Commit Graph

8 Commits

Author SHA1 Message Date
Bruce Ashfield
2762d232a5 moby: update to v28.0.1
Bumping moby to version v28.0.1, which comprises the following commits:

    18143632f7 Revert "contrib/check-config: add ipset related flags"
    558da63444 Jump to DOCKER-INGRESS from DOCKER-FORWARD
    76417bf763 Don't use ipset
    c35159ed7d c8d/manifests: Fix Content size including missing content
    468c2c814d Fix swarm network creation from a config-only network
    8e6cc4ac48 Fix swarm net validation for config-from networks
    8cc4d1d4a2 Fix daemon startup on a no-IPv6 host
    341cafa611 Test with a drop rule appended to filter-FORWARD
    984a610a21 Add chain DOCKER-FORWARD
    21582b84fb c8d/list: Fix empty Manifests for some images
    6b1b170708 c8d/inspect: Fix image not found error for index-only image
    5ced8fd377 vendor: tags.cncf.io/container-device-interface v0.8.1
    a92d20bcc4 Better error message for missing ip_set kernel modules
    73f2a5336d libnet/d/bridge: fix compilation on i386
    013c43fb56 Mark default-bridge-only opts in --help and manpage
    3cf4ff971d Fix network inspect IPv6 gateway address format
    501ce33bab Fix v28 regression `protocol "tcp" is not supported by the RootlessKit port driver "slirp4netns"`
    ccdfac5328 contrib/check-config: add ipset related flags
    ac8b4e3e75 daemon: handleContainerExit: ignore networking errors
    d67f035d31 vendor: github.com/moby/buildkit v0.20.0
    1fde8c4615 builder-next: fix cdi manager
    cde9f0752e vendor: github.com/moby/buildkit v0.20.0-rc3
    b2b55903d0 Dockerfile: fix linting warnings
    a3628f3f8e docs/api: add documentation for API v1.48
    9eccc20a17 c8d/list: Fix panic when listing images
    4e97729f14 c8d/list: Test with SharedSize = true
    322eddfb41 api/swagger: remove custom example from /containers/{id}/json endpoint
    60539d0956 api/swagger: remove custom example from /containers/json endpoint
    119b52f302 golangci-lint: ignore "nested context" (fatcontext) in tests
    15fbd67407 Dockerfile: update golangci-lint to v1.64.5
    7b6c3ebe7b api/swagger: inline Exec example values
    2fc90096bf project: update status of branches
    bd92f2bb92 daemon/logger/splunk: New(): combine switches for format validation
    eac39ffdb8 daemon/logger/splunk: remove some intermediate variables
    9bb3900c30 daemon/logger: Info.ExtraAttributes: make env-var handling conditional
    cbbff10b01 daemon/logger: use consistent name for "extra attributes"
    ba559c4f12 daemon/logger/fluentd: fix minor (linting) issues
    b9e7e82b66 daemon/logger/splunk: plunkLogger.postMessages(): improve logs
    2f82cbb5f8 daemon/logger/splunk: suppress some unhandled errors
    f049d0c66b daemon/logger/splunk: don't defer in a loop
    0d938b6bb3 daemon/logger/splunk: rename var that shadowed import
    529a56d31a container: Container.StopSignal: fix handling of invalid signals
    ef0fe1ac00 container: define defaultStopSignal as a syscall.Signal
    0a4c4c9e82 container: some cleanups in view tests
    49f2320bc7 container: some cleanups in tests
    07aa4d96ea container: TestReplaceAndAppendEnvVars: assert with gotest.tools
    0914e97df2 container: rename test file
    9bcac6d573 c8d/progress: Fix panic when pulling some images
    acc4d45278 container: ensure image manifest is deep copied from the container into the snapshot
    903ba2f487 client: Move opts to separate files
    b9319f64ed client: Change ImageSave to use functional options
    ae4c688fd8 client: Change ImageLoad to use functional options
    85808a6abf client: Change ImageHistory to use functional options
    5719e8edf9 Don't create iptables rules when iptables is disabled
    068aa86c23 client: Group deprecated functions into ImageAPIClientDeprecated
    d1c6550f71 daemon: use structured logs for printing reloaded config, move to cli
    838ae09a23 Dockerfile: update runc binary to v1.2.5
    707d8d80b9 vendor: update buildkit to v0.20.0-rc2
    c9f8758570 golangci-lint: enable reassign linter
    04ae510a1e golangci-lint: enable gocheckcompilerdirectives linter
    179e621019 golangci-lint: enable exhaustive linter
    1f9ada6668 golangci-lint: enable errchkjson linter
    8b2439a383 golangci-lint: enable durationcheck linter
    d62e499bfe golangci-lint: enable dogsled linter
    75fc4de8c3 golangci-lint: enable asasalint linter
    7218a64e87 golangci-lint: enable wastedassign linter
    55b047e49c golangci-lint: enable fatcontext linter
    a97d6fe84f golangci-lint: enable nosprintfhostport linter (again)
    fc09a52d85 golangci-lint: enable spancheck linter
    a0ef452f0c golangci-lint: enable mirror linter
    0de3c1b7e3 golangci-lint: enable makezero linter
    e6e68278f6 golangci-lint: enable iface linter (with default settings)
    c8ee8c6302 golangci-lint: enable nilnesserr linter
    081fac187e golangci-lint: enable exptostd linter
    927e07e46e API: add Platform (OS and Architecture) to /containers/json
    e364e28ec8 vendor: update buildkit to v0.20.0-rc1
    d47eb241bf vendor: github.com/vishvananda/netlink 655392bc778a
    47ff7969b4 Add experimental feature warning for image mount
    3e51818c5c Add ability to return warnings from host config
    c5b226e377 vendor: github.com/miekg/dns v1.1.61
    56a6383883 api: deprecation of "error" and "progress" fields in streaming responses
    e36fb45eec vendor: github.com/spf13/pflag v1.0.6
    bd13fc37b0 pkg/jsonmessage: JSONMessage: fix deprecation of ProgressMessage, ErrorMessage
    66910da5a3 vendor: github.com/containerd/go-cni v1.1.12
    3d72df0e89 vendor: google.golang.org/grpc v1.69.4
    72c91e378d client: remove serverResponse and use http.Response directly
    b99b5422b0 api/types: deprecate IDResponse
    96dc9cb693 Don't log a warning when an IP address is already in an ipset
    b23b8f1567 Restore more iptables rules on firewalld reload
    9a20edf7b6 api/types/container: introduce ExecCreateResponse type
    0df3a0047a api/types/container: introduce CommitResponse type
    be1ac5d8e5 api/types/container: rename ContainerTopOKBody to TopResponse
    f4dc38cd36 api/types/container: rename ContainerUpdateOKBody to UpdateResponse
    85ff36de26 Dockerfile: update docker CLI to v28.0.0-rc.1
    cc6754f3fa Dockerfile: update buildx v0.20.1
    b90a2bac7d Dockerfile: bump gotest.tools/gotestsum v1.12.0
    c786cdf124 update authors and mailmap
    b4af9341af client: fix deprecation comment for ImageInspectWithRaw
    6ba4e78066 vendor: gotest.tools/v3 v3.5.2
    43532eb1e1 daemon: Daemon.Containers: make switches exhaustive (exhaustive)
    10ebdbbb92 daemon: Daemon.ProcessEvent: make switches exhaustive (exhaustive)
    f448d5ae3b daemon/events: make switches exhaustive (exhaustive)
    d9cf097402 daemon/cluster/executor/container: make switches exhaustive (exhaustive)
    bf3b4d4986 daemon/cluster/convert: make switches exhaustive (exhaustive)
    4d8dfc1409 daemon/cluster: make switches exhaustive (exhaustive)
    6929a3fd22 libnetwork/networkdb: make switches exhaustive (exhaustive)
    827f84d3ef volume/mounts: parseMountSpec: make switch exhaustive (exhaustive)
    0ee343222b daemon: eventTimestamp: make switch exhaustive (exhaustive)
    b343d235a0 container: State.conditionAlreadyMet: make switch exhaustive (exhaustive)
    8a35300b4a integration/internal/swarm: make switch excaustive (exhaustive)
    66ab2e9e77 plugin/executor/containerd: Executor.ProcessEvent: make switch excaustive (exhaustive)
    1a047bbe8b libnetwork: ignore unchecked json (Un)Marshal errors (errchkjson)
    63deb55263 libnetwork/drivers/bridge: bridgeEndpoint.UnmarshalJSON: fix unhandled errors (errchkjson)
    ccbcce2169 daemon/logger/templates: ignore unchecked error (errchkjson)
    32153dee9f daemon: Daemon.Reload: fix unhandled errors printing config (errchkjson)
    664558f916 daemon/cluster/convert: tmpfsOptionsToGRPC: ignore unchecked error (errchkjson)
    4a7f891fc3 integration/plugin: fix unhandled errors in tests (errchkjson)
    196a66a643 integration-cli: fix unhandled errors in tests (errchkjson)
    26d30159f7 libnetwork/driverapi: ignore unchecked error (for now) (errchkjson)
    b87c9fb3f4 libnetwork/diagnostic: ignore unchecked error (errchkjson)
    7dbceec8aa api/server/router/volume: fix unhandled errors in tests (errchkjson)
    07e2fc83ae pkg/plugins: fix "Multiplication of durations" (durationcheck)
    1ffbcb566b pkg/jsonmessage: fix "Multiplication of durations" (durationcheck)
    eac45daf06 runconfig: fix declaration has 3 blank identifiers (dogsled)
    09c5a01346 pks/plugins/pluginrpc-gen: fix unused value assign (wastedassign)
    a4dba91424 daemon/containerd: fix unused value assign (wastedassign)
    f1d7bd60ab integration/image: TestRemoveByDigest fixed unused values (wastedassign)
    9f8eafc101 plugin: withFetchProgress work around "nested context in loop (fatcontext)"
    e9c90834fa opts: host:port should be constructed with net.JoinHostPort (nosprintfhostport)
    0bf8c8b99e pkg/tailfile: avoid allocations with (*os.File).WriteString (mirror)
    4e6c91cc56 pkg/pools: avoid allocations with (*bufio.Writer).WriteString (mirror)
    f0a233bdc3 pkg/archive: avoid allocations with strings.Compare (mirror)
    17f32e8822 libnetwork/internal/resolvconf: avoid allocations with bytes.NewBufferString (mirror)
    0c8d086ed3 libnetwork: avoid allocations with regexp.Match (mirror)
    6ff3dfd88a integration-cli: avoid allocations with (*os.File).WriteString (mirror)
    405ce2ef15 distribution/xfer: avoid allocations with bytes.NewBufferString (mirror)
    d50492a70d container/stream: avoid allocations with (*bytes.Buffer).WriteString (mirror)
    dbf2cdd06c integration/networking: fix append to non-zero initialized length (makezero)
    dd8ee9eeb1 libnetwork/cnmallocator: fix append to non-zero initialized length (makezero)
    8e9fce7970 libnetwork/bitmap: fix append to non-zero initialized length (makezero)
    f9890d97d1 libnet: kvstore/boltdb: fix append to non-zero initialized length (makezero)
    1f7d497a99 errdefs: remove duplicate "causer" interface definition (iface)
    1784026740 client: custom trace options
    cab2157182 Dockerfile: update golangci-lint to v1.63.4
    f34a1aafe9 vendor: cloud.google.com/go/compute/metadata v0.5.2
    9c7112d118 daemon: configureMaxThreads: remove unused arg
    9e77d05967 add //go:build directives to prevent downgrading to go1.16 language
    192431cb35 pkg/idtools: un-deprecate Windows consts for now
    5a703c2eda libnet/osl: scan ns ifaces to generate ifname
    78b0475605 libnet/osl: AddInterface: un-alias props into local vars
    56a7817b2d libnet: add support for custom interface names
    6a8360012c libnet/osl: distinguish dstName & dstPrefix
    2e9e7989f8 cmd/dockerd: initBuildkit: return close-func
    2dc03f934f cmd/dockerd: refactor buildkit init in daemon startup
    9509f27e28 rootless: use `getsubids` tool for validation if possible
    a096045678 all: Replace deprecated ImageInspectWithRaw usage
    3d37537f75 c8d/inspect: Add Manifests field
    639a1214fa client/image-inspect: Introduce client opts
    6664f1220a c8d/inspect: Avoid interim images.Image conversion
    bdb6a7abdc c8d/list: multiPlatformSummary
    d4fa252cd3 Wait for a route to ff02::1 before sending NAs
    1126d477fd Add live-restore tests for mount image
    90aea3b85f Add image subpath mounting functionality
    634951457d Implement GwAllocChecker for the remote network driver
    12756071f1 update to go1.23.6
    294df1c447 volumes/service: OpErr: implement go1.13 unwrapper
    db68c99d4b distribution: fallbackError, notFoundError implement go1.13 unwrapper
    b96b14d078 cluster/executor/container: exitError: implement go1.13 unwrapper
    2997c0ddc0 client: deprecate CommonAPIClient interface
    846b2272e6 client: deprecate ErrorConnectionFailed helper
    e93ff742e8 client: doRequest: use errors.As for error-detection
    3725998e7d client: define interface for all Swarm-specific methods
    a57d737a86 client: define separate interface for HijackDialer
    902c06fdf0 client: make setupHijackConn a regular function
    e6dabfa3b1 client: move resetting mediaType for hijack to where applicable
    b0e206b807 client: separate Dialer() implementation from public API
    fcb924712b integration/internal: JobComplete: require shallower interface
    0f04532956 errdefs: touch-up godoc for helpers
    329b2a26f3 client: normalize and validate empty ID / name arguments to fail early
    844797348e Implement image mount for the snapshotter
    8c58934106 Implement mount from image
    c935a4609d Fix typo in API docs
    30e75b8396 client: improve handling of JSON error-responses with incorrect schema
    9a6e96fd9c Before sending ARPs/NAs, check the bridge is ready
    8e529682af builder: wire up new gc types for buildkit prune functionality
    52ea449c55 daemon: Daemon.restore: make legacy-link code conditional
    9a69161992 daemon: remove Daemon.children(), Daemon.parents() wrappers
    513fd86710 daemon: Daemon.getNetworkedContainer: fix errors for invalid network container
    51cb066ec8 daemon: Daemon.rmLink: don't fuzzy-match container when using ID
    79b0e89628 github: Clarify release notes description
    c43aa0b6aa Fix concurrency issue in dind
    7ac0e34dba gha/validate-pr: Also run when PR has new commits
    9b5a51a881 api/types/container: remove use of errdefs package in test
    02eb72380f client: remove uses of pkg/errors in tests
    3f354e8c1b api/types/registry: use stdlib errors package
    0ca0ccd37a client: improve test-coverage for error-responses
    9fdcde7618 Add bridge gateway mode "isolated"
    97b50bca2c client: WithVersion: strip v-prefix when setting API version
    bbaa8af8f3 libnetwork/drivers/bridge: un-export errors
    3f9698e1f6 libnetwork/drivers/bridge: TestLinkDelete: use gotest.tools
    74fd2ec0cf libnetwork/drivers/bridge: TestLinkCreateNoEnableIPv6: use gotest.tools
    6e9ba725f8 libnetwork/drivers/bridge: TestLinkCreateTwo: use gotest.tools
    bf3323fd40 libnetwork/drivers/bridge: TestLinkCreate: use gotest.tools
    7012e3ce14 libnetwork/drivers/bridge: remove NonDefaultBridgeExistError
    47f6d4e1bc libnetwork/drivers/bridge: internalize ErrInvalidGateway
    3a9f4e0146 libnetwork/drivers/bridge: remove ErrInvalidMtu
    2f42aa0e26 libnetwork/drivers/bridge: remove IPv4AddrNoMatchError
    0c1b660048 libnetwork/drivers/bridge: remove IPv4AddrAddError
    dc52ecb1d0 libnetwork/drivers/bridge: remove ErrNoIPAddr
    77261b5e42 libnetwork/drivers/bridge: remove "InternalError()" method from errors
    2766298f49 libnetwork/drivers/bridge: remove unused errors
    59c2d2a4b3 libnetwork/drivers/bridge: remove ErrInvalidDriverConfig
    6bb9f581a5 libnetwork/drivers/windows: remove ErrUnsupportedAddressType
    54a969d1a4 Dockerfile: Use CLI generated completions in the dev shell
    510e6f4f8a libnetwork/options: rewrite tests with gotest.tools
    af9ffb64cd builder/dockerfile: more consistently put "expected" on the right
    86a8bfdce4 remove redundant uses of api/types/strslice.StrSlice
    d216084185 libnet/d/bridge: drop remote connections to port mapped on lo
    27adcd596b libnet/d/bridge: port mappings: drop direct-access when gw_mode=nat
    8474153e13 integration: accessing mappings from another docker network
    a7e6d0a8a3 libnet/d/bridge: releasePortBindings: append directly into 'errs'
    aa3a23d4f9 Temporary debug for unsolicited NA
    49b1ed6d27 libnetwork: remove ErrInvalidName
    a98ecc5f79 libnetwork: remove ErrInvalidID
    548b0b6290 libnetwork: remove ErrNoSuchEndpoint
    7cc81407aa Add trace/logging in waitForIfUpped
    30601d96b7 Dump daemon logs when TestAdvertiseAddrs fails
    8705018705 daemon/cluster/executor: containerConfig: store Network instead of envelope
    90323ae123 daemon/cluster/executor: networkCreateRequest: not a method
    f5f4a062a5 daemon/cluster/executor: networkCreateRequest: slight DRY cleanup
    16770340ea daemon/cluster/executor: networkCreateRequest don't shadow config
    cef6fd2fa2 libnetwork: remove Network.EndpointByID as it must not be used
    4e6535fd3e man: vendor github.com/cpuguy83/go-md2man/v2 v2.0.6
    5c1fe287fc libnetwork: remove UnknownNetworkError
    8f4c98e1eb libnetwork: TestControllerGetSandbox: use errdefs for error asserts
    d34ca256b8 libnetwork: TestNetworkConfig: use gotest.tools for errdefs assertions
    c6f0fe5fc0 libnetwork: parallelTester.Do: use errdefs for error assertions
    11a6cb5fac libnetwork: TestEndpointJoin: use gotest.tools for errdefs assertions
    ea7d17376e libnetwork: TestInvalidRemoteDriver: use gotest.tools for error assertions
    01c87cc809 libnetwork: TestContainerInvalidLeave: use gotest.tools for errdefs assertions
    9472c860de libnetwork: TestEndpointMultipleJoins: use gotest.tools for errdefs assertions
    ab9d250876 libnetwork: TestEndpointDeleteWithActiveContainer: use gotest.tools for errdefs assertions
    56debcfc1c libnetwork: TestNetworkQuery: use gotest.tools for errdefs assertions
    874fb4d2f4 libnetwork: TestControllerQuery: use gotest.tools for errdefs assertions
    53bf2e8960 libnetwork: TestUnknownEndpoint: use gotest.tools for errdefs assertions
    895ee1214a libnetwork: TestDuplicateEndpoint: use gotest.tools for errdefs assertions
    678a8a27f5 libnetwork: TestUnknownNetwork: use gotest.tools for errdefs assertions
    9304d98757 libnetwork: TestDeleteNetworkWithActiveEndpoints: use gotest.tools for errdefs assertions
    01b0fe1172 libnetwork: TestNetworkName: use gotest.tools for errdefs assertions
    24df497674 libnetwork: TestNilRemoteDriver: use gotest.tools for errdefs assertions
    532d36c251 libnetwork: TestUnknownDriver: use gotest.tools for errdefs assertions
    400ad04c74 libnetwork: TestNull: use gotest.tools for errdefs assertions
    3bb40af036 dockerd: enable shell-completion; add (hidden) completion subcommand
    816f3fa516 integration: remove assertAttachedStream, check both STDERR and STDOUT
    2197549e4f daemon: health: getShell: simplify logic (LCOW remnants)
    d3c0825439 daemon: make daemon.getEntrypointAndArgs a regular function
    65120d586b Create bridge veth in container netns
    b3b9e990ee Get netns before calling moveLink
    357fb9d58d Add trace/logging in waitForIfUpped
    203d6530d0 libnetwork: use gotest.tools assertions
    a39bee9b71 libnetwork: suppress some unhandled errors in tests
    376ff6add6 libnetwork: use assert.Check in defers
    71c9a45672 libnetwork: use assert.NilError (step 2)
    231012996f libnetwork: use assert.NilError (step 1)
    6bb69a21bf EnableIPv4:false is no longer --experimental
    9a37ae3657 Test unsolicited ARP/NA on interface creation
    bc130f367d bridge/macvlan endpoints always use a random MAC address
    a900e0b5bb libn/netutils: put more entropy into random MACs
    422e056b0f Treat failure to send an initial ARP/NA as an error
    522016a842 Configurable count and interval for gratuitous ARP/NA messages
    eaa84bc8f4 Send unsolicited ARP/NA requests when bringing up interfaces
    2f84e2b208 libnetwork/drivers/bridge: driver.configure: move vars close to where used
    3955c021ff libnetwork: remove redundant type conversion
    41d502892d libnetwork/drivers/bridge: remove redundant type conversion
    6e6cf999ed libnetwork: remove isNotfound test-utility
    c9c322785c libnetwork: Controller.defaultGwNetwork: use errdefs to check for not-found
    59722228d7 libnetwork/types: compareIPMask: make error more readable
    768b152494 libnetwork/types: TestUtilGetBroadcastIP: use gotest.tools, table-tests
    06ae35afb9 libnetwork/types: TestUtilGetHostPartIP: use gotest.tools, table-tests
    9e11ea9287 libnetwork/types: TestCompareIPMask: use gotest.tools, table-tests
    85cd2b7c94 libnetwork/types: TestErrorConstructors: use errdefs for asserting
    afcf1b92a5 libnetwork: TestErrorInterfaces: use errdefs helpers to check error-types
    2b4aa5eb52 gha: update DCO check to alpine 3.21
    9dab00554d libnetwork/driverapi: fix GoDoc for UpdateIpamConfig
    52d2d28148 libnetwork/types: align error-types with errdefs
    836a5fac10 Dockerfile: update compose to v2.32.4
    b75a75017d Dockerfile: update buildx to v0.20.0
    1e2a828ed5 Dockerfile: update docker CLI to v27.5.0
    c52c68a709 vendor: update buildkit to v0.19.0
    366f2b563d Clarify code/comments in defaultipam.newPoolData
    bc93bba099 Use addrset.AddrSet instead of bitmap.Bitmap in IPAM
    7e247e8b13 Add addrset.AddrSet to track a set of IP addresses
    46e290fec6 Don't increment "unselected" in Bitmap when clearing a 0
    5e9ee1a849 gha: Adjust release branches
    ae0fda655b update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336)
    fc7caf96d2 Revert "libnet/d/bridge: port mappings: filter by input iface"
    f658ea3152 Fix parsing of user/group during copy operation
    131441b37f daemon: NewDaemon: align max backoff delay with containerd 2.0
    76a496a482 daemon/links: fix duplicate env-vars and cleanup range-detection
    fcdd6f4ad2 daemon/links: fix port-ranges with mixed protocols
    251c68c647 daemon/links: fix port-sorting with mixed protocols
    3d37d54b8c daemon/links: Link.ToEnv: simplify adding default port env-var
    c508919b7c daemon/links: add BenchmarkLinkMultipleEnv
    3b27e36d67 daemon/links: add EnvVars function
    b54053d5da daemon/links: NewLink: simplify map to string conversion
    53fec9813f daemon: Daemon.setupLinkedContainers: don't fetch linked containers if not used
    6b14bdb7c7 daemon/config: validate network-diagnostic-port
    370c7a30e2 libnetwork/diagnostic: rename methods
    16cc0be0e1 libnetwork/diagnostic: move and improve logs for starting/stoping
    8f1a49fa8c libnetwork: Controller: remove redundant mutex for diagnosticServer
    e4abcad7ac libnetwork/diagnostic: make EnableDiagnostic, DisableDiagnostic idempotent
    e899092b25 libnetwork/diagnostic: make DisableDiagnostic idempotent
    1e6449dfc7 libnetwork/diagnostic: print newline after stackdump log path
    8cc0e11823 libnetwork: un-export Controller.DiagnosticServer
    bf7a87a15a docs: clarify fromImage vs tag behavior in ImageCreate
    aa565ec1ef Dockerfile: update RootlessKit to v2.3.2
    f3f9641f5d vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.3.2
    912a64e22a vendor.mod: golang.org/x/sys v0.29.0
    e8c6e7ceb0 build: don't print warning when connection was terminated
    52774154c9 distribution: continueOnError: handle context cancellation / timeout
    6b5f14a7bb distribution/utils: WriteDistributionProgress simplify check for broken pipe
    61aa1657f7 layerStore.registerWithDescriptor: improve logs for cleaning up cache
    e7bd60ee2d Allow users to ignore missing br_netfilter
    66e6a0b7a1 vendor: update buildkit to v0.19.0-rc3
    21870ad796 daemon: NewDaemon: update grpc options for containerd 2.0
    22c02219de Bridge: on network delete, make sure it's deleted from store
    feb2dabaa9 Ignore error when adding a bridge already in the ipset
    0fad8324a8 libcontainer/supervisor: monitorDaemon: move options inline again
    29ce3633e5 libcontainerd/supervisor: remove grpc options that are the default
    b750eb87cd daemon: NewDaemon: remove grpc options that are the default
    e94114305e daemon: NewDaemon: align grpc options with containerd's defaults
    80b0570445 spelling fix in comments
    8c236de735 ci: switch from jenkins to gha for arm64 build and tests
    c817ea2159 api/server/middleware: log before, not after the request
    d86920b9b3 ci(bin-image): fix bake build
    078c5edcd7 Adjust test to support cgroupv1
    c75e333b6f Satisfy linter
    ce3e34816a Add support for bare `writable-cgroups` security-opt
    f8187c0214 Error on invalid requests for writable-cgroups
    bc7d118fd7 Adjust TestCgroupRW to test output before exit code
    081b9d97db Update TestCgroupRW with subtests + nil case fix
    b5b5b7e983 integration/container: test the writable-cgroups security option
    e3cdd59a82 daemon/&container/: enable `--security-opt writable-cgroups=true` as an option
    b1ea8032fa api: swagger: document StatsResponse
    9ed85f487d daemon: don't discard "invalid parameter" errors for archive endpoints
    c6d8a93d58 daemon: containerExtractToDir: remove handling for read-only paths on windows
    ca0158b235 daemon: containerExtractToDir: combine checks for read-only target
    0530750d7e daemon: containerExtractToDir: remove named error return
    9ed662e72e daemon: containerExtractToDir: remove handling for copyUIDGID on windows
    ca06b222e3 api/types/container: merge Stats and StatsResponse
    16cbb27e4e use StatsResponse instead of Stats in tests
    390cb4c2f1 Increase integration test timeout from 5m to 10m
    0aa8fe0bf9 Update to containerd v2.0.2, buildkit v0.19.0-rc2
    a63602472d Use local cleanup method rather than dependency
    3db60168e7 pkg/ioutils: remove crypto/sha256, crypto/sha512 imports
    f68eb9c3cb vendor: github.com/Microsoft/hcsshim v0.12.9
    488d6972b2 vendor: github.com/stretchr/testify v1.10.0
    2008799026 vendor: k8s.io/klog/v2 v2.130.1
    adec695d36 vendor: github.com/fsnotify/fsnotify v1.7.0
    1ef5957089 vendor: github.com/vbatts/tar-split v0.11.6
    de86c46158 vendor: github.com/containernetworking/cni v1.2.3
    6dd592bd49 vendor: github.com/containerd/go-cni  v1.1.11
    2ea97aec2d vendor: github.com/containerd/ttrpc v1.2.7
    cc120c4c05 testutil: update to semconv v1.26.0
    6439c46e06 vendor: github.com/containerd/errdefs v1.0.0
    f40b92272c vendor: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20231105174938-2b5cbb29f3e2
    eb592fecad vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6
    48e6b4e8f7 vendor: otel v0.56.0 / v1.31.0
    d60f164e21 vendor: github.com/creack/pty v1.1.24
    a78b84c212 vendor: github.com/aws/aws-sdk-go-v2 v1.30.3
    d5fe43335f vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto
    5066658f39 vendor: golang.org/x/oauth2 v0.23.0
    81d5487330 vendor: cloud.google.com/go/compute/metadata v0.5.0
    433b1f9b17 libnet/d/bridge: port mappings: filter by input iface
    49ec488036 logger/fluentd: remove deprecated fluentd-async-connect option
    d560704c91 libnet/d/bridge: init driver.nlh in newDriver
    5a6a980dad daemon/export: Stop when context is canceled
    15df1c9c40 imageService: Remove PerformWithBaseFS
    2f60d15ddf Internal macvlan networks don't need a gateway address.
    8b13cde274 L3 and internal ipvlans don't need a gateway address
    43f71fb582 Bridge - skip gateway allocation if no gateway is needed
    38e76ebea9 Only allocate a gateway if the n/w driver wants one
    64006f964a Simplify selection of gateway address
    24f09ef13c Update MAINTAINER file email for laurazard
    e26122c609 pkg/ioutils: remove unused NewReaderErrWrapper
    2b4db9383c pkg/archive: nosysFileInfo: implement tar.FileInfoNames to prevent lookups
    ce8d3d1c78 pkg/ioutils: remove deprecated NopWriteCloser
    39f1abb1fb pkg/ioutils: remove deprecated NopWriter
    3faa170371 pkg/ioutils: deprecate NopWriteCloser
    7fa3c553e7 pkg/ioutils: deprecate NopWriter
    ad860173a2 vendor: github.com/containerd/containerd v1.7.25
    c12bfda3cd Dockerfile: update containerd to v1.7.25
    d80e3410bc vendor: github.com/containerd/containerd/api v1.8.0
    d23871469b pkg/sysinfo: Remove deprecated `NumCPU`
    cdd4a7429f pkg/ioutils: remove errWriteFlusherClosed
    034cd27da0 pkg/ioutils: remove deprecated NopFlusher
    e183df63f9 pkg/ioutils: remove deprecated WriteCounter, NewWriteCounter
    15ce2914a5 pkg/ioutils: move BytesPipe to container/streams/bytespipe
    8f9c09edd4 Fix unit tests for an nftables host
    818a180fce pkg/ioutils: deprecate NopFlusher
    18f1ecafea c8d/snapshot: Rename variable that collided with import
    15d3c99ff6 daemon: Remove "Error: " error message prefix
    cd9c292de9 imageService: Unify `Mount` and `Unmount`
    0cbb604665 c8d: Implement `RWLayer` and remove `PrepareSnapshot`
    daed0bd4d6 container/rwLayer: Remove unused TarStreamer, ApplyDiff, Size and Name
    85de28901d container/rwLayer: Remove Changes
    bafebbbd8a container: Decouple RWLayer from graphdriver implementation
    383503d382 pkg/ioutils: deprecate WriteCounter, NewWriteCounter
    60971a66b4 pkg/ioutils: deprecate BytesPipe, NewBytesPipe, ErrClosed
    3db72b255d pkg/sysinfo: Deprecate NumCPU
    6d24a21643 improve validation of cpu-shares, and migrate TestRunInvalidCPUShares
    400f1ed95c runconfig: TestValidateResources: use subtests
    93907c904d runconfig: TestValidateResources: fix duplicate test-case
    5b18a7914c deprecate pkg/parsers.ParseKeyValueOpt and move internal
    aad7bcedd2 Dockerfile: update runc binary to v1.2.4
    35932cdeec pkg/ioutils: un-export readCloserWrapper
    392d33c98c image/save: set a stable timestamp for assets
    e324df3f1b image/tarexport: patch MkDirall to accept atime, mtime
    ca962cecfd image/tarexport: add fork of os.MkdirAll (non-buildable commit)
    ee1a15a970 daemon: ImageService.LogImageEvent: pass through context
    ea00e72c21 libnetwork/drivers/bridge: processIPAM: remove unused arg
    f8a973ba4e ci: update bake-action to v6
    586556eda7 runconfig: return correct error-types and touch-up error messages
    fbb421efaa runconfig: cleanup TestDecodeContainerConfig
    c76cab29df runconfig: cleanup TestValidatePrivileged
    ff64a348cc runconfig: fix and refactor TestDecodeContainerConfigIsolation
    7864454792 pkg/ioutils: move atomic file-writers to a separate (pkg/atomicwriter) package
    34ab9570ad daemon/links: TestLinkMultipleEnv: assert with gotest.tools, remove TestLinkPortRangeEnv
    97dc3056c6 Clear RWLayer reference under container lock
    080d8e7d63 daemon/links: TestLinkEnv: assert with gotest.tools
    702df89d9b daemon/links: TestLinkNaming: assert with gotest.tools
    51eb0c6a24 daemon/links: TestLinkNew: assert with gotest.tools
    382fb41563 daemon/links: remove newPortNoError utility
    3fa5e7e6a9 Update internal use of idtools to usergroup
    9c368a93b6 Split internal idtools functionality
    a4ae38b010 Use bridge consts for "DefaultGatewayIPv[46]" aux-addr keys
    0f7a43271c daemon/events: Move metrics to internal/metrics
    90e2afd0be daemon: Move direct usages of go-metrics to internal/metrics
    438f5801e1 daemon/images: Move ImageActions to metrics
    51c2689427 daemon/metrics: Move out to `internal/metrics`
    048fece105 Alias github.com/docker/go-metrics imports
    24ad9bef9d pkg/idtools: rewrite to use moby/sys/user
    f4e2cfa209 libnetwork/osl: Namespace.setSysctls: use stdlib errors
    064cdf475c pkg/parsers: deprecate ParseUintListMaximum, ParseUintList
    39c05177ef Check network connect/disconnect after live-restore
    c2fe1d31e9 Fix live-restore of the osSbox
    a77ee8b9c0 Mark endpoints as "populated" after live restore
    db1ed280f1 Live-restore gw-priority
    9138195cef Rename Controller.sandboxCleanup to sandboxRestore
    1359772433 pkg/sysinfo: parse cpuset.cpus/mems once and memoize
    35fcbc1d1a Test a container attached to l3-ipvlan and bridge networks
    81f6e087c1 Treat connected routes to unspecified addrs like default gws
    725defe1e9 Include iface routes to unspecified addrs when looking for default gws
    0416e31876 Add comments to selectGatewayEndpoint
    1b9c09e10a daemon/logger: un-export RingLogger
    263c46d755 integration/internal/container: IsInState: touch up error-logs
    2282279180 pkg/sysinfo: internalize parsing cpusets
    aa696ffbb1 pkg/sysinfo: touch-up docs for cgroupCpusetInfo.Cpus, Mems
    4597396cb5 pkg/sysinfo: define const for default Max CPUs
    799501d172 pkg/sysinfo: rename vars/arguments for clarity
    0d51680f91 pkg/sysinfo: stub out parsing cpusets on non-linux
    b7ed099727 daemon: isOnlineFSOperationPermitted: cleanup confusing syntax
    fb03a3c403 vendor: github.com/moby/term v0.5.2
    be39e4f732 man: remove --allow-nondistributable-artifacts
    4f9150cee5 Update swarm to latest for server alpn config
    a51baca00d pkg/fileutils: move GetTotalUsedFds internal in daemon
    ba8279bf1f golangci-lint: remove temporary exception for deprecated code
    e45f20352d pkg/fileutils: deprecate GetTotalUsedFds
    a079f62f47 Add testutil daemon.WithResolvConf
    d7f59cec05 daemon/config: add basic validation of exec-opt options
    a646467a66 integration-cli: migrate TestCreateByImageID to integration suite
    5b31a5b370 libnetwork/drivers/windows: fix error-matching for hcsshim "not found"
    1f4c9f23c3 libnetwork/drivers/bridge: format errors with '%v' for consistency
    3b8ba71fe3 libnetwork/drivers/windows: fix non-constant format string
    8c96e45375 distribution: fix non-constant format string
    e451b698d3 golangci-lint: add forbidigo rules to prevent regex.MustCompile
    86e470fe3a daemon/names: use lazyregexp
    b7c88502fb internal/testutils/networking: use lazyregexp
    ae13510577 daemon/logger/awslogs: use lazyregexp to compile regexes on first use
    690e00733e volume/mounts: use lazyregexp to compile regexes on first use
    72ebf2c309 testutil: use lazyregexp to compile regexes on first use
    b5d90d746b registry: use lazyregexp to compile regexes on first use
    b6b19059c5 plugin: use lazyregexp to compile regexes on first use
    0fe953dff0 pkg/idtools: use lazyregexp to compile regexes on first use
    48d63b99ef opts: use lazyregexp to compile regexes on first use
    06948b83f3 oci: use lazyregexp to compile regexes on first use
    98f7c45e7f integration-cli: use lazyregexp to compile regexes on first use
    bc1dbd9ea6 daemon: use lazyregexp to compile regexes on first use
    d61a6924d7 client: use lazyregexp to compile regexes on first use
    0672b3b7f7 builder: use lazyregexp to compile regexes on first use
    43b3aaa62d implement lazyregexp package
    ce37cb3ea0 Down with the sickness (AUTO_GOPATH)
    839b0afbc7 integration/container: use is.ErrorType for some tests
    4504ca6bf6 integration/container: rename vars that shadowed imports
    6b0085eebd integration/container: use consistent name for api-client
    fa0b9f9505 integration/container: use consistent alias for test-container pkg
    547151abd2 pkg/sysinfo: cleanup tests
    25009ed5c0 Restore labels when re-creating Windows networks
    7bd1b64058 daemon/logger/loggertest: remove workaround for OSC string terminator parsing
    5149401665 vendor: github.com/Azure/go-ansiterm faa5f7b0171c
    ddd885a961 daemon: don't repeatedly call NumCPU if not needed
    aa7493f953 daemon: minor cleanups for getting system info
    1c37a4454b daemon: adjust tests for changes in go1.24 JSON errors
    c5575b5119 daemon: add missing "//go:build" directive
    f8524ab041 daemon: remove workaround for  go1.21 compiler bug
    8e9213a6b6 daemon: remove kernel-version check for kernel < 4.0.0
    86a2df8be6 pkg/parsers: rename var that collided with builtin
    cfc988e4da integration-cli: TestRunInvalidCpuset.. create instead of run
    8d5cf1db1e Use the roundtripper during build
    f321120767 daemon: parseSecurityOpt: rename var that shadowed function
    44db31b9cc remove pkg/broadcaster and make it internal to container/streams
    6ab9212168 pkg/ioutils: remove OnEOFReader and move it internal
    be4eac753f Remove use of bufio in cli import tests
    4c251b6b03 Add pool for archive decompress stream
    9189a6e0ab Fix chrootarchive test
    a93a079cb4 Remove use of pools in archive
    8d787e3461 builder/dockerfile: unconvert
    e19e4de775 daemon: ignore some errors when setting env-vars
    c759fb20d6 daemon: remove uses of deprecated system.MkdirAll
    1e060d3315 daemon/graphdriver/windows: remove uses of deprecated system.MkdirAll
    05ec732667 libcontainerd/supervisor: remove uses of deprecated system.MkdirAll
    84bb6e5afb container: remove uses of deprecated system.MkdirAll
    c02c2a3a79 cmd/dockerd: remove uses of deprecated system.MkdirAll
    e783bb5c69 builder/dockerfile: remove uses of deprecated system.MkdirAll
    bc61b31935 pkg/idtools: remove uses of deprecated system.MkdirAll
    4472e9b7f8 pkg/system: deprecate MkdirAll and remove custom volume GUID handling
    e5bf6d8ba0 libnet: pass store as an arg to netdrivers
    93e9f7f75f distribution: Pass Traceparent OTEL HTTP header
    524a63a958 pkg/chrootarchive: remove "// import" comments
    302ca6227f pkg/chrootarchive: use stdlib errors
    727ab584bb vendor: github.com/containerd/cgroups v3.0.5
    275bbcd300 builder: don't fall back to defaultKeepStorage when set to zero
    315891dd2e Remove import comments
    e4236c93d9 Remove unused pkg/system functions
    12b2b56fa6 Update archive to use fs.FileInfo over custom stat
    bb3e95dfdc Update archive to use unix.Mknod directly
    35b9525f9a Update archive to use its own xattr funcs
    1b4cbea3a8 Update archive to use time operations directly
    90fef061ec daemon/c8d: Force c8dimages alias for containerd/images
    8c30e11321 c8d/delete: Consistent method receiver
    1ad78f00b1 daemon/c8d: Fix duplicate containerd/images import
    6bd5840675 vendor: golang.org/x/net v0.33.0
    364e4790e1 docs/api: allow for an empty string for Isolation (api v1.25-v1.47)
    7e9a5064dc api: Remove unused imageStore and layerStore
    c452af6651 image: Remove unused `Details` fields
    d9795da33e image: Remove `GetImageManifest`
    4f5ec9994c pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec
    7fbbd52b0e add Shaun Thompson as curator
    b0be1f3af8 Enable external DNS if a network has an IPv6 gateway
    ec8a5b0f4c libnet/d/bridge: move iptRule to iptables pkg
    1b823fb54e libnet: don't put external DNS answers in OTel spans
    1aecca8bbd docs: Update example section for SwarmJoinRequest
    b6594353f8 libnetwork/iptables: remove deprecated Passthrough()
    d34d092b42 libnetwork/iptables: remove deprecated IPV, Iptables, IP6Tables
    820dea0d2b libnet/d/bridge: hardcode chain names
    bd30a51ea7 libnet/iptables: split ProgramChain and move to bridge driver
    df3c78d061 Combine outgoing and ICC iptables rules
    0f259dd76d Rename setupIPTablesInternal -> setupNonInternalNetworkRules
    556b8eed16 Tidy setupIPTablesInternal
    8fd177d79b pkg/reexec: Command: separate public API from implementation
    6568c06d12 pkg/reexec: make platform-agnostic (again)
    7672d60033 pkg/reexec: use const for name of test binary
    0ef2b24c80 Make libnetwork responsible for DOCKER-USER setup/reload
    9699284e8f Add iptablesdoc for a swarm network
    6473d37002 Run commands in an L3Segment netns without failing the test.
    3bf9a80818 Rename L3Segment Host.Run -> Host.MustRun
    29e20fc904 Add static filter-FORWARD rules during bridge driver init
    5ccc699513 Use golden testdata in TestUserChain
    cd81985bfa vendor: update buildkit to v0.18.2
    d688389f4a libnetwork/iptables: deprecate Passthrough
    8991c4e382 Deprecate BridgeNfIptables and BridgeNfIp6tables fields
    30a365f543 docs/api: version-history.md: fix markdown
    01a55860c6 libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err
    31fc7dd750 libcontainer: ReplaceContainer: fix var shadowing import
    4e9df46a6e docs/api: document correct case for Api-Version header
    53a9127349 integration/build: make TestBuildEmitsImageCreateEvent less noisy
    504e1d4686 pkg/archive: replace uses of pkg/errors for stdlib errors
    f0ce367e1e pkg/system: deprecate types and functions that are only used internally
    f053beb34c libnet/osl: drop netns path GC
    27deff4da1 libnet/iptables: deprecate type IPV
    c8f19e5e4c libnet/iptables: remove mutex-based serialization
    537eea8744 vendor: golang.org/x/net v0.32.0
    678ef1a267 libnet/d/bridge: unconditionally error out if LinkSetMTU fails
    5c358743af daemon: info: remove bridge-nf-call-iptables / ip6tables warnings
    d8358ebc87 otel: Use non-noop tracer provider for grpc
    96ef85272f c8d/pull: Show `Extracting` layer status
    899360b649 integration/build_traces: Create own tracer provider
    4847557d1b otel: Avoid excessive memory allocations if not configured
    927ff16860 vendor: github.com/opencontainers/runc v1.2.3
    88a08a070e vendor: github.com/cyphar/filepath-securejoin v0.3.5
    ba90fd8da0 Decouple pkg/archive from pkg/ioutils
    ec5c9e06e3 Dockerfile: update runc binary to v1.2.3
    e6443e4af2 vendor: golang.org/x/crypto v0.31.0
    035eeee209 vendor: golang.org/x/text v0.21.0
    df8b3e787c vendor: golang.org/x/sync v0.10.0
    c4f80dd931 vendor: golang.org/x/sys v0.28.0
    8b243a1a82 docs/api: deprecate non-distributable artifacts
    1932091e21 remove support for non-distributable artifacts and deprecate API fields and config
    e394ff695c Dockerfile: remove libbtrfs-dev dependency
    7d79b301bc Dockerfile: remove libsecret-1-dev dependency
    3192b2aba7 Dockerfile: remove libudev-dev dependency
    7c4afb1e6b Dockerfile: remove dpkg-dev dependency
    7bba43a731 Dockerfile: remove libapparmor-dev dependency
    b08ff81204 builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy
    1a453abfb1 integration-cli: don't skip AppArmor tests on SLES
    be9e39b48b registry: ConvertToHostname: use strings.Cut to reduce allocations
    a6f98dc60d registry: Service.lookupV2Endpoints: add arg to skip mirrors
    50215913db registry: loginV2: move variables closer to where they're used
    c1ef39e56e registry: loginV2: don't contact registry when failing to construct request
    a7da6fb2a7 man: vendor: github.com/cpuguy83/go-md2man v2.0.5
    89899b71a0 update xx to v1.6.1 for compatibility with alpine 3.21
    9da0e69608 api/server: Server.CreateMux: pass context and use structured logs
    9c1ff095e8 cmd/dockerd: pass debug-router instead of constructing in CreateMux
    27294df576 api/server: Server.CreateMux: also register API-version debug endpoints
    e2d2834be1 api/server: Server.CreateMux: register debug endpoints with correct methods
    2f5412de8d api/server: set /debug prefix as part of debug-router routes
    694c01620b chore: fix some function names in comment
    76a5ca1d4d Accurately reflect the canonical casing of `API-Version` and `OS-Type` headers
    5fc32c12c7 cmd/dockerd: ignore some unhandled errors
    b0ec823cc7 daemon: remove Daemon.NetworkControllerEnabled
    59bfc32a33 daemon/containerd: hostsWrapper: remove  unused regService argument
    3014d6d7a3 registry: deprecate APIEndpoint.TrimHostName
    fe2637a05b api/types/network: add godoc for EndpointSettings.GwPriority
    15ba03c8fc Jenkins: don't modprobe kernel module
    2af19b6b7c Don't try to modprobe ip6_tables in the moby dev container
    f2e1f52a04 Try to load kernel module ip6_tables, when necessary.
    4740820716 Use ioctl to try to trigger kernel module loads
    56eb47c622 Ignore kernel-assigned LL addrs when selecting "bip6"
    404118c22b vendor: google.golang.org/protobuf v1.35.2
    20ddbe2a0b vendor: golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f
    1e51b7a28c vendor: golang.org/x/tools v0.27.0
    750d6f4423 vendor: golang.org/x/mod v0.22.0
    99f593b762 vendor: golang.org/x/net v0.31.0
    e5895eacac vendor: golang.org/x/crypto v0.29.0
    fb9977e42e vendor: golang.org/x/text v0.20.0
    115acf7c15 vendor: golang.org/x/sync v0.9.0
    e542dee0a6 vendor: golang.org/x/sys v0.27.0
    8fee8a759f Remove test env var DOCKER_TEST_CREATE_DEFAULT_BRIDGE
    0eb3d431c0 Run tests that change docker0 in their own netns
    52d7e407b7 update to go1.23.4
    504ee465fc vendor: update buildkit to v0.18.1
    4e30acb63f Dockerd rootless: make {/etc,/var/run}/cdi available
    820520affd distribution: verifySchema1Manifest: pass through context
    9a0b61ab29 daemon/daemon_linux.go: Fix a minor typo
    d75394bf77 Wait longer for a stable goroutine count in tests
    dd7831187d Fix typo in waitForStableGourtineCount
    f91afea6ea c8d/commit,import,build: Preserve overriden image
    f0c8becffb c8d/tag: Extract createOrReplaceImage
    0194a18ca8 registry: remove assignment of default values in some tests
    a93f6c61db c8d/tag: Don't log a warning if the source image is not dangling
    28a700bf5b registry: override net.LookupIP per test, not globally
    d17cd847ea registry: isCIDRMatch: don't try to resolve host if not needed
    5f91c769f5 registry: deprecate RepositoryInfo.Class
    3903f71f9f registry: remove deprecated APIEndpoint.Version and APIVersion type
    0bd8738e33 registry: isCIDRMatch: return early if no CIDRs are set
    cce5dfe1e7 Jenkinsfile: modprobe br_netfilter
    59c5919b12 Put --help before --host in the dockerd manpage
    2fbb18ece2 Add --host-gateway to the dockerd manpage
    0aba67203a Implement gateway mode "nat-unprotected"
    07dff11a7e Wrap errors rather than using err.Error()
    d3c2376ff1 cmd/dockerd: change routerOptions.Build to a regular func
    5b752fab32 api: add Priority field to EndpointSettings
    229dc6676c daemon: early-return from buildJoinOptions
    c9f17bedc7 daemon/config: extract validation of userland-proxy config
    83f8f4efd7 daemon/config: deprecate Config.ValidatePlatformConfig
    74a00f183b daemon/config: move utility-functions separate from Config methods
    a4714fa04d daemon/config: verifyDefaultCgroupNsMode: update error message for consistency
    2c000b8ac4 daemon: Daemon.RegistryHosts: use internal method to get daemon config
    16be996b6b ci: use edge releases of buildx
    3e4f437697 cmd/dockerd: newRouterOptions: rename arg that shadowed import
    68a98a7263 daemon: getCD: remove use of parsers.ParseKeyValueOpt
    003e35fea5 libnetwork/ipams/null: gofumpt code
    a8e5a19706 libnetwork/drivers/bridge: gofumpt code
    da5e86a82b daemon: gofumpt code
    fb6e650ab9 integration: add wait
    e7d15d4d58 daemon/graphdriver/zfs: ignore non-existent dataset on removal
    264c15bfc4 Fix br_netfilter module loading logic
    b4769e86a4 vendor: update buildkit to v0.18.0
    b57aa7f3b7 integration: remove default poll delay and timeouts
    c9a1e4dc8c Test host-gateway addresses from docker0
    af0b973595 Allow IPv4 and IPv6 host-gateway-ip addresses
    01e2168c1e Move Linux-only integration/network tests into Linux-only file
    90250ce93a vendor: update buildkit to v0.18.0-rc2
    b7f43c3729 Remove buildkit init timeout
    0b5b1db1c1 Use default ULA prefix if fixed-cidr-v6 is not specified
    fdd2591cbe Separate IPv4 IPAM conf from the rest of default bridge conf
    cc538b2bf0 Drop fixed-cidr if not within user-managed bridge subnet
    311a8bc899 Allow increase of fixed-cidr subnet size
    85159ce09f Allow non-overlapping change of fixed-cidr
    237654a553 Refactor IPAM config for default bridge
    90baa2bc36 Fix selection of subnet from user-managed default bridge
    63b558af77 Don't clear top bits of IP then check if it's global unicast
    facb2323a0 Add tests for IPAM Config of default bridge
    4a2bd1085e Move default bridge test into linux-only file
    46a91a947e api/types/filters: reduce uses of non-exported fields in tests
    cffee85725 api/types/filters: also test generated JSON
    848f11aa7c api/types/filters: rewrite tests with gotest.tools
    4becdaca72 Add label on PrepareSnapshot to warn about non-expiring leases
    eef6b83e53 Update containerd image builder to use lease prune label
    e6170a5c4f Fix lease management during image operations
    1a26e627bc vendor: github.com/vishvananda/netns v0.0.5
    0666d4a585 vendor: github.com/moby/buildkit 94d0f6ed85e5 (master / v0.18.0-rc.2)
    557e4ed83b tests: migrate simple cases to assert.ErrorIs
    caae3c051d tests: migrate to assert.ErrorContains when possible
    1b470d15d8 tests: migrate away from assert.Assert(v == nil)
    0553d3d994 tests: migrate away from assert.Assert(err == nil)
    5e4e34a966 tests: migrate strings.Contains -> is.Contains in assertions
    48b237f7af vendor: update buildkit to v0.18.0-rc1
    44f9eec1ae vendor: github.com/tonistiigi/go-actions-cache 394979b8119e
    1551d95727 vendor: resenje.org/singleflight v0.4.3
    b9a904c48a integration/container: TestCDISpecDirsAreInSystemInfo: use fixtures
    d23bc11b97 vendor: github.com/containerd/continuity v0.4.5
    8cecf3a71c Dockerfile: update containerd to v1.7.24
    a650dbd951 Update containerd to v1.7.24
    821d974789 volume/testutils: simplify fakePluginGetter
    b656cffe4c Disallow "network generic data" with type options.Generic
    223929a44d Test routed n/w inter-network communication
    0546d9084f Routed networks accept traffic from anywhere.
    10338053f0 Don't add default-RETURN rules to DOCKER-ISOLATION chains
    939bc14616 Tidy bridgeNetwork.isolateNetwork
    255fff4acd Propagate error from INC rule setup
    d3b7d84b23 Simplify setINC()
    1a607cf257 Rename gwMode.natDisabled() to gwMode.routed()
    9c9eccfb23 client: support multiple platforms on save and load
    e257856116 Dockerfile: update to runc v1.2.2
    44ed3067ca c8d/container/inspect: Return `ImageManifestDescriptor`
    0020c41e3a daemon: Best-effot container `OS` to `ImagePlatform` migration
    638172417c container: Add `ImagePlatform` field and deprecate `OS`
    60cd165012 Dockerfile/frozen-images: Add amd64 and arm64 hello world
    f303531757 client: ImageImport: omit empty query-parameters
    f96994ec17 Skip tests that are flaky for 4 already
    be36ac13e5 .golanci.yml: rm runc exception
    acf920823b update golangci-lint to v1.62.0
    329d35bcca vendor: github.com/opencontainers/runc v1.2.2
    4b26582bc6 vendor: google.golang.org/grpc v1.66.3
    1eccc326de vendor: github.com/golang-jwt/jwt/v4@v4.5.1
    a333c2990f client: TestImageImport: use table-test, asserts, add platform test-case
    2bab030d6c client: TestImageSave: use table-test, asserts, add platform test-case
    1ea24b7be3 client: TestImageLoad: add test-case for platform
    613538469b client: TestImageLoad: rewrite to use table-tests, use asserts
    b0b6357701 Makefile: don't automatically inherit graph-driver from host
    d88ab0f3a2 c8d/image/inspect: Return `Descriptor`
    c2c0046d11 remove logentries check and migration code
    5ef5ca3adc EnableIPv4 will be in API 1.48, not 1.47
    1a16f5099b daemon/logger: logDriverError: use WithFields for logs
    451fee91c5 libnetwork: add missing go:build tag
    0f0c5eeaca api/server/router/container: add missing go:build tag
    835b1f1063 daemon/containerd: add missing go:build tag
    354dfdb928 Delete /etc/hosts entries on network disconnect
    c1bf84fdbc Move Austin Vazquez (austinvazquez) to maintainers
    82fdae7730 daemon/images: fix godoc for ImageActions
    4a2c48e231 Dockerfile: update compose to v2.30.3
    ee95c7bd89 Dockerfile: update buildx to v0.18.0
    8a81a97af5 Only delete /etc/hosts entries for disconnected network
    b034dc41a2 deprecate pkg/platform and move internal
    b15cd283d8 c8d/list: Return `Descriptor`
    fc590032f3 hack: Add explicit containerd feature to `daemon.json`
    7d89d83485 golangci-lint: enable copyloopvar linter
    d67a21b6fc pkg/idtools: remove redundant capturing of loop vars (copyloopvar)
    3350920788 integration/service: remove redundant capturing of loop vars (copyloopvar)
    70b354713b runconfig: remove redundant capturing of loop vars (copyloopvar)
    1a89c1e4a6 pkg/archive: remove redundant capturing of loop vars (copyloopvar)
    517baee5f2 distribution: remove redundant capturing of loop vars (copyloopvar)
    04d8766d4e integration/network/bridge: remove redundant capturing of loop vars (copyloopvar)
    020b7102e3 daemon/logger/syslog: remove redundant capturing of loop vars (copyloopvar)
    59f68d3f99 api/server/middleware: remove redundant capturing of loop vars (copyloopvar)
    243442280e integration/system: remove redundant capturing of loop vars (copyloopvar)
    bb682f75f9 integration-cli: remove redundant capturing of loop vars (copyloopvar)
    a19b892c29 integration/volume: remove redundant capturing of loop vars (copyloopvar)
    cd5e043aff daemon/cluster/executor/container: remove redundant capturing of loop vars (copyloopvar)
    f797d70649 api/types/container: remove redundant capturing of loop vars (copyloopvar)
    08dbb7a593 integration/build: remove redundant capturing of loop vars (copyloopvar)
    ee54e43bf1 integration/daemon: remove redundant capturing of loop vars (copyloopvar)
    9a7278fbdc integration/capabilities: remove redundant capturing of loop vars (copyloopvar)
    ff97ff8320 daemon/logger/loggerutils: remove redundant capturing of loop vars (copyloopvar)
    67d91e7622 volume/local: remove redundant capturing of loop vars (copyloopvar)
    f7b547ba0d integration/network/ipvlan: remove redundant capturing of loop vars (copyloopvar)
    b5c0f6cd70 daemon: remove redundant capturing of loop vars (copyloopvar)
    d885d097ef libnetwork/ipams/defaultipam: remove redundant capturing of loop vars (copyloopvar)
    7db58fefdc internal/mod: remove redundant capturing of loop vars (copyloopvar)
    74e44345e7 distribution/xfer: remove redundant capturing of loop vars (copyloopvar)
    874ad2fcf0 api/types/filters: remove redundant capturing of loop vars (copyloopvar)
    3a34264129 volume/mounts: remove redundant capturing of loop vars (copyloopvar)
    a505b19170 integration/plugin/common: remove redundant capturing of loop vars (copyloopvar)
    742509150b libnetwork/bitmap: remove redundant capturing of loop vars (copyloopvar)
    082a52e8ac oci: remove redundant capturing of loop vars (copyloopvar)
    e9b009fef5 integration/networking: remove redundant capturing of loop vars (copyloopvar)
    53d78d73e6 integration/container: remove redundant capturing of loop vars (copyloopvar)
    0b2d687b06 daemon/containerd: remove redundant capturing of loop vars (copyloopvar)
    b5b077f2ea api/types/network: remove redundant capturing of loop vars (copyloopvar)
    0fc7b1c201 daemon/cluster/convert: remove redundant capturing of loop vars (copyloopvar)
    6a85a13c0a internal/testutils/specialimage: remove redundant capturing of loop vars (copyloopvar)
    1c6958bf13 integration/network/macvlan: remove redundant capturing of loop vars (copyloopvar)
    88e24ccda6 image/cache: remove redundant capturing of loop vars (copyloopvar)
    89add8c64f libnetwork/drivers/overlay: remove redundant capturing of loop vars (copyloopvar)
    ce1a39ab34 client: remove redundant capturing of loop vars (copyloopvar)
    ea10382ffa integration/image: remove redundant capturing of loop vars (copyloopvar)
    69d0c773ca daemon/logger/fluentd: remove redundant capturing of loop vars (copyloopvar)
    c2e22d85b3 api/server/httputils: remove redundant capturing of loop vars (copyloopvar)
    aea8a0724a integration/network: remove redundant capturing of loop vars (copyloopvar)
    f0b896c5f2 builder/remotecontext/git: remove redundant capturing of loop vars (copyloopvar)
    4768d680d1 libcontainerd/remote: remove redundant capturing of loop vars (copyloopvar)
    443a074fa4 profiles/seccomp: remove redundant capturing of loop vars (copyloopvar)
    93f98535c3 daemon/logger/loggertest: remove redundant capturing of loop vars (copyloopvar)
    35aa84fbc2 pkg/plugins: remove redundant capturing of loop vars (copyloopvar)
    63f0b9a1d5 opts: remove redundant capturing of loop vars (copyloopvar)
    c0de852afa integration/config: remove redundant capturing of loop vars (copyloopvar)
    41bf78226f daemon/config: remove redundant capturing of loop vars (copyloopvar)
    b01a37a6b7 libnetwork/drivers/bridge: remove redundant capturing of loop vars (copyloopvar)
    53e48e8623 libnetwork: remove redundant capturing of loop vars (copyloopvar)
    8b190b16df registry: remove redundant capturing of loop vars (copyloopvar)
    21e1038d12 golanci-lint: sync comments with docker/cli
    b453aa65fa update go:build tags to use go1.22
    bf251c33d0 Only masquerade access to own published ports for userland-proxy=false
    3dea9fd4e6 Add TestFilterForwardPolicy
    3cadadb4eb Add daemon option --ip-forward-no-drop
    5823b05c97 Modify IP forwarding and filter-FORWARD DROP setup.
    a4d74c6383 Move setupIPv6Forwarding() to setup_ip_forwarding.go
    24f53eba7f Move integration/network/bridge_test.go to bridge subdir
    ca273f465a Dockerfile: update registry to v3.0.0-rc.1
    c9570da15b chore(libnetwork): fix some comments
    756586e437 vendor: update buildkit to v0.17.1
    a6e5f7f86b Structured logs in sbJoin/sbLeave and funcs they call
    18327745c0 Allow separate IPv4/IPv6 gateway endpoints.
    869f7996fc Option to disable implicit mapping IPv6 host to IPv4.
    4ac7f14e99 Add EnableIPv4 to the bridge driver
    c0045476b8 all: Remove redundant `units` alias for `go-units`
    20818454c4 update to go1.23.3
    16f6fd1a95 Add a comment explaining host-networking hosts file generation
    7c1e41a06d libnetwork: Sandbox.buildHostsFile: remove intermediate var
    6a5ab42f28 libnetwork/etchosts: Delete: truncate file instead of close and write
    7d98e45a6e libnetwork/etchosts: Add: combine with "mergeRecords()"
    28d029cf9f libnetwork/etchosts: don't panic on invalid regex
    80e4631998 Use netip.Addr instead of string when building /etc/hosts
    c2a09d2721 Don't update /etc/hosts separately for each initial network
    0af6203b46 vendor: github.com/containerd/typeurl v2.2.3
    84965c0752 Windows: Run containerd as managed process
    5014c90516 api/swagger: Improve description for platform in images/push
    7766b35d74 golangci: govet: enable more rules
    24bd11ce22 pkg/plugins: TestLocalSocket ignore deepequalerrors (govet)
    626d9b421b distribution: TestLayerAlreadyExists: fix deepequalerrors (govet)
    06bf2a2699 distribution: manifestStore.Put: fix unusedwrite (govet)
    facdfc1751 daemon/images: onlyFallbackMatcher.Match: fix unusedwrite (govet)
    406e3a0ff7 daemon/containerd: storeJson: fix redundant err-check (govet)
    8e76998aee integration-cli: loadSpecialImage: fix shadowed variables (govet)
    a0b84a34c2 layer: verifiedReadCloser.Read: fix shadowed variables (govet)
    38db7265fc pkg/plugins: loadWithRetry: fix shadowed variables (govet)
    a28e6e2d21 daemon/graphdriver/btrfs: Driver.parseStorageOpt: fix shadowed variables (govet)
    b3705f12cd distribution: pushDescriptor.layerAlreadyExists: fix shadowed variables (govet)
    0c8c098719 libnetwork: Network.rmLBBackend: fix shadowed variables (govet)
    544b1574e2 builder/dockerfile: fix shadowed variables (govet)
    bb9251c46d daemon/containerd: fix shadowed variable in tests (govet)
    979227484f daemon/containerd: ImageService.imageDeleteHelper: fix shadowed variable (govet)
    6dc31171c5 builder/builder-next/exporter: patchImageConfig: fix shadowed variable (govet)
    b019372446 libnetwork/bitmap: fix shadowed variable in tests (govet)
    32aa56af00 pkg/idtools: fix shadowed variable (govet)
    6f3dd5f040 plugin: TestPluginAlreadyRunningOnStartup: fix shadowed variable (govet)
    e46e159001 plugin: Manager.getManifestDescriptor: fix shadowed variable (govet)
    d058e09200 daemon/graphdriver/overlay2: fix shadowed variable (govet)
    ee425a9773 builder/builder-next: fix "id" variable being shadowed (govet)
    79c5b938f4 daemon: Daemon.autoRemove: fix shadowing (govet)
    007daf5045 daemon: Daemon.handleContainerExit rename vars to prevent shadowing (govet)
    738fb74a1a libnetwork/datastore: MockStore.AtomicPut: remove redundant nil check (govet)
    473b1d419c golangci: run gosec on test files as well
    f6d86126c4 distribution/xfer: createChainIDFromParent: ignore G602 false positive (gosec)
    a309e88dff pkg/tarsum: renderSumForHeader: ignore G110 in tests (gosec)
    41b5645ba2 integration-cli: TestDaemonStartWithDefaultTLSHost: fix G402: TLS MinVersion too low
    4bb96a5a4a awslogs: TestNewAWSLogsClientCredentialEndpointDetect: ignore G101 (gosec)
    6f220c3340 daemon/logger/splunk: HTTPEventCollectorMock: fix G114 (gosec)
    79196deae9 pkg/authorization: fix G112 Potential Slowloris Attack (gosec)
    e6e6f0cdca client: TestTLSCloseWriter: fix G112 Potential Slowloris Attack (gosec)
    963a9d7504 integration-cli: ignore some file-permissions issues (gosec)
    7d7412af31 integration-cli: TestRunCreateVolumesInSymlinkDir: adjust file perms (gosec)
    0d1c645919 integration-cli: writeFile: fix file permissions (gosec)
    6ca0d3b1b1 integration-cli: inspectMountPoint: fix implicit memory aliasing (gosec)
    c8e085b56a volume/mounts: TestConvertTmpfsOptions: fix implicit memory aliasing (gosec)
    c3fa5b2e57 integration/plugin/logging: adjust file permissions in test (gosec)
    9fc2b45fa5 fix vendor of github.com/containerd/containerd
    73fae59cef golangci: remove invalid govet config
    1188e80cc5 golangci: move gosec exclusions to linters-settings section
    a0807e7cfe golangci: set go version to prevent fallback to go1.17 semantics
    29e5bfb0f0 golangci: fix deprecated run option
    7809dc08f1 golangci: remove global ignore for EXC0006 / G103 (gosec)
    79e9619412 pkg/archive: ignore G103 (gosec)
    88c178328f libnetwork/drivers/bridge: ignore G103 (gosec)
    62e137377b integration/image: ignore G103 (gosec)
    e567b816d2 golangci: sort linters-settings
    0940460c2f libnetwork: endpointJoinInfo.UnmarshalJSON: fix shadowed variable (govet)
    e601e71681 Remove function isLinkable
    083d595286 client: TestImageHistory: add minimal test for platform
    73fabd5a21 client: TestImageHistory: use fixture for JSON response
    5cfd326aa4 client: Client.ImageHistory: don't decorate error twice
    caf2d5dc7c Change meaning of return from DNSBackend.ResolveName
    ec3dde7001 Only allocate IPv6 addresses if IPv6 is enabled.
    fe856b94b5 Configure network endpoints after creating a container
    788db583b1 Make buildSandboxOption a function instead of a Daemon method
    4c553defce Separate Sandbox/Endpoint construction
    a715ccaaa3 Unconditionally update NetworkSettings
    933fcc9814 Re-remove the SetKey OCI prestart hook
    035b8afe04 chore: fix function name
    330e717403 fix(systemd): start Docker engine *after* DNS resolution is ready
    96039276b6 client: add utilities to encode platforms
    816dbbfddc ci: re-enable firewalld jobs
    8c3945c761 client: rename vars for consistency
    0e72863b9d vendor: update buildkit to v0.17.0
    17b76511d5 Fix: Duplicate event on network disconnect #48797
    fbb595cb66 Remove libnetwork_test.TestMain
    5f39567e56 vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8
    741cc494cd builder-next: exporter: emptyImageConfig: use platform directly
    9be6e902b5 Restore 27.x path for libnet's Bolt database
    2cc21208e6 vendor: update buildkit to v0.17.0-rc2
    cb966073ce container create: add warning for volumeDriver together with mounts
    93255bd748 vendor: github.com/Microsoft/hcsshim v0.12.7
    3dc042b1df vendor: sigs.k8s.io/yaml v1.4.0
    2807c0c2d2 Revert "ci: run integration tests with firewalld enabled"
    db68a019fd c8d/save: Add tests
    3cc736e95c chore: fix some function names
    ba454f573b c8d/inspect: Fix duplicate RepoDigests
    ae87c1d84c remove deprecated pkg/directory
    2054fd99b1 pkg/longpath: remove deprecated Prefix const
    c1652ab357 volume/service: use local driver as default for anonymous volumes
    31880791a4 volumes/mounts: test the actual MountConfig returned
    275609eb37 volumes/mounts: test the actual error returned
    6b0c4b5216 volumes/mounts: don't set "expected" values for fail cases
    e141be8752 volumes/mounts: remove backticks from test logs
    be7d57367b volumes/mounts: remove backticks from errors
    0b290094b5 volume/mounts: windowsParser.ConvertTmpfsOptions don't use runtime.GOOS
    75e8f57579 internal/safepath: Join(): remove workaround for ECI / Sysbox
    4b60c68803 internal/safepath: Join(): log some unhandled errors
    5fc5b0574b internal/safepath: kubernetesSafeOpen: explicitly suppress unhandled err
    4e5c7eeafc daemon: cdiHandler.getErrors: remove var that shadowed import
    0c43bc6891 demon: ImageService.Mount: use structured logs
    5c48736863 remove redundant alias for runtime-spec
    352b4ff2f1 volume: VolumesService.Create: fix log-level for debug logs
    2aaae08ade Cleanup legacy mirror string to registry host
    b3569ebd5a Add HTTP fallback to all insecure registries
    1c34581812 Use daemon config to check for legacy config
    8b4cb6f58c Update host resolver to use containerd host config
    8e0bf25bc3 container: update confusing GoDoc for Container and State
    f2a3acc104 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0
    d9a2ca7b49 vendor: go.opentelemetry.io/otel v1.28.0
    070d6c75a7 vendor: google.golang.org/genproto/googleapis/api f6361c86f094
    c2029cb257 Update tmLanguage file to cover first escape character
    95959f7000 vendor: github.com/prometheus/client_golang v1.20.5
    10d57fde44 volume/mounts: fix anonymous volume not being labeled
    7d7089247c api/types/filters: GetBoolOrDefault: remove unreachableCode
    f31188bc4c vendor: github.com/cenkalti/backoff/v4 v4.3.0
    c3cab4170b vendor: github.com/go-logr/logr v1.4.2
    d2557466c6 vendor: google.golang.org/protobuf v1.34.2
    c98c6d4f08 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161
    a6d5b48e67 vendor: github.com/opencontainers/runc v1.2.0
    bb364cc0f3 inte/t/networking: delete veth ifaces before netns
    4ab7644d8d c8d/load: Don't ignore missing platform when requested
    533e7d150a From 28.0.0, don't migrate per-endpoint sysctls.
    b79bba6b68 Remove feature flag "windows-dns-proxy"
    88b90ebbd2 vendor: github.com/opencontainers/selinux v1.11.1
    5c72a95a30 client: prevent idle connections leaking FDs
    0105091745 vendor: github.com/cilium/ebpf v0.16.0
    51dd387bc9 vendor: github.com/cyphar/filepath-securejoin v0.3.4
    6be2074aef daemon: use OwnCgroupPath in withCgroups
    d4159a7e73 ci/gha: enable go caching
    0acdc37a20 container: remove deprecated ErrNameReserved, ErrNameNotReserved
    1dcb7af2cb daemon: remove Daemon.containerRoot, Daemon.newBaseContainer
    7c087c3267 Fork buildkit resolver logic to daemon package
    aba8df74a1 Add TestDirectRoutingOpenPorts
    c9fdeaf70e Explicitly DROP packets for ports/protos that aren't mapped.
    6634fc5136 Allow ICMP in routed mode
    6131322c6f daemon: remove deprecated Daemon.IsPaused
    692024a18c daemon: remove deprecated Daemon.Exists
    3bbb9749f4 c8d/test: Add memoryLabelStore
    3f745f2b21 c8d/list: Extract fake service helpers
    1bb5f8bb67 update to go1.23.2
    a8cd0fc4d4 vendor: go.etcd.io/etcd/server/v3 v3.5.16
    5f994c49e8 vendor: go.etcd.io/etcd v3.5.16
    ac6e32cb5c daemon: deprecate Daemon.IsPaused
    d47c31ffdd daemon: deprecate Daemon.Exists
    d9ae34289a daemon: Daemon.newContainer: explicitly return nil-error
    303530c1f5 daemon: Daemon.newContainer: inline Daemon.generateHostname
    7faaa3afa8 client: explicitly return zero-type on failures in prune functions
    0539b7073e pkg/stringid: optimize GenerateRandomID
    7ebe625db7 pkg/archive: move deprecated NewTempArchive, TempArchive to test-utils
    b313fcb8ff pkg/archive: remove deprecated CanonicalTarNameForPath
    c837027a9c pkg/stringid: replace TestShortenIdXXX with TestTruncateID table test
    83f17b0cbb pkg/stringid: remove deprecated IsShortID, ValidateID
    77f97926ad daemon: remove secretsSupported utility
    c0b86dd068 daemon: remove configsSupported utility
    5208e2954c daemon: deprecate Daemon.Register and make it internal
    d122ea0aea api: GET /images/json: preserve original manifest order
    1aba291cd4 Releases container layer on export
    66f159dc24 build: log when build is cancelled
    cca7085464 cmd/dockerd: Add workaround for OTEL meter leak
    21b0d5f0c1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e
    fafdcd1194 dockerd-rootless-setuptool.sh: let --force ignore smoke test errors
    e7e555f573 distribution: remove formatPlatform utility
    abed0e1f97 client: ContainerResize, ContainerExecResize: don't overflow width/height
    ed44a05607 api: backend.ContainerExecResize: pass context and use uint32 for width, height
    2b2aa69100 api: exec resize: improve errors for invalid width/height
    8553d34593 api: backend.ContainerResize: pass context and use uint32 for width, height
    d19aa0c590 api: container resize: improve errors for invalid width/height
    1dd9d2c780 api/server/httputils: add Uint32Value utility
    0548fe251c Enable bridge netfiltering if userland-proxy=false
    039e164bf5 api/server/httputils: DecodePlatform: improve test-coverage
    a8bfa83667 Fix: setup user chains even if there are running containers
    1701bce9e0 api/server/middleware: use structured logs for debug-logs
    4e840b9e29 volume/service: change some logs to use structured logs
    bca54a6838 daemon: killWithSignal: use more structured logs
    44010e76c2 integration/container: add TestExecResize
    944dc4a559 integration/container: TestResize: add more test-cases
    3f2e9da010 api/server/router/container: move API adjustments to API
    0c595fe781 api/server/router/container: fix inconsistent receiver name
    59cf8e8565 Add iptables doc for a gateway-mode=routed network
    19328fdd4f Add iptables doc for a --internal network
    bc84b4b6d9 Add iptables doc for a network with icc=false
    a8eaeba3f9 Add iptables doc for a network with userland-proxy disabled
    ac4a95d1d0 Add iptables doc for a user-defined network
    20571e453b Generate iptables documentation
    a602054826 daemon: fix restoring containers with name matching an ID
    71977a841c daemon: Daemon.registerName: inline validateID utility
    4e567e1622 ci: run integration tests with firewalld enabled
    8883db20c5 hack: run firewalld when $DOCKER_FIREWALLD is set
    6c6174b371 cmd/docker-proxy: UDP: reply to clients with original daddr
    a0a0bbae6c Discard ErrDumpInterrupted and return data after maxRetries
    3cf90ca73f container: deprecate ErrNameReserved, ErrNameNotReserved
    0200c58c4a container: viewDB.ReserveName, view.GetID: return errdefs errors
    0603bd9577 container: viewDB.withTxn: don't wrap errors
    0d36ab1875 container: TestNames: don't string-match error assertions
    d9627b6159 docs: api: document w (width) and h (height) query params as required
    2a3a7e8ee8 api: document w (width) and h (height) query params as required
    a051aba82e gha: shorter time limits for smoke, validate
    91c448bfb5 gha: use "ubuntu-24.04" instead of "ubuntu-latest"
    9a14299540 gha: dco: small tweaks to running the container
    3cb98d759d gha: dco: update ALPINE_VERSION to 3.20
    7da4ab9a91 README: add some badges
    cfe0d2a131 gha: build (binary), build (dynbinary): limit to 20 minutes
    e75f7aca2f gha: dco: limit to 10 minutes
    4a2361ea09 pkg/authorization: update link to API documentation
    5b149d3faa client: update link to API documentation
    0f8f143a27 docs/api: version-history: update documentation links
    e06245a2a6 client: imageBuildOptionsToQuery: omit "default" networkmode
    b13cf4fc5f client: imageBuildOptionsToQuery: only send "rm" when disabling
    805e2c67e2 builder/builder-next: Builder.Build: use network-mode consts
    740798da34 client: imageBuildOptionsToQuery: omit empty values from query
    c68c9aed8c gha: restrict cross and bin-image to 20 minutes
    7fe04c142d vendor: github.com/moby/buildkit v0.17.0-rc1
    cd551b936b daemon/containerd: getPushDescriptor: fix formatting of platform in errors
    c16be54040 daemon/containerd: touch-up errPlatformNotFound error
    91f74c2fe0 Disable iptables/ip6tables in two tests to remove conflict
    8681b3c2ac images: GetImage: touch-up error message for missing platform
    d31c241ea5 PushImage: remove misleading error about --platform without containerd
    037bac89fc gha: remove stray double empty line
    26049febb2 api: Allow for an empty string for Isolation in Swagger specs This adds an empty string as a valid option for the Isolation field when inspecting a container. On non windows systems, this is always empty, so no error should be returned. Fixes #47452
    6b7e2783d1 gha: add guardrails timeouts on all jobs
    7fa6d3c230 integration/build: remove TestBuildWithSession, and fsutil direct dependency
    2e699872bc vendor: google.golang.org/grpc v1.66.2
    e007ef71c1 vendor: google.golang.org/protobuf v1.34.1
    30b6e58242 vendor: github.com/cespare/xxhash/v2 v2.3.0
    4592ce42b6 vendor: golang.org/x/tools v0.25.0
    36549fb56e vendor: golang.org/x/mod v0.21.0
    cc80652bcd vendor: golang.org/x/net v0.29.0
    9d6db83acc vendor: golang.org/x/crypto v0.27.0
    6e32888caa vendor: golang.org/x/text v0.18.0
    51cf0ed303 vendor: golang.org/x/sys v0.25.0
    6b7565ba40 vendor: go.etcd.io/bbolt v1.3.11
    02d4fc3234 gha: buildkit: make sure expected Go version is installed
    d7ff538467 Fix iptables rule descriptions
    77e51657fe cmd/docker-proxy: re-add SO_REUSEADDR
    38f0483ea7 Set NODAD on bridge IPv6 addresses
    58f4e916a3 build: create distinct history db for each store
    367125e0cc Use `pools.Copy` for archive file copy operations
    2f02f456f5 Fix comments
    fd0d008504 vendor: github.com/vishvananda/netlink v1.3.1-0.20240922070040-084abd93d350
    7ca9e9b496 libnet/d/bridge: port mapping: proxy LL connections
    49ab30ea2c Fix vendoring for moby/docker-image-spec
    7eb508e14c api: postImagesLoad: fix API version for platform
    5875b6e8cf inte/networking: test access to published ports from remote host
    2552782c1d inte/networking: test accessing a published port from the host
    98efe665a5 Log rather than error if port mapping is overspecified
    339592f59b Pass context to the port mapping code
    ca4c68ab95 update to go1.22.8
    c866a7e5f8 daemon/exec: don't overwrite exit code if set
    4babd72186 tests: skip docker-py exec exit code test
    e6488c9c0e runconfig: validateNetContainerMode: simplify validation
    5bdbc2f026 client: ContainerCreate: normalize CapAdd, CapDrop capabilities
    be248d18b5 client.ContainerCreate: use container.CreateRequest instead of local type
    98d74e3a3c Update download-frozen-image-v2.sh added OCI v1 support
    91df504bf1 inte/networking: move port mapping tests into a dedicated file
    6a1d8a9899 daemon: add IPv6 loopback as insecure registry
    7624a6bfa5 Dockerfile: update compose to v2.29.7
    233dce3dba Dockerfile: update docker CLI to v27.3.1
    edcefd4efb libnet/i/kv/boltdb: fail fast in case of contention
    ed08486ec7 libnet/ds: simplify datastore.New()
    3ca91a6a12 libnetwork: unit tests: drop OptionBoltdbWithRandomDBFile
    450200b4a6 gha: add CodeQL Analysis workflow
    32b9e7b8b9 libnet/i/kv/boltdb: remove unused field 'timeout'
    4f1d739de5 gha: govulncheck: make sure read permissions are set
    8c598b1005 cmd/dockerd: runDaemon: extract platform-agnostic code
    5228850225 cmd/dockerd: windows: don't use Fatal log to prevent early exit
    0aebbd0ba9 cmd/dockerd: use golang.org/x/sys/windows/service param-change consts
    b186261b84 cmd/dockerd: un-export DaemonCli, NewDaemonCli
    6f83fda310 cmd/dockerd: construct context in main
    52694ebe16 cmd/dockerd: windows: move setting PIDFile location to setPlatformOptions
    44a3bba2a2 cmd/dockerd: apply options when creating daemonCLI, not when starting
    5c1b037ff5 cmd/dockerd: rename loadCLIPlatformConfig to setPlatformOptions
    1388d959bc cmd/dockerd: set default configfile location as part of newDaemonOptions
    19a8e7ff7e cmd/dockerd: getDefaultDaemonConfigFile: add GoDoc for Windows implementation
    388c0a8cda cmd/dockerd: remove unused error-returns
    1624ae197e cmd/dockerd: move Windows code for data-root
    333cfa6402 Fix merge problem
    db25b0dcd0 Only enable bridge netfiltering when needed
    605f51172a Dockerfile: update compose to v2.29.4
    3d4831a23f Dockerfile: update buildx to v0.17.1
    45a9dde660 man: dockerd: add description for --log-format option
    c4aaa97f02 man: remove docs for deprecated --api-cors-header
    c2fc1f4a40 internal/opts: SetOpts: invalidate empty option-names
    908bb959e7 internal/opts: SetOpts.Set: remove redundant var assignment
    758cca6036 internal/opts: SetOpts,NamedSetOpts: test for optional value
    50e83a0713 man: dockerd: value is optional for --feature flag
    f9c0103413 Do not DNAT packets from WSL2's loopback0
    2b6550bb2e man: fix duplicate word in --feature flag description
    edaa0eb56d Add linting rules to spot use of un-wrapped netlink functions.
    00bf437d84 Add nlutil functions to retry on netlink EINTR
    8b0e94ffaf Update dlv in the dev-env
    3dd96ce3c4 Fix enableIPv4 for old networks
    fa06acc851 man: update dockerd man-page to include --feature flag
    ff191c58f7 api: info: deprecate "Commit.Expected" fields
    f13c08246d Add feature to daemon flags
    fefa98ae90 c8d/prune: Keep deletion order stable
    521fa833fe images: Support platform selection on graphdrivers
    f143f4ec51 image/save&load: Support `Platform` parameter
    ab075ecd10 image/history: Support `Platform` parameter
    5128007116 Explicitly disable nvidia device injection for --gpus=0
    adb00d3d55 TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping
    23e79a261e c8d/prune: Add OTEL spans
    e4c2eb9d8a c8d/prune: Keep the last tagged image instead of creating dangling image
    962da27cdf Dockerfile: update compose to v2.29.2
    2b43979395 API: bump version to 1.48
    e5e8addeee Dockerfile: update buildx to 0.17.0
    d291722110 Dockerfile: update docker CLI to v27.2.1
    c095dbe512 project: update 23.0 EOL and add 25.0 LTM branch
    43036f350a Dockerfile: update RootlessKit to v2.3.1
    c98aad0518 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.3.1
    829aa845bb integration/system: rename vars to prevent shadowing imports
    71e449de0a vendor: update buildkit to v0.16.0
    7263cd226f image/tarexport: saveSession.save: inline variables
    2e4079ff31 image/tarexport: saveSession.save: remove redundant Platform
    ab5c5df1d5 image/tarexport: rename variables that shadowed imports
    5fd3cd2d77 layer: layerStore.deleteLayer(): remove redundant error-check
    f5cc04284d remove deprecated image/spec package
    92195c1333 Dockerfile: update containerd binary to v1.7.22
    b4a3e8a307 vendor: github.com/containerd/containerd v1.7.22
    6f37e5a168 vendor: update buildkit to v0.16.0-rc2
    1161b790cf seccomp: add riscv64 mapping to seccomp_linux.go
    16d686c7bc internal/unix_noeintr: fix godoc for package
    47d5ce0ef8 gha/bin-image: Also run on branches like `27.x`
    09fc6ab2d9 docs/api: update deprecation version for erroneous fields (v1.46, v1.47)
    3df03d8e66 api/swagger: update deprecation version for erroneous fields
    aca38a4218 docs: api: fix documentation for image push endpoint (API v1.25-v1.47)
    07e31e393a api: swagger: fix documentation for image push endpoint
    fb6da4f4b7 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16
    5403e3f4de libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16
    928e5aa524 container/stream: Config.CloseStreams(): use errors.Join
    59eba0ae13 Fix typos
    a2e14dd8bd update to go1.22.7
    5ebc179cb1 test: update since session signature has changed
    f4261dbb75 vendor: update buildkit to v0.16.0-rc1
    b5ec31f090 vendor: github.com/opencontainers/runc v1.1.14
    2189aa2426 update runc binary to 1.1.14
    4e0d1dfc17 docs/api: add documentation for API v1.47
    d000f12fcc hack/make/.binary: enable pie mode on windows/arm64
    28dc2f6fac Increase test handler sleep, replace deprecated assert
    c7f8557310 c8d/pull: Same error message for non-matching platform
    f5108e9c6b golangci-lint: temporarily disable G115: integer overflow conversion
    9b11bb507b update golangci-lint to v1.60.2
    3df59c9dcf update to go1.22.6
    4cd5c2b643 hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5
    e853c093bf hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5
    bb899c654a api/types: move RequestPrivilegeFunc to api/types/registry
    88b118688e man: create parent directories in install recipe
    9bbe5a50dd Dockerfile: update registry to v3.0.0-beta.1
    f4e82e2fb0 c8d/list: Don't exclude non-container images
    d6446d81d8 vendor.mod: golang.org/x/net v0.28.0, etc.
    65fdd363a0 vendor.mod: golang.org/x/time v0.6.0
    4bfdfd6f72 vendor.mod: golang.org/x/sys v0.24.0
    78d0ef5e87 vendor.mod: golang.org/x/sync v0.8.0
    492fe40052 vendor.mod: golang.org/x/mod v0.20.0
    d7ff6b5085 vendor.mod: drop direct dependency on golang.org/x/exp
    8e580efb73 portallocator: un-export PortAllocator.Begin, PortAllocator.End
    fb1ae4bdb7 portallocator: RequestPortsInRange: validate range once
    05d784d6da portallocator: make newPortMap a regular constructor
    c00f6281d9 portallocator: RequestPort: skip RequestPortInRange as intermediate
    78d88d06dc portallocator: use net.IPv4zero for defaultIP, and make it a property
    630a47177b portallocator: use new instance in tests
    1897a21d60 portallocator: ReleaseAll: remove unused error-return
    2a2176f317 portallocator: RequestPortInRange: fix doc-link in godoc
    a88efd7359 vendor: github.com/containerd/containerd v1.7.21
    de4fc1c927 Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only)
    1ad5b5abb2 daemon: fix non-constant format string in call (govet)
    005b488506 api/types: fix non-constant format string in call (govet)
    0fd3a53c12 api/server/router: fix non-constant format string in call (govet)
    4a93233b88 container/stream: fix non-constant format string in call (govet)
    068c1bf3be libnetwork/drivers/bridge: fix non-constant format string in call (govet)
    f434cdd14a volume/testutils: fix non-constant format string in call (govet)
    81a1ca0217 builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet)
    b56c58a860 layer: ignore G602: slice index out of range (gosec)
    c308bd3e0e internal/cleanups: fix non-constant format string in call (govet)
    7b60a7047d libnetwork/cnmallocator: fix non-constant format string in call (govet)
    06bfe8bab3 cmd/dockerd: fix non-constant format string in call (govet)
    6008c42ca2 libnetwork: fix non-constant format string in call (govet)
    b79a4696ee integration-cli: fix non-constant format string in call (govet)
    6bbacbec26 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors
    3ca38f0b5e integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors
    2b7a687554 integration-cli: use erors.New() instead of fmt.Errorf
    c7b36f8953 libnetwork: TestDNSOptions: remove redundant skip check
    6bd7835cb6 integration-cli: remove redundant platform checks
    0afe684685 c8d/pull: Replace pointer to interface with interface
    db40a6132b c8d/pull: Keep the replaced image as dangling
    6ebe6a7353 c8d/load: Only unpack host platform images
    728894b7d0 c8d/load: Don't fail whole operation if unpack failed
    0db71bb629 vendor: dario.cat/mergo v1.0.1
    2c498c6a74 vendor: github.com/vishvananda/netlink v1.3.0
    6d0a5e31d7 vendor: github.com/vishvananda/netlink v1.2.1
    55f693e7b7 integration/TestAPIImagesListManifests: Check `Containers`
    29a2f6d339 c8d/list: Update benchmark to also have containers
    a5d75f6d27 c8d/list: Fix race condition when traversing containers
    2f0180934d vendor: tags.cncf.io/container-device-interface v0.8.0
    fe307b5dab libnetwork: resolvconf: remove dependency on errdefs
    afdfc04e10 libnetwork: resolvconf: remove var that shadowed import
    6d94122217 logger/journald: plumb contexts into reader
    9b6ba18fc9 logfile: Close reader when caller cancels
    c4ba1f4718 Dockerfile: update xx to v1.5.0
    abcb9e972b libcontainerd/supervisor: set log-level through the config-file
    edfde78355 man: support bringing your own go-md2man
    05d7008419 man: build dockerd man pages using make
    1804f0c911 integration/container: rename var that collided with import
    62bcc6ef50 libcontainerd/supervisor: consolidate platform-specific defaults
    f49fad75eb vendor.mod: github.com/microsoft/hcsshim v0.12.5
    b93cf37dcd c8d/list: Don't require `opts.ContainerCount` for manifest containers
    cd148d39d9 feat(stream): log the event when stream copy failed
    c459986399 vendor: update buildkit to v0.15.2
    6bb6befc37 c8d: Rename readConfig to readJSON
    495fab8e66 c8d/list: Add test for total and content size
    469c2ef3ec c8d/list: Fix `Total` size calculation
    e77e543b58 api/types/registry: fix godoc, and add some doc-links
    218c08b283 plugin: fix deprecation comments
    771377f9fa Test ipvlan IPv6-only
    390713607f Allow ipvlan containers with no address
    b95f8e7799 Fix some ipvlan error types for the API
    660e8118a4 Allow no-IPv4 on an ipvlan network
    8427de3bac Test macvlan IPv6-only
    d599cc5842 Allow macvlan containers with no address
    f57e0dc2ff Fix some macvlan error types for the API
    a7a5de676d Allow no-IPv4 on a macvlan network
    496b457ad8 Allow --ip-range ending on a 64-bit boundary
    9c6d30481d remove leftovers for building docker-proxy on Windows
    3cd28504de govulncheck to report known vulnerabilities
    a308f12ed8 add Austin Vazquez (austinvazquez) to curators
    7b0ef10a9a migrate to github.com/moby/sys/userns
    8411ecb5e3 Makefile: Add BIND_GIT variable
    050afe1e1a api/list: Expose manifests
    f8b638b98f c8d/list: Use ReadConfig helper
    85e9102dc9 api: Bump default version to 1.47
    efb3c50799 swagger: Disable ImageSummary model generation
    b24c2e95e5 update to go1.21.13
    925b484a40 No fallback nameservers for internal resolver
    d29767431c Use host netns for host's ext-dns servers
    344039b9ae Populate DNS records for IPv6-only endpoints
    b4cee5c3ee Removed all mentions of "please" from docs and messages
    f1ec84314d docs: add default-network-opt daemon option
    23812190c3 docs: remove devicemapper
    690d166632 man/dockerd.8: assorted formatting fixes
    374b779dd1 man/dockerd.8: escape asterisks and underscores
    386d0c0fbc docs: update dockerd usage output for new proxy-options
    54971ac807 Fix styling of arguments
    a8b8f9b288 Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation
    68e9223289 docs: remove documentation about deprecated cluster-store
    6c702167bf Document `--validate` daemon option
    af45195a21 Update man-page source MarkDown to work with go-md2man v2
    562a6d2b13 docs: update for cgroup v2 and rootless
    7cf2132655 docker run: specify cgroup namespace mode with --cgroupns
    1cbcd5d47a daemon: document --max-download-attempts option
    3cfa74724c Update document links and title.
    462f38bd8b Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054
    13ff896b38 Update docs and completion-scripts for deprecated features
    f3c3b05b50 Added docs for dockerd
    20f8455562 fix a number of minor typos
    c23d4b017a Introduce/document new IPC modes
    25baee8ab9 docs: add documentation for dm.libdm_log_level
    7d3f09a9c3 Restore dockerd man page
    ea914a66a2 Use retErr in Network.ipamAllocate
    cdea750966 Tell RootlessKit about port mappings when --userland-proxy=false
    b3fabedecc Create docker-proxy TCP/UDP listener sockets in the daemon
    dac7ffa340 Remove rootlesskit-docker-proxy
    f1e0746c08 Tell RootlessKit about docker-proxy port mappings
    384ca56d90 Fix error type used for ProgramExternalConnectivity
    7a8663c9ea cmd/docker-proxy: drop FrontendAddr() method
    88fb0c9fec cmd/docker-proxy: drop unused BackendAddr() method
    ba2f3c0a98 cmd/docker-proxy: pass open listener to proxy impl
    e0c7a839a8 Only build docker-proxy for Linux
    ee766ae7b1 c8d: Wrap matchRequestedOrDefault result with a platform
    842c5c584e c8d/image: Add `matchRequestedOrDefault`
    6617cdc66b daemon/c8d: Fill wanted platform in GetImageManifest
    427b111943 c8d/history: Unmarshal only a subset of ImageConfig
    b9d04c07c4 c8d: Simplify `presentImages` into `getBestPresentImageManifest`
    23d565cae3 c8d: Improve error message for platform not found
    e73c2a05b2 daemon/c8d: Simplify `presentImages` signature
    af84ddec13 vendor: github.com/containerd/nydus-snapshotter v0.14.0
    1e5c0c4d77 vendor: github.com/containerd/nydus-snapshotter v0.13.14
    dfe36fa226 touch-up security policy
    3b1341972b Only assign an IPv4 address if required
    15e5f6868a Don't auto-allocate IPv4 IPAM if !enableIPv4
    c0a6145f6d Enable IPv4 in the unit tests that will need it.
    b42f4b96aa Check for an IPv6 gateway before connecting to docker_gwbridge
    034a5a8986 Reject swarm n/w creation with IPv4 disabled.
    c91dc7e6dc Reject Windows network creation with IPv4 disabled.
    a86a9e3aa4 API 1.46: end per-interface sysctl migration in major release
    17adc1478b Migrate per-endpoint sysctls until 28.0.0
    d44f869a2d vendor: google.golang.org/grpc v1.62.0
    716ec490db vendor: golang.org/x/time v0.5.0
    ac145a82fd api/types: NewHijackedResponse: fix typo in GoDoc
    80822715cd plugin: fix typos in GoDoc
    1f542d5d6c Set EnableIPv4 for predefined networks
    903daa4dc4 Add flag 'enableIPv4' to libnetwork.Network
    d4d8611164 Added API create/inspect option EnableIPv4
    c7dec1c67a docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46)
    66b5b8bfa8 api/swagger: fix x-nullable for SystemInfo.Containerd
    3279b4f8f4 hack/make: suppress "not mounted" message
    a23dcf4798 Bump API version to 1.47
    403f9dbc42 project: update supported release branches
    96762a28c7 libcontainerd/supervisor: remove remnants of adjusting oom-score
    2a71815b83 daemon: remove unused import
    2b5ffa0b63 gha: set permissions to read-only by default
    7a92f21445 daemon: isPermissibleC8dRuntimeName: use local utility to reduce c8d deps
    2847c4b7fe libnetwork/networkdb: switch to go-immutable-radix v2
    fca57ac32f Split Linux/bridge and Windows/nat integration tests
    ef8e2fe282 Use retErr in Endpoint.sbJoin
    58808e7748 Remove code to update Network.enableIPv6 if false
    8f1989556a Trivial tidy-up of Endpoint.assignAddress()
    6fe26e0629 Add IPv6 to the null IPAM driver
    dcf922e266 daemon: openContainerFS: log cleanup errors
    aa60f7891b daemon: openContainerFS: rename output var
    3539fef440 daemon: setupMounts: rename var that shadowed import
    a19c2ccc7b daemon: rename "mounts" type to reduce shadowing
    39c79e08e4 daemon: move sortMounts to a platform-agnostic file
    cdbfae1d3e api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize
    cd11843df8 images: Extract ImageInspect from GetImage
    1baf8f9e60 vendor: update buildkit to v0.15.1
    2ce811e632 migrate to github.com/moby/sys/user/userns
    91dfc326cf vendor: github.com/moby/sys/user v0.2.0
    1e2ccf8046 vendor: github.com/gofrs/flock v0.12.1
    077b32ac4e vendor: golang.org/x/sys v0.22.0
    4c97ff777d Clean up networks in 'integration/network' tests
    e2237240f5 dockerd-rootless-setuptool.sh: move RootlessKit smoke test
    a3efa3026b contrib/check-config.sh: remove special case for userns on CentOS/RHEL 7
    6d0b508699 daemon: remove setMayDetachMounts (set may_detach_mounts=1 on startup)
    ae96ce866f remove support for setting CORS headers (deprecated)
    dbf6873f45 Logfile: Add tracing spans
    1b46faf233 Logfile: skip files that are corrupted
    77f2d90e27 Refactor logfile reads
    b37c8a03c0 Fix time comparison in sharedtemp implementation
    21fd5a3f30 vendor: github.com/moby/sys/sequential v0.6.0
    e0b98a3222 gha: check-pr-branch: fix branch check regression
    fbbda057ac update containerd binary to v1.7.20
    f460110ef5 gha: check-pr-branch: verify major version only
    6a6b49f2de vendor: github.com/moby/sys/symlink v0.3.0
    68636d56fc vendor: github.com/moby/sys/signal v0.7.1
    44b266ab59 vendor: github.com/moby/sys/mount v0.3.4
    dc4a12874e vendor: github.com/moby/sys/mountinfo v0.7.2
    55a5f3fcaa vendor: github.com/containerd/containerd v1.7.20
    a42f7fd717 Dockerfile: update compose to v2.29.0
    97b51c6b72 Dockerfile: update buildx to v0.16.1
    b37c983d31 README: replace obsolete Docker EE mention
    508939821b daemon/containerd: rm use of regexp
    b66d4b567a image/v1: rm regexp use
    1c0dc8a94f layer: rm regexp use
    499c842c52 hack: explicitly control enabling the journald logging driver
    5282cb25d0 If url includes scheme, urlPath will drop hostname, which would not match the auth check
    2ac8a479c5 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com>
    0fa71a4cfc vendor: cloud.google.com/go/logging v1.9.0
    eafad2cb86 vendor: golang.org/x/oauth2 v0.21.0
    9b782b8ff7 vendor: cloud.google.com/go/compute/metadata v0.3.0
    68bd630830 vendor: update buildkit to v0.15.0
    f649fd0c97 Fix API version in TestSetInterfaceSysctl
    7f04a603f6 docs/api: Add missing `
    89781912c1 vendor: update buildkit to v0.15.0-rc2
    8be292a7bb By-default, don't create an iptables rule to checksum SCTP
    1787c364e0 vendor: update buildkit to v0.15.0-rc1
    688301caf4 daemon/graphdriver: remove Capabilities, CapabilityDriver
    185b1e3d69 Add lint rule to forbid old-style atomic ops
    5e64a7a003 volume/service: switch to Go 1.19 atomics
    1c102140f8 libnetwork: switch to Go 1.19 atomics
    46133bdb8e libnetwork/diagnostic: drop unsound use of atomics
    5044778433 distribution: switch to Go 1.19 atomics
    2ab618696a daemon/images: switch to Go 1.19 atomics
    30d740ada0 daemon/logger/ring: switch to Go 1.19 atomics
    7ef0c7acbe d/logger/loggerutils: switch to Go 1.19 atomics
    e612990994 daemon/logger/journald: switch to Go 1.19 atomics
    78893cdc05 daemon/logger/gcplogs: switch to Go 1.19 atomics
    508f51044d daemon/containerd: switch to Go 1.19 atomics
    71a299ff6a daemon: switch to Go 1.19 atomics
    206445fa4f rootless: add `Requires=dbus.socket`
    4776e6dd60 Remove IPv6 bridge RouteAdd() that always fails
    066b7fa83c vendor: golang.org/x/net v0.25.0
    7721408db7 vendor: golang.org/x/crypto v0.23.0
    f43436e6b8 vendor: golang.org/x/text v0.15.0
    342ce515ab vendor: golang.org/x/sys v0.21.0
    2e58a29023 vendor: github.com/klauspost/compress v1.17.9
    fb18966aa5 api/types/container: InspectResponse: keep old name for embedded type
    837289ba62 update to go1.21.12 [part 2]
    4d1d7c3ebe update to go1.21.12
    398e15b7de update containerd binary to v1.7.19
    d0aa3eaccf Migrate to github.com/containerd/platforms module
    8983957ac5 vendor: github.com/containerd/containerd v1.7.19
    73979f3f04 daemon/logger/journald: add //nolint:unused for readSyncTimeout
    ef356c53ba api/types: remove deprecated ContainerNode, ContainerJSONBase.Node
    5b9ed8081b api/types: remove deprecated ImageLoadResponse
    d3defe9140 api/types: remove deprecated ImageImportSource
    6cdb123b6f api/types: remove deprecated ImageSearchOptions
    67b7b15674 api/types: remove deprecated EventsOptions
    3cbc166d2e api/types: remove deprecated container stats types
    ec5cede0a2 api/types: remove deprecated ContainerStats
    4ffe497ba4 api/types: remove deprecated CopyToContainerOptions
    345e31ab96 api/types: remove deprecated ContainerPathStat
    2bceb34717 api/types: remove deprecated ContainersPruneReport
    0e64c9e93b api/types: remove deprecated ContainerExecInspect
    6f0caec226 api/types: remove deprecated ExecStartCheck
    13fbd394ee api/types: remove deprecated ExecConfig
    665eef54db api/types: remove deprecated NetworksPruneReport
    d2256faa0e api/types: remove deprecated NetworkResource
    ffdd2de674 api/types: remove deprecated EndpointResource
    f0f2b8f7cb api/types: remove deprecated NetworkDisconnect
    cf9d9ff50d api/types: remove deprecated NetworkConnect
    39c7b5f3e3 api/types: remove deprecated NetworkInspectOptions
    64583771f0 api/types: remove deprecated NetworkCreateResponse
    c99e0bc8ae api/types: remove deprecated NetworkListOptions
    48f147e8d3 api/types: remove deprecated NetworkCreate
    ff1f1c58d5 api/types: remove deprecated NetworkCreateRequest
    4117a9308d api/types: remove deprecated VolumesPruneReport
    e0156f0f16 api/types: remove deprecated ImagesPruneReport
    1abc8f6158 api/types: move container-inspect types to api/types/container
    05b0e653dd api/types: move Container to api/types/container
    84ffc644ef api/types: move ContainerState to api/types/image
    7053007f71 api/types: move ImageInspect and RootFS to api/types/image
    da039ca918 api/types: move GraphDriverData to api/types/storage
    e12b7493b9 api/types: move Port to api/types/container
    5517322cf9 api/types: move MountPoint to api/types/container
    c130ce1f5d api/types: move container Health types to api/types/container
    df22a511cb api/types: move container-networksettings types to api/types/container
    53bc396ef4 c8d/build: Log `image tag` event when image was built with Buildkit
    1506bbcfe8 builder-next: Add ImageNamedByBuildkit callback
    bce76d486e builder-next: Don't return error from exported callback
    e4d792a06d api/types/system: remove Info.ExecutionDriver
    0f3273e71a daemon/graphdriver: move RefCounter to an internal package
    efdaca2792 pkg/rootless/specconv: move to internal
    b7d26f2f8f pkg/dmesg: remove deprecated package
    3a3bb1cb50 pkg/directory: deprecate, and move to internal
    80900bdbcd pkg/directory: fix comment, and remove import comments
    e55897977c daemon/graphdriver: simplify Checker, remove NewFsChecker, NewDefaultChecker
    554db8f113 daemon/internal/fstype: make FsMagic values not platform-dependent
    49f6e004f1 daemon/graphdriver: move FsMagic utilities to an internal package
    09f62a8a61 runconfig/opts: remove deprecated ConvertKVStringsToMap
    4a30231d05 runconfig: remove deprecated IsPreDefinedNetwork
    ed712ad0b9 runconfig: remove deprecated DefaultDaemonNetworkMode
    13984ef185 runconfig: remove deprecated SetDefaultNetModeIfBlank
    6e2b6399d7 runconfig: remove deprecated ContainerConfigWrapper
    d80a3f2e48 pkg/capabilities move to daemon/internal
    625c795785 errdefs: FromStatusCode(): use early returns
    81be279c6b daemon/logger, volume/drivers: remove redundant import-aliases
    f2970e5358 pkg/containerfs: move to internal
    a3e6ce95c4 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper
    e2ae6907c6 pkg/containerfs: remove CleanScopedPath and make it internal
    fa150ca759 cleanup: Remove unnecessary return value
    a2fe103f0d vendor: github.com/microsoft/hcsshim v0.11.7
    dfbcddb9f5 Fix incorrect validation of port mapping
    4de54ee14c Fix duplicate subnet allocations
    6521057bb2 daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ
    969993a729 pkg/archive: createTarFile: consistently use the same value for userns
    379ce56cd8 pkg/archive: handleTarTypeBlockCharFifo: don't discard EPERM errors
    af85e47343 pkg/archive: getWhiteoutConverter: don't error with userns enabled
    080a8e1b6b libcontainerd: gofumpt
    56fa45773f pkg/plugins: gofumpt
    0e2d40c24a pkg/archive: gofumpt
    84e43da752 libnetwork: gofumpt
    bb1b766ddb layer: gofumpt
    07469b4509 internal: gofumpt
    8e50a96a78 integration: gofumpt
    c3ac7fee26 integration-cli: gofumpt
    e765dd90ee daemon: gofumpt
    181101c4a8 daemon/containerd: gofumpt
    46b0102da4 daemon/config: gofumpt
    4a89963f1e builder: gofumpt
    8768145519 api/types: gofumpt
    92346bcec6 api/server: gofumpt
    6ada1cff02 fix some gofmt issues reported by goreportcard
    84cabde357 daemon/graphdriver: deprecate GetDriver(), and remove its use
    b7896056c1 daemon/graphdriver: New(): update GoDoc
    25d12b54d3 daemon/graphdriver: combine GetDriver and getBuiltinDriver
    3928165cf7 Dockerfile: update docker CLI to v27.0.2
    555dac5e14 daemon/graphdriver: remove support for external graphdriver plugins
    bc4991e443 layer: rename vars that shadowed imports
    0ed172b700 daemon/graphdriver: rename vars that shadowed imports
    bbced07f96 builder/builder-next: applySourcePolicies: remove redundant check and vars
    790035f754 Dockerfile: update compose to v2.28.1
    95fae036ae update golangci-lint to v1.59.1
    d4160d5aa7 pkg/archive: reformat code to make #nosec comment work again
    04bf0e3d69 builder/remotecontext: reformat code to make #nosec comment work again
    1fc9236119 api/types: deprecate ContainerJSONBase.Node, ContainerNode
    ca396dfaaa awslogs: Prevent close from being blocked on log
    9893520c62 libnetwork: Mark flaky tests
    d0d8d5d97d hack/unit: Rerun failed flaky libnetwork tests
    a52aab8598 project,vendor.mod: document more clearly that we are not a Go module
    1e28299f77 project: document currently known packagers
    f502f49e49 project: document modern branch and tag practices

Bumping docker-cli to version v28.0.1, which comprises the following commits:

    d75f8d83d Add detailed descriptions for --ulimit options in docker run documentation
    75595836f vendor: github.com/go-jose/go-jose/v4 v4.0.5
    4e7497e9c Update dockerd command line ref, default bridge opts
    be669099c Update dockerd command line ref, changes in 28.0
    427c1361c gha: add docker 28 to test matrix
    aad2ae50e docs: network ls add heading and anchor for "--no-trunc"
    8a1b096e7 docs: fix missing anchors in swarm reference pages
    c99d3312e docs: fix broken anchor-link in "container restart" reference
    0cff34098 cmd/docker: do not print error status on exec/run
    8f5573857 completion: add completion for docker service flags
    768d10767 completion: add completion for docker node flags
    d5e6e2ec6 completion: add completion for node names
    7e71782ba cli/command/context: fix error-handling of skip-tls-verify
    762d59359 completion: use service names, and support DOCKER_COMPLETION_SHOW_SERVICE_IDS
    33f327a98 vendor: github.com/docker/docker v28.0.0-dev (af898abe4466)
    f977b923c Fix missing link from Configure node healthcheck heading
    f53cee5dd vendor: github.com/docker/docker v28.0.0-rc.3
    fe349e6a6 vendor: github.com/docker/docker 00ab386b5a2e (master, v28.0.0-rc.3)
    136901961 vendor: github.com/docker/docker v28.0.0-rc.2
    a8affefee golangci-lint: replace deprecated `tenv` linter in favor of `usetesting`
    1c8243cc9 golangci-lint: fix invalid nakedret config, disallow for any func length
    a5020ea16 cli/command/container: don't use naked returns (nakedret)
    e569b9f74 cli/internal/oauth: don't use naked returns (nakedret)
    3e9fa43ef cli/command/trust: fix "usetesting" linting errors
    aca0bd775 cli/command/trust: fix "usetesting" linting errors
    b2f3c1249 Dockerfile: update golangci-lint to v1.64.5
    2b169c1ab golangci-lint: enable revive "line-length-limit" linter
    a67c65657 golangci-lint: enable revive "unused-receiver" rule
    71c40dfa7 golangci-lint: sort revive rules
    a35b899df cmd/docker: fix "unused-receiver" linting
    1a4491f8c cli/command/stack: fix "unused-receiver" linting
    994e1b7ca cli/command/service: fix "unused-receiver" linting
    5ef673bb1 cli/command/system: fix "unused-receiver" linting
    e71380eb5 cli/command/container: fix "unused-receiver" linting
    4827fdef9 cli/command/trust: fix "unused-receiver" linting
    3e44cc4d0 cli/command/image: fix "unused-receiver", "line-length-limit" linting
    e2f28fac4 cli/command/registry: fix "unused-receiver" linting
    a54d356a7 cli/command/swarm: fix "unused-receiver" linting
    25e6b2da0 cli/command/formatter: fix "unused-receiver" linting
    450768c31 cli-plugins/manager: fix "unused-receiver" linting
    e5f3cc14c internal/test: fix "unused-receiver" linting
    1b3718f45 cli/command: fix "unused-receiver" linting
    d27f6a61a cli/registry: fix "unused-receiver" linting
    72b32c69c internal/test/notary: fix "unused-receiver" linting
    ba3f4fb41 cli/internal/oauth/manager: fix "unused-receiver" linting
    f0f19c6d4 cli/trust: fix "unused-receiver" linting
    c8bd0a7e5 cli/manifest: fix "unused-receiver" linting
    20b4ab366 cli/compose: fix "unused-receiver" linting
    1e7add9f4 cli/internal/oauth/api: fix "unused-receiver" linting
    9b62e5740 cli/config/configfile: fix "unused-receiver" linting
    f79193c22 opts: fix "unused-receiver", line-length-limit linting
    d0c3380ce cli/connhelper/commandconn: fix "unused-receiver" linting
    fdc665820 cli/config/credentials: fix "unused-receiver" linting
    88b2e78e0 internal/tui: fix "unused-receiver" linting
    20c15cee9 cli/compose/loader: shorten skip-comment to please the linters
    cac88ca34 cli/command: wrap some long lines (revive)
    eef4127de cli/internal/oauth/manager: ignore line-length-limit
    d8e76bc33 cli: define const for magic value
    9fda9134a cli/command/service/progress: define const for magic value
    3825d3792 cli/command: define some consts for repeated values
    2f65cf7d1 cli/command: fix some unused-receiver linting
    a368e3eb5 cmd/docker: fix unused-receiver (revive)
    add32e4b5 cli/compose: Handle Volume Subpath
    4cc2dce80 cli/compose: Fix Image Subpath
    e868f0f58 cli/command/container/opts_test: Fix entrypoint parsing logic
    c2ba77de4 vendor: github.com/docker/docker 57d4d23825f4 (master, v28.0.0-rc.2)
    1d3eb6f95 vendor: github.com/docker/docker 5cc3f1dab895 (master, v28.0.0-rc.2)
    591fcb273 vendor: golang.org/x/sys v0.29.0
    1edc4e07d gha: Mirror PR template and validate PR workflow from moby
    a656dfd40 Restrict completion for some commands with a limit paramter for ImageNames
    04b1b4e08 Add image mount options
    c6a7f9a64 vendor: github.com/docker/docker b570831cc3a3  (master, v28.0.0-rc.2)
    018bf1b23 vendor: google.golang.org/grpc v1.69.4
    558ebd592 vendor: github.com/spf13/pflag v1.0.6, remove local IPNetSliceVar fork
    2c17edf80 cli/connhelper/commandcon.New: pass context with WithoutCancel
    61a3b4bd5 Remove preceding white space from cobra help template
    1acf32cdc Dockerfile: dev-container: update buildx v0.20.1
    bb74513ef Dockerfile.dev: bump github.com/josephspurrier/goversioninfo to v1.4.1
    7b3f264a6 Dockerfile.dev: bump mvdan.cc/gofumpt to v0.7.0
    aecc31039 Dockerfile: bump gotest.tools/gotestsum v1.12.0
    e1a9d1cd3 Dockerfile: update golangci-lint to v1.63.4
    df8c19d8f vendor: gotest.tools/v3 v3.5.2
    3c0d703ac vendor: github.com/docker/docker/v28.0.0-rc.1
    2815d2337 add //go:build directives to prevent downgrading to go1.16 language
    01da8a582 vendor: github.com/docker/docker 6c3797923dcb (master, v28.0-dev)
    76e0088b5 minor cleanup
    85a77af59 Don't print "context canceled" if user terminated
    7e83ff773 bump version to v28.0.0-dev
    6d7afd48a login: improve text on already authenticated and on OAuth login
    1d9d349c1 update to go1.23.6
    81da375c4 cli/command/service: runScale: use errors.Join, and cleanup
    09b513ecf cli/command/service: runRollback: remove intermediate vars
    aa96cb7aa cli/command/volume: use errors.Join
    be985bd28 cli/command/stack/swarm: use errors.Join
    f1193effc cli/command/service: use errors.Join
    f9e433556 cli/command/secret: use errors.Join
    2a9fd4a93 cli/command/node: use errors.Join
    f8729c6da cli/command/manifest: use errors.Join
    1fd9d0dd3 cli/command/manifest: pass manifest-store and handle context
    f431f6156 cli/command/inspect: use errors.Join
    7147e85f6 cli/command/image: use errors.Join
    2b9a4d5f4 cli/command/context: use errors.Join
    150f27b68 cli/command/container: use errors.Join
    791e06b43 cli/command/config: RunConfigRemove: use errors.Join
    632f179e8 cli/command/image: minor cleanups
    e81d76ffe cli/command/container: minor cleanups
    deaa60118 cli/command/config: minor cleanups
    c950d48f7 image/tree: Chips to represent "in use"
    c51be7776 cmd/docker: add cause to user-terminated `context.Context`
    8169a5142 jsonstream: Display: rename var that shadowed type
    a4288003b service/progress: ServiceProgress: avoid fuzzy matching service ID in loop
    e88b1939f service/progress: newReplicatedJobProgressUpdater: slight cleanup
    dea59eabb cli/command/stack/swarm: waitOnServices remove redundant check for multi-error
    37b25f226 cli/command/plugins: runRemove: fix incorrect use of errors.Join
    007e88ec3 TestCheckpointCreateWithOptions check both "keep-running=true/false"
    31b819828 cli/command/volume: TestVolumeCreateClusterOpts: minor fixes and refactor
    5b8c08d19 cli/command/volume: TestVolumeCreateCluster: minor fixes and refactor
    a8265e72b cli/command/volume: TestVolumeCreateWithFlags: minor fixes
    8b5e5539e cli/command/volume: TestVolumeCreateWithName: minor fixes and improvements
    2e266001c cli/command/volume: TestVolumeCreateErrors: assert unhandled errors
    987da0957 cli/command/volume: remove example and var for long description
    13ef82974 cli/flags: suppress some errors
    dc5a4501a cli/command: minor cleanups: use Println, suppress errors
    cd6d902df cli/command/inspect: remove additional newline from log
    10f5b3f73 cli/command/volumes: minor cleanups: use Println, rename vars
    299aae041 cli/command/trust: minor cleanups: use Println, rename vars
    5cfc89c1c cli/command/system: minor cleanups: use Println, rename vars
    8c5e85d4c cli/command/swarm: minor cleanups: use Println, rename vars
    925b8fe34 cli/command/stack: minor cleanups: use Println, rename vars
    aa74f931d cli/command/service: minor cleanups: use Println, rename vars
    016dbef44 cli/command/registry: minor cleanups: use Println, rename vars
    53aed6119 cli/command/plugin: minor cleanups: use Println, rename vars
    35e74d58e cli/command/node: minor cleanups: use Println, rename vars
    886f2295c cli/command/network: minor cleanups: use Println, rename vars
    5d3bdf8ac cli/command/manifest: minor cleanups: use Println, rename vars
    c8f27b027 cli/command/image: minor cleanups: use Println, rename vars
    a0ca41e6f cli/command/formatter: suppress some errors
    82e2efbbf cli/command/context: minor cleanups
    c462eaee1 cli/command/container: minor cleanups: use Println
    8650ffef3 cli/command/checkpoint: minor cleanups: use Println, rename vars
    b10b79e6f cli-plugins: minor cleanups: use Println
    2e26ce145 e2e/testutils: remove uses of pkg/errors in tests
    4de5e9212 internal/test: remove uses of pkg/errors in tests
    c55b39a2e cli/config/credentials: remove uses of pkg/errors in tests
    832f5fa2c cli/compose/convert: remove uses of pkg/errors in tests
    45d81f849 cli/command: remove uses of pkg/errors in tests
    a85a94f46 cli/command/system: remove uses of pkg/errors in tests
    694d24800 cli/command/swarm: remove uses of pkg/errors in tests
    8b09ee1e1 cli/command/stack: remove uses of pkg/errors in tests
    ec5ae0c2d cli/command/secret: remove uses of pkg/errors in tests
    c50068f7e cli/command/plugin: remove uses of pkg/errors in tests
    2b02e05f9 cli/command/node: remove uses of pkg/errors in tests
    38f61539e cli/command/network: remove uses of pkg/errors in tests
    d6c26471d cli/command/manifest: remove uses of pkg/errors in tests
    f29fdd309 cli/command/image: remove uses of pkg/errors in tests
    d30c894af cli/command/idresolver: remove uses of pkg/errors in tests
    5a99ea9ad cli/command/container: remove uses of pkg/errors in tests
    0d913efe8 cli/command/config: remove uses of pkg/errors in tests
    957be84a3 cli/command/checkpoint: remove uses of pkg/errors in tests
    10aca7dd5 cli/command/volume: remove uses of pkg/errors in tests
    a87cb974f remove dockerd man-page (moved back to moby repository)
    6ab9b92aa Makefile: add "shell-completion" target
    0760e8513 Dockerfile: update to alpine 3.21
    2c35778a6 Allow '--link' with '--network bridge'
    1546f023f Dockerfile: update compose to v2.32.4
    7b0724270 Dockerfile: update buildx to v0.20.0
    91adb70d6 pkg/command: wrap `jsonmessage.DisplayJSONMessagesStream` with go context
    81b0bb58b gha: Adjust release branches
    3c0691146 update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336)
    26010e4c3 image/tree: Print longest names first and use full width
    f906139fc cli/tree: Use single character triple dot
    4c2fece0c cmd/docker: enable cobra completion descriptions
    48dbdc6f2 fix(dockerfiles): Update CMD instruction in 'Dockerfile.dev' to use exec form instead of shell form
    58bf0f184 switch to gopkg.in/yaml.v3
    9abd0ebdf cli/command: update semconv to 1.26.0
    2f42b3272 vendor: otel v0.56.0 / v1.31.0
    3d9b86116 vendor: github.com/mattn/go-runewidth v0.0.16
    aa540679e vendor: github.com/containerd/platforms v1.0.0-rc.1
    d3ca99585 vendor: github.com/creack/pty v1.1.24
    b412f7199 vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto 324edc3d5d38
    7244f7d42 update cli-docs-tool to v0.9.0
    6f3ba987b vendor: github.com/docker/cli-docs-tool v0.9.0
    97a14c456 update go-md2man to v2.0.5
    acbdad955 completion: replace fluentd-async-connect with fluentd-async
    3da5f5893 docs: mark logger opt 'fluentd-async-connect' as removed
    0df55307c vendor: github.com/docker/docker 69687190936d (master, v28.0-dev)
    cc571902b ci: update bake-action to v6
    987befaea gha/build: Publish bin image for release branches
    216674c3e vendor: github.com/docker/docker 50212d215ba7 (master, v28.0-dev)
    bf2dae22d cli/command/plugin: runCreate: minor cleanup
    a289f11ac vendor: github.com/moby/swarmkit/v2 v2.0.0-20250103191802-8c1959736554
    7e8f94903 docs, man: remove --allow-nondistributable-artifacts flag
    760326694 contrib/completion: remove --allow-nondistributable-artifacts flag
    2334df110 Deprecate configuration for pushing non-distributable artifacts
    2fc32c707 vendor: github.com/moby/term v0.5.2
    e1a0c377b vendor: github.com/Azure/go-ansiterm faa5f7b0171c
    f42c0ccd0 contrib/completion: remove deprecated --api-cors-header
    2db88599f contrib/completion: remove --oom-score-adj daemon flag
    eb5c507cd docs: dockerd: --oom-score-adj flag
    7b37f30da Use io.copy for build context compression
    7b7a4c020 docs, man: remove confusing example for "--isolation"
    25f02bc04 vendor: github.com/docker/docker 6f6c3b921180 (master, v28.0.0-dev)
    8c0cb3051 Fix cp test to separate source and destination
    c8c47b1dd golangci-lint: depguard: prevent uses of pkg/system
    76ec0ea2e vendor: github.com/docker/docker a72026acbbdf (master, v28.0.0-dev)
    a8f83d5d9 TestRunCopyFromContainerToFilesystem: use Tar without options
    0c04dc05b golangci-lint: sync some depguard settings with moby/moby
    cc65127cb vendor: github.com/docker/docker ad6929339acd (master, v28.0.0-dev)
    6f47bce41 vendor: golang.org/x/net v0.33.0
    83156e662 vendor: golang.org/x/net v0.32.0
    450f6b995 vendor: golang.org/x/crypto v0.31.0
    b74302eb5 vendor: golang.org/x/text v0.21.0
    cb2e35286 vendor: golang.org/x/sync v0.10.0
    e56b665d8 vendor: golang.org/x/sys v0.28.0
    1eda49878 cli/command/container: use local copy of pkg/system.IsAbs
    ffe0354c2 cli/command/system: remove BridgeNfIptables, BridgeNfIp6tables in tests
    73ff81b65 cli/command/system: TestEventsFormat: set cmd.Args to prevent test-failures
    55e404e7a cli/command/system: remove netfilter warnings from tests
    eaa8b5716 update go-md2man to v2.0.5
    b8fd20517 Makefile: use go1.22 semantics for gofumpt
    6a2cde6c7 Add option '--ipv4'
    5c896c95d Docs: emphasise that some options that are for docker0
    a5353e55d Docs: include --fixed-cidr-v6 and --bip6 docker0 options
    1e51ae7af update xx to v1.6.1 for compatibility with alpine 3.21
    b39f48287 update golangci-lint to v1.62.2
    2a5ac8f5a vendor: github.com/docker/docker b249c5ebd214 (master, v28.0.0-dev)
    afab76501 registry/client: remove uses of APIEndpoint.TrimHostName
    7dab597e6 tests: cleanup comment
    30c4637f0 run: don't hang if only attaching STDIN
    2eb77f4ed vendor: github.com/docker/docker 5d72419486fe (master, v28.0.0-dev)
    b51a71148 cli/command/system: don't use "non-distributable-artifacts" fields in tests
    f50dea6c4 vendor: google.golang.org/protobuf v1.35.2
    9399483f7 vendor: golang.org/x/net v0.31.0
    6751bcc97 vendor: golang.org/x/crypto v0.29.0
    d41ab7703 vendor: golang.org/x/term v0.26.0
    5972025fa vendor: golang.org/x/text v0.20.0
    feb1e2a34 vendor: golang.org/x/sync v0.9.0
    4c27c895f vendor: golang.org/x/sys v0.27.0
    a1e57ac72 update to go1.23.4
    e398d16c0 cli/command/registry: return status only instead of whole response
    297afb2a2 cli/command/registry: TestLoginWithCredStoreCreds slight refactor
    575e37366 cli/command/registry: rename some vars that collided with imports
    d4db289eb run, create, connect: add support for gw-priority
    cf89afb32 cli/command/registry: storeCredentials: accept configfile as arg
    b5a00d0b0 cli/command/registry: loginWithRegistry: use shallower interface
    13f0d4641 cli/command/registry: don't return creds on error
    a3d9fc494 run: cleanup – remove `errCh` nil check
    446f36ce5 run: cleanup – move "detached" early exit earlier
    843129882 run: cleanup – use `attached` where applicable
    aee9eebf3 run: return error code when only STDIN attached
    ed9fcf31e cli/trust: GetNotaryRepository: remove uses of RepositoryInfo.Class
    c629eca89 Put --help before --host in the dockerd manpage
    ea84e8f94 Add --host-gateway to the dockerd manpage
    cf88ab074 Docs: host-gateway-ip daemon option IPv4+IPv6
    ae54c9d97 Add --bip6 to the dockerd manpage
    1911dedcf Add --ip-filter-forward-drop
    0f058041c docs: fix janky rendering of toc on docs.docker.com
    fcd94feef cli-plugins: Simplify addPluginCandidatesFromDir
    6de3d71ab cli-plugins: Fix searching inaccessible directories
    30a73ff19 fix: ctx should cancel image pull on run
    1d4a7ae08 tests: cleanup table test names
    4a219b1a4 chore: update commit guidelines in CONTRIBUTING.md
    d41b80faf vendor: github.com/docker/docker e5c2b5e10d68 (master, v28.0.0-dev)
    11fbc9993 vendor: github.com/tonistiigi/go-rosetta v0.0.0-20220804170347-3f4430f2d346
    b0c0cd5e3 build(deps): bump codecov/codecov-action from 4 to 5
    f6599300f vendor: github.com/go-viper/mapstructure/v2 v2.2.1
    446d4138e vendor: github.com/moby/sys/capability v0.4.0
    07e5ddd05 update golangci-lint to v1.62.0
    93a931920 Dockerfile: bump github.com/josephspurrier/goversioninfo to v1.4.1
    cb2f95cee Optimise `docker stats` to not require clearing the whole screen
    d1d535326 cli/command/container: fix missing go:build tag
    3dd762124 Dockerfile: update compose to v2.30.3
    4242cda82 Dockerfile: update buildx to v0.18.0
    7c80e4f93 update go:build tags to use go1.22
    06260e68f Handle null completions with a default callback
    4525fe37b Add completion for `--volume-driver`
    db0ed1e21 Add completion for `--cgroupns`
    291574927 Add completion for `--uts`
    3a2503fa4 Add completion for --log-driver` and --log-opt`
    9a9ae231a Add completion for `--security-opt`
    5f7c43e5e Add completion for `--detach-keys`
    3292afe6e Add completion for `--userns`
    5d709a8d9 Add completion for `--ulimit`
    2d89339b3 Add completion for `--storage-opt`
    ac7bde6f6 Add completion for `--pid`
    e51345424 Add completion for `--link`
    c555327f0 Add completion for `--ipc`
    b598ec8cd Add completion for `--attach`
    761d76750 Share the container completions
    382d4c34a update to go1.23.3
    1440f9f8c docs: change link to desktop docs
    fafaac59f Add --bip6 to dockerd cmdline ref
    13754f677 deps: update `go-jose/go-jose` to `v4`
    172f34011 docs: update example redis tags from 3.0.x to 7.4.x
    4a7b04d41 golangci-lint: set go version to prevent fallback to go1.17
    d77760fe5 cli-plugins/manager: remove redundant capturing of loop vars (copyloopvar)
    32b40deb4 cli/command/service: remove redundant capturing of loop vars (copyloopvar)
    40833fd29 cli/compose/loader: remove redundant capturing of loop vars (copyloopvar)
    78a7e1503 cli/command/container: remove redundant capturing of loop vars (copyloopvar)
    4a71ce02e cli/command/image: remove redundant capturing of loop vars (copyloopvar)
    7d9ea2556 templates: remove redundant capturing of loop vars in tests (copyloopvar)
    046ac9714 service: remove redundant capturing of loop vars in tests (copyloopvar)
    762b5a8df opts: remove redundant capturing of loop vars in tests (copyloopvar)
    417974cdc cmd/docker: remove redundant capturing of loop vars in tests (copyloopvar)
    bf37e26b3 cli/manifest: remove redundant capturing of loop vars in tests (copyloopvar)
    6489a777e e2e: remove redundant capturing of loop vars in tests (copyloopvar)
    20de86113 cli/config: remove redundant capturing of loop vars in tests (copyloopvar)
    1448cecba cli/compose: remove redundant capturing of loop vars in tests (copyloopvar)
    67458f710 cli/command: remove redundant capturing of loop vars in tests (copyloopvar)
    0c999fe95 docs: Correct `run` exit code 126 description
    5f1311ae8 vendor: github.com/docker/docker 6ac445c42bad (master, v28.0-dev)
    10c5a5792 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0
    5e40d288c vendor: go.opentelemetry.io/otel v1.28.0
    9ba73a1a0 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0
    f3cf1b421 vendor: go.etcd.io/etcd/raft/v3 v3.5.16
    cae19e392 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6
    074d1028b vendor: update prometheus dependencies
    1dbcce205 vendor: google.golang.org/grpc v1.67.1
    1bba00994 vendor: google.golang.org/protobuf v1.35.1
    e3942d46a vendor: github.com/klauspost/compress v1.17.11
    97ff1b7c0 vendor: github.com/go-logr/logr v1.4.2
    4c85feb4d vendor: github.com/cenkalti/backoff/v4 v4.3.0
    3b48a57b0 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161
    36e6c4297 vendor: golang.org/x/net v0.30.0
    84bfa52a6 vendor: golang.org/x/crypto v0.28.0
    7a94f592e vendor: golang.org/x/text v0.19.0
    ef197f731 vendor: golang.org/x/term v0.25.0
    02b92c699 vendor: golang.org/x/sys v0.26.0
    42cda3884 update to go1.23.2
    0b16070ae Buffer 'docker stats' text to avoid terminal flickering
    9af049c61 bump golangci-lint to v1.61.0
    745629bd5 golangci-lint: update comment, and disable "exclude-dirs-use-default"
    7451339ab golangci-lint: move gosec excludes to linters-settings
    020f3a7ad golangci-lint: enable G204, add #nosec comments instead
    e1c5180db Add tests for completions that call the API
    d4f4cf141 Add completion for `events --filter`
    59b90305f cli/command/container: parse: remove client-side warning
    e9ae9f788 docker inspect: add support for swarm configs
    3c7806924 cli/config/credentials: add test for save being idempotent
    0dd6f7f1b cil/config/credentials: remove newStore() test-utility
    5f4b14950 cli: remove deprecated Errors type
    d96f8b7f9 cli/config: improve error when failing to parse config file
    d3f6867e4 cli/config/credentials: skip saving config-file if credentials didn't change
    6b9083776 cli/command: AddPlatformFlag: suppress unhandled error
    fb61156b0 cli/command/registry: fix minor linting issues
    3f7b156c8 Fix bash completion for `events --filter daemon=`
    4b7a1e461 cli/command: PromptUserForCredentials: suppress unhandled errors
    378a3d7d3 cli/command: PromptUserForCredentials: use consts for all hints
    54e3685bc cli/command: ConfigureAuth: fix deprecation comment
    3d8b49523 cli/command: PromptUserForCredentials: print error on terminal restore fail
    a21a5f424 cli/command: PromptUserForCredentials: always trim password
    eda78e9cd cli/command: PromptUserForCredentials: move trimming where it's used
    581cf36bd cli/command: PromptUserForCredentials: move "post" check for empty name
    a55cfe5f8 cli/command: PromptUserForCredentials: inline isDefaultRegistry
    3a8485085 cli/command: PromptUserForCredentials: remove named output variables
    d3bafa5f3 cli: deprecate Errors type
    71ebbb81a cli/command/plugins: use errors.Join instead of custom cli.Errors
    87acf77ae cli/hints: add tests
    9b525bc9d vendor: github.com/docker/docker 36a3bd090489 (master, v28.0-dev)
    670f81803 cmd/docker: add tests for flag-completions, and refactor
    12dcc6e25 templates: add test for HeaderFunctions
    cbbb91732 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e
    2c6b80491 docs: update prose about image tag/name format
    50ef0c58c docs: corrected the max events returned
    35d7b1a7a cli/command/container: TestWaitExitOrRemoved use subtests
    3b38dc67b cli/command/container: set empty args in tests and discard output
    e1c472a43 completion: add test for VolumeNames
    302d73f99 completion: add test for NetworkNames
    ab418a38d completion: add test for ImageNames
    f3b4094eb completion: add test for ContainerNames
    be197da6b completion: add test for NoComplete
    51713196c completion: add test for FromList
    a5ca5b33f completion: add test for FileNames
    8f2e5662e completion: add test for EnvVarNames
    b8cddc63a completion: ContainerNames: don't panic on nil filter
    a58faf797 README: update pkg.go.dev badge, add OpenSSF scorecard
    b6d27ff60 vendor: google.golang.org/grpc v1.66.2
    200225f53 vendor: google.golang.org/protobuf v1.34.1
    9599251d0 vendor: github.com/cespare/xxhash/v2 v2.3.0
    ea8aa2a41 vendor: golang.org/x/net v0.29.0
    61867feec vendor: golang.org/x/crypto v0.27.0
    843ae6d7e vendor: golang.org/x/term v0.24.0
    bea4ee658 vendor: golang.org/x/text v0.18.0
    a88ee33f7 vendor: golang.org/x/sys v0.25.0
    147630a30 Only complete removable containers if --force is not given
    d085e2445 image/history: Add `--platform` flag
    b0bb4ba7f image/load: Add `--platform`
    a20eb45b2 image/save: Add `--platform`
    0319795d4 cli/compose: implement the ports validation method
    839dbbcf2 cli/command/images: set cmd.Args to prevent test-failures
    19eeb1015 cli/command/image: fix TestNewSaveCommandSuccess to actually test
    d42cf96e1 cli/command/image: add shell completion for --platform flags
    8c7f713db cli/command/container: add shell completion for --platform flags
    ce1aebcc3 cli/command/completion: add Platforms
    2f2b16a96 docs: fix inaccurate description of --restart=unless-stopped
    c70b2165a docs: Link supported Go duration strings
    442c38636 command: add tests for container kill, commit, and pause
    a6ab65948 ci: update to go1.22.8
    9ecfe4f5a move parsing key-value files to a separate package
    76196dbb0 opts: parseKeyValueFile: cleanup and remove redundant trimming
    95e221ef4 opts: remove ErrBadKey as it's not used as a sentinel error
    b129660dd opts: cleanup ParseEnvFile tests
    d49e72c0a cli/command/container: add unit tests for completion helpers
    462e08219 cli/container: use github.com/moby/sys/capability for completions
    bd96bdaf1 align "conflicting options" errors for consistency
    df8b34595 cli/command/container: stop, restart: rename "--time" to "--timeout"
    607530348 docs/reference: stop, restart: add flag descriptions
    8fca0a1f2 Check that --ip-range is a CIDR address
    ac502b590 cli/command/container: add unit tests for container stop
    16aa99425 cli/command/container: add unit tests for container restart
    54a20ce54 docs: fix a typo in run.md
    b12ac897f vendor: github.com/docker/docker 164cae56ed95 (master, v-next)
    df52ddcfc Images Tree: Change 'Used' to 'In Use'
    17040890e Do not underline image name
    46b360b05 command: add tests for container diff and rename
    465e87afc docs: fix anchor link to web-based login section
    8a3d838a1 docs: use important callout for buildkit vs legacy builder
    3e271461e cli/formatter: fix unbracketed IPv6 addrs
    91c90a979 Update `VERSION` file to `v27.3.1-dev`
    ce26ebc0e Dockerfile: update compose to v2.29.7
    1355d7e9f telemetry: fix early meterprovider shutdown
    f46860616 gha: codeql: minor touch-ups and fixes
    3472bbc28 command: change drive to lowercase for wsl path
    e1213edcc gha: update codeql workflow to go1.22.7
    b1956f507 telemetry: pass otel errors to the otel handler for shutdown and force flush
    f7a513cff Dockerfile: update compose to v2.29.4
    42ce06aa5 Dockerfile: update buildx to v0.17.1
    baceb4b15 docs: dockerd: add documentation for --log-format option
    a42ca1148 docs/reference: dockerd: add docs for --feature option
    9ae514fdc man: dockerd: add description for --log-format option
    1a0e32099 docs: dockerd: remove --api-cors-header (deprecated)
    9bfd0e1a4 man: remove docs for deprecated --api-cors-header
    a357db0ab man: dockerd: value is optional for --feature flag
    fb056d2ce man: fix duplicate word in --feature flag description
    610f9157f man: update dockerd man-page to include --feature flag
    605c9bf16 docs: Fix --rm=false flag in container_run.md
    dccb8bfa5 vendor: google.golang.org/grpc v1.62.0
    8cdf90cd9 vendor: tags.cncf.io/container-device-interface v0.8.0
    a5f15bee7 vendor: golang.org/x/net v0.28.0
    b93fc3963 vendor: golang.org/x/crypto v0.26.0
    3a63df265 vendor: golang.org/x/text v0.17.0
    c6e534193 vendor: golang.org/x/term v0.23.0
    5f9fe33b6 vendor: golang.org/x/time v0.6.0
    7074e5011 vendor: golang.org/x/sync v0.8.0
    958fff82f vendor: golang.org/x/sys v0.24.0
    fb264ffc0 vendor: dario.cat/mergo v1.0.1
    38c3fef1a command: check for wsl mount path on windows
    5b81f0dcb chore: remove duplicated `govet` linter config
    88ca4e958 info: stop printing "Expected" commits
    daea277ee volume/update: require 1 argument/fix panic
    0fcaffb7e chore: fix style/lint issues in deprecated.md
    45d55961d Fix broken links in CONTRIBUTING.md
    0b9d58245 cli/command: fix docstring for ContainerFormat.CreatedAt
    4a6ab2b37 fix: binary file line endings
    3bf39d25a update to go1.22.7
    1b8180a40 vendor.mod: put github.com/pkg/browser in the right group
    5ca40e0a3 docs: add front matter title to deprecated.md
    071f6f939 docs: rename plugins index file and add linkTitle
    bbb6e7643 login: handle non-tty scenario consistently
    60d045028 oauth/api: drain timer channel on each iteration
    d7d56599c update to go1.22.6
    9e2996796 scripts/build/plugins: don't override CGO_ENABLED set by .variables
    81744d7aa copynit: s/WEB BASED/WEB-BASED/
    2f206fff3 docs: update docker login reference
    1e6cbbc3f Dockerfile: update xx to v1.5.0
    e532eead9 login: use normalized hostname when storing
    dab9674db Revert "login: normalize `registry-1.docker.io`"
    c4a55df7c cli: rename args that collided with builtins (predeclard)
    9c8789127 e2e/global: fix n-constant format string in call (govet)
    f101f07a7 cli/command: fix n-constant format string in call (govet)
    cc1d7b7ac cli/command/system: remove redundant nil-check (gosimple)
    964155cd2 cli/formatter: bracket IPv6 addrs prepended to ports
    a327476f7 login: add e2e tests for oauth + escape hatch
    c974a8339 chore: update link to docker engine api reference
    846ecf59f login: add oauth escape hatch
    7b9164794 list/tree: No extra spacing for graphdriver
    351249dce list/tree: Print <untagged> as dangling image name
    6979ab073 list/tree: Fix some escape codes included in nonTTY
    a9b78da54 list/tree: Add spacing before the content and first image
    0242a1e3c list/tree: Capitalize column headers
    d417d0668 list/tree: Add an experimental warning
    b1a08f784 list/tree: Sort by created date
    18ab78882 list/tree: Align number right, text left
    ea8aafcd9 cli/tree: Add `Content size` column
    be11b74ee image/list: Add `--tree` flag
    f1befabe9 docs: use gh alert syntax for callouts
    c3fe7bc33 fallback to regular login if oauth login fails to start
    5eb3275c2 filestore: don't print warning multiple times
    e6624676e login: normalize `registry-1.docker.io`
    6e4818e7d Refactor `cli/command/registry`
    fcfdd7b91 auth: add support for oauth device-code login
    2dd4eb06a docs: update link to moved build context doc
    0fd3fb084 cli/connhelper: getConnectionHelper: move ssh-option funcs out of closure
    f3c2c26b1 disable pseudoterminal creation
    d4a362aa1 docs: update internal links after refactor
    78a8fba2c docs: fix link to http proxy document
    6440816c7 vendor: github.com/docker/docker 2269acc7a31d (master, v-next)
    b8a53ee34 vendor: github.com/docker/docker master  (f3cf9359bdf6)
    9c4480604 plugins: don't panic on Close if PluginServer nil
    434d8b75e update to go1.21.13
    73e78a582 run: fix GetList return empty issue for throttledevice
    e29292f92 add security policy
    40a5b297b vendor: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0
    e4d99b4b6 gha: set permissions to read-only by default
    eac83574c tests/run: fix flaky `RunAttachTermination` test
    7b46bfc5a attach: wait for exit code from `ContainerWait`
    f0a29af0f vendor: docker/docker 2b1097f08088 (removes containerd dependency)
    b34e8e4df vendor: github.com/moby/sys/sequential v0.6.0
    ea37ac9ba vendor: github.com/moby/sys/symlink v0.3.0
    435c65833 vendor: github.com/moby/sys/signal v0.7.1
    501904d48 vendor: golang.org/x/sys v0.22.0
    cc4163296 lint: replace deprecated linter names
    66aa0f672 attach: don't return context cancelled error
    4a7388f0d tests: fix other flaky `connhelper` tests
    cc68c66c9 tests: fix flaxy `TestCloseRunningCommand` test
    b36522b47 docs: refresh image versions in examples
    aa2c2cd90 Allow for OomScoreAdj
    401048b9c vendor: github.com/containerd/containerd v1.7.20
    6638deb9d add support for DOCKER_CUSTOM_HEADERS env-var (experimental)
    9617e8d0c gha: update to macOS 13, add macOS 14 arm64 (Apple Silicon M1)
    6d8fcbb23 gha: check-pr-branch: verify major version only
    77c0d8360 Dockerfile: update compose to v2.29.0
    d00e1abf5 Dockerfile: update buildx to v0.16.1
    ab80ea355 cli/config/credentials: move warning to fileStore
    fcefe44bd login: slightly cleanup warning about unencrypted store
    a78ab6380 login: don't print "unencrypted" warning when failing to save credentials
    90058df30 cli/command/container: remove reportError, and put StatusError to use
    64a3fb82d docs: fix typos and version for cli-docs-tool scripts
    e3e9b9901 vendor: github.com/docker/cli-docs-tool v0.8.0
    f28fc7f82 cli: FlagErrorFunc: don't print long usage output for invalid flags
    b1c0ddca0 cli/command/container: add completion for --stop-signal
    d6f78cdbb cli/command/container: add completion for --volumes-from
    7fe7223c2 cli/command/container: add completion for --restart
    f30158dbf cli/command/container: add completion for --cap-add, --cap-drop
    e4dd8b189 cli/context/store: Names(): fix panic when called with nil-interface
    42b68a3ed cmd/docker: fix completion for --context
    162d9748b cli/command/container: provide flag-completion for "docker create"
    5e7bcbeac cli/command/completion: add FromList utility
    e3427f341 cli/command/completion: add EnvVarNames utility
    9207ff104 cli/command/completion: add FileNames utility
    eed0e5b02 cli/command/container: NewRunCommand: slight cleanup of completion
    e8baee9c7 vendor: github.com/docker/docker aae044039ca4 (master, v-next)
    a77ba7eda vendor: google.golang.org/genproto/googleapis/api 49dd2c1f3d0b
    caa5d15e9 vendor: github.com/prometheus/procfs v0.15.1
    0f712827f vendor: github.com/containerd/containerd v1.7.19
    b28a1cd02 vendor: golang.org/x/sync v0.7.0
    991b1303d chore: restore ctx without cancel on container run
    6c04adc05 push: Improve note message and colors
    0579cd797 test: e2e SIGTERM attached container on `docker run`
    d40199440 c8d: Remove `docker convert` mention
    4ce6e50e2 push: Don't default to DOCKER_DEFAULT_PLATFORM
    3f3ecb94c Makefile: add completion target
    150fb55a8 fix: container stream should not be terminated by ctx
    3d80b7b0a Dockerfile.dev: install bash-completion in dev container
    eae75092a cmd/docker: split handling exit-code to a separate utility
    b7695d6c7 cli-plugins: RunPlugin(): rename error-variable that's possibly shadowed
    350a0b68a cli-plugins: Run(): don't discard cli.StatusError errors without message
    3dd6fc365 cmd/docker: don't discard cli.StatusError errors without custom message
    2f83064ec e2e/cli-plugins: check for exit-errors in tests
    baf35da40 e2e/cli-plugins: use cmd.CombinedOutput() instead of custom buffer
    c6b40640c e2e/cli-plugins: use identifiable output for test
    e9f32edac e2e/cli-plugins: explicitly ignore fmt.Printxx errors
    5e7948ec8 e2e/cli-plugins: rename var that shadowed import
    c60b360c3 cli: improve argument validation output
    a6e96c758 cli: improve output and consistency for unknown (sub)commands
    bca209006 cli: make cli.StatusError slightly prettier
    88896eeaa cli/command/container: TestSplitCpArg: cleaner skip
    b194274be replace uses of deprecated API types
    4cac8efb5 vendor: github.com/docker/docker 508cc7c61226 (master)
    dc22572e3 chore: regenerate docs
    8549d250f docs: update cli-docs-tool (v0.8.0)
    3d4c12af7 docs: update links to docker cli reference
    bf33c8f10 docs: regenerate base command
    b0650f281 docs: align heading structure for base command
    cfea2353b docs: remove frontmatter for base command
    03961449a docs: rename cli.md to docker.md (base command)
    a68382338 docs: remove empty docker base command reference
    a0c4e56de vendor: golang.org/x/net v0.25.0
    723130d7f vendor: golang.org/x/crypto v0.23.0
    d33ef57dc vendor: golang.org/x/text v0.15.0
    21dbedd41 vendor: golang.org/x/sys v0.21.0
    f8e7c0a0d vendor: github.com/klauspost/compress v1.17.9
    10a015f87 cli/command/network: NewPruneCommand: explicitly ignore error
    b3d8809f4 cli/command/network: rewrite consolidateIpam to take an option-struct
    ab230240a test spring-cleaning
    c7d46aa7a Enable completion for 'image' sub commands
    2eb61318b cli/command/network: some cleanup and pass smaller interfaces
    b711372ca cli/command/container: TestNewAttachCommandErrors: use struct-literals
    229616e17 cli/command/image: fakeClient.ImagesPrune: fix unhandled err-return
    42ba29395 rename vars to prevent colliding with imports
    3a77fdd91 cli/command/trust: unconvert
    26223f701 cli/command/formatter: don't use unkeyed structs
    c56f4a1ef workflow: remove git `autocrlf=false` setup on windows
    d73d7d4ed update to go1.21.12
    e91f0ded9 docs: make buildx build the canonical reference doc
    c15ade0c6 fix: ctx cancellation on login prompt
    2bd4e95bf feat: force lf line endings by default
    be14edca2 cli/command/stack: fix faulty sort for sorting stacks
    0f6370c94 vendor: github.com/fvbommel/sortorder v1.1.0
    2e6aaf05d vendor: github.com/docker/docker v27.0.3
    9455d6176 vendor: github.com/docker/docker v27.0.2
    1382fbe61 vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6)
    ab0898ee3 vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974)
    cfec21f28 vendor: github.com/docker/docker v27.0.1
    8b0a7b025 cli/config/credentials: ConvertToHostname: handle IP-addresses
    238048160 re-introduced support for port numbers in docker registry URL
    60775b615 gha/e2e: Update latest version to 27.0
    b5d1b4de1 update golangci-lint to v1.59.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-03-06 17:17:59 +00:00
Bruce Ashfield
82b00eb592 moby: update to v25.0.0
Bumping moby to version v25.0.0, which comprises the following commits:

    05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows
    ae6468b4b9 c8d/mount: Use ref-counted mounter by default
    bd481592ff ci: Always run snapshotter tests on Linux
    ed15f1d717 net=host: remove /var/run/docker/netns/default from OCI config
    568c064795 docker-py: unskip some tests
    e8f4bfb374 Root.Path for a process-isolated WCOW container must be the Volume GUID
    ec041193f9 Windows doesn't have 'host' mode networking, so use 'auto'.
    66325f7271 Implement GetLayerFolders for the containerd image store
    0dc07ccc3a Unmount RWLayer during Commit
    a1f6b64e24 Don't call setupInit in a temp mount if setupInit is nil
    efadb70ef8 The Windows snapshotter and graphdriver have different names
    641050c93f Typo fixes
    508a2d979a Revert "temporary: Disable deprecate-integration-cli validation"
    f7065ab207 Add testutil.TempDir function
    84d2229ffe dockerd-rootless-setuptool.sh: add `nsenter` subcommand
    7d08d84b03 dockerd-rootless.sh: set `rootlesskit --state-dir=DIR`
    ae9fbcb82c testutil/daemon: shorten XDG_RUNTIME_DIR
    bdc7d0c2db temporary: Disable deprecate-integration-cli validation
    8390bc5683 c8d/cache: Use ContainerConfig from content store
    f760cb4f97 c8d/builder: Store ContainerConfig
    a5a15c7782 c8d/cache: Optimize `FROM scratch` case
    71ebfc7c63 c8d: make the cache in classic builder work
    24da5233dd integration: Fix Parallel before setupTest
    d22c775e04 cdi: use separate feature-flag
    fa4deb02af environment: Error when t.Parallel was called before Protect
    97d32bb7d7 daemon: stop checkpointing health probes to disk
    a6d9462cb1 (*Daemon).fillRootlessVersion: fix nil panic
    e954cdc188 dockerd-rootless.sh: fix inconsistent description about "builtin" driver
    9de132dbf6 integration/image: Move Parallel after setupTest
    f0efb90f21 c8d/integration-cli: Skip tests checking `ContainerConfig`
    2a02403a94 c8d/exporter: Use WithSkipMissing
    9f50e06993 image/save: Refactor saveLayer
    b5a5ecf4a3 dockerd-rootless.sh: add comments about pasta
    f5d05b43d7 Dockerfile: update RootlessKit to v2.0.0
    ba86626642 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0
    312450d079 integration: test container healthcheck is reset
    c58acf06c2 image/save: Derive Descriptor from actual tar archive
    c4d2968183 vendor: github.com/moby/sys/mountinfo v0.7.1
    075e1141b8 vendor: golang.org/x/sys v0.16.0
    a759acd958 vendor: github.com/google/uuid v1.5.0
    3bcb01a84f vendor: github.com/google/go-cmp v0.6.0
    36dd2f029f doc: Correct typo in doc comments for volume/mounts/mounts/MountPoint
    92175dd78c vendor: containerd v1.7.12, and switch to dario.cat/mergo v1.0.0
    cd1709b0d4 update containerd binary to v1.7.12
    2c45df2ab4 image/save: Fix missing layers in manifest
    0790864064 Dockerfile: update buildx to v0.12.1
    a9d0128bd7 Dockerfile: update docker compose to v2.24.0
    28f48ce1ac c8d/commit-builder: Extract common code
    659d7b190f libcontainerd: create unstarted tasks
    d7141cfd06 update to go1.21.6
    0e62dbadcd daemon: reinit health monitor on live-restore
    71c9aec834 Add Rob Murray (robmry) to curators
    e8e20c0897 daemon/config: setPlatformDefaults: use debug for missing userland-proxy
    18a0e144c2 c8d/getImageLabelByDigest: Fix misspelled `labels` check
    e27ffdab0f Dockerfile: update rootlesskit to v1.1.1, and use tags as reference
    782fe1fe82 layer: ChecksumForGraphID: remove unused code for for migrating v1 layers
    1dd415df1a vendor: github.com/vbatts/tar-split v0.11.5
    372cd16b88 vendor: otelhttptrace v0.45.0 to align with other OTEL packages
    22597efa06 vendor: github.com/docker/go-connections v0.5.0
    1f9098e7d0 builder: remove redundant ExecBackend.ContainerKill()
    0aa96c5512 builder/dockerfile: containerManager.RemoveAll() prevent partial cleanup
    03a8188a9a builder/dockerfile: remove containerManager.removeContainer()
    a38b5d7430 daemon: Daemon.ContainerRename: move vars closer to where they're used
    00a863b25e daemon: Daemon.connectToNetwork: rename named return to prevent shadowing
    0f337e9c14 feat: make errdefs.IsXXX helper functions work with wrapped errors
    dd41f86339 hack/make: Refactor VERSION normalization
    2af17cd3f5 vendor: github.com/containerd/cgroups/v3 v3.0.3
    9a5393d500 hack/make: Strip "v" tag prefix name from VERSION
    12128189eb vendor: github.com/cilium/ebpf v0.11.0
    07d2ad30e5 daemon/cluster: Cluster.imageWithDigestString: include mirrors to resolve digest
    8aacbb3ba9 api: fix "GET /distribution" endpoint ignoring mirrors
    b9e27acabc libnet/d/bridge: dead code: no conflict on stale default nw
    0a26cdf344 libnet/d/bridge: remove dead ActiveEndpointsError
    6d2c4f87af daemon: work around go1.21 compiler bug
    69c23cc0c9 docs/api: add documentation for API v1.44
    ce574949f7 api: Deprecate outdated fields in NetworkSettingsBase
    d5a3fccb06 update golangci-lint to v1.55.2
    9b184e1268 daemon: remove dead code relying on SecondaryIPAddress
    7b0f8122b2 update AUTHORS
    fc8fcf85a2 vendor: github.com/opencontainers/runc v1.1.11
    5fa4cfcabf update runc binary to v1.1.11
    b8f2caa80a pkg/containerfs: deprecate ResolveScopedPath
    90f37f48e2 pkg/containerfs: unify CleanScopedPath implementation
    6fae583dba pkg/aaparser: remove, and integrate into profiles/apparmor
    53d405c37f pkg/aaparser: remove deprecated GetVersion utility
    f714730c40 libnetwork/portallocator: PortAllocator.ReleasePort: remove unused err-return
    4f9db655ed portmapper: move userland-proxy lookup to daemon config
    214ab2caef libnetwork/portmapper: PortMapper.MapRange: inline "cleanup" closure
    6ae6dcfc53 libnetwork/portmapper: PortMapper.MapRange: fix defer
    8712c6df22 libnetwork/portmapper: PortMapper.MapRange: rename err-return
    341e7b35a6 Updated manifest v2 URLs in image spec README
    882b79b254 Dockerfile: update crun to 1.12
    dc23efd3a2 vendor: github.com/klauspost/compress v1.17.4
    f74ca4ed36 Update commit id unmap to directly use active mounts
    0252a6f475 ci(bin-image): fix merge job run condition
    1ea1d561c7 ci: do not run ci workflow on push tag events
    141cb65e51 Check, then assume an IPv6 bridge has a subnet.
    437bc829bf Don't try to validate incomplete network config.
    52d9b0cb56 Remove unused error types.
    f9135cdeb5 libnet: Improve the debug log written when the extKeyListener is stopped
    13915f6521 libnet: document what Network.networkType represents
    6a2542dacf libnet: remove Endpoint.anonymous
    cf5a3bc531 c8d: Fix image commit with userns mapping
    5eaf898fcb libnetwork: write ServFail if DNS reply msg is bad
    1da85f7bdc libnetwork: assert DNS replies are well-formed
    f6a160d34e c8d/docker-py: Temporarily skip test_commit_*
    cf1ea9237c Add dangling image reference on delete when last image has children
    9603adb5b4 c8d/docker-py: Temporarily skip test_save_and_load*
    7a9b680a9c libnet: remove Endpoint.myAliases
    523b907359 daemon: no more IsAnonymousEndpoint
    8b7af1d0fc libnet: update dnsNames on ContainerRename
    3bb13c7eb4 libnet: Use Endpoint.dnsNames to create DNS records
    f5cc497eac libnet: populate Endpoint.dnsNames on UnmarshalJSON
    ab8968437b daemon: build the list of endpoint's DNS names
    0c6e9121b2 Add support for removing repo and digest
    c22fc41ddf vendor: golang.org/x/crypto v0.17.0
    87c87bccb5 Update cleanup logic to use resolve all images
    529d19bad8 Add resolve all images and unit test
    eb9ce779f6 Update OTEL in client hijack to use transport
    c84e889a69 Remove httputil lint exceptions
    35a51fd697 Update authz plugin test to not use httputil
    bb4e9c72d7 Replace use of httputil in client hijack
    dc1e73cbbf libnet: add a new dnsNames property to Endpoint
    1eb0751803 daemon: endpoints on default nw aren't anonymous
    27f3abd893 Allow overlapping change in bridge's IPv6 network.
    18b1aec0ee c8d/inspect: Fill `Parent` property
    e48b58e1be vendor: golang.org/x/crypto v0.16.0
    44511f9e43 vendor: golang.org/x/text v0.14.0
    2cdd4906ac vendor: golang.org/x/sys v0.15.0
    d6a656cf7f libnet: Remove unused cmd/readme_test
    aa5d1a8897 typo fixes
    2cf230951f add //go:build directives to prevent downgrading to go1.16 language
    9e6d012e9c docker info: expose runtime features ("rro" mount mode, etc.)
    1602e2f4f1 api: Deprecate `Container` and `ContainerConfig` for `/images/{id}/json`
    d91bf690ef ci(bin-image): fix conditional run for skipped job
    61d5e5ca9a ci(test): do not run on push tag events
    f8275cb303 c8d/docker-py: Skip test_build_squash
    279e6658ac Add devcontainer configuration
    d11a772080 c8d/tag: Remove duplicate label copy
    3b1d9f1a26 add validation and migration for deprecated logentries driver
    3a14b1235c docs/api: remove logentries
    30f739db44 api/swagger: remove logentries
    cd41f655f9 logger: remove logentries driver
    dbdfc71026 vendor: resenje.org/singleflight v0.4.1
    4d2a324fce update to go.opentelemetry.io/otel/semconv/v1.21.0, remove "httpconv" uses
    7d991b6e42 vendor: github.com/moby/buildkit v0.12.5-0.20231208203051-3b6880d2a00f
    fcf03cdfa9 vendor: github.com/containerd/containerd v1.7.11
    7028a03ffa vendor: github.com/containerd/containerd v1.7.10
    49ad10261e vendor: github.com/containerd/containerd v1.7.9
    c14bd4f1ad vendor: vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
    291eaf0a77 vendor: github.com/cyphar/filepath-securejoin v0.2.4
    b524ed2dda testing: update docker-py to 7.0.0
    33d2ec08ba update containerd binary to 1.7.11
    c51a262e34 update containerd binary to 1.7.10
    12c70b4386 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0
    a0615f6839 vendor: github.com/felixge/httpsnoop v1.0.4
    afe281964d daemon/logger/local: always use UTC for timestamps
    bea729c030 c8d/prune: Familiarize image names that were untagged
    8ba8a59697 c8d/prune: Default `dangling` filter to true
    eaaf1ea96d integration/prune: Run in a separate daemon
    90dfb1c8ad c8d/integration-cli: Adjust TestBuildClearCmd
    0f9f9a132e Move 'netip' utils from 'ipam' to 'internal'.
    1931a1bdc7 libnetwork/diagnostic: lock mutex in help handler
    424ae36046 libnetwork/diagnostic: use standard http.Handler
    bc94dfc7d2 hack: Load special images on demand
    7cb1efebec api/types: move NetworkListConfig to api/types/backend
    a58b0a3d9c api/types: move Plugin-types to api/types/backend
    862caf826c update to go1.21.5
    0bf6ffba43 update to go1.21.4
    08e4e88482 daemon: raise default minimum API version to v1.24
    484e6b784c api/types: move ContainerCreateConfig, ContainerRmConfig to api/types/backend
    c786c3a974 Dockerfile: update criu stage to Debian 12 (Bookworm)
    d5eba1bfe5 integration/build: Use setupTest
    713c7d49a1 integration(-cli): remove skips for old daemon versions (<20.10)
    7f68e3107e integration-cli: TestAPIClientVersionOldNotSupported: use daemon API version
    97549d923c integration/container: TestInfoAPIVersioned: adjust API version
    410feab962 integration/container: TestKillDifferentUserContainer: adjust API version
    757a004a90 libnetwork/diagnostic: drop Init method
    f270057e0c libnetwork/diagnostic: un-embed sync.Mutex field
    aa2fa2caa3 un-containerize TestDaemonNoSpaceLeftOnDeviceError
    49f3e7d233 Dockerfile: remove APT_MIRROR build-arg
    baca6cb417 Don't allow port in CIFS URL
    c8134fa046 vendor: github.com/moby/buildkit v0.12.4
    a189832454 add TaskStatus to swagger docs
    faa843fcef vendor: github.com/gorilla/mux v1.8.1
    028ed1bb22 vendor: github.com/spf13/cobra v1.8.0
    e18f5a5304 container: internalize InitAttachContext
    fcb89da9c2 c8d/integration-cli: Skip TestListDanglingImagesWithDigests
    61d94850a7 cmd/dockerd: make cobra templates a const
    0f163170a7 cmd/dockerd: remove various cobra templating
    3bfb6a9420 frozen images: update to debian:bookworm-slim
    fd40dfaf58 Dockerfile: remove uses of DEBIAN_FRONTEND
    e72c4818c4 Dockerfile: update to Debian "bookworm" (current stable)
    8ae94cafa5 cifs volume resolves hostname correctly.
    3a0af5ad30 integration/TestLiveRestore: Wait for process to exit
    61d8f57f2a daemon: kill: use log level to "warn" if container doesn't exit in time
    e262cd38ad c8d/integration-cli: Adjust DockerRegistryAuthTokenSuite
    49d088d9ce builder-next: fix timing filter for default policy
    c3eed9fa3e integration-cli: fix TestDaemonICC tests for newer iptables versions
    c5ea3d595c liverestore: Don't remove `--rm` containers on restart
    9b399814e7 integration-cli/TestCrossRepositoryLayerPush: Change repo name
    9709b7e458 quota: increase sparse test-image to 300MB
    65cfcc28ab hack/dind: update comments around AppArmor
    cfb8ca520a hack/dind-systemd: make AppArmor work with systemd enabled
    203bac0ec4 daemon/c8d: Unmount container fs after unclean shutdown
    964ab7158c Explicitly set MTU on bridge devices.
    05523e289b c8d/integration: Adjust TestSaveCheckTimes
    b1676a289c daemon: ContainerRename: move log args to log fields
    d2865f1e8a daemon: win: set DNS config on all adapters
    0fd0e8255f daemon: build ports-related ep options in a dedicated func
    7786f8512b Revert "testing: temporarily pin docker-py tests to use "bullseye""
    4394c61e6c testing: update docker-py to 7.0.0b1
    f877360dc1 api/t/swarm: Fix deprecation for ServiceSpec.Networks
    681c94ca17 Dockerfile: update buildx to v0.12.0
    68e73ceb67 update containerd binary to v1.7.9
    2f28582b55 vendor: github.com/Microsoft/hcsshim v0.11.4
    f4776ef9df ci(bin-image): skip dco on push tag events
    8641d2da3b client: update example in readme
    0ab7267ae3 Fix support for pull by digest
    ba46bda149 update authors and mailmap
    a3fdad84ad graphdriver/copy: faster copy of hard links
    fb53da508f vendor: github.com/opencontainers/runc v1.1.10
    15bcc707e6 update runc binary to v1.1.10
    84036d3e18 daemon/config: change DNSConfig.DNS to a []net.IP
    1eadfb0e28 opts: ValidateIPAddress: improve error, godoc, and tests
    981a878cf5 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev)
    677d41aa3b Plumb context through info endpoint
    f0b89e63b9 Fix missing import for "scope" package
    33564a0c03 libnetwork/d/overlay: support IPv6 transport
    e1d85da306 libnetwork/d/overlay: parse discovery data eagerly
    d47b3ef4c9 libnet: early return from updateSvcRecord if no addr available
    f5a611a74c daemon: ContainerRename: use named error-return
    8074e7a437 Bump go-connections for TLS 1.3 support
    d06af368ad c8d: "unremap" the user namespace on commit
    a7acfffea6 test: Add a test for userns remapped daemon commit
    876d4e5484 c8d: cleanup imports in the image builder file
    7995e3288f Add until filter to docker image ls Signed-off-by: Rachit Sharma <rachitsharma613@gmail.com>
    58785c2932 integration/networking: fix TestBridgeICC
    6979503a85 Include port in URL for locally built Swagger docs
    755f008c1e Default the auth config domain to the target image domain
    7d9d601e6d project: document supported containerd versions
    29ac09ee9d Revert "libcontainerd: work around exec start bug in c8d"
    c1a289e05a docs/api: update redirect metadata for hugo
    49e04102c1 Update container-device-interface to v0.6.2
    26f63600c1 daemon/snapshotter: Align mounter implementations
    d5d41c2849 daemon/config: Put params for the default network into a dedicated struct
    587ad8845a integration/system: update TestInfoAPI to not use string-matching
    c1ab6eda4b integration/networking: Test bridge ICC and INC
    409ea700c7 integration: Add a new networking integration test suite
    02a932d63f Fix case where health start interval is 0 uses default
    891241e7e7 seccomp: block io_uring_* syscalls in default profile
    3c2b06099d Skip TestPullManifestList when using containerd
    6ca1b9e4ce Skip the busybox digest check when containerd is enabled
    123ade3763 builder/dockerfile: errmsg: quote build target
    7257c77e19 libnetwork/ipam: refactor prefix-overlap checks
    4e8ba395f2 integration: TestSaveRepoWithMultipleImages: minor cleanup
    0dae0f2b5e integration: TestSaveRepoWithMultipleImages remove redundant remove
    30cd8b8fca integration: make TestSaveRepoWithMultipleImages less flaky
    1c50526092 daemon: improve daemon start informational log message
    a99bb24ea8 builder-next: make sure worker platforms normalized for containerd
    29977d5058 contrib/check-config: conditionally disable color output.
    d60de4cafd Move the golangci-lint configuration file to the root dir
    cd95cd0671 c8d/push: Return error when repository has no tags
    df34db1158 c8d/pull: Don't wrap `no basic auth` error
    5a83bebf76 ci: Setup otel tracing for windows integration tests
    29ddf2214d docs(API): Add reason to network connect 403
    63a9d72ee8 pkg/tarsum: handle xattrs like archive/tar does
    4356962c69 update containerd binary to v1.7.8
    38c4ceb00a vendor: github.com/containerd/containerd v1.7.8
    34f5793521 vendor: google.golang.org/grpc v1.58.3
    bd23c7729e vendor: golang.org/x/tools v0.10.0
    205e4de3fd vendor: golang.org/x/mod v0.11.0
    153d7e4038 exec/tests: add test for `--group-add` with `--user`
    27e064e7e9 c8d/history: Fix nil dereference
    808120e5b8 New `host_ipv6` bridge option to SNAT IPv6 connections
    9d578a2e6d Cleanup duplicate imports
    59c5f6e35b integration-cli: mark dockerCmdWithFail as an helper function
    61c78d9438 daemon: Validate MacAddress on container create
    ee9f0ed895 api: Deprecate ContainerConfig.MacAddress
    052562ffd5 api: Add a field MacAddress to EndpointSettings
    98323ac114 integration/container: target v1.43 in a soon-to-break test
    4f0cab3b74 api: ContainerCreate: re-organize BC conditions
    79589354df api: ContainerCreate: remove repetitive nil checks
    44a25f31a8 api: ContainerCreate: lowercase ErrEmptyConfig
    91eee33f62 api: ContainerCreate: return an error when config is nil
    417018659b daemon: remove redundant withResetAdditionalGIDs option
    8f756fe679 c8d: show the real image creation date when listing images
    a73dfe68d3 api: ContainerCreate: init hostConfig and networkingConfig when nil
    7e0cb4c46f c8d: Use the labels to get the children of an image
    f5535d516f c8d: Preserve image labels when tagging
    70158284b7 api: fix a nil check on the wrong var
    d7266afc7e c8d/exec: Add additional groups on exec
    df3a321164 migrate to github.com/moby/sys/user
    aeb8972281 daemon: daemon.containerRestart: don't cancel restart on context cancel
    52da88201c hack/validate: stop suppressing Xattrs deprecation
    c44c9dfa79 pkg/tarsum: migrate to (tar.Header).PAXRecords
    3cf409aa9e pkg/archive: migrate to (tar.Header).PAXRecords
    6a8a792019 pkg/archive: test tar headers are interoperable
    f2c67ea82f vendor: github.com/klauspost/compress v1.17.2
    a7b44ea10f Dockerfile: update github.com/tc-hib/go-winres v0.3.1
    0cf113e250 Add unit tests for outgoing NAT rules
    619d98ab49 vendor: github.com/moby/buildkit v0.12.3
    aad51c0b4e daemon: daemon.shutdownContainer: use context.WithoutCancel
    dca89c67ef daemon: daemon.containerStop: use context.WithoutCancel
    8166818791 c8d: Return the "tag does not exist error"
    4af420f978 libnetwork/internal/kvstore: prune unused method
    4039b9c9c4 libnetwork/datastore: drop (KVObject).DataScope()
    4f4a897dda libnetwork/datastore: drop (*Store).Scope() method
    4b40d82233 libnetwork/datastore: un-embed mutex from cache
    9536fabaa8 libnetwork/datastore: minor code cleanup
    43dccc6c1a libnetwork/datastore: unconditionally use ds.cache
    5a72ed3406 integration-cli: remove deprecated dockerCmd and waitRun utilities
    06115bf82c integration-cli: DockerCLIPruneSuite: replace dockerCmd
    285ab8c861 integration-cli: DockerCLIPluginsSuite: replace dockerCmd
    e28da7686e integration-cli: DockerCLIPluginLogDriverSuite: replace dockerCmd
    a837cb444c integration-cli: DockerExternalVolumeSuite: replace dockerCmd
    5f884478e5 integration-cli: DockerCLIImportSuite: replace dockerCmd
    885eceba1d integration-cli: DockerCLITopSuite: replace dockerCmd
    6ce6b63482 integration-cli: DockerCLIHistorySuite: replace dockerCmd
    268e72f10f integration-cli: DockerCLIRestartSuite: replace dockerCmd and waitRun
    c388416aac integration-cli: DockerCLICreateSuite: replace dockerCmd and waitRun
    5c297fcc09 integration-cli: DockerCLIStatsSuite: replace dockerCmd and waitRun
    7d2a6f2030 integration-cli: DockerCLICommitSuite: replace dockerCmd
    a4522b6a8f integration-cli: DockerCLIStartSuite: replace dockerCmd
    f7ddfdbae6 integration-cli: DockerCLIUpdateSuite: replace dockerCmd and waitRun
    d1108b8a06 integration-cli: DockerDaemonSuite: replace dockerCmd
    9c161cc65a integration-cli: DockerCLIVolumeSuite: replace dockerCmd
    f482857959 integration-cli: DockerCLIImagesSuite: replace dockerCmd
    f1102e98bb integration-cli: DockerCLIPortSuite: replace dockerCmd and waitRun
    ba4d491562 integration-cli: DockerCLIRmiSuite: replace dockerCmd
    5b3086db1f libnetwork/datastore: prevent accidental recursion
    16e4bc9827 integration-cli: DockerCLISearchSuite: replace dockerCmd
    89d7b77022 integration-cli: DockerRegistrySuite: replace dockerCmd
    c867ac4527 integration-cli: DockerCLICpSuite: replace dockerCmd
    980a5bc72a integration-cli: DockerCLIBuildSuite: replace dockerCmd
    4292f42308 integration-cli: DockerCLISaveLoadSuite: replace dockerCmd
    50062b413c integration-cli: DockerCLIRunSuite: replace dockerCmd and waitRun
    d63cab5193 integration-cli: DockerCLILogsSuite: replace dockerCmd and waitRun
    8e2e1f3d28 integration-cli: DockerRegistryAuthHtpasswdSuite: replace dockerCmd
    d3f4580519 integration-cli: DockerCLILinksSuite: replace dockerCmd and waitRun
    58c5986f8b integration-cli: DockerCLIHealthSuite: replace dockerCmd and waitRun
    707bb9b9ed integration-cli: DockerBenchmarkSuite: replace dockerCmd and waitRun
    eafb618594 integration-cli: findContainerIP: replace dockerCmd
    ba32bebd05 integration-cli: DockerCLIInfoSuite: replace dockerCmd and waitRun
    4562f07887 integration-cli: DockerCLIExecSuite: replace dockerCmd and waitRun
    8c661b5e9a integration-cli: DockerCLIEventSuite: replace dockerCmd and waitRun
    cf95278122 integration-cli: DockerCLIAttachSuite: replace dockerCmd and waitRun
    1baec48367 integration-cli: DockerAPISuite: replace dockerCmd and waitRun
    908821d48a integration-cli: dockerCmdWithFail: remove unused return
    02fd8485fa integration-cli: DockerCLINetmodeSuite: replace dockerCmd and waitRun
    dbb2bd727d integration-cli: DockerNetworkSuite: replace dockerCmd and waitRun
    5cc978c6a0 integration-cli: DockerCLIInspectSuite: replace dockerCmd and waitRun
    86fb048e59 integration-cli: DockerCLIPsSuite: replace dockerCmd and waitRun
    b4ff5234bd integration-cli: remove transformCmd utility
    cdb44010c9 c8d/history: Fill ID for parents without the label
    d28bd54f2a c8d/history: Fix Tags assigned from parents
    e97716a95a Fix disk usage test
    cf9073397c Update check-config.sh
    7bb54c3dc5 vendor: gotest.tools/v3 v3.5.1
    bcca214e36 libnetwork: open-code updating svc records
    33cf73f699 libnetwork: drop (*Controller).nmap
    804ef16822 libnetwork: only delete svc db entry on network rm
    c85398b020 libnetwork: drop vestigial endpoint-rename logic
    29da565133 libnetwork: change netWatch map to a set
    0456c0db87 libnetwork: refactor isDistributedControl()
    749d4abd41 libnetwork: get rid of watchLoop goroutine
    f05dce8d3a replace some strings with OCI consts
    e3feb05175 vendor: github.com/opencontainers/image-spec v1.1.0-rc5
    0d27579fc7 Ensure that non-JSON-parsing errors are returned to the caller
    26730c891a vendor: google.golang.org/grpc v1.56.3
    6f625ae65a c8d integration: skip TestImportWithCustomPlatform
    9357bcb582 c8d/pull: Return same access denied error as graphdrivers
    488559a330 c8d/push: Set distribution source recursively
    d9b5445f39 c8d/pull: Handle pull all tags
    095d2a29a3 distribution: Add Tags
    9664f33e0d daemon: release sandbox even when NetworkDisabled
    2df698025c HealthCheck: add validation for minimum accepted start-interval
    25fb4dd50d switch to go.opentelemetry.io/otel/semconv/v1.17.0
    96f85def5b s/HostIP/HostIPv4/ for `com.docker.network.host_ipv4` setting
    2a14b6cf60 Use `iptRule` to simplify `setIcc` (code health)
    d7c6fd2f80 Move `programChainRule` logic to `iptRule` methods (code health)
    e260808a57 Move duplicate logic to `iptRule.Exists` method (code health)
    14d2535f13 Move `iptables.IPVersion` into `iptRule` struct (code health)
    4e219ebafb Eliminate unnecessary `iptRule.preArgs` field (code health)
    4662e9889c Simplify `setupIPTablesInternal` parameters (code health)
    919fe72f60 vendor: github.com/moby/buildkit v0.12.3-dev
    40fde69be9 Revert "Return no basic auth creds error when needed"
    e1bacd18a3 ci: continue-on-error on non-PR with snapshotter enabled
    70892220c8 ci: use matrix to test containerd backed image store
    03decbc1e6 ci: split tests in a reusable workflow
    bb7408e851 c8d/changes: Fix concurrents diffs
    e3d8e979de integration-cli/TestSaveAndLoadWithProgressBar: Skip with c8d
    f51c5e1a5c c8d/save: Don't save name if exported by digest
    b5f5987959 c8d/load: Fix `Loaded image` message
    42af8795a3 c8d/save: Implement exporting all tags
    f20abbc96c libnetwork: use conntrack and --ctstate for all rules
    c279c48a0e Skip TestPullAllTagsFromCentralRegistry
    8777592397 Return no basic auth creds error when needed
    ebef4efb88 api/types: move ContainerLogsOptions to api/types/container
    9670d9364d api/types: move ContainerListOptions to api/types/container
    7bce33eb0f api/types: move ContainerStartOptions to api/types/container
    0f77875220 api/types: move ContainerRemoveOptions to api/types/container
    9498d897ab api/types: move ContainerCommitOptions to api/types/container
    30f09b4a1a api/types: move ContainerAttachOptions to api/types/container
    95b92b1f97 api/types: move ResizeOptions to api/types/container
    ec69501e94 api/types: move ServiceCreateResponse, and generate from swagger
    5b3e6555a3 api/types: move ServiceUpdateResponse
    48cacbca24 api/types: move image-types to api/types/image
    44dbbeb196 c8d/progress: Remove unused mountable
    bcbbd9538f c8d/progress: Show Mounted/Exists status
    bb8bc1ffc8 update to go1.21.3
    3bc45d78c9 update to go1.21.2
    1800dd0876 vendor: golang.org/x/net v0.17.0
    1946aead21 vendor: golang.org/x/crypto v0.14.0
    0679ae984b vendor: golang.org/x/text v0.13.0
    bc33c27796 vendor: golang.org/x/sys v0.13.0
    db806533e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
    b81b27c21f vendor: github.com/go-logr/logr v1.2.4
    cff4f20c44 migrate to github.com/containerd/log v0.1.0
    e1d0aacb6a vendor: github.com/docker/distribution v2.8.3
    0cd02ab1b4 integration/c8d: Skip TestBuildSquashParent
    aca9ea42bd vendor: github.com/moby/buildkit 0.12.3-dev
    d871a665de daemon/RegistryHosts: Don't lose mirrors
    a293cd6ab9 vendor: github.com/containerd/containerd v1.7.7
    f3aa9e151d c8d: Simplify error handling and distribution source label
    5f062032f7 TestPullNonExistingImage: Move to integration
    53345fe357 TestPullNonExistingImage: Use subtests
    2edb858b18 vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0
    87de23a6cd vendor: golang.org/x/text v0.11.0
    23f2e0fea7 Skip tests that check max concurrency
    37ca57e9d5 libnet/d/bridge: inline error checks
    fcabc48ee4 c8d/load: Handle compressed archives
    cbc2a71c27 libnet/d/bridge: Don't set container's gateway when network is internal
    491758a446 Dockerfile: upgrade Delve
    c587ba3422 registry: allow mirror path prefix in config
    2c4551d86d libnet: resolver: remove direct use of logrus
    4de8459265 libnet: add OTEL tracing to the embedded DNS
    b8ba263099 c8d/rmi: Handle explicit dangling name
    25a813e924 c8d/rmi: Don't emit Untagged for dangling images
    f99c4ec798 c8d/history: Fill ID and Tags for all entries
    1f6bacc486 TestDaemonNoSpaceLeftOnDeviceError: Adjust to snapshotters
    28d057cb0e c8d/TestPsListContainersSize: Only check if size increased
    34400dd4a2 TestPsListContainersSize: Fix size parsing/formatting
    e0e6ae741e daemon/c8d: Use WithoutCancel instead of context.Background
    c47cdd5f39 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw"
    6f27bef9fc daemon/c8d: Use non cancellable context in defers
    77f7c83114 c8d/push: Show progress only on blobs
    e8a7a9435f Dockerfile: update test-registry to v2.8.3
    5b16dd6469 Remove duplicated trace logs
    ad877271f3 Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless")
    3d70af4ee4 adjust stats sampling order
    16063c7456 vendor.mod: bump go line to 1.20
    a4822abe37 c8d: Skip TestPullFailsWithAlteredManifest
    f9f439763a c8d/TestPullFailsWithAlteredManifest: Adjust error message
    4001241ccf c8d/TestPullByDigestNoFallback: Adjust error message
    9e3ed7b429 pkg/chrootarchive: fix Darwin build
    e465ebf2f3 update to go1.21.1, and fix download-URL
    aa282973d4 Dockerfile: use GOTOOLCHAIN=local
    f66c000229 c8d: Fix getting the platform of a single-platform image
    2c89640ab9 distribution: TestPullSchema2Config fix test response
    a9fcb775e5 integration-cli: fix getTestTokenService not sending header
    3197160114 daemon: Daemon.SetNetworkBootstrapKeys: make error-handling idiomatic
    f91c3cfda6 daemon: Daemon.initNetworkController: remove intermediate var
    dcc75e1563 libnetwork: Controller: agentInit, agentDriverNotify rm intermediate vars
    a384102fdf libnetwork/datastore: Store.Map, Store.List: remove intermediate vars
    bb5402e6fb libnetwork: Controller: getKeys, getPrimaryKeyTag: slight refactor
    603f49706e libnetwork: Controller: getKeys, getPrimaryKeyTag: prevent panic
    f6e44bc0e8 internal: Add compatcontext.WithoutCancel
    95aea39348 Make one-shot stats faster
    618d9b5d54 libnetwork: nwAgent: un-export mutex
    7cda3fb7b5 libnetwork: inline populateSpecial NetworkWalker
    ca1307c56e libnetwork: Controller: remove mutex for "store"
    a8ea752a93 libnetwork: Controller.cleanupLocalEndpoints: return errors
    2e60051c92 libnetwork: Controller.sandboxCleanup: return errors
    642cf261a8 libnetwork: Controller.NetworkByID: remove redundant error-handling
    430a5f8581 api: Add method and path to trace operation string
    41c186c344 hack: Run integration tests through Delve
    42a51cb285 Add support for swarm seccomp and apparmor
    0c66111c40 daemon: containers list code refactor
    13b775a96e integration-cli/TestSaveAndLoadRepoFlags: Ignore LastTagTime difference
    7c202d2fa4 integration-cli/SaveLoad: Don't check `repositories` file
    724db8650c integration-cli: Skip TestLoadZeroSizeLayer with c8d
    1337a66130 integration-cli: Skip Parent tests with c8d
    d5b067e04a ci(buildkit): remove regex skipping tests with digest inconsistency
    286704bf6f ci(buildkit): expose github runtime for gha tests
    34e71b374b builder-next/a/ci/pull: strongly type flightcontrol.Group
    c8773e10b1 builder-next/wrapper: use new exptypes constants
    a728bd0ee9 builder-next/pull: use ResolveMode.String() helper
    221b73e23d builder-next: apply source policies on config resolve
    2246297ae6 builder-next: adopt new wrapped types
    c217e3c87a vendor: github.com/moby/buildkit v0.12.2
    8cd5f04ea3 daemon/c8d: use new containerd LabelDistributionSource constant
    fd6dd6935b vendor: github.com/containerd/containerd v1.7.6
    79a4cbbec9 builder-next: make stub executor generic
    d7a31cfb2d libnetwork: Sandbox.resolveName: slightly simplify locking
    f549aaa205 libnetwork: Sandbox.resolveName: add fast-path for alias lookups
    9249b34be8 libnetwork: Sandbox.resolveName: rename vars for clarity
    4401ccac22 libnetwork: Sandbox: remove some intermediate vars
    0e80073e01 daemon: strongly type containerd log.OutputFormat
    4ff252456b libnetwork: rewrite Network.isClusterEligible to return agent
    6203e3660d libnetwork: Endpoint: return early if no agent was found
    6eeef51c6a libnetwork: Controller.agentSetup: use structured logs
    8b95ea4a35 libnetwork: Controller.agentSetup: remove redundant condition
    e852ba55a5 vendor: github.com/Microsoft/hcsshim v0.11.1
    06a640084f Fix graphdriver lookup in makefile
    093481618d c8d: Skip the test that checks Config.Image
    e6907243af client: negotiate api version before handling version-specific code
    3936c57294 c8d: test a backend dependent error on pull
    207c4d537c c8d: Fix `docker diff`
    601c9b29e6 c8d/pull: Fix stale Downloading progress
    313a090c0e libnetwork/osl: add some TODOs
    9d3b1f9419 libnetwork/osl: make constructing Interfaces more atomic
    47f9e70385 libnetwork/osl: Namespace.Restore: conditionally fetch IPs
    ee5a91e663 libnetwork/osl: Namespace.Restore: flatten nested conditions
    299bd58c5a libnetwork/osl: Namespace.Restore: rename vars for readability
    7b96663082 libnetwork/osl: Namespace: inline setGateway and setGatewayIPv6
    bd17d27658 libnetwork/osl: Namespace: make error-handling more idiomatic
    0b4a70ca2c libnetwork/osl: Namespace: programRoute, removeRoute rm path arg
    542fe0da40 libnetwork/osl: Namespace: make mutex private
    338fc49060 libnetwork/osl: implement Namespace.RemoveInterface
    3ff75aeb07 c8d/pull: Deprecation notice for schema1 manifests
    2cb94ade6c distribution: Extract schema1 deprecation notice
    39fe25b69e c8d: Fix  getting image with platform
    68b67b3230 c8d/pull: Support legacy schema1 prettyjws manifests
    d5425f28ae Don't run tests twice
    bddd826d7a profiles/apparmor: deny /sys/devices/virtual/powercap
    83cac3c3e3 oci/defaults: deny /sys/devices/virtual/powercap
    2394b07bce c8d: Number of containers using an image
    e19e541e2c libnet: add comment to ipamType
    acf825def2 api/t/net: test EndpointIPAMConfig.Validate()
    3092b261e2 daemon: move most of validateEndpointSettings into api/t/net
    554036040b vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24
    6fc3ead321 vendor: google.golang.org/grpc v1.56.2
    73041028b6 vendor: google.golang.org/protobuf v1.31.0
    54dc8d2968 vendor: github.com/cenkalti/backoff/v4 v4.2.1
    d97e4300ee vendor: google.golang.org/api v0.114.0
    d50585b05b vendor: golang.org/x/tools v0.8.0
    51d8a975ab vendor: golang.org/x/oauth2 v0.7.0
    9670db3904 vendor: golang.org/x/crypto v0.9.0
    a046616249 vendor: golang.org/x/sys v0.10.0
    f29155950f vendor: golang.org/x/sync v0.3.0
    0354791147 vendor: github.com/klauspost/compress v1.16.5
    87dd1de046 vendor: github.com/tonistiigi/vt100 v0.0.0-20230623042737-f9a4f7ef6531
    bd6cadffb0 vendor: github.com/containerd/continuity v0.4.2
    6d93db06db vendor: github.com/vbatts/tar-split v0.11.3
    171ecf8cf2 vendor: github.com/vishvananda/netns v0.0.4
    81ab8db1c3 api/t/net: add missing comment to ValidateIPAM
    04a47e88d2 api/t/net: move endpoint structs into endpoint.go
    19c07198b6 daemon: Check if endpoint address is in allowed range
    bfd8c6deb7 daemon: Validate EndpointSettings.IPAMConfig.LinkLocalIPs
    4bd0553274 daemon: Return all validation errors for NetworkingConfig and EndpointSettings
    ff503882f7 daemon: Improve NetworkingConfig & EndpointSettings validation
    4c03618fab registry: remove jsonmessage dependency
    6c563cda82 c8d: fix TestRemoveContainerAfterLiveRestore
    0c4397deaf api/pull: Validate repo name
    ccb37fa567 imageService/PullImage: Move reference parse to api
    28861e0c47 c8d: Skip TestRemoveImageGarbageCollector
    bf692d47fb deprecate pkg/loopback (utility package for devicemapper)
    96faee9762 libcontainer: client.processEventStream: use locally scoped variables
    32e2c53467 c8d: Fix pull progress update
    5a4962f80d c8d: Refuse images with digest algo when tagging
    bd523abd44 remove more direct uses of logrus
    1ffbbe798a vendor: github.com/containerd/containerd v1.6.24
    7f281907dd c8d/push: Add missing message about repository
    babf907bfd c8d/push: Support pushing all tags
    7ec9f304e9 daemon/cluster: create managed ctr with multiple EndpointsConfig
    5e15ed314b api: Improve error on ContainerCreate with multiple endpoints
    cc9c930e29 vendor: github.com/Microsoft/hcsshim v0.9.10
    24102aa8ca update containerd binary to v1.7.6
    bbcd662532 api: Allow ContainerCreate to take several EndpointsConfig for >= 1.44
    35e9d688ba libnetwork: remove netWatch.remoteEps, as it's unused
    8ae5dc4aae libnetwork: Network.updateSvcRecord: remove unused localEps arg
    37b2ea9a8d libnetwork: Controller.processEndpointCreate, Delete: remove nmap arg
    62e55fd58a Add support for registry token in containerd pull logic
    14c5f7bf1d contrib: outline purpose of download-frozen-images-v2.sh
    0937aef261 libcontainerd/windows: Don't reap on failure
    b805599ef6 libcontainer/windows: Remove unneeded var declaration
    55b664046c libcontainer/windows: Fix process not being killed after stdio attach failure
    9c84994830 libnetwork/portmapper: remove unused PortMapper.checkIP
    f5d6af13d0 libnetwork/portmapper: un-export PortMapper.Allocator
    863909a749 libnetwork/portmapper: New(): remove unused argument
    5ab8d41d9f Add dmcgowan as curator
    de2447c2ab daemon: overlay2: Write layer metadata atomically
    78479b1915 libnet: Make sure network names are unique
    5fa011dc0c vendor: resenje.org/singleflight v0.4.0
    fd15ddbc30 daemon: GetImageAndReleasableLayer: simplify "FROM scratch" case
    4229032676 daemon/containerd: use "DiffID" type for diff fields
    5d5eeac310 daemon: automatically set network EnableIPv6 if needed
    0313544f4a c8d: Handle userns properly
    c63a952dc9 c8d/builder: Don't append empty tar layer to manifest
    9127285985 c8d/builder: Lease layer snapshots
    f22b112005 c8d/commit: Unpack committed image
    8832cdf6e1 c8d: Common unpack code for specific manifest
    c6bded3475 c8d/builder: Don't use diffID as snapshot parent
    8c7e19c5ff c8d/builder: Set empty diffID for rolayer
    6ebfa57364 c8d/builder: Don't mount the rolayer snapshot
    c41121cc48 update to go1.20.8
    4acbf7d8c3 c8d: disable schema1 registry integration tests
    833b514d98 c8d/mount: Create same directory owners as graphdrivers
    a8975c9042 api: Add consts for predefined networks
    12e27dfd8f Fix host_ipv4 bridge option when IPv6 and ip6tables are enabled
    7c0f6741eb go mod tidy
    cd204f1118 libnetwork/osl: Namespace.DeleteNeighbor: remove intermediate vars
    4215a1542b libnetwork/osl: Namespace.DeleteNeighbor: remove osDelete argument
    bc77104fed libnetwork/osl: Namespace.DeleteNeighbor: don't warn on non-existing neighbor
    5e7eade1f7 integration: don't poll for containers to be running
    b7d29c1e23 registry: un-skip some tests that don't require root
    de27973538 registry: merge validateEndpoint into newV1Endpoint
    6cc6682f5f daemon: fix under what conditions container's mac-address is applied
    820f37b1a6 hack: compile w/o optimizations & inlining when debugging
    c44f8958f6 vendor: github.com/cncf-tags/container-device-interface v0.6.1
    fa3ddc5116 distribution: newRepository: remove naked return and intermediate vars
    43740ab642 registry: remove intermediate vars in mock
    550e628f05 registry: newV1Endpoint: make it clear we skip validation for Docker Hub
    5728516371 c8d/image: Allow truncated id to have sha256: prefix
    c2004fb8c4 hack: Add TEST_IGNORE_CGROUP_CHECK
    7e506f71f3 registry: v1Endpoint.ping: include URL in debug log
    0c6f8f9290 registry: v1Endpoint.ping: don't io.Readall the response
    e9ad878df6 registry: v1Endpoint.ping: add fast-path for X-Docker-Registry-Standalone
    9e797a6db9 c8d: Remove the panic from UpdateConfig
    4982c70db4 integration-cli: Skip TestRmiParentImageFail when using c8d snapshotters
    0f7a65e59b registry: remove use of v1 Version field and X-Docker-Registry-Version
    3d8b8dc09a Use process substitution to redirect to tee
    c0ece8d4f3 integration-cli: Use different label in TestBuildMultiStageGlobalArg
    081b74b97d c8d/builder: Store parent in c8d image label
    5f59f7bb49 integration/container: combine TestResize tests into subtests
    a4ceb0e4ac integration/container: TestResize, TestResizeWithInvalidSize: rm poll.WaitOn
    ee7ca6822a integration/container: fix flaky TestResizeWhenContainerNotStarted
    da5ed8b35b CI: Switch to use tracing action
    a3c97beee0 image: implement CheckOS, deprecate pkg/system IsOSSupported
    150b657bad pkg/system: move ErrNotSupportedOperatingSystem to where it's used
    9b7784781d Add test for buildkit history trace propagation
    3b4ccb2eca CI: Setup otel tracing for integration tests
    e8dc902781 Wire up tests to support otel tracing
    642e9917ff Add otel support
    776c376227 c8d: Better pull progress
    1cb45e582c c8d/import: Don't close compressed stream twice
    b5376c7cec pkg/idtools: remove sync.Once, and include lookup error
    0be416dfdc distribution: filterManifests split complicated condition
    150b1c8c73 daemon: daemon.createSpec: remove uses of logrus
    dbb4d54e01 c8d: Add image save events
    09470db089 c8d: Add image pull events
    1847dc4b7f c8d: Add image push events
    1148a24e64 migrate to new github.com/distribution/reference module
    dffccfd0f1 integration-cli/build: Alias `cmp` as `is`
    5dbd198b53 integration-cli/build: Parse multiline `images -q` output
    96516002cc c8d: Print the tag, digest and size after push
    417328e44e libnetwork/osl: remove dead code
    237eb3b5f1 docs(api): rephrase description for /images/create
    0ffa3dd870 daemon/c8d: Use Docker imagespec
    14af90b868 c8d/integration/TestBuildOnBuildCache skip parent check
    366a5f1d74 image/spec: Add Go structs
    536826d66f image/spec: Add Healthcheck.StartInterval (v1.3)
    75097cf09a test: remove platform related timeout values
    6dd78a9ac2 image/spec: Fix typo in "superseded"
    84a4f37cf7 test: use info from the version endpoint for arch checks
    159b168eea test/integration: Remove checks for "not arm" in tests
    ebb9fade23 makefile: use info -f to get the current storage driver
    c243efb0cd client: TestImageTagInvalidSourceImageName remove invalid test-case
    3a4a04e462 distribution: simplify mocks
    d864d1eb97 image/spec: add back versioned files
    b8de6c01b5 image/spec: rename v1.2.md to spec.md
    c3f2bd1009 image/spec: rename v1.1.md to spec.md
    7ff38506ab image/spec: rename v1.0.md to spec.md
    32d5e6312d image/spec: use permalink to versioned documents
    7b7019a4da image/spec: add missing "Shell" field (v1.2)
    5380f3f0c4 image/spec: add missing "ArgsEscaped" field (v1.1, v1.2)
    f33370219b image/spec: add missing "OnBuild" field
    e19edd3f25 image/spec: minor fixes and touch-ups in markdown files
    b9f9e20f01 daemon: Daemon.killWithSignal(): don't discard snapshotting errors
    af535233cc daemon: Daemon.killWithSignal(): don't discard handleContainerExit error
    8c6a46f643 libnetwork: Endpoint.AddStaticRoute don't create StaticRoute if unused
    1dcb11f81d libnetwork: Endpoint.InterfaceName: remove redundant nil check
    a9a0ffaf51 testing: update docker-py 6.1.3
    f6959bc597 test-docker-py: skip AttachContainerTest::test_run_container_reading_socket_ws
    e0f171f342 testing: update docker-py 6.0.1
    79a0f82ca1 test-docker-py: remove comment about docker 17.06 limitations
    be90e5e1d4 libnetwork: Controller.addServiceBinding: fix duplicate word in comment
    77c2613d3a libnetwork: fix some missing imports on macOS and FreeBSD
    5da2dd98e9 registry: move search-related code to separate files
    f1a7028900 registry: rename v1-endpoint tests to have a common prefix
    19f6f0b3db registry: move v1 endpoint tests to endpoint_test.go
    47bf587f84 registry: ResolveAuthConfig: rename var that collided with import
    a0a8d9d057 libnetwork: notify another driver registerer
    2689484402 volume/local: Don't unmount, restore mounted status
    f1a6e16258 errdefs: remove redundant import comments
    b6ba2a4f75 errdefs: remove gotest.tools dependency
    3f8cbd8ec9 registry: update some godoc
    e10eca3d1a daemon/containerd: rename some vars that collided with imports
    aefbd49038 daemon/containerd: newROLayerForImage: remove unused args
    28d201feb7 daemon/containerd: log errors when releasing leases
    d43e61758a registry: deprecate APIEndpoint.Version and APIVersion type
    aef703fa1b integration/liveRestore: Check volume content
    4e4f62b6db distribution: use registry consts for API version in tests
    aa59b0f5a2 registry: improve error for invalid search endpoints
    14b53c6318 registry: simplify `trimV1Address`
    062c80199f registry: combine TestEndpointParse and TestEndpointParseInvalid
    0f871f8cb7 api/types/events: define "Action" type and consts
    10a3a3bc49 daemon: inline some variables when emitting events
    9331d6de1e daemon/events; fix TestLoadBufferedEventsOnlyFromPast
    f6f6c32138 api: ValidateRestartPolicy: improve errors for invalid policies
    333e04e84e integration-cli: TestEventsFormat: rewrite test to not use deprecated fields
    fa79b5d59f integration/container: TestPause: don't depend on deprecated fields
    0161aad462 client: TestEvents: don't depend on deprecated fields
    5123ae4352 daemon: TestLogContainerEventCopyLabels: inline vars
    2928c5ae92 daemon: TestHealthStates: don't depend on deprecated fields
    62ec14d9ec daemon/events: verify non-deprecated fields
    f443006fa2 daemon/events: rewrite test-assertions with gotest.tools
    70ad5b818f api/types/events: make events.Type an actual type
    5a02ed5e84 integration: use events-consts in tests
    9ea50365d6 daemon/events: use events-consts in tests, and fix vars that collided
    2f8e957713 Dockerfile: update crun binary to v1.8.7
    32e79c464a libnetwork: Network: return early where possible
    5512c7e838 libnetwork: Network.Services: remove some intermediate vars
    d6b8298cfd libnetwork: Network.Services: return early and don't lock in a loop
    8b21609654 libnetwork: remove Endpoint.Interface
    f8181b8875 libnetwork: Endpoint.Iface, Endpoint.Interface remove redundant "if"
    6a61bacafe libnetwork/drivers/remote: rollbackEndpoint.Interface: return concrete type
    dc061d2ed3 libnetwork/drivers/remote: driver.DeleteNetwork: remove var that collided
    40b1389917 libnetwork/drivers/remote: remove unused testEndpoint.Interface
    15435f7293 libnetwork/drivers/bridge: testEndpoint.Interface: return concrete type
    9afb688f5f libnetwork/drivers/bridge: getIPv4Data: remove unused argument
    639449f84e libnetwork: nwAgent.bindAddr: change to net.IP
    b75e831567 libnetwork: resolveAddr: add GoDoc
    ebe2347ac6 daemon: remove LogPluginEventWithAttributes as it's not used
    aa764e6009 daemon: logNetworkEvent, logSecretEvent, logConfigEvent rm unused args
    fa13b0715f integration/internal/swarm: rename max/min as it collides with go1.21 builtin
    79495c5b6a pkg/tailfile: rename max/min as it collides with go1.21 builtin
    df2f25a977 pkg/plugins: rename max/min as it collides with go1.21 builtin
    6c036f267f pkg/sysinfo: rename max/min as it collides with go1.21 builtin
    55192de9e3 pkg/archive: rename max/min as it collides with go1.21 builtin
    a3867992b7 daemon: rename max/min as it collides with go1.21 builtin
    f6b2e34268 Update example in README.md to close cli object
    318b3d4fe5 api/types/versions: rename max/min as it collides with go1.21 builtin
    cb394a62e5 restartmanager: rename max/min as it collides with go1.21 builtin
    8f64e2e925 daemon: daemon.logClusterEvent: use events.Type for event-types
    3dea2f230a daemon: inline some vars when producing events
    385f6429be api/server/router/network: remove empty file
    350223201e integration/container: TestCheckpoint: remove intermediate vars
    b688af2226 api/types: move checkpoint-types to api/types/checkpoint
    70baaec6a5 Dockerfile: remove libdevmapper-dev
    12d1f4f385 hack: remove devicemapper leftovers and build-tags
    f6a5318f94 Dockerfile: Windows: update Golang download domains to cut down redirects
    2aabd64477 hack: update link to GOPATH documentation
    b18e170631 CONTRIBUTING.md: update links to golang docs and blog
    136e86bb5c api: swagger: update link to Go documentation
    4862d39144 docs/api: update links to Go documentation
    cd49f9affd update golangci-lint to v1.54.2
    d52f20048d api/server: format code with gofumpt
    e9b09b49fd builder/builder-next: format code with gofumpt
    73894af9ff contrib/apparmor: format code with gofumpt
    ce01d779df daemon: format code with gofumpt
    211d3a8c32 pkg/stack: format code with gofumpt
    95e99e629c pkg/fileutils: format code with gofumpt
    6c6e1fb13d pkg/containerfs: format code with gofumpt
    1e579a7a2a pkg/sysinfo: format code with gofumpt
    263c00f27c testutil: format code with gofumpt
    b71951c70c container: format code with gofumpt
    87cedbe443 image: format code with gofumpt
    976da91fb7 pkg/loopback: format code with gofumpt
    b4d6eca9b8 pkg/chrootarchive: format code with gofumpt
    07e6b0ac70 integration: format code with gofumpt
    498da44aab remove some remaining pre-go1.17 build-tags
    210abfaef6 libnetwork: add godoc to Endpoint
    04422f5ec1 daemon: WithNamespaces(): add notes about user-namespaces
    dd26e6b15e daemon: Daemon.getIpcContainer: make errors less repetitive
    3d94eb9bcd daemon: Daemon.getPidContainer: change to accept "id" argument
    bc7f341f29 daemon: WithNamespaces(): fix incorrect error for PID, IPC namespace
    bd5d6480e7 daemon: WithNamespaces(): remove redundant "if"
    6eaefe5bf5 daemon: WithNamespaces(): use switch instead of if/else if/else
    43aa67a982 daemon: WithNamespaces(): use OCI-spec consts for namespaces
    759698581e daemon: WithNamespaces(): inline variables
    13648a0e21 daemon: remove Daemon.checkContainer and related utils
    78828f9b58 test/integration: Download the registry binary
    bd2c553870 Fix some broken executable flags
    143b3b2ef3 test: update registry version to latest
    01214bafd2 c8d/builder: Don't drop fields from created image
    b92cf68add libnetwork/osl: remove Sandbox and Info interfaces
    c881360e88 libnetwork/osl: remove Interface.Master() as it's unused
    b9bf407929 libnetwork/osl: remove Interface Interface
    8631e69cdf libnetwork/osl: remove Sandbox.InterfaceOptions() etc.
    f3d29db6a2 libnetwork/osl: remove Sandbox.NeighborOptions() etc.
    a365fb0e9d libnetwork: move more osl.Sandbox related code to Linux-only files
    95abde479a libnetwork: implement Controller.setupOSLSandbox
    35456d2eb1 libnetwork/osl: add godoc to networkNamespace
    aecfa55c4c libnetwork/iptables: (Add|Del)InterfaceFirewalld: check firewalld status
    4b0d38de06 TestDiskUsage: don't panic if results don't match
    c0568a95d8 integration/container: check some error-types in tests
    2b583c0923 daemon: cleanupContainer: slightly cleanup error messages
    69cf2ad6a5 daemon: cleanupContainer: don't fail if container is already stopped
    20b770237c daemon/network: Settings: move sandbox fields together
    405f571ae8 daemon: updateSandboxNetworkSettings: remove unused error-return
    2eccf0e8d1 libnetwork: Controller.NewSandbox: don't generate ID if not used
    6cbe06ff3f test: Skip graph driver tests when using containerd snapshotters
    3553b4c684 replace dockerfile/dockerignore with patternmatcher/ignorefile
    a479b287c7 vendor: github.com/moby/patternmatcher v0.6.0
    bedcc94de4 daemon: Handle NotFound when deleting container lease
    dfaff9598c c8d/run: Allow running container without image
    eb56493f4e c8d/commit: Don't produce an empty layer
    3e8af0817a ipam: Replace ChildSubnet with parent Subnet when its mask is bigger
    4f47013feb api: Validate IPAM config before creating a network
    2be118379e api/types/container: add RestartPolicyMode type and enum
    b8ff8ea58e Don't return an error if the lease is not found
    dff53a02ef libnetwork: remove Controller.Sandboxes as it's no longer used
    d6f340e784 gha: set 10-minute timeout on "report" actions
    f44fbab3ec libnetwork: remove Controller.WalkSandboxes and related code
    6dba98cf38 libnetwork: implement Controller.GetSandbox(containerID)
    6c4153f348 libnetwork: parallelTester: move vars closer to where they're used
    e690cdb6a3 libnetwork: remove redundant sandboxTable type
    3c10db669e libnetwork: remove unused SandboxKeyWalker
    cc414a2012 libnetwork/osl: remove Sandbox.Info()
    3b9f4395cf libnetwork: remove InterfaceInfo interface
    d146e592d8 api/t/network: Move IPAM types to their own file
    219d4d9db9 ci(bin-image): check repo origin
    d125823d3f hack: use long SHA for DOCKER_GITCOMMIT
    2010f4338e ci(bin-image): clean up metadata
    ad91fc1b00 ci(bin-image): clean up env var handling
    5dc44f03f0 classic builder: align "removing intermediate container" output
    06e540c271 libnetwork: move all SandboxOptions to a separate file
    2afa4eba43 libnetwork: resolver: Resolver.dialExtDNS use joinHostPort and cleanup
    3218e26a22 libnetwork: resolver: remove some intermediate variables
    986de11464 libnetwork: resolver: remove setCommonFlags, use createRespMsg
    7f965d55c7 volume/local: Fix debug log typo
    678ce73907 windows: update default base image for dev container
    0c522c6bbf libnetwork/datastore: remove deprecated scope consts
    73ffb48bfb ci(bin-image): populate DOCKER_GITCOMMIT, take 2
    9aed6308d4 ci(bin-image): populate DOCKER_GITCOMMIT
    c22ec82477 libnet: Fix error capitalization
    bd0111c1f4 libnet: Replace NoServiceError with UnavailableError
    42d34e40f9 libnet: Replace BadRequest with InvalidParameter
    a64adda4e7 c8d/inspect: Ignore manifest with missing config
    c85a33d74b libnetwork/iptables: un-export ZoneSettings, and slight refactor
    d979d2af45 libnetwork/iptables: fix TestFirewalldInit
    513063bcf9 libnetwork/iptables: ProgramChain: don't fail if interface not found
    64de635626 Add a temporary drop-in replacement for errors.Join
    cff341e5e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230815220644-3f2e40b3ed51
    56b62640a2 libnetwork: Controller.NewSandbox: use named error-return
    cbe692ffd1 libnetwork: Controller.NewNetwork: use named error-return
    e2f9d6c4c3 libnetwork: rename vars that collided with builtins
    e8f0f5a4ce libnetwork: rename agent type to reduce collisions
    0503cf2510 libnetwork/drivers/bridge: setupIPChains(): name output variables
    b9d9504df5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230808164555-1983e41a9fff
    7b66ae1531 vendor: golang.org/x/crypto v0.3.0
    59aa3dce8a remove s390x and ppc64ls pipelines
    ea2d686468 libnetwork/iptables: DeleteConntrackEntries: remove "totals" returns
    f1240393d9 libnetwork/iptables: reduce DeleteConntrackEntriesXX debug logs
    18a0ff2b2b daemon: Daemon.handleContainerExit(): rename err-var for clarity
    178125ae39 libcontainerd/supervisor: explicitly ignore process kill errors
    f8363690ca daemon: Daemon.handleContainerExit(): reduce ambiguity in error handling
    72648f0ba6 oci: DefaultLinuxSpec: use OCI-spec consts for namespaces
    17571ff199 integration/internal/container: add WithPIDMode option
    917dae58e1 integration/internal/container: remove import aliases
    e0f5bb4820 daemon: withLibnetwork(): return early if networking is disabled
    225691e258 daemon: withLibnetwork(): use OCI-spec consts for namespaces
    8376595621 libnetwork: un-export SetExternalKey
    91a3a95385 libnetwork/options: OptionExecRoot: skip osl.SetBasePath on non-Linux
    48ea7ec970 libnetwork/osl: use filepath.Join() only when changing basedir
    8bf62010a4 libnetwork: merge linux-only test-files
    c0562d4eed libnetwork: rename unix-only testfiles
    8070f15966 libnetwork/drivers/bridge: rename some linux-only files
    014fefee1d libnetwork/drivers/bridge: minor formatting fixes
    80d158e0de daemon: remove containerNotModifiedError
    dffe634c19 daemon: Daemon.ContainerStart(): make validateState a regular function
    6da42ca830 c8d/diff: Reuse mount, mount parent as read-only
    051d51b222 c8d/export: Use ref counted mounter
    303e2b124e integration: Add test for not breaking overlayfs
    05deecaa45 internal/testutils/netnsutils: move utils that were not used on Windows
    d4e1c072e2 libnetwork: move resolverIPSandbox closer to where it's used
    f661bd8ee5 libnetwork: Resolved.SetupFunc() minor cleanup
    de4ba13400 libnetwork: move resolver tests that were skipped on Windows
    1e4e9161c5 libnetwork: move TestDNSOptions to a non-windows file
    bf1fb97575 daemon: Daemon.containerStart(): add comment to clarify error-type
    b039bbc678 update runc binary to v1.1.9
    79b467808e vendor.mod: github.com/opencontainers/runc v1.1.9
    74feadacf8 integration/internal/container: refactor CreateExpectingErr
    0899ba4a3f integration/internal/container: add NewTestConfig utility
    3cb52a6359 integration/internal/container: use consistent name for api-client
    26be2bc6b9 integration/container: use consistent name for api-client
    38e26c4717 daemon/create.go: Fix error capitalization
    435ecfe6e0 test/volume: Replace Check with NilError where suitable
    3d3ce9812f integration/tag: Move to client unit test
    742475bc8d daemon/create.go: Supersede github.com/pkg/errors
    4cc796ab93 client: Client.buildRequest: use http.NewRequestWithContext
    58dc0fcd1e client: Client.Ping: re-use request when falling back to GET
    87fff769f4 client: Client.checkResponseErr: change errorMessage to an error
    71da8c13e1 integration/tag: Use subtests and make parallel
    11a0c2779b pkg/plugins: Rewrite with assert.Check
    43956e1b71 hack/test: Don't exit early when all tests are filtered out
    ae008570ff hack/test: Split -test.run for integration and integration-cli
    510cac5f5b hack/test: Fix checking if integration-cli are filtered out
    8a1ca49657 libnetwork/osl: nwIface: add godoc
    16785b9b7b libnetwork/osl: move all networkNamespace methods together
    5b0fa7aaca libnetwork/osl: some minor nits
    972d80b596 libnetwork/osl: clean up newInfo() a bit
    0da721ec38 libnetwork/osl: make newKey and newInfo a t.Helper()
    d9442aab88 libnetwork/osl: nwIface: remove mutex altogether
    2afe18d2ce libnetwork/osl: nwIface: unexport sync.Mutex
    8b989ac665 libnetwork/osl: let's not do this, etc.
    3d0a7d819c libnetwork: remove Network.Info() and remove NetworkInfo interface
    74354043ff remove uses of libnetwork/Network.Info()
    36a0946aa9 libnet/ipamapi: Remove unused errors
    fd4ec26313 daemon/network.go: Fix error capitalization
    64e01c627f daemon/network.go: Remove github.com/pkg/errors pkg
    94dc10378d libnetwork: network.requestPoolHelper: slightly optimize order of checks
    67e2c1d482 libnetwork: network.requestPoolHelper: remove dead code
    ad68883c5a libnetwork: network.requestPoolHelper: don't defer in a loop
    32fcde6d9e libnetwork: network.IpamConfig, network.IpamInfo: name output vars
    df03357d19 libnetwork/ipam: move PoolID.FromString() to a PoolIDFromString() func
    808fed550d libnetwork/ipam: PoolID.String(): don't use fmt.Sprintf
    87fc8c772b libnetwork/ipam: Allocator.RequestPool: name args, output vars
    6dbc9c1c53 libnetwork/ipam: Allocator.RequestPool: mark options arg as unused
    7047964bd6 libnetwork/ipam: Allocator.RequestPool: make parseErr only handle errors
    821ef5cbaf libnetwork/ipams/null: use consts for fixed values
    05ef5559c3 pkg/plugins: override timeouts during tests
    6841a53d17 hack/test: Don't fail-fast before integration-cli
    2aa24519da ibnetwork/drivers/bridge: newLink: validate before creating
    5d722b35d9 libnetwork/drivers/bridge: bridgeNetwork.getEndpoint(): move lock
    eba15fe905 libnetwork/drivers/bridge: driver.link: don't defer in a loop
    76b736c242 libnetwork/drivers/bridge: driver.link: name return var for defer handling
    ea5f21ceac libnetwork/drivers/bridge: don't convert IP to string and back again
    8b6203b613 libnetwork/drivers/bridge: link.Enable: don't register reload on error
    0f4ba145ee libnetwork/drivers/bridge: link.Enable, link.Disable use iptables.Action
    40adb4317b api: Remove duplicated check on CheckDuplicate
    3e52785aae volume/drivers: use plugin Content-Type headers v1.2
    481dde8b70 libnetwork: use plugin Content-Type headers v1.2
    93b5c31541 integration-cli: use plugin Content-Type headers v1.2
    b663c7c5c3 pkg/plugins: add convenience alias for VersionMimeType
    c8930105bc fix: Normalize `RLIMIT_NOFILE` to sensible defaults
    4f9540f19f daemon: remove some intermediate vars and some cleanup
    8153a7760e daemon: Daemon.tryDetachContainerFromClusterNetwork: cleanup
    a018bb1da7 daemon: Daemon.initializeNetworking: remove var declaration
    12d8029d56 daemon: Daemon.getNetworkedContainer: remove intermediate var
    d1aa1979b4 daemon: buildEndpointInfo: minor refactor
    7a59913b1a Add CDISpecDirs to Info output
    0034a98eb1 pkg/plugins: Guard storage and unparallel racy tests
    bbb9255562 Skip CDI driver registration if CDISpecDirs is empty
    3b71197fb8 Set default CDI spec dirs after parsing args
    f3e62199ea daemon: Remove unneeded error wrapping in verifyNetworkingConfig
    d7a9f15775 bakefile: Remove default value of DOCKER_GITCOMMIT
    2b028dc55b daemon: Daemon.buildSandboxOptions: use range when looping
    33b4285eb1 daemon: Daemon.buildSandboxOptions: don't use PortBinding.GetCopy()
    ddb3d46533 daemon: Daemon.buildSandboxOptions: remove intermediate vars
    27a27db73f daemon: Daemon.buildSandboxOptions: move vars to where they're used
    91cab53a3e libnetwork: make OptionDNS, OptionDNSOptions, OptionDNSSearch take a slice
    2cbed9d2a8 daemon: inline Daemon.getDNSSearchSettings
    603547fa19 daemon: change Daemon.setupPathsAndSandboxOptions to a regular func
    07f2df69c7 daemon: buildCreateEndpointOptions: minor nits
    5158a33f15 daemon: buildCreateEndpointOptions: use range when looping
    1c6dae1291 daemon: buildCreateEndpointOptions: don't use PortBinding.GetCopy()
    cc79024761 daemon: buildCreateEndpointOptions: remove intermediate vars
    45de99aa06 daemon: buildCreateEndpointOptions: don't parse empty vip
    7d429125d2 daemon: buildCreateEndpointOptions: move vars to where they're used
    6ce92aa523 daemon: buildCreateEndpointOptions: skip getPortMapInfo() if not needed
    9e9a17950a daemon: FindNetwork: minor cleanups
    8c4af5dacb distribution: show image schema deprecation on all registries
    982bc0e228 distribution: update warning for deprecated image formats
    5bd8aa5246 integration: Add RunAttach helper
    d7fb4dd170 integration: Extract stream demultiplexing from container.Exec
    584f016e99 docs/api: remove stray underscore in version-history.md
    d5cb7cdeae update to go1.20.7
    fced566714 client: move resolveTLSConfig to a Client.tlsConfig()
    47af265234 client: Dialer: inline fallbackDial
    74d9850bb9 client/buildkit: ClientOpts: update docs to use doc-links, and inline
    971083d419 api: search: deprecate is_automated field, and is-automated filter
    5e2a1195d7 swap logrus types for their containerd/logs aliases
    1a51898d2e TestDaemonProxy: use new scanners to check logs
    476e788090 Fix daemon proxy test for "reload sanitized"
    e2d400bea9 libnet/d/bridge: Inline InvalidLinkIPAddrError
    6df4a00bb9 libnet/d/bridge: Remove pointless BadRequestError impl
    7c13985fa1 libnet/d/bridge: Inline InvalidIPTablesCfgError
    d8f42ee21a libnet/d/bridge: Inline IPTableCfgError
    a40d00c421 libnetwork: remove ErrDataStoreNotInitialized
    66b379785e libnetwork: remove unused InvalidContainerIDError
    d8cd4f6421 libnetwork: remove unused UnknownEndpointError
    fc5c16f491 libnetwork: remove unused NetworkTypeError
    e9f1888560 libnetwork: remove unused ErrInvalidConfigFile
    eadaaa7f79 libnetwork: remove unused ErrNoContainer
    99ab11bb90 libnetwork: remove unused ErrInvalidJoin
    9174eb00e2 libnetwork: remove unused ErrInvalidNetworkDriver
    7c2665298a libnetwork/types: move GetMinimalIP to overlay-driver and un-export
    d9b7a5f01a libnetwork/types: remove ErrInvalidProtocolBinding
    4445169cb5 libnetwork/types: remove PortBinding.Equal
    4269712d06 libnetwork/types: remove unused UUID type
    c203171ef6 libnetwork/types: remove unused RetryError and TimeoutError
    6d37ab0a83 libnet/d/bridge: Change interface implemented by error types
    03db2f8c3d libnet/d/bridge: Remove unused error types
    8197752d68 TestDaemonProxy: check proxy settings early
    4d674897f3 vendor: github.com/containerd/containerd v1.6.22
    5438356348 libnetwork: rename vars that collided with builtin and type
    ce053a14aa vendor: gotest.tools/v3 v3.5.0
    be0f4a4737 libnetwork/driver: remove discoverAPI from Windows and Windows overlay
    6ec03d6745 libnetwork: move datastore Scope consts to libnetwork/scope
    86299bbd35 vendor: github.com/opencontainers/image-spec v1.1.0-rc4
    fca38bcd0a libnetwork/driverapi: make discoverAPI an optional part of the interface
    490fee7d45 api/types/filters: fix errors not being matched by errors.Is()
    bf48d3ec29 update containerd binary to v1.7.3
    a78381c399 update containerd binary to v1.7.2
    0d76fc431a libnetwork/remote: newDriver(): return concrete type
    3e8fda0a70 windows: fix --register-service when executed from within binary directory
    d69b1fdb72 volume/mounts: cleanup tests
    da9e44a620 libnet/d/bridge: Allow IPv6 ICC from any IP address
    31d09f6ee9 testutils: move Logger interface to testutils
    492c09276d tests: Move libnetwork/testutils to internal/testutils/netnsutils
    13180c1c49 daemon/list: Drop unused arg from containerReducer
    68991ae240 daemon/list: Refactor refreshImage
    e5cffc07b3 c8d: Fix TestImagesFilterMultiReference
    1d8108b009 c8d: images/json, add image labels to the response
    a0bba26919 c8d: Populate RepoTags instead of adding a new image to the list
    ad2760ec80 integration: Move image filter tests to integration
    4d8e3f54cc c8d/container: Follow snapshot parents for size calculation
    5a39bee635 daemon/list: Replace ErrImageDoesNotExist check
    7379d18018 c8d/readConfig: Translate c8d NotFound to errdefs
    f3b76bc1da daemon: refactor buildNetworkResource to use a struct-literal
    a8c0b05052 daemon: split buildDetailedNetworkResources into two functions
    8caf974dcd daemon: refactor buildEndpointResource
    437ced91ec daemon: refactor buildIpamResources
    ca5ac19ea4 daemon: refactor buildPeerInfoResources
    02dc5ea720 libnetwork/datastore: remove Store.KVStore()
    0f7bf67f83 pkg/plugins: TestGet(): use sub-tests
    e1ad4aa002 pkg/plugins: make package-level socketsPath var a LocalRegistry field
    5bd44cf3c4 pkg/plugins: remove "load()" function
    77c03221c9 pkg/plugins/transport: remove RequestFactory interface
    d12ec5f796 pkg/plugins/transport: remove unused Transport interface
    dfd331b2c8 pkg/plugins/transport: export httpTransport, and return concrete type
    77103c7c03 pkg/plugins/transport: inline newHTTPRequest
    4af4adc7ba pkg/plugins: remove LocalRegistry.SpecsPaths()
    a44c25c2f1 pkg/plugins: split exported from implementation
    954d50b88a plg/plugins: rename vars that collided, or poorly cased
    20889dbac6 pkg/plugins: move Plugin.ScopedPath to platform-agnostic file
    a5ee0d6af8 libnetwork: don't access KVStore directly in tests
    b378669836 libnetwork/datastore: don't access KVStore directly in tests
    65978e6982 libnetwork/datastore: cleanup tests
    478f4aed63 libnetwork/datastore: ScopeCfg.IsValid(): un-wrap conditions
    37cbdeb1f2 libnetwork: remove most of kvstore
    d713b7ed45 api/server/router/network: remove unused Backend.FindNetwork
    1bc7a2aacd daemon/containerd: ImageService. LoadImage fix stray slash in comment
    126a089382 vendor: github.com/opencontainers/runtime-spec v1.1.0
    42fa7a1951 Integration test for capabilities
    5ef9e2632f libnetwork/datastore: prevent data races in Key()
    48cc28e4ef hack/integration: Add TEST_INTEGRATION_FAIL_FAST
    f70e1b315f libnetwork/datastore: remove unused ParseKey() utility
    704a19b25d libnetwork/datastore: remove DataStore interface
    d5b1e43b8f libnetwork/datastore: move MockData to a _test file
    0ec73a7892 vendor: github.com/moby/buildkit v0.11.7-dev
    64c6f72988 libnetwork: remove Network interface
    edafcb2c39 libnetwork/iptables: un-export ErrConntrackNotConfigurable, IsConntrackProgrammable
    e57b807a42 libnetwork: Controller.NewNetwork: inline arrangeUserFilterRule()
    be8ff186d6 libnetwork: refactor TestErrorInterfaces into a test
    9484520327 libnetwork: arrangeUserFilterRule: don't return early
    a5f45b47a3 libnetwork: Controller: combine iptablesEnabled and ip6tablesEnabled
    483a1933a2 volume: remove the short RRO forms in favor of the long forms
    5da84141c4 vendor: github.com/prometheus/common v0.42.0
    44ab4d44e0 vendor: github.com/prometheus/procfs v0.9.0
    6791b8051a vendor: github.com/felixge/httpsnoop v1.0.3
    9d3590f375 vendor: github.com/Microsoft/go-winio v0.6.1
    35d180126a vendor: google.golang.org/protobuf v1.30.0
    b835c28383 vendor: golang.org/x/oauth2 v0.6.0
    3cfc1ffb0a pkg/ioutils: some cleanups in tests
    df86d855f5 Dockerfile: update runc binary to v1.1.8
    f5e64a9eaa vendor: github.com/containerd/stargz-snapshotter/estargz v0.14.3
    d431345bf3 vendor: google.golang.org/protobuf v1.29.1
    30916df3d3 vendor: github.com/containerd/ttrpc v1.2.2
    4f4dd2d995 vendor: github.com/containerd/go-cni v1.1.9
    287130a254 vendor: github.com/cenkalti/backoff/v4 v4.2.0
    7145129f27 vendor: k8s.io/klog/v2 v2.90.1
    410a52b763 vendor: github.com/fsnotify/fsnotify v1.6.0
    741c28ae9f vendor: github.com/containerd/cgroups v1.1.0
    e84b72710b vendor: github.com/aws/aws-sdk-go-v2/config v1.18.16
    e235763a38 vendor: github.com/aws/aws-sdk-go-v2/credentials v1.13.16
    4c30bf1667 vendor: github.com/aws/aws-sdk-go-v2 v1.17.6
    cb53ce9f89 vendor: github.com/aws/smithy-go v1.13.5
    f463e50719 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1
    359ab384fd vendor: google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4
    b11bdb9212 vendor: cloud.google.com/go/logging v1.7.0
    64609120d8 vendor: github.com/googleapis/gax-go/v2 v2.7.0
    2990defea7 vendor: go.opencensus.io v0.24.0
    d7aa47ddb8 vendor: github.com/googleapis/enterprise-certificate-proxy v0.2.3
    296040b1f4 vendor: github.com/cespare/xxhash/v2 v2.2.0
    033f882314 vendor: golang.org/x/oauth2 v0.5.0
    b615d195b2 vendor: github.com/golang/protobuf v1.5.3
    c5c8f433e6 vendor: github.com/containerd/typeurl/v2 v2.1.1
    2659f7f740 c8d/inspect: Include platform Variant
    a8fd1e3135 Dockerfile: update compose to v2.20.1
    d78893921a Dockerfile: update buildx to v0.11.2
    f3a6b0fd08 c8d: Make sure the content isn't removed while we export
    6cba44277f AUTHORS,.mailmap: update with recent contributors
    8b843732b3 pkg/chrootarchive: fix FreeBSD build
    eaf141c86a c8d/resolveImage: Fix Digested and Named reference
    028eab9ebb c8d/inspect: Don't duplicate digested ref
    7310a7cd0c ci(buildkit): remove early-return from buildkit-ref
    4ecc01f3ad ci(buildkit): remove misleading code from buildkit-ref
    48ff8a95cc hack/with-go-mod.sh: warn on stderr
    750c441dfd daemon: remove intermediate var
    468d6616bf daemon: configureLocalContentStore: return concrete types
    375c4eb31c daemon: rename vars that shadowed package-level types
    034e7e153f daemon: rename containerdCli to containerdClient
    1aa17222e7 quota: remove gotest.tools from testhelpers
    a972dbd682 hack/make/.binary: use with-go-mod.sh
    5563b09ac2 hack: use Git-free ROOTDIR convention
    780e8b2332 hack/d/cli.sh: properly handle errors in curl
    12a19dcd84 Dockerfile: improve CLI/rootlesskit caching
    235cd6c6b2 Dockerfile(.simple): align APT_MIRROR support
    bcea83ab9b Makefile: pass through APT_MIRROR
    f8c0d92a22 ci: extract buildkit version correctly with replace-d modules
    010c3718e3 vendor: github.com/tonistiigi/fsutil v0.0.0-20230629203738-36ef4d8c0dbb
    531dbd7af5 vendor: github.com/containerd/continuity v0.4.1
    eb68c5e747 daemon: support using CIDR notation for getting registry hosts
    e0b065cc33 daemon: use the registry service config for getting registry hosts
    2da589d454 client: return explicit "nil" for no errors, and remove nil check
    738b16d873 libnetwork/config: add Config.DriverConfig() and un-export DriverCfg
    82bb3d8d2b libnetwork: TestUserChain: use assert.Check and is.ErrorContains
    4e709e75da libnetwork: TestUserChain: re-use IPTables instances
    c471255153 libnetwork: TestUserChain: don't manually manipulate Controller.cfg.DriverCfg
    ddd33c6bbd libnetwork/iptables: move IPTable.LoopbackByVersion() to a utility
    aad2dbb93d libnetwork/iptables: GetIptable: validate provided IPversion
    47063ca3ae libnetwork/iptables: un-export IPTable.Version
    9c2cd65c0d libnetwork/iptables: make some vars local, and move bestEffortLock lock
    93d050f504 libnetwork/iptables: NewChain, RemoveExistingChain: validate chain, table
    ad0c928ab5 libnetwork/iptables: resetIptables(): don't pass empty table name
    1198fe8f6b libnetwork/iptables: un-export FirewalldInit
    20900b76f9 libnetwork/iptables: make xLockWaitMsg a const
    995da1e51d libnetwork/iptables: group "enum" consts per type
    c74a083672 libnetwork/iptables: IPTable.ExistChain(): remove redundant if/else
    9f9d57590b libnetwork: getTestEnv(): use literals for options
    534858aaed libnetwork/drivers: rewrite some strings to reduce quote-escaping
    7c360778bb libnetwork/drivers/bridge: driver.configure: remove redundant err-check
    e21ff6c0c9 libnetwork/config: remove IsValidName utility
    948f55d0b7 libnetwork/options: remove unused NewGeneric, and use map[string]any
    fa5c13542c libnetwork/drivers/bridge: setupBridgeNetFiltering: improve error handling
    077049d0b9 client: WithTLSClientConfig: return early if no transport is set
    6846c63252 client: WithTLSClientConfig, WithTLSClientConfigFromEnv: inline vars
    9d1e690751 client: TestGetAPIPath: don't use un-keyed structs
    6552441b46 client: TestClientRedirect: cleanup
    8d514f4e2e client: touch-up docs, and user doc-links
    c219b09d4a client: Client.postHijacked: use Client.buildRequest
    e11555218b client: Client.setupHijackConn: explicitly ignore errors
    41f235a2f8 gha: add note about buildkit using older go version
    1ead2dd35d update go to go1.20.6
    e1db9e9848 testutil: use dummyhost for non-tcp connections
    6b7705d5b2 pkg/plugins: use a dummy hostname for local connections
    92975f0c11 client: define a "dummy" hostname to use for local connections
    2a59188760 client: TestSetHostHeader: don't use un-keyed literals
    f93cfb2e31 Support for health start interval to swarm mode
    16e6d8af55 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5
    79c72390b9 integration/container: use subtests for TestAttach
    f9e2eed55d integration: Don't env cleanup before parallel subtests
    cdac084fb4 Add t.Helper() to the cli test helper functions
    c395496e06 testutil: rename variable that collided with import
    1370b3c679 client: minor test improvements for requests
    f7f0a17ea2 client: TestSetHostHeader: use sub-tests
    2cb982b506 pkg/plugins: run tests with t.Parallel()
    b39362295a pkg/plugins: don't share plugin server between tests
    ee9fe2c838 ci(buildkit): match moby go version for buildkit tests
    3379414c76 vendor: github.com/moby/buildkit@v0.11 (0a15675)
    5e4878ed2b Dockerfile/shell: install compose cli plugin
    ecfa4f5866 ci(bin-image): add SHA-based tags
    ce2e6b5cda Bump container-device-interface dependency to v0.6.0
    0a126a85a4 ci(bin-image): fix meta step
    749d7449f9 ci(bin-image): fix typo
    1686540594 ci(bin-image): don't set tags when pushing by digest
    83477ce8d0 client: remove custom "headers" type, and use "http.Header" instead
    e4ce676d3d client: ServiceCreate, ServiceUpdate: omit "version" header on API >= 1.30
    d29240d9eb libnet: Return a 403 when overlay network isn't allowed
    21dcbada2d libnet: Return proper error when overlay network can't be created
    93853eca94 pkg/fileutils: GetTotalUsedFds(): slight optimization for macOS
    c5c977855d registry: session.searchRepositories(): return typed error, and small cleanup
    68ebfa2f18 registry: session.searchRepositories(): log actual search URL
    27698f1d13 registry: ParseSearchIndexInfo: remove redundant error-handling
    a0e1155b28 daemon/containerd: fix assignment to entry in nil map during commit
    6b1b71ced4 Disable tls when launching dockerd through hack/make.sh
    079a9d4562 Sort unconsumed build arguments before usage
    41261ea4ec ci: push bin image to Docker Hub
    5b3acc15d1 libnetwork: drop legacy driver cruft
    f9a83daebb libnetwork: delete package bitseq
    8b167535db libnetwork: delete package idm
    7366e44019 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05
    a490248f4d daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume
    c90229ed9a api/types: move system info types to api/types/system
    3aef732e61 Do not drop effective&permitted set
    d519bde5da libnet/drivers: stop passing config to drivers...
    1980deffae libn: refactor platform driver registration
    c87c4b5bbf Add Albin Kerouanton (@akerouanton) as maintainer
    0066138379 Add Kevin Alvarez (@crazy-max) as maintainer
    d8056ddecd Add Laura Brehm (@laurazard) as maintainer
    2216d3ca8d Add health start interval
    2ab2503b6c Put integration daemon socket in /run
    914888cf8b Improve test daemon logging
    51bcf5954f libnet/d/overlay: parse VNI list w/o allocating
    96ca669fa4 libnet/d/overlay: extract VNI option parsing...
    a940462fc7 libnetwork/drivers/bridge: minor cleanups for iptables funcs
    6817b3697b libnetwork/iptables: signalHandler(): use s switch
    51bbcdb3c5 libnetwork/iptables: merge Conn.initConnection into newConnection
    0921360133 libnetwork/iptables: checkRunning(): use early return
    98592608d4 libnetwork/iptables: remove unused Ebtables const
    126525c03e libnetwork/iptables: TestReloaded(): minor cleanup
    b216669a02 libnetwork/iptables: TestPassthrough(): skip without firewalld
    753c190ef9 libnetwork/drivers/bridge: rename vars that collided with type
    d1ebe6689f libnetwork/iptables: errors should not be capitalized
    afe8d3076f libnetwork/iptables: remove ErrIptablesNotFound
    16f80f649b libnetwork/iptables: ChainInfo: don't pass whole IPTable as value
    42653787ea libnetwork/iptables: ChainInfo.Output(): explicitly suppress errors
    ea4baa24b1 libnetwork/iptables: IPTable.RemoveExistingChain() slight refactor
    04e54c6bb0 libnetwork/iptables: IPTable.exists(): return early on error
    829374337f libnetwork/iptables: don't use err.Error() if not needed
    9717734d1c libnetwork/iptables: IPTable.NewChain() minor cleanups
    9bb0e7a5ee libnetwork/iptables: inline some args
    564a13285f libnetwork/bitmap: improve documentation
    0fc6bf9a6e libn/d/o/ovmanager: assign vxlans using bitmap pkg
    f0127f1617 libn/d/o/ovmanager: inline obtainVxlanID method
    e97492e579 libn/d/o/ovmanager: drop mutex from network type
    6fb6635ceb libn/d/o/ovmanager: make mutexes private fields
    cdcb7c28c5 integration: disable iptables in parallel tests
    9cee34bc94 pkg/plugins: make unit test less time sensitive
    3721a525ce daemon: initBridgeDriver(): pass BridgeConfig, instead of daemon config
    b8220f5d0d daemon/config: move MTU to BridgeConfig
    11abd0742e dockerd: "--mtu": update description, hide on Windows and warn if set
    6944d2dddb libnetwork: TestBoltdbBackend(): use t.TempDir()
    2fd88c7ca4 libnetwork: inline store config options
    cda187222e libnetwork/config: remove options that were only used in tests
    bc80c5d067 libnetwork: rename vars that shadowed with pkg vars and imports
    332ffe8d74 libnetwork/networkdb: NetworkDB.Watch(): remove unused "key" argument
    4c4149a09c libnetwork/internal/kvstore: remove unused Delete()
    4d09e60f5b libnetwork/internal/kvstore: remove unused Watch() method
    c14a9f5b3d libnetwork/datastore: un-export Mutex
    e21e802fc6 libnetwork/datastore: remove unused DeleteTree() method
    58d2f21dae libnetwork/datastore: remove unused PutObject(), DeleteObject()
    a3b0181503 libnetwork/datastore: remove Watch(), Watchable(), RestartWatch()
    2409a36e29 libnetwork/datastore: cache.get(): remove unused "key" argument
    824abbf8d9 libnetwork/datastore: remove redundant datastore.sequential
    e9b6965079 libnetwork/datastore: remove unused datastore.Active()
    b32e41f016 libnetwork/internal/kvstore/boltdb: un-export Mutex
    7e7c7bbc17 libnetwork/internal/kvstore/boltdb: BoltDB.List(): minor cleanup
    95b96eebdd libnetwork/internal/kvstore/boltdb: BoltDB.Get(): don't shadow error
    fb61b07bcf libnetwork/internal/kvstore/boltdb: BoltDB.Exists(): fix error handling
    c94ccd4207 libnetwork/internal/kvstore/boltdb: minor cleanup/refactor
    acfd3934a7 libnetwork/internal/kvstore: AtomicDelete(): remove unused "deleted" return
    b576682bdc libnetwork/internal/kvstore: AtomicPut(): remove unused "created" return
    c37b58bbc3 libnetwork/internal/kvstore: remove unused WriteOptions
    e515bef423 libnetwork/internal/kvstore: remove unused WatchTree and NewLock methods
    a373983a86 libnetwork/internal/kvstore: fix some linting issues
    05988f88b7 libnetwork/internal/kvstore: remove unused Config options
    ec11aea880 pkg/jsonmessage: use string-literals for easier grep'ing
    fded42c3bd pkg/ioutils: use string-literals for easier grep'ing
    1da079f211 pkg/idtools: use string-literals for easier grep'ing
    84000190d3 opts: use string-literals for easier grep'ing
    ddec605aef integration: use string-literals for easier grep'ing
    96a1c444cc libnetwork: use string-literals for easier grep'ing
    0db4a32b9c daemon/cluster: use string-literals for easier grep'ing
    4e69e16fde client: use string-literals for easier grep'ing
    c3d533f37f cli/debug: use string-literals for easier grep'ing
    02815416bb daemon: use string-literals for easier grep'ing
    6331a3a346 integration-cli: use string-literals for easier grep'ing
    2f61620339 builder/builder-next: use string-literals for easier grep'ing
    202907b14c builder/dockerfile: use string-literals for easier grep'ing
    a1c9a686b0 api: use singleflight for /info endpoint
    8846c7e0ae daemon/cluster/executor/container: fix mixed pointer/value receiver
    8ea78b34ab rename some variables that shadowed imports or package types
    9f4acceb6a remove redundant alias for libnetwork/datastore imports
    cffe563d4d pkg/system: remove windows stubs for MkDev/MkNod
    6b6fed06b1 integration: don't use pkg/system MkNod/mkDev
    94c975e25a api: info: don't use ad-hoc type for compatibility with old api versions
    9ffca1fedd libnetwork/drivers/remote: rename vars that collided
    f6258f70cb docs: api  v1.28 - v1.40: add missing "force" query arg on plugin disable
    892e9f2c23 docs: api v1.41: add missing "force" query arg on plugin disable
    a4bdfb963f docs: api v1.42: add missing "force" query arg on plugin disable
    85ccb25eb8 docs: api v1.43: add missing "force" query arg on plugin disable
    aba8e04ab1 docs: api: amend changelog for API 1.28 for "force" option
    7055244547 docs: api v1.32 - v1.40: remove outdated information from ServerVersion
    ed0dbb8518 docs: api v1.41: remove outdated information from ServerVersion
    b770a50dee docs: api v1.42: remove outdated information from ServerVersion
    18d77ff455 docs: api v1.43: remove outdated information from ServerVersion
    92f1ddaf0a api: remove outdated information from ServerVersion
    e8f206972a docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields
    e58a60902c docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields
    3c905d0db9 api: remove "ClusterStore" and "ClusterAdvertise" fields
    e4d809b2b0 vendor: github.com/tinylib/msgp v1.1.8
    f379af6d17 vendor: github.com/containerd/cgroups/v3 v3.0.2
    e638351ef9 c8d/prune: Handle containers started from image id
    a93298d4db c8d/prune: Exclude dangling tag of the images used by containers
    a6d5db3f9b c8d/softDelete: Deep copy Labels
    2b0655a71a c8d/softDelete: Extract ensureDanglingImage
    a96e6044cc testutil/environment: Add GetTestDanglingImageId
    13472c6cf1 daemon/config: remove unused CommonConfig.Context
    40908c5fcd libnetwork/drivers: inline capabilities options
    97285711f3 libnetwork/drivers/overlay: Register does not require DriverCallback
    a718ccd0c5 libnetwork/drivers: remove unused "config" parameters and fields
    264dbad43a gha: don't fail if no daemon.json is present
    ec79d0fc05 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up
    eaa9494b71 pkg/fileutils: GetTotalUsedFds: reduce allocations
    03390be5fa pkg/fileutils: add BenchmarkGetTotalUsedFds
    252e94f499 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD
    7747327561 AUTHORS,.mailmap: update with recent contributors
    60d2eeaa5b MAINTAINERS: update my email
    a764cd5a40 pkg/chrootarchive: format code with gofumpt
    210932b3bf daemon: format code with gofumpt
    e236994b76 daemon/snapshotter: format code with gofumpt
    9213e35011 daemon/containerd: format code with gofumpt
    4b3900a257 daemon/logger: format code with gofumpt
    050de1e4f6 daemon/logger/journald: format code with gofumpt
    a083677af2 daemon/logger/local: format code with gofumpt
    74db0e9339 daemon/logger/loggertest: format code with gofumpt
    48124bac18 daemon/logger/loggerutils: format code with gofumpt
    011a32a4ad daemon/logger/gelf: format code with gofumpt
    7ed5a30b5c daemon/logger/splunk: format code with gofumpt
    bb5a1eb99d daemon/logger/jsonfilelog: format code with gofumpt
    1437037ed2 daemon/logger/awslogs: format code with gofumpt
    f930559076 pkg/stdcopy: format code with gofumpt
    1216328c2d pkg/plugins: format code with gofumpt
    651086d1d9 pkg/jsonmessage: format code with gofumpt
    1291bbfa50 pkg/capabilities: format code with gofumpt
    79af23e1ea pkg/ioutils: format code with gofumpt
    ac1514abf4 reference: format code with gofumpt
    99968eec3f restartmanager: format code with gofumpt
    f18ac2d0bc quota: format code with gofumpt
    b2663a0f73 layer: format code with gofumpt
    83b2daca6a plugin: format code with gofumpt
    169fab5146 profiles/seccomp: format code with gofumpt
    4175a550fd libcontainerd: format code with gofumpt
    091991606a opts: format code with gofumpt
    784ba59a08 registry: format code with gofumpt
    dd5ea7e996 libnetwork: format code with gofumpt
    bba21735bf libnetwork/ipamutils: format code with gofumpt
    0b75c02276 libnetwork/resolvconf: format code with gofumpt
    801cd50744 libnetwork/portallocator: format code with gofumpt
    6187ada21f libnetwork/options: format code with gofumpt
    882f7bbf1f libnetwork/osl: format code with gofumpt
    32e716e848 libnetwork/networkdb: format code with gofumpt
    65e2149b3e libnetwork/netutils: format code with gofumpt
    1cd937a867 libnetwork/etchosts: format code with gofumpt
    540e150e4e libnetwork/cmd: format code with gofumpt
    fffcbdae4c libnetwork/iptables: format code with gofumpt
    6f3fcbcfe1 libnetwork/ipam(s): format code with gofumpt
    eb6437b4db libnetwork/datastore: format code with gofumpt
    defa8ba7b4 ibnetwork/bitmap: format code with gofumpt
    f349754b55 libnetwork/bitseq: format code with gofumpt
    3af2963c74 libnetwork/drvregistry: format code with gofumpt
    dc17f5e613 libnetwork/drivers/remote: format code with gofumpt
    485977de57 libnetwork/drivers/windows: format code with gofumpt
    2cc5c2d2e6 libnetwork/drivers/overlay: format code with gofumpt
    e74028554e libnetwork/drivers/macvlan: format code with gofumpt
    7b02ccda86 libnetwork/drivers/ipvlan: format code with gofumpt
    17a35bc645 libnetwork/drivers/bridge: format code with gofumpt
    d2a6956afb daemon/graphdriver: format code with gofumpt
    8d923c60b9 daemon/config: format code with gofumpt
    425ccb1241 runconfig: format code with gofumpt
    c0edf0861b integration/system: format code with gofumpt
    5cc1c6eca0 integration/service: format code with gofumpt
    bb5ace2efb integration/plugin: format code with gofumpt
    9bd3e011e1 integration/internal: format code with gofumpt
    89a4e6b889 integration/container: format code with gofumpt
    846bcd7dd1 distribution: format code with gofumpt
    b7f5db432f daemon/images: format code with gofumpt
    2d12dc3a58 daemon/cluster: format code with gofumpt
    316c7331eb pkg/parsers: format code with gofumpt
    fb017754e1 pkg/system: format code with gofumpt
    ee2ac6c205 cmd/dockerd: format code with gofumpt
    47276bdb28 cmd/docker-proxy: format code with gofumpt
    0af6d9e291 client: format code with gofumpt
    3146ecbae6 api/types: format code with gofumpt
    b9833a2059 builder: format code with gofumpt
    540d6539be builder/remotecontext: format code with gofumpt
    3e0565e17c builder/dockerfile: format code with gofumpt
    9d4abbbc30 builder/builder-next: format code with gofumpt
    6592646632 api/server: format code with gofumpt
    5e9a354ff1 pkg/tarsum: format code with gofumpt
    2aac054f52 pkg/authorization: format code with gofumpt
    f7552f1de4 pkg/archive: format code with gofumpt
    7c697f58f2 Makefile: remove unused BUILD_APT_MIRROR
    a1d2132bf6 Dockerfile: use default apt mirrors
    225e2562c9 integration-cli: format code with gofumpt
    a31411c679 testutil: format code with gofumpt
    4c281fb29a volume: format code with gofumpt
    a08abec9f8 Update dockerd to support JSON logging format
    b335e3d305 seccomp: add name_to_handle_at to allowlist
    6d3bcd8017 c8d/images: handle images without manifests for default platform
    8caf63896c docs: document more buildx targets
    647c2a6cdd Restore active mount counts on live-restore
    d8bc5828cd gha: Setup Runner: add missing sudo
    fdc9b7cceb remove name_to_handle_at(2) from filtered syscalls
    9f6dbbc7ea Dockerfile: make cli stages more resilient against unclean termination
    19bd0730ef vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa
    e2dad6c3ff Revert "Temporarily skip DCO check"
    1741771b67 Skip cache lookup for "FROM scratch" in containerd
    7d7225fae6 Temporarily skip DCO check
    e60cda7051 libnetwork/internal/kvstore/boltdb: fix linting issues
    d18b89ced6 libnetwork/internal/kvstore: remove some unused code
    b873d70369 replace libkv with local fork
    5d25143ef3 libnetwork/kvstore: rewrite code for new location
    dd1c95edcd integration/windows: Unskip some kill tests
    3c1de2e667 pkg/homedir: deprecate Key() utility
    ddd9665289 pkg/homedir: deprecate GetShortcutString() utility
    6876e45f9e pkg/homedir: unify implementations
    0aca7f2a0d pkg/homedir: use os.UserHomeDir()
    0215a62d5b integration-cli: don't use pkg/homedir in test
    76d8bfdff4 testutil/environment: remove Execution.OSType field
    325786430b testutil/environment: remove unused TEST_OSTYPE env-var
    0fe2ac0437 testutil/environment: rename var that collided with import
    74da6a6363 Switch all logging to use containerd log pkg
    cdb1293eea Fix missing Topology in NodeCSIInfo
    165dfd6c3e daemon: fix restoring container with missing task
    786c9adaa2 daemon: fix double-unlock in health check probe
    3b28a24e97 daemon: fix panic on failed exec start
    e010223186 contrib/busybox: Update to FRP-5007-g82accfc19
    21e50b89c9 builder: pass host-gateway IP as worker label
    21c0a54a6b c8d: mark stargz as requiring reference-counted mounts
    4d831949a7 Dockerfile: update buildx to v0.11.0
    fc94ed0a86 don't cancel container stop when cancelling context
    19d860fa9d testing: temporarily pin docker-py tests to use "bullseye"
    cfa08f8366 builder-next: enable OTLP tracing for history records
    98a44bb18e update go to go1.20.5
    3ba67ee214 daemon: registerName(): don't reserve name twice
    2a6ff3c24f Use OCI "History" type instead of inventing our own copy
    59b5c6075f pkg/rootless: remove GetRootlessKitClient, and move to daemon
    3cc5d62f8a run `getent` with a noop stdin
    71589848a0 daemon: test runtimeoptions runtime options
    a6048fc792 client: add WithUserAgent() option
    197b0b16e3 vendor: github.com/sirupsen/logrus v1.9.3
    038a361a91 daemon/cluster: convert new BindOptions
    d41d2c3751 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed1876
    32d58144fd c8d: Use reference counting while mounting a snapshot
    8a094fe609 daemon: ensure OCI options play nicely together
    dea870f4ea daemon: stop setting container resources to zero
    8c4dfc9e6a vendor: github.com/rootless-containers/rootlesskit v1.1.1
    0b1c1877c5 update RootlessKit to v1.1.1
    9ff169ccf4 daemon: modernize oci_linux_test.go
    0f9c8e684a Dockerfile: Move dockercli to base-dev
    5433b88e2d hack/cli.sh: Quiet origin cleanup
    800ea039ec contrib/check-config: move xt_bpf check to overlay section
    49f76a34b5 Dockerfile/shell: Install buildx cli plugin
    17c99f7164 Dockerfile: Use separate cli for shell and integration-cli
    1910fdde81 contrib/check-config: check for xt_bpf
    d63569c73d builder-next: Set moby exporter as default
    4295806736 c8d/handlers: Handle error in walkPresentChildren
    ff2342154b Dockerfile: use COPY --link for source code as well
    0f6eeecac0 daemon: consolidate runtimes config validation
    d222bf097c daemon: reload runtimes w/o breaking containers
    0b592467d9 daemon: read-copy-update the daemon config
    742ac6e275 daemon: make config reloading more transactional
    038449467e Update BuildKit registry config on daemon reload
    982e4fb448 api/server: get features from a callback fn
    d099e47e00 containerd: add c8d version and storage-driver to User-Agent
    a6da1480b5 dockerversion: DockerUserAgent(): allow custom versions to be passed
    9a1f2e6d7c dockerversion: remove insertUpstreamUserAgent()
    ff40d2d787 dockerversion: simplify escapeStr()
    eb9a5392bc dockerversion: add a basic unit-test
    66137ae429 containerd: set user-agent when pushing/pulling images
    06aaf87aab vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b
    637ca59375 Dockerfile: use COPY --link to copy artifacts from build-stages
    4d3238dc0b c8d/load: Don't unpack pseudo images
    b08bff8ba3 c8d/load: Use walkImageManifests
    5210f48bfc c8d/list: Use walkImageManifests
    fabc1d5bef c8d: Add walkImageManifests and ImageManifest wrapper
    1178319313 libn: fix resolver restore w/ chatty 'iptables -C'
    50eb2d2782 libnetwork: fix sandbox restore
    18bf3aa442 libnetwork: log why osl sandbox restore failed
    ed32f5e241 Make sure the image is unpacked for the current snapshotter
    d58df1fc6c Update blogpost URL
    44124ab6b0 builder/remotecontext: remove CachableSource, NewCachableSource
    5efe72415d remove Dockerfile.e2e
    fd72b134d5 update generated files
    735537d6b1 replace gogofast with gogofaster extension
    1eaea43581 fix protos and "go generate" commands
    7daaa00120 hack: generated files update and validation
    f1ca793980 use tools build constraint for proto dependencies
    1e55ace875 Add oci index and layout files to exported tars
    487ea81316 Fix npe in exec resize when exec errored
    9a692a3802 libn/d/overlay: support encryption on any port
    e410e27547 builder/remotecontext: remove mimeTypes struct, use consts
    b42e367045 vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    37d4b0bee9 builder/remotecontext: deprecate CachableSource, NewCachableSource
    fb7ec1555c libcontainerd: work around exec start bug in c8d
    79ca6630d4 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f
    5045a2de24 Support recursively read-only (RRO) mounts
    3512b04093 vendor: github.com/containerd/go-runc v1.1.0
    b9b8b6597a c8d/inspect: Fill `Created` time if available
    f17c9e4aeb c8d: ImageService.softImageDelete: rename var that collided with import
    df5deab20b c8d: ImageService.softImageDelete: use OCI and containerd constants
    9b9c5242eb daemon: lock in snapshotter setting at daemon init
    53d1b12bc0 hack/make/.binary: don't use "netgo" when building Windows binaries
    a7bc65fbd8 c8d/pull: Use same progress action as distribution
    6506579e18 integration: Add TestImageInspectEmptyTagsAndDigests
    a93aadc2e6 hack: Rename .ensure-emptyfs to .build-empty-images
    3a31f81838 hack/ensure-emptyfs: Create dangling image
    4373547857 Add testenv.UsingSnapshotter utility
    d3d2823edf Dockerfile: temporarily skip CRIU stage
    86108812b8 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1
    ddd67b2535 Make image save more like the OCI layout for blobs
    871cf72363 libnetwork: check for netns leaks from prior tests
    6d79864135 libnetwork/osl: restore the right thread's netns
    d4f3858a40 libnetwork: leave global logger alone in tests
    0cc6e445d7 libnetwork: make resolver tests less confusing
    411a9e1b86 daemon: remove devicemapper driver-warnings
    424a1c5d21 daemon: remove warning for overlay/overlay2 without d_type
    ab35df454d remove pre-go1.17 build-tags
    34964c2454 c8d/list: Show layerless images
    61757032da d/graphdriver/vfs: fix unit test
    6e4bd3bbc2 vendor: github.com/spf13/cobra v1.7.0
    6690d2969c pkg/archive: bail if setting xattrs is unsupported
    0cdfd5f275 pkg/system: return rich errors from L(g|s)etxattr
    41356227f2 libnetwork: just forward the external DNS response
    6d139e5e95 build: use daemon id as worker id for the graph driver controller
    668af4be82 ci(bin-image): distribute build across runners
    1be26e9f0c api/inspect: Fix nil RepoTags and RepoDigests
    f450ea64e6 fix: `docker pull` with platform checks wrong image tag
    f3645a2aa3 reorder load funcs to match newServiceConfig()'s order
    3b15156e4d add mirror to daemon reload test for insecure registries
    0d8087fbbc Remove Upstart scripts
    967c7bc5d3 api/server: allow empty body for POST /commit again
    3ceb3810d7 client: don't marshal typed nils in request body
    ae737656f9 Remove Upstart and cgroups bits from Debian sysvinit script
    c2630c93f2 Update vendoring
    dedf5747cc Remove need to set Capabilities for cdi driver
    7ec9561a77 Add support for CDI devices to docker daemon under linux
    5a200ade7c Rename daemon/devices_liunx.go to daemom/devices.go
    484785456c update containerd binary to v1.7.1
    348a79958d c8d: The authorizer needs to be set even if AuthConfig is empty
    2f0ba0a7e5 more robust dockerd-rootless-setuptools.sh
    135d8f04f9 ci: bin-image workflow
    ae1ca67178 bin-image bake target
    3309e45ca1 c8d: Don't create authorizer for empty AuthConfig
    2ad499f93e c8d/authorizer: Default to docker.io
    bd6868557d c8d/builder: implement cache
    7821d2d788 vendor: github.com/docker/distribution v2.8.2
    e46674b6a7 c8d: implement classic builder
    8d76acfe6c testutil: replace uses of client.IsErrNotFound
    56fb56ccf0 integration: update error-assertions in tests
    0538cdd226 integration-cli: update error-assertions in tests
    66ff1e063e client: update error-assertions in tests
    685b3d820a client: make IsErrNotFound an alias for errdefs.IsNotFound
    9e817251a8 libnetwork/docs: fix broken link
    17882ed614 libnetwork: update example in README.md
    4603b6d6b6 c8d: fix image history for dangling images
    4e0319c878 [chore] clean up reexec.Init() calls
    9e43c11480 AUTHORS: regenerate
    5fee4439a0 .mailmap: update with my new email
    e8be792130 c8d: fix missing image history
    e3e715666f pkg/aaparser: deprecate GetVersion, as it's no longer used
    71d7908656 added alias validation
    ecaab085db profiles/apparmor: remove use of aaparser.GetVersion()
    f445ee1e6c contrib/apparmor: remove remaining version-conditionals (< 2.9) from template
    307b09e7eb fixing consistent aliases for OCI spec imports
    2ad37e1832 daemon: handleContainerExit(): add execDuration in attributes
    cad97135b3 c8d: implement missing image delete logic
    de363f1404 daemon: handleContainerExit(): use logrus.WithFields
    fb96b94ed0 daemon: remove handling for deprecated "oom-score-adjust", and produce error
    316781be48 api/types/container: remove deprecated ContainerChangeResponseItem
    9c14f98583 api/types: remove deprecated AuthConfig
    55608d8381 pkg/system: remove deprecated IsProcessAlive, IsProcessZombie, KillProcess
    a3b12ec420 pkg/system: remove deprecated DefaultPathEnv()
    dc76b90705 pkg/system: remove deprecated MemInfo, ReadMemInfo()
    7d0488b11e pkg/ioutils: remove deprecated TempDir() alias
    152c482fee pkg/platform: remove deprecated OSType const
    913b0f51ca API: omit deprecated VirtualSize field for API v1.44 and up
    fdc7a78652 docs/api: version-history: also mention /system/df for VirtualSize
    fd0b109bf7 API: bump version to 1.44
    43b1afb2cf make chownComment easy to read
    7665feeb52 hack: enable Go modules when building dockerd and docker-proxy
    5400366b90 Set BuildKit version using buildinfo
    c33b31116c daemon/graphdriver: remove isDeprecated() utility
    dc11d2a2d8 remove deprecated devicemapper storage-driver
    1e195acee4 libn/d/overlay: stop programming INPUT ACCEPT rule
    eb0edeafdd api: swagger: add missing "force" query arg on plugin disable
    ea4dd1bbf6 boltdb/bolt is not maintained. Used bbolt
    6c0e0d6250 Allow client to set boltdb timeout
    a0f6d0798a Do not return boltdb bucket not found error
    deb21faad0 Add support for etcd authentication
    cc0ed694ee fix typo
    fbdb24ec6a Fix typo in error text
    dcf8828165 Return store.ErrKeyExists on AtomicPut
    002f9c37ca Synchronize boltbd libkv apis
    15e5d4067a Change unsupported call error in boltdb backend to use general store error
    3b5fb3ec87 Remove docs in libkv.go
    2603af65e5 Migration to the new Etcd client
    f06f78e638 boltDB AtomicDelete fails for non-existent key
    0b81042dc3 Add transient connection option to bolt db
    7225aba3af add TTL to consul lock using store.LockOptions and add tests for the Lock ttl behavior
    1f9cf17713 Fix AtomicPut panic if previous KVPair is not nil and key not exists in boltdb
    599deba8c7 nits and refactor for etcd tls config
    cc9e627f8e Add etcd TLS client code and update README.md. Signed-off-by: Adam Thornton <adam.thornton@gonkulator.io>
    64eb25dff9 Honoring ConnectionTimeout in boltdb
    3ec6dfa346 Refactor libkv to not directly import storage backends
    f817826408 Create dir first before opening data file of boltdb
    29af4e0f27 BoltDB backend support for libkv
    06f01227c5 change heartbeat/ephemeral combination to use a single ttl field
    f26e4f4c52 Minor fix of store comment
    6b43181cfa Notify user of supported backend storage
    a961b70b2b Remove unused type WatchCallback
    06151b8a4d add top-level godoc: sample some parts of the README
    a2d4e1c246 API Change: AtomicPut with previous = nil is create.
    fcb98254b1 Use Backend type for stores
    79c320c1cf remove testify dependency through mock package
    48f5dca2ce Remove logging in library
    dbc1a6fa9a refactor and move store backends in sub-packages

Bumping docker-cli to version v25.0.0-7-g01f933261, which comprises the following commits:

    21c12847b docs: move base command to docker.md
    22e1f2cbf docs: fix broken links to alias pages
    68abf14c1 vendor: github.com/docker/docker v25.0.0
    9e1e07657 docs: add documentation for CDI
    cdb1c105f vendor: github.com/docker/docker v25.0.0-rc.3
    3df149545 docs(plugins): fix typos and formatting
    22bbdc798 docs: add "builder" key to full daemon.json example
    d2efc5b09 deprecate old API versions (1.23 and lower)
    508346ef6 plugins: fix plugin socket being closed before use
    f722e07c6 gha: update to use macos-12 runners
    5f6c55a72 plugins: don't handle signal/notify if TTY
    26560ff93 Revert "plugins: run plugin with new process group ID"
    37f551566 docs: fix broken link to tmpfs (missing anchor)
    b35361e8d docs: regenerate stubs for non-canonical commands
    dfa2930af ci: Add bin-image workflow
    21c253605 vendor: golang.org/x/sys v0.16.0
    a6774de68 docs: rename cli reference aliases to canonical
    cf9d3692a docs: remove empty cli reference stubs
    d868dca00 vendor: github.com/docker/docker v25.0.0-rc.2
    1609916f2 Revert "Dockerfile/binary: Output the binary directly"
    ff25c4334 Revert "ci: Add bin-image workflow"
    ef5e5fa03 plugins: run plugin with new process group ID
    6d0b329b0 cli-plugins: use non-abstract socket on darwin
    dbf992f91 cli-plugins: move socket code into common package
    8b6ffbdf7 vendor: github.com/containerd/containerd v1.7.12
    ccc7ad2f2 Dockerfile: update buildx to v0.12.1
    fdcb78a0f Dockerfile: update docker compose to v2.24.0
    15d4c99f3 ci: Add bin-image workflow
    ecf338f43 scripts/build: Handle VERSION containing git ref
    6ad07f2a4 Dockerfile/binary: Output the binary directly
    0e37dd49f cmd/docker: registerCompletionFuncForGlobalFlags: take store.Store as argument
    c0a0b05dc cli-plugins: helloworld: rename var that collided with import
    11b2e871b cmd/docker: move main() to the top
    4dc2c895b cli-plugins/manager: getPluginDirs: take ConfigFile as argument
    79992184e docs: dockerd: rephrase environment-variables intro
    4d2b4e7fb docs: dockerd: fix stray column-separateor in env-var table
    a5e5563f1 vendor: github.com/docker/docker-credential-helpers v0.8.1
    4f4950886 update to go1.21.6
    26f59b2f6 cli/compose/loader: use golden.Assert() for readability
    9db56ea2f vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0
    efae960e5 vendor: golang.org/x/net v0.19.0
    996cce909 vendor: golang.org/x/sync v0.6.0
    4b10e5525 vendor: github.com/google/go-cmp v0.6.0
    1ebc233b4 vendor: github.com/creack/pty v1.1.21
    b4fe77a12 vendor: github.com/docker/go-connections v0.5.0
    909111b3a docs: fix incorrect heading levels in docker run reference
    b43ea528b vendor: github.com/docker/docker v25.0.0-rc.1
    6d0aa0a52 cli/command/container: parseSecurityOpts: fix --security-opt seccomp=builtin
    9be600a97 Docker build command docs refresh
    878b1c55b docs: add links to volume ls, network ls, stack ps formatting examples
    f0edc7953 change back nolint -> nosec
    c1016c05c vendor: github.com/mitchellh/mapstructure v1.5.0
    58524685d vendor: github.com/mattn/go-runewidth v0.0.15
    1e38fc3b9 vendor: github.com/klauspost/compress v1.17.4
    0fa3a365f vendor: github.com/docker/docker v25.0.0-beta.3
    d1a51582e update authors and mailmap
    60af715d6 id and name filter in service ls is the prefix not a part
    90a1887d3 Fix wrong docker run command
    64e9cadd1 Add networking reference link
    924ec7f4c docs/deprecated: update "oom-score-adjust" status for daemon
    800a728e1 deprecated: fix anchor and add missing version
    c1c6198ae docs: deprecate short cid in Aliases field
    336787c50 vendor: github.com/docker/docker 7bc56c53657d (v25.0.0-dev)
    53a129e3d docs(plugins): remove Weave engine network plugin
    3ecd6b6c7 docs(plugins): remove inline CSS markup
    a4d805f9c docs(plugins): add Kathará engine network plugin
    1dcd5487f docs(plugins): update Docker Store to Docker Hub
    46355a194 export RunStat, StatsOptions, and add Filters option
    e9a5590ad cli/command/container: statsOptions: add GoDoc
    b642078c8 prevent "docker stats" from hanging if the initial API call fails
    633ba88c2 cli/command/container: runStats(): move code to where it's used
    5ed6c128e cli/command/container: runStats(): don't register unused event handlers
    2389768fb cli/command/container: runStats(): minor cleanup and fixes
    4d434dc69 vendor: github.com/docker/docker 388216fc45ab (v25.0.0-dev)
    5eac07b10 update typos and style in docs
    6fd4cff1f docs: minor editorial improvements, typo fixes
    0de84f019 vendor: golang.org/x/crypto v0.17.0
    3cf0bf84a vendor: golang.org/x/crypto v0.16.0
    36d4db27d vendor: golang.org/x/text v0.14.0
    3d70100d5 vendor: golang.org/x/sys v0.15.0
    70216b662 add //go:build directives to prevent downgrading to go1.16 language
    88e647435 build(deps): bump github/codeql-action from 2 to 3
    ca9ff8daf docs: run-reference: use table for health options
    77e67a0f9 docs/deprecated: mark logentries logging-driver as "removed"
    8f13b0416 cli/command: remove "logentries" driver from tests and fixtures
    d79dd7c53 docs, man: remove logentries logging-driver
    b14094df5 contrib/completion: remove logentries logging-driver
    f63065a58 vendor: github.com/docker/docker f3cc93630ed8 (v25.0.0-dev)
    fa1914426 vendor: github.com/docker/docker v25.0.0-beta.2
    e81a66661 docs/deprecated: mark logentries log-driver for removal
    f8dd8f074 docs: refresh --publish, add --publish-all
    5400a48aa Plumb contexts through commands
    aec7ec7f6 vendor: github.com/docker/docker 92884c25b394 (v25.0.0-dev)
    0a3a16d2b vendor: github.com/containerd/containerd v1.7.11
    54c103aff vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
    d49970590 vendor: github.com/felixge/httpsnoop v1.0.4
    7af509c7f cli/command: merge DockerCliOption and InitializeOpt types
    1554ac3b5 cli-plugins: terminate plugin when CLI exits
    2e394eb5f docs: rewrite section on working directory
    4a8451455 docs: rewrite section on setting user id
    259aa9005 docs: rewrite section on filesystem mounts
    52716c813 docs: move --tmpfs to docker run reference
    5ede4c82a docs: minor improvements to the healthcheck section
    7585d66a0 docs: rewrite section on overriding environment variables
    3eeac2059 docs: rewrite section on exposing ports
    0a94d85cd docs: fix typo in "network create" docs
    b01e28752 docs: rewrite section on default entrypoint
    c695ad9d7 docs: rewrite section on overriding image defaults
    4a6cde885 docs: move --log-driver to docker run reference
    72df1960e docs: move --cgroup-parent to docker run reference
    9e75a4cf6 docs: move --init to docker run reference
    92c664b0d docs: move info about --security-opt to docker run reference
    f98444490 docs: move --rm to docker run reference
    32189ca27 docs: improve description about container exit codes
    dbffa0d12 docs: move --restart to docker run reference
    73620975d docs: simplify container networking intro
    5dd6e9a4d docs: move --ipc to docker run reference
    ff62bf47b docs: move --uts to docker run reference
    d66fe7881 docs: move --pid to docker run reference
    03dc8832e docs: improve docs on container identification
    fad227d3f docs: move info about fg/bg flags to run reference
    2f48f41fc docs: improve introduction to docker run
    3f519b824 docs/deprecated.md: add version for "-g" / "--graph" removal
    6dc92b667 docs/deprecate.md: add version for devicemapper removal to table
    a682b8e65 Permit '=' separator and '[ipv6]' in --add-host
    626e64ccf build(deps): bump actions/setup-go from 4 to 5
    0cf7bff0b vendor: github.com/docker/docker 4046ae5e2fd4 (v25.0.0-dev)
    bdb45a9c2 update to go1.21.5
    afc62d8d1 update to go1.21.4
    8bbc97c86 prune: fix build cache prune warning
    e93ec2f6a Fix typo in dockerd reference documentation
    5a0470888 vendor: github.com/docker/docker 029519a1498b (v25.0.0-dev)
    aa9fdb4dd vendor: github.com/gorilla/mux v1.8.1
    a431b1dda exec.md: remove misleading part
    b62b5d48f Readme: remove reference to "Docker EE"
    354f62f0c docs: reference/commandlin/cli: remove redundant italic
    e2626200a docs: remove "{% raw %}" / "{% endraw %}" Jekyl (liquid) leftovers
    174cbb588 docs/man: fix -name flag with single hyphen
    539537ddf vendor: github.com/docker/docker cfdca8dc1d4c (v25.0.0-dev)
    6a74a63ee Dockerfile: update ALPINE_VERSION to 3.18
    35c6e915d Dockerfile: update buildx to v0.12.0
    6468c63c8 docs: update debian examples to use bookworm
    0d95231cc Dockerfile: use "debian" in stages instead of distro name
    c5194a9e5 Dockerfile: update to debian bookworm
    7be05a6f4 mount: bind-recursive: remove boolean convenience values
    dad4a1962 vendor: github.com/docker/docker v25.0.0-beta.1
    30d36e977 templates: linting: fix "error return value is not checked (errchkjson)
    4e2477f85 golangci-lint: enable more linters
    0e73168b7 golangci-lint: revive: enable use-any
    9c0c49a5f golangci-lint: revive: enable empty-lines
    8e9aec690 golangci-lint: revive: enable import-shadowing
    f387558b5 Add zstd as supported in load command doc
    f4962c65b vendor: github.com/Microsoft/hcsshim v0.11.4
    391668f57 golangci-lint: enable perfsprint linter
    8bbdb93cf golangci-lint: enable nilerr linter
    7e9d2c78c golangci-lint: enable dupword linter
    2d61f70f0 golangci-lint: govet: enable shadow check
    606cbd60a golangci-lint: enable predeclared linter
    8661552e7 golangci-lint: enable thelper linter
    8e98c765f cli/command/system: fix deprecated comments (gocritic)
    9d7e21be2 cli/command/manifest: rename vars that collided with import
    3f0c189e4 linting: address slice-append issues found by gocritic
    a2c9f3c6c linting: address else/if/elseif statements found by gocritic
    888df0987 linting: address assorted issues found by gocritic
    d0dee3ceb linting: Consider pre-allocating sliceVar (prealloc)
    efbcdce9b linting: cli/command/trust: unusedwrite: unused write to field Hashes (govet)
    580ebf41a dockerfiles: update golangci-lint to v1.55.2
    8642b3c35 update authors and mailmap
    685d1baa0 vendor: github.com/docker/docker 34e923e3e31b (v25.0-dev)
    f0816bf67 opts: remove unused IPOpt option
    b0ee27d65 opts: ValidateIPAddress: improve error, godoc, and tests
    b24e7f85a Fix setting ServerAddress property in NativeStore
    f65d4a479 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev)
    b7c31c36f not actually a maintainer
    f9622b659 vendor: update go-connections for TLS 1.3 support
    4cf1c50ad Revert "update to go1.21.4" due to regressions / breaking changes.
    6472dabe4 update to go1.21.4
    3cd77c9d5 cli/command/container: ForwardAllSignals: rewrite to use ContainerAPIClient
    a2ec50a46 make `container` an explicit, required parameter
    a4abe42cb make runAttach public and allow passing context
    2b1f5a2e3 TestParseWithMacAddress: check endpoint-specific MacAddress field
    8f59f841a cli/command/container: mustParse: return network.NetworkingConfig
    d46de7087 vendor: github.com/docker/docker c14694a424ab (v25.0.0-dev)
    efc923679 --env-file about comments doc updated Signed-off-by: Saurabh Kumar <saurabhkumar0184@gmail.com>
    07338fe96 docs: update redirect metadata for hugo
    0239b8fd9 vendor: github.com/spf13/cobra v1.8.0
    848fe622c docs: add default-network-opt daemon option
    54eee599b Update container-device-interface to v0.6.2
    e08866098 vendor: github.com/docker/docker ed1a61dcb789 (v25.0.0-dev)
    13d34b21e vendor: github.com/containerd/containerd v1.7.8
    aa24d611b vendor: google.golang.org/grpc v1.58.3
    784149382 vendor: golang.org/x/tools v0.10.0
    1a0ae8c6b vendor: golang.org/x/mod v0.11.0
    39b1d37b3 Update CodeQL workflow
    663a89b7a vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev)
    6891974ee vendor: github.com/opencontainers/image-spec v1.1.0-rc5
    827c404ca vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
    137c495f7 vendor: github.com/go-logr/logr v1.2.4
    6372c6aae vendor: github.com/klauspost/compress v1.17.2
    8073525c0 vendor: google.golang.org/grpc v1.56.3
    b7b5b31a7 update to golangci-lint v1.55.0
    9e1f8d646 image/build: use "nolint" comment to work around gosec regression
    2294b17e7 cli/command/network: runCreate: inline types.NetworkCreate
    594aeb390 cli/command: remove dot-imports and unhandled errors
    b08e34b9f swarm: TestSwarmUpdate: remove non-existing "--quiet" flag
    defa52b8c stacks: Add support for start interval
    9df7be5d5 cli/compose: add schema 3.12 (no changes with 3.11 yet)
    7a2ea5c53 vendor: gotest.tools/v3 v3.5.1
    f2fced487 cli/compose/loader: remove platform-specific path handling
    74990623e cli/compose/loader: use gotest.tools/v3/golden
    8bf121c3b Add docker ps status descriptions
    a252a106c - What I did 	Removed broken link in #937 - How I did it 	Removed first section of CONTRIBUTING.md - How to verify it 	Check CONTRIBUTING.md - Description for the changelog 	Removed broken link in contributing to Docker documentation. A picture of a cute animal (not mandatory but encouraged) Closes #937
    74bace156 docs: add `bind-recursive` mount option
    46d0ba20f vendor: github.com/docker/docker cdb3f9fb8dca (v25.0.0-dev)
    3441151e0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230823155524-12f0c246fed0
    412ebb677 vendor: github.com/containerd/containerd v1.7.7
    78eaac75c vendor: update OTEL dependencies
    a27466fb6 vendor: golang.org/x/net v0.17.0
    612a17155 vendor: golang.org/x/crypto v0.14.0
    392db31e2 vendor: golang.org/x/term v0.13.0
    ac307788a vendor: golang.org/x/text v0.13.0
    48655f794 vendor: golang.org/x/sys v0.13.0
    6de525416 vendor: github.com/docker/distribution v2.8.3
    ceab9b5e8 update to go1.21.3
    d249ce279 update to go1.21.2
    3f1195e4e update go-md2man to v2.0.3
    fc6976db4 mount: add `bind-recursive=<bool|string>` and deprecate `bind-nonrecursive=<bool>`
    0f59f04f5 Update minimum Go version to 1.19
    d254cc3bb update golang to go1.21.1
    4c75107a6 vendor: github.com/distribution/reference v0.5.0
    112d79a41 appcontext: remove unused parts
    febb37a38 remove buildkit as dependency
    e9759cee6 Dockerfile: use GOTOOLCHAIN=local
    f07e7e1ee Dockerfile: build gotestsum and goversioninfo without cgo
    9e424af5d e2e: update to use compose v2, and don't depend on distro-packages
    3e2187b4c vendor: github.com/docker/docker d3afa80b96bf (v25.0.0-dev)
    f90890fb4 vendor: github.com/Microsoft/hcsshim v0.11.1
    23f50a066 vendor: github.com/containerd/containerd v1.6.24
    497b13c66 vendor: github.com/klauspost/compress v1.16.5
    e0ad0127b vendor: google.golang.org/grpc v1.56.2
    c2308ad6f vendor: google.golang.org/protobuf v1.31.0
    56396ba35 vendor: golang.org/x/tools v0.8.0
    c9d56b850 vendor: golang.org/x/crypto v0.9.0
    ffea6940e vendor: golang.org/x/sys v0.10.0
    1554b4932 vendor: golang.org/x/sync v0.3.0
    78012b00a vendor: container-device-interface v0.6.1
    3a16c3bb0 docs: fix duplicate words in "docker tag" reference
    7e9467506 build(deps): bump docker/bake-action from 3 to 4
    315ff202c build(deps): bump docker/setup-buildx-action from 2 to 3
    4b00be585 update to go1.20.8
    9e1b42e64 Add missing opts to --network advanced syntax
    58f426087 Rename expectedCfg into expectedHostCfg
    f1048e1a3 Create default EndpointSettings if no --network provided
    2c193b59d Fix extremely minor typo in docker-run man page
    40dc66b26 vendor: github.com/docker/docker 06499c52e2b1 (v25.0.0-dev)
    f13b78672 vendor: github.com/docker/docker 032797ea4bcb (v25.0.0-dev)
    fb2ba5d63 migrate reference github.com/distribution/reference
    04af12821 vendor: github.com/docker/docker 7abd7fa73965 (v25.0.0-dev)
    dee40053f build(deps): bump actions/checkout from 3 to 4
    6dfdd1eae cli/command/system: fix "docker events" not supporting --format=json
    db6209abd update golangci-lint to v1.54.2
    9ad079244 cli/registry/client: remove some redundant conditions
    22b4bab90 cli/registry: client.iterateEndpoints: remove check for APIVersion1
    5250f1bab cli/registry: fix client.pullManifestList not de-referencing manifest
    d40fc1a0f vendor: github.com/docker/docker a65c948e7edf (v25.0.0-dev)
    261c18f9e ParseRestartPolicy: validate for missing policy-names
    3d2aac6a0 docs/reference: run.md: remove stray whitespace
    4cce7bb2f rewrite TestParseRestartPolicy to use sub-tests
    42ac5d4bf force TestNewHistoryCommandSuccess to use UTC timezone
    17f4c8259 update cli-docs-tool to v0.6.0
    be219b317 adding -c option for docker run/build in manpages
    273f2cd95 cli/command/manifest: update link to Go documentation
    722e3aae4 man: update links to Go documentation
    dc4feccb8 docs/reference: update links to Go documentation
    1d3af726e CONTRIBUTING.md: update links
    af05a6882 Dockerfile: use COPY --link where possible
    1da67be9c Stop slowing bash init by caching plugins path slowly
    5bff12354 replace dockerfile/dockerignore with patternmatcher/ignorefile
    55ff9e609 vendor: github.com/moby/patternmatcher v0.6.0
    e050312e6 update flag-description for --cgroup-parent
    d2047b954 cli/registry/client: set actions when authn with token
    1c2cc4bbe info: add CDI spec directories to output
    bb57783ab cmd/docker: areFlagsSupported: don't Ping if not needed
    6e2e92d77 Update docs/command output for volume pruning
    4fc3f0e6f search: deprecate "is-automated" filter and "IsAutomated" field
    299925f4c docs: document special host-gateway value for add-host
    211220cbb cli/command: ResolveAuthConfig, GetDefaultAuthConfig: take ConfigFile as arg
    57f0e46de cli/command/registry: cleanup login tests
    84c956a17 cli/command/registry: cleanup search tests
    3d0b14c3e vendor: github.com/docker/docker 4b19b2f4babd (25.0-dev)
    f38870e68 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5
    a53b03520 vendor: github.com/opencontainers/image-spec v1.1.0-rc4
    8d51f36ca login: Add message about using PATs
    6517db939 update to go1.20.7
    373fa57ed vendor: github.com/containerd/containerd v1.6.22
    0b535c791 vendor: gotest.tools/v3 v3.5.0
    7a89e897e cli/command/container: waitExitOrRemoved: take APIClient as argument
    ce038e77b vendor: github.com/prometheus/common v0.42.0
    bffe277c9 vendor: github.com/prometheus/procfs v0.9.0
    92906a993 vendor: github.com/Microsoft/go-winio v0.6.1
    aacdca0fe vendor: google.golang.org/protobuf v1.30.0
    3cf34c6d9 vendor: google.golang.org/grpc v1.53.0
    5b138189b vendor: github.com/cespare/xxhash/v2 v2.2.0
    c1d065702 vendor: github.com/golang/protobuf v1.5.3
    0b7c72c3b cli/command/container: RunStart: inline variable
    ad43df5e8 configfile: Initialize nil AuthConfigs
    b52fd79f1 docs: add missing docs for "DOCKER_TLS" env-var
    298bddcc2 cli/command/container: deprecate NewStartOptions
    00870d68f Dockerfile: update buildx to v0.11.2
    78e463392 vendor: github.com/docker/docker-credential-helpers v0.8.0
    ff9f1be19 Dockerfile: update buildx to v0.11.1
    680fafdc9 update go to go1.20.6
    223bf80d4 cli/context/docker: Endpoint.ClientOpts, withHTTPClient: inline variables
    3469beb80 replace uses of deprecated api/types that moved to api/types/system
    1f87420b5 vendor: github.com/docker/docker dab9ffb252186f4c47416addb136d579f9314c6a (25.0-dev)
    4d03b935c vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05
    fe7afb700 cli/container: Don't ignore error when parsing volume spec
    323ca1d56 Bump container-device-interface dependency to v0.6.0
    fca67dd81 Dockerfile: update to xx 1.2.1
    de9f1f5b9 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa
    125eeb7ab Add docs for health-start-interval
    986879c07 Add flags to container/service for health start interval
    9bfaa6ff7 revendor docker/docker from master
    dbd9d5d74 Update vendoring for CDI parser
    dad225d1e Support CDI devices in --device flag
    d5f564ada commandconn: return original error while closing
    92d7a234d docker info: fix condition for printing debug information
    88f44ec15 cli: SetupRootCommand: remove redundant flags return
    3cad05fbf cli: move "config" flag to cli/flags/ClientOptions.InstallFlags()
    1c1329fc7 cli/flags: add EnvEnableTLS const for "DOCKER_TLS"
    0b3cadb05 cli/config: add EnvOverrideConfigDir const
    13e842a11 cli/config: add synchronisation for configDir (Dir, SetDir)
    9f4af6cb7 vendor: docker/docker 7f8b1cd7f928dee54174d51dc9da17f443c31480 (v25.0-dev)
    b32264a1a rename and update mergo module
    5936fd2a8 docs: fix static ip example, network needs a subnet
    b85d6a8f9 docs: fix broken link
    79ff64f06 cli/command/context: don't use pkg/homedir in test
    6c7d17fa0 docs: update the runtime configuration section
    bf5d1ce97 Dockerfile: update buildx to v0.11.0
    2133d0446 cli/command/context: remove deprecated k8s / orchestrator option-stubs
    2d06cfcde cli/command: newAPIClientFromEndpoint: use WithUserAgent
    8181aa887 cli/command/context: don't pass CLI if we only need context-store
    3b8d5da66 update go to go1.20.5
    acb248f8d Dockerfile: update ALPINE_VERSION to 3.17
    9c2694d2b Dockerfile: update gotestsum to v1.10.0
    c2535aa46 build: error if Dockerfile name is passed with Dockerfile from stdin
    77dd05caa cli/command/image: remove errStdinConflict
    d68b36153 cli/compose/convert: convertEnvironment: sort results
    f4bde6869 replace some basic uses of fmt.Sprintf()
    6a50c4f70 cli-plugins: remove deprecated Metadata.Experimental
    58ec4161b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed18760
    bf492bffd vendor: docker/docker ed798d651a50cbd0af4dca127c4bfa243dda9cf7 (v25.0.0-dev)
    54c80d49d vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    9ad605acc vendor: github.com/sirupsen/logrus v1.9.3
    e15ae9e2e vendor: golang.org/x/net v0.10.0
    3b62102ea vendor: golang.org/x/term v0.8.0
    db7886eef vendor: golang.org/x/text v0.9.0
    45fd37aaa vendor: golang.org/x/sys v0.8.0
    a5ebe2282 commandconn: don't return error if command closed successfully
    2331e4d52 cli/command/container: don't mutate ConfigFile.DetachKeys
    23e26f40f cli/command/container: createContainer(): return container-ID
    c2c6fbe23 cli/command/container: TestCreateContainerImagePullPolicy: use sub-tests
    0c5adb2e9 cli/command/container: attach: rename var that collided with import
    47951ff44 docs: add "--detach-keys" example to docker run reference
    c17b0df2a docs: move "--detach-keys" example to examples section
    e4ceed468 docs: added example for specifying socket path with -H
    5251d3748 cli/command: add EnvOverrideContext const for "DOCKER_CONTEXT"
    6458dcbe5 Dockerfile.vendor: update GOPROXY to use default with fallback
    0692d762a cli/command: fix GoDoc referencing wrong const
    982857531 docs: rephrase section on credential stores for docker login
    5d6612798 docs: remove devicemapper
    4cf04988a remove uses of golang.org/x/sys/execabs
    db5e1fa54 vendor: update docker/docker to latest v25.0.0-dev
    2713d0bcd docs: fix example for proxies in daemon.json
    b22290052 docs: remove AuFS from glossary
    e4211c91e docs: remove Docker Toolbox from glossary
    c246ea851 docs: remove boot2docker and docker-machine from glossary
    4c11f73dc man: remove devicemapper from examples
    c61b56518 docs/deprecated: remove "disabled by default" for AuFS, overlay
    9f537a756 docs: remove aufs and legacy overlay
    73fbcdea0 contrib/completion: remove aufs, legacy overlay
    1ec68fabe cli/command/system: remove aufs from fixtures
    6460eea54 docs/deprecated: remove .patch release from deprecation status
    035e26fb0 docs: update link location for the overlay driver
    988e37956 Correct "ps --no-trunc" example output
    2fc30fd45 replace uses of client.IsErrNotFound for errdefs.IsNotFound
    537b88dab cli/command: don't use legacy "notfound" error-type in tests
    353e0a942 vendor: github.com/docker/distribution v2.8.2
    379122b03 cli/config: remove warning for deprecated ~/.dockercfg file
    9b791b4fe cli/config: Load: remove outdated FIXME
    ff7111ae2 cli/command: remove deprecated EncodeAuthToBase64
    d3ac80127 cli/command/stack: remove deprecated RunDeploy, RunPS, RunRemove, GetServices
    72e3813ab cli-plugins/manager: fix deprecation comment of Metadata.Experimental
    4119d268e Update tag docs to clarify name
    28bc90f3b vendor: update docker/docker to v25.0.0-dev, API v1.44
    60b4cdf04 Update version to v25.0.0-dev
    759fa585c docs: update description for docker -H flag
    1d8e2b652 vendor: github.com/docker/docker v24.0.0-rc.2
    ce11b28d8 cli/config/credentials: skip unneeded exec.LookPath()
    2ae223038 remove pre-go1.17 build-tags
    1073b0269 cli/context/docker: rename receiver for Endpoint
    2b7bfb399 cli/command/image/build: GetContextFromReader: rename var that collided
    ab17029c6 cli/command/container: hijackedIOStreamer: explicitly ignore err
    f5e224e94 un-skip history test and fix golden mismatches

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
103695c7b9 docker-moby: update to 24.0.6
Bumping moby to version v24.0.6, which comprises the following commits:

    c35376c455 volume/local: Don't unmount, restore mounted status
    5d4cc0b5b5 integration/liveRestore: Check volume content
    1d983e2e8a update golangci-lint to v1.54.2
    d2e9a19358 CONTRIBUTING.md: update links to golang docs and blog
    73f6053bb3 api: swagger: update link to Go documentation
    de13951b9d docs/api: update links to Go documentation
    377af4c9b4 Dockerfile: Windows: update Golang download domains to cut down redirects
    088cec8f0f hack: update link to GOPATH documentation
    ed2f5d1d85 c8d/builder: Don't drop fields from created image
    1d10e8633d daemon: Handle NotFound when deleting container lease
    63422515ba c8d/run: Allow running container without image
    49671250f6 c8d/commit: Don't produce an empty layer
    b83f5a89f4 Don't return an error if the lease is not found
    4ac2355d62 hack: use long SHA for DOCKER_GITCOMMIT
    ac2a80fcc3 ci(bin-image): clean up metadata
    5eef5a7f59 ci(bin-image): clean up env var handling
    aaf84dd4cf remove Dockerfile.e2e
    a99e62fa3d distribution: show image schema deprecation on all registries
    e239799583 distribution: update warning for deprecated image formats
    bb22b8a418 ci(bin-image): check repo origin
    fb6784bdf0 gha: set 10-minute timeout on "report" actions
    74bf46aea6 c8d/diff: Reuse mount, mount parent as read-only
    b76a0c7d00 c8d/export: Use ref counted mounter
    54953f2f5a integration: Add test for not breaking overlayfs
    3897724f4a volume/local: Fix debug log typo
    0c131f58ba ci(bin-image): populate DOCKER_GITCOMMIT, take 2
    448ae33f87 ci(bin-image): populate DOCKER_GITCOMMIT
    3ce0dc7e35 bakefile: Remove default value of DOCKER_GITCOMMIT
    600aa7b7a5 c8d/inspect: Ignore manifest with missing config
    5d2c383d72 remove s390x and ppc64ls pipelines
    15bd07b4fd update runc binary to v1.1.9
    cc39fb9f6b Integration test for capabilities
    bf2b8a05a0 Do not drop effective&permitted set
    e67f9dadc6 hack/make/.binary: use with-go-mod.sh
    314b84b023 hack: enable Go modules when building dockerd and docker-proxy
    72947f5022 hack: use Git-free ROOTDIR convention
    7e7bc0f1bc vendor: github.com/containerd/containerd v1.6.22
    5f0df8c534 vendor github.com/containerd/ttrpc v1.1.2
    25b709df48 windows: fix --register-service when executed from within binary directory
    b7d1e98ae7 libnet/d/bridge: Allow IPv6 ICC from any IP address
    749e687e1b integration/windows: Unskip some kill tests
    128838227e hack/test: Don't fail-fast before integration-cli
    b7c5385b81 update to go1.20.7
    4cd50eb1ed TestDaemonProxy: use new scanners to check logs
    a49bca97df Fix daemon proxy test for "reload sanitized"
    d6536d44e9 TestDaemonProxy: check proxy settings early
    a6f8e97342 Improve test daemon logging

Bumping docker-cli to version v24.0.6, which comprises the following commits:

    fab55e13c cli/command/system: fix "docker events" not supporting --format=json
    d3485b9e9 cli/registry: client.iterateEndpoints: remove check for APIVersion1
    613380299 cli/registry: fix client.pullManifestList not de-referencing manifest
    b83959e00 force TestNewHistoryCommandSuccess to use UTC timezone
    28a08a22b un-skip history test and fix golden mismatches
    8e0393932 update cli-docs-tool to v0.6.0
    efd052eb8 docs/reference: run.md: remove stray whitespace
    d9770a962 adding -c option for docker run/build in manpages
    6efe73abe cli/command/manifest: update link to Go documentation
    d97753101 man: update links to Go documentation
    e9f843bf0 docs/reference: update links to Go documentation
    cfbaee468 CONTRIBUTING.md: update links
    daeee4697 update flag-description for --cgroup-parent
    08ad72160 Update docs/command output for volume pruning
    3c4fe7b3e docs: add missing docs for "DOCKER_TLS" env-var
    dc45bcc99 Stop slowing bash init by caching plugins path slowly
    710dd00e9 replace dockerfile/dockerignore with patternmatcher/ignorefile
    bf632329d vendor: github.com/moby/patternmatcher v0.6.0
    3c6c0bce1 cli/registry/client: set actions when authn with token
    65655cc26 cmd/docker: areFlagsSupported: don't Ping if not needed
    11606268f login: Add message about using PATs
    a8987063b docs: document special host-gateway value for add-host
    c0e376854 update to go1.20.7

We refresh one patch to adapt to the new build script structure.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:40 +00:00
Martin Jansa
9a78db8a91 docker-*: prevent -march being exported in arm builds
* don't export CGO_CFLAGS/CGO_CXXFLAGS like the previous version
  didn't before:
  https://git.yoctoproject.org/meta-virtualization/commit/?id=aceed7bf95cc8a42c8f470d8edf3c6f03d49da00

* both docker-moby and docker-ce have the same issue as shown with
  qemuarm build:
  docker-moby: http://errors.yoctoproject.org/Errors/Details/690021/
  docker-ce: http://errors.yoctoproject.org/Errors/Details/690020/

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-02-21 10:11:32 -05:00
Bruce Ashfield
a04b3f6c9d moby: update to v23.0.1
Refresh two patches for context in the udpated docker-moby.

Bumping moby to version v23.0.1, which comprises the following commits:

    4002fa877b vendor: update buildkit to latest v0.10
    e697c9365f builder: define GetRemotes for the worker
    4c544c3d5f ci: fix branch filter pattern in buildkit workflow
    06aca27cc1 ci: enhance tests distribution
    001b2e778a ci: update gotestlist to 0.3.1
    38b70ebc3b apparmor: Check if apparmor_parser is available
    8a5d341d94 [23.0] vendor: github.com/moby/buildkit v0.10.7-0.20230206124303-b8fdb4b78da0
    427101f656 libnet/d/ipvlan: gracefully migrate from older dbs
    5b7142073f Dockerfile: configure code dir as "safe" directory
    7e03250780 graphdriver/overlay2: usingMetacopy ENOTSUP is non-fatal
    975bdb2c96 daemon: identify container exits by ProcessID
    610250f06e vendor: github.com/containerd/containerd v1.6.16
    63a0f1fe09 vendor: github.com/pelletier/go-toml v1.9.5
    699e853be3 hack: display build cmd when DOCKER_DEBUG set
    b7e0725e98 hack: remove unnecessary vars in make.sh script
    96746238b2 hack: remove ORIG_BUILDFLAGS var
    df2fe70049 hack: remove -installsuffix build flag
    8b83e09b9c client: improve error messaging on crash
    26e9face5a [23.0] update containerd binary to v1.6.16
    6641852d51 rootless: support `--ipc=host`
    8fc49af4ab hack: check if cross-compiling before setting ARM target name
    30134ab177 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281
    3da45c0fe7 fix blockThreshold full bug
    941a07b339 ioutils: add regression test for bytespipe deadlock
    a21381a55a Dockerfile: prefer ld for building against arm64
    2616ebc5ac libnetwork: Support IPv6 in arrangeUserFilterRule()
    7a5f3f8053 libnetwork: fix empty-lines (revive)
    7cfd4b3471 libnetwork/config: rename ParseConfigOptions() to New()
    1090c5fd4c libnetwork/config: inline LoadDefaultScopes()
    c93e1e9e66 libnetwork/config: merge DaemonCfg into Config
    031fb72313 libnetwork: remove old integration tests
    a96a97bf47 libnetwork/config: remove ParseConfig()
    9b383dbd51 libnetwork/config: inline ProcessOptions
    bed115e664 libnetwork/config: remove "Experimental" and "Debug" options
    64cbbaa883 Dockerfile: smoke tests for static builds
    4100226e27 Dockerfile: use clang to build dockerd/docker-proxy
    dadeec4205 Disable chrootarchive.init() on Windows
    f328486cb3 Add GetLibHome stub for non-linux OS
    8e83d28f31 vendor: golang.org/x/net v0.5.0
    06eb6ab794 vendor: golang.org/x/text v0.6.0
    31cf0bf181 vendor: golang.org/x/sys v0.4.0
    0e4548bbe1 Dockerfile: fix PKG_CONFIG for xx
    8c12a6648b hack: name for target ARM architecture not specified
    10c4ada049 hack: typo in displayed platform name
    322149038a Add additional loggig in case of error of renaming runtimes-old and removing it
    a8926de2a1 Handle docker start inside overlayfs
    524de97334 daemon/config: inform the user when the input JSON contains invalid UTF-8
    0b2eecdc8a daemon/config: support alternate (common) unicode encodings using a BOM
    abff66b283 daemon/config: clean up tests to use common helper
    d9bdb61992 cmd/dockerd: use default SIGQUIT behaviour
    c627132dc8 vendor: github.com/moby/ipvs v1.1.0
    13a31b67de vendor: github.com/vishvananda/netns v0.0.2
    bd5d9f3190 vendor: github.com/vishvananda/netns v0.0.1
    c8262e912f libnetwork: Remove iptables nat rule when hairpin is disabled
    12e3398f64 update to go1.19.5
    076d57104a docs: api: synchronise versioned API docs (v1.39 - v1.41)
    8ce4ae1345 docs: api: synchronise versioned API docs (v1.42)
    f0fe353ca6 api: swagger: add errorDetail to CreateImageInfo
    04371160f8 api: docs: add errorDetail to CreateImageInfo (v1.42)
    e753cce70f docs: add 401 to possible status codes of /auth
    4d7792417e ci: update buildkit to fix integration tests
    5802ca9e08 rootless: move ./rootless to ./pkg/rootless
    33572e98c1 Use user paths for plugin discovery in rootless mode
    52c7a5d96b daemon/config: New(): initialize config with platform-specific defaults
    101bd10d0e daemon/config: group JSON preprocessing steps
    def679d0e0 daemon/config: ignore UTF-8 BOM in config JSON
    cf8c728f3c graphdriver/btrfs: needs kernel headers >= 4.12, not >= 4.7
    e40c2410ca Dockerfile.*: drop libbtrfs
    51a65e01ac PACKAGERS: update Btrfs graphdriver dependencies
    0cf2b14994 graphdriver/btrfs: use free wrapper consistently
    21e6c282e6 graphdriver/btrfs: use kernel UAPI headers
    42e7a15a63 graphdriver/btrfs: drop version information
    01883e1177 daemon/graphdriver: use strconv instead of fmt.Sprintf
    25939ee45e libnetwork: improve logs for DNS failures
    691b44b4c3 vendor: github.com/containerd/containerd v1.6.15
    5aa0c2cae2 [23.0] update containerd binary to v1.6.15
    6acc1701ea integration-cli: Fix hanging TestLogsFollowGoroutines*
    8dfd907478 hack: restore copy_binaries func
    0d1aba547e hack/make: Don't add -buildmode=pie with -race
    4da19e2dca Clear conntrack entries for published UDP ports
    fe097e018c Fix volume CreatedAt being altered on initialization
    d778bbab84 docs: contributing docs update for cross comp
    2dd577955c Dockerfile: add "all" stage to build binaries and extra tools
    3ef71f9085 ci: add extra steps to check artifacts
    8fbfc2676f Dockerfile: rename dev stages
    7e286efcd3 ci: use GITHUB_REF and GITHUB_SHA to set version and commit
    f29fe2daec bake: define additional vars
    3b90bb6ad3 bake: define DESTDIR
    171471b613 hack: update buildmode pie condition
    7d8c689923 hack: do not set buildmode pie for statically linked binary
    75596bee28 hack: use PKG_CONFIG var when checking libdevmapper
    29758a067f IAmStatic not used anymore
    5d4ddce5ed hack: remove containerutility script
    a85bdbe1ca Dockerfile: use TARGETPLATFORM to build Docker
    6a0a2c4f79 Always use iptables -C to look for rules
    91f2d963c6 Merge iptables.probe() into iptables.detectIptables()
    2bf66f725c Check ipt options before looking for ip6t
    1b27ab4c73 libnetwork/iptables: Fix test panic when execute only one test
    316231cced daemon/graphdriver/devicemapper: simplify Udev log, and update link
    770ace39d8 daemon/logger/gcplogs: remove ensureHomeIfIAmStatic workaround
    5e4464798f api: can marshal and unmarshal when args.fields is empty
    515219b716 Update delve version
    0393897695 daemon/graphdriver/btrfs: workaround field rename in btrfs-progs 6.1
    7199300239 cmd/docker-proxy: add "-v / --version" flag
    e9075f70c7 gha: update buildkit to fix integration tests
    b2d2f012b4 errdefs: FromStatusCode() don't log "FIXME" debug message
    9980e64341 vendor: github.com/containerd/containerd v1.6.14
    5ebd78d5f8 update containerd binary to v1.6.14
    f6c2f20cee Dockerfile: delve cross build with TARGETPLATFORM
    3d6908c79b Dockerfile: swagger cross build with TARGETPLATFORM
    1dc34e889c Dockerfile: containerutility cross build with TARGETPLATFORM
    effd7661df Dockerfile: registry cross build with TARGETPLATFORM
    f3e3266373 Dockerfile: dockercli cross build with TARGETPLATFORM
    fd6316e631 Dockerfile: rootlesskit cross build with TARGETPLATFORM
    fbe4db5be0 Dockerfile: tini cross build with TARGETPLATFORM
    f9a356c7e9 Dockerfile: runc cross build with TARGETPLATFORM
    6e7cc3b7e3 Dockerfile: containerd cross build with TARGETPLATFORM
    582b29f587 Dockerfile: DOCKER_STATIC arg
    daa28fcf2d Dockerfile: add dummy stage
    4cab584a9c Dockerfile: add cross compilation helper
    0b12468116 vendor: github.com/containerd/containerd v1.6.13
    6570b654f4 vendor: github.com/Microsoft/hcsshim v0.9.6
    d8d11bca37 update containerd binary to v1.6.13
    a72fb70eb0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f
    dca58c654a daemon: drop side effect from registerLinks()
    6149c333ff daemon: don't checkpoint container until registered
    42bffae5ff daemon: fix GetContainer() returning (nil, nil)
    a6818fd4cb hack: introduce validate/no-module
    45fe08c93c hack: replace go-mod-prepare.sh with wrapper script
    c508d13372 hack/go-mod-prepare.sh: find root robustly; make steps transparent
    036398f512 hack/validate/vendor: clean up license validation step
    a4957d2585 hack/validate/vendor: split tidy from vendor
    394eaa8495 hack/vendor.sh: allow running tidy & vendor separately
    d80f235c47 vendor: github.com/tinylib/msgp v1.1.6
    5ca9231b44 vendor: github.com/philhofer/fwd v1.1.2
    ffa2c0b517 image/store: Use errdefs for errors
    c0c146fc82 Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex
    6295320d91 use consistent alias for gotest.tools/v3/assert/cmp
    1cc1395fae vendor: golang.org/x/net v0.4.0
    0163808dbe vendor: github.com/prometheus/client_golang v1.14.0
    9b62b83429 vendor: github.com/go-logr/logr v1.2.3
    d5ffdeb76c vendor: golang.org/x/crypto v0.2.0
    4da8dedaab vendor: golang.org/x/net v0.2.0
    b14ffffffd vendor: github.com/opencontainers/runc v1.1.3
    173df30ac5 vendor: github.com/klauspost/compress v1.15.12
    fe62290eed go.mod: github.com/miekg/dns v1.1.43
    4ee3cc2531 vendor: github.com/containerd/containerd v1.6.12
    48a0d8a8d1 [23.0] update containerd binary to v1.6.12 (addresses CVE-2022-23471)
    4952dc2844 distribution: remove unused RequireSchema2
    e7b26fa1b1 use ad-hoc libtrust key
    f2463e1e86 distribution: use ad-hoc trustkey for tests
    139080d093 daemon/config: remove and local trustkey utilities
    46e0317bc1 [23.0] remove libtrust tests

Bumping libnetwork to version v0.7.0-dev.3-1857-g05b93e0d, which comprises the following commits:

    f7cdd0e7 Always use iptables -C to look for rules
    a6106f66 Merge iptables.probe() into iptables.detectIptables()
    49bb4902 Check ipt options before looking for ip6t
    51413ef1 libnetwork: processEndpointCreate: Fix deadlock between getSvcRecords and processEndpointCreate
    e460ffec skip TestPortMappingV6Config
    64b196bd circleci: update to "next-gen" convenience image
    50f192e9 circleci: update to docker 20.10
    88744155 update to go1.18.9, gofmt, and regenerate proto
    9ed130d8 fix linting issues
    5e08bdb1 Revert: Added API to set ephemeral port allocator range
    047ac186 Cleanup servicebindings only on Windows
    6f36306d Delay network deletion until after lb cleanup
    a9c349a6 Log HNS policylist removal failures

docker-moby/cli: update to 23.0.x

    27b19a6ac ci: fix branch filter pattern
    14aac2c23 vendor: github.com/docker/docker v23.0.0
    0cd15abfd vendor: github.com/containerd/containerd v1.6.16
    168f1b55e cli/command/container: exit 126 on EISDIR error
    53ed25d9b Fix bad ThrottleDevice path
    9e3d5d152 Fix issue where one bad credential helper causes none to be returned
    1e3622c50 docs: move doc generation scripts to subdir
    9b54d860c rm: allow `docker container remove` as an alias
    00070e6e2 docs: add note about MKE CA rotation, which is potentially dangerous
    67b961789 manifest: save raw manifest content on download
    285e137aa manifest: explicitly error if whitespace reconstruction has failed
    070825bc7 manifest: add support for oci image types
    551c4e9ab Fix typo in reference doc for docker Signed-off-by: Craig Osterhou <craig.osterhout@docker.com>
    8672540f8 vendor: github.com/docker/docker v23.0.0-rc.3
    c4fff9da1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281
    526e5e7c9 vendor: golang.org/x/net v0.5.0
    d7f21ea9c vendor: golang.org/x/term v0.4.0
    ae43eb0e0 vendor: golang.org/x/text v0.6.0
    caf8b152c vendor: golang.org/x/sys v0.4.0
    be30cb370 Fix section docker ps --size
    5d04b1c49 note `--user` args usage restriction
    9bb70217f Add extra newline after additionalHelp output
    59e74b44a cli: additionalHelp() don't decorate output if it's piped
    fc6be6ad3 cli: pass dockerCLI's in/out/err to cobra cmds
    d347678cd README: fix badges
    e04f3dd0d docs: fix duplicated format anchor in plugin_ls
    c453cc687 vendor: github.com/docker/docker v23.0.0-rc.2
    0d16330dd vendor: github.com/containerd/containerd v1.6.15
    b9e1ad3d1 update to go1.19.5
    d1f02a273 deprecated: update deprecation for btrfs on CentOS/RHEL 7
    bdc7e37b3 deprecation: mark btrfs driver as deprecated for CentOS 7 and RHEL7
    35d7fbc81 docs: inspect: remove trailing whitespace from example
    79c9e527a docs: generate markdown
    186dcf30b docs: fix anchors
    c49f1ccb4 update cli-docs-tool to v0.5.1
    5a5b7a61d contrib: fix engine logging docs link
    4595ce588 cmd: set double quotes as code delimiter
    81b051298 docs: fix some more anchors
    71e561780 docs: fix anchor links
    3613fcc86 docs: deprecated: fix link to Docker Desktop 3.2.0 release notes
    b81105718 cli/rm_test: Fix TestRemoveForce race condition
    42de5cc7f service/logs: use strings.Cut
    3fa18636e internal/test: use strings.Cut
    c8bd8932a cli/config: use strings.Cut
    3bed830a2 cli/compose: use strings.Cut
    cb19bf9f7 cli/command: use strings.Cut
    acc45f549 cli/command/volume: use strings.Cut
    806f9eab6 cli/command/swarm: use strings.Cut
    b3557b284 cli/command/stack: use strings.Cut
    2b06c0c42 cli/command/service: use strings.Cut
    f29992c0f cli/command/network: use strings.Cut
    424401233 cli/command/container: use strings.Cut
    6c39bc1f6 opts: use strings.Cut for handling key/value pairs
    a473c5b38 opts: rename logOptsValidator, fix unhandled errors in tests
    d84256132 remove redundant conversions and braces
    720a6a823 docs/run: Fix url to blog "Docker can now run within Docker"
    946bb9471 Missing exec_die event
    784f66014 cli/command/container: remove unused NetworkDisabled field
    6fe14e61f vendor: github.com/docker/docker v23.0.0-rc.1 (use tag)
    c5982f373 vendor: github.com/inconshreveable/mousetrap v1.1.0
    cc859412c vendor: github.com/docker/docker v23.0.0-beta.1.0.20221221173850-cba986b34090
    70d24e854 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f
    bab905a44 vendor: golang.org/x/crypto v0.2.0
    929f23fcf vendor: golang.org/x/net v0.4.0
    2df9ff91e vendor: golang.org/x/term v0.3.0
    1b75c7c52 vendor: golang.org/x/text v0.5.0
    e3e0b7a6c vendor: golang.org/x/sys v0.3.0
    6f2f021b6 vendor: github.com/prometheus/client_golang v1.14.0
    dedbcec46 vendor: github.com/opencontainers/runc v1.1.3
    cd2098c46 vendor: github.com/klauspost/compress v1.15.12
    d7869bead vendor: github.com/containerd/containerd v1.6.14
    06eba426d cmd/docker: fix typo in deprecation warning
    895e7a3df Added missing backslash to documentation sites cli snippet
    2f733b87f cli/flags: remove outdated TODO
    60d62fb72 cmd/docker: improve error message if BUILDKIT_ENABLED=0
    e547881e2 Fix ssh process killed when context is done
    35b42efad [completion/zsh] add volume completion

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-02-10 12:58:29 -05:00
Bruce Ashfield
2119189361 treewide: bulk update patches with status field
While the insane.bbclass upstream-status check hasn't been made
default, users of meta-virtualization may have it enabled in their
distros .. so the effect is the same. We must have this tracking
tag in out patches.

This is a bulk update to add the tag and silence the QA message.

As packages get updated, the normal/routine process of checking
the patches will continue, and the status fields may (or may not)
get more useful.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-27 10:32:06 -05:00
Bruce Ashfield
7cea149bb0 docker: reproducibility add -trimpath to go -> $GO patches
With this, we build and package docker without QA warnings due to
references to TMPDIR.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 11:25:46 -04:00
Bruce Ashfield
9d98a04b26 docker: unify common parts of docker-ce and docker-moby recipes
Now that docker-ce is being built from the same repos as docker-moby,
the only unique things in the recipes are the SRCREVs.

We move the common packaging, compile/install routines and configuration
to the .inc files.

We also move the patches to the generic 'files' directory, so they
can be shared.

If we there are SRCREV bumps in the future that diverge moby and
docker, we'll hold patches in their named directorys and tweak
the compile/install routines as necessary.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-29 17:09:31 -04:00