/codecov/codecov-action-7.1.1\n\nbuild(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1" }, { "commit": "ca5a266c813b97f099ff35c8c6ce291079e31906", "tree": "c03fddcd86db533ccfbeb303e66464cc312a9992", "parents": [ "39f182cbaaf7af01e1d646e6672b8a1ca676e434" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 23 08:47:11 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 23 08:47:11 2026" }, "message": "build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1\n\nBumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 7.0.0 to 7.1.1.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/compare/fb8b3582c8e4def4969c97caa2f19720cb33a72f...303a32d7a59b442fa8d48b6a1cc6825c09c847a5)\n\n---\nupdated-dependencies:\n- dependency-name: codecov/codecov-action\n dependency-version: 7.1.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "39f182cbaaf7af01e1d646e6672b8a1ca676e434", "tree": "3e2836979323715bcc0efe78008d28eacb608f71", "parents": [ "0684ae0cc13d4a08f0421144984df2b08b155b33", "12566dd80dc74c6260e90b75fdc64bcebe043847" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Tue Sep 22 23:10:38 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 23:10:38 2026" }, "message": "Merge pull request #7323 from docker/dependabot/github_actions/docker-actions-72067bac81\n\nbuild(deps): bump the docker-actions group with 3 updates" }, { "commit": "0684ae0cc13d4a08f0421144984df2b08b155b33", "tree": "ef38e1b639188267c03170acd9e1f28925b6a8c7", "parents": [ "4167943209e53a349ee3a425f8c5eca481991cfe", "b7dc94c65f6590974a67090f54ac698efca06c33" ], "author": { "name": "Sebastiaan van Stijn", "email": "thaJeztah@users.noreply.github.com", "time": "Tue Sep 22 23:09:09 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 23:09:09 2026" }, "message": "Merge pull request #7311 from docker/dependabot/github_actions/codeql-actions-f545b4e0f6\n\nbuild(deps): bump the codeql-actions group across 1 directory with 3 updates" }, { "commit": "b7dc94c65f6590974a67090f54ac698efca06c33", "tree": "ef38e1b639188267c03170acd9e1f28925b6a8c7", "parents": [ "4167943209e53a349ee3a425f8c5eca481991cfe" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Sep 22 08:45:09 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 08:45:09 2026" }, "message": "build(deps): bump the codeql-actions group across 1 directory with 3 updates\n\nBumps the codeql-actions group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.37.9 to 4.38.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)\n\nUpdates `github/codeql-action/autobuild` from 4.37.9 to 4.38.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)\n\nUpdates `github/codeql-action/analyze` from 4.37.9 to 4.38.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.38.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/autobuild\n dependency-version: 4.38.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: codeql-actions\n- dependency-name: github/codeql-action/init\n dependency-version: 4.38.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: codeql-actions\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "12566dd80dc74c6260e90b75fdc64bcebe043847", "tree": "6e4c8135314fa135c1a4ac5dac32eeb071c0d82e", "parents": [ "4167943209e53a349ee3a425f8c5eca481991cfe" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Sep 22 08:43:27 2026" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 08:43:27 2026" }, "message": "build(deps): bump the docker-actions group with 3 updates\n\nBumps the docker-actions group with 3 updates: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/bake-action](https://github.com/docker/bake-action) and [docker/docker-agent-action/.github/workflows/review-pr.yml](https://github.com/docker/docker-agent-action).\n\n\nUpdates `docker/setup-buildx-action` from 4.3.0 to 4.4.0\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/37fe631027851001ddb9b187196cc803df7f5f0e...594f3bf4285d9ea8dc53c9a0c9c4092420091003)\n\nUpdates `docker/bake-action` from 7.3.0 to 7.4.0\n- [Release notes](https://github.com/docker/bake-action/releases)\n- [Commits](https://github.com/docker/bake-action/compare/d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b...018cb6412ab401ebaa809aa5f85966b74628600f)\n\nUpdates `docker/docker-agent-action/.github/workflows/review-pr.yml` from 2.0.8 to 2.0.9\n- [Release notes](https://github.com/docker/docker-agent-action/releases)\n- [Commits](https://github.com/docker/docker-agent-action/compare/c3d5c9b1517c670f468086c577b8339ce2344b5e...3654ec391b070e247de2e2e3c1ff2519b6378b3a)\n\n---\nupdated-dependencies:\n- dependency-name: docker/setup-buildx-action\n dependency-version: 4.4.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: docker-actions\n- dependency-name: docker/bake-action\n dependency-version: 7.4.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: docker-actions\n- dependency-name: docker/docker-agent-action/.github/workflows/review-pr.yml\n dependency-version: 2.0.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: docker-actions\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" } ], "next": "4167943209e53a349ee3a425f8c5eca481991cfe" }