Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.2.2
->v4.3.0
28.0.4
->28.4.0
0.22.0
->0.28.0
2.35.0
->2.39.2
v3.4.0
->v3.5.0
v3.10.0
->v3.11.1
9.0.203
->9.0.304
9.0.203
->9.0.304
9.0.203
->9.0.304
9.0.203-noble
->9.0.304-noble
Release Notes
actions/checkout (actions/checkout)
v4.3.0
Compare Source
What's Changed
New Contributors
Full Changelog: actions/checkout@v4...v4.3.0
moby/moby (docker)
v28.4.0
Compare Source
28.4.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
GODEBUG
environment variable when the key-value pair ("GODEBUG":"..."
) exists inside the docker context metadata. docker/cli#6399Bug fixes and enhancements
docker pull
anddocker image pull
. docker/cli#6420docker push
if the client did not send anX-Registry-Auth
header. moby/moby#50738docker history
failing withsnapshot X does not exist
when calling on a non-native image that was built locally. moby/moby#50875docker image prune
to emit correctuntag
anddelete
events and list only the deleted images root digests instead of every blob. moby/moby#50837docker push
anddocker pull
after a failure caused by missing authentication. docker/cli#6256Packaging updates
runc
to v1.3.0. moby/moby#50699Networking
API
AuthConfig.Email
field. moby/moby#50797Go SDK
Deprecations
--tlscacert
,--tlscert
, and--tlskey
command-line flags. docker/cli#6291DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS
) as deprecated in v28.4 and set for removal in v30.0. docker/cli#6309NetworkSettingsBase.Bridge
, structNetworkSettingsBase
, all the fields ofDefaultNetworkSettings
, and structDefaultNetworkSettings
. moby/moby#50839build.CacheDiskUsage
,container.DiskUsage
,images.DiskUsage
andvolumes.DiskUsage
are now deprecated and will be removed in the next major release. moby/moby#50768ReexecEnvvar
. docker/cli#6411CommandAnnotationPlugin
,CommandAnnotationPluginVendor
,CommandAnnotationPluginVersion
,CommandAnnotationPluginInvalid
,CommandAnnotationPluginCommandPath
) in favor of their equivalent incli-plugins/manager/metadata
. docker/cli#6298NamePrefix
,MetadataSubcommandName
,HookSubcommandName
,Metadata
,ReexecEnvvar
) in favor of their equivalent incli-plugins/manager/metadata
. docker/cli#6269Candidate
interface, which was only for internal use. docker/cli#6269NewPluginError
function, which was only for internal use. docker/cli#6269ResourceAttributesEnvvar
const. docker/cli#6269NewBuilderCommand
andNewBakeStubCommand
. These functions will be removed in the next release. docker/cli#6312NewPruneCommand
. docker/cli#6343NewCheckpointCommand
. This function will be removed in the next release. docker/cli#6312NewFormat
,FormatWrite
. docker/cli#6341NoComplete
. docker/cli#6405ValidArgsFn
. docker/cli#6259NewConfigCommand
. This function will be removed in the next release. docker/cli#6312NewFormat
,FormatWrite
,InspectFormatWrite
. docker/cli#6341RunConfigCreate
,CreateOptions
,RunConfigInspect
,InspectOptions
,RunConfigList
,ListOptions
,RunConfigRemove
, andRemoveOptions
. docker/cli#6369NewBuildCommand
,NewPullCommand
,NewPushCommand
,NewImagesCommand
,NewImageCommand
,NewHistoryCommand
,NewImportCommand
,NewLoadCommand
,NewRemoveCommand
,NewSaveCommand
,NewTagCommand
,NewPruneCommand
. These functions will be removed in the next release. docker/cli#6312NewDiffFormat
,DiffFormatWrite
. These functions were only used internally and will be removed in the next release. docker/cli#6341NewRunCommand
,NewExecCommand
,NewPsCommand
,NewContainerCommand
,NewAttachCommand
,NewCommitCommand
,NewCopyCommand
,NewCreateCommand
,NewDiffCommand
,NewExportCommand
,NewKillCommand
,NewLogsCommand
,NewPauseCommand
,NewPortCommand
,NewRenameCommand
,NewRestartCommand
,NewRmCommand
,NewStartCommand
,NewStatsCommand
,NewStopCommand
,NewTopCommand
,NewUnpauseCommand
,NewUpdateCommand
,NewWaitCommand
,NewPruneCommand
. These functions will be removed in the next release. docker/cli#6312NewContextCommand
. This function will be removed in the next release. docker/cli#6312RunCreate
andCreateOptions
. docker/cli#6403RunExport
andExportOptions
. docker/cli#6403RunImport
. docker/cli#6403RunRemove
andRemoveOptions
. docker/cli#6403RunUpdate
andUpdateOptions
. docker/cli#6403RunUse
. docker/cli#6403AuthResolver
utility. docker/cli#6357NewHistoryFormat
,HistoryWrite
. docker/cli#6341, docker/cli#6341NewManifestCommand
. This functions will be removed in the next release. docker/cli#6312NewFormat
,FormatWrite
. docker/cli#6341NewNetworkCommand
. These functions will be removed in the next release. docker/cli#6312NewFormat
,FormatWrite
,InspectFormatWrite
. docker/cli#6341NewNodeCommand
. This functions will be removed in the next release. docker/cli#6312NewFormat
,FormatWrite
. docker/cli#6341NewPluginCommand
. This function will be removed in the next release. docker/cli#6312NewLoginCommand
,NewLogoutCommand
,NewSearchCommand
. These functions will be removed in the next release. docker/cli#6312NewSearchFormat
,SearchWrite
. docker/cli#6341OauthLoginEscapeHatchEnvVar
const. docker/cli#6413NewFormat
,FormatWrite
,InspectFormatWrite
. docker/cli#6341NewSecretCommand
. This functions will be removed in the next release. docker/cli#6312NewFormat
,InspectFormatWrite
. docker/cli#6341NewServiceCommand
. This function will be removed in the next release. docker/cli#6312NewStackCommand
. This function will be removed in the next release. docker/cli#6312RunList
,RunServices
. docker/cli#6391NewSwarmCommand
. This function will be removed in the next release. docker/cli#6312NewVersionCommand
,NewInfoCommand
,NewSystemCommand
,NewEventsCommand
,NewInspectCommand
. These functions will be removed in the next release. docker/cli#6312NewTaskFormat
,FormatWrite
. docker/cli#6341NewTrustCommand
. This function will be removed in the next release. docker/cli#6312SignedTagInfo
,SignerInfo
,NewTrustTagFormat
,NewSignerInfoFormat
,TagWrite
,SignerInfoWrite
. docker/cli#6341NewVolumeCommand
,NewPruneCommand
. These functions will be removed in the next release. docker/cli#6312AddTrustSigningFlags
,AddTrustVerificationFlags
, andAddPlatformFlag
utilities, which were only used internally. docker/cli#6311ConfigureAuth
utility. docker/cli#6257CopyToFile
utility. docker/cli#6257AuthConfig.Email
field. docker/cli#6392VisitAll
,DisableFlagsInUseLine
utilities. These utilities were only used internally and will be removed in the next release. docker/cli#6276HasCompletionArg
utility. This utility was only used internally. docker/cli#6276cli/command.RegistryAuthenticationPrivilegedFunc
. docker/cli#6256NewNamedListOptsRef
,NewNamedMapOpts
,NamedListOpts
,NamedMapOpts
, andNamedOption
. These types and functions are no longer used and will be removed in the next release. docker/cli#6292ParseEnvFile
in favour ofkvfile.Parse
. docker/cli#6381QuotedString
. This utility is no longer used, and will be removed in the next release. docker/cli#6275ValidateHost
utility. This function is no longer used, and will be removed in the next release. docker/cli#6280JSONMessage.From
,JSONMessage.Time
, andJSONMessage.TimeNano
fields, as they are no longer returned by the API for progress messages. Use theevents.Message
type instead to unmarshal the/events
response. moby/moby#50762v28.3.3
Compare Source
28.3.3
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Security
This release fixes an issue where, after a firewalld reload, published container ports could be accessed directly from the local network, even when they were intended to be accessible only via a loopback address. CVE-2025-54388 / GHSA-x4rx-4gw3-53p4 / moby/moby#50506.
Packaging updates
Go SDK
TrunateID()
utility as alternative forgithub.com/docker/docker/pkg/stringid.TrunateID()
. docker/cli#6180v28.3.2
: 28.3.2Compare Source
28.3.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
--use-api-socket
not working correctly when targeting a remote daemon. docker/cli#6157DOCKER_AUTH_CONFIG
is set duringdocker login
anddocker logout
. docker/cli#6163Packaging updates
v28.3.1
: 28.3.1Compare Source
28.3.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Packaging updates
models:
key in Docker Compose. docker/docker-ce-packaging#1222v28.3.0
: 28.3.0Compare Source
28.3.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
docker run --gpus
. moby/moby#49952DOCKER_AUTH_CONFIG
as a credential store. docker/cli#6008Bug fixes and enhancements
docker image inspect inspect
omitting empty fields. moby/moby#50135docker images --tree
not marking images as in-use when the containerd image store is disabled. docker/cli#6140docker pull/push
hang in non-interactive when authentication is required caused by prompting for login credentials. docker/cli#6141docker pull
would show Docker Hub-specific hints when logging in on other registries. docker/cli#6135docker remove
command that was accidentally introduced in Docker 23.0. docker/cli#6144dockerd --validate
and improve error messages for invalid mirrors. moby/moby#50240dockerd-rootless-setuptool.sh
: Fix the script from silently returning with no error message when subuid/subgid system requirements are not satisfied. moby/moby#50059docker push
not creating a tag on the remote repository. moby/moby#50199docker pull/push
. moby/moby#50176Packaging updates
Networking
docker network inspect --verbose
could sometimes crash the daemon (#49937).0.0.0.0
and others are mapped to specific host addresses. moby/moby#50054network inspect
response for an overlay network now reports thatEnableIPv4
is true. moby/moby#50147"Mirrored"
. moby/moby#50155docker system prune
anddocker network prune
only remove networks created by Docker. moby/moby#50154API
GET /images/json
now sets the value of theContainers
field for all images to the count of containers using the image. moby/moby#50146Deprecations
GET /images/{name}/json
response are now deprecated and will be removed in v29.0. docker/cli#6129ExecOptions.Detach
. This field is not used, and will be removed in a future release. moby/moby#50219IdentityMapping
andIdentity.Chown
. moby/moby#50210v28.2.2
: 28.2.2Compare Source
28.2.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
docker build --push
to fail. This reverts the fix fordocker build
not persisting overridden images as dangling. moby/moby#50105Networking
DOCKER-USER
chain, do not add an explicitRETURN
rule, allowing users to append as well as insert their own rules. Existing rules are not removed on upgrade, but it won't be replaced after a reboot. moby/moby#50098v28.2.1
: 28.2.1Compare Source
28.2.1
Packaging updates
docker
group/user on fresh installations. docker-ce-packaging#1209v28.2.0
: 28.2.0Compare Source
28.2.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
{{.Platform}}
as formatting option fordocker ps
to show the platform of the image the container is running. docker/cli#6042../
) on bind mount sources when usingdocker run/create
with-v/--volume
or--mount type=bind
options. docker/cli#4966docker info
. docker/cli#6078docker image rm
: add--platform
option to remove a variant from multi-platform images. docker/cli#6109DOCKER_BUILDKIT=1
). moby/moby#49740Bug fixes and enhancements
fluentd-write-timeout
), which enables specifying write timeouts for fluentd connections. moby/moby#49911DOCKER_AUTH_CONFIG
for the experimental--use-api-socket
option. docker/cli#6019docker exec
waiting for 10 seconds if a non-existing user or group was specified. moby/moby#49868docker swarm init
ignoringcacert
option of--external-ca
. docker/cli#5995~/.docker/config.json
) if it was a relative symbolic link. docker/cli#5282--restart always
policy using CDI devices failing to start on daemon restart. moby/moby#49990plugin does not implement PluginAddr interface
error for Swarm CSI drivers. moby/moby#49961docker login
error messages for invalid options. docker/cli#6036listmount
,statmount
,lsm_get_self_attr
,lsm_list_modules
,lsm_set_self_attr
,mseal
,uretprobe
,riscv_hwprobe
,getxattrat
,listxattrat
,removexattrat
, andsetxattrat
. This prevents containers from receiving EPERM errors when using them. moby/moby#50077docker inspect
: add shell completion, improve flag-description for--type
and improve validation. docker/cli#6052docker build
not persisting overridden images as dangling. moby/moby#49702docker system df
reporting a negative reclaimable space amount. moby/moby#49707PUT
requests when pushing a multi-platform image. moby/moby#49949Packaging updates
docker-ce
man-pages. docker/docker-ce-packaging#1203Networking
"com.docker.network.bridge.trusted_host_interfaces"
, accepting a colon-separated list of interface names. These interfaces have direct access to published ports on container IP addresses. moby/moby#49832"allow-direct-routing"
to disable filtering of packets from outside the host addressed directly to containers. moby/moby#49832com.docker.network.enable_ipv4
orcom.docker.network.enable_ipv6
in inspect output if they have been overridden byEnableIPv4
orEnableIPv6
in the network create request. moby/moby#49866docker network inspect --verbose
could sometimes crash the daemon. moby/moby#49937API
1.50
.DELETE /images/{name}
now supports aplatforms
query parameter. It accepts an array of JSON-encoded OCI Platform objects, allowing for selecting a specific platforms to delete content for. moby/moby#49982GET /info
now includes aDiscoveredDevices
field. This is an array ofDeviceInfo
objects, each providing details about a device discovered by a device driver. moby/moby#49980Go SDK
api/types/container
: addContainerState
and constants for container state. moby/moby#49965api/types/container
: changeSummary.State
to aContainerState
. moby/moby#49991api/types/container
: defineHealthStatus
type for health-status constants. moby/moby#49876api/types
: deprecateBuildResult
,ImageBuildOptions
,ImageBuildOutput
,ImageBuildResponse
,BuilderVersion
,BuilderV1
, andBuilderBuildKi
which were moved toapi/types/build
. moby/moby#50025Deprecations
GET /images/{name}/json
no longer returns the following fields:Config
,Hostname
,Domainname
,AttachStdin
,AttachStdout
,AttachStderr
,Tty
,OpenStdin
,StdinOnce
,Image
,NetworkDisabled
(already omitted unless set),MacAddress
(already omitted unless set),StopTimeout
(already omitted unless set). These additional fields were included in the response due to an implementation detail but not part of the image's Configuration, were marked deprecated in API v1.46, and are now omitted. moby/moby#48457filepath.Rel()
. moby/moby#49843BuildCachePruneOptions
in favor ofapi/types/builder.CachePruneOptions
. moby/moby#50015BuildCachePruneReport
in favor ofapi/types/builder.CachePruneReport
. moby/moby#50015NodeListOptions
,NodeRemoveOptions
,ServiceCreateOptions
,ServiceUpdateOptions
,RegistryAuthFromSpec
,RegistryAuthFromPreviousSpec
,ServiceListOptions
,ServiceInspectOptions
, andSwarmUnlockKeyResponse
which were moved toapi/types/swarm
. moby/moby#50027SecretCreateResponse
,SecretListOptions
,ConfigCreateResponse
,ConfigListOptions
which were moved to api/types/swarm. moby/moby#50024IsErrNotFound
. moby/moby#50012IsValidHealthString
in favor ofapi/types/container.ValidateHealthStatus
. moby/moby#49893StateStatus
,WaitCondition
, and the relatedWaitConditionNotRunning
,WaitConditionNextExit
, andWaitConditionRemoved
consts in favor of their equivalents inapi/types/container
. moby/moby#49874ListOpts.GetAll
in favor ofListOpts.GetSlice
. docker/cli#6032IsAutomated
formatting placeholder fromdocker search
. docker/cli#6091docker.pkg.github.com
registry. moby/moby#50094DOCKER_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGE
environment-variable. moby/moby#50036, moby/moby#42300BridgeNfIptables
andBridgeNfIp6tables
fields in theGET /info
response were deprecated in API v1.48, and are now omitted in API v1.50. moby/moby#49904errdefs.FromStatusCode
. Use containerd'serrhttp.ToNative
instead. moby/moby#50030v28.1.1
Compare Source
28.1.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
dockerd-rootless-setuptool.sh
incorrectly reporting missingiptables
. moby/moby#49833docker load
with archives containing zero-size tar headers. moby/moby#49837Packaging updates
Networking
/etc/resolv.conf
when no upstream DNS servers were found. moby/moby#49827v28.1.0
Compare Source
28.1.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
New
docker bake
sub-command as alias fordocker buildx bake
. docker/cli#5947--use-api-socket
flag ondocker run
anddocker create
to enable access to Docker socket from inside a container and to share credentials from the host with the container. docker/cli#5858docker image inspect
now supports a--platform
flag to inspect a specific platform of a multi-platform image. docker/cli#5934Bug fixes and enhancements
docker images --tree
not including non-container images content size in the total image content size. docker/cli#6000docker load
not preserving replaced images. moby/moby#49650docker login
hints when logging in to a custom registry. docker/cli#6015docker stats
not working properly on machines with high CPU core count. moby/moby#49734docker pull/push
to fail when interacting with a private repository. docker/cli#5964ip_tables
kernel module. moby/moby#49727docker service scale
. docker/cli#5968docker images --tree
now hides both untagged and dangling images by default. docker/cli#5924docker system info
will provide an exit code if a connection cannot be established to the Docker daemon. docker/cli#5918image tag
event not being emitted when building with BuildKit. moby/moby#49678docker push/pull
handling of remote registry errors. moby/moby#49770Packaging updates
Networking
docker ps
anddocker inspect
. moby/moby#49724--link
from a container in the default bridge network. moby/moby#49778API
GET /image/{name}/json
now supports aplatform
parameter allowing to specify which platform variant of a multi-platform image to inspect. moby/moby#49586GET /info
now returns aFirewallBackend
containing information about the daemon's firewalling configuration. moby/moby#49761Go SDK
ContextType
field from JSON output. docker/cli#5981Deprecations
AllowNondistributableArtifactsCIDRs
andAllowNondistributableArtifactsHostnames
fields in theRegistryConfig
struct in theGET /info
response are omitted in API v1.49. moby/moby#49749ContainerdCommit.Expected
,RuncCommit.Expected
, andInitCommit.Expected
fields in theGET /info
endpoint were deprecated in API v1.48, and are now omitted in API v1.49. moby/moby#48556RunPull
: this function was only used internally and will be removed in the next release. docker/cli#5975ConfigFile.Experimental
field. Experimental CLI features are always enabled since version v20.10 and this field is no longer used. UseConfigFile.Features
instead for optional features. This field will be removed in a future release. docker/cli#5977pkg/archive
, which was migrated togithub.com/moby/go-archive
. moby/moby#49743pkg/atomicwriter
, which was migrated togithub.com/moby/sys/atomicwriter
. moby/moby#49748PortOpt
,ConfigOpt
,SecretOpt
aliases. docker/cli#5953APIEndpoint.Official
field. moby/moby#49706docker/buildx (docker-buildx)
v0.28.0
[Compare Source](https://red
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.