Bump the go_modules group across 27 directories with 9 updates

[dependabot]

Bumps the go_modules group with 9 updates in the / directory:

Package	From	To
github.com/docker/docker	25.0.5+incompatible	27.0.0+incompatible
golang.org/x/net	0.25.0	0.26.0
google.golang.org/grpc	1.63.2	1.64.0
google.golang.org/protobuf	1.34.1	1.34.2
github.com/mostynb/go-grpc-compression	1.2.2	1.2.3
github.com/Azure/azure-sdk-for-go/sdk/azidentity	1.5.2	1.6.0
github.com/hashicorp/go-retryablehttp	0.7.5	0.7.7
go.opentelemetry.io/collector/config/configgrpc	0.100.0	0.102.1
go.opentelemetry.io/collector/config/confighttp	0.100.0	0.102.0

Bumps the go_modules group with 1 update in the /comp/core/config directory: google.golang.org/protobuf.
Bumps the go_modules group with 1 update in the /comp/core/secrets directory: google.golang.org/protobuf.
Bumps the go_modules group with 1 update in the /comp/core/telemetry directory: google.golang.org/protobuf.
Bumps the go_modules group with 9 updates in the /comp/otelcol/collector-contrib/impl directory:

Package	From	To
github.com/docker/docker	25.0.5+incompatible	27.0.0+incompatible
golang.org/x/net	0.24.0	0.26.0
google.golang.org/grpc	1.63.2	1.64.0
google.golang.org/protobuf	1.34.0	1.34.2
github.com/mostynb/go-grpc-compression	1.2.2	1.2.3
github.com/Azure/azure-sdk-for-go/sdk/azidentity	1.5.2	1.6.0
github.com/hashicorp/go-retryablehttp	0.7.4	0.7.7
go.opentelemetry.io/collector/config/configgrpc	0.100.0	0.102.1
go.opentelemetry.io/collector/config/confighttp	0.100.0	0.102.0

Bumps the go_modules group with 4 updates in the /comp/otelcol/provider/impl directory: golang.org/x/net, google.golang.org/grpc, google.golang.org/protobuf and go.opentelemetry.io/collector/config/confighttp.
Bumps the go_modules group with 2 updates in the /internal/tools directory: golang.org/x/net and google.golang.org/protobuf.
Bumps the go_modules group with 2 updates in the /internal/tools/proto directory: golang.org/x/net and google.golang.org/grpc.
Bumps the go_modules group with 2 updates in the /pkg/config/remote directory: golang.org/x/net and google.golang.org/grpc.
Bumps the go_modules group with 1 update in the /pkg/config/setup directory: google.golang.org/protobuf.
Bumps the go_modules group with 2 updates in the /pkg/logs/client directory: golang.org/x/net and google.golang.org/protobuf.
Bumps the go_modules group with 1 update in the /pkg/logs/metrics directory: google.golang.org/protobuf.
Bumps the go_modules group with 2 updates in the /pkg/logs/pipeline directory: golang.org/x/net and google.golang.org/protobuf.
Bumps the go_modules group with 1 update in the /pkg/logs/processor directory: google.golang.org/protobuf.
Bumps the go_modules group with 1 update in the /pkg/logs/sds directory: google.golang.org/protobuf.
Bumps the go_modules group with 2 updates in the /pkg/logs/sender directory: golang.org/x/net and google.golang.org/protobuf.
Bumps the go_modules group with 1 update in the /pkg/metrics directory: google.golang.org/protobuf.
Bumps the go_modules group with 1 update in the /pkg/process/util/api directory: google.golang.org/protobuf.
Bumps the go_modules group with 2 updates in the /pkg/proto directory: golang.org/x/net and google.golang.org/grpc.
Bumps the go_modules group with 1 update in the /pkg/telemetry directory: google.golang.org/protobuf.
Bumps the go_modules group with 1 update in the /pkg/util/cgroups directory: google.golang.org/protobuf.
Bumps the go_modules group with 2 updates in the /pkg/util/grpc directory: golang.org/x/net and google.golang.org/grpc.
Bumps the go_modules group with 6 updates in the /test/e2e/containers/otlp_sender directory:

Package	From	To
golang.org/x/net	0.24.0	0.26.0
google.golang.org/grpc	1.63.2	1.64.0
google.golang.org/protobuf	1.34.0	1.34.2
github.com/mostynb/go-grpc-compression	1.2.2	1.2.3
go.opentelemetry.io/collector/config/configgrpc	0.100.0	0.102.1
go.opentelemetry.io/collector/config/confighttp	0.100.0	0.102.0

Bumps the go_modules group with 1 update in the /test/fakeintake directory: google.golang.org/protobuf.
Bumps the go_modules group with 3 updates in the /test/integration/serverless/src directory: golang.org/x/net, google.golang.org/grpc and google.golang.org/protobuf.
Bumps the go_modules group with 4 updates in the /test/new-e2e directory: github.com/docker/docker, golang.org/x/net, google.golang.org/grpc and google.golang.org/protobuf.
Bumps the go_modules group with 1 update in the /tools/retry_file_dump directory: google.golang.org/protobuf.

Updates github.com/docker/docker from 25.0.5+incompatible to 27.0.0+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v27.0.0-rc.2

27.0.0-rc.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 27.0.0 milestone
• moby/moby, 27.0.0 milestone
• Deprecated and removed features, see Deprecated Features.
• Changes to the Engine API, see API version history.

New

• In port mappings with no host port specified, and with host port ranges, allocate the same port for IPv4 and IPv6. Add bridge driver option com.docker.network.bridge.gateway_mode_ipv6=<nat|routed>, when set to routed no NAT or masquerading rules are configured for port mappings. This enables direct IPv6 access to the container, if the host's network can route packets for the container's address to the host. Mapped ports will be opened in the containers firewall. For example, docker network create --ipv6 -o com.docker.network.bridge.gateway_mode_ipv6=routed mynet. Option com.docker.network.bridge.gateway_mode_ipv4=<nat|routed> is also available. moby/moby#47871

Bug fixes and enhancements

• Fix a goroutine and file-descriptor leak on container attach. moby/moby#45052
• Clear the networking state of all stopped or dead containers during daemon start-up. moby/moby#47984
• Environment variable DOCKER_ALLOW_IPV6_ON_IPV4_INTERFACE, introduced in release 26.1.1, no longer has any effect. If IPv6 could not be disabled on an interface because of a read-only /proc/sys/net, the environment variable allowed the container to start anyway. IPv6 can now be explicitly enabled simply by using --ipv6 when creating the network, it is no longer necessary to allocate a subnet as a unique-local prefix will be selected by default. Other workarounds are to configure the OS to disable IPv6 by default on new interfaces, mount /proc/sys/net read-write, or use a kernel with no IPv6 support. moby/moby#47963

Removed

• pkg/archive: deprecate NewTempArchive, TempArchive. These types were only used in tests and will be removed in the next release. moby/moby#48002
• pkg/archive: deprecate CanonicalTarNameForPath moby/moby#48001
• Deprecate pkg/dmesg. This package was no longer used, and will be removed in the next release. moby/moby#47999
• Deprecate pkg/stringid.ValidateID and pkg/stringid.IsShortID moby/moby#47995
• runconfig: deprecate SetDefaultNetModeIfBlank and move ContainerConfigWrapper to api/types/container moby/moby#48007

API

• POST /containers/create and POST /services/create now take Options as part of HostConfig.Mounts.TmpfsOptions allowing to set options for tmpfs mounts. moby/moby#46809
• The Healthcheck.StartInterval property is now correctly ignored when updating a Swarm service using API versions less than v1.44. moby/moby#47991
• GET /events now supports image create event that is emitted when a new image is built regardless if it was tagged or not. moby/moby#47929
• GET /info now includes a Containerd field containing information about the location of the containerd API socket and containerd namespaces used by the daemon to run containers and plugins. moby/moby#47239

Packaging updates

• Update runc to v1.1.13 moby/moby#47976

v27.0.0-rc.1

27.0.0-rc.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 27.0.0 milestone
• moby/moby, 27.0.0 milestone
• Deprecated and removed features, see Deprecated Features.
• Changes to the Engine API, see API version history.

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.25.0 to 0.26.0

Commits

• 66e838c go.mod: update golang.org/x dependencies
• 6249541 http2: avoid race in server handler SetReadDeadine/SetWriteDeadline
• 603e3e6 quic: disable X25519Kyber768Draft00 in tests
• 67e8d0c http2: report an error if goroutines outlive serverTester tests
• 5608279 http2: avoid corruption in priority write scheduler
• 0d515a5 http2: factor out frame read/write test functions
• 9f5b79b http2: drop unused retry function
• 03c24c2 http2: use synthetic time in server tests
• 022530c http2: add a more full-featured test net.Conn
• 410d19e http2: avoid racy access to clientStream.requestedGzip
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.63.2 to 1.64.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.64.0

API Changes

• stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#7121)

Behavior Changes

• codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#7203)

New Features

• resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#6962)
  • Special Thanks: @​HomayoonAlimohammadi
• peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
• metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#7137)
  • Special Thanks: @​AnomalRoil

Performance Improvements

• client: Improve RPC performance by reducing work while holding a lock (#7132)

Bug Fixes

• transport/server: Display the proper timeout value when keepalive pings are not ack'd in time (#7038)
  • Special Thanks: @​BatmanAoD
• channelz: Fix bug that was causing the subchannel's target to be unset (#7189)
• stats: Fix bug where peer was not set in context when calling stats handler for OutPayload, InPayload, and End (#7096)

Dependencies

• deps: Remove dependency on deprecated github.com/golang/protobuf module (#7122)

Documentation

• grpc: Deprecate WithBlock, WithReturnConnectionError, FailOnNonTempDialError which are ignored by NewClient (#7097)
  • Special Thanks: @​pellared
• grpc: Deprecate Dial and DialContext. These will continue to be supported throughout 1.x, but are deprecated to direct users to NewClient (See #7090 for more information)
• examples: Add custom lb example (#6691)

Commits

• fa274d7 Change version to 1.64.0 (#7218)
• 6b413c8 xds: Surround two Infof calls that use pretty.ToJSON with V(2) checks (...
• 2dbbcef resolver/dns: Add docstring to SetMinResolutionInterval (#7217)
• 070d9c7 codes: replace %q to %d in error string when invalid code is an integer (#7188)
• 5d24ee2 xds: store server config for LRS server in xdsresource.ClusterUpdate (#7191)
• c76f686 advancedTLS: Rename get root certs related pieces (#7207)
• f591e3b codec: remove option to suppress setting supported compressors in headers (#7...
• b4f7947 github: remove dependabot (#7208)
• 0561c78 client: add user-friendly error message of LB policy update timed out (#7206)
• 9d9c1fb peer: remove change detector test (#7204)
• Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.34.1 to 1.34.2

Updates github.com/mostynb/go-grpc-compression from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/mostynb/go-grpc-compression's releases.

v1.2.3

This release contains an important security fix: Do not use zstd.Decoder.DecodeAll on untrusted data (#27)

This issue was uncovered during a security audit performed by 7ASecurity, facilitated by OSTIF, for the OpenTelemetry project.

https://opentelemetry.io/blog/2024/cve-2024-36129/ GHSA-c74f-6mfw-mm4v

Commits

• 52f5bb7 Update go modules
• 629c44d Do not use zstd.Decoder.DecodeAll on untrusted data
• See full diff in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/internal/v1.6.0

1.6.0 (2024-04-16)

Features Added

• Options types for SetBodilessMatcher and SetDefaultMatcher now embed RecordingOptions
• Added a collection of default sanitizers for test recordings

sdk/azidentity/v1.6.0

1.6.0 (2024-06-10)

Features Added

• NewOnBehalfOfCredentialWithClientAssertions creates an on-behalf-of credential that authenticates with client assertions such as federated credentials

Breaking Changes

These changes affect only code written against a beta version such as v1.6.0-beta.4

• Removed AzurePipelinesCredential and the persistent token caching API. They will return in v1.7.0-beta.1

Bugs Fixed

• Managed identity bug fixes

sdk/azidentity/v1.6.0-beta.4

1.6.0-beta.4 (2024-05-14)

Features Added

• AzurePipelinesCredential authenticates an Azure Pipeline service connection with workload identity federation

sdk/azidentity/v1.6.0-beta.3

1.6.0-beta.3 (2024-04-09)

Breaking Changes

• DefaultAzureCredential now sends a probe request with no retries for IMDS managed identity environments to avoid excessive retry delays when the IMDS endpoint is not available. This should improve credential chain resolution for local development scenarios.

Bugs Fixed

• ManagedIdentityCredential now specifies resource IDs correctly for Azure Container Instances

Commits

• 36f766d add sdk/resourcemanager/cosmos/armcosmos live test (#20705)
• c005ed6 sdk/resourcemanager/network/armnetwork live test (#20331)
• 5fa7df4 add sdk/resourcemanager/compute/armcompute live test (#20048)
• 0d22aed add sdk/resourcemanager/eventhub/armeventhub live test (#20686)
• 2a8d96d add sdk/resourcemanager/postgresql/armpostgresql live test (#20685)
• b2cddab [Release] sdk/resourcemanager/paloaltonetworksngfw/armpanngfw/0.1.0 (#20437)
• ed7f3c7 Fix azidentity troubleshooting guide link (#20736)
• 6dfd0cb [azeventhubs] Fixing checkpoint store race condition (#20727)
• 745d967 pass along the artifact name so we can override it later (#20732)
• 20b4dd8 Update changelog with latest features (#20730)
• Additional commits viewable in compare view

Updates github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.7

Changelog

Sourced from github.com/hashicorp/go-retryablehttp's changelog.

0.7.7 (May 30, 2024)

BUG FIXES:

• client: avoid potentially leaking URL-embedded basic authentication credentials in logs (#158)

0.7.6 (May 9, 2024)

ENHANCEMENTS:

• client: support a RetryPrepare function for modifying the request before retrying (#216)
• client: support HTTP-date values for Retry-After header value (#138)
• client: avoid reading entire body when the body is a *bytes.Reader (#197)

BUG FIXES:

• client: fix a broken check for invalid server certificate in go 1.20+ (#210)

Commits

• 1542b31 v0.7.7
• defb9f4 v0.7.7
• a99f07b Merge pull request #158 from dany74q/danny/redacted-url-in-logs
• 8a28c57 Merge branch 'main' into danny/redacted-url-in-logs
• 86e852d Merge pull request #227 from hashicorp/dependabot/github_actions/actions/chec...
• 47fe99e Bump actions/checkout from 4.1.5 to 4.1.6
• 490fc06 Merge pull request #226 from testwill/ioutil
• f3e9417 chore: remove refs to deprecated io/ioutil
• d969eaa Merge pull request #225 from hashicorp/manicminer-patch-2
• 2ad8ed4 v0.7.6
• Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/config/configgrpc from 0.100.0 to 0.102.1

Release notes

Sourced from go.opentelemetry.io/collector/config/configgrpc's releases.

cmd/builder/v0.102.1

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.102.1

v0.102.1

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.102.1

This release addresses CVE-2024-36129 (GHSA-c74f-6mfw-mm4v) fully.

End User Changelog

🧰 Bug fixes 🧰

• configrpc: Use own compressors for zstd (#10323) Before this change, the zstd compressor we used didn't respect the max message size. This addresses CVE-2024-36129 (GHSA-c74f-6mfw-mm4v) on configgrpc.

cmd/builder/v0.102.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.102.0

cmd/builder/v0.101.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.101.0

Changelog

Sourced from go.opentelemetry.io/collector/config/configgrpc's changelog.

v0.102.1

No API-only changes on this release. This release addresses GHSA-c74f-6mfw-mm4v for configgrpc.

v1.9.0/v0.102.0

This release addresses GHSA-c74f-6mfw-mm4v for confighttp.

🛑 Breaking changes 🛑

• otelcol: Remove deprecated ConfigProvider field from CollectorSettings (#10281)
• exporterhelper: remove deprecated RequestMarshaler & RequestUnmarshaler types (#10283)
• service: remove deprecated Telemetry struct and New func (#10285)
• configtls: remove deprecated LoadTLSConfigContext funcs (#10283)

🚩 Deprecations 🚩

• component: Deprecate component.UnmarshalConfig, use (*confmap.Conf).Unmarshal(&intoCfg) instead. (#7102)
• service/telemetry: Deprecate telemetry.New in favor of telemetry.NewFactory (#4970)

💡 Enhancements 💡

• confmap: Allow setting a default Provider on a Resolver to use when ${} syntax is used without a scheme (#10182)
• pdata: Introduce string and int64 slices to pcommon (#10148)
• pdata: Introduce generated experimental pdata for profiling signal. (#10195)
• confmap: Remove top level condition when considering struct as Unmarshalers (#7101)

🧰 Bug fixes 🧰

• otelcol: Update validate command to use the new configuration options (#10203)

v1.8.0/v0.101.0

🛑 Breaking changes 🛑

• confighttp: Removes deprecated functions ToClientContext, ToListenerContext, and ToServerContext. (#10138)
• confmap: Deprecate NewWithSettings for all Providers and New for all Converters (#10134) Use NewFactory instead for all affected modules.
• confmap: Remove deprecated Providers and Converters from confmap.ResolverSettings (#10173) Use ProviderSettings and ConverterSettings instead.

🧰 Bug fixes 🧰

• otelcol: Add explicit mapstructure tags to main configuration struct (#10152)
• confmap: Support string-like types as map keys when marshaling (#10137)

Commits

• 7218b4c prepare release 0.102.1 (#10326)
• 10e89bd [configgrpc] Use own compressors for zstd (#10323) (#10324)
• 0ab388b [chore] update go to 1.21.11/1.22.4 (#10321) (#10325)
• 5cbf8be [chore] Prepare release v1.9.0/v0.102.0 (#10293)
• 7dbaebb [confighttp] Apply MaxRequestBodySize to the result of a decompressed body (#...
• ed767dc [service] remove deprecated Telemetry struct and New func (#10285)
• e07b297 [chore] remove deprecated LoadTLSConfigContext methods (#10284)
• c30b294 [chore] remove deprecated types (#10283)
• b6510d0 [otelcol] Removed deprecated ConfigProvider field from settings (#10281)
• d55d042 [chore] remove TODO from confmap code (#10278)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/config/confighttp from 0.100.0 to 0.102.0

Release notes

Sourced from go.opentelemetry.io/collector/config/confighttp's releases.

cmd/builder/v0.102.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.102.0

cmd/builder/v0.101.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.101.0

Changelog

Sourced from go.opentelemetry.io/collector/config/confighttp's changelog.

v1.9.0/v0.102.0

This release addresses GHSA-c74f-6mfw-mm4v for confighttp.

🛑 Breaking changes 🛑

• otelcol: Remove deprecated ConfigProvider field from CollectorSettings (#10281)
• exporterhelper: remove deprecated RequestMarshaler & RequestUnmarshaler types (#10283)
• service: remove deprecated Telemetry struct and New func (#10285)
• configtls: remove deprecated LoadTLSConfigContext funcs (#10283)

🚩 Deprecations 🚩

• component: Deprecate component.UnmarshalConfig, use (*confmap.Conf).Unmarshal(&intoCfg) instead. (#7102)
• service/telemetry: Deprecate telemetry.New in favor of telemetry.NewFactory (#4970)

💡 Enhancements 💡

• confmap: Allow setting a default Provider on a Resolver to use when ${} syntax is used without a scheme (#10182)
• pdata: Introduce string and int64 slices to pcommon (#10148)
• pdata: Introduce generated experimental pdata for profiling signal. (#10195)
• confmap: Remove top level condition when considering struct as Unmarshalers (#7101)

🧰 Bug fixes 🧰

• otelcol: Update validate command to use the new configuration options (#10203)

v1.8.0/v0.101.0

🛑 Breaking changes 🛑

• confighttp: Removes deprecated functions ToClientContext, ToListenerContext, and ToServerContext. (#10138)
• confmap: Deprecate NewWithSettings for all Providers and New for all Converters (#10134) Use NewFactory instead for all affected modules.
• confmap: Remove deprecated Providers and Converters from confmap.ResolverSettings (#10173) Use ProviderSettings and ConverterSettings instead.

🧰 Bug fixes 🧰

• otelcol: Add explicit mapstructure tags to main configuration struct (#10152)
• confmap: Support string-like types as map keys when marshaling (#10137)

Commits

• 5cbf8be [chore] Prepare release v1.9.0/v0.102.0 (#10293)
• 7dbaebb [confighttp] Apply MaxRequestBodySize to the result of a decompressed body (#...
• ed767dc [service] remove deprecated Telemetry struct and New func (#10285)
• e07b297 [chore] remove deprecated LoadTLSConfigContext methods (#10284)
• c30b294 [chore] remove deprecated types (#10283)
• b6510d0 [otelcol] Removed deprecated ConfigProvider field from settings (#10281)
• d55d042 [chore] remove TODO from confmap code (#10278)
• 4bbb604 [chore] Remove redundant wait group from a test (#10269)
• 1749a8f Revert "[chore] use mdatagen to generate service metrics (#10160)" (#10271)
• ff6f029 [exporterhelper] Fix potential deadlocks in BatcherSender shutdown (#10258)
• Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.31.0 to 1.33.0

Updates google.golang.org/protobuf from 1.31.0 to 1.33.0

Updates google.golang.org/protobuf from 1.31.0 to 1.33.0

Updates github.com/docker/docker from 25.0.5+incompatible to 27.0.0+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v27.0.0-rc.2

27.0.0-rc.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 27.0.0 milestone
• moby/moby, 27.0.0 milestone
• Deprecated and removed features, see Deprecated Features.
• Changes to the Engine API, see API version history.

New

• In port mappings with no host port specified, and with host port ranges, allocate the same port for IPv4 and IPv6. Add bridge driver option com.docker.network.bridge.gateway_mode_ipv6=<nat|routed>, when set to routed no NAT or masquerading rules are configured for port mappings. This enables direct IPv6 access to the container, if the host's network can route packets for the container's address to the host. Mapped ports will be opened in the containers firewall. For example, docker network create --ipv6 -o com.docker.network.bridge.gateway_mode_ipv6=routed mynet. Option com.docker.network.bridge.gateway_mode_ipv4=<nat|routed> is also available. moby/moby#47871

Bug fixes and enhancements

• Fix a goroutine and file-descriptor leak on container attach. moby/moby#45052
• Clear the networking state of all stopped or dead containers during daemon start-up. moby/moby#47984
• Environment variable DOCKER_ALLOW_IPV6_ON_IPV4_INTERFACE, introduced in release 26.1.1, no longer has any effect. If IPv6 could not be disabled on an interface because of a read-only /proc/sys/net, the environment variable allowed the container to start anyway. IPv6 can now be explicitly enabled simply by using --ipv6 when creating the network, it is no longer necessary to allocate a subnet as a unique-local prefix will be selected by default. Other workarounds are to configure the OS to disable IPv6 by default on new interfaces, mount /proc/sys/net read-write, or use a kernel with no IPv6 support. moby/moby#47963

Removed

• pkg/archive: deprecate NewTempArchive, TempArchive. These types were only used in tests and will be removed in the next release. moby/moby#48002
• pkg/archive: deprecate CanonicalTarNameForPath moby/moby#48001
• Deprecate pkg/dmesg. This package was no longer used, and will be removed in the next release. moby/moby#47999
• Deprecate pkg/stringid.ValidateID and pkg/stringid.IsShortID moby/moby#47995
• runconfig: deprecate SetDefaultNetModeIfBlank and move ContainerConfigWrapper to api/types/container moby/moby#48007

API

• POST /containers/create and POST /services/create now take Options as part of HostConfig.Mounts.TmpfsOptions allowing to set options for tmpfs mounts. moby/moby#46809
• The Healthcheck.StartInterval property is now correctly ignored when updating a Swarm service using API versions less than v1.44. moby/moby#47991
• GET /events now supports image create event that is emitted when a new image is built regardless if it was tagged or not. moby/moby#47929
• GET /info now includes a Containerd field containing information about the location of the containerd API socket and containerd namespaces used by the daemon to run containers and plugins. moby/moby#47239

Packaging updates

• Update runc to v1.1.13 moby/moby#47976

v27.0.0-rc.1

27.0.0-rc.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 27.0.0 milestone
• moby/moby, 27.0.0 milestone
• Deprecated and removed features, see Deprecated Features.
• Changes to the Engine API, see API version history.

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.24.0 to 0.26.0

Commits

• 66e838c go.mod: update golang.org/x dependencies
• 6249541 http2: avoid race in server handler SetReadDeadine/SetWriteDeadline
• 603e3e6 quic: disable X25519Kyber768Draft00 in tests
• 67e8d0c http2: report an error if goroutines outlive serverTester tests
• 5608279 http2: avoid corruption in priority write scheduler
• 0d515a5 http2: factor out frame read/write test functions
• 9f5b79b http2: drop unused retry function
• 03c24c2 http2: use synthetic time in server tests
• 022530c http2: add a more full-featured test net.Conn
• 410d19e http2: avoid racy access to clientStream.requestedGzip
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.63.2 to 1.64.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.64.0

API Changes

• stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#7121)

Behavior Changes

• codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#7203)

New Features

• resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#6962)
  • Special Thanks: @​HomayoonAlimohammadi
• peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
• metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#7137)
  • Special Thanks: @​AnomalRoil

Performance Improvements

• client: Improve RPC performance by reducing work while holding a lock (#7132)

Bug Fixes

• transport/server: Display the proper timeout value when keepalive pings are not ack'd in time (#7038)
  • Special Thanks: @​BatmanAoD
• channelz: Fix bug that was causing the subchannel's target to be unset (#7189)
• stats: Fix bug where peer was not set in context when calling stats handler for OutPayload, InPayload, and End (#7096)

Dependencies

• deps: Remove dependency on deprecated github.com/golang/protobuf module (#7122)

Documentation

• grpc: Deprecate WithBlock, WithReturnConnectionError, FailOnNonTempDialError which are ignored by NewClient (#7097)
  • Special Thanks: @​pellared
• grpc: Deprecate Dial and DialContext. These will continue to be supported throughout 1.x, but are deprecated to direct users to NewClient (See #7090 for more information)
• examples: Add custom lb example (#6691)

Commits

• fa274d7 Change version to 1.64.0 (#7218)
• 6b413c8 xds: Surround two Infof calls that use pretty.ToJSON with V(2) checks (...
• 2dbbcef resolver/dns: Add docstring to SetMinResolutionInterval (#7217)
• 070d9c7 codes: replace %q to %d in error string when invalid code is an integer (#7188)
• 5d24ee2 xds: store server config for LRS server in xdsresource.ClusterUpdate (#7191)
• c76f686 advancedTLS: Rename get root certs related pieces (#7207)
• f591e3b codec: remove option to suppress setting supported compressors in headers (#7...
• b4f7947 github: remove dependabot (#7208)
• 0561c78 client: add user-friendly error message of LB policy update timed out (#7206)
• 9d9c1fb peer: remove change detector test (#7204)
• Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.34.0 to 1.34.2

Updates github.com/mostynb/go-grpc-compression from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/mostynb/go-grpc-compression's releases.

v1.2.3

This release contains an important security fix: Do not use zstd.Decoder.DecodeAll on untrusted data (#27)

This issue was uncovered during a security audit performed by 7ASecurity, facilitated by OSTIF, for the OpenTelemetry project.

https://opentelemetry.io/blog/2024/cve-2024-36129/ GHSA-c74f-6mfw-mm4v

Commits

• 52f5bb7 Update go modules
• 629c44d Do not use zstd.Decoder.DecodeAll on untrusted data
• See full diff in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0

Release notes

Sourced from Description has been truncated

[dependabot]

Superseded by #35.