[dependabot]

Bumps the docker group with 3 updates in the / directory: github.com/docker/cli, github.com/docker/docker-credential-helpers and github.com/moby/sys/user.

Updates github.com/docker/cli from 29.9.0+incompatible to 29.9.2+incompatible

Commits

• a82e528 Merge pull request #7418 from vvoland/7417-29.x
• e35bc1b Update to go1.26.10
• baf6c13 Bump version
• 4051f75 Merge tag 'v29.9.1' into 7417-29.x
• 76321a6 Merge tag 'v29.9.0' into 7417-29.x
• b82456c Merge tag 'v29.8.2' into 7417-29.x
• a98becc Bump version
• dfc520d Merge pull request #7390 from renovate-bot/renovate/go-1.x
• a3a2bb6 chore(deps): update dependency go to v1.27.1
• c11295a Merge pull request #7388 from renovate-bot/renovate/tonistiigi-xx-1.x
• Additional commits viewable in compare view

Updates github.com/docker/docker-credential-helpers from 0.9.10 to 0.9.12

Release notes

Sourced from github.com/docker/docker-credential-helpers's releases.

v0.9.12

What's Changed

• secretservice: Fix get_attribute ownership and NULL attribute

Full Changelog: docker/docker-credential-helpers@v0.9.11...v0.9.12

v0.9.11

What's Changed

• update to go1.26.10
• secretservice: free buffers returned by get and list
• build(deps): bump docker/bake-action from 7.4.0 to 7.5.0

Full Changelog: docker/docker-credential-helpers@v0.9.10...v0.9.11

Commits

• 29ae62c Merge pull request #477 from vvoland/secretservice-fix-ownership
• 8077dee secretservice: Fix prefix matching of attribute names
• 59a2f25 secretservice: Fix crash on items without cached attributes
• 6d89904 secretservice: Return an owned copy of item attributes
• 901c3e7 Merge pull request #474 from locker95/secretservice-free-cgo-buffers
• 9502455 Merge pull request #476 from thaJeztah/bump_go2
• d1948b3 Merge pull request #475 from docker/dependabot/github_actions/docker-actions-...
• eb5849b update to go1.26.10
• d61b6ab build(deps): bump docker/bake-action
• 3b640f2 secretservice: free buffers returned by get and list
• See full diff in compare view

Updates github.com/moby/sys/user from 0.4.1 to 0.5.0

Release notes

Sourced from github.com/moby/sys/user's releases.

signal v0.5.0

Initial release of the github.com/moby/sys/signal module, which was imported from github.com/docker/docker/pkg/signal at 9a6ff685a80639995311c0572d662360b55796d9

mountinfo/v0.5.0

Potentially breaking changes

• Go versions < 1.16 are no longer supported
• Mounted: in case the argument does not exist, it now returns an appropriate error. Previously, this condition was treated as "not a mount point", with no error returned, but in fact such path could be an unreachable mount point (overshadowed by another mount). In case callers are not interested in such error, they should filter it out, e.g. if !errors.Is(err, os.IsNotExist).

What's Changed

• Drop go < 1.16 compatibility by @​kolyshkin in moby/sys#89
• mountinfo.Mounted(): fix by @​kolyshkin in moby/sys#90
• mountinfo: support darwin build by @​thehajime in moby/sys#85
• mountinfo.Mounted: fix docs, add more test by @​kolyshkin in moby/sys#86
• linting: do not capitalize errors by @​thaJeztah in moby/sys#75
• mountinfo: rewrite more tests to use a test-table by @​thaJeztah in moby/sys#82
• mountinfo: GetMountsFromReader(): use strings.SplitN() by @​thaJeztah in moby/sys#76
• mountinfo: GetMountsFromReader(): remove redundant switch, fix dropped "optional" fields by @​thaJeztah in moby/sys#81
• Test fixes by @​kolyshkin in moby/sys#87
• CI: add more linters by @​kolyshkin in moby/sys#92
• ci: bump Fedora to 35 by @​kolyshkin in moby/sys#93
• CI: update Vagrant to Fedora 34 by @​thaJeztah in moby/sys#80
• lint: update golangci-lint to v1.41.1 by @​thaJeztah in moby/sys#79

New Contributors

• @​thehajime made their first contribution in moby/sys#85

Full Changelog: moby/sys@mountinfo/v0.4.1...mountinfo/v0.5.0

sequential v0.5.0

Initial release of github.com/moby/sys/sequential, which was extracted from the github.com/docker/docker/pkg/system package at moby/moby@3e8573a

capability v0.5.0

Breaking changes

• Go 1.24 or later is now required. (#264)

Fixed

• [LastCap] no longer reads /proc/sys/kernel/cap_last_cap, querying the kernel via prctl(PR_CAPBSET_READ) instead. This makes the package work when /proc is not mounted, and fixes a possible panic or infinite loop when /proc/sys/kernel/cap_last_cap contains a bogus value (for example, if something is mounted over /proc). (#265, #269)

Changed

• Minor code cleanups. (#187)

For the complete list of changes, see https://github.com/moby/sys/blob/HEAD/capability/CHANGELOG.md.

... (truncated)

Commits

• b3eba80 Merge pull request #271 from kolyshkin/mountinfo-parents-filter
• 7af2ad2 Merge pull request #272 from kolyshkin/user-go124
• 44e556e mountinfo: fix PrefixFilter("/")
• 894e355 mountinfo: fix ParentsFilter() being too greedy
• e16ef25 mountinfo: add TestParentsFilter
• 91bc821 user: switch to go 1.24
• 4409460 Merge pull request #236 from thaJeztah/user_windows_align
• c28d036 Merge pull request #242 from okhowang/fix/identity-mapping-tohost-low-base-remap
• 9545961 Merge pull request #261 from SashaMIT/fix/incus-mounts
• eda8e9e Merge pull request #270 from kolyshkin/cap050
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions