Skip to content

chore(deps): replace docker with moby [security]#1299

Merged
paralta merged 3 commits intomainfrom
chore/bump-docker
Apr 10, 2026
Merged

chore(deps): replace docker with moby [security]#1299
paralta merged 3 commits intomainfrom
chore/bump-docker

Conversation

@paralta
Copy link
Copy Markdown
Member

@paralta paralta commented Apr 10, 2026

  • Fix Dependabot alert CVE-2026-34040 (AuthZ plugin bypass, CVSS 8.8)
  • The old github.com/docker/docker module is deprecated since v29.0.0 and will never receive a patch for this CVE
  • Migrate to the replacement modules github.com/moby/moby/api v1.54.1 and github.com/moby/moby/client v0.4.0
  • Pin pr size labeler to latest to fix renovate warning Dependency Dashboard #1172 as label issue has been fixed

v29 breaking changes applied

From the release notes:

  • api/types/filters package removed — replaced by client.Filters (moby#51115)
  • container.ListOptions, events.ListOptions and other option types moved into the client package (moby#50897, moby#50774)
  • ContainerList, ContainerInspect, Events, and Ping now use option structs and return dedicated result structs instead of bare types (moby#50448, moby#50897)

…ports in adapter.go

Signed-off-by: Catarina Paralta <clouropa@cisco.com>
@github-actions github-actions bot added the size/XS Denotes a PR that changes 0-49 lines label Apr 10, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 10, 2026

The latest Buf updates on your PR. Results from workflow Buf CI / verify-proto (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed⏩ skipped⏩ skipped✅ passedApr 10, 2026, 3:15 PM

@paralta paralta marked this pull request as ready for review April 10, 2026 15:07
@paralta paralta requested a review from a team as a code owner April 10, 2026 15:07
paralta added 2 commits April 10, 2026 16:11
…t instead of NewClientWithOpts

Signed-off-by: Catarina Paralta <clouropa@cisco.com>
Signed-off-by: Catarina Paralta <clouropa@cisco.com>
@paralta paralta changed the title chore(deps): replace docker with moby in go.mod [security] chore(deps): replace docker with moby [security] Apr 10, 2026
Copy link
Copy Markdown
Member

@arpad-csepi arpad-csepi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@paralta paralta merged commit 1f67083 into main Apr 10, 2026
76 of 77 checks passed
@paralta paralta deleted the chore/bump-docker branch April 10, 2026 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/XS Denotes a PR that changes 0-49 lines

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants