Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the major-dependencies group with 4 updates in the / directory: github.com/docker/docker, github.com/docker/go-connections, github.com/opencontainers/image-spec and github.com/opencontainers/runtime-spec.

Updates github.com/docker/docker from 27.0.2+incompatible to 28.5.2+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v28.5.2

28.5.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

[!CAUTION] This release contains fixes for three high-severity security vulnerabilities in runc:

All three vulnerabilities ultimately allow (through different methods) for full container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files.

Packaging updates

Bug fixes and enhancements

Deprecations

  • Go-SDK: cli/command/image/build: deprecate DefaultDockerfileName, DetectArchiveReader, WriteTempDockerfile, ResolveAndValidateContextPath. These utilities were only used internally and will be removed in the next release. docker/cli#6610
  • Go-SDK: cli/command/image/build: deprecate IsArchive utility. docker/cli#6560
  • Go-SDK: opts: deprecate ValidateMACAddress. docker/cli#6560
  • Go-SDK: opts: deprecate ListOpts.Delete(). docker/cli#6560

v28.5.1

28.5.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Deprecations

  • api/types/image: InspectResponse: deprecate Parent and DockerVersion fields. moby/moby#51105
  • api/types/plugin: deprecate Config.DockerVersion field. moby/moby#51110

... (truncated)

Commits
  • 89c5e8f Merge pull request #51396 from thaJeztah/28.x_backport_api_docs
  • 9b93878 Merge pull request #51395 from thaJeztah/28.x_backport_rootless_reject
  • 6178456 Merge pull request #51398 from vvoland/51397-28.x
  • 0cae4e5 vendor: github.com/moby/buildkit v0.25.2
  • 33cc06f Merge pull request #51394 from vvoland/51393-28.x
  • d525277 api/docs: remove BuildCache.Parent field for API v1.42 and up
  • 2fbc51b dockerd-rootless.sh: reject DOCKERD_ROOTLESS_ROOTLESSKIT_NET=host
  • bd98008 integration-cli: Adjust nofile limits
  • 1967515 Dockerfile: update runc binary to v1.3.3
  • 4489660 Merge pull request #51387 from thaJeztah/28.x_bump_go
  • Additional commits viewable in compare view

Updates github.com/docker/go-connections from 0.5.0 to 0.6.0

Commits
  • 42faf79 Merge pull request #138 from thaJeztah/sockets_move_unix_options
  • 9ffab7e sockets: make NewUnixSocket, WithChown, WithChmod unix-only
  • 6bb1d15 Merge pull request #135 from thaJeztah/rename_test_files
  • b6c843d sockets: rename files to be considered test files
  • 80898b6 Merge pull request #133 from thaJeztah/deprecate_socket_dialpipe
  • a4399e5 socket: deprecate DialPipe
  • b071e04 Merge pull request #128 from thaJeztah/remove_old_cyphers
  • 578bfde Merge pull request #132 from thaJeztah/optimize_ParsePortSpec
  • deccd71 tlsconfig: align client and server defaults, remove weak CBC ciphers
  • 30b91c8 nat: ParsePortSpec: combine some conditions
  • Additional commits viewable in compare view

Updates github.com/opencontainers/image-spec from 1.1.0 to 1.1.1

Release notes

Sourced from github.com/opencontainers/image-spec's releases.

v1.1.1

Vote Passed [+5 -0 nv1] - https://groups.google.com/a/opencontainers.org/g/dev/c/T-olx0jdT18 Release PR : opencontainers/image-spec#1247 Full Changelog: opencontainers/image-spec@v1.1.0...v1.1.1

Commits
  • 147f9c1 Release v1.1.1
  • fbb4662 Merge pull request #1238 from mkenigs/wording-nit
  • 81e457e Fix grammar nit
  • 92353b0 Merge pull request #1225 from sudo-bmitch/pr-doc-go-version
  • 1a0b9f9 Merge pull request #1230 from sudo-bmitch/pr-layout-extensibility
  • f272635 Merge pull request #1228 from sudo-bmitch/pr-mixed-digest-algo
  • e0462ab Merge pull request #1229 from tianon/setup-go
  • cf536e3 Merge pull request #1227 from sudo-bmitch/pr-rm-project-doc
  • 60acaac Document extensibility of the image layout
  • 4dcf962 Document Go version policy
  • Additional commits viewable in compare view

Updates github.com/opencontainers/runtime-spec from 1.2.0 to 1.3.0

Release notes

Sourced from github.com/opencontainers/runtime-spec's releases.

v1.3.0

This is the fourth minor release of the v1 series of the Open Container Initiative Runtime Specification. This release features the addition of the specification for FreeBSD.

Additions

  • config-vm: add hwConfig object (#1209)
  • config-linux: add intelRdt.schemata field (#1230)
  • config-linux: add netDevices object (#1271)
  • config-linux: add memoryPolicy object (#1282)
  • config-freebsd: add the spec for FreeBSD (#1286)
  • config-linux: add intelRdt.enableMonitoring field (#1287)

Minor fixes

  • config-linux: clarify intelRdt configuration (#1196)
  • runtime: fail when a poststart hook fails (#1262)
  • config-linux: clarify pids cgroup settings (#1279)
  • config-linux: define default clos for intelRdt (#1289)
  • features-linux: add intelRdt.enableMonitoring field (#1290)
  • features-linux: add intelRdt.schemata field (#1291)
  • config-linux: fix and elaborate memoryPolicy.nodes field (#1294)
  • config-linux, schema: fix FileMode description (#1298)

Documentation, CI & Governance

  • add systemd-nspawn to implementations.md (#1272)
  • CI: add codespell, bump golangci-lint (#1281)
  • docs: add missing backticks for code formatting (#1284)
  • docs: fix typo (#1285)
  • principles: fix typo (#1288)
  • schema: fix json (#1297)
  • ci: use supported Go versions (#1300)
  • Add minimum supported Go version to CI (#1303)
  • Mention FreeBSD platform (#1304)

Thanks to the following contributors for making this release possible: @​Artoria2e5 @​Sharmaann @​aojea @​ariel-anieli @​askervin @​cyphar @​dfr @​gogolok @​ipuustin @​kolyshkin @​marquiz @​oleksiimoisieiev @​tianon

Vote-Results: +9 -0 *2 (#1302) Signed-off-by: Akihiro Suda (@​AkihiroSuda)

v1.2.1

This is the first patch release of the v1.2.z series of the Open Container Initative Runtime Specification. It primarily includes a series of minor fixes as well as new support for the specification of the CPU affinity of container processes.

Additions

... (truncated)

Changelog

Sourced from github.com/opencontainers/runtime-spec's changelog.

OpenContainers Specifications

Changes with v1.3.0:

Additions:

  • config-vm: add hwConfig object (#1209)
  • config-linux: add intelRdt.schemata field (#1230)
  • config-linux: add netDevices object (#1271)
  • config-linux: add memoryPolicy object (#1282)
  • config-freebsd: add the spec for FreeBSD (#1286)
  • config-linux: add intelRdt.enableMonitoring field (#1287)

Minor fixes:

  • config-linux: clarify intelRdt configuration (#1196)
  • runtime: fail when a poststart hook fails (#1262)
  • config-linux: clarify pids cgroup settings (#1279)
  • config-linux: define default clos for intelRdt (#1289)
  • features-linux: add intelRdt.enableMonitoring field (#1290)
  • features-linux: add intelRdt.schemata field (#1291)
  • config-linux: fix and elaborate memoryPolicy.nodes field (#1294)
  • config-linux, schema: fix FileMode description (#1298)

Documentation, CI & Governance:

  • add systemd-nspawn to implementations.md (#1272)
  • CI: add codespell, bump golangci-lint (#1281)
  • docs: add missing backticks for code formatting (#1284)
  • docs: fix typo (#1285)
  • principles: fix typo (#1288)
  • schema: fix json (#1297)
  • ci: use supported Go versions (#1300)
  • Add minimum supported Go version to CI (#1303)
  • Mention FreeBSD platform (#1304)

Changes with v1.2.1:

Additions:

  • zos updates (#1273)
  • Add support for windows CPU affinity (#1258)
  • specs-go: sync SCMP_ARCH_* constants with libseccomp main (#1229)
  • Add CPU affinity to executed processes (#1253, #1261)
  • config-linux: describe the format of cpus and mems (#1253)

Minor fixes:

  • Fix description of errnoRet in Seccomp (#1277)
  • config-linux: update for libseccomp v2.6.0 (#1276)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the major-dependencies group with 4 updates in the / directory: [github.com/docker/docker](https://github.com/docker/docker), [github.com/docker/go-connections](https://github.com/docker/go-connections), [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) and [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec).


Updates `github.com/docker/docker` from 27.0.2+incompatible to 28.5.2+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v27.0.2...v28.5.2)

Updates `github.com/docker/go-connections` from 0.5.0 to 0.6.0
- [Commits](docker/go-connections@v0.5.0...v0.6.0)

Updates `github.com/opencontainers/image-spec` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/opencontainers/image-spec/releases)
- [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md)
- [Commits](opencontainers/image-spec@v1.1.0...v1.1.1)

Updates `github.com/opencontainers/runtime-spec` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/opencontainers/runtime-spec/releases)
- [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog)
- [Commits](opencontainers/runtime-spec@v1.2.0...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-version: 28.5.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-dependencies
- dependency-name: github.com/docker/go-connections
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-dependencies
- dependency-name: github.com/opencontainers/image-spec
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major-dependencies
- dependency-name: github.com/opencontainers/runtime-spec
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants