Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 15, 2025

This PR contains the following updates:

Package Manager Type Update Change
actions/checkout github-actions action minor v4.2.2 -> v4.3.0
docker regex run minor 28.0.4 -> 28.4.0
docker-buildx regex run minor 0.22.0 -> 0.28.0
docker-compose regex run minor 2.35.0 -> 2.39.2
docker/login-action github-actions action minor v3.4.0 -> v3.5.0
docker/setup-buildx-action github-actions action minor v3.10.0 -> v3.11.1
dotnet-sdk regex script patch 9.0.203 -> 9.0.304
dotnet-sdk regex task patch 9.0.203 -> 9.0.304
dotnet-sdk regex action patch 9.0.203 -> 9.0.304
mcr.microsoft.com/dotnet/sdk dockerfile final patch 9.0.203-noble -> 9.0.304-noble

Release Notes

actions/checkout (actions/checkout)

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

moby/moby (docker)

v28.4.0

Compare Source

28.4.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New
  • Allow Docker CLI to set the GODEBUG environment variable when the key-value pair ("GODEBUG":"...") exists inside the docker context metadata. docker/cli#6399
Bug fixes and enhancements
  • Add shell completion for docker pull and docker image pull. docker/cli#6420
  • Fix a regression in v28.3.3 that could cause a panic on docker push if the client did not send an X-Registry-Auth header. moby/moby#50738
  • Windows: Potentially fix an issue with "access denied" error when pulling images. moby/moby#50871
  • containerd image store: Fix docker history failing with snapshot X does not exist when calling on a non-native image that was built locally. moby/moby#50875
  • containerd image store: Fix docker image prune to emit correct untag and delete events and list only the deleted images root digests instead of every blob. moby/moby#50837
  • Remove interactive login prompt from docker push and docker pull after a failure caused by missing authentication. docker/cli#6256
Packaging updates
Networking
  • Fix an issue that could cause slow container restart on live-restore. moby/moby#50829
API
Go SDK
Deprecations
  • Deprecate special handling for quoted values for the --tlscacert, --tlscert, and --tlskey command-line flags. docker/cli#6291
  • Mark legacy links env vars (DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS) as deprecated in v28.4 and set for removal in v30.0. docker/cli#6309
  • Go-SDK: Deprecate field NetworkSettingsBase.Bridge, struct NetworkSettingsBase, all the fields of DefaultNetworkSettings, and struct DefaultNetworkSettings. moby/moby#50839
  • Go-SDK: api/types: build.CacheDiskUsage, container.DiskUsage, images.DiskUsage and volumes.DiskUsage are now deprecated and will be removed in the next major release. moby/moby#50768
  • Go-SDK: cli-plugins/manager: deprecate ReexecEnvvar. docker/cli#6411
  • Go-SDK: cli-plugins/manager: deprecate annotation aliases (CommandAnnotationPlugin, CommandAnnotationPluginVendor, CommandAnnotationPluginVersion, CommandAnnotationPluginInvalid, CommandAnnotationPluginCommandPath) in favor of their equivalent in cli-plugins/manager/metadata. docker/cli#6298
  • Go-SDK: cli-plugins/manager: deprecate metadata aliases (NamePrefix, MetadataSubcommandName, HookSubcommandName, Metadata, ReexecEnvvar) in favor of their equivalent in cli-plugins/manager/metadata. docker/cli#6269
  • Go-SDK: cli-plugins/manager: remove Candidate interface, which was only for internal use. docker/cli#6269
  • Go-SDK: cli-plugins/manager: remove NewPluginError function, which was only for internal use. docker/cli#6269
  • Go-SDK: cli-plugins/manager: remove deprecated ResourceAttributesEnvvar const. docker/cli#6269
  • Go-SDK: cli/command/builder: deprecate NewBuilderCommand and NewBakeStubCommand. These functions will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/builder: deprecate NewPruneCommand. docker/cli#6343
  • Go-SDK: cli/command/checkpoint: deprecate NewCheckpointCommand. This function will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/checkpoint: deprecate NewFormat, FormatWrite. docker/cli#6341
  • Go-SDK: cli/command/completion: deprecate NoComplete. docker/cli#6405
  • Go-SDK: cli/command/completion: remove deprecated ValidArgsFn. docker/cli#6259
  • Go-SDK: cli/command/config: deprecate NewConfigCommand. This function will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/config: deprecate NewFormat, FormatWrite, InspectFormatWrite. docker/cli#6341
  • Go-SDK: cli/command/config: deprecate RunConfigCreate, CreateOptions, RunConfigInspect, InspectOptions, RunConfigList, ListOptions, RunConfigRemove, and RemoveOptions. docker/cli#6369
  • Go-SDK: cli/command/container: deprecate NewBuildCommand, NewPullCommand, NewPushCommand, NewImagesCommand, NewImageCommand, NewHistoryCommand, NewImportCommand, NewLoadCommand, NewRemoveCommand, NewSaveCommand, NewTagCommand, NewPruneCommand. These functions will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/container: deprecate NewDiffFormat, DiffFormatWrite. These functions were only used internally and will be removed in the next release. docker/cli#6341
  • Go-SDK: cli/command/container: deprecate NewRunCommand, NewExecCommand, NewPsCommand, NewContainerCommand, NewAttachCommand, NewCommitCommand, NewCopyCommand, NewCreateCommand, NewDiffCommand, NewExportCommand, NewKillCommand, NewLogsCommand, NewPauseCommand, NewPortCommand, NewRenameCommand, NewRestartCommand, NewRmCommand, NewStartCommand, NewStatsCommand, NewStopCommand, NewTopCommand, NewUnpauseCommand, NewUpdateCommand, NewWaitCommand, NewPruneCommand. These functions will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/context: deprecate NewContextCommand. This function will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/context: deprecate RunCreate and CreateOptions. docker/cli#6403
  • Go-SDK: cli/command/context: deprecate RunExport and ExportOptions. docker/cli#6403
  • Go-SDK: cli/command/context: deprecate RunImport. docker/cli#6403
  • Go-SDK: cli/command/context: deprecate RunRemove and RemoveOptions. docker/cli#6403
  • Go-SDK: cli/command/context: deprecate RunUpdate and UpdateOptions. docker/cli#6403
  • Go-SDK: cli/command/context: deprecate RunUse. docker/cli#6403
  • Go-SDK: cli/command/image: deprecate AuthResolver utility. docker/cli#6357
  • Go-SDK: cli/command/image: deprecate NewHistoryFormat, HistoryWrite. docker/cli#6341, docker/cli#6341
  • Go-SDK: cli/command/manifest: deprecate NewManifestCommand. This functions will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/network: deprecate NewFormat, FormatWrite. docker/cli#6341
  • Go-SDK: cli/command/network: deprecate NewNetworkCommand. These functions will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/node: deprecate NewFormat, FormatWrite, InspectFormatWrite. docker/cli#6341
  • Go-SDK: cli/command/node: deprecate NewNodeCommand. This functions will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/plugin: deprecate NewFormat, FormatWrite. docker/cli#6341
  • Go-SDK: cli/command/plugin: deprecate NewPluginCommand. This function will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/registry: deprecate NewLoginCommand, NewLogoutCommand, NewSearchCommand. These functions will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/registry: deprecate NewSearchFormat, SearchWrite. docker/cli#6341
  • Go-SDK: cli/command/registry: deprecate OauthLoginEscapeHatchEnvVar const. docker/cli#6413
  • Go-SDK: cli/command/secret: deprecate NewFormat, FormatWrite, InspectFormatWrite. docker/cli#6341
  • Go-SDK: cli/command/secret: deprecate NewSecretCommand. This functions will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/service: deprecate NewFormat, InspectFormatWrite. docker/cli#6341
  • Go-SDK: cli/command/service: deprecate NewServiceCommand. This function will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/stack: deprecate NewStackCommand. This function will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/stack: deprecate RunList, RunServices. docker/cli#6391
  • Go-SDK: cli/command/swarm: deprecate NewSwarmCommand. This function will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/system: deprecate NewVersionCommand, NewInfoCommand, NewSystemCommand, NewEventsCommand, NewInspectCommand. These functions will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/task: deprecate NewTaskFormat, FormatWrite. docker/cli#6341
  • Go-SDK: cli/command/trust: deprecate NewTrustCommand. This function will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command/trust: deprecate SignedTagInfo, SignerInfo, NewTrustTagFormat, NewSignerInfoFormat, TagWrite, SignerInfoWrite. docker/cli#6341
  • Go-SDK: cli/command/volume: deprecate NewVolumeCommand, NewPruneCommand. These functions will be removed in the next release. docker/cli#6312
  • Go-SDK: cli/command: remove AddTrustSigningFlags, AddTrustVerificationFlags, and AddPlatformFlag utilities, which were only used internally. docker/cli#6311
  • Go-SDK: cli/command: remove deprecated ConfigureAuth utility. docker/cli#6257
  • Go-SDK: cli/command: remove deprecated CopyToFile utility. docker/cli#6257
  • Go-SDK: cli/config/types: update deprecation message for AuthConfig.Email field. docker/cli#6392
  • Go-SDK: cli: deprecate VisitAll, DisableFlagsInUseLine utilities. These utilities were only used internally and will be removed in the next release. docker/cli#6276
  • Go-SDK: cli: remove HasCompletionArg utility. This utility was only used internally. docker/cli#6276
  • Go-SDK: deprecate cli/command.RegistryAuthenticationPrivilegedFunc. docker/cli#6256
  • Go-SDK: deprecate cli/command/stack/formatter. docker/cli#6391
  • Go-SDK: deprecate cli/command/stack/loader. docker/cli#6391
  • Go-SDK: deprecate cli/command/stack/options. docker/cli#6391
  • Go-SDK: deprecate cli/command/stack/swarm. docker/cli#6391
  • Go-SDK: opts: deprecate NewNamedListOptsRef, NewNamedMapOpts, NamedListOpts, NamedMapOpts, and NamedOption. These types and functions are no longer used and will be removed in the next release. docker/cli#6292
  • Go-SDK: opts: deprecate ParseEnvFile in favour of kvfile.Parse. docker/cli#6381
  • Go-SDK: opts: deprecate QuotedString. This utility is no longer used, and will be removed in the next release. docker/cli#6275
  • Go-SDK: opts: deprecate ValidateHost utility. This function is no longer used, and will be removed in the next release. docker/cli#6280
  • Go-SDK: pkg/jsonmessage: deprecate the JSONMessage.From, JSONMessage.Time, and JSONMessage.TimeNano fields, as they are no longer returned by the API for progress messages. Use the events.Message type instead to unmarshal the /events response. moby/moby#50762
  • Go-SDK: the cli/registry/client package is deprecated and will be removed in the next release. docker/cli#6313

v28.3.3

Compare Source

28.3.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release fixes an issue where, after a firewalld reload, published container ports could be accessed directly from the local network, even when they were intended to be accessible only via a loopback address. CVE-2025-54388 / GHSA-x4rx-4gw3-53p4 / moby/moby#50506.

Packaging updates
Go SDK
  • cli/command/formatter: add TrunateID() utility as alternative for github.com/docker/docker/pkg/stringid.TrunateID(). docker/cli#6180

v28.3.2: 28.3.2

Compare Source

28.3.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements
  • Fix --use-api-socket not working correctly when targeting a remote daemon. docker/cli#6157
  • Fix stray "otel error" logs being printed if debug logging is enabled. docker/cli#6160
  • Quote SSH arguments when connecting to a remote daemon over an SSH connection to avoid unexpected expansion. docker/cli#6147
  • Warn when DOCKER_AUTH_CONFIG is set during docker login and docker logout. docker/cli#6163
Packaging updates

v28.3.1: 28.3.1

Compare Source

28.3.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Packaging updates

v28.3.0: 28.3.0

Compare Source

28.3.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New
Bug fixes and enhancements
  • Ensure that the state of the container in the daemon database (used by /containers/json API) is up to date when the container is stopped using the /containers/{id}/stop API (before response of API). moby/moby#50136
  • Fix docker image inspect inspect omitting empty fields. moby/moby#50135
  • Fix docker images --tree not marking images as in-use when the containerd image store is disabled. docker/cli#6140
  • Fix docker pull/push hang in non-interactive when authentication is required caused by prompting for login credentials. docker/cli#6141
  • Fix a potential resource leak when a node leaves a Swarm. moby/moby#50115
  • Fix a regression where a login prompt on docker pull would show Docker Hub-specific hints when logging in on other registries. docker/cli#6135
  • Fix an issue where all new tasks in the Swarm could get stuck in the PENDING state forever after scaling up a service with placement preferences. moby/moby#50211
  • Remove an undocumented, hidden, top-level docker remove command that was accidentally introduced in Docker 23.0. docker/cli#6144
  • Validate registry-mirrors configuration as part of dockerd --validate and improve error messages for invalid mirrors. moby/moby#50240
  • dockerd-rootless-setuptool.sh: Fix the script from silently returning with no error message when subuid/subgid system requirements are not satisfied. moby/moby#50059
  • containerd image store: Fix docker push not creating a tag on the remote repository. moby/moby#50199
  • containerd image store: Improve handling of errors returned by the token server during docker pull/push. moby/moby#50176
Packaging updates
Networking
  • Revert Swarm related changes added in 28.2.x builds, due to a regression reported in #​50129. moby/moby#50169
    • Revert: Fix an issue where docker network inspect --verbose could sometimes crash the daemon (#​49937).
    • Revert: Fix an issue where the load-balancer IP address for an overlay network would not be released in certain cases if the Swarm was lacking an ingress network (#​49948).
    • Revert: Improve the reliability of NetworkDB in busy clusters and lossy networks (#​49932).
    • Revert: Improvements to the reliability and convergence speed of NetworkDB (#​49939).
  • Fix an issue that could cause container startup to fail, or lead to failed UDP port mappings, when some container ports are mapped to 0.0.0.0 and others are mapped to specific host addresses. moby/moby#50054
  • The network inspect response for an overlay network now reports that EnableIPv4 is true. moby/moby#50147
  • Windows: Improve daemon startup time in cases where the host has networks of type "Mirrored". moby/moby#50155
  • Windows: Make sure docker system prune and docker network prune only remove networks created by Docker. moby/moby#50154
API
  • Update API version to 1.51. moby/moby#50145
  • GET /images/json now sets the value of the Containers field for all images to the count of containers using the image. moby/moby#50146
Deprecations
  • Empty/nil image config fields in the GET /images/{name}/json response are now deprecated and will be removed in v29.0. docker/cli#6129
  • api/types/container: deprecate ExecOptions.Detach. This field is not used, and will be removed in a future release. moby/moby#50219
  • pkg/idtools: deprecate IdentityMapping and Identity.Chown. moby/moby#50210

v28.2.2: 28.2.2

Compare Source

28.2.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements
  • containerd image store: Fix a regression causing docker build --push to fail. This reverts the fix for docker build not persisting overridden images as dangling. moby/moby#50105
Networking
  • When creating the iptables DOCKER-USER chain, do not add an explicit RETURN rule, allowing users to append as well as insert their own rules. Existing rules are not removed on upgrade, but it won't be replaced after a reboot. moby/moby#50098

v28.2.1: 28.2.1

Compare Source

28.2.1

Packaging updates

v28.2.0: 28.2.0

Compare Source

28.2.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

[!NOTE]
RHEL packages are currently not available and will be released later.

New
  • Add {{.Platform}} as formatting option for docker ps to show the platform of the image the container is running. docker/cli#6042
  • Add support for relative parent paths (../) on bind mount sources when using docker run/create with -v/--volume or --mount type=bind options. docker/cli#4966
  • CDI is now enabled by default. moby/moby#49963
  • Show discovered CDI devices in docker info. docker/cli#6078
  • docker image rm: add --platform option to remove a variant from multi-platform images. docker/cli#6109
  • containerd image store: Initial BuildKit support for building Windows container images on Windows (requires an opt-in with DOCKER_BUILDKIT=1). moby/moby#49740
Bug fixes and enhancements
  • Add a new log option for fluentd log driver (fluentd-write-timeout), which enables specifying write timeouts for fluentd connections. moby/moby#49911
  • Add support for DOCKER_AUTH_CONFIG for the experimental --use-api-socket option. docker/cli#6019
  • Fix docker exec waiting for 10 seconds if a non-existing user or group was specified. moby/moby#49868
  • Fix docker swarm init ignoring cacert option of --external-ca. docker/cli#5995
  • Fix an issue where the CLI would not correctly save the configuration file (~/.docker/config.json) if it was a relative symbolic link. docker/cli#5282
  • Fix containers with --restart always policy using CDI devices failing to start on daemon restart. moby/moby#49990
  • Fix shell-completion to only complete some flags once, even though they can be set multiple times. docker/cli#6030
  • Fix the plugin does not implement PluginAddr interface error for Swarm CSI drivers. moby/moby#49961
  • Improve docker login error messages for invalid options. docker/cli#6036
  • Make sure the terminal state is restored if the CLI is forcefully terminated. docker/cli#6058
  • Update the default seccomp profile to match the libseccomp v2.6.0. The new syscalls are: listmount, statmount, lsm_get_self_attr, lsm_list_modules, lsm_set_self_attr, mseal, uretprobe, riscv_hwprobe, getxattrat, listxattrat, removexattrat, and setxattrat. This prevents containers from receiving EPERM errors when using them. moby/moby#50077
  • docker inspect: add shell completion, improve flag-description for --type and improve validation. docker/cli#6052
  • containerd image store: Enable BuildKit garbage collector by default. moby/moby#49899
  • containerd image store: Fix docker build not persisting overridden images as dangling. moby/moby#49702
  • containerd image store: Fix docker system df reporting a negative reclaimable space amount. moby/moby#49707
  • containerd image store: Fix duplicate PUT requests when pushing a multi-platform image. moby/moby#49949
Packaging updates
Networking
  • Add bridge network option "com.docker.network.bridge.trusted_host_interfaces", accepting a colon-separated list of interface names. These interfaces have direct access to published ports on container IP addresses. moby/moby#49832
  • Add daemon option "allow-direct-routing" to disable filtering of packets from outside the host addressed directly to containers. moby/moby#49832
  • Do not display network options com.docker.network.enable_ipv4 or com.docker.network.enable_ipv6 in inspect output if they have been overridden by EnableIPv4 or EnableIPv6 in the network create request. moby/moby#49866
  • Fix an issue that could cause network deletion to fail after a daemon restart, with error "has active endpoints" listing empty endpoint names. moby/moby#49901
  • Fix an issue where docker network inspect --verbose could sometimes crash the daemon. moby/moby#49937
  • Fix an issue where the load-balancer IP address for an overlay network would not be released in certain cases if the Swarm was lacking an ingress network. moby/moby#49948
  • Improve the reliability of NetworkDB in busy clusters and lossy networks. moby/moby#49932
  • Improvements to the reliability and convergence speed of NetworkDB. moby/moby#49939
API
  • Update API version to 1.50.
  • DELETE /images/{name} now supports a platforms query parameter. It accepts an array of JSON-encoded OCI Platform objects, allowing for selecting a specific platforms to delete content for. moby/moby#49982
  • GET /info now includes a DiscoveredDevices field. This is an array of DeviceInfo objects, each providing details about a device discovered by a device driver. moby/moby#49980
Go SDK
  • api/types/container: add ContainerState and constants for container state. moby/moby#49965
  • api/types/container: change Summary.State to a ContainerState. moby/moby#49991
  • api/types/container: define HealthStatus type for health-status constants. moby/moby#49876
  • api/types: deprecate BuildResult, ImageBuildOptions, ImageBuildOutput, ImageBuildResponse, BuilderVersion, BuilderV1, and BuilderBuildKi which were moved to api/types/build. moby/moby#50025
Deprecations
  • API: Deprecated: GET /images/{name}/json no longer returns the following fields: Config, Hostname, Domainname, AttachStdin, AttachStdout, AttachStderr, Tty, OpenStdin, StdinOnce, Image, NetworkDisabled (already omitted unless set), MacAddress (already omitted unless set), StopTimeout (already omitted unless set). These additional fields were included in the response due to an implementation detail but not part of the image's Configuration, were marked deprecated in API v1.46, and are now omitted. moby/moby#48457
  • Go-SDK: Deprecate builder/remotecontext.Rel(). This function was needed on older versions of Go, but can now be replaced by filepath.Rel(). moby/moby#49843
  • Go-SDK: api/types: deprecate BuildCachePruneOptions in favor of api/types/builder.CachePruneOptions. moby/moby#50015
  • Go-SDK: api/types: deprecate BuildCachePruneReport in favor of api/types/builder.CachePruneReport. moby/moby#50015
  • Go-SDK: api/types: deprecate NodeListOptions, NodeRemoveOptions, ServiceCreateOptions, ServiceUpdateOptions, RegistryAuthFromSpec, RegistryAuthFromPreviousSpec, ServiceListOptions, ServiceInspectOptions, and SwarmUnlockKeyResponse which were moved to api/types/swarm. moby/moby#50027
  • Go-SDK: api/types: deprecate SecretCreateResponse, SecretListOptions, ConfigCreateResponse, ConfigListOptions which were moved to api/types/swarm. moby/moby#50024
  • Go-SDK: client: deprecate IsErrNotFound. moby/moby#50012
  • Go-SDK: container: deprecate IsValidHealthString in favor of api/types/container.ValidateHealthStatus. moby/moby#49893
  • Go-SDK: container: deprecate StateStatus, WaitCondition, and the related WaitConditionNotRunning, WaitConditionNextExit, and WaitConditionRemoved consts in favor of their equivalents in api/types/container. moby/moby#49874
  • Go-SDK: opts: deprecate ListOpts.GetAll in favor of ListOpts.GetSlice. docker/cli#6032
  • Remove deprecated IsAutomated formatting placeholder from docker search. docker/cli#6091
  • Remove fallback for pulling images from non-OCI-compliant docker.pkg.github.com registry. moby/moby#50094
  • Remove support for pulling legacy v2, schema 1 images and remove DOCKER_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGE environment-variable. moby/moby#50036, moby/moby#42300
  • The BridgeNfIptables and BridgeNfIp6tables fields in the GET /info response were deprecated in API v1.48, and are now omitted in API v1.50. moby/moby#49904
  • errdefs: Deprecate errdefs.FromStatusCode. Use containerd's errhttp.ToNative instead. moby/moby#50030

v28.1.1

Compare Source

28.1.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements
  • Fix dockerd-rootless-setuptool.sh incorrectly reporting missing iptables. moby/moby#49833
  • containerd image store: Fix a potential daemon crash when using docker load with archives containing zero-size tar headers. moby/moby#49837
Packaging updates
Networking
  • Add a warning to a container's /etc/resolv.conf when no upstream DNS servers were found. moby/moby#49827

v28.1.0

Compare Source

28.1.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New
  • Add docker bake sub-command as alias for docker buildx bake. docker/cli#5947
  • Experimental: add a new --use-api-socket flag on docker run and docker create to enable access to Docker socket from inside a container and to share credentials from the host with the container. docker/cli#5858
  • docker image inspect now supports a --platform flag to inspect a specific platform of a multi-platform image. docker/cli#5934
Bug fixes and enhancements
  • Add CLI shell-completion for context names. docker/cli#6016
  • Fix docker images --tree not including non-container images content size in the total image content size. docker/cli#6000
  • Fix docker load not preserving replaced images. moby/moby#49650
  • Fix docker login hints when logging in to a custom registry. docker/cli#6015
  • Fix docker stats not working properly on machines with high CPU core count. moby/moby#49734
  • Fix a regression causing docker pull/push to fail when interacting with a private repository. docker/cli#5964
  • Fix an issue preventing rootless Docker setup on a host with no ip_tables kernel module. moby/moby#49727
  • Fix an issue that could lead to unwanted iptables rules being restored and never deleted following a firewalld reload. moby/moby#49728
  • Improve CLI completion of docker service scale. docker/cli#5968
  • docker images --tree now hides both untagged and dangling images by default. docker/cli#5924
  • docker system info will provide an exit code if a connection cannot be established to the Docker daemon. docker/cli#5918
  • containerd image store: Fix image tag event not being emitted when building with BuildKit. moby/moby#49678
  • containerd image store: Improve docker push/pull handling of remote registry errors. moby/moby#49770
  • containerd image store: Show pull progress for non-layer image blobs. moby/moby#49746
Packaging updates
Networking
  • Fix a bug causing host port-mappings on Swarm containers to be duplicated on docker ps and docker inspect. moby/moby#49724
  • Fix an issue that caused container network attachment to fail with error "Bridge port not forwarding". moby/moby#49705
  • Fix an issue with removal of a --link from a container in the default bridge network. moby/moby#49778
  • Improve how network-endpoint relationships are tracked to reduce the chance of the "has active endpoints" error to be wrongfully returned. moby/moby#49736
  • Improve the "has active endpoints" error message by including the name of endpoints still connected to the network being deleted. moby/moby#49773
API
  • Update API version to v1.49. moby/moby#49718
  • GET /image/{name}/json now supports a platform parameter allowing to specify which platform variant of a multi-platform image to inspect. moby/moby#49586
  • GET /info now returns a FirewallBackend containing information about the daemon's firewalling configuration. moby/moby#49761
Go SDK
  • Update minimum required Go version to go1.23. docker/cli#5868
  • cli/command/context: remove temporary ContextType field from JSON output. docker/cli#5981
  • client: Keep image references in canonical format where possible. moby/moby#49609
Deprecations
  • API: Deprecated AllowNondistributableArtifactsCIDRs and AllowNondistributableArtifactsHostnames fields in the RegistryConfig struct in the GET /info response are omitted in API v1.49. moby/moby#49749
  • API: Deprecated: The ContainerdCommit.Expected, RuncCommit.Expected, and InitCommit.Expected fields in the GET /info endpoint were deprecated in API v1.48, and are now omitted in API v1.49. moby/moby#48556
  • Go-SDK: cli/command/image: Deprecate RunPull: this function was only used internally and will be removed in the next release. docker/cli#5975
  • Go-SDK: cli/config/configfile: deprecate ConfigFile.Experimental field. Experimental CLI features are always enabled since version v20.10 and this field is no longer used. Use ConfigFile.Features instead for optional features. This field will be removed in a future release. docker/cli#5977
  • Go-SDK: deprecate pkg/archive, which was migrated to github.com/moby/go-archive. moby/moby#49743
  • Go-SDK: deprecate pkg/atomicwriter, which was migrated to github.com/moby/sys/atomicwriter. moby/moby#49748
  • Go-SDK: opts: remove deprecated PortOpt, ConfigOpt, SecretOpt aliases. docker/cli#5953
  • Go-SDK: registry: deprecate APIEndpoint.Official field. moby/moby#49706
docker/buildx (docker-buildx)

v0.28.0

[Compare Source](https://red


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from gitfool as a code owner April 15, 2025 22:25
@renovate renovate bot added the dependencies Changes that only affect dependencies label Apr 15, 2025
@renovate renovate bot force-pushed the renovate/minor branch from 79e19be to 9190cd5 Compare April 17, 2025 15:05
@renovate renovate bot changed the title Bump dependency docker-buildx to v0.23.0 Bump dependencies Apr 17, 2025
@renovate renovate bot force-pushed the renovate/minor branch from 9190cd5 to d46fcac Compare April 18, 2025 14:55
@renovate renovate bot force-pushed the renovate/minor branch 3 times, most recently from f07e665 to ef393c0 Compare May 14, 2025 12:11
@renovate renovate bot force-pushed the renovate/minor branch 3 times, most recently from 4c2f0ef to d1a5f2d Compare May 23, 2025 16:36
@renovate renovate bot force-pushed the renovate/minor branch 3 times, most recently from 0fc795d to f6f09b2 Compare May 30, 2025 18:21
@renovate renovate bot force-pushed the renovate/minor branch 4 times, most recently from 288f85c to c317dcb Compare June 12, 2025 10:34
@renovate renovate bot force-pushed the renovate/minor branch 4 times, most recently from 5578083 to 0864157 Compare June 20, 2025 16:45
@renovate renovate bot force-pushed the renovate/minor branch 4 times, most recently from e2231db to 89c8902 Compare June 30, 2025 23:11
@renovate renovate bot force-pushed the renovate/minor branch 4 times, most recently from e2efaf4 to d41e0f8 Compare July 9, 2025 17:39
@renovate renovate bot force-pushed the renovate/minor branch from d41e0f8 to 0ac318e Compare July 9, 2025 23:38
@renovate renovate bot force-pushed the renovate/minor branch 6 times, most recently from 7aebe07 to e2be4eb Compare July 24, 2025 18:04
@renovate renovate bot force-pushed the renovate/minor branch 2 times, most recently from 44280d5 to 74c2ae1 Compare August 4, 2025 14:21
@renovate renovate bot force-pushed the renovate/minor branch 4 times, most recently from e6fac57 to fddc66d Compare August 11, 2025 12:24
@renovate renovate bot force-pushed the renovate/minor branch from fddc66d to 21aa69d Compare August 20, 2025 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Changes that only affect dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants