Update module github.com/docker/docker/v24 to v24.0.9 #39

Open
renovate-bot wants to merge 1 commits from renovate/github.com-docker-docker-v24-24.x into master
Contributor

This PR contains the following updates:

Package Type Update Change
github.com/docker/docker/v24 require patch v24.0.7 -> v24.0.9

Release Notes

docker/docker (github.com/docker/docker/v24)

v24.0.9

Compare Source

24.0.9

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains security fixes for the following CVEs affecting Docker Engine and its components.

CVE Component Fix version Severity
CVE-2024-21626 runc 1.1.12 High, CVSS 8.6
CVE-2024-24557 Docker Engine 24.0.9 Medium, CVSS 6.9

Important ⚠️

Note that this release of Docker Engine doesn't include fixes for the following known vulnerabilities in BuildKit:

To address these vulnerabilities, upgrade to Docker Engine v25.0.2.

For more information about the security issues addressed in this release, and the unaddressed vulnerabilities in BuildKit, refer to the
blog post. For details about each vulnerability, see the relevant security advisory:

Packaging updates

v24.0.8

Compare Source

24.0.8

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements
  • Live restore: Containers with auto remove (docker run --rm) are no longer forcibly removed on engine restart. moby/moby#46857
Packaging updates

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/docker/docker/v24](https://github.com/docker/docker) | require | patch | `v24.0.7` -> `v24.0.9` | --- ### Release Notes <details> <summary>docker/docker (github.com/docker/docker/v24)</summary> ### [`v24.0.9`](https://github.com/moby/moby/releases/tag/v24.0.9) [Compare Source](https://github.com/docker/docker/compare/v24.0.8...v24.0.9) #### 24.0.9 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.9 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.9) - [moby/moby, 24.0.9 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.9) #### Security This release contains security fixes for the following CVEs affecting Docker Engine and its components. | CVE | Component | Fix version | Severity | | ----------------------------------------------------------- | ------------- | ----------- | ---------------- | | [CVE-2024-21626](https://scout.docker.com/v/CVE-2024-21626) | runc | 1.1.12 | High, CVSS 8.6 | | [CVE-2024-24557](https://scout.docker.com/v/CVE-2024-24557) | Docker Engine | 24.0.9 | Medium, CVSS 6.9 | > **Important** ⚠️ > > Note that this release of Docker Engine doesn't include fixes for the following known vulnerabilities in BuildKit: > > - [CVE-2024-23651](https://scout.docker.com/v/CVE-2024-23651) > - [CVE-2024-23652](https://scout.docker.com/v/CVE-2024-23652) > - [CVE-2024-23653](https://scout.docker.com/v/CVE-2024-23653) > - [CVE-2024-23650](https://scout.docker.com/v/CVE-2024-23650) > > To address these vulnerabilities, upgrade to [Docker Engine v25.0.2](./25.0.md#2502). For more information about the security issues addressed in this release, and the unaddressed vulnerabilities in BuildKit, refer to the [blog post](https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabilities-in-runc-buildkit-and-moby/). For details about each vulnerability, see the relevant security advisory: - [CVE-2024-21626](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv) - [CVE-2024-24557](https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc) ##### Packaging updates - Upgrade runc to [v1.1.12](https://github.com/opencontainers/runc/releases/tag/v1.1.12). [moby/moby#47269](https://github.com/moby/moby/pull/47269) - Upgrade containerd to [v1.7.13](https://github.com/containerd/containerd/releases/tag/v1.7.13) (static binaries only). [moby/moby#47280](https://github.com/moby/moby/pull/47280) ### [`v24.0.8`](https://github.com/moby/moby/releases/tag/v24.0.8) [Compare Source](https://github.com/docker/docker/compare/v24.0.7...v24.0.8) #### 24.0.8 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.8 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.8) - [moby/moby, 24.0.8 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.8) ##### Bug fixes and enhancements - Live restore: Containers with auto remove (`docker run --rm`) are no longer forcibly removed on engine restart. [moby/moby#46857](https://github.com/moby/moby/pull/46869) ##### Packaging updates - Upgrade Go to `go1.20.13`. [moby/moby#47054](https://github.com/moby/moby/pull/47054), [docker/cli#4826](https://github.com/docker/cli/pull/4826), [docker/docker-ce-packaging#975](https://github.com/docker/docker-ce-packaging/pull/975) - Upgrade containerd (static binaries only) to [v1.7.12](https://github.com/containerd/containerd/releases/tag/v1.7.12) [moby/moby#47096](https://github.com/moby/moby/pull/47096) - Upgrade runc to v1.1.11. [moby/moby#47010](https://github.com/moby/moby/pull/47010) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE1My4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->
Author
Contributor

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -d -t ./...
go: github.com/docker/docker/v24@v24.0.9: missing github.com/docker/docker/go.mod and .../v24/go.mod at revision v24.0.9

### ⚠ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: go.sum ``` Command failed: go get -d -t ./... go: github.com/docker/docker/v24@v24.0.9: missing github.com/docker/docker/go.mod and .../v24/go.mod at revision v24.0.9 ```
renovate-bot changed title from Update module github.com/docker/docker/v24 to v24.0.8 to Update module github.com/docker/docker/v24 to v24.0.9 2024-02-01 12:20:15 +00:00
renovate-bot force-pushed renovate/github.com-docker-docker-v24-24.x from 5b28f3c6a4 to f9429a4e79 2024-02-01 12:20:16 +00:00 Compare
This repo is archived. You cannot comment on pull requests.
No reviewers
No Label
No Milestone
No Assignees
1 Participants
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: nemunaire/minifaas#39
No description provided.