docker from 20.10.18+incompatible to 20.10.19+incompatible #1920

New issue

Closed

opened 2026-03-01 21:53:15 +03:00 by kerem · 0 comments

kerem commented

2026-03-01 21:53:15 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/1392
Author: @dependabot[bot]
Created: 10/17/2022
Status: ✅ Merged
Merged: 10/17/2022
Merged by: @mergify[bot]

Base: master ← Head: dependabot/go_modules/github.com/docker/docker-20.10.19incompatible

📝 Commits (2)

e120ff1 build(deps): bump github.com/docker/docker
25d9906 Merge branch 'master' into dependabot/go_modules/github.com/docker/docker-20.10.19incompatible

📊 Changes

2 files changed (+3 additions, -3 deletions)

View changed files

📝 go.mod (+1 -1)
📝 go.sum (+2 -2)

📄 Description

Bumps github.com/docker/docker from 20.10.18+incompatible to 20.10.19+incompatible.

Release notes

Sourced from github.com/docker/docker's releases.

v20.10.19

This release of Docker Engine comes with some bug-fixes, and an updated version of Docker Compose.

Builder

Fix an issue that could result in a panic during docker builder prune or docker system prune moby/moby#44122.

Daemon

Fix a bug where using docker volume prune would remove volumes that were still in use if the daemon was running with "live restore" and was restarted moby/moby#44238.

Packaging

Update Docker Compose to v2.11.2.

Update Go runtime to 1.18.7, which contains fixes for CVE-2022-2879, CVE-2022-2880, and CVE-2022-41715.

Commits

c964641 Merge pull request #44122 from thaJeztah/20.10_bump_buildkit
3bb9973 Merge pull request #44127 from thaJeztah/20.10_backport_image_spec_no_literal
435c40c Merge pull request #44247 from thaJeztah/20.10_bump_go_1.18.7
11bdbf4 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022...
35eaf7e Merge pull request #44238 from cpuguy83/20.10_fix_restore_volumerefs
66ddb7f Fix live-restore w/ restart policies + volume refs
f219cb5 Merge pull request #44218 from thaJeztah/20.10_backport_more_robust_rootless
c003392 contrib: make dockerd-rootless-setuptool.sh more robust
53313be docker-rootless-setuptools.sh: use context after install
4163c55 Merge pull request #44202 from crazy-max/20.10_backport_api-fix-logo
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/1392 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/17/2022 **Status:** ✅ Merged **Merged:** 10/17/2022 **Merged by:** [@mergify[bot]](https://github.com/apps/mergify) **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/docker/docker-20.10.19incompatible` --- ### 📝 Commits (2) - [`e120ff1`](https://github.com/nektos/act/commit/e120ff113c2ab77d8f49fb9442b64768589f70cc) build(deps): bump github.com/docker/docker - [`25d9906`](https://github.com/nektos/act/commit/25d99067edd2b551d04f8cd9784a9fbed2dd1b43) Merge branch 'master' into dependabot/go_modules/github.com/docker/docker-20.10.19incompatible ### 📊 Changes **2 files changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+1 -1) 📝 `go.sum` (+2 -2) </details> ### 📄 Description Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.18+incompatible to 20.10.19+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p> <blockquote> <h2>v20.10.19</h2> <p>This release of Docker Engine comes with some bug-fixes, and an updated version of Docker Compose.</p> <h3>Builder</h3> <ul> <li>Fix an issue that could result in a panic during <code>docker builder prune</code> or <code>docker system prune</code> <a href="https://github-redirect.dependabot.com/moby/moby/pull/44122">moby/moby#44122</a>.</li> </ul> <h3>Daemon</h3> <ul> <li>Fix a bug where using <code>docker volume prune</code> would remove volumes that were still in use if the daemon was running with "live restore" and was restarted <a href="https://github-redirect.dependabot.com/moby/moby/pull/44238">moby/moby#44238</a>.</li> </ul> <h3>Packaging</h3> <ul> <li>Update Docker Compose to <a href="https://github.com/docker/compose/releases/tag/v2.11.2">v2.11.2</a>.</li> <li>Update Go runtime to <a href="https://go.dev/doc/devel/release#go1.18.minor">1.18.7</a>, which contains fixes for <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879">CVE-2022-2879</a>, <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880">CVE-2022-2880</a>, and <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715">CVE-2022-41715</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moby/moby/commit/c964641a0d76733c071d606c72541b263da84a3e"><code>c964641</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/docker/issues/44122">#44122</a> from thaJeztah/20.10_bump_buildkit</li> <li><a href="https://github.com/moby/moby/commit/3bb99735b6133ce333ca54806888934655a103ee"><code>3bb9973</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/docker/issues/44127">#44127</a> from thaJeztah/20.10_backport_image_spec_no_literal</li> <li><a href="https://github.com/moby/moby/commit/435c40ce1561e3fae3027445bbcbe72ddfaa4b20"><code>435c40c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/docker/issues/44247">#44247</a> from thaJeztah/20.10_bump_go_1.18.7</li> <li><a href="https://github.com/moby/moby/commit/11bdbf40b9720592c28b3d28c0bcdae0eca3b052"><code>11bdbf4</code></a> [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022...</li> <li><a href="https://github.com/moby/moby/commit/35eaf7ecc4e5fda580560031e8d79b5687a1449f"><code>35eaf7e</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/docker/issues/44238">#44238</a> from cpuguy83/20.10_fix_restore_volumerefs</li> <li><a href="https://github.com/moby/moby/commit/66ddb7f91c7a0ea4daa5cb96e8701a9378fe22ec"><code>66ddb7f</code></a> Fix live-restore w/ restart policies + volume refs</li> <li><a href="https://github.com/moby/moby/commit/f219cb5ded3104249214ea5ca7dd9a62df45fd61"><code>f219cb5</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/docker/issues/44218">#44218</a> from thaJeztah/20.10_backport_more_robust_rootless</li> <li><a href="https://github.com/moby/moby/commit/c0033925824d12c1e8133add0d4032e2f743316f"><code>c003392</code></a> contrib: make dockerd-rootless-setuptool.sh more robust</li> <li><a href="https://github.com/moby/moby/commit/53313be0f3582342e034604964a67c533e856483"><code>53313be</code></a> docker-rootless-setuptools.sh: use context after install</li> <li><a href="https://github.com/moby/moby/commit/4163c550821f02799c71fb468101b0b08bb9fb07"><code>4163c55</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/docker/docker/issues/44202">#44202</a> from crazy-max/20.10_backport_api-fix-logo</li> <li>Additional commits viewable in <a href="https://github.com/docker/docker/compare/v20.10.18...v20.10.19">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/docker&package-manager=go_modules&previous-version=20.10.18+incompatible&new-version=20.10.19+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>