You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@beam.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2024/08/02 04:31:39 UTC
[PR] Bump github.com/docker/docker from 25.0.5+incompatible to 27.1.1+incompatible in /sdks [beam]
dependabot[bot] opened a new pull request, #32059:
URL: https://github.com/apache/beam/pull/32059
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 25.0.5+incompatible to 27.1.1+incompatible.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p>
<blockquote>
<h2>v27.1.1</h2>
<h2>27.1.1</h2>
<h3>Security</h3>
<p>This release contains a fix for <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110">CVE-2024-41110</a> / <a href="https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq">GHSA-v23v-6jw2-98fq</a>
that impacted setups using <a href="https://docs.docker.com/engine/extend/plugins_authorization/">authorization plugins (AuthZ)</a>
for access control. No other changes are included in this release, and this
release is otherwise identical for users not using AuthZ plugins.</p>
<h3>Packaging updates</h3>
<ul>
<li>Update Compose to <a href="https://github.com/docker/compose/releases/tag/v2.29.1">v2.29.1</a>. <a href="https://redirect.github.com/docker/docker-ce-packaging/pull/1041">moby/docker-ce-packaging#1041</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/moby/moby/compare/v27.1.0...v27.1.1">https://github.com/moby/moby/compare/v27.1.0...v27.1.1</a></p>
<h2>v27.1.0</h2>
<h2>27.1.0</h2>
<p>For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:</p>
<ul>
<li><a href="https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A27.1.0">docker/cli, 27.1.0 milestone</a></li>
<li><a href="https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A27.1.0">moby/moby, 27.1.0 milestone</a></li>
<li>Deprecated and removed features, see <a href="https://github.com/docker/cli/blob/v27.1.0/docs/deprecated.md">Deprecated Features</a>.</li>
<li>Changes to the Engine API, see <a href="https://github.com/moby/moby/blob/v27.1.0/docs/api/version-history.md">API version history</a>.</li>
</ul>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>rootless: add <code>Requires=dbus.socket</code> to prevent errors when starting the daemon on a cgroup v2 host with systemd <a href="https://redirect.github.com/moby/moby/pull/48141">moby/moby#48141</a></li>
<li>containerd integration: <code>image tag</code> event is now properly emitted when building images with BuildKit <a href="https://redirect.github.com/moby/moby/pull/48182">moby/moby#48182</a></li>
<li>CLI: enable shell completion for <code>docker image rm</code>, <code>docker image history</code>, and <code>docker image inspect</code> <a href="https://redirect.github.com/moby/moby/pull/5261">moby/moby#5261</a></li>
<li>CLI: add and improve shell completions for various flags <a href="https://redirect.github.com/moby/moby/pull/5261">moby/moby#5261</a></li>
<li>CLI: add OOMScoreAdj to <code>docker service create</code> and <code>docker stack</code> <a href="https://redirect.github.com/docker/cli/pull/5274">docker/cli#5274</a></li>
<li>CLI: add support for <code>DOCKER_CUSTOM_HEADERS</code> environment variable (experimental) <a href="https://redirect.github.com/docker/cli/pull/5271">docker/cli#5271</a></li>
<li>CLI: containerd-integration: Fix <code>docker push</code> defaulting the <code>--platform</code> flag to a value of <code>DOCKER_DEFAULT_PLATFORM</code> environment variable on unsupported API versions <a href="https://redirect.github.com/docker/cli/pull/5248">docker/cli#5248</a></li>
<li>CLI: fix: context cancellation on <code>login</code> prompt <a href="https://redirect.github.com/docker/cli/pull/5260">docker/cli#5260</a></li>
<li>CLI: fix: wait for the container to exit before closing the stream when sending a termination request to the CLI while attached to a container <a href="https://redirect.github.com/docker/cli/pull/5250">docker/cli#5250</a></li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>The <code>pkg/rootless/specconv</code> package is deprecated, and will be removed in the next release <a href="https://redirect.github.com/moby/moby/pull/48185">moby/moby#48185</a></li>
<li>The <code>pkg/containerfs</code> package is deprecated, and will be removed in the next release <a href="https://redirect.github.com/moby/moby/pull/48185">moby/moby#48185</a></li>
<li>The <code>pkg/directory</code> package is deprecated, and will be removed in the next release <a href="https://redirect.github.com/moby/moby/pull/48185">moby/moby#48185</a></li>
<li><code>api/types/system</code>: remove deprecated <code>Info.ExecutionDriver</code> <a href="https://redirect.github.com/moby/moby/pull/48184">moby/moby#48184</a></li>
</ul>
<h3>Packaging updates</h3>
<ul>
<li>Update Buildx to <a href="https://github.com/docker/buildx/releases/tag/v0.16.1">v0.16.1</a>. <a href="https://redirect.github.com/docker/docker-ce-packaging/pull/1039">moby/docker-ce-packaging#1039</a></li>
<li>Update Compose to <a href="https://github.com/docker/compose/releases/tag/v2.29.0">v2.29.0</a>. <a href="https://redirect.github.com/docker/docker-ce-packaging/pull/1038">moby/docker-ce-packaging#1038</a></li>
<li>Update Containerd (static binaries only) to <a href="https://github.com/containerd/containerd/releases/tag/v1.7.20">v1.7.20</a>. <a href="https://redirect.github.com/moby/moby/pull/48191">moby/moby#48191</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801"><code>cc13f95</code></a> Merge commit from fork</li>
<li><a href="https://github.com/moby/moby/commit/a21b1a2d12e2c01542cb191eb526d7bfad0641e3"><code>a21b1a2</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/48196">#48196</a> from thaJeztah/27.1_backport_vendor_containerd_1.7.20</li>
<li><a href="https://github.com/moby/moby/commit/1bc907c97cc5b7e241802a75c44b431761dcd900"><code>1bc907c</code></a> vendor: github.com/containerd/containerd v1.7.20</li>
<li><a href="https://github.com/moby/moby/commit/4bb4575ffb88fcb93afb989625a9281c4f75361a"><code>4bb4575</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/48191">#48191</a> from thaJeztah/27.1_backport_update_containerd_bina...</li>
<li><a href="https://github.com/moby/moby/commit/df7f275db657150a810764c77ccf209897717dcd"><code>df7f275</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/48195">#48195</a> from thaJeztah/27.1_backport_fix_pr_title_check</li>
<li><a href="https://github.com/moby/moby/commit/1c0885d60dad9df0adf9b1c2a03a3672ab2e47f2"><code>1c0885d</code></a> gha: check-pr-branch: fix branch check regression</li>
<li><a href="https://github.com/moby/moby/commit/fb3ec9fc96b9f0c7d0d8b2df1400f485b3acc88e"><code>fb3ec9f</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/48187">#48187</a> from thaJeztah/27.1_backport_bump_buildx_compose</li>
<li><a href="https://github.com/moby/moby/commit/ed83a9e3a153c1d96ed791a73b85a2e8891fe428"><code>ed83a9e</code></a> update containerd binary to v1.7.20</li>
<li><a href="https://github.com/moby/moby/commit/71b59bf442545e8d623ab4a573b8dc0b7db7e9a7"><code>71b59bf</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/48178">#48178</a> from thaJeztah/27.1_backport_relax_pr_check</li>
<li><a href="https://github.com/moby/moby/commit/f8f926b719f7c69126079ac2e4caa034a8857b53"><code>f8f926b</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/48185">#48185</a> from thaJeztah/27.1_backport_internalize_pkg_directory</li>
<li>Additional commits viewable in <a href="https://github.com/docker/docker/compare/v25.0.5...v27.1.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump github.com/docker/docker from 25.0.5+incompatible to 27.1.1+incompatible in /sdks [beam]
Posted by "lostluck (via GitHub)" <gi...@apache.org>.
lostluck commented on PR #32059:
URL: https://github.com/apache/beam/pull/32059#issuecomment-2272312698
FYI @pierodesalvia #32092 has the necessary changes (along with a Go minimum version bump to 1.21) and I'll make sure that it stays that way. Cheers.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump github.com/docker/docker from 25.0.5+incompatible to 27.1.1+incompatible in /sdks [beam]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #32059:
URL: https://github.com/apache/beam/pull/32059#issuecomment-2272311567
Looks like github.com/docker/docker is up-to-date now, so this is no longer needed.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump github.com/docker/docker from 25.0.5+incompatible to 27.1.1+incompatible in /sdks [beam]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #32059:
URL: https://github.com/apache/beam/pull/32059#issuecomment-2269982454
Stopping reviewer notifications for this pull request: review requested by someone other than the bot, ceding control. If you'd like to restart, comment `assign set of reviewers`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump github.com/docker/docker from 25.0.5+incompatible to 27.1.1+incompatible in /sdks [beam]
Posted by "pierodesalvia (via GitHub)" <gi...@apache.org>.
pierodesalvia commented on PR #32059:
URL: https://github.com/apache/beam/pull/32059#issuecomment-2264881289
This affects many projects using beam.
This is the patch that fixes it:
diff --git a/sdks/go/pkg/beam/runners/prism/internal/environments.go b/sdks/go/pkg/beam/runners/prism/internal/environments.go
index 3a429920fb2..9ff1ac27700 100644
--- a/sdks/go/pkg/beam/runners/prism/internal/environments.go
+++ b/sdks/go/pkg/beam/runners/prism/internal/environments.go
@@ -19,6 +19,7 @@ import (
"bytes"
"context"
"fmt"
+ "github.com/docker/docker/api/types/image"
"io"
"os"
@@ -32,7 +33,6 @@ import (
"google.golang.org/grpc/credentials/insecure"
"google.golang.org/protobuf/proto"
- dtyp "github.com/docker/docker/api/types"
"github.com/docker/docker/api/types/container"
"github.com/docker/docker/api/types/mount"
dcli "github.com/docker/docker/client"
@@ -132,7 +132,7 @@ func dockerEnvironment(ctx context.Context, logger *slog.Logger, dp *pipepb.Dock
}
if _, _, err := cli.ImageInspectWithRaw(ctx, dp.GetContainerImage()); err != nil {
// We don't have a local image, so we should pull it.
- if rc, err := cli.ImagePull(ctx, dp.GetContainerImage(), dtyp.ImagePullOptions{}); err == nil {
+ if rc, err := cli.ImagePull(ctx, dp.GetContainerImage(), image.PullOptions{}); err == nil {
// Copy the output, but discard it so we can wait until the image pull is finished.
io.Copy(io.Discard, rc)
rc.Close()
@@ -164,7 +164,7 @@ func dockerEnvironment(ctx context.Context, logger *slog.Logger, dp *pipepb.Dock
containerID := ccr.ID
logger = logger.With("container", containerID)
- if err := cli.ContainerStart(ctx, containerID, dtyp.ContainerStartOptions{}); err != nil {
+ if err := cli.ContainerStart(ctx, containerID, container.StartOptions{}); err != nil {
cli.Close()
return fmt.Errorf("unable to start container image %v with docker for env %v, err: %w", dp.GetContainerImage(), wk.Env, err)
}
@@ -189,7 +189,7 @@ func dockerEnvironment(ctx context.Context, logger *slog.Logger, dp *pipepb.Dock
case resp := <-statusCh:
logger.Info("docker container has self terminated", "status_code", resp.StatusCode)
- rc, err := cli.ContainerLogs(ctx, containerID, dtyp.ContainerLogsOptions{Details: true, ShowStdout: true, ShowStderr: true})
+ rc, err := cli.ContainerLogs(ctx, containerID, container.LogsOptions{Details: true, ShowStdout: true, ShowStderr: true})
if err != nil {
logger.Error("docker container logs error", "error", err)
}
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump github.com/docker/docker from 25.0.5+incompatible to 27.1.1+incompatible in /sdks [beam]
Posted by "lostluck (via GitHub)" <gi...@apache.org>.
lostluck commented on PR #32059:
URL: https://github.com/apache/beam/pull/32059#issuecomment-2271909461
Looking into it!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump github.com/docker/docker from 25.0.5+incompatible to 27.1.1+incompatible in /sdks [beam]
Posted by "chamikaramj (via GitHub)" <gi...@apache.org>.
chamikaramj commented on PR #32059:
URL: https://github.com/apache/beam/pull/32059#issuecomment-2269978924
R: @lostluck
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump github.com/docker/docker from 25.0.5+incompatible to 27.1.1+incompatible in /sdks [beam]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #32059:
URL: https://github.com/apache/beam/pull/32059#issuecomment-2264564323
Checks are failing. Will not request review until checks are succeeding. If you'd like to override that behavior, comment `assign set of reviewers`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump github.com/docker/docker from 25.0.5+incompatible to 27.1.1+incompatible in /sdks [beam]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] closed pull request #32059: Bump github.com/docker/docker from 25.0.5+incompatible to 27.1.1+incompatible in /sdks
URL: https://github.com/apache/beam/pull/32059
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org