Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump github.com/docker/docker from 24.0.9+incompatible to 26.1.4+incompatible #5097

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 30, 2024

Bumps github.com/docker/docker from 24.0.9+incompatible to 26.1.4+incompatible.

Release notes

Sourced from github.com/docker/docker's releases.

v26.1.4

26.1.4

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release updates the Go runtime to 1.21.11 which contains security fixes for:

Bug fixes and enhancements

  • Fixed an issue where promoting a node immediately after another node was demoted could cause the promotion to fail. moby/moby#47870
  • Prevent the daemon log from being spammed with superfluous response.WriteHeader call ... messages.. moby/moby#47843
  • Don't show empty hints when plugins return an empty hook message. docker/cli#5083
  • Added ContextType: "moby" to the context list/inspect output to address a compatibility issue with Visual Studio Container Tools. docker/cli#5095
  • Fix a compatibility issue with Visual Studio Container Tools. docker/cli#5095

Packaging updates

v26.1.3

26.1.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • Fix a regression that prevented the use of DNS servers within a --internal network. moby/moby#47832
  • When the internal DNS server's own address is supplied as an external server address, ignore it to avoid unproductive recursion. moby/moby#47833

Packaging updates

... (truncated)

Commits
  • de5c9cf Merge pull request #47912 from thaJeztah/26.1_backport_vendor_containerd_1.7.18
  • c62dcf8 Merge pull request #47911 from thaJeztah/26.1_backport_bump_containerd_binary...
  • 17315a2 vendor: github.com/containerd/containerd v1.7.18
  • cbd9418 update containerd binary to v1.7.18
  • fb9f72a Merge pull request #47904 from thaJeztah/26.1_backport_bump_go1.21.11
  • 3115daa update to go1.21.11
  • 2861734 Merge pull request #47892 from thaJeztah/26.1_backport_api_docs_network_confi...
  • 9c95aea Merge pull request #47893 from thaJeztah/26.1_backport_bump_docker_py
  • 3e09e19 Merge pull request #47894 from thaJeztah/26.1_backport_vendor_containerd_v1.7.17
  • 65b679a Merge pull request #47889 from thaJeztah/26.1_backport_platforms_err_handling
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.9+incompatible to 26.1.4+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v24.0.9...v26.1.4)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 30, 2024
@dependabot dependabot bot requested a review from nghialv as a code owner July 30, 2024 10:28
@dependabot dependabot bot added the go Pull requests that update Go code label Jul 30, 2024
khanhtc1202
khanhtc1202 previously approved these changes Jul 30, 2024
@Warashi
Copy link
Contributor

Warashi commented Jul 30, 2024

The integration test is failing, so this PR is not acceptable as-is.

Copy link

codecov bot commented Aug 1, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 22.81%. Comparing base (8944de2) to head (995aab2).
Report is 88 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #5097      +/-   ##
==========================================
+ Coverage   22.79%   22.81%   +0.01%     
==========================================
  Files         409      409              
  Lines       43338    43338              
==========================================
+ Hits         9881     9889       +8     
+ Misses      32677    32671       -6     
+ Partials      780      778       -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Contributor

@Warashi Warashi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍🏻

Copy link
Member

@ffjlabo ffjlabo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you 🙏

@khanhtc1202 khanhtc1202 merged commit d805cf5 into master Aug 1, 2024
18 checks passed
@khanhtc1202 khanhtc1202 deleted the dependabot/go_modules/github.com/docker/docker-26.1.4incompatible branch August 1, 2024 07:06
github-actions bot pushed a commit that referenced this pull request Aug 13, 2024
…mpatible (#5097)

* Bump github.com/docker/docker

Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.9+incompatible to 26.1.4+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v24.0.9...v26.1.4)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

* Manually update docker/cli to pass the tests build errors

Signed-off-by: khanhtc1202 <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: khanhtc1202 <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: khanhtc1202 <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>
ffjlabo added a commit that referenced this pull request Aug 13, 2024
#5126 #5128 #5130 (#5132)

* Register otel TracerProvider to send traces (#5029)

* Register otel TracerProvider to send traces

Signed-off-by: Shinnosuke Sawada-Dazai <[email protected]>

* Bump gRPC version

Signed-off-by: Shinnosuke Sawada-Dazai <[email protected]>

* Upgrade google.golang.org/grpc

Signed-off-by: Shinnosuke Sawada-Dazai <[email protected]>

---------

Signed-off-by: Shinnosuke Sawada-Dazai <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>

* Set fetch-depth to 0 to create correct patches during git cherry-pick as much as possible (#5096)

Signed-off-by: Yoshiki Fujikane <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>

* Bump github.com/docker/docker from 24.0.9+incompatible to 26.1.4+incompatible (#5097)

* Bump github.com/docker/docker

Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.9+incompatible to 26.1.4+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v24.0.9...v26.1.4)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

* Manually update docker/cli to pass the tests build errors

Signed-off-by: khanhtc1202 <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: khanhtc1202 <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: khanhtc1202 <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>

* Bump postcss from 7.0.39 to 8.4.40 in /docs (#5099)

Bumps [postcss](https://github.com/postcss/postcss) from 7.0.39 to 8.4.40.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@7.0.39...8.4.40)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: pipecd-bot <[email protected]>

* Use LRUCache for Application Manifests Cache (#5108)

* Use LRUCache for Application Manifests Cache

Signed-off-by: Shinnosuke Sawada-Dazai <[email protected]>

* Use not constant but config value

Co-authored-by: Yoshiki Fujikane <[email protected]>
Signed-off-by: Shinnosuke Sawada-Dazai <[email protected]>

---------

Signed-off-by: Shinnosuke Sawada-Dazai <[email protected]>
Co-authored-by: Yoshiki Fujikane <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>

* Fix UI dependecies deprecated (#5113)

Signed-off-by: khanhtc1202 <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>

* Bump postcss and autoprefixer in /docs (#5114)

Bumps [postcss](https://github.com/postcss/postcss) to 8.4.40 and updates ancestor dependency [autoprefixer](https://github.com/postcss/autoprefixer). These dependencies need to be updated together.

Updates `postcss` from 7.0.39 to 8.4.40
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@7.0.39...8.4.40)

Updates `autoprefixer` from 9.8.8 to 10.4.20
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@9.8.8...10.4.20)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: indirect
- dependency-name: autoprefixer
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: pipecd-bot <[email protected]>

* fix: upgrade google-protobuf from 3.21.0 to 3.21.4 (#5115)

Snyk has created this PR to upgrade google-protobuf from 3.21.0 to 3.21.4.

See this package in yarn:
google-protobuf

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>

* fix: upgrade react-markdown from 6.0.2 to 6.0.3 (#5116)

Snyk has created this PR to upgrade react-markdown from 6.0.2 to 6.0.3.

See this package in yarn:
react-markdown

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>

* fix: tool/actions-gh-release/Dockerfile to reduce vulnerabilities (#5118)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-ALPINE320-OPENSSL-7413532
- https://snyk.io/vuln/SNYK-ALPINE320-OPENSSL-7413532

Signed-off-by: khanhtc1202 <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>

* fix: upgrade dayjs from 1.8.28 to 1.11.12 (#5126)

Snyk has created this PR to upgrade dayjs from 1.8.28 to 1.11.12.

See this package in yarn:
dayjs

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>

* Bump github.com/docker/docker (#5128)

Signed-off-by: pipecd-bot <[email protected]>

* Update RELEASE to v0.48.5 (#5130)

Signed-off-by: Yoshiki Fujikane <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>

---------

Signed-off-by: Shinnosuke Sawada-Dazai <[email protected]>
Signed-off-by: pipecd-bot <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: khanhtc1202 <[email protected]>
Signed-off-by: t-kikuc <[email protected]>
Co-authored-by: Shinnosuke Sawada-Dazai <[email protected]>
Co-authored-by: Yoshiki Fujikane <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: khanhtc1202 <[email protected]>
Co-authored-by: Khanh Tran <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Co-authored-by: Chris Aniszczyk <[email protected]>
ffjlabo added a commit that referenced this pull request Aug 14, 2024
ffjlabo added a commit that referenced this pull request Aug 15, 2024
…5116 #51…"

This reverts commit b1d9cd0.

Signed-off-by: Yoshiki Fujikane <[email protected]>
ffjlabo added a commit that referenced this pull request Aug 15, 2024
…5116 #51…" (#5135)

This reverts commit b1d9cd0.

Signed-off-by: Yoshiki Fujikane <[email protected]>
@github-actions github-actions bot mentioned this pull request Aug 15, 2024
@github-actions github-actions bot mentioned this pull request Aug 26, 2024
This was referenced Sep 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cherry-pick dependencies Pull requests that update a dependency file go Pull requests that update Go code v0.48.5
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants