Release notes
Sourced from github.com/hashicorp/terraform-plugin-go's releases.
v0.26.0
BREAKING CHANGES:
- tfprotov5+tfprotov6:
EphemeralResourceServerinterface is now required inProviderServer. Implementations not needing ephemeral resource support can return errors from the*EphemeralResourcemethods. (#442)- tfprotov5+tfprotov6: Removed temporary
ProviderServerWithEphemeralResourcesinterface type. UseEphemeralResourceServerinstead. (#442)NOTES:
- all: To prevent compilation errors, ensure your Go module is updated to at least terraform-plugin-framework@v1.13.0, terraform-plugin-mux@v0.17.0, terraform-plugin-sdk/v2@v2.35.0, and terraform-plugin-testing@v1.11.0 before upgrading this dependency. (#442)
FEATURES:
- tfprotov5+tfprotov6: Upgraded protocols and added types to support write-only attributes (#462)
Changelog
Sourced from github.com/hashicorp/terraform-plugin-go's changelog.
0.26.0 (January 22, 2025)
BREAKING CHANGES:
- tfprotov5+tfprotov6:
EphemeralResourceServerinterface is now required inProviderServer. Implementations not needing ephemeral resource support can return errors from the*EphemeralResourcemethods. (#442)- tfprotov5+tfprotov6: Removed temporary
ProviderServerWithEphemeralResourcesinterface type. UseEphemeralResourceServerinstead. (#442)NOTES:
- all: To prevent compilation errors, ensure your Go module is updated to at least terraform-plugin-framework@v1.13.0, terraform-plugin-mux@v0.17.0, terraform-plugin-sdk/v2@v2.35.0, and terraform-plugin-testing@v1.11.0 before upgrading this dependency. (#442)
FEATURES:
- tfprotov5+tfprotov6: Upgraded protocols and added types to support write-only attributes (#462)
Commits
a106af9Update changelogeeca0d0build(deps): Bump golang.org/x/net from 0.29.0 to 0.33.0 in /tools (#464)7ff6ef6tfprotov5+tfprotov6: RequireEphemeralResourceServerinProviderServer(#...afd18f1tfprotov5+tfprotov6: Write-only Attribute Implementation (#462)707c7afbuild(deps): Bump google.golang.org/protobuf from 1.36.2 to 1.36.3 (#461)f9370f2build(deps): Bump github.com/hashicorp/terraform-registry-address (#460)5da0acfbuild(deps): Bump google.golang.org/grpc from 1.69.2 to 1.69.4 (#459)a54e1ccbuild(deps): Bump google.golang.org/protobuf from 1.36.1 to 1.36.2 (#458)54b2010Result of tsccr-helper -log-level=info gha update -latest .github/ (#457)f946e2abuild(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 (#455)- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/coder/coder/v2's releases.
v2.18.5
Stable (since January 29, 2025)
Changelog
- Migrate to coder/websocket 1.8.12 (#15898, 2c7f8ac65) (
@spikecurtis)- Update coder/tailscale to latest main (#15927, 2bba3d7b7) (
@Emyrk)Resolves SSH panic.
- Provisioner: Add support for built-in Terraform functions (#16183, 4ba0b39f0) (
@johnstcn)- Provisioner: Allow empty values in
coder_workspace_tagdefaults (#16303, 76adde91d)Compare:
v2.18.4...v2.18.5Container image
docker pull ghcr.io/coder/coder:v2.18.5Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
Commits
Most Recent Ignore Conditions Applied to This Pull Request
| Dependency Name | Ignore Conditions | | --- | --- | | github.com/coder/coder/v2 | [>= 2.15.0.a, < 2.15.1] | | github.com/coder/coder/v2 | [>= 2.18.0.a, < 2.18.1] |Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from goreleaser/goreleaser-action's releases.
v6.2.1
What's Changed
This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the
-prosuffix). Older versions should work fine.[!WARNING] This version is required for GoReleaser Pro v2.7.0+. Read more here.
Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v6.2.0...v6.2.1
v6.2.0
What's Changed
This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the
-prosuffix). Older versions should work fine.[!WARNING] This version is required for GoReleaser Pro v2.7.0+. Read more here.
Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v6.1.0...v6.2.0
Commits
90a3faachore(deps): bake vendor0262998test: fixes450d3a4test: fix configs25b92abchore(deps): update semver and tool-cachebc0ac76chore(deps): update actions842e7ccfeat: update for goreleaser v2.7d28c982chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 (#482)- See full diff in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/go-jose/go-jose/v4's releases.
v4.0.5
What's Changed
- Don't allow unbounded amounts of splits by
@mcpherrinmin go-jose/go-jose#167Fixes https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78
Various other dependency updates, small fixes, and documentation updates in the full changelog
New Contributors
@tgeogheganmade their first contribution in go-jose/go-jose#161Full Changelog: https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5
Version 4.0.4
Fixed
- Reverted "Allow unmarshalling JSONWebKeySets with unsupported key types" as a breaking change. See #136 / #137.
Version 4.0.3
Changed
Changelog
Sourced from github.com/go-jose/go-jose/v4's changelog.
v4.0.4
Fixed
- Reverted "Allow unmarshalling JSONWebKeySets with unsupported key types" as a breaking change. See #136 / #137.
v4.0.3
Changed
Commits
99b346cDon't allow unbounded amounts of splits (#167)22811e7Fix broken link in README.md (#161)9dde849Remove CLA mentions from CONTRIBUTING.md (#160)89172c5Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#158)ee05e01Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#157)c0aef3eBump golang.org/x/crypto from 0.25.0 to 0.31.0 (#156)fdc2cebRemove export disclaimer (#146)10c69efShort circuit return errors fromJSONWebKey.UnmarshalJSON()(#141)15bc4c2Update CHANGELOG for 4.0.4 (#138)f3534caRevert #130: JSONWebKeySet: ignore unsupported key types (#137)- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/docker/docker's releases.
v28.0.0
28.0.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
- docker/cli, 28.0.0 milestone
- moby/moby, 28.0.0 milestone
- Deprecated and removed features, see Deprecated Features.
- Changes to the Engine API, see API version history.
New
- Add ability to mount an image inside a container via
--mount type=image. moby/moby#48798
- You can also specify
--mount type=image,image-subpath=[subpath],...option to mount a specific path from the image. docker/cli#5755docker images --treenow shows metadata badges. docker/cli#5744docker load,docker save, anddocker historynow support a--platformflag allowing you to choose a specific platform for single-platform operations on multi-platform images. docker/cli#5331- Add
OOMScoreAdjtodocker service createanddocker stack. docker/cli#5145docker buildx prunenow supportsreserved-space,max-used-space,min-free-spaceandkeep-bytesfilters. moby/moby#48720- Windows: Add support for running containerd as a child process of the daemon, instead of using a system-installed containerd. moby/moby#47955
Networking
- The
docker-proxybinary has been updated, older versions will not work with the updateddockerd. moby/moby#48132
- Close a window in which the userland proxy (
docker-proxy) could accept TCP connections, that would then fail afteriptablesNAT rules were set up.- The executable
rootlesskit-docker-proxyis no longer used, it has been removed from the build and distribution.- DNS nameservers read from the host's
/etc/resolv.confare now always accessed from the host's network namespace. moby/moby#48290
- When the host's
/etc/resolv.confcontains no nameservers and there are no--dnsoverrides, Google's DNS servers are no longer used, apart from by the default bridge network and in build containers.- Container interfaces in bridge and macvlan networks now use randomly generated MAC addresses. moby/moby#48808
- Gratuitous ARP / Neighbour Advertisement messages will be sent when the interfaces are started so that, when IP addresses are reused, they're associated with the newly generated MAC address.
- IPv6 addresses in the default bridge network are now IPAM-assigned, rather than being derived from the MAC address.
- The deprecated OCI
prestarthook is now only used by build containers. For other containers, network interfaces are added to the network namespace after task creation is complete, before the container task is started. moby/moby#47406- Add a new
gw-priorityoption todocker run,docker container create, anddocker network connect. This option will be used by the Engine to determine which network provides the default gateway for a container. Ondocker run, this option is only available through the extended--networksyntax. docker/cli#5664- Add a new netlabel
com.docker.network.endpoint.ifnameto customize the interface name used when connecting a container to a network. It's supported by all built-in network drivers on Linux. moby/moby#49155
- When a container is created with multiple networks specified, there's no guarantee on the order networks will be connected to the container. So, if a custom interface name uses the same prefix as the auto-generated names, for example
eth, the container might fail to start.- The recommended practice is to use a different prefix, for example
en0, or a numerical suffix high enough to never collide, for exampleeth100.- This label can be specified on
docker network connectvia the--driver-optflag, for exampledocker network connect --driver-opt=com.docker.network.endpoint.ifname=foobar ….- Or via the long-form
--networkflag ondocker run, for exampledocker run --network=name=bridge,driver-opt=com.docker.network.endpoint.ifname=foobar …- If a custom network driver reports capability
GwAllocCheckerthen, before a network is created, it will get aGwAllocCheckerRequestwith the network's options. The custom driver may then reply that no gateway IP address should be allocated. moby/moby#49372Port publishing in bridge networks
dockerdnow requiresipsetsupport in the Linux kernel. moby/moby#48596
- The
iptablesandip6tablesrules used to implement port publishing and network isolation have been extensively modified. This enables some of the following functional changes, and is a first step in refactoring to enable nativenftablessupport in a future release. moby/moby#48815- If it becomes necessary to downgrade to an earlier version of the daemon, some manual cleanup of the new rules will be necessary. The simplest and surest approach is to reboot the host, or use
iptables -Fandip6tables -Fto flush all existingiptablesrules from thefiltertable before starting the older version of the daemon. When that is not possible, run the following commands as root:
iptables -D FORWARD -m set --match-set docker-ext-bridges-v4 dst -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT; ip6tables -D FORWARD -m set --match-set docker-ext-bridges-v6 dst -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPTiptables -D FORWARD -m set --match-set docker-ext-bridges-v4 dst -j DOCKER; ip6tables -D FORWARD -m set --match-set docker-ext-bridges-v6 dst -j DOCKER- If you were previously running with the iptables filter-FORWARD policy set to
ACCEPTand need to restore access to unpublished ports, also delete per-bridge-network rules from theDOCKERchains. For example,iptables -D DOCKER ! -i docker0 -o docker0 -j DROP.- Fix a security issue that was allowing remote hosts to connect directly to a container on its published ports. moby/moby#49325
- Fix a security issue that was allowing neighbor hosts to connect to ports mapped on a loopback address. moby/moby#49325
... (truncated)
Commits
af898abMerge pull request #49495 from vvoland/update-buildkitd67f035vendor: github.com/moby/buildkit v0.20.000ab386Merge pull request #49491 from vvoland/update-buildkit1fde8c4builder-next: fix cdi managercde9f07vendor: github.com/moby/buildkit v0.20.0-rc389e1429Merge pull request #49490 from thaJeztah/dockerfile_lintingb2b5590Dockerfile: fix linting warnings62bc597Merge pull request #49480 from thaJeztah/docs_api_1.48670cd81Merge pull request #49485 from vvoland/c8d-list-panica3628f3docs/api: add documentation for API v1.48- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/hashicorp/terraform-plugin-framework-validators's releases.
v0.17.0
FEATURES:
- boolvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- dynamicvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- float32validator: Added
PreferWriteOnlyAttributevalidator (#263)- float64validator: Added
PreferWriteOnlyAttributevalidator (#263)- int32validator: Added
PreferWriteOnlyAttributevalidator (#263)- int64validator: Added
PreferWriteOnlyAttributevalidator (#263)- listvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- mapvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- numbervalidator: Added
PreferWriteOnlyAttributevalidator (#263)- objectvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- resourcevalidator: Added
PreferWriteOnlyAttributevalidator (#263)- setvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- stringvalidator: Added
PreferWriteOnlyAttributevalidator (#263)
Changelog
Sourced from github.com/hashicorp/terraform-plugin-framework-validators's changelog.
0.17.0 (February 19, 2025)
FEATURES:
- boolvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- dynamicvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- float32validator: Added
PreferWriteOnlyAttributevalidator (#263)- float64validator: Added
PreferWriteOnlyAttributevalidator (#263)- int32validator: Added
PreferWriteOnlyAttributevalidator (#263)- int64validator: Added
PreferWriteOnlyAttributevalidator (#263)- listvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- mapvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- numbervalidator: Added
PreferWriteOnlyAttributevalidator (#263)- objectvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- resourcevalidator: Added
PreferWriteOnlyAttributevalidator (#263)- setvalidator: Added
PreferWriteOnlyAttributevalidator (#263)- stringvalidator: Added
PreferWriteOnlyAttributevalidator (#263)
Commits
75974fcUpdate changelog13b6d4dAddPreferWriteOnlyAttribute()validators toresourcevalidatorand all va...6be3c39build(deps): bump github.com/hashicorp/terraform-plugin-framework (#266)47cad1bResult of tsccr-helper -log-level=info gha update -latest .github/ (#264)e0fa613Update golangci config and resolvecopyloopvar(#265)e0dda54Result of tsccr-helper -log-level=info gha update -latest .github/ (#262)08b59e2Result of tsccr-helper -log-level=info gha update -latest .github/ (#261)c534568build(deps): bump github.com/hashicorp/copywrite in /tools (#260)bcaf368build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 in /tools (#259)9d17e39Result of tsccr-helper -log-level=info gha update -latest .github/ (#257)- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/hashicorp/terraform-plugin-framework's releases.
v1.14.1
BUG FIXES:
- internal/fwserver: fixed bug where write-only attributes set in configuration would cause perpetual diffs for computed attributes. (#1097)
v1.14.0
NOTES:
- Write-only attribute support is in technical preview and offered without compatibility promises until Terraform 1.11 is generally available. (#1044)
- ephemeral: Ephemeral resources are now considered generally available and protected by compatibility promises. (#1052)
FEATURES:
- resource/schema: Added
WriteOnlyschema field for managed resource schemas to indicate a write-only attribute. Write-only attribute values are not saved to the Terraform plan or state artifacts. (#1044)BUG FIXES:
Changelog
Sourced from github.com/hashicorp/terraform-plugin-framework's changelog.
1.14.1 (February 20, 2025)
BUG FIXES:
- internal/fwserver: fixed bug where write-only attributes set in configuration would cause perpetual diffs for computed attributes. (#1097)
1.14.0 (February 19, 2025)
NOTES:
- Write-only attribute support is in technical preview and offered without compatibility promises until Terraform 1.11 is generally available. (#1044)
- ephemeral: Ephemeral resources are now considered generally available and protected by compatibility promises. (#1052)
FEATURES:
- resource/schema: Added
WriteOnlyschema field for managed resource schemas to indicate a write-only attribute. Write-only attribute values are not saved to the Terraform plan or state artifacts. (#1044)BUG FIXES:
Commits
083644cUpdate changelog3000d8cinternal/fwserver: Move write-only nullification to earlier in PlanResourceCh...7c9193dUpdate changelog8288f62Result of tsccr-helper -log-level=info gha update -latest .github/ (#1094)ecd80f6resource/schema: Add validation to prevent write-only attributes in sets and ...0724df1Improve dynamic attribute internal validation handling (#1090)d91ccc1docs: Remove experimental verbiage from ephemeral resources (#1092)fbfbe5cchore: Update golangci-lint linters and apply fixes (#1091)bf1d023internal/fwschemadata: RewriteSetValuesemantic equality logic to ignore o...e1e6866Add support for write only attributes (#1044)- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/hashicorp/terraform-plugin-docs's releases.
v0.21.0
FEATURES:
- generate: Add support for write-only arguments (#434)
Changelog
Sourced from github.com/hashicorp/terraform-plugin-docs's changelog.
0.21.0 (February 27, 2025)
FEATURES:
- generate: Add support for write-only arguments (#434)
Commits
34ba7c2Update changelog660c8d8Result of tsccr-helper -log-level=info gha update -latest .github/ (#452)2ad3f4cBump github.com/hashicorp/copywrite from 0.20.0 to 0.21.0 in /tools (#450)e36f96dgenerate: Add hyperlinks to user documentation and version callouts for write...80d1c8eResult of tsccr-helper -log-level=info gha update -latest .github/ (#449)411d870Added write-only support to generate (#434)40e402fBump golang.org/x/text from 0.21.0 to 0.22.0 (#444)e77d9f6Bump github.com/hashicorp/cli from 1.1.6 to 1.1.7 (#441)ecbdcf3Result of tsccr-helper -log-level=info gha update -latest .github/ (#443)301169aBump github.com/bmatcuk/doublestar/v4 from 4.8.0 to 4.8.1 (#440)- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/docker/docker's releases.
v28.0.1
28.0.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Networking
- Remove dependency on kernel modules
ip_set,ip_set_hash_netandnetfilter_xt_set.
- The dependency was introduced in release 28.0.0 but proved too disruptive. The iptables rules using these modules have been replaced. moby/moby#49530
- Allow daemon startup on a host with IPv6 disabled without requiring
--ip6tables=false. moby/moby#49525- Fix a bug that was causing containers with
--restart=alwaysand a published port already in use to restart in a tight loop. moby/moby#49507- Fix an issue with Swarm ingress, caused by incorrect ordering of iptables rules. moby/moby#49538
- Fix creation of a swarm-scoped network from a
--config-onlynetwork. moby/moby#49521- Fix
docker network inspectreporting an IPv6 gateway with CIDR suffix for a newly created network with no specific IPAM config, until a daemon restart. moby/moby#49520- Improve the error reported when kernel modules
ip_set,ip_set_hash_netandnetilter_xt_setare not available. moby/moby#49524- Move most of Docker's iptables rules out of the filter-FORWARD chain, so that other applications are free to append rules that must follow Docker's rules. moby/moby#49518
- Update
--helpoutput and man page lo state which options only apply to the default bridge network. moby/moby#49522Bug fixes and enhancements
- Fix
docker context createalways returning an error when using the"skip-tls-verify"option. docker/cli#5850- Fix shell completion suggesting IDs instead of names for services and nodes. docker/cli#5848
- Fix unintentionally printing exit status to standard error output when
docker exec/runreturns a non-zero status. docker/cli#5854- Fix regression
protocol "tcp" is not supported by the RootlessKit port driver "slirp4netns". moby/moby#49514- containerd image store: Fix
docker inspectnot being able to show multi-platform images with missing layers for all platforms. moby/moby#49533- containerd image store: Fix
docker images --treereporting wrong content size. moby/moby#49535- Fix compilation on i386 moby/moby#49526
Packaging updates
- Update
github.com/go-jose/go-jose/v4to v4.0.5 to address. GHSA-c6gw-w398-hv78 / CVE-2025-27144 docker/cli#5867- Update Buildx to v0.21.1. docker/docker-ce-packaging#1167
- Update Compose to v2.33.1. docker/docker-ce-packaging#1168
API
- containerd image store: Fix
GET /images/json?manifests=1not fillingManifestsfor index-only images. moby/moby#49533- containerd image store: Fix
GET /images/json and /images/<name>/jsonSize.Contentfield including the size of content that's not available locally. moby/moby#49535
Commits
bbd0a17Merge pull request #49538 from robmry/docker_ingress8ae4858Merge pull request #49545 from robmry/revert_check-config_ipset1814363Revert "contrib/check-config: add ipset related flags"558da63Jump to DOCKER-INGRESS from DOCKER-FORWARDf92fdfeMerge pull request #49530 from robmry/disable_ip_set88bc9a3Merge pull request #49535 from vvoland/c8d-fixcontentsize76417bfDon't use ipsetc35159ec8d/manifests: Fix Content size including missing content0510499Merge pull request #49533 from vvoland/c8d-inspectlist-indeximg0274c63Merge pull request #49518 from robmry/docker_forward_chain- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Commits
85d1d54go.mod: update golang.org/x dependenciescde1ddaproxy, http/httpproxy: do not mismatch IPv6 zone ids against hostsfe7f039publicsuffix: spruce up code gen and speed up PublicSuffix459513dinternal/http3: move more common stream processing to genericConnaad0180http2: fix flakiness from t.Log when GOOS=jsb73e574http2: don't log expected errors from writing invalid trailers5f45c77internal/http3: make read-data tests usable for server handlers43c2540http2, internal/httpcommon: reject userinfo in :authority1d78a08http2, internal/httpcommon: factor out server header logic for h2/h30d7dc54quic: add Conn.ConnectionState- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/coder/coder/v2's releases.
v2.20.0
Changelog
[!NOTE] This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.
BREAKING CHANGES
- Enforce agent names be case-insensitive-unique per-workspace (#16614, 3fddfef87) (
@ethanndickson)- Enforce regex for agent names (#16641, 9469b7829) (
@deansheather)Underscores and trailing, leading and double hyphens are now blocked in agent names.
Features
Organizations have reached general availability and Workspace Presets are available in beta. Read more about how to get started with these features in our monthly changelog.
- Orgs IDP sync - add combobox to select claim field value when sync field is set (#16335, 7f44189ed) (
@jaaydenh)Improves UX of entering IDP sync claims via the dashboard.
- Show warning on unrecognized idp org mapping claims (#16478, bcfeb726d) (
@aslilac)- Show warning on unrecognized idp group and role mapping claims (#16485, 323559ba8) (
@aslilac)
- Add combobox for selecting claim field value for group/role idp sync (#16459, 7076c4e4a) (
@jaaydenh)Automatically detects IDP claims once a provider is configured for entry in the dashboard.
- Improve resources_monitoring for OOM & OOD monitoring (#16241, 7cbd77fd9) (
@defelmnq)- Integrate agentAPI with resources monitoring logic (#16438, bc609d005) (
@defelmnq)Adds "resource alerts" as a native notification. Set thresholds on memory, disk to alert users when their workspaces are running low on resources.
- Add agentapi endpoint to report connections for audit (#16507, b07b33ec9) (
@mafredri)- Add workspace agent connect and app open audit types (#16493, b5329ae1c) (
@mafredri)Administrators and Auditors may now see agent connections and app opens in the audit log.
- Add notifications troubleshooting tab (#16650, e8a7b7e8c) (
@mtojek)- Add CLI tool to send a test notification (#16611, d2419c89a) (
@DanielleMaywood)
- Support the OAuth2 device flow with GitHub for signing in (#16585, 8c5e7007c) (
@hugodutka)- Show dialog with a redirect if permissions are required (#16661, 39f42bc11) (
@brettkolodny)- Enable soft delete for organizations (#16584, 546a549dc) (
@jaaydenh)Previously, administrators could not delete organizations, even if all contained resources were removed or deleted. This resolves that issue and allows administrators to clean up organizations.
- Implement sign up with GitHub for the first user (#16629, 67d89bb10) (
@hugodutka)- Enable GitHub OAuth2 login by default on new deployments (#16662, d3a56ae3e) (
@hugodutka)Users may now sign up with Github on a fresh deployment of Coder.
- Extend
OverrideVSCodeConfigsto support additional VS Code IDEs (#16654, 763921bc6) (@matifali)- Add provisioner tags field on template creation (#16656, 38ad8d1f3) (
@BrunoQuaresma)- Include winres metadata in Windows binaries (#16742, 36186bbb7)
- Implement WorkspaceCreationBan organization role (#16786, 4633658d5) (
@Emyrk)Allows administrators to assign the native "Workspace creation ban" to users and prevent them from creating workspaces.
- Agent: Add container list handler (#16346, 31b1ff7d3) (
@johnstcn)This PR adds an API endpoint to coderd
/api/v2/workspaceagents/:id/containersthat allows listing containers visible to the agent. Optional filtering by labels is supported.- Agent: Add
CODER_AGENT_DEVCONTAINERS_ENABLEoption (#16525, 35901028d) (@johnstcn)
... (truncated)
Commits
03b5012feat: update default audit log avatar (cherry-pick #16774) (#16805)a5eb06efix: add org role read perm to site template admins and auditors (cherry-pick...8aec4f2chore: create collapsible summary component (cherry-pick #16705) (#16794)e54e31echore: add an unassign action for roles (cherry-pick #16728) (#16791)32dc903fix: allow viewOrgRoles for custom roles page (cherry-pick #16722) (#16789)7381f9achore: warn user without permissions to view org members (cherry-pick #16721)...4633658feat: implement WorkspaceCreationBan org role (cherry-pick #16686) (#16786)6da3c9dfix: allow orgs with default github provider (cherry-pick #16755) (#16784)99a5d72docs: suggest disabling the default GitHub OAuth2 provider on k8s (cherry-pic...fc0db40docs: document default GitHub OAuth2 configuration and device flow (2.20) (#1...- Additional commits viewable in compare view
Most Recent Ignore Conditions Applied to This Pull Request
| Dependency Name | Ignore Conditions | | --- | --- | | github.com/coder/coder/v2 | [>= 2.15.0.a, < 2.15.1] | | github.com/coder/coder/v2 | [>= 2.18.0.a, < 2.18.1] |Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from actions/setup-go's releases.
v5.4.0
What's Changed
Dependency updates :
- Upgrade semver from 7.6.0 to 7.6.3 by
@dependabotin actions/setup-go#535- Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by
@dependabotin actions/setup-go#536- Upgrade
@action/cachefrom 4.0.0 to 4.0.2 by@aparnajyothi-yin actions/setup-go#568- Upgrade undici from 5.28.4 to 5.28.5 by
@dependabotin actions/setup-go#541New Contributors
@aparnajyothi-ymade their first contribution in actions/setup-go#568Full Changelog: https://github.com/actions/setup-go/compare/v5...v5.4.0
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/coder/coder/v2's releases.
v2.20.2
Changelog
[!NOTE] This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.
Bug fixes
- Hide deleted users from org members query (#16830, 3569e56cf) (
@aslilac)- Fix deployment settings navigation issues (#16780, 8a3ebaca0) (
@aslilac)Compare:
v2.20.1...v2.20.2Container image
docker pull ghcr.io/coder/coder:v2.20.2Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
v2.20.1
Changelog
[!NOTE] This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.
Bug fixes
- Remove provisioners from deployment sidebar (#16927, bdd7794e8)
- Prevent audit log search from crashing with regular use (#16944, dba881fc7)
Compare:
v2.20.0...v2.20.1Container image
docker pull ghcr.io/coder/coder:v2.20.1Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
Commits
8a3ebacfix: fix deployment settings navigation issues (cherry-pick #16780) (#16790)3569e56fix: hide deleted users from org members query (cherry-pick #16830) (#16832)dba881ffix: fix audit log search (cherry-pick #16944) (#16945)b615a35chore: use org-scoped roles for organization user e2e tests (cherry-pick #166...bdd7794fix: remove provisioners from deployment sidebar (cherry-pick #16717) (#16927)- See full diff in compare view
Most Recent Ignore Conditions Applied to This Pull Request
| Dependency Name | Ignore Conditions | | --- | --- | | github.com/coder/coder/v2 | [>= 2.15.0.a, < 2.15.1] | | github.com/coder/coder/v2 | [>= 2.18.0.a, < 2.18.1] |Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/hashicorp/terraform-plugin-testing's releases.
v1.12.0
NOTES:
- all: This Go module has been updated to Go 1.23 per the Go support policy. It is recommended to review the Go 1.23 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#454)
FEATURES:
- knownvalue: added function checks for custom validation of resource attribute or output values. (#412)
ENHANCEMENTS:
- knownvalue: Updated the
ObjectExacterror message to report extra/missing attributes from the actual object. (#451)- plancheck: Improved the unknown value plan check error messages to include a known value if one exists. (#450)
BUG FIXES:
- plancheck: Fixed bug with all unknown value plan checks where a valid path would return a "path not found" error. (#450)
Changelog
Sourced from github.com/hashicorp/terraform-plugin-testing's changelog.
1.12.0 (March 18, 2025)
NOTES:
- all: This Go module has been updated to Go 1.23 per the Go support policy. It is recommended to review the Go 1.23 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#454)
FEATURES:
- knownvalue: added function checks for custom validation of resource attribute or output values. (#412)
ENHANCEMENTS:
- knownvalue: Updated the
ObjectExacterror message to report extra/missing attributes from the actual object. (#451)- plancheck: Improved the unknown value plan check error messages to include a known value if one exists. (#450)
BUG FIXES:
- plancheck: Fixed bug with all unknown value plan checks where a valid path would return a "path not found" error. (#450)
Commits
1ffb3e0Update changelogb0b505eplancheck: Include known value in error message when asserting an unknown val...41b2d19Add the missing/extra attribute names to the error message for `knownvalue.Ob...b505110build(deps): Bump github.com/hashicorp/go-cty from 1.4.1 to 1.5.0 (#457)b940385chore: Update minimum Go version in module (#454)96ff574knownvalue: Introduce function checks for primitive types (#412)5f414d2Result of tsccr-helper -log-level=info gha update -latest .github/ (#447)2113550chore: FIx golangci linters (#446)13c4fb0build(deps): Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#437)9a146e5build(deps): Bump github.com/hashicorp/terraform-plugin-sdk/v2 (#433)- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/docker/docker's releases.
v28.0.4
28.0.4
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
- Fix a regression causing
docker pull/pushto fail when interacting with a private repository. docker/cli#5964v28.0.3
28.0.3
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
- Fix
docker runtruncating theSTDOUT/STDERRprematurely when the container exits before the data is consumed. docker/cli#5957Packaging updates
- Update BuildKit to v0.20.2. moby/moby#49698
- Update
runcto v1.2.6 (static packages only). moby/moby#49682- Update containerd to v1.7.26. docker/containerd-packaging#409
v28.0.2
28.0.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
- Fix CLI-specific attributes (
docker.cli.*) being unintentionally passed to downstream OTel services. docker/cli#5842- Fix an issue where user-specified
OTEL_RESOURCE_ATTRIBUTESwere being overridden by CLI's internal telemetry attributes. The CLI now properly merges user-specified attributes with internal ones, allowing both to coexist. docker/cli#5842- Fix daemon failing to start on Windows when a container created before v28.0.0 was present. moby/moby#49626
- Fix possible error on
docker buildx prunewith the--min-free-space. moby/moby#49623- Fix spurious
io: read/write on closed pipeerror in the daemon log when closing container. moby/moby#49590- Fix the Docker daemon failing too early if the containerd socket isn't immediately available. moby/moby#49603
- Mask Linux thermal interrupt info in a container's
/procand/sysby default. moby/moby#49560- Update
contrib/check-config.shto check for more kernel modules related to iptables. moby/moby#49622- containerd image store: Fix integer overflow in User ID handling passed via
--user. moby/moby#49652- containerd image store: Fix spurious
reference for unknown type: application/vnd.in-toto+jsonwarning being logged to the daemon's log. moby/moby#49652
... (truncated)
Commits
6430e49Merge pull request #49700 from vvoland/missing-buildtagscc90726Add missing go1.22 build constraints330857aMerge pull request #49698 from jsternberg/buildkit-0.20.22fce935vendor: github.com/moby/buildkit v0.20.2ecb03c4Merge pull request #49691 from thaJeztah/bump_selinuxaccda31Merge pull request #49562 from thaJeztah/switch_cgroups6a0f71cMerge pull request #49686 from thaJeztah/attach_nitse2011afMerge pull request #49692 from thaJeztah/rm_aliases3e957c6remove some redundant import-aliases4db84b1switch to github.com/opencontainers/cgroups- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from crazy-max/ghaction-import-gpg's releases.
v6.3.0
- Bump openpgp from 5.11.2 to 6.1.0 in crazy-max/ghaction-import-gpg#215
- Bump cross-spawn from 7.0.3 to 7.0.6 in crazy-max/ghaction-import-gpg#212
Full Changelog: https://github.com/crazy-max/ghaction-import-gpg/compare/v6.2.0...v6.3.0
Commits
e89d409Merge pull request #215 from crazy-max/dependabot/npm_and_yarn/openpgp-6.1.09239589fix README177db9dchore: update generated content78b11f3build(deps): bump openpgp from 5.11.2 to 6.1.0bc96911Merge pull request #218 from crazy-max/bake-v6b70aa9bci: update bake-action to v6d690cc9Merge pull request #212 from crazy-max/dependabot/npm_and_yarn/cross-spawn-7.0.69e887f4Merge pull request #211 from crazy-max/dependabot/github_actions/codecov/code...442980bci: fix deprecated codecov inputa0098b6Merge pull request #217 from crazy-max/gha-perms- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from goreleaser/goreleaser-action's releases.
v6.3.0
- Bump undici from 5.28.3 to 5.28.5 in goreleaser/goreleaser-action#488
Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v6.2.1...v6.3.0
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Commits
e1fcd82html: properly handle trailing solidus in unquoted attribute value in foreign...ebed060internal/http3: fix build of tests with GOEXPERIMENT=nosynctest1f1fa29publicsuffix: regenerate table1215081http2: improve error when server sends HTTP/1312450ehtml: ensure <search> tag closes <p> and update tests09731f9http2: improve handling of lost PING in Server55989e2http2/h2c: use ResponseController for hijacking connections2914f46websocket: re-recommend gorilla/websocket- See full diff in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Release notes
Sourced from github.com/docker/docker's releases.
v28.1.1
28.1.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Bug fixes and enhancements
- Fix
dockerd-rootless-setuptool.shincorrectly reporting missingiptables. moby/moby#49833- containerd image store: Fix a potential daemon crash when using
docker loadwith archives containing zero-size tar headers. moby/moby#49837Packaging updates
- Update Buildx to v0.23.0. docker/docker-ce-packaging#1185
- Update Compose to v2.35.1. docker/docker-ce-packaging#1188
Networking
- Add a warning to a container's
/etc/resolv.confwhen no upstream DNS servers were found. moby/moby#49827v28.1.0
28.1.0
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
- docker/cli, 28.1.0 milestone
- moby/moby, 28.1.0 milestone
- Changes to the Engine API, see API version history.
New
- Add
docker bakesub-command as alias fordocker buildx bake. docker/cli#5947- Experimental: add a new
--use-api-socketflag ondocker runanddocker createto enable access to Docker socket from inside a container and to share credentials from the host with the container. docker/cli#5858docker image inspectnow supports a--platformflag to inspect a specific platform of a multi-platform image. docker/cli#5934Bug fixes and enhancements
- Add CLI shell-completion for context names. docker/cli#6016
- Fix
docker images --treenot including non-container images content size in the total image content size. docker/cli#6000- Fix
docker loadnot preserving replaced images. moby/moby#49650- Fix
docker loginhints when logging in to a custom registry. docker/cli#6015- Fix
docker statsnot working properly on machines with high CPU core count. moby/moby#49734- Fix a regression causing
docker pull/pushto fail when interacting with a private repository. docker/cli#5964- Fix an issue preventing rootless Docker setup on a host with no
ip_tableskernel module. moby/moby#49727- Fix an issue that could lead to unwanted iptables rules being restored and never deleted following a firewalld reload. moby/moby#49728
- Improve CLI completion of
docker service scale. docker/cli#5968docker images --treenow hides both untagged and dangling images by default. docker/cli#5924docker system infowill provide an exit code if a connection cannot be established to the Docker daemon. docker/cli#5918
... (truncated)
Commits
01f442bMerge pull request #49588 from thaJeztah/bump_go_build_tagse03c0f0Merge pull request #49834 from thaJeztah/cleanup_ignore8dde918Merge pull request #49837 from thaJeztah/bump_containerd_2.0.5e70ce7aMerge pull request #49833 from vvoland/rootless-iptables-checkfc8361cvendor: github.com/containerd/containerd v2.0.562f51e4vendor: golang.org/x/oauth2 v0.29.0bbbb003cleanup ignore filesead379acontrib/rootless-setuptool: Fix iptables detection7c52c4dupdate go:build tags to go1.23 to align with vendor.mod6573a13Merge pull request #49827 from robmry/warn_no_ext_nameservers- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show