Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build(deps): bump github.com/docker/docker from 24.0.9+incompatible to 27.3.1+incompatible #7035

Closed
wants to merge 1 commit into from
Closed

build(deps): bump github.com/docker/docker from 24.0.9+incompatible to 27.3.1+incompatible #7035

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 23, 2024 •
edited
Loading

Bumps github.com/docker/docker from 24.0.9+incompatible to 27.3.1+incompatible.

Release notes

Sourced from github.com/docker/docker's releases.

v27.3.1

27.3.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • CLI: Fix issue with command execution metrics not being exported due to the CLI MeterProvider being shutdown too early. docker/cli#5457

Packaging updates

v27.3.0

27.3.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • containerd image store: Fix docker image prune -a untagging images used by containers started from images referenced by a digested reference. moby/moby#48488
  • Add a --feature flag to the daemon options. moby/moby#48487
  • Updated the handling of the --gpus=0 flag to be consistent with the NVIDIA Container Runtime. moby/moby#48483 (docker/cli#5432)
  • Support WSL2 mirrored-mode networking's use of interface loopback0 for packets from the Windows host. moby/moby#48514
  • Fix an issue that prevented communication between containers on an IPv4 bridge network when running with --iptables=false, --ip6tables=true (the default), a firewall with a DROP rule for forwarded packets on hosts where the br_netfilter kernel module was not normally loaded. moby/moby#48511
  • CLI: Fix issue where docker volume update command would cause the CLI to panic if no argument/volume was passed. docker/cli#5426
  • docker/cli#5432

Packaging updates

v27.3.0-rc.2

27.3.0-rc.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

... (truncated)

Commits
  • 41ca978 Merge pull request #48525 from thaJeztah/27.x_backport_govulncheck_permissions
  • a6b772b gha: govulncheck: make sure read permissions are set
  • 856359c Merge pull request #48514 from robmry/backport-27.x/wsl2_mirrored_loopback0_w...
  • cd21af7 Do not DNAT packets from WSL2's loopback0
  • 8516f3b Merge pull request #48510 from thaJeztah/27.x_backport_bump_buildx_compose
  • 3a7779a Merge pull request #48511 from robmry/backport-27.x/48375_bridge_netfiltering
  • 5c499fc Only enable bridge netfiltering when needed
  • 98f24aa Merge pull request #48506 from thaJeztah/27.x_backport_man_dockerd_logformat
  • 8adc8e4 Dockerfile: update compose to v2.29.4
  • 576fc88 Dockerfile: update buildx to v0.17.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added go Pull requests that update Go code outdated-dependency Depdency of the project that is out of date labels Sep 23, 2024
@dependabot dependabot bot mentioned this pull request Sep 23, 2024
Closed
@dependabot
build(deps): bump github.com/docker/docker
4c5b7c0 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.9+incompatible to 27.3.1+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v24.0.9...v27.3.1)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/docker/docker-27.3.1incompatible branch from 9014f63 to 4c5b7c0 Compare September 24, 2024 15:10
@feltem01
Copy link

@ptodev, could you review this PR, please?

@changliu-wk
Copy link

Please take a look at this PR, thanks!

@ptodev
Copy link
Contributor

ptodev commented Oct 10, 2024

Hi @feltem01 and @changliu-wk, apologies for the late reply, I will take a look. Out of curiosity, why are you interested in this change?

@ptodev
Copy link
Contributor

ptodev commented Oct 10, 2024

Unfortunately, to upgrade to this Docker version we have to either upgrade to the latest Prometheus or update the current Prometheus fork that Agent uses. I'd prefer to close this PR and instead upgrade Docker as part of #7036, unless there is a more urgent reason why Docker should be upgraded sooner.

@feltem01
Copy link

feltem01 commented Oct 10, 2024 •
edited
Loading

Hi @feltem01 and @changliu-wk, apologies for the late reply, I will take a look. Out of curiosity, why are you interested in this change?

@ptodev
There is a vulnerability in the current version: #7025

@ptodev
Copy link
Contributor

ptodev commented Oct 10, 2024

@feltem01 I see, thank you. I closed the linked issue since we have already released a version of Agent which contains a fix for this CVE. It is an earlier, patch release of Docker. I will close this PR since we will bump the major version as part of a Prometheus upgrade.

@ptodev ptodev closed this Oct 10, 2024
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 10, 2024

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/go_modules/github.com/docker/docker-27.3.1incompatible branch October 10, 2024 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
go Pull requests that update Go code outdated-dependency Depdency of the project that is out of date
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@feltem01 @changliu-wk @ptodev