starred/act

Fork 0

mirror of https://github.com/nektos/act.git synced 2026-04-26 17:35:49 +03:00

docker from 20.10.8+incompatible to 20.10.10+incompatible #1647

New issue

Closed

opened 2026-03-01 21:52:04 +03:00 by kerem · 0 comments

kerem commented

2026-03-01 21:52:04 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/855
Author: @dependabot[bot]
Created: 10/31/2021
Status: ✅ Merged
Merged: 11/1/2021
Merged by: @mergify[bot]

Base: master ← Head: dependabot/go_modules/github.com/docker/docker-20.10.10incompatible

📝 Commits (1)

cbf6369 build(deps): bump github.com/docker/docker

📊 Changes

2 files changed (+3 additions, -3 deletions)

View changed files

📝 go.mod (+1 -1)
📝 go.sum (+2 -2)

📄 Description

Bumps github.com/docker/docker from 20.10.8+incompatible to 20.10.10+incompatible.

Release notes

Sourced from github.com/docker/docker's releases.

v20.10.10

20.10.10

IMPORTANT

Due to net/http changes in Go 1.16, HTTP proxies configured through the $HTTP_PROXY environment variable are no longer used for TLS (https://) connections. Make sure you also set an $HTTPS_PROXY environment variable for handling requests to https:// URLs.

Refer to the HTTP/HTTPS proxy section to learn how to configure the Docker Daemon to use a proxy server.

Builder

Fix platform-matching logic to fix docker build using not finding images in the local image cache on Arm machines when using BuildKit moby/moby#42954

Runtime

Add support for clone3 syscall in the default seccomp policy to support running containers based on recent versions of Fedora and Ubuntu. [moby/moby/#42836](moby/moby#42836).

Windows: update hcsshim library to fix a bug in sparse file handling in container layers, which was exposed by recent changes in Windows moby/moby#42944.

Fix some situations where docker stop could hang forever moby/moby#42956.

Swarm

Fix an issue where updating a service did not roll back on failure moby/moby#42875.

Packaging

Add packages for Ubuntu 21.10 "Impish Indri" and Fedora 35.

Update docker scan to v0.9.0

Update Golang runtime to Go 1.16.9.

v20.10.9

This release is a security release with security fixes in the CLI, runtime, as well as updated versions of the containerd.io package and the Go runtime.

Client

CVE-2021-41092 Ensure default auth config has address field set, to prevent credentials being sent to the default registry.

Runtime

CVE-2021-41089

... (truncated)

Commits

e2f740d Merge pull request #42959 from thaJeztah/20.10_backport_fix_racey_health_test
acb4f26 Fix racey TestHealthKillContainer
8ab80e4 Merge pull request #42957 from thaJeztah/20.10_backport_rootless_quotes
52f5b61 Merge pull request #42956 from cpuguy83/20.10-backport-kill-fixes
a4b1ae5 Merge pull request #42954 from crazy-max/20.10_build-local-normalized
59d2a2c dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior
2c6aa5a Remove needless check
3285c27 Fix log statement 'failed to exit' timeout accuracy
a4bcd4c docker daemon container stop refactor
bed624f docker kill: fix bug where failed kills didnt fallback to unix kill
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/855 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/31/2021 **Status:** ✅ Merged **Merged:** 11/1/2021 **Merged by:** [@mergify[bot]](https://github.com/apps/mergify) **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/docker/docker-20.10.10incompatible` --- ### 📝 Commits (1) - [`cbf6369`](https://github.com/nektos/act/commit/cbf636951a228c59c75c561a6d5567b6bcfa4685) build(deps): bump github.com/docker/docker ### 📊 Changes **2 files changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+1 -1) 📝 `go.sum` (+2 -2) </details> ### 📄 Description Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.8+incompatible to 20.10.10+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p> <blockquote> <h2>v20.10.10</h2> <h2>20.10.10</h2> <blockquote> <p><strong>IMPORTANT</strong></p> <p>Due to <a href="https://github-redirect.dependabot.com/golang/go/issues/40909">net/http changes</a> in <a href="https://golang.org/doc/go1.16#net/http">Go 1.16</a>, HTTP proxies configured through the <code>$HTTP_PROXY</code> environment variable are no longer used for TLS (<code>https://</code>) connections. Make sure you also set an <code>$HTTPS_PROXY</code> environment variable for handling requests to <code>https://</code> URLs.</p> <p>Refer to the <a href="https://github.com/docker/docker/config/daemon/systemd.md#httphttps-proxy">HTTP/HTTPS proxy section</a> to learn how to configure the Docker Daemon to use a proxy server.</p> </blockquote> <h3>Builder</h3> <ul> <li>Fix platform-matching logic to fix <code>docker build</code> using not finding images in the local image cache on Arm machines when using BuildKit <a href="https://github-redirect.dependabot.com/moby/moby/pull/42954">moby/moby#42954</a></li> </ul> <h2>Runtime</h2> <ul> <li>Add support for <code>clone3</code> syscall in the default seccomp policy to support running containers based on recent versions of Fedora and Ubuntu. [moby/moby/<a href="https://github-redirect.dependabot.com/docker/docker/issues/42836">#42836</a>](<a href="https://github-redirect.dependabot.com/moby/moby/pull/42836">moby/moby#42836</a>).</li> <li>Windows: update hcsshim library to fix a bug in sparse file handling in container layers, which was exposed by recent changes in Windows <a href="https://github-redirect.dependabot.com/moby/moby/pull/42944">moby/moby#42944</a>.</li> <li>Fix some situations where <code>docker stop</code> could hang forever <a href="https://github-redirect.dependabot.com/moby/moby/pull/42956">moby/moby#42956</a>.</li> </ul> <h3>Swarm</h3> <ul> <li>Fix an issue where updating a service did not roll back on failure <a href="https://github-redirect.dependabot.com/moby/moby/pull/42875">moby/moby#42875</a>.</li> </ul> <h2>Packaging</h2> <ul> <li>Add packages for Ubuntu 21.10 "Impish Indri" and Fedora 35.</li> <li>Update <code>docker scan</code> to v0.9.0</li> <li>Update Golang runtime to Go 1.16.9.</li> </ul> <h2>v20.10.9</h2> <p>This release is a security release with security fixes in the CLI, runtime, as well as updated versions of the containerd.io package and the Go runtime.</p> <h2>Client</h2> <ul> <li><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41092">CVE-2021-41092</a> Ensure default auth config has address field set, to prevent credentials being sent to the default registry.</li> </ul> <h2>Runtime</h2> <ul> <li><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41089">CVE-2021-41089</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moby/moby/commit/e2f740de442bac52b280bc485a3ca5b31567d938"><code>e2f740d</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/docker/issues/42959">#42959</a> from thaJeztah/20.10_backport_fix_racey_health_test</li> <li><a href="https://github.com/moby/moby/commit/acb4f263b3ccd959af09ee7f3d0968557e3e425e"><code>acb4f26</code></a> Fix racey TestHealthKillContainer</li> <li><a href="https://github.com/moby/moby/commit/8ab80e4a206a5a145eedced21ff769dfee62c286"><code>8ab80e4</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/docker/issues/42957">#42957</a> from thaJeztah/20.10_backport_rootless_quotes</li> <li><a href="https://github.com/moby/moby/commit/52f5b613ba1fbc8755c51b0c30ee36123a6eca54"><code>52f5b61</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/docker/issues/42956">#42956</a> from cpuguy83/20.10-backport-kill-fixes</li> <li><a href="https://github.com/moby/moby/commit/a4b1ae51535105d6be415aab5b7673d2243b5d25"><code>a4b1ae5</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/docker/issues/42954">#42954</a> from crazy-max/20.10_build-local-normalized</li> <li><a href="https://github.com/moby/moby/commit/59d2a2c397686c87296022269c76421804c8d046"><code>59d2a2c</code></a> dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior</li> <li><a href="https://github.com/moby/moby/commit/2c6aa5aad9067b60d0a2c7a0b19de8f304d9d4c9"><code>2c6aa5a</code></a> Remove needless check</li> <li><a href="https://github.com/moby/moby/commit/3285c275033a361f237148e0ce611cb72bebccd9"><code>3285c27</code></a> Fix log statement 'failed to exit' timeout accuracy</li> <li><a href="https://github.com/moby/moby/commit/a4bcd4c64f310e9eabdcb5df1e186529d730ffab"><code>a4bcd4c</code></a> docker daemon container stop refactor</li> <li><a href="https://github.com/moby/moby/commit/bed624fdc9f117cf8d0dce58024f6304caf9bde9"><code>bed624f</code></a> docker kill: fix bug where failed kills didnt fallback to unix kill</li> <li>Additional commits viewable in <a href="https://github.com/docker/docker/compare/v20.10.8...v20.10.10">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/docker&package-manager=go_modules&previous-version=20.10.8+incompatible&new-version=20.10.10+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

kerem

2026-03-01 21:52:04 +03:00

closed this issue
added the
pull-request
label

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/act#1647

No description provided.

Rows
Columns