Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump github.com/docker/docker from 27.3.1+incompatible to 27.4.1+inco…
…mpatible (#1050) Bumps [github.com/docker/docker](https://github.com/docker/docker) from 27.3.1+incompatible to 27.4.1+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p> <blockquote> <h2>v27.4.1</h2> <h3>27.4.1</h3> <p>For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:</p> <ul> <li><a href="https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A27.4.1">docker/cli, 27.4.1 milestone</a></li> <li><a href="https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A27.4.1">moby/moby, 27.4.1 milestone</a></li> </ul> <h4>Bug fixes and enhancements</h4> <ul> <li>Fix excessive memory allocations when OTel is not configured. <a href="https://redirect.github.com/moby/moby/pull/49079">moby/moby#49079</a></li> <li>The <code>docker info</code> command and the corresponding <code>GET /info</code> API endpoint no longer include warnings when <code>bridge-nf-call-iptables</code> or <code>bridge-nf-call-ip6tables</code> are disabled at the daemon is started. The <code>br_netfilter</code> kernel module is now attempted to be loaded when needed, which made those warnings inaccurate. <a href="https://redirect.github.com/moby/moby/pull/49090">moby/moby#49090</a></li> <li>Attempt to load kernel modules, including <code>ip6_tables</code> and <code>br_netfilter</code> when required, using a method that is likely to succeed inside a Docker-in-Docker container. <a href="https://redirect.github.com/moby/moby/pull/49043">moby/moby#49043</a></li> <li>Fix a bug that could result in an iptables <code>DOCKER FILTER</code> chain not being cleaned up on failure. <a href="https://redirect.github.com/moby/moby/pull/49110">moby/moby#49110</a></li> </ul> <h4>Deprecations</h4> <ul> <li>pkg/system: Deprecate <code>Lstat()</code>, <code>Mkdev()</code>, <code>Mknod()</code>, <code>FromStatT()</code> and <code>Stat()</code> functions, and related <code>StatT</code> types. These were only used internally, and will be removed in the next release. <a href="https://redirect.github.com/moby/moby/pull/49100">moby/moby#49100</a></li> <li>libnetwork/iptables: Deprecate <code>IPV</code>, <code>Iptables</code> and <code>IP6Tables</code> types in favor of <code>IPVersion</code>, <code>IPv4</code>, and <code>IPv6</code>. This type and consts will be removed in the next release. <a href="https://redirect.github.com/moby/moby/pull/49093">moby/moby#49093</a></li> <li>libnetwork/iptables: Deprecate <code>Passthrough</code>. This function was only used internally, and will be removed in the next release. <a href="https://redirect.github.com/moby/moby/pull/49119">moby/moby#49119</a></li> </ul> <h4>Packaging updates</h4> <ul> <li>Update Compose to <a href="https://github.com/docker/compose/releases/tag/v2.32.1">v2.32.1</a>. <a href="https://redirect.github.com/docker/docker-ce-packaging/pull/1130">docker/docker-ce-packaging#1130</a></li> <li>Update Buildx to <a href="https://github.com/docker/buildx/releases/tag/v0.19.3">v0.19.3</a>. <a href="https://redirect.github.com/docker/docker-ce-packaging/pull/1132">docker/docker-ce-packaging#1132</a></li> <li>Update <code>runc</code> to <a href="https://github.com/opencontainers/runc/releases/tag/v1.2.3">v1.2.3</a> (static packages only). <a href="https://redirect.github.com/moby/moby/pull/49085">moby/moby#49085</a></li> </ul> <h2>v27.4.0</h2> <h2>27.4.0</h2> <p>For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:</p> <ul> <li><a href="https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A27.4.0">docker/cli, 27.4.0 milestone</a></li> <li><a href="https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A27.4.0">moby/moby, 27.4.0 milestone</a></li> </ul> <h3>API</h3> <ul> <li><code>GET /images/json</code> with the <code>manifests</code> option enabled now preserves the original order in which manifests appeared in the manifest-index. <a href="https://redirect.github.com/moby/moby/pull/48712">moby/moby#48712</a></li> </ul> <h3>Bug fixes and enhancements</h3> <ul> <li>When reading logs with the <code>jsonfile</code> or <code>local</code> log drivers, any errors while trying to read or parse underlying log files will cause the rest of the file to be skipped and move to the next log file (if one exists) rather than returning an error to the client and closing the stream. The errors are viewable in the Docker Daemon logs and exported to traces when tracing is configured. <a href="https://redirect.github.com/moby/moby/pull/48842">moby/moby#48842</a></li> <li>When reading log files, compressed log files are now only decompressed when needed rather than decompressing all files before starting the log stream. <a href="https://redirect.github.com/moby/moby/pull/48842">moby/moby#48842</a></li> <li>Fix an issue that meant published ports from one container on a bridge network were not accessible from another container on the same network with <code>userland-proxy</code> disabled, if the kernel's <code>br_netfilter</code> module was not loaded and enabled. The daemon will now attempt to load the module and enable <code>bridge-nf-call-iptables</code> or <code>bridge-nf-call-ip6tables</code> when creating a network with the userland proxy disabled. <a href="https://redirect.github.com/moby/moby/pull/48685">moby/moby#48685</a></li> <li>Fix loading of <code>bridge</code> and <code>br_netfilter</code> kernel modules. <a href="https://redirect.github.com/moby/moby/pull/48966">moby/moby#48966</a></li> <li>containerd image store: Fix Docker daemon failing to fully start with a "context deadline exceeded error" with containerd snapshotter and many builds/images. <a href="https://redirect.github.com/moby/moby/pull/48954">moby/moby#48954</a></li> <li>containerd image-store: Fix partially pulled images not being garbage-collected. <a href="https://redirect.github.com/moby/moby/pull/48910">moby#48910</a>, <a href="https://redirect.github.com/moby/moby/pull/48957">moby/moby#48957</a></li> <li>containerd image store: Fix <code>docker image inspect</code> outputting duplicate references in <code>RepoDigests</code>. <a href="https://redirect.github.com/moby/moby/pull/48785">moby/moby#48785</a></li> </ul> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moby/moby/commit/c710b88579fcb5e0d53f96dcae976d79323b9166"><code>c710b88</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/49119">#49119</a> from thaJeztah/27.x_backport_libnetwork_deprecate_P...</li> <li><a href="https://github.com/moby/moby/commit/eda0a20deb7231dda5365bf71760911d1aa4bb39"><code>eda0a20</code></a> libnetwork/iptables: deprecate Passthrough</li> <li><a href="https://github.com/moby/moby/commit/b51622dd0d9759087ec52581d56958da70a30d30"><code>b51622d</code></a> libnet/iptables: deprecate type IPV</li> <li><a href="https://github.com/moby/moby/commit/829ac832da2e4647c131726559b8e3b00d5dd364"><code>829ac83</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/49104">#49104</a> from thaJeztah/27.x_backport_update_swagger_headers</li> <li><a href="https://github.com/moby/moby/commit/bd7da11e95e2ae20b81508479d5a5490f1fbf1ab"><code>bd7da11</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/49110">#49110</a> from thaJeztah/27.x_backport_fix_setupIPChains_defer</li> <li><a href="https://github.com/moby/moby/commit/135b1449cdd5a36496a5acbb9393151174f13c69"><code>135b144</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/49105">#49105</a> from thaJeztah/27.x_backport_testing-suse-apparmor</li> <li><a href="https://github.com/moby/moby/commit/08de719cf292857a67039be85bd6330619f220ad"><code>08de719</code></a> libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err</li> <li><a href="https://github.com/moby/moby/commit/2a6231993beaece691a9789820d9387a008f28a1"><code>2a62319</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/49100">#49100</a> from thaJeztah/27.x_backport_deprecate_pkg_system</li> <li><a href="https://github.com/moby/moby/commit/6855ca1e62c49dad187247284d59153e94150eba"><code>6855ca1</code></a> integration-cli: don't skip AppArmor tests on SLES</li> <li><a href="https://github.com/moby/moby/commit/224b30556d1f6b579a26e8ec09c06131ca061c54"><code>224b305</code></a> docs/api: document correct case for Api-Version header</li> <li>Additional commits viewable in <a href="https://github.com/docker/docker/compare/v27.3.1...v27.4.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/docker&package-manager=go_modules&previous-version=27.3.1+incompatible&new-version=27.4.1+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
- Loading branch information