all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe68:e9f6
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 7ecb5bca-9eeb-4441-b49b-28ce224c9e4d
        host_id: 82101243836454d7401d5893feae9e2c5df7cc291646d8a99b33b53b
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe68:e9f6
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.106
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.17
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe68:e9f6
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job flake8 explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#32>'
      - '<Job flake8 explicit: None implied: None source: osism/release/.zuul.yaml@main#2>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: c33d6dbcb56c45c3b6b6f1f2ae55719f
      build_refs:
      - branch: main
        change: '1807'
        change_message: "chore(deps): update dependency moby/moby to v28\n\n> \u2139\uFE0F
          **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [moby/moby](https://redirect.github.com/moby/moby) | major | `5:27.5.1`
          \u2192 `v28.5.2` |\n| [moby/moby](https://redirect.github.com/moby/moby)
          | major | `27.5.1` \u2192 `28.5.2` |\n\n---\n\n> [!WARNING]\n> Some dependencies
          could not be looked up. Check the [Dependency Dashboard](../issues/152)
          for more information.\n\n---\n\n### Release Notes\n\n<details>\n<summary>moby/moby
          (moby/moby)</summary>\n\n### [`v28.5.2`](https://redirect.github.com/moby/moby/releases/tag/v28.5.2)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.5.1...v28.5.2)\n\n####
          28.5.2\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.2)\n-
          [moby/moby, 28.5.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.2)\n\n>
          \\[!CAUTION]\n> This release contains fixes for three high-severity security
          vulnerabilities in runc:\n>\n> - [CVE-2025-31133](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2)\n>
          - [CVE-2025-52565](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r)\n>
          - [CVE-2025-52881](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm)\n>\n>
          All three vulnerabilities ultimately allow (through different methods) for
          full container breakouts by bypassing runc's restrictions for writing to
          arbitrary `/proc` files.\n\n##### Packaging updates\n\n- Update runc to
          [v1.3.3](https://redirect.github.com/opencontainers/runc/releases/tag/v1.3.3).
          [moby/moby#51394](https://redirect.github.com/moby/moby/pull/51394)\n\n#####
          Bug fixes and enhancements\n\n- dockerd-rootless.sh: if slirp4netns is not
          installed, try using pasta (passt). [moby/moby#51162](https://redirect.github.com/moby/moby/pull/51162)\n-
          Update Go runtime to [1.24.9](https://go.dev/doc/devel/release#go1.24.9).
          [moby/moby#51387](https://redirect.github.com/moby/moby/pull/51387), [docker/cli#6613](https://redirect.github.com/docker/cli/pull/6613)\n\n#####
          Deprecations\n\n- Go-SDK: cli/command/image/build: deprecate `DefaultDockerfileName`,
          `DetectArchiveReader`, `WriteTempDockerfile`, `ResolveAndValidateContextPath`.
          These utilities were only used internally and will be removed in the next
          release. [docker/cli#6610](https://redirect.github.com/docker/cli/pull/6610)\n-
          Go-SDK: cli/command/image/build: deprecate IsArchive utility. [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n-
          Go-SDK: opts: deprecate `ValidateMACAddress`. [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n-
          Go-SDK: opts: deprecate ListOpts.Delete(). [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n\n###
          [`v28.5.1`](https://redirect.github.com/moby/moby/releases/tag/v28.5.1)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.5.0...v28.5.1)\n\n####
          28.5.1\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.1)\n-
          [moby/moby, 28.5.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.1)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.5.1/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.5.1/docs/api/version-history.md).\n\n#####
          Bug fixes and enhancements\n\n- Update BuildKit to v0.25.1. [moby/moby#51137](https://redirect.github.com/moby/moby/pull/51137)\n-
          Update Go runtime to [1.24.8](https://go.dev/doc/devel/release#go1.24.8).
          [moby/moby#51133](https://redirect.github.com/moby/moby/pull/51133), [docker/cli#6541](https://redirect.github.com/docker/cli/pull/6541)\n\n#####
          Deprecations\n\n- api/types/image: InspectResponse: deprecate `Parent` and
          `DockerVersion` fields. [moby/moby#51105](https://redirect.github.com/moby/moby/pull/51105)\n-
          api/types/plugin: deprecate `Config.DockerVersion` field. [moby/moby#51110](https://redirect.github.com/moby/moby/pull/51110)\n\n###
          [`v28.5.0`](https://redirect.github.com/moby/moby/releases/tag/v28.5.0)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.4.0...v28.5.0)\n\n###
          28.5.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.0)\n-
          [moby/moby, 28.5.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.5.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.5.0/docs/api/version-history.md).\n\n#####
          Bug fixes and enhancements\n\n- Don't print warnings in `docker info` for
          broken symlinks in CLI-plugin directories. [docker/cli#6476](https://redirect.github.com/docker/cli/pull/6476)\n-
          Fix a panic during `stats` on empty event `Actor.ID`. [docker/cli#6471](https://redirect.github.com/docker/cli/pull/6471)\n\n#####
          Packaging updates\n\n- Remove support for legacy CBC cipher suites. [docker/cli#6474](https://redirect.github.com/docker/cli/pull/6474)\n-
          Update Buildkit to [v0.25.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.25.0).
          [moby/moby#51075](https://redirect.github.com/moby/moby/pull/51075)\n- Update
          Dockerfile syntax to [v1.19.0](https://redirect.github.com/moby/buildkit/releases/tag/dockerfile%2F1.19.0).
          [moby/moby#51075](https://redirect.github.com/moby/moby/pull/51075)\n\n#####
          Networking\n\n- Eliminated harmless warning about deletion of `endpoint_count`
          from the data store. [moby/moby#51064](https://redirect.github.com/moby/moby/pull/51064)\n-
          Fix a bug causing IPAM plugins to not be loaded on Windows. [moby/moby#51035](https://redirect.github.com/moby/moby/pull/51035)\n\n#####
          API\n\n- Deprecate support for kernel memory TCP accounting (`KernelMemoryTCP`).
          [moby/moby#51067](https://redirect.github.com/moby/moby/pull/51067)\n- Fix
          `GET containers/{name}/checkpoints` returning `null` instead of empty JSON
          array when there are no checkpoints. [moby/moby#51052](https://redirect.github.com/moby/moby/pull/51052)\n\n#####
          Go SDK\n\n- cli-plugins/plugin: Run: allow customizing the CLI. [docker/cli#6481](https://redirect.github.com/docker/cli/pull/6481)\n-
          cli/command: add `WithUserAgent` option. [docker/cli#6477](https://redirect.github.com/docker/cli/pull/6477)\n\n#####
          Deprecations\n\n- Go-SDK: cli/command: deprecate `DockerCli.Apply`. This
          method is no longer used and will be removed in the next release if there
          are no remaining uses. [docker/cli#6497](https://redirect.github.com/docker/cli/pull/6497)\n-
          Go-SDK: cli/command: deprecate `DockerCli.ContentTrustEnabled`. This method
          is no longer used and will be removed in the next release. [docker/cli#6495](https://redirect.github.com/docker/cli/pull/6495)\n-
          Go-SDK: cli/command: deprecate `DockerCli.DefaultVersion`. This method is
          no longer used and will be removed in the next release. [docker/cli#6491](https://redirect.github.com/docker/cli/pull/6491)\n-
          Go-SDK: cli/command: deprecate `ResolveDefaultContext` utility. [docker/cli#6529](https://redirect.github.com/docker/cli/pull/6529)\n-
          Go-SDK: cli/command: deprecate `WithContentTrustFromEnv`, `WithContentTrust`
          options. These options were used internally, and will be removed in the
          next release.. [docker/cli#6489](https://redirect.github.com/docker/cli/pull/6489)\n-
          Go-SDK: cli/manifest/store: deprecate `IsNotFound()`. [docker/cli#6514](https://redirect.github.com/docker/cli/pull/6514)\n-
          Go-SDK: templates: deprecate NewParse() function. [docker/cli#6469](https://redirect.github.com/docker/cli/pull/6469)\n\n###
          [`v28.4.0`](https://redirect.github.com/moby/moby/releases/tag/v28.4.0)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.3.3...v28.4.0)\n\n####
          28.4.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.4.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.4.0)\n-
          [moby/moby, 28.4.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.4.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.4.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.4.0/docs/api/version-history.md).\n\n#####
          New\n\n- Allow Docker CLI to set the `GODEBUG` environment variable when
          the key-value pair (`\"GODEBUG\":\"...\"`) exists inside the docker context
          metadata. [docker/cli#6399](https://redirect.github.com/docker/cli/pull/6399)\n\n#####
          Bug fixes and enhancements\n\n- Add shell completion for `docker pull` and
          `docker image pull`. [docker/cli#6420](https://redirect.github.com/docker/cli/pull/6420)\n-
          Fix a regression in v28.3.3 that could cause a panic on `docker push` if
          the client did not send an `X-Registry-Auth` header. [moby/moby#50738](https://redirect.github.com/moby/moby/pull/50738)\n-
          Windows: Potentially fix an issue with \"access denied\" error when pulling
          images. [moby/moby#50871](https://redirect.github.com/moby/moby/pull/50871)\n-
          containerd image store: Fix `docker history` failing with `snapshot X does
          not exist` when calling on a non-native image that was built locally. [moby/moby#50875](https://redirect.github.com/moby/moby/pull/50875)\n-
          containerd image store: Fix `docker image prune` to emit correct `untag`
          and `delete` events and list only the deleted images root digests instead
          of every blob. [moby/moby#50837](https://redirect.github.com/moby/moby/pull/50837)\n-
          Remove interactive login prompt from `docker push` and `docker pull` after
          a failure caused by missing authentication. [docker/cli#6256](https://redirect.github.com/docker/cli/pull/6256)\n\n#####
          Packaging updates\n\n- Update BuildKit to [v0.24.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.24.0).
          [moby#50888](https://redirect.github.com/moby/moby/pull/50888)\n- Update
          Go runtime to [1.24.7](https://go.dev/doc/devel/release#go1.24.6). [moby/moby#50889](https://redirect.github.com/moby/moby/pull/50889),
          [docker/cli#6422](https://redirect.github.com/docker/cli/pull/6422)\n- Update
          `runc` to [v1.3.0](https://redirect.github.com/opencontainers/runc/releases/tag/v1.3.0).
          [moby/moby#50699](https://redirect.github.com/moby/moby/pull/50699)\n- Update
          containerd (static binaries only) to [v1.7.28](https://redirect.github.com/containerd/containerd/releases/tag/v1.7.28).
          [moby/moby#50700](https://redirect.github.com/moby/moby/pull/50700)\n\n#####
          Networking\n\n- Fix an issue that could cause slow container restart on
          live-restore. [moby/moby#50829](https://redirect.github.com/moby/moby/pull/50829)\n\n#####
          API\n\n- Update deprecation message for `AuthConfig.Email` field. [moby/moby#50797](https://redirect.github.com/moby/moby/pull/50797)\n\n#####
          Go SDK\n\n- Deprecate profiles package which got migrated to [github.com/moby/profiles](https://redirect.github.com/moby/profiles).
          [moby/moby#50513](https://redirect.github.com/moby/moby/pull/50513)\n\n#####
          Deprecations\n\n- Deprecate special handling for quoted values for the `--tlscacert`,
          `--tlscert`, and `--tlskey` command-line flags. [docker/cli#6291](https://redirect.github.com/docker/cli/pull/6291)\n-
          Mark legacy links env vars (`DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS`)
          as deprecated in v28.4 and set for removal in v30.0. [docker/cli#6309](https://redirect.github.com/docker/cli/pull/6309)\n-
          Go-SDK: Deprecate field `NetworkSettingsBase.Bridge`, struct `NetworkSettingsBase`,
          all the fields of `DefaultNetworkSettings`, and struct `DefaultNetworkSettings`.
          [moby/moby#50839](https://redirect.github.com/moby/moby/pull/50839)\n- Go-SDK:
          api/types: `build.CacheDiskUsage`,  `container.DiskUsage`, `images.DiskUsage`
          and `volumes.DiskUsage` are now deprecated and will be removed in the next
          major release. [moby/moby#50768](https://redirect.github.com/moby/moby/pull/50768)\n-
          Go-SDK: cli-plugins/manager: deprecate `ReexecEnvvar`. [docker/cli#6411](https://redirect.github.com/docker/cli/pull/6411)\n-
          Go-SDK: cli-plugins/manager: deprecate annotation aliases (`CommandAnnotationPlugin`,
          `CommandAnnotationPluginVendor`, `CommandAnnotationPluginVersion`, `CommandAnnotationPluginInvalid`,
          `CommandAnnotationPluginCommandPath`) in favor of their equivalent in `cli-plugins/manager/metadata`.
          [docker/cli#6298](https://redirect.github.com/docker/cli/pull/6298)\n- Go-SDK:
          cli-plugins/manager: deprecate metadata aliases (`NamePrefix`, `MetadataSubcommandName`,
          `HookSubcommandName`, `Metadata`, `ReexecEnvvar`) in favor of their equivalent
          in `cli-plugins/manager/metadata`. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli-plugins/manager: remove `Candidate` interface, which was only
          for internal use. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli-plugins/manager: remove `NewPluginError` function, which was
          only for internal use. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli-plugins/manager: remove deprecated `ResourceAttributesEnvvar`
          const. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli/command/builder: deprecate `NewBuilderCommand` and `NewBakeStubCommand`.
          These functions will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/builder: deprecate `NewPruneCommand`. [docker/cli#6343](https://redirect.github.com/docker/cli/pull/6343)\n-
          Go-SDK: cli/command/checkpoint: deprecate `NewCheckpointCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/checkpoint: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/completion: deprecate `NoComplete`. [docker/cli#6405](https://redirect.github.com/docker/cli/pull/6405)\n-
          Go-SDK: cli/command/completion: remove deprecated `ValidArgsFn`. [docker/cli#6259](https://redirect.github.com/docker/cli/pull/6259)\n-
          Go-SDK: cli/command/config: deprecate `NewConfigCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/config: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/config: deprecate `RunConfigCreate`,  `CreateOptions`, `RunConfigInspect`,
          `InspectOptions`, `RunConfigList`, `ListOptions`, `RunConfigRemove`, and
          `RemoveOptions`. [docker/cli#6369](https://redirect.github.com/docker/cli/pull/6369)\n-
          Go-SDK: cli/command/container: deprecate `NewBuildCommand`, `NewPullCommand`,
          `NewPushCommand`, `NewImagesCommand`, `NewImageCommand`, `NewHistoryCommand`,
          `NewImportCommand`, `NewLoadCommand`, `NewRemoveCommand`, `NewSaveCommand`,
          `NewTagCommand`, `NewPruneCommand`. These functions will be removed in the
          next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/container: deprecate `NewDiffFormat`, `DiffFormatWrite`.
          These functions were only used internally and will be removed in the next
          release. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/container: deprecate `NewRunCommand`, `NewExecCommand`,
          `NewPsCommand`, `NewContainerCommand`, `NewAttachCommand`, `NewCommitCommand`,
          `NewCopyCommand`, `NewCreateCommand`, `NewDiffCommand`, `NewExportCommand`,
          `NewKillCommand`, `NewLogsCommand`, `NewPauseCommand`, `NewPortCommand`,
          `NewRenameCommand`, `NewRestartCommand`, `NewRmCommand`, `NewStartCommand`,
          `NewStatsCommand`, `NewStopCommand`, `NewTopCommand`, `NewUnpauseCommand`,
          `NewUpdateCommand`, `NewWaitCommand`, `NewPruneCommand`. These functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/context: deprecate `NewContextCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/context: deprecate `RunCreate` and `CreateOptions`.
          [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n- Go-SDK:
          cli/command/context: deprecate `RunExport` and `ExportOptions`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/context: deprecate `RunImport`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/context: deprecate `RunRemove` and `RemoveOptions`.
          [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n- Go-SDK:
          cli/command/context: deprecate `RunUpdate` and `UpdateOptions`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/context: deprecate `RunUse`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/image: deprecate `AuthResolver` utility. [docker/cli#6357](https://redirect.github.com/docker/cli/pull/6357)\n-
          Go-SDK: cli/command/image: deprecate `NewHistoryFormat`, `HistoryWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341), [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/manifest: deprecate `NewManifestCommand`. This functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/network: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/network: deprecate `NewNetworkCommand`. These functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/node: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/node: deprecate `NewNodeCommand`. This functions will be removed
          in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/plugin: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/plugin: deprecate `NewPluginCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/registry: deprecate `NewLoginCommand`, `NewLogoutCommand`,
          `NewSearchCommand`. These functions will be removed in the next release.
          [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n- Go-SDK:
          cli/command/registry: deprecate `NewSearchFormat`, `SearchWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/registry: deprecate `OauthLoginEscapeHatchEnvVar` const.
          [docker/cli#6413](https://redirect.github.com/docker/cli/pull/6413)\n- Go-SDK:
          cli/command/secret: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/secret: deprecate `NewSecretCommand`. This functions will be
          removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/service: deprecate `NewFormat`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/service: deprecate `NewServiceCommand`. This function will be
          removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/stack: deprecate `NewStackCommand`. This function will
          be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/stack: deprecate `RunList`, `RunServices`. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: cli/command/swarm: deprecate `NewSwarmCommand`. This function will
          be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/system: deprecate `NewVersionCommand`, `NewInfoCommand`,
          `NewSystemCommand`, `NewEventsCommand`, `NewInspectCommand`. These functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/task: deprecate `NewTaskFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/trust: deprecate `NewTrustCommand`. This function will
          be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/trust: deprecate `SignedTagInfo`, `SignerInfo`, `NewTrustTagFormat`,
          `NewSignerInfoFormat`, `TagWrite`, `SignerInfoWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/volume: deprecate `NewVolumeCommand`, `NewPruneCommand`.
          These functions will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command: remove `AddTrustSigningFlags`,  `AddTrustVerificationFlags`,
          and `AddPlatformFlag` utilities, which were only used internally. [docker/cli#6311](https://redirect.github.com/docker/cli/pull/6311)\n-
          Go-SDK: cli/command: remove deprecated `ConfigureAuth` utility. [docker/cli#6257](https://redirect.github.com/docker/cli/pull/6257)\n-
          Go-SDK: cli/command: remove deprecated `CopyToFile` utility. [docker/cli#6257](https://redirect.github.com/docker/cli/pull/6257)\n-
          Go-SDK: cli/config/types: update deprecation message for `AuthConfig.Email`
          field. [docker/cli#6392](https://redirect.github.com/docker/cli/pull/6392)\n-
          Go-SDK: cli: deprecate `VisitAll`, `DisableFlagsInUseLine` utilities. These
          utilities were only used internally and will be removed in the next release.
          [docker/cli#6276](https://redirect.github.com/docker/cli/pull/6276)\n- Go-SDK:
          cli: remove `HasCompletionArg` utility. This utility was only used internally.
          [docker/cli#6276](https://redirect.github.com/docker/cli/pull/6276)\n- Go-SDK:
          deprecate `cli/command.RegistryAuthenticationPrivilegedFunc`. [docker/cli#6256](https://redirect.github.com/docker/cli/pull/6256)\n-
          Go-SDK: deprecate cli/command/stack/formatter. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: deprecate cli/command/stack/loader. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: deprecate cli/command/stack/options. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: deprecate cli/command/stack/swarm. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: opts: deprecate `NewNamedListOptsRef`, `NewNamedMapOpts`, `NamedListOpts`,
          `NamedMapOpts`, and `NamedOption`. These types and functions are no longer
          used and will be removed in the next release. [docker/cli#6292](https://redirect.github.com/docker/cli/pull/6292)\n-
          Go-SDK: opts: deprecate `ParseEnvFile` in favour of `kvfile.Parse`. [docker/cli#6381](https://redirect.github.com/docker/cli/pull/6381)\n-
          Go-SDK: opts: deprecate `QuotedString`. This utility is no longer used,
          and will be removed in the next release. [docker/cli#6275](https://redirect.github.com/docker/cli/pull/6275)\n-
          Go-SDK: opts: deprecate `ValidateHost` utility. This function is no longer
          used, and will be removed in the next release. [docker/cli#6280](https://redirect.github.com/docker/cli/pull/6280)\n-
          Go-SDK: pkg/jsonmessage: deprecate the `JSONMessage.From`, `JSONMessage.Time`,
          and `JSONMessage.TimeNano` fields, as they are no longer returned by the
          API for progress messages. Use the `events.Message` type instead to unmarshal
          the `/events` response. [moby/moby#50762](https://redirect.github.com/moby/moby/pull/50762)\n-
          Go-SDK: the cli/registry/client package is deprecated and will be removed
          in the next release. [docker/cli#6313](https://redirect.github.com/docker/cli/pull/6313)\n\n###
          [`v28.3.3`](https://redirect.github.com/moby/moby/releases/tag/v28.3.3)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.3.2...v28.3.3)\n\n####
          28.3.3\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.3 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.3)\n-
          [moby/moby, 28.3.3 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.3)\n\n#####
          Security\n\nThis release fixes an issue where, after a firewalld reload,
          published container ports could be accessed directly from the local network,
          even when they were intended to be accessible only via a loopback address.
          [CVE-2025-54388](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54388)
          /  [GHSA-x4rx-4gw3-53p4](https://redirect.github.com/moby/moby/security/advisories/GHSA-x4rx-4gw3-53p4)
          / [moby/moby#50506](https://redirect.github.com/moby/moby/pull/50506).\n\n#####
          Packaging updates\n\n- Update Buildx to [v0.26.1](https://redirect.github.com/docker/buildx/releases/tag/v0.26.1).
          [docker/docker-ce-packaging#1230](https://redirect.github.com/docker/docker-ce-packaging/pull/1230)\n-
          Update Compose to [v2.39.1](https://redirect.github.com/docker/compose/releases/tag/v2.39.1).
          [docker/docker-ce-packaging#1234](https://redirect.github.com/docker/docker-ce-packaging/pull/1234)\n-
          Update Docker Model CLI plugin to [v0.1.36](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.36).
          [docker/docker-ce-packaging#1233](https://redirect.github.com/docker/docker-ce-packaging/pull/1233)\n\n#####
          Go SDK\n\n- cli/command/formatter: add `TrunateID()` utility as alternative
          for `github.com/docker/docker/pkg/stringid.TrunateID()`. [docker/cli#6180](https://redirect.github.com/docker/cli/pull/6180)\n\n###
          [`v28.3.2`](https://redirect.github.com/moby/moby/releases/tag/v28.3.2):
          28.3.2\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.3.1...v28.3.2)\n\n####
          28.3.2\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.2)\n-
          [moby/moby, 28.3.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.2)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.2/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.2/docs/api/version-history.md).\n\n#####
          Bug fixes and enhancements\n\n- Fix `--use-api-socket` not working correctly
          when targeting a remote daemon. [docker/cli#6157](https://redirect.github.com/docker/cli/pull/6157)\n-
          Fix stray \"otel error\" logs being printed if debug logging is enabled.
          [docker/cli#6160](https://redirect.github.com/docker/cli/pull/6160)\n- Quote
          SSH arguments when connecting to a remote daemon over an SSH connection
          to avoid unexpected expansion. [docker/cli#6147](https://redirect.github.com/docker/cli/pull/6147)\n-
          Warn when `DOCKER_AUTH_CONFIG` is set during `docker login` and `docker
          logout`. [docker/cli#6163](https://redirect.github.com/docker/cli/pull/6163)\n\n#####
          Packaging updates\n\n- Update Compose to [v2.38.2](https://redirect.github.com/docker/compose/releases/tag/v2.38.2).
          [docker/docker-ce-packaging#1225](https://redirect.github.com/docker/docker-ce-packaging/pull/1225)\n-
          Update Docker Model CLI plugin to [v0.1.33](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.33).
          [docker/docker-ce-packaging#1227](https://redirect.github.com/docker/docker-ce-packaging/pull/1227)\n-
          Update Go runtime to 1.24.5. [moby/moby#50354](https://redirect.github.com/moby/moby/pull/50354)\n\n###
          [`v28.3.1`](https://redirect.github.com/moby/moby/releases/tag/v28.3.1):
          28.3.1\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.3.0...v28.3.1)\n\n####
          28.3.1\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.1)\n-
          [moby/moby, 28.3.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.1)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.1/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.1/docs/api/version-history.md).\n\n#####
          Packaging updates\n\n- Update BuildKit to [v0.23.2](https://redirect.github.com/moby/buildkit/releases/tag/v0.23.2).
          [moby/moby#50309](https://redirect.github.com/moby/moby/pull/50309)\n- Update
          Compose to [v2.38.1](https://redirect.github.com/docker/compose/releases/tag/v2.38.1).
          [docker/docker-ce-packaging#1221](https://redirect.github.com/docker/docker-ce-packaging/pull/1221)\n-
          Update Model to v0.1.32 which adds the support for the new top-level `models:`
          key in Docker Compose. [docker/docker-ce-packaging#1222](https://redirect.github.com/docker/docker-ce-packaging/pull/1222)\n\n###
          [`v28.3.0`](https://redirect.github.com/moby/moby/releases/tag/v28.3.0):
          28.3.0\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.2.2...v28.3.0)\n\n####
          28.3.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.0)\n-
          [moby/moby, 28.3.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.0/docs/api/version-history.md).\n\n#####
          New\n\n- Add support for AMD GPUs in `docker run --gpus`. [moby/moby#49952](https://redirect.github.com/moby/moby/pull/49952)\n-
          Use `DOCKER_AUTH_CONFIG` as a credential store. [docker/cli#6008](https://redirect.github.com/docker/cli/pull/6008)\n\n#####
          Bug fixes and enhancements\n\n- Ensure that the state of the container in
          the daemon database (used by [/containers/json](https://docs.docker.com/reference/api/engine/version/v1.49/#tag/Container/operation/ContainerList)
          API) is up to date when the container is stopped using the [/containers/{id}/stop](https://docs.docker.com/reference/api/engine/version/v1.49/#tag/Container/operation/ContainerStop)
          API (before response of API). [moby/moby#50136](https://redirect.github.com/moby/moby/pull/50136)\n-
          Fix `docker image inspect inspect` omitting empty fields. [moby/moby#50135](https://redirect.github.com/moby/moby/pull/50135)\n-
          Fix `docker images --tree` not marking images as in-use when the containerd
          image store is disabled. [docker/cli#6140](https://redirect.github.com/docker/cli/pull/6140)\n-
          Fix `docker pull/push` hang in non-interactive when authentication is required
          caused by prompting for login credentials. [docker/cli#6141](https://redirect.github.com/docker/cli/pull/6141)\n-
          Fix a potential resource leak when a node leaves a Swarm. [moby/moby#50115](https://redirect.github.com/moby/moby/pull/50115)\n-
          Fix a regression where a login prompt on `docker pull` would show Docker
          Hub-specific hints when logging in on other registries. [docker/cli#6135](https://redirect.github.com/docker/cli/pull/6135)\n-
          Fix an issue where all new tasks in the Swarm could get stuck in the PENDING
          state forever after scaling up a service with placement preferences. [moby/moby#50211](https://redirect.github.com/moby/moby/pull/50211)\n-
          Remove an undocumented, hidden, top-level `docker remove` command that was
          accidentally introduced in Docker 23.0. [docker/cli#6144](https://redirect.github.com/docker/cli/pull/6144)\n-
          Validate registry-mirrors configuration as part of `dockerd --validate`
          and improve error messages for invalid mirrors. [moby/moby#50240](https://redirect.github.com/moby/moby/pull/50240)\n-
          `dockerd-rootless-setuptool.sh`: Fix the script from silently returning
          with no error message when subuid/subgid system requirements are not satisfied.
          [moby/moby#50059](https://redirect.github.com/moby/moby/pull/50059)\n- containerd
          image store: Fix `docker push` not creating a tag on the remote repository.
          [moby/moby#50199](https://redirect.github.com/moby/moby/pull/50199)\n- containerd
          image store: Improve handling of errors returned by the token server during
          `docker pull/push`. [moby/moby#50176](https://redirect.github.com/moby/moby/pull/50176)\n\n#####
          Packaging updates\n\n- Allow customizing containerd service name for OpenRC.
          [moby/moby#50156](https://redirect.github.com/moby/moby/pull/50156)\n- Update
          BuildKit to [v0.23.1](https://redirect.github.com/moby/buildkit/releases/tag/v0.23.1).
          [moby/moby#50243](https://redirect.github.com/moby/moby/pull/50243)\n- Update
          Buildx to [v0.25.0](https://redirect.github.com/docker/buildx/releases/tag/v0.25.0).
          [docker/docker-ce-packaging#1217](https://redirect.github.com/docker/docker-ce-packaging/pull/1217)\n-
          Update Compose to [v2.37.2](https://redirect.github.com/docker/compose/releases/tag/v2.37.2).
          [docker/docker-ce-packaging#1219](https://redirect.github.com/docker/docker-ce-packaging/pull/1219)\n-
          Update Docker Model CLI plugin to [v0.1.30](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.30).
          [docker/docker-ce-packaging#1218](https://redirect.github.com/docker/docker-ce-packaging/pull/1218)\n-
          Update Go runtime to [1.24.4](https://go.dev/doc/devel/release#go1.24.4).
          [docker/docker-ce-packaging#1213](https://redirect.github.com/docker/docker-ce-packaging/pull/1213),
          [moby/moby#50153](https://redirect.github.com/moby/moby/pull/50153), [docker/cli#6124](https://redirect.github.com/docker/cli/pull/6124)\n\n#####
          Networking\n\n- Revert Swarm related changes added in 28.2.x builds, due
          to a regression reported in [#&#8203;50129](https://redirect.github.com/moby/moby/issues/50129).
          [moby/moby#50169](https://redirect.github.com/moby/moby/pull/50169)\n  -
          Revert: Fix an issue where `docker network inspect --verbose` could sometimes
          crash the daemon ([#&#8203;49937](https://redirect.github.com/moby/moby/pull/49937)).\n
          \ - Revert: Fix an issue where the load-balancer IP address for an overlay
          network would not be released in certain cases if the Swarm was lacking
          an ingress network ([#&#8203;49948](https://redirect.github.com/moby/moby/pull/49948)).\n
          \ - Revert: Improve the reliability of NetworkDB in busy clusters and lossy
          networks ([#&#8203;49932](https://redirect.github.com/moby/moby/pull/49932)).\n
          \ - Revert: Improvements to the reliability and convergence speed of NetworkDB
          ([#&#8203;49939](https://redirect.github.com/moby/moby/pull/49939)).\n-
          Fix an issue that could cause container startup to fail, or lead to failed
          UDP port mappings, when some container ports are mapped to `0.0.0.0` and
          others are mapped to specific host addresses. [moby/moby#50054](https://redirect.github.com/moby/moby/pull/50054)\n-
          The `network inspect` response for an overlay network now reports that `EnableIPv4`
          is true. [moby/moby#50147](https://redirect.github.com/moby/moby/pull/50147)\n-
          Windows: Improve daemon startup time in cases where the host has networks
          of type `\"Mirrored\"`. [moby/moby#50155](https://redirect.github.com/moby/moby/pull/50155)\n-
          Windows: Make sure `docker system prune` and `docker network prune` only
          remove networks created by Docker. [moby/moby#50154](https://redirect.github.com/moby/moby/pull/50154)\n\n#####
          API\n\n- Update API version to 1.51. [moby/moby#50145](https://redirect.github.com/moby/moby/pull/50145)\n-
          `GET /images/json` now sets the value of the `Containers` field for all
          images to the count of containers using the image. [moby/moby#50146](https://redirect.github.com/moby/moby/pull/50146)\n\n#####
          Deprecations\n\n- Empty/nil image config fields in the `GET /images/{name}/json`
          response are now deprecated and will be removed in v29.0. [docker/cli#6129](https://redirect.github.com/docker/cli/pull/6129)\n-
          api/types/container: deprecate `ExecOptions.Detach`. This field is not used,
          and will be removed in a future release. [moby/moby#50219](https://redirect.github.com/moby/moby/pull/50219)\n-
          pkg/idtools: deprecate `IdentityMapping` and `Identity.Chown`. [moby/moby#50210](https://redirect.github.com/moby/moby/pull/50210)\n\n###
          [`v28.2.2`](https://redirect.github.com/moby/moby/releases/tag/v28.2.2):
          28.2.2\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.2.1...v28.2.2)\n\n####
          28.2.2\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.2.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.2.2)\n-
          [moby/moby, 28.2.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.2.2)\n\n#####
          Bug fixes and enhancements\n\n- containerd image store: Fix a regression
          causing `docker build --push` to fail. This reverts [the fix](https://redirect.github.com/moby/moby/pull/49702)
          for `docker build` not persisting overridden images as dangling. [moby/moby#50105](https://redirect.github.com/moby/moby/pull/50105)\n\n#####
          Networking\n\n- When creating the iptables `DOCKER-USER` chain, do not add
          an explicit `RETURN` rule, allowing users to append as well as insert their
          own rules. Existing rules are not removed on upgrade, but it won't be replaced
          after a reboot. [moby/moby#50098](https://redirect.github.com/moby/moby/pull/50098)\n\n###
          [`v28.2.1`](https://redirect.github.com/moby/moby/releases/tag/v28.2.1):
          28.2.1\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.2.0...v28.2.1)\n\n####
          28.2.1\n\n#### Packaging updates\n\n- Fix packaging regression in [v28.2.0](https://redirect.github.com/moby/moby/releases/tag/v28.2.0)
          which broke creating the `docker` group/user on fresh installations. [docker-ce-packaging#1209](https://redirect.github.com/docker/docker-ce-packaging/issues/1209)\n\n###
          [`v28.2.0`](https://redirect.github.com/moby/moby/releases/tag/v28.2.0):
          28.2.0\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.1.1...v28.2.0)\n\n####
          28.2.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.2.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.2.0)\n-
          [moby/moby, 28.2.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.2.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.2.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.2.0/docs/api/version-history.md).\n\n>
          \\[!NOTE]\n> RHEL packages are currently not available and will be released
          later.\n\n##### New\n\n- Add `{{.Platform}}` as formatting option for `docker
          ps` to show the platform of the image the container is running. [docker/cli#6042](https://redirect.github.com/docker/cli/pull/6042)\n-
          Add support for relative parent paths (`../`) on bind mount sources when
          using `docker run/create` with `-v/--volume` or `--mount type=bind` options.
          [docker/cli#4966](https://redirect.github.com/docker/cli/pull/4966)\n- CDI
          is now enabled by default. [moby/moby#49963](https://redirect.github.com/moby/moby/pull/49963)\n-
          Show discovered CDI devices in `docker info`. [docker/cli#6078](https://redirect.github.com/docker/cli/pull/6078)\n-
          `docker image rm`: add `--platform` option to remove a variant from multi-platform
          images. [docker/cli#6109](https://redirect.github.com/docker/cli/pull/6109)\n-
          containerd image store: Initial BuildKit support for building Windows container
          images on Windows (requires an opt-in with `DOCKER_BUILDKIT=1`). [moby/moby#49740](https://redirect.github.com/moby/moby/pull/49740)\n\n#####
          Bug fixes and enhancements\n\n- Add a new log option for fluentd log driver
          (`fluentd-write-timeout`), which enables specifying write timeouts for fluentd
          connections. [moby/moby#49911](https://redirect.github.com/moby/moby/pull/49911)\n-
          Add support for `DOCKER_AUTH_CONFIG` for the experimental `--use-api-socket`
          option. [docker/cli#6019](https://redirect.github.com/docker/cli/pull/6019)\n-
          Fix `docker exec` waiting for 10 seconds if a non-existing user or group
          was specified. [moby/moby#49868](https://redirect.github.com/moby/moby/pull/49868)\n-
          Fix `docker swarm init` ignoring `cacert` option of `--external-ca`. [docker/cli#5995](https://redirect.github.com/docker/cli/pull/5995)\n-
          Fix an issue where the CLI would not correctly save the configuration file
          (`~/.docker/config.json`) if it was a relative symbolic link. [docker/cli#5282](https://redirect.github.com/docker/cli/pull/5282)\n-
          Fix containers with `--restart always` policy using CDI devices failing
          to start on daemon restart. [moby/moby#49990](https://redirect.github.com/moby/moby/pull/49990)\n-
          Fix shell-completion to only complete some flags once, even though they
          can be set multiple times. [docker/cli#6030](https://redirect.github.com/docker/cli/pull/6030)\n-
          Fix the `plugin does not implement PluginAddr interface` error for Swarm
          CSI drivers. [moby/moby#49961](https://redirect.github.com/moby/moby/pull/49961)\n-
          Improve `docker login` error messages for invalid options. [docker/cli#6036](https://redirect.github.com/docker/cli/pull/6036)\n-
          Make sure the terminal state is restored if the CLI is forcefully terminated.
          [docker/cli#6058](https://redirect.github.com/docker/cli/pull/6058)\n- Update
          the default seccomp profile to match the libseccomp v2.6.0. The new syscalls
          are: `listmount`, `statmount`, `lsm_get_self_attr`, `lsm_list_modules`,
          `lsm_set_self_attr`, `mseal`, `uretprobe`, `riscv_hwprobe`, `getxattrat`,
          `listxattrat`, `removexattrat`, and `setxattrat`. This prevents containers
          from receiving EPERM errors when using them. [moby/moby#50077](https://redirect.github.com/moby/moby/pull/50077)\n-
          `docker inspect`: add shell completion, improve flag-description for `--type`
          and improve validation. [docker/cli#6052](https://redirect.github.com/docker/cli/pull/6052)\n-
          containerd image store: Enable BuildKit garbage collector by default. [moby/moby#49899](https://redirect.github.com/moby/moby/pull/49899)\n-
          containerd image store: Fix `docker build` not persisting overridden images
          as dangling. [moby/moby#49702](https://redirect.github.com/moby/moby/pull/49702)\n-
          containerd image store: Fix `docker system df` reporting a negative reclaimable
          space amount. [moby/moby#49707](https://redirect.github.com/moby/moby/pull/49707)\n-
          containerd image store: Fix duplicate `PUT` requests when pushing a multi-platform
          image. [moby/moby#49949](https://redirect.github.com/moby/moby/pull/49949)\n\n#####
          Packaging updates\n\n- Drop Ubuntu 20.04 \"Focal\" packages as it reached
          end of life. [docker/docker-ce-packaging#1200](https://redirect.github.com/docker/docker-ce-packaging/pull/1200)\n-
          Fix install location for RPM-based `docker-ce` man-pages. [docker/docker-ce-packaging#1203](https://redirect.github.com/docker/docker-ce-packaging/pull/1203)\n-
          Update BuildKit to [v0.22.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.22.0).
          [moby/moby#50046](https://redirect.github.com/moby/moby/pull/50046)\n- Update
          Buildx to [v0.24.0](https://redirect.github.com/docker/buildx/releases/tag/v0.24.0).
          [docker/docker-ce-packaging#1205](https://redirect.github.com/docker/docker-ce-packaging/pull/1205)\n-
          Update Compose to [v2.36.2](https://redirect.github.com/docker/compose/releases/tag/v2.36.2).
          [docker/docker-ce-packaging#1208](https://redirect.github.com/docker/docker-ce-packaging/pull/1208)\n-
          Update Go runtime to [1.24.3](https://go.dev/doc/devel/release#go1.24.3).
          [docker/docker-ce-packaging#1192](https://redirect.github.com/docker/docker-ce-packaging/pull/1192),
          [docker/cli#6060](https://redirect.github.com/docker/cli/pull/6060), [moby/moby#49174](https://redirect.github.com/moby/moby/pull/49174)\n\n#####
          Networking\n\n- Add bridge network option `\"com.docker.network.bridge.trusted_host_interfaces\"`,
          accepting a colon-separated list of interface names. These interfaces have
          direct access to published ports on container IP addresses. [moby/moby#49832](https://redirect.github.com/moby/moby/pull/49832)\n-
          Add daemon option `\"allow-direct-routing\"` to disable filtering of packets
          from outside the host addressed directly to containers. [moby/moby#49832](https://redirect.github.com/moby/moby/pull/49832)\n-
          Do not display network options `com.docker.network.enable_ipv4` or `com.docker.network.enable_ipv6`
          in inspect output if they have been overridden by `EnableIPv4` or `EnableIPv6`
          in the network create request. [moby/moby#49866](https://redirect.github.com/moby/moby/pull/49866)\n-
          Fix an issue that could cause network deletion to fail after a daemon restart,
          with error \"has active endpoints\" listing empty endpoint names. [moby/moby#49901](https://redirect.github.com/moby/moby/pull/49901)\n-
          Fix an issue where `docker network inspect --verbose` could sometimes crash
          the daemon. [moby/moby#49937](https://redirect.github.com/moby/moby/pull/49937)\n-
          Fix an issue where the load-balancer IP address for an overlay network would
          not be released in certain cases if the Swarm was lacking an ingress network.
          [moby/moby#49948](https://redirect.github.com/moby/moby/pull/49948)\n- Improve
          the reliability of NetworkDB in busy clusters and lossy networks. [moby/moby#49932](https://redirect.github.com/moby/moby/pull/49932)\n-
          Improvements to the reliability and convergence speed of NetworkDB. [moby/moby#49939](https://redirect.github.com/moby/moby/pull/49939)\n\n#####
          API\n\n- Update API version to `1.50`.\n- `DELETE /images/{name}` now supports
          a `platforms` query parameter. It accepts an array of JSON-encoded OCI Platform
          objects, allowing for selecting a specific platforms to delete content for.
          [moby/moby#49982](https://redirect.github.com/moby/moby/pull/49982)\n- `GET
          /info` now includes a `DiscoveredDevices` field. This is an array of `DeviceInfo`
          objects, each providing details about a device discovered by a device driver.
          [moby/moby#49980](https://redirect.github.com/moby/moby/pull/49980)\n\n#####
          Go SDK\n\n- `api/types/container`: add `ContainerState` and constants for
          container state. [moby/moby#49965](https://redirect.github.com/moby/moby/pull/49965)\n-
          `api/types/container`: change `Summary.State` to a `ContainerState`. [moby/moby#49991](https://redirect.github.com/moby/moby/pull/49991)\n-
          `api/types/container`: define `HealthStatus` type for health-status constants.
          [moby/moby#49876](https://redirect.github.com/moby/moby/pull/49876)\n- `api/types`:
          deprecate `BuildResult`, `ImageBuildOptions`, `ImageBuildOutput`, `ImageBuildResponse`,
          `BuilderVersion`, `BuilderV1`, and `BuilderBuildKi` which were moved to
          `api/types/build`. [moby/moby#50025](https://redirect.github.com/moby/moby/pull/50025)\n\n#####
          Deprecations\n\n- API: Deprecated: `GET /images/{name}/json` no longer returns
          the following fields: `Config`, `Hostname`, `Domainname`, `AttachStdin`,
          `AttachStdout`, `AttachStderr`, `Tty`, `OpenStdin`, `StdinOnce`, `Image`,
          `NetworkDisabled` (already omitted unless set), `MacAddress` (already omitted
          unless set), `StopTimeout` (already omitted unless set). These additional
          fields were included in the response due to an implementation detail but
          not part of the image's Configuration, were marked deprecated in API v1.46,
          and are now omitted. [moby/moby#48457](https://redirect.github.com/moby/moby/pull/48457)\n-
          Go-SDK: Deprecate builder/remotecontext.Rel(). This function was needed
          on older versions of Go, but can now be replaced by `filepath.Rel()`. [moby/moby#49843](https://redirect.github.com/moby/moby/pull/49843)\n-
          Go-SDK: api/types: deprecate `BuildCachePruneOptions` in favor of `api/types/builder.CachePruneOptions`.
          [moby/moby#50015](https://redirect.github.com/moby/moby/pull/50015)\n- Go-SDK:
          api/types: deprecate `BuildCachePruneReport` in favor of `api/types/builder.CachePruneReport`.
          [moby/moby#50015](https://redirect.github.com/moby/moby/pull/50015)\n- Go-SDK:
          api/types: deprecate `NodeListOptions`, `NodeRemoveOptions`, `ServiceCreateOptions`,
          `ServiceUpdateOptions`, `RegistryAuthFromSpec`, `RegistryAuthFromPreviousSpec`,
          `ServiceListOptions`, `ServiceInspectOptions`, and `SwarmUnlockKeyResponse`
          which were moved to `api/types/swarm`. [moby/moby#50027](https://redirect.github.com/moby/moby/pull/50027)\n-
          Go-SDK: api/types: deprecate `SecretCreateResponse`, `SecretListOptions`,
          `ConfigCreateResponse`, `ConfigListOptions` which were moved to api/types/swarm.
          [moby/moby#50024](https://redirect.github.com/moby/moby/pull/50024)\n- Go-SDK:
          client: deprecate `IsErrNotFound`. [moby/moby#50012](https://redirect.github.com/moby/moby/pull/50012)\n-
          Go-SDK: container: deprecate `IsValidHealthString` in favor of `api/types/container.ValidateHealthStatus`.
          [moby/moby#49893](https://redirect.github.com/moby/moby/pull/49893)\n- Go-SDK:
          container: deprecate `StateStatus`, `WaitCondition`, and the related  `WaitConditionNotRunning`,
          `WaitConditionNextExit`, and `WaitConditionRemoved` consts in favor of their
          equivalents in `api/types/container`. [moby/moby#49874](https://redirect.github.com/moby/moby/pull/49874)\n-
          Go-SDK: opts: deprecate `ListOpts.GetAll` in favor of `ListOpts.GetSlice`.
          [docker/cli#6032](https://redirect.github.com/docker/cli/pull/6032)\n- Remove
          deprecated `IsAutomated` formatting placeholder from `docker search`. [docker/cli#6091](https://redirect.github.com/docker/cli/pull/6091)\n-
          Remove fallback for pulling images from non-OCI-compliant `docker.pkg.github.com`
          registry. [moby/moby#50094](https://redirect.github.com/moby/moby/pull/50094)\n-
          Remove support for pulling legacy v2, schema 1 images and remove `DOCKER_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGE`
          environment-variable. [moby/moby#50036](https://redirect.github.com/moby/moby/pull/50036),
          [moby/moby#42300](https://redirect.github.com/moby/moby/pull/42300)\n- The
          `BridgeNfIptables` and `BridgeNfIp6tables` fields in the `GET /info` response
          were deprecated in API v1.48, and are now omitted in API v1.50. [moby/moby#49904](https://redirect.github.com/moby/moby/pull/49904)\n-
          errdefs: Deprecate `errdefs.FromStatusCode`. Use containerd's `errhttp.ToNative`
          instead. [moby/moby#50030](https://redirect.github.com/moby/moby/pull/50030)\n\n###
          [`v28.1.1`](https://redirect.github.com/moby/moby/releases/tag/v28.1.1)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.1.0...v28.1.1)\n\n####
          28.1.1\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.1.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.1.1)\n-
          [moby/moby, 28.1.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.1.1)\n\n#####
          Bug fixes and enhancements\n\n- Fix `dockerd-rootless-setuptool.sh` incorrectly
          reporting missing `iptables`. [moby/moby#49833](https://redirect.github.com/moby/moby/pull/49833)\n-
          containerd image store: Fix a potential daemon crash when using `docker
          load` with archives containing zero-size tar headers. [moby/moby#49837](https://redirect.github.com/moby/moby/pull/49837)\n\n#####
          Packaging updates\n\n- Update Buildx to [v0.23.0](https://redirect.github.com/docker/buildx/releases/tag/v0.23.0).
          [docker/docker-ce-packaging#1185](https://redirect.github.com/docker/docker-ce-packaging/pull/1185)\n-
          Update Compose to [v2.35.1](https://redirect.github.com/docker/compose/releases/tag/v2.35.1).
          [docker/docker-ce-packaging#1188](https://redirect.github.com/docker/docker-ce-packaging/pull/1188)\n\n#####
          Networking\n\n- Add a warning to a container's `/etc/resolv.conf` when no
          upstream DNS servers were found. [moby/moby#49827](https://redirect.github.com/moby/moby/pull/49827)\n\n###
          [`v28.1.0`](https://redirect.github.com/moby/moby/releases/tag/v28.1.0)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.0.4...v28.1.0)\n\n####
          28.1.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.1.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.1.0)\n-
          [moby/moby, 28.1.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.1.0)\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.1.0/docs/api/version-history.md).\n\n#####
          New\n\n- Add `docker bake` sub-command as alias for `docker buildx bake`.
          [docker/cli#5947](https://redirect.github.com/docker/cli/pull/5947)\n- Experimental:
          add a new `--use-api-socket` flag on `docker run` and `docker create` to
          enable access to Docker socket from inside a container and to share credentials
          from the host with the container. [docker/cli#5858](https://redirect.github.com/docker/cli/pull/5858)\n-
          `docker image inspect` now supports a `--platform` flag to inspect a specific
          platform of a multi-platform image. [docker/cli#5934](https://redirect.github.com/docker/cli/pull/5934)\n\n#####
          Bug fixes and enhancements\n\n- Add CLI shell-completion for context names.
          [docker/cli#6016](https://redirect.github.com/docker/cli/pull/6016)\n- Fix
          `docker images --tree` not including non-container images content size in
          the total image content size. [docker/cli#6000](https://redirect.github.com/docker/cli/pull/6000)\n-
          Fix `docker load` not preserving replaced images. [moby/moby#49650](https://redirect.github.com/moby/moby/pull/49650)\n-
          Fix `docker login` hints when logging in to a custom registry. [docker/cli#6015](https://redirect.github.com/docker/cli/pull/6015)\n-
          Fix `docker stats` not working properly on machines with high CPU core count.
          [moby/moby#49734](https://redirect.github.com/moby/moby/pull/49734)\n- Fix
          a regression causing `docker pull/push` to fail when interacting with a
          private repository. [docker/cli#5964](https://redirect.github.com/docker/cli/pull/5964)\n-
          Fix an issue preventing rootless Docker setup on a host with no `ip_tables`
          kernel module. [moby/moby#49727](https://redirect.github.com/moby/moby/pull/49727)\n-
          Fix an issue that could lead to unwanted iptables rules being restored and
          never deleted following a firewalld reload. [moby/moby#49728](https://redirect.github.com/moby/moby/pull/49728)\n-
          Improve CLI completion of `docker service scale`. [docker/cli#5968](https://redirect.github.com/docker/cli/pull/5968)\n-
          `docker images --tree` now hides both untagged and dangling images by default.
          [docker/cli#5924](https://redirect.github.com/docker/cli/pull/5924)\n- `docker
          system info` will provide an exit code if a connection cannot be established
          to the Docker daemon. [docker/cli#5918](https://redirect.github.com/docker/cli/pull/5918)\n-
          containerd image store: Fix `image tag` event not being emitted when building
          with BuildKit. [moby/moby#49678](https://redirect.github.com/moby/moby/pull/49678)\n-
          containerd image store: Improve `docker push/pull` handling of remote registry
          errors. [moby/moby#49770](https://redirect.github.com/moby/moby/pull/49770)\n-
          containerd image store: Show pull progress for non-layer image blobs. [moby/moby#49746](https://redirect.github.com/moby/moby/pull/49746)\n\n#####
          Packaging updates\n\n- Add Debian \"Trixie\" packages. [docker/docker-ce-packaging#1181](https://redirect.github.com/docker/docker-ce-packaging/pull/1181)\n-
          Add Fedora 42 packages. [docker/containerd-packaging#418](https://redirect.github.com/docker/containerd-packaging/pull/418),
          [docker/docker-ce-packaging#1169](https://redirect.github.com/docker/docker-ce-packaging/pull/1169)\n-
          Add Ubuntu 25.04 \"Plucky Puffin\" packages. [docker/containerd-packaging#419](https://redirect.github.com/docker/containerd-packaging/pull/419),
          [docker/docker-ce-packaging#1177](https://redirect.github.com/docker/docker-ce-packaging/pull/1177)\n-
          Update BuildKit to [v0.21.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.21.0).
          [moby/moby#49809](https://redirect.github.com/moby/moby/pull/49809)\n- Update
          Compose to [v2.35.0](https://redirect.github.com/docker/compose/releases/tag/v2.35.0).
          [docker/docker-ce-packaging#1183](https://redirect.github.com/docker/docker-ce-packaging/pull/1183)\n-
          Update Go runtime to [1.23.8](https://go.dev/doc/devel/release#go1.23.8).
          [docker/cli#5986](https://redirect.github.com/docker/cli/pull/5986), [docker/docker-ce-packaging#1180](https://redirect.github.com/docker/docker-ce-packaging/pull/1180),
          [moby/moby#49737](https://redirect.github.com/moby/moby/pull/49737)\n\n#####
          Networking\n\n- Fix a bug causing host port-mappings on Swarm containers
          to be duplicated on `docker ps` and `docker i\n\n> \u2702 **Note**\n> \n>
          PR body was truncated to here.\n\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about these updates again.\n\n---\n\n - [ ] <!-- rebase-check -->If you
          want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/1807
        commit_id: 4e5d7086fed9808ec3030da69e600b8a36c24c87
        patchset: 4e5d7086fed9808ec3030da69e600b8a36c24c87
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
        src_dir: src/github.com/osism/release
        topic: null
      buildset: 79478bac23e24cf0ab6720d59e5e1a04
      buildset_refs:
      - branch: main
        change: '1807'
        change_message: "chore(deps): update dependency moby/moby to v28\n\n> \u2139\uFE0F
          **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [moby/moby](https://redirect.github.com/moby/moby) | major | `5:27.5.1`
          \u2192 `v28.5.2` |\n| [moby/moby](https://redirect.github.com/moby/moby)
          | major | `27.5.1` \u2192 `28.5.2` |\n\n---\n\n> [!WARNING]\n> Some dependencies
          could not be looked up. Check the [Dependency Dashboard](../issues/152)
          for more information.\n\n---\n\n### Release Notes\n\n<details>\n<summary>moby/moby
          (moby/moby)</summary>\n\n### [`v28.5.2`](https://redirect.github.com/moby/moby/releases/tag/v28.5.2)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.5.1...v28.5.2)\n\n####
          28.5.2\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.2)\n-
          [moby/moby, 28.5.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.2)\n\n>
          \\[!CAUTION]\n> This release contains fixes for three high-severity security
          vulnerabilities in runc:\n>\n> - [CVE-2025-31133](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2)\n>
          - [CVE-2025-52565](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r)\n>
          - [CVE-2025-52881](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm)\n>\n>
          All three vulnerabilities ultimately allow (through different methods) for
          full container breakouts by bypassing runc's restrictions for writing to
          arbitrary `/proc` files.\n\n##### Packaging updates\n\n- Update runc to
          [v1.3.3](https://redirect.github.com/opencontainers/runc/releases/tag/v1.3.3).
          [moby/moby#51394](https://redirect.github.com/moby/moby/pull/51394)\n\n#####
          Bug fixes and enhancements\n\n- dockerd-rootless.sh: if slirp4netns is not
          installed, try using pasta (passt). [moby/moby#51162](https://redirect.github.com/moby/moby/pull/51162)\n-
          Update Go runtime to [1.24.9](https://go.dev/doc/devel/release#go1.24.9).
          [moby/moby#51387](https://redirect.github.com/moby/moby/pull/51387), [docker/cli#6613](https://redirect.github.com/docker/cli/pull/6613)\n\n#####
          Deprecations\n\n- Go-SDK: cli/command/image/build: deprecate `DefaultDockerfileName`,
          `DetectArchiveReader`, `WriteTempDockerfile`, `ResolveAndValidateContextPath`.
          These utilities were only used internally and will be removed in the next
          release. [docker/cli#6610](https://redirect.github.com/docker/cli/pull/6610)\n-
          Go-SDK: cli/command/image/build: deprecate IsArchive utility. [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n-
          Go-SDK: opts: deprecate `ValidateMACAddress`. [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n-
          Go-SDK: opts: deprecate ListOpts.Delete(). [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n\n###
          [`v28.5.1`](https://redirect.github.com/moby/moby/releases/tag/v28.5.1)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.5.0...v28.5.1)\n\n####
          28.5.1\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.1)\n-
          [moby/moby, 28.5.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.1)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.5.1/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.5.1/docs/api/version-history.md).\n\n#####
          Bug fixes and enhancements\n\n- Update BuildKit to v0.25.1. [moby/moby#51137](https://redirect.github.com/moby/moby/pull/51137)\n-
          Update Go runtime to [1.24.8](https://go.dev/doc/devel/release#go1.24.8).
          [moby/moby#51133](https://redirect.github.com/moby/moby/pull/51133), [docker/cli#6541](https://redirect.github.com/docker/cli/pull/6541)\n\n#####
          Deprecations\n\n- api/types/image: InspectResponse: deprecate `Parent` and
          `DockerVersion` fields. [moby/moby#51105](https://redirect.github.com/moby/moby/pull/51105)\n-
          api/types/plugin: deprecate `Config.DockerVersion` field. [moby/moby#51110](https://redirect.github.com/moby/moby/pull/51110)\n\n###
          [`v28.5.0`](https://redirect.github.com/moby/moby/releases/tag/v28.5.0)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.4.0...v28.5.0)\n\n###
          28.5.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.0)\n-
          [moby/moby, 28.5.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.5.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.5.0/docs/api/version-history.md).\n\n#####
          Bug fixes and enhancements\n\n- Don't print warnings in `docker info` for
          broken symlinks in CLI-plugin directories. [docker/cli#6476](https://redirect.github.com/docker/cli/pull/6476)\n-
          Fix a panic during `stats` on empty event `Actor.ID`. [docker/cli#6471](https://redirect.github.com/docker/cli/pull/6471)\n\n#####
          Packaging updates\n\n- Remove support for legacy CBC cipher suites. [docker/cli#6474](https://redirect.github.com/docker/cli/pull/6474)\n-
          Update Buildkit to [v0.25.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.25.0).
          [moby/moby#51075](https://redirect.github.com/moby/moby/pull/51075)\n- Update
          Dockerfile syntax to [v1.19.0](https://redirect.github.com/moby/buildkit/releases/tag/dockerfile%2F1.19.0).
          [moby/moby#51075](https://redirect.github.com/moby/moby/pull/51075)\n\n#####
          Networking\n\n- Eliminated harmless warning about deletion of `endpoint_count`
          from the data store. [moby/moby#51064](https://redirect.github.com/moby/moby/pull/51064)\n-
          Fix a bug causing IPAM plugins to not be loaded on Windows. [moby/moby#51035](https://redirect.github.com/moby/moby/pull/51035)\n\n#####
          API\n\n- Deprecate support for kernel memory TCP accounting (`KernelMemoryTCP`).
          [moby/moby#51067](https://redirect.github.com/moby/moby/pull/51067)\n- Fix
          `GET containers/{name}/checkpoints` returning `null` instead of empty JSON
          array when there are no checkpoints. [moby/moby#51052](https://redirect.github.com/moby/moby/pull/51052)\n\n#####
          Go SDK\n\n- cli-plugins/plugin: Run: allow customizing the CLI. [docker/cli#6481](https://redirect.github.com/docker/cli/pull/6481)\n-
          cli/command: add `WithUserAgent` option. [docker/cli#6477](https://redirect.github.com/docker/cli/pull/6477)\n\n#####
          Deprecations\n\n- Go-SDK: cli/command: deprecate `DockerCli.Apply`. This
          method is no longer used and will be removed in the next release if there
          are no remaining uses. [docker/cli#6497](https://redirect.github.com/docker/cli/pull/6497)\n-
          Go-SDK: cli/command: deprecate `DockerCli.ContentTrustEnabled`. This method
          is no longer used and will be removed in the next release. [docker/cli#6495](https://redirect.github.com/docker/cli/pull/6495)\n-
          Go-SDK: cli/command: deprecate `DockerCli.DefaultVersion`. This method is
          no longer used and will be removed in the next release. [docker/cli#6491](https://redirect.github.com/docker/cli/pull/6491)\n-
          Go-SDK: cli/command: deprecate `ResolveDefaultContext` utility. [docker/cli#6529](https://redirect.github.com/docker/cli/pull/6529)\n-
          Go-SDK: cli/command: deprecate `WithContentTrustFromEnv`, `WithContentTrust`
          options. These options were used internally, and will be removed in the
          next release.. [docker/cli#6489](https://redirect.github.com/docker/cli/pull/6489)\n-
          Go-SDK: cli/manifest/store: deprecate `IsNotFound()`. [docker/cli#6514](https://redirect.github.com/docker/cli/pull/6514)\n-
          Go-SDK: templates: deprecate NewParse() function. [docker/cli#6469](https://redirect.github.com/docker/cli/pull/6469)\n\n###
          [`v28.4.0`](https://redirect.github.com/moby/moby/releases/tag/v28.4.0)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.3.3...v28.4.0)\n\n####
          28.4.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.4.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.4.0)\n-
          [moby/moby, 28.4.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.4.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.4.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.4.0/docs/api/version-history.md).\n\n#####
          New\n\n- Allow Docker CLI to set the `GODEBUG` environment variable when
          the key-value pair (`\"GODEBUG\":\"...\"`) exists inside the docker context
          metadata. [docker/cli#6399](https://redirect.github.com/docker/cli/pull/6399)\n\n#####
          Bug fixes and enhancements\n\n- Add shell completion for `docker pull` and
          `docker image pull`. [docker/cli#6420](https://redirect.github.com/docker/cli/pull/6420)\n-
          Fix a regression in v28.3.3 that could cause a panic on `docker push` if
          the client did not send an `X-Registry-Auth` header. [moby/moby#50738](https://redirect.github.com/moby/moby/pull/50738)\n-
          Windows: Potentially fix an issue with \"access denied\" error when pulling
          images. [moby/moby#50871](https://redirect.github.com/moby/moby/pull/50871)\n-
          containerd image store: Fix `docker history` failing with `snapshot X does
          not exist` when calling on a non-native image that was built locally. [moby/moby#50875](https://redirect.github.com/moby/moby/pull/50875)\n-
          containerd image store: Fix `docker image prune` to emit correct `untag`
          and `delete` events and list only the deleted images root digests instead
          of every blob. [moby/moby#50837](https://redirect.github.com/moby/moby/pull/50837)\n-
          Remove interactive login prompt from `docker push` and `docker pull` after
          a failure caused by missing authentication. [docker/cli#6256](https://redirect.github.com/docker/cli/pull/6256)\n\n#####
          Packaging updates\n\n- Update BuildKit to [v0.24.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.24.0).
          [moby#50888](https://redirect.github.com/moby/moby/pull/50888)\n- Update
          Go runtime to [1.24.7](https://go.dev/doc/devel/release#go1.24.6). [moby/moby#50889](https://redirect.github.com/moby/moby/pull/50889),
          [docker/cli#6422](https://redirect.github.com/docker/cli/pull/6422)\n- Update
          `runc` to [v1.3.0](https://redirect.github.com/opencontainers/runc/releases/tag/v1.3.0).
          [moby/moby#50699](https://redirect.github.com/moby/moby/pull/50699)\n- Update
          containerd (static binaries only) to [v1.7.28](https://redirect.github.com/containerd/containerd/releases/tag/v1.7.28).
          [moby/moby#50700](https://redirect.github.com/moby/moby/pull/50700)\n\n#####
          Networking\n\n- Fix an issue that could cause slow container restart on
          live-restore. [moby/moby#50829](https://redirect.github.com/moby/moby/pull/50829)\n\n#####
          API\n\n- Update deprecation message for `AuthConfig.Email` field. [moby/moby#50797](https://redirect.github.com/moby/moby/pull/50797)\n\n#####
          Go SDK\n\n- Deprecate profiles package which got migrated to [github.com/moby/profiles](https://redirect.github.com/moby/profiles).
          [moby/moby#50513](https://redirect.github.com/moby/moby/pull/50513)\n\n#####
          Deprecations\n\n- Deprecate special handling for quoted values for the `--tlscacert`,
          `--tlscert`, and `--tlskey` command-line flags. [docker/cli#6291](https://redirect.github.com/docker/cli/pull/6291)\n-
          Mark legacy links env vars (`DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS`)
          as deprecated in v28.4 and set for removal in v30.0. [docker/cli#6309](https://redirect.github.com/docker/cli/pull/6309)\n-
          Go-SDK: Deprecate field `NetworkSettingsBase.Bridge`, struct `NetworkSettingsBase`,
          all the fields of `DefaultNetworkSettings`, and struct `DefaultNetworkSettings`.
          [moby/moby#50839](https://redirect.github.com/moby/moby/pull/50839)\n- Go-SDK:
          api/types: `build.CacheDiskUsage`,  `container.DiskUsage`, `images.DiskUsage`
          and `volumes.DiskUsage` are now deprecated and will be removed in the next
          major release. [moby/moby#50768](https://redirect.github.com/moby/moby/pull/50768)\n-
          Go-SDK: cli-plugins/manager: deprecate `ReexecEnvvar`. [docker/cli#6411](https://redirect.github.com/docker/cli/pull/6411)\n-
          Go-SDK: cli-plugins/manager: deprecate annotation aliases (`CommandAnnotationPlugin`,
          `CommandAnnotationPluginVendor`, `CommandAnnotationPluginVersion`, `CommandAnnotationPluginInvalid`,
          `CommandAnnotationPluginCommandPath`) in favor of their equivalent in `cli-plugins/manager/metadata`.
          [docker/cli#6298](https://redirect.github.com/docker/cli/pull/6298)\n- Go-SDK:
          cli-plugins/manager: deprecate metadata aliases (`NamePrefix`, `MetadataSubcommandName`,
          `HookSubcommandName`, `Metadata`, `ReexecEnvvar`) in favor of their equivalent
          in `cli-plugins/manager/metadata`. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli-plugins/manager: remove `Candidate` interface, which was only
          for internal use. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli-plugins/manager: remove `NewPluginError` function, which was
          only for internal use. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli-plugins/manager: remove deprecated `ResourceAttributesEnvvar`
          const. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli/command/builder: deprecate `NewBuilderCommand` and `NewBakeStubCommand`.
          These functions will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/builder: deprecate `NewPruneCommand`. [docker/cli#6343](https://redirect.github.com/docker/cli/pull/6343)\n-
          Go-SDK: cli/command/checkpoint: deprecate `NewCheckpointCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/checkpoint: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/completion: deprecate `NoComplete`. [docker/cli#6405](https://redirect.github.com/docker/cli/pull/6405)\n-
          Go-SDK: cli/command/completion: remove deprecated `ValidArgsFn`. [docker/cli#6259](https://redirect.github.com/docker/cli/pull/6259)\n-
          Go-SDK: cli/command/config: deprecate `NewConfigCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/config: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/config: deprecate `RunConfigCreate`,  `CreateOptions`, `RunConfigInspect`,
          `InspectOptions`, `RunConfigList`, `ListOptions`, `RunConfigRemove`, and
          `RemoveOptions`. [docker/cli#6369](https://redirect.github.com/docker/cli/pull/6369)\n-
          Go-SDK: cli/command/container: deprecate `NewBuildCommand`, `NewPullCommand`,
          `NewPushCommand`, `NewImagesCommand`, `NewImageCommand`, `NewHistoryCommand`,
          `NewImportCommand`, `NewLoadCommand`, `NewRemoveCommand`, `NewSaveCommand`,
          `NewTagCommand`, `NewPruneCommand`. These functions will be removed in the
          next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/container: deprecate `NewDiffFormat`, `DiffFormatWrite`.
          These functions were only used internally and will be removed in the next
          release. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/container: deprecate `NewRunCommand`, `NewExecCommand`,
          `NewPsCommand`, `NewContainerCommand`, `NewAttachCommand`, `NewCommitCommand`,
          `NewCopyCommand`, `NewCreateCommand`, `NewDiffCommand`, `NewExportCommand`,
          `NewKillCommand`, `NewLogsCommand`, `NewPauseCommand`, `NewPortCommand`,
          `NewRenameCommand`, `NewRestartCommand`, `NewRmCommand`, `NewStartCommand`,
          `NewStatsCommand`, `NewStopCommand`, `NewTopCommand`, `NewUnpauseCommand`,
          `NewUpdateCommand`, `NewWaitCommand`, `NewPruneCommand`. These functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/context: deprecate `NewContextCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/context: deprecate `RunCreate` and `CreateOptions`.
          [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n- Go-SDK:
          cli/command/context: deprecate `RunExport` and `ExportOptions`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/context: deprecate `RunImport`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/context: deprecate `RunRemove` and `RemoveOptions`.
          [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n- Go-SDK:
          cli/command/context: deprecate `RunUpdate` and `UpdateOptions`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/context: deprecate `RunUse`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/image: deprecate `AuthResolver` utility. [docker/cli#6357](https://redirect.github.com/docker/cli/pull/6357)\n-
          Go-SDK: cli/command/image: deprecate `NewHistoryFormat`, `HistoryWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341), [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/manifest: deprecate `NewManifestCommand`. This functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/network: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/network: deprecate `NewNetworkCommand`. These functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/node: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/node: deprecate `NewNodeCommand`. This functions will be removed
          in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/plugin: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/plugin: deprecate `NewPluginCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/registry: deprecate `NewLoginCommand`, `NewLogoutCommand`,
          `NewSearchCommand`. These functions will be removed in the next release.
          [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n- Go-SDK:
          cli/command/registry: deprecate `NewSearchFormat`, `SearchWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/registry: deprecate `OauthLoginEscapeHatchEnvVar` const.
          [docker/cli#6413](https://redirect.github.com/docker/cli/pull/6413)\n- Go-SDK:
          cli/command/secret: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/secret: deprecate `NewSecretCommand`. This functions will be
          removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/service: deprecate `NewFormat`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/service: deprecate `NewServiceCommand`. This function will be
          removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/stack: deprecate `NewStackCommand`. This function will
          be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/stack: deprecate `RunList`, `RunServices`. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: cli/command/swarm: deprecate `NewSwarmCommand`. This function will
          be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/system: deprecate `NewVersionCommand`, `NewInfoCommand`,
          `NewSystemCommand`, `NewEventsCommand`, `NewInspectCommand`. These functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/task: deprecate `NewTaskFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/trust: deprecate `NewTrustCommand`. This function will
          be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/trust: deprecate `SignedTagInfo`, `SignerInfo`, `NewTrustTagFormat`,
          `NewSignerInfoFormat`, `TagWrite`, `SignerInfoWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/volume: deprecate `NewVolumeCommand`, `NewPruneCommand`.
          These functions will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command: remove `AddTrustSigningFlags`,  `AddTrustVerificationFlags`,
          and `AddPlatformFlag` utilities, which were only used internally. [docker/cli#6311](https://redirect.github.com/docker/cli/pull/6311)\n-
          Go-SDK: cli/command: remove deprecated `ConfigureAuth` utility. [docker/cli#6257](https://redirect.github.com/docker/cli/pull/6257)\n-
          Go-SDK: cli/command: remove deprecated `CopyToFile` utility. [docker/cli#6257](https://redirect.github.com/docker/cli/pull/6257)\n-
          Go-SDK: cli/config/types: update deprecation message for `AuthConfig.Email`
          field. [docker/cli#6392](https://redirect.github.com/docker/cli/pull/6392)\n-
          Go-SDK: cli: deprecate `VisitAll`, `DisableFlagsInUseLine` utilities. These
          utilities were only used internally and will be removed in the next release.
          [docker/cli#6276](https://redirect.github.com/docker/cli/pull/6276)\n- Go-SDK:
          cli: remove `HasCompletionArg` utility. This utility was only used internally.
          [docker/cli#6276](https://redirect.github.com/docker/cli/pull/6276)\n- Go-SDK:
          deprecate `cli/command.RegistryAuthenticationPrivilegedFunc`. [docker/cli#6256](https://redirect.github.com/docker/cli/pull/6256)\n-
          Go-SDK: deprecate cli/command/stack/formatter. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: deprecate cli/command/stack/loader. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: deprecate cli/command/stack/options. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: deprecate cli/command/stack/swarm. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: opts: deprecate `NewNamedListOptsRef`, `NewNamedMapOpts`, `NamedListOpts`,
          `NamedMapOpts`, and `NamedOption`. These types and functions are no longer
          used and will be removed in the next release. [docker/cli#6292](https://redirect.github.com/docker/cli/pull/6292)\n-
          Go-SDK: opts: deprecate `ParseEnvFile` in favour of `kvfile.Parse`. [docker/cli#6381](https://redirect.github.com/docker/cli/pull/6381)\n-
          Go-SDK: opts: deprecate `QuotedString`. This utility is no longer used,
          and will be removed in the next release. [docker/cli#6275](https://redirect.github.com/docker/cli/pull/6275)\n-
          Go-SDK: opts: deprecate `ValidateHost` utility. This function is no longer
          used, and will be removed in the next release. [docker/cli#6280](https://redirect.github.com/docker/cli/pull/6280)\n-
          Go-SDK: pkg/jsonmessage: deprecate the `JSONMessage.From`, `JSONMessage.Time`,
          and `JSONMessage.TimeNano` fields, as they are no longer returned by the
          API for progress messages. Use the `events.Message` type instead to unmarshal
          the `/events` response. [moby/moby#50762](https://redirect.github.com/moby/moby/pull/50762)\n-
          Go-SDK: the cli/registry/client package is deprecated and will be removed
          in the next release. [docker/cli#6313](https://redirect.github.com/docker/cli/pull/6313)\n\n###
          [`v28.3.3`](https://redirect.github.com/moby/moby/releases/tag/v28.3.3)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.3.2...v28.3.3)\n\n####
          28.3.3\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.3 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.3)\n-
          [moby/moby, 28.3.3 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.3)\n\n#####
          Security\n\nThis release fixes an issue where, after a firewalld reload,
          published container ports could be accessed directly from the local network,
          even when they were intended to be accessible only via a loopback address.
          [CVE-2025-54388](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54388)
          /  [GHSA-x4rx-4gw3-53p4](https://redirect.github.com/moby/moby/security/advisories/GHSA-x4rx-4gw3-53p4)
          / [moby/moby#50506](https://redirect.github.com/moby/moby/pull/50506).\n\n#####
          Packaging updates\n\n- Update Buildx to [v0.26.1](https://redirect.github.com/docker/buildx/releases/tag/v0.26.1).
          [docker/docker-ce-packaging#1230](https://redirect.github.com/docker/docker-ce-packaging/pull/1230)\n-
          Update Compose to [v2.39.1](https://redirect.github.com/docker/compose/releases/tag/v2.39.1).
          [docker/docker-ce-packaging#1234](https://redirect.github.com/docker/docker-ce-packaging/pull/1234)\n-
          Update Docker Model CLI plugin to [v0.1.36](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.36).
          [docker/docker-ce-packaging#1233](https://redirect.github.com/docker/docker-ce-packaging/pull/1233)\n\n#####
          Go SDK\n\n- cli/command/formatter: add `TrunateID()` utility as alternative
          for `github.com/docker/docker/pkg/stringid.TrunateID()`. [docker/cli#6180](https://redirect.github.com/docker/cli/pull/6180)\n\n###
          [`v28.3.2`](https://redirect.github.com/moby/moby/releases/tag/v28.3.2):
          28.3.2\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.3.1...v28.3.2)\n\n####
          28.3.2\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.2)\n-
          [moby/moby, 28.3.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.2)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.2/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.2/docs/api/version-history.md).\n\n#####
          Bug fixes and enhancements\n\n- Fix `--use-api-socket` not working correctly
          when targeting a remote daemon. [docker/cli#6157](https://redirect.github.com/docker/cli/pull/6157)\n-
          Fix stray \"otel error\" logs being printed if debug logging is enabled.
          [docker/cli#6160](https://redirect.github.com/docker/cli/pull/6160)\n- Quote
          SSH arguments when connecting to a remote daemon over an SSH connection
          to avoid unexpected expansion. [docker/cli#6147](https://redirect.github.com/docker/cli/pull/6147)\n-
          Warn when `DOCKER_AUTH_CONFIG` is set during `docker login` and `docker
          logout`. [docker/cli#6163](https://redirect.github.com/docker/cli/pull/6163)\n\n#####
          Packaging updates\n\n- Update Compose to [v2.38.2](https://redirect.github.com/docker/compose/releases/tag/v2.38.2).
          [docker/docker-ce-packaging#1225](https://redirect.github.com/docker/docker-ce-packaging/pull/1225)\n-
          Update Docker Model CLI plugin to [v0.1.33](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.33).
          [docker/docker-ce-packaging#1227](https://redirect.github.com/docker/docker-ce-packaging/pull/1227)\n-
          Update Go runtime to 1.24.5. [moby/moby#50354](https://redirect.github.com/moby/moby/pull/50354)\n\n###
          [`v28.3.1`](https://redirect.github.com/moby/moby/releases/tag/v28.3.1):
          28.3.1\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.3.0...v28.3.1)\n\n####
          28.3.1\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.1)\n-
          [moby/moby, 28.3.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.1)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.1/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.1/docs/api/version-history.md).\n\n#####
          Packaging updates\n\n- Update BuildKit to [v0.23.2](https://redirect.github.com/moby/buildkit/releases/tag/v0.23.2).
          [moby/moby#50309](https://redirect.github.com/moby/moby/pull/50309)\n- Update
          Compose to [v2.38.1](https://redirect.github.com/docker/compose/releases/tag/v2.38.1).
          [docker/docker-ce-packaging#1221](https://redirect.github.com/docker/docker-ce-packaging/pull/1221)\n-
          Update Model to v0.1.32 which adds the support for the new top-level `models:`
          key in Docker Compose. [docker/docker-ce-packaging#1222](https://redirect.github.com/docker/docker-ce-packaging/pull/1222)\n\n###
          [`v28.3.0`](https://redirect.github.com/moby/moby/releases/tag/v28.3.0):
          28.3.0\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.2.2...v28.3.0)\n\n####
          28.3.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.0)\n-
          [moby/moby, 28.3.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.0/docs/api/version-history.md).\n\n#####
          New\n\n- Add support for AMD GPUs in `docker run --gpus`. [moby/moby#49952](https://redirect.github.com/moby/moby/pull/49952)\n-
          Use `DOCKER_AUTH_CONFIG` as a credential store. [docker/cli#6008](https://redirect.github.com/docker/cli/pull/6008)\n\n#####
          Bug fixes and enhancements\n\n- Ensure that the state of the container in
          the daemon database (used by [/containers/json](https://docs.docker.com/reference/api/engine/version/v1.49/#tag/Container/operation/ContainerList)
          API) is up to date when the container is stopped using the [/containers/{id}/stop](https://docs.docker.com/reference/api/engine/version/v1.49/#tag/Container/operation/ContainerStop)
          API (before response of API). [moby/moby#50136](https://redirect.github.com/moby/moby/pull/50136)\n-
          Fix `docker image inspect inspect` omitting empty fields. [moby/moby#50135](https://redirect.github.com/moby/moby/pull/50135)\n-
          Fix `docker images --tree` not marking images as in-use when the containerd
          image store is disabled. [docker/cli#6140](https://redirect.github.com/docker/cli/pull/6140)\n-
          Fix `docker pull/push` hang in non-interactive when authentication is required
          caused by prompting for login credentials. [docker/cli#6141](https://redirect.github.com/docker/cli/pull/6141)\n-
          Fix a potential resource leak when a node leaves a Swarm. [moby/moby#50115](https://redirect.github.com/moby/moby/pull/50115)\n-
          Fix a regression where a login prompt on `docker pull` would show Docker
          Hub-specific hints when logging in on other registries. [docker/cli#6135](https://redirect.github.com/docker/cli/pull/6135)\n-
          Fix an issue where all new tasks in the Swarm could get stuck in the PENDING
          state forever after scaling up a service with placement preferences. [moby/moby#50211](https://redirect.github.com/moby/moby/pull/50211)\n-
          Remove an undocumented, hidden, top-level `docker remove` command that was
          accidentally introduced in Docker 23.0. [docker/cli#6144](https://redirect.github.com/docker/cli/pull/6144)\n-
          Validate registry-mirrors configuration as part of `dockerd --validate`
          and improve error messages for invalid mirrors. [moby/moby#50240](https://redirect.github.com/moby/moby/pull/50240)\n-
          `dockerd-rootless-setuptool.sh`: Fix the script from silently returning
          with no error message when subuid/subgid system requirements are not satisfied.
          [moby/moby#50059](https://redirect.github.com/moby/moby/pull/50059)\n- containerd
          image store: Fix `docker push` not creating a tag on the remote repository.
          [moby/moby#50199](https://redirect.github.com/moby/moby/pull/50199)\n- containerd
          image store: Improve handling of errors returned by the token server during
          `docker pull/push`. [moby/moby#50176](https://redirect.github.com/moby/moby/pull/50176)\n\n#####
          Packaging updates\n\n- Allow customizing containerd service name for OpenRC.
          [moby/moby#50156](https://redirect.github.com/moby/moby/pull/50156)\n- Update
          BuildKit to [v0.23.1](https://redirect.github.com/moby/buildkit/releases/tag/v0.23.1).
          [moby/moby#50243](https://redirect.github.com/moby/moby/pull/50243)\n- Update
          Buildx to [v0.25.0](https://redirect.github.com/docker/buildx/releases/tag/v0.25.0).
          [docker/docker-ce-packaging#1217](https://redirect.github.com/docker/docker-ce-packaging/pull/1217)\n-
          Update Compose to [v2.37.2](https://redirect.github.com/docker/compose/releases/tag/v2.37.2).
          [docker/docker-ce-packaging#1219](https://redirect.github.com/docker/docker-ce-packaging/pull/1219)\n-
          Update Docker Model CLI plugin to [v0.1.30](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.30).
          [docker/docker-ce-packaging#1218](https://redirect.github.com/docker/docker-ce-packaging/pull/1218)\n-
          Update Go runtime to [1.24.4](https://go.dev/doc/devel/release#go1.24.4).
          [docker/docker-ce-packaging#1213](https://redirect.github.com/docker/docker-ce-packaging/pull/1213),
          [moby/moby#50153](https://redirect.github.com/moby/moby/pull/50153), [docker/cli#6124](https://redirect.github.com/docker/cli/pull/6124)\n\n#####
          Networking\n\n- Revert Swarm related changes added in 28.2.x builds, due
          to a regression reported in [#&#8203;50129](https://redirect.github.com/moby/moby/issues/50129).
          [moby/moby#50169](https://redirect.github.com/moby/moby/pull/50169)\n  -
          Revert: Fix an issue where `docker network inspect --verbose` could sometimes
          crash the daemon ([#&#8203;49937](https://redirect.github.com/moby/moby/pull/49937)).\n
          \ - Revert: Fix an issue where the load-balancer IP address for an overlay
          network would not be released in certain cases if the Swarm was lacking
          an ingress network ([#&#8203;49948](https://redirect.github.com/moby/moby/pull/49948)).\n
          \ - Revert: Improve the reliability of NetworkDB in busy clusters and lossy
          networks ([#&#8203;49932](https://redirect.github.com/moby/moby/pull/49932)).\n
          \ - Revert: Improvements to the reliability and convergence speed of NetworkDB
          ([#&#8203;49939](https://redirect.github.com/moby/moby/pull/49939)).\n-
          Fix an issue that could cause container startup to fail, or lead to failed
          UDP port mappings, when some container ports are mapped to `0.0.0.0` and
          others are mapped to specific host addresses. [moby/moby#50054](https://redirect.github.com/moby/moby/pull/50054)\n-
          The `network inspect` response for an overlay network now reports that `EnableIPv4`
          is true. [moby/moby#50147](https://redirect.github.com/moby/moby/pull/50147)\n-
          Windows: Improve daemon startup time in cases where the host has networks
          of type `\"Mirrored\"`. [moby/moby#50155](https://redirect.github.com/moby/moby/pull/50155)\n-
          Windows: Make sure `docker system prune` and `docker network prune` only
          remove networks created by Docker. [moby/moby#50154](https://redirect.github.com/moby/moby/pull/50154)\n\n#####
          API\n\n- Update API version to 1.51. [moby/moby#50145](https://redirect.github.com/moby/moby/pull/50145)\n-
          `GET /images/json` now sets the value of the `Containers` field for all
          images to the count of containers using the image. [moby/moby#50146](https://redirect.github.com/moby/moby/pull/50146)\n\n#####
          Deprecations\n\n- Empty/nil image config fields in the `GET /images/{name}/json`
          response are now deprecated and will be removed in v29.0. [docker/cli#6129](https://redirect.github.com/docker/cli/pull/6129)\n-
          api/types/container: deprecate `ExecOptions.Detach`. This field is not used,
          and will be removed in a future release. [moby/moby#50219](https://redirect.github.com/moby/moby/pull/50219)\n-
          pkg/idtools: deprecate `IdentityMapping` and `Identity.Chown`. [moby/moby#50210](https://redirect.github.com/moby/moby/pull/50210)\n\n###
          [`v28.2.2`](https://redirect.github.com/moby/moby/releases/tag/v28.2.2):
          28.2.2\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.2.1...v28.2.2)\n\n####
          28.2.2\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.2.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.2.2)\n-
          [moby/moby, 28.2.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.2.2)\n\n#####
          Bug fixes and enhancements\n\n- containerd image store: Fix a regression
          causing `docker build --push` to fail. This reverts [the fix](https://redirect.github.com/moby/moby/pull/49702)
          for `docker build` not persisting overridden images as dangling. [moby/moby#50105](https://redirect.github.com/moby/moby/pull/50105)\n\n#####
          Networking\n\n- When creating the iptables `DOCKER-USER` chain, do not add
          an explicit `RETURN` rule, allowing users to append as well as insert their
          own rules. Existing rules are not removed on upgrade, but it won't be replaced
          after a reboot. [moby/moby#50098](https://redirect.github.com/moby/moby/pull/50098)\n\n###
          [`v28.2.1`](https://redirect.github.com/moby/moby/releases/tag/v28.2.1):
          28.2.1\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.2.0...v28.2.1)\n\n####
          28.2.1\n\n#### Packaging updates\n\n- Fix packaging regression in [v28.2.0](https://redirect.github.com/moby/moby/releases/tag/v28.2.0)
          which broke creating the `docker` group/user on fresh installations. [docker-ce-packaging#1209](https://redirect.github.com/docker/docker-ce-packaging/issues/1209)\n\n###
          [`v28.2.0`](https://redirect.github.com/moby/moby/releases/tag/v28.2.0):
          28.2.0\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.1.1...v28.2.0)\n\n####
          28.2.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.2.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.2.0)\n-
          [moby/moby, 28.2.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.2.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.2.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.2.0/docs/api/version-history.md).\n\n>
          \\[!NOTE]\n> RHEL packages are currently not available and will be released
          later.\n\n##### New\n\n- Add `{{.Platform}}` as formatting option for `docker
          ps` to show the platform of the image the container is running. [docker/cli#6042](https://redirect.github.com/docker/cli/pull/6042)\n-
          Add support for relative parent paths (`../`) on bind mount sources when
          using `docker run/create` with `-v/--volume` or `--mount type=bind` options.
          [docker/cli#4966](https://redirect.github.com/docker/cli/pull/4966)\n- CDI
          is now enabled by default. [moby/moby#49963](https://redirect.github.com/moby/moby/pull/49963)\n-
          Show discovered CDI devices in `docker info`. [docker/cli#6078](https://redirect.github.com/docker/cli/pull/6078)\n-
          `docker image rm`: add `--platform` option to remove a variant from multi-platform
          images. [docker/cli#6109](https://redirect.github.com/docker/cli/pull/6109)\n-
          containerd image store: Initial BuildKit support for building Windows container
          images on Windows (requires an opt-in with `DOCKER_BUILDKIT=1`). [moby/moby#49740](https://redirect.github.com/moby/moby/pull/49740)\n\n#####
          Bug fixes and enhancements\n\n- Add a new log option for fluentd log driver
          (`fluentd-write-timeout`), which enables specifying write timeouts for fluentd
          connections. [moby/moby#49911](https://redirect.github.com/moby/moby/pull/49911)\n-
          Add support for `DOCKER_AUTH_CONFIG` for the experimental `--use-api-socket`
          option. [docker/cli#6019](https://redirect.github.com/docker/cli/pull/6019)\n-
          Fix `docker exec` waiting for 10 seconds if a non-existing user or group
          was specified. [moby/moby#49868](https://redirect.github.com/moby/moby/pull/49868)\n-
          Fix `docker swarm init` ignoring `cacert` option of `--external-ca`. [docker/cli#5995](https://redirect.github.com/docker/cli/pull/5995)\n-
          Fix an issue where the CLI would not correctly save the configuration file
          (`~/.docker/config.json`) if it was a relative symbolic link. [docker/cli#5282](https://redirect.github.com/docker/cli/pull/5282)\n-
          Fix containers with `--restart always` policy using CDI devices failing
          to start on daemon restart. [moby/moby#49990](https://redirect.github.com/moby/moby/pull/49990)\n-
          Fix shell-completion to only complete some flags once, even though they
          can be set multiple times. [docker/cli#6030](https://redirect.github.com/docker/cli/pull/6030)\n-
          Fix the `plugin does not implement PluginAddr interface` error for Swarm
          CSI drivers. [moby/moby#49961](https://redirect.github.com/moby/moby/pull/49961)\n-
          Improve `docker login` error messages for invalid options. [docker/cli#6036](https://redirect.github.com/docker/cli/pull/6036)\n-
          Make sure the terminal state is restored if the CLI is forcefully terminated.
          [docker/cli#6058](https://redirect.github.com/docker/cli/pull/6058)\n- Update
          the default seccomp profile to match the libseccomp v2.6.0. The new syscalls
          are: `listmount`, `statmount`, `lsm_get_self_attr`, `lsm_list_modules`,
          `lsm_set_self_attr`, `mseal`, `uretprobe`, `riscv_hwprobe`, `getxattrat`,
          `listxattrat`, `removexattrat`, and `setxattrat`. This prevents containers
          from receiving EPERM errors when using them. [moby/moby#50077](https://redirect.github.com/moby/moby/pull/50077)\n-
          `docker inspect`: add shell completion, improve flag-description for `--type`
          and improve validation. [docker/cli#6052](https://redirect.github.com/docker/cli/pull/6052)\n-
          containerd image store: Enable BuildKit garbage collector by default. [moby/moby#49899](https://redirect.github.com/moby/moby/pull/49899)\n-
          containerd image store: Fix `docker build` not persisting overridden images
          as dangling. [moby/moby#49702](https://redirect.github.com/moby/moby/pull/49702)\n-
          containerd image store: Fix `docker system df` reporting a negative reclaimable
          space amount. [moby/moby#49707](https://redirect.github.com/moby/moby/pull/49707)\n-
          containerd image store: Fix duplicate `PUT` requests when pushing a multi-platform
          image. [moby/moby#49949](https://redirect.github.com/moby/moby/pull/49949)\n\n#####
          Packaging updates\n\n- Drop Ubuntu 20.04 \"Focal\" packages as it reached
          end of life. [docker/docker-ce-packaging#1200](https://redirect.github.com/docker/docker-ce-packaging/pull/1200)\n-
          Fix install location for RPM-based `docker-ce` man-pages. [docker/docker-ce-packaging#1203](https://redirect.github.com/docker/docker-ce-packaging/pull/1203)\n-
          Update BuildKit to [v0.22.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.22.0).
          [moby/moby#50046](https://redirect.github.com/moby/moby/pull/50046)\n- Update
          Buildx to [v0.24.0](https://redirect.github.com/docker/buildx/releases/tag/v0.24.0).
          [docker/docker-ce-packaging#1205](https://redirect.github.com/docker/docker-ce-packaging/pull/1205)\n-
          Update Compose to [v2.36.2](https://redirect.github.com/docker/compose/releases/tag/v2.36.2).
          [docker/docker-ce-packaging#1208](https://redirect.github.com/docker/docker-ce-packaging/pull/1208)\n-
          Update Go runtime to [1.24.3](https://go.dev/doc/devel/release#go1.24.3).
          [docker/docker-ce-packaging#1192](https://redirect.github.com/docker/docker-ce-packaging/pull/1192),
          [docker/cli#6060](https://redirect.github.com/docker/cli/pull/6060), [moby/moby#49174](https://redirect.github.com/moby/moby/pull/49174)\n\n#####
          Networking\n\n- Add bridge network option `\"com.docker.network.bridge.trusted_host_interfaces\"`,
          accepting a colon-separated list of interface names. These interfaces have
          direct access to published ports on container IP addresses. [moby/moby#49832](https://redirect.github.com/moby/moby/pull/49832)\n-
          Add daemon option `\"allow-direct-routing\"` to disable filtering of packets
          from outside the host addressed directly to containers. [moby/moby#49832](https://redirect.github.com/moby/moby/pull/49832)\n-
          Do not display network options `com.docker.network.enable_ipv4` or `com.docker.network.enable_ipv6`
          in inspect output if they have been overridden by `EnableIPv4` or `EnableIPv6`
          in the network create request. [moby/moby#49866](https://redirect.github.com/moby/moby/pull/49866)\n-
          Fix an issue that could cause network deletion to fail after a daemon restart,
          with error \"has active endpoints\" listing empty endpoint names. [moby/moby#49901](https://redirect.github.com/moby/moby/pull/49901)\n-
          Fix an issue where `docker network inspect --verbose` could sometimes crash
          the daemon. [moby/moby#49937](https://redirect.github.com/moby/moby/pull/49937)\n-
          Fix an issue where the load-balancer IP address for an overlay network would
          not be released in certain cases if the Swarm was lacking an ingress network.
          [moby/moby#49948](https://redirect.github.com/moby/moby/pull/49948)\n- Improve
          the reliability of NetworkDB in busy clusters and lossy networks. [moby/moby#49932](https://redirect.github.com/moby/moby/pull/49932)\n-
          Improvements to the reliability and convergence speed of NetworkDB. [moby/moby#49939](https://redirect.github.com/moby/moby/pull/49939)\n\n#####
          API\n\n- Update API version to `1.50`.\n- `DELETE /images/{name}` now supports
          a `platforms` query parameter. It accepts an array of JSON-encoded OCI Platform
          objects, allowing for selecting a specific platforms to delete content for.
          [moby/moby#49982](https://redirect.github.com/moby/moby/pull/49982)\n- `GET
          /info` now includes a `DiscoveredDevices` field. This is an array of `DeviceInfo`
          objects, each providing details about a device discovered by a device driver.
          [moby/moby#49980](https://redirect.github.com/moby/moby/pull/49980)\n\n#####
          Go SDK\n\n- `api/types/container`: add `ContainerState` and constants for
          container state. [moby/moby#49965](https://redirect.github.com/moby/moby/pull/49965)\n-
          `api/types/container`: change `Summary.State` to a `ContainerState`. [moby/moby#49991](https://redirect.github.com/moby/moby/pull/49991)\n-
          `api/types/container`: define `HealthStatus` type for health-status constants.
          [moby/moby#49876](https://redirect.github.com/moby/moby/pull/49876)\n- `api/types`:
          deprecate `BuildResult`, `ImageBuildOptions`, `ImageBuildOutput`, `ImageBuildResponse`,
          `BuilderVersion`, `BuilderV1`, and `BuilderBuildKi` which were moved to
          `api/types/build`. [moby/moby#50025](https://redirect.github.com/moby/moby/pull/50025)\n\n#####
          Deprecations\n\n- API: Deprecated: `GET /images/{name}/json` no longer returns
          the following fields: `Config`, `Hostname`, `Domainname`, `AttachStdin`,
          `AttachStdout`, `AttachStderr`, `Tty`, `OpenStdin`, `StdinOnce`, `Image`,
          `NetworkDisabled` (already omitted unless set), `MacAddress` (already omitted
          unless set), `StopTimeout` (already omitted unless set). These additional
          fields were included in the response due to an implementation detail but
          not part of the image's Configuration, were marked deprecated in API v1.46,
          and are now omitted. [moby/moby#48457](https://redirect.github.com/moby/moby/pull/48457)\n-
          Go-SDK: Deprecate builder/remotecontext.Rel(). This function was needed
          on older versions of Go, but can now be replaced by `filepath.Rel()`. [moby/moby#49843](https://redirect.github.com/moby/moby/pull/49843)\n-
          Go-SDK: api/types: deprecate `BuildCachePruneOptions` in favor of `api/types/builder.CachePruneOptions`.
          [moby/moby#50015](https://redirect.github.com/moby/moby/pull/50015)\n- Go-SDK:
          api/types: deprecate `BuildCachePruneReport` in favor of `api/types/builder.CachePruneReport`.
          [moby/moby#50015](https://redirect.github.com/moby/moby/pull/50015)\n- Go-SDK:
          api/types: deprecate `NodeListOptions`, `NodeRemoveOptions`, `ServiceCreateOptions`,
          `ServiceUpdateOptions`, `RegistryAuthFromSpec`, `RegistryAuthFromPreviousSpec`,
          `ServiceListOptions`, `ServiceInspectOptions`, and `SwarmUnlockKeyResponse`
          which were moved to `api/types/swarm`. [moby/moby#50027](https://redirect.github.com/moby/moby/pull/50027)\n-
          Go-SDK: api/types: deprecate `SecretCreateResponse`, `SecretListOptions`,
          `ConfigCreateResponse`, `ConfigListOptions` which were moved to api/types/swarm.
          [moby/moby#50024](https://redirect.github.com/moby/moby/pull/50024)\n- Go-SDK:
          client: deprecate `IsErrNotFound`. [moby/moby#50012](https://redirect.github.com/moby/moby/pull/50012)\n-
          Go-SDK: container: deprecate `IsValidHealthString` in favor of `api/types/container.ValidateHealthStatus`.
          [moby/moby#49893](https://redirect.github.com/moby/moby/pull/49893)\n- Go-SDK:
          container: deprecate `StateStatus`, `WaitCondition`, and the related  `WaitConditionNotRunning`,
          `WaitConditionNextExit`, and `WaitConditionRemoved` consts in favor of their
          equivalents in `api/types/container`. [moby/moby#49874](https://redirect.github.com/moby/moby/pull/49874)\n-
          Go-SDK: opts: deprecate `ListOpts.GetAll` in favor of `ListOpts.GetSlice`.
          [docker/cli#6032](https://redirect.github.com/docker/cli/pull/6032)\n- Remove
          deprecated `IsAutomated` formatting placeholder from `docker search`. [docker/cli#6091](https://redirect.github.com/docker/cli/pull/6091)\n-
          Remove fallback for pulling images from non-OCI-compliant `docker.pkg.github.com`
          registry. [moby/moby#50094](https://redirect.github.com/moby/moby/pull/50094)\n-
          Remove support for pulling legacy v2, schema 1 images and remove `DOCKER_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGE`
          environment-variable. [moby/moby#50036](https://redirect.github.com/moby/moby/pull/50036),
          [moby/moby#42300](https://redirect.github.com/moby/moby/pull/42300)\n- The
          `BridgeNfIptables` and `BridgeNfIp6tables` fields in the `GET /info` response
          were deprecated in API v1.48, and are now omitted in API v1.50. [moby/moby#49904](https://redirect.github.com/moby/moby/pull/49904)\n-
          errdefs: Deprecate `errdefs.FromStatusCode`. Use containerd's `errhttp.ToNative`
          instead. [moby/moby#50030](https://redirect.github.com/moby/moby/pull/50030)\n\n###
          [`v28.1.1`](https://redirect.github.com/moby/moby/releases/tag/v28.1.1)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.1.0...v28.1.1)\n\n####
          28.1.1\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.1.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.1.1)\n-
          [moby/moby, 28.1.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.1.1)\n\n#####
          Bug fixes and enhancements\n\n- Fix `dockerd-rootless-setuptool.sh` incorrectly
          reporting missing `iptables`. [moby/moby#49833](https://redirect.github.com/moby/moby/pull/49833)\n-
          containerd image store: Fix a potential daemon crash when using `docker
          load` with archives containing zero-size tar headers. [moby/moby#49837](https://redirect.github.com/moby/moby/pull/49837)\n\n#####
          Packaging updates\n\n- Update Buildx to [v0.23.0](https://redirect.github.com/docker/buildx/releases/tag/v0.23.0).
          [docker/docker-ce-packaging#1185](https://redirect.github.com/docker/docker-ce-packaging/pull/1185)\n-
          Update Compose to [v2.35.1](https://redirect.github.com/docker/compose/releases/tag/v2.35.1).
          [docker/docker-ce-packaging#1188](https://redirect.github.com/docker/docker-ce-packaging/pull/1188)\n\n#####
          Networking\n\n- Add a warning to a container's `/etc/resolv.conf` when no
          upstream DNS servers were found. [moby/moby#49827](https://redirect.github.com/moby/moby/pull/49827)\n\n###
          [`v28.1.0`](https://redirect.github.com/moby/moby/releases/tag/v28.1.0)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.0.4...v28.1.0)\n\n####
          28.1.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.1.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.1.0)\n-
          [moby/moby, 28.1.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.1.0)\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.1.0/docs/api/version-history.md).\n\n#####
          New\n\n- Add `docker bake` sub-command as alias for `docker buildx bake`.
          [docker/cli#5947](https://redirect.github.com/docker/cli/pull/5947)\n- Experimental:
          add a new `--use-api-socket` flag on `docker run` and `docker create` to
          enable access to Docker socket from inside a container and to share credentials
          from the host with the container. [docker/cli#5858](https://redirect.github.com/docker/cli/pull/5858)\n-
          `docker image inspect` now supports a `--platform` flag to inspect a specific
          platform of a multi-platform image. [docker/cli#5934](https://redirect.github.com/docker/cli/pull/5934)\n\n#####
          Bug fixes and enhancements\n\n- Add CLI shell-completion for context names.
          [docker/cli#6016](https://redirect.github.com/docker/cli/pull/6016)\n- Fix
          `docker images --tree` not including non-container images content size in
          the total image content size. [docker/cli#6000](https://redirect.github.com/docker/cli/pull/6000)\n-
          Fix `docker load` not preserving replaced images. [moby/moby#49650](https://redirect.github.com/moby/moby/pull/49650)\n-
          Fix `docker login` hints when logging in to a custom registry. [docker/cli#6015](https://redirect.github.com/docker/cli/pull/6015)\n-
          Fix `docker stats` not working properly on machines with high CPU core count.
          [moby/moby#49734](https://redirect.github.com/moby/moby/pull/49734)\n- Fix
          a regression causing `docker pull/push` to fail when interacting with a
          private repository. [docker/cli#5964](https://redirect.github.com/docker/cli/pull/5964)\n-
          Fix an issue preventing rootless Docker setup on a host with no `ip_tables`
          kernel module. [moby/moby#49727](https://redirect.github.com/moby/moby/pull/49727)\n-
          Fix an issue that could lead to unwanted iptables rules being restored and
          never deleted following a firewalld reload. [moby/moby#49728](https://redirect.github.com/moby/moby/pull/49728)\n-
          Improve CLI completion of `docker service scale`. [docker/cli#5968](https://redirect.github.com/docker/cli/pull/5968)\n-
          `docker images --tree` now hides both untagged and dangling images by default.
          [docker/cli#5924](https://redirect.github.com/docker/cli/pull/5924)\n- `docker
          system info` will provide an exit code if a connection cannot be established
          to the Docker daemon. [docker/cli#5918](https://redirect.github.com/docker/cli/pull/5918)\n-
          containerd image store: Fix `image tag` event not being emitted when building
          with BuildKit. [moby/moby#49678](https://redirect.github.com/moby/moby/pull/49678)\n-
          containerd image store: Improve `docker push/pull` handling of remote registry
          errors. [moby/moby#49770](https://redirect.github.com/moby/moby/pull/49770)\n-
          containerd image store: Show pull progress for non-layer image blobs. [moby/moby#49746](https://redirect.github.com/moby/moby/pull/49746)\n\n#####
          Packaging updates\n\n- Add Debian \"Trixie\" packages. [docker/docker-ce-packaging#1181](https://redirect.github.com/docker/docker-ce-packaging/pull/1181)\n-
          Add Fedora 42 packages. [docker/containerd-packaging#418](https://redirect.github.com/docker/containerd-packaging/pull/418),
          [docker/docker-ce-packaging#1169](https://redirect.github.com/docker/docker-ce-packaging/pull/1169)\n-
          Add Ubuntu 25.04 \"Plucky Puffin\" packages. [docker/containerd-packaging#419](https://redirect.github.com/docker/containerd-packaging/pull/419),
          [docker/docker-ce-packaging#1177](https://redirect.github.com/docker/docker-ce-packaging/pull/1177)\n-
          Update BuildKit to [v0.21.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.21.0).
          [moby/moby#49809](https://redirect.github.com/moby/moby/pull/49809)\n- Update
          Compose to [v2.35.0](https://redirect.github.com/docker/compose/releases/tag/v2.35.0).
          [docker/docker-ce-packaging#1183](https://redirect.github.com/docker/docker-ce-packaging/pull/1183)\n-
          Update Go runtime to [1.23.8](https://go.dev/doc/devel/release#go1.23.8).
          [docker/cli#5986](https://redirect.github.com/docker/cli/pull/5986), [docker/docker-ce-packaging#1180](https://redirect.github.com/docker/docker-ce-packaging/pull/1180),
          [moby/moby#49737](https://redirect.github.com/moby/moby/pull/49737)\n\n#####
          Networking\n\n- Fix a bug causing host port-mappings on Swarm containers
          to be duplicated on `docker ps` and `docker i\n\n> \u2702 **Note**\n> \n>
          PR body was truncated to here.\n\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about these updates again.\n\n---\n\n - [ ] <!-- rebase-check -->If you
          want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/1807
        commit_id: 4e5d7086fed9808ec3030da69e600b8a36c24c87
        patchset: 4e5d7086fed9808ec3030da69e600b8a36c24c87
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
        src_dir: src/github.com/osism/release
        topic: null
      change: '1807'
      change_message: "chore(deps): update dependency moby/moby to v28\n\n> \u2139\uFE0F
        **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [moby/moby](https://redirect.github.com/moby/moby) | major | `5:27.5.1` \u2192
        `v28.5.2` |\n| [moby/moby](https://redirect.github.com/moby/moby) | major
        | `27.5.1` \u2192 `28.5.2` |\n\n---\n\n> [!WARNING]\n> Some dependencies could
        not be looked up. Check the [Dependency Dashboard](../issues/152) for more
        information.\n\n---\n\n### Release Notes\n\n<details>\n<summary>moby/moby
        (moby/moby)</summary>\n\n### [`v28.5.2`](https://redirect.github.com/moby/moby/releases/tag/v28.5.2)\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.5.1...v28.5.2)\n\n####
        28.5.2\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.2)\n-
        [moby/moby, 28.5.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.2)\n\n>
        \\[!CAUTION]\n> This release contains fixes for three high-severity security
        vulnerabilities in runc:\n>\n> - [CVE-2025-31133](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2)\n>
        - [CVE-2025-52565](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r)\n>
        - [CVE-2025-52881](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm)\n>\n>
        All three vulnerabilities ultimately allow (through different methods) for
        full container breakouts by bypassing runc's restrictions for writing to arbitrary
        `/proc` files.\n\n##### Packaging updates\n\n- Update runc to [v1.3.3](https://redirect.github.com/opencontainers/runc/releases/tag/v1.3.3).
        [moby/moby#51394](https://redirect.github.com/moby/moby/pull/51394)\n\n#####
        Bug fixes and enhancements\n\n- dockerd-rootless.sh: if slirp4netns is not
        installed, try using pasta (passt). [moby/moby#51162](https://redirect.github.com/moby/moby/pull/51162)\n-
        Update Go runtime to [1.24.9](https://go.dev/doc/devel/release#go1.24.9).
        [moby/moby#51387](https://redirect.github.com/moby/moby/pull/51387), [docker/cli#6613](https://redirect.github.com/docker/cli/pull/6613)\n\n#####
        Deprecations\n\n- Go-SDK: cli/command/image/build: deprecate `DefaultDockerfileName`,
        `DetectArchiveReader`, `WriteTempDockerfile`, `ResolveAndValidateContextPath`.
        These utilities were only used internally and will be removed in the next
        release. [docker/cli#6610](https://redirect.github.com/docker/cli/pull/6610)\n-
        Go-SDK: cli/command/image/build: deprecate IsArchive utility. [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n-
        Go-SDK: opts: deprecate `ValidateMACAddress`. [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n-
        Go-SDK: opts: deprecate ListOpts.Delete(). [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n\n###
        [`v28.5.1`](https://redirect.github.com/moby/moby/releases/tag/v28.5.1)\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.5.0...v28.5.1)\n\n####
        28.5.1\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.1)\n-
        [moby/moby, 28.5.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.1)\n-
        Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.5.1/docs/deprecated.md).\n-
        Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.5.1/docs/api/version-history.md).\n\n#####
        Bug fixes and enhancements\n\n- Update BuildKit to v0.25.1. [moby/moby#51137](https://redirect.github.com/moby/moby/pull/51137)\n-
        Update Go runtime to [1.24.8](https://go.dev/doc/devel/release#go1.24.8).
        [moby/moby#51133](https://redirect.github.com/moby/moby/pull/51133), [docker/cli#6541](https://redirect.github.com/docker/cli/pull/6541)\n\n#####
        Deprecations\n\n- api/types/image: InspectResponse: deprecate `Parent` and
        `DockerVersion` fields. [moby/moby#51105](https://redirect.github.com/moby/moby/pull/51105)\n-
        api/types/plugin: deprecate `Config.DockerVersion` field. [moby/moby#51110](https://redirect.github.com/moby/moby/pull/51110)\n\n###
        [`v28.5.0`](https://redirect.github.com/moby/moby/releases/tag/v28.5.0)\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.4.0...v28.5.0)\n\n###
        28.5.0\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.0)\n-
        [moby/moby, 28.5.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.0)\n-
        Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.5.0/docs/deprecated.md).\n-
        Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.5.0/docs/api/version-history.md).\n\n#####
        Bug fixes and enhancements\n\n- Don't print warnings in `docker info` for
        broken symlinks in CLI-plugin directories. [docker/cli#6476](https://redirect.github.com/docker/cli/pull/6476)\n-
        Fix a panic during `stats` on empty event `Actor.ID`. [docker/cli#6471](https://redirect.github.com/docker/cli/pull/6471)\n\n#####
        Packaging updates\n\n- Remove support for legacy CBC cipher suites. [docker/cli#6474](https://redirect.github.com/docker/cli/pull/6474)\n-
        Update Buildkit to [v0.25.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.25.0).
        [moby/moby#51075](https://redirect.github.com/moby/moby/pull/51075)\n- Update
        Dockerfile syntax to [v1.19.0](https://redirect.github.com/moby/buildkit/releases/tag/dockerfile%2F1.19.0).
        [moby/moby#51075](https://redirect.github.com/moby/moby/pull/51075)\n\n#####
        Networking\n\n- Eliminated harmless warning about deletion of `endpoint_count`
        from the data store. [moby/moby#51064](https://redirect.github.com/moby/moby/pull/51064)\n-
        Fix a bug causing IPAM plugins to not be loaded on Windows. [moby/moby#51035](https://redirect.github.com/moby/moby/pull/51035)\n\n#####
        API\n\n- Deprecate support for kernel memory TCP accounting (`KernelMemoryTCP`).
        [moby/moby#51067](https://redirect.github.com/moby/moby/pull/51067)\n- Fix
        `GET containers/{name}/checkpoints` returning `null` instead of empty JSON
        array when there are no checkpoints. [moby/moby#51052](https://redirect.github.com/moby/moby/pull/51052)\n\n#####
        Go SDK\n\n- cli-plugins/plugin: Run: allow customizing the CLI. [docker/cli#6481](https://redirect.github.com/docker/cli/pull/6481)\n-
        cli/command: add `WithUserAgent` option. [docker/cli#6477](https://redirect.github.com/docker/cli/pull/6477)\n\n#####
        Deprecations\n\n- Go-SDK: cli/command: deprecate `DockerCli.Apply`. This method
        is no longer used and will be removed in the next release if there are no
        remaining uses. [docker/cli#6497](https://redirect.github.com/docker/cli/pull/6497)\n-
        Go-SDK: cli/command: deprecate `DockerCli.ContentTrustEnabled`. This method
        is no longer used and will be removed in the next release. [docker/cli#6495](https://redirect.github.com/docker/cli/pull/6495)\n-
        Go-SDK: cli/command: deprecate `DockerCli.DefaultVersion`. This method is
        no longer used and will be removed in the next release. [docker/cli#6491](https://redirect.github.com/docker/cli/pull/6491)\n-
        Go-SDK: cli/command: deprecate `ResolveDefaultContext` utility. [docker/cli#6529](https://redirect.github.com/docker/cli/pull/6529)\n-
        Go-SDK: cli/command: deprecate `WithContentTrustFromEnv`, `WithContentTrust`
        options. These options were used internally, and will be removed in the next
        release.. [docker/cli#6489](https://redirect.github.com/docker/cli/pull/6489)\n-
        Go-SDK: cli/manifest/store: deprecate `IsNotFound()`. [docker/cli#6514](https://redirect.github.com/docker/cli/pull/6514)\n-
        Go-SDK: templates: deprecate NewParse() function. [docker/cli#6469](https://redirect.github.com/docker/cli/pull/6469)\n\n###
        [`v28.4.0`](https://redirect.github.com/moby/moby/releases/tag/v28.4.0)\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.3.3...v28.4.0)\n\n####
        28.4.0\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.4.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.4.0)\n-
        [moby/moby, 28.4.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.4.0)\n-
        Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.4.0/docs/deprecated.md).\n-
        Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.4.0/docs/api/version-history.md).\n\n#####
        New\n\n- Allow Docker CLI to set the `GODEBUG` environment variable when the
        key-value pair (`\"GODEBUG\":\"...\"`) exists inside the docker context metadata.
        [docker/cli#6399](https://redirect.github.com/docker/cli/pull/6399)\n\n#####
        Bug fixes and enhancements\n\n- Add shell completion for `docker pull` and
        `docker image pull`. [docker/cli#6420](https://redirect.github.com/docker/cli/pull/6420)\n-
        Fix a regression in v28.3.3 that could cause a panic on `docker push` if the
        client did not send an `X-Registry-Auth` header. [moby/moby#50738](https://redirect.github.com/moby/moby/pull/50738)\n-
        Windows: Potentially fix an issue with \"access denied\" error when pulling
        images. [moby/moby#50871](https://redirect.github.com/moby/moby/pull/50871)\n-
        containerd image store: Fix `docker history` failing with `snapshot X does
        not exist` when calling on a non-native image that was built locally. [moby/moby#50875](https://redirect.github.com/moby/moby/pull/50875)\n-
        containerd image store: Fix `docker image prune` to emit correct `untag` and
        `delete` events and list only the deleted images root digests instead of every
        blob. [moby/moby#50837](https://redirect.github.com/moby/moby/pull/50837)\n-
        Remove interactive login prompt from `docker push` and `docker pull` after
        a failure caused by missing authentication. [docker/cli#6256](https://redirect.github.com/docker/cli/pull/6256)\n\n#####
        Packaging updates\n\n- Update BuildKit to [v0.24.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.24.0).
        [moby#50888](https://redirect.github.com/moby/moby/pull/50888)\n- Update Go
        runtime to [1.24.7](https://go.dev/doc/devel/release#go1.24.6). [moby/moby#50889](https://redirect.github.com/moby/moby/pull/50889),
        [docker/cli#6422](https://redirect.github.com/docker/cli/pull/6422)\n- Update
        `runc` to [v1.3.0](https://redirect.github.com/opencontainers/runc/releases/tag/v1.3.0).
        [moby/moby#50699](https://redirect.github.com/moby/moby/pull/50699)\n- Update
        containerd (static binaries only) to [v1.7.28](https://redirect.github.com/containerd/containerd/releases/tag/v1.7.28).
        [moby/moby#50700](https://redirect.github.com/moby/moby/pull/50700)\n\n#####
        Networking\n\n- Fix an issue that could cause slow container restart on live-restore.
        [moby/moby#50829](https://redirect.github.com/moby/moby/pull/50829)\n\n#####
        API\n\n- Update deprecation message for `AuthConfig.Email` field. [moby/moby#50797](https://redirect.github.com/moby/moby/pull/50797)\n\n#####
        Go SDK\n\n- Deprecate profiles package which got migrated to [github.com/moby/profiles](https://redirect.github.com/moby/profiles).
        [moby/moby#50513](https://redirect.github.com/moby/moby/pull/50513)\n\n#####
        Deprecations\n\n- Deprecate special handling for quoted values for the `--tlscacert`,
        `--tlscert`, and `--tlskey` command-line flags. [docker/cli#6291](https://redirect.github.com/docker/cli/pull/6291)\n-
        Mark legacy links env vars (`DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS`)
        as deprecated in v28.4 and set for removal in v30.0. [docker/cli#6309](https://redirect.github.com/docker/cli/pull/6309)\n-
        Go-SDK: Deprecate field `NetworkSettingsBase.Bridge`, struct `NetworkSettingsBase`,
        all the fields of `DefaultNetworkSettings`, and struct `DefaultNetworkSettings`.
        [moby/moby#50839](https://redirect.github.com/moby/moby/pull/50839)\n- Go-SDK:
        api/types: `build.CacheDiskUsage`,  `container.DiskUsage`, `images.DiskUsage`
        and `volumes.DiskUsage` are now deprecated and will be removed in the next
        major release. [moby/moby#50768](https://redirect.github.com/moby/moby/pull/50768)\n-
        Go-SDK: cli-plugins/manager: deprecate `ReexecEnvvar`. [docker/cli#6411](https://redirect.github.com/docker/cli/pull/6411)\n-
        Go-SDK: cli-plugins/manager: deprecate annotation aliases (`CommandAnnotationPlugin`,
        `CommandAnnotationPluginVendor`, `CommandAnnotationPluginVersion`, `CommandAnnotationPluginInvalid`,
        `CommandAnnotationPluginCommandPath`) in favor of their equivalent in `cli-plugins/manager/metadata`.
        [docker/cli#6298](https://redirect.github.com/docker/cli/pull/6298)\n- Go-SDK:
        cli-plugins/manager: deprecate metadata aliases (`NamePrefix`, `MetadataSubcommandName`,
        `HookSubcommandName`, `Metadata`, `ReexecEnvvar`) in favor of their equivalent
        in `cli-plugins/manager/metadata`. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
        Go-SDK: cli-plugins/manager: remove `Candidate` interface, which was only
        for internal use. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
        Go-SDK: cli-plugins/manager: remove `NewPluginError` function, which was only
        for internal use. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
        Go-SDK: cli-plugins/manager: remove deprecated `ResourceAttributesEnvvar`
        const. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
        Go-SDK: cli/command/builder: deprecate `NewBuilderCommand` and `NewBakeStubCommand`.
        These functions will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/builder: deprecate `NewPruneCommand`. [docker/cli#6343](https://redirect.github.com/docker/cli/pull/6343)\n-
        Go-SDK: cli/command/checkpoint: deprecate `NewCheckpointCommand`. This function
        will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/checkpoint: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
        Go-SDK: cli/command/completion: deprecate `NoComplete`. [docker/cli#6405](https://redirect.github.com/docker/cli/pull/6405)\n-
        Go-SDK: cli/command/completion: remove deprecated `ValidArgsFn`. [docker/cli#6259](https://redirect.github.com/docker/cli/pull/6259)\n-
        Go-SDK: cli/command/config: deprecate `NewConfigCommand`. This function will
        be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/config: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
        [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
        cli/command/config: deprecate `RunConfigCreate`,  `CreateOptions`, `RunConfigInspect`,
        `InspectOptions`, `RunConfigList`, `ListOptions`, `RunConfigRemove`, and `RemoveOptions`.
        [docker/cli#6369](https://redirect.github.com/docker/cli/pull/6369)\n- Go-SDK:
        cli/command/container: deprecate `NewBuildCommand`, `NewPullCommand`, `NewPushCommand`,
        `NewImagesCommand`, `NewImageCommand`, `NewHistoryCommand`, `NewImportCommand`,
        `NewLoadCommand`, `NewRemoveCommand`, `NewSaveCommand`, `NewTagCommand`, `NewPruneCommand`.
        These functions will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/container: deprecate `NewDiffFormat`, `DiffFormatWrite`.
        These functions were only used internally and will be removed in the next
        release. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
        Go-SDK: cli/command/container: deprecate `NewRunCommand`, `NewExecCommand`,
        `NewPsCommand`, `NewContainerCommand`, `NewAttachCommand`, `NewCommitCommand`,
        `NewCopyCommand`, `NewCreateCommand`, `NewDiffCommand`, `NewExportCommand`,
        `NewKillCommand`, `NewLogsCommand`, `NewPauseCommand`, `NewPortCommand`, `NewRenameCommand`,
        `NewRestartCommand`, `NewRmCommand`, `NewStartCommand`, `NewStatsCommand`,
        `NewStopCommand`, `NewTopCommand`, `NewUnpauseCommand`, `NewUpdateCommand`,
        `NewWaitCommand`, `NewPruneCommand`. These functions will be removed in the
        next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/context: deprecate `NewContextCommand`. This function
        will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/context: deprecate `RunCreate` and `CreateOptions`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
        Go-SDK: cli/command/context: deprecate `RunExport` and `ExportOptions`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
        Go-SDK: cli/command/context: deprecate `RunImport`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
        Go-SDK: cli/command/context: deprecate `RunRemove` and `RemoveOptions`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
        Go-SDK: cli/command/context: deprecate `RunUpdate` and `UpdateOptions`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
        Go-SDK: cli/command/context: deprecate `RunUse`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
        Go-SDK: cli/command/image: deprecate `AuthResolver` utility. [docker/cli#6357](https://redirect.github.com/docker/cli/pull/6357)\n-
        Go-SDK: cli/command/image: deprecate `NewHistoryFormat`, `HistoryWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341),
        [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
        cli/command/manifest: deprecate `NewManifestCommand`. This functions will
        be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/network: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
        Go-SDK: cli/command/network: deprecate `NewNetworkCommand`. These functions
        will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/node: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
        [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
        cli/command/node: deprecate `NewNodeCommand`. This functions will be removed
        in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/plugin: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
        Go-SDK: cli/command/plugin: deprecate `NewPluginCommand`. This function will
        be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/registry: deprecate `NewLoginCommand`, `NewLogoutCommand`,
        `NewSearchCommand`. These functions will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/registry: deprecate `NewSearchFormat`, `SearchWrite`.
        [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
        cli/command/registry: deprecate `OauthLoginEscapeHatchEnvVar` const. [docker/cli#6413](https://redirect.github.com/docker/cli/pull/6413)\n-
        Go-SDK: cli/command/secret: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
        [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
        cli/command/secret: deprecate `NewSecretCommand`. This functions will be removed
        in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/service: deprecate `NewFormat`, `InspectFormatWrite`.
        [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
        cli/command/service: deprecate `NewServiceCommand`. This function will be
        removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/stack: deprecate `NewStackCommand`. This function will
        be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/stack: deprecate `RunList`, `RunServices`. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
        Go-SDK: cli/command/swarm: deprecate `NewSwarmCommand`. This function will
        be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/system: deprecate `NewVersionCommand`, `NewInfoCommand`,
        `NewSystemCommand`, `NewEventsCommand`, `NewInspectCommand`. These functions
        will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/task: deprecate `NewTaskFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
        Go-SDK: cli/command/trust: deprecate `NewTrustCommand`. This function will
        be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command/trust: deprecate `SignedTagInfo`, `SignerInfo`, `NewTrustTagFormat`,
        `NewSignerInfoFormat`, `TagWrite`, `SignerInfoWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
        Go-SDK: cli/command/volume: deprecate `NewVolumeCommand`, `NewPruneCommand`.
        These functions will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
        Go-SDK: cli/command: remove `AddTrustSigningFlags`,  `AddTrustVerificationFlags`,
        and `AddPlatformFlag` utilities, which were only used internally. [docker/cli#6311](https://redirect.github.com/docker/cli/pull/6311)\n-
        Go-SDK: cli/command: remove deprecated `ConfigureAuth` utility. [docker/cli#6257](https://redirect.github.com/docker/cli/pull/6257)\n-
        Go-SDK: cli/command: remove deprecated `CopyToFile` utility. [docker/cli#6257](https://redirect.github.com/docker/cli/pull/6257)\n-
        Go-SDK: cli/config/types: update deprecation message for `AuthConfig.Email`
        field. [docker/cli#6392](https://redirect.github.com/docker/cli/pull/6392)\n-
        Go-SDK: cli: deprecate `VisitAll`, `DisableFlagsInUseLine` utilities. These
        utilities were only used internally and will be removed in the next release.
        [docker/cli#6276](https://redirect.github.com/docker/cli/pull/6276)\n- Go-SDK:
        cli: remove `HasCompletionArg` utility. This utility was only used internally.
        [docker/cli#6276](https://redirect.github.com/docker/cli/pull/6276)\n- Go-SDK:
        deprecate `cli/command.RegistryAuthenticationPrivilegedFunc`. [docker/cli#6256](https://redirect.github.com/docker/cli/pull/6256)\n-
        Go-SDK: deprecate cli/command/stack/formatter. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
        Go-SDK: deprecate cli/command/stack/loader. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
        Go-SDK: deprecate cli/command/stack/options. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
        Go-SDK: deprecate cli/command/stack/swarm. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
        Go-SDK: opts: deprecate `NewNamedListOptsRef`, `NewNamedMapOpts`, `NamedListOpts`,
        `NamedMapOpts`, and `NamedOption`. These types and functions are no longer
        used and will be removed in the next release. [docker/cli#6292](https://redirect.github.com/docker/cli/pull/6292)\n-
        Go-SDK: opts: deprecate `ParseEnvFile` in favour of `kvfile.Parse`. [docker/cli#6381](https://redirect.github.com/docker/cli/pull/6381)\n-
        Go-SDK: opts: deprecate `QuotedString`. This utility is no longer used, and
        will be removed in the next release. [docker/cli#6275](https://redirect.github.com/docker/cli/pull/6275)\n-
        Go-SDK: opts: deprecate `ValidateHost` utility. This function is no longer
        used, and will be removed in the next release. [docker/cli#6280](https://redirect.github.com/docker/cli/pull/6280)\n-
        Go-SDK: pkg/jsonmessage: deprecate the `JSONMessage.From`, `JSONMessage.Time`,
        and `JSONMessage.TimeNano` fields, as they are no longer returned by the API
        for progress messages. Use the `events.Message` type instead to unmarshal
        the `/events` response. [moby/moby#50762](https://redirect.github.com/moby/moby/pull/50762)\n-
        Go-SDK: the cli/registry/client package is deprecated and will be removed
        in the next release. [docker/cli#6313](https://redirect.github.com/docker/cli/pull/6313)\n\n###
        [`v28.3.3`](https://redirect.github.com/moby/moby/releases/tag/v28.3.3)\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.3.2...v28.3.3)\n\n####
        28.3.3\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.3 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.3)\n-
        [moby/moby, 28.3.3 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.3)\n\n#####
        Security\n\nThis release fixes an issue where, after a firewalld reload, published
        container ports could be accessed directly from the local network, even when
        they were intended to be accessible only via a loopback address. [CVE-2025-54388](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54388)
        /  [GHSA-x4rx-4gw3-53p4](https://redirect.github.com/moby/moby/security/advisories/GHSA-x4rx-4gw3-53p4)
        / [moby/moby#50506](https://redirect.github.com/moby/moby/pull/50506).\n\n#####
        Packaging updates\n\n- Update Buildx to [v0.26.1](https://redirect.github.com/docker/buildx/releases/tag/v0.26.1).
        [docker/docker-ce-packaging#1230](https://redirect.github.com/docker/docker-ce-packaging/pull/1230)\n-
        Update Compose to [v2.39.1](https://redirect.github.com/docker/compose/releases/tag/v2.39.1).
        [docker/docker-ce-packaging#1234](https://redirect.github.com/docker/docker-ce-packaging/pull/1234)\n-
        Update Docker Model CLI plugin to [v0.1.36](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.36).
        [docker/docker-ce-packaging#1233](https://redirect.github.com/docker/docker-ce-packaging/pull/1233)\n\n#####
        Go SDK\n\n- cli/command/formatter: add `TrunateID()` utility as alternative
        for `github.com/docker/docker/pkg/stringid.TrunateID()`. [docker/cli#6180](https://redirect.github.com/docker/cli/pull/6180)\n\n###
        [`v28.3.2`](https://redirect.github.com/moby/moby/releases/tag/v28.3.2): 28.3.2\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.3.1...v28.3.2)\n\n####
        28.3.2\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.2)\n-
        [moby/moby, 28.3.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.2)\n-
        Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.2/docs/deprecated.md).\n-
        Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.2/docs/api/version-history.md).\n\n#####
        Bug fixes and enhancements\n\n- Fix `--use-api-socket` not working correctly
        when targeting a remote daemon. [docker/cli#6157](https://redirect.github.com/docker/cli/pull/6157)\n-
        Fix stray \"otel error\" logs being printed if debug logging is enabled. [docker/cli#6160](https://redirect.github.com/docker/cli/pull/6160)\n-
        Quote SSH arguments when connecting to a remote daemon over an SSH connection
        to avoid unexpected expansion. [docker/cli#6147](https://redirect.github.com/docker/cli/pull/6147)\n-
        Warn when `DOCKER_AUTH_CONFIG` is set during `docker login` and `docker logout`.
        [docker/cli#6163](https://redirect.github.com/docker/cli/pull/6163)\n\n#####
        Packaging updates\n\n- Update Compose to [v2.38.2](https://redirect.github.com/docker/compose/releases/tag/v2.38.2).
        [docker/docker-ce-packaging#1225](https://redirect.github.com/docker/docker-ce-packaging/pull/1225)\n-
        Update Docker Model CLI plugin to [v0.1.33](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.33).
        [docker/docker-ce-packaging#1227](https://redirect.github.com/docker/docker-ce-packaging/pull/1227)\n-
        Update Go runtime to 1.24.5. [moby/moby#50354](https://redirect.github.com/moby/moby/pull/50354)\n\n###
        [`v28.3.1`](https://redirect.github.com/moby/moby/releases/tag/v28.3.1): 28.3.1\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.3.0...v28.3.1)\n\n####
        28.3.1\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.1)\n-
        [moby/moby, 28.3.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.1)\n-
        Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.1/docs/deprecated.md).\n-
        Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.1/docs/api/version-history.md).\n\n#####
        Packaging updates\n\n- Update BuildKit to [v0.23.2](https://redirect.github.com/moby/buildkit/releases/tag/v0.23.2).
        [moby/moby#50309](https://redirect.github.com/moby/moby/pull/50309)\n- Update
        Compose to [v2.38.1](https://redirect.github.com/docker/compose/releases/tag/v2.38.1).
        [docker/docker-ce-packaging#1221](https://redirect.github.com/docker/docker-ce-packaging/pull/1221)\n-
        Update Model to v0.1.32 which adds the support for the new top-level `models:`
        key in Docker Compose. [docker/docker-ce-packaging#1222](https://redirect.github.com/docker/docker-ce-packaging/pull/1222)\n\n###
        [`v28.3.0`](https://redirect.github.com/moby/moby/releases/tag/v28.3.0): 28.3.0\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.2.2...v28.3.0)\n\n####
        28.3.0\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.0)\n-
        [moby/moby, 28.3.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.0)\n-
        Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.0/docs/deprecated.md).\n-
        Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.0/docs/api/version-history.md).\n\n#####
        New\n\n- Add support for AMD GPUs in `docker run --gpus`. [moby/moby#49952](https://redirect.github.com/moby/moby/pull/49952)\n-
        Use `DOCKER_AUTH_CONFIG` as a credential store. [docker/cli#6008](https://redirect.github.com/docker/cli/pull/6008)\n\n#####
        Bug fixes and enhancements\n\n- Ensure that the state of the container in
        the daemon database (used by [/containers/json](https://docs.docker.com/reference/api/engine/version/v1.49/#tag/Container/operation/ContainerList)
        API) is up to date when the container is stopped using the [/containers/{id}/stop](https://docs.docker.com/reference/api/engine/version/v1.49/#tag/Container/operation/ContainerStop)
        API (before response of API). [moby/moby#50136](https://redirect.github.com/moby/moby/pull/50136)\n-
        Fix `docker image inspect inspect` omitting empty fields. [moby/moby#50135](https://redirect.github.com/moby/moby/pull/50135)\n-
        Fix `docker images --tree` not marking images as in-use when the containerd
        image store is disabled. [docker/cli#6140](https://redirect.github.com/docker/cli/pull/6140)\n-
        Fix `docker pull/push` hang in non-interactive when authentication is required
        caused by prompting for login credentials. [docker/cli#6141](https://redirect.github.com/docker/cli/pull/6141)\n-
        Fix a potential resource leak when a node leaves a Swarm. [moby/moby#50115](https://redirect.github.com/moby/moby/pull/50115)\n-
        Fix a regression where a login prompt on `docker pull` would show Docker Hub-specific
        hints when logging in on other registries. [docker/cli#6135](https://redirect.github.com/docker/cli/pull/6135)\n-
        Fix an issue where all new tasks in the Swarm could get stuck in the PENDING
        state forever after scaling up a service with placement preferences. [moby/moby#50211](https://redirect.github.com/moby/moby/pull/50211)\n-
        Remove an undocumented, hidden, top-level `docker remove` command that was
        accidentally introduced in Docker 23.0. [docker/cli#6144](https://redirect.github.com/docker/cli/pull/6144)\n-
        Validate registry-mirrors configuration as part of `dockerd --validate` and
        improve error messages for invalid mirrors. [moby/moby#50240](https://redirect.github.com/moby/moby/pull/50240)\n-
        `dockerd-rootless-setuptool.sh`: Fix the script from silently returning with
        no error message when subuid/subgid system requirements are not satisfied.
        [moby/moby#50059](https://redirect.github.com/moby/moby/pull/50059)\n- containerd
        image store: Fix `docker push` not creating a tag on the remote repository.
        [moby/moby#50199](https://redirect.github.com/moby/moby/pull/50199)\n- containerd
        image store: Improve handling of errors returned by the token server during
        `docker pull/push`. [moby/moby#50176](https://redirect.github.com/moby/moby/pull/50176)\n\n#####
        Packaging updates\n\n- Allow customizing containerd service name for OpenRC.
        [moby/moby#50156](https://redirect.github.com/moby/moby/pull/50156)\n- Update
        BuildKit to [v0.23.1](https://redirect.github.com/moby/buildkit/releases/tag/v0.23.1).
        [moby/moby#50243](https://redirect.github.com/moby/moby/pull/50243)\n- Update
        Buildx to [v0.25.0](https://redirect.github.com/docker/buildx/releases/tag/v0.25.0).
        [docker/docker-ce-packaging#1217](https://redirect.github.com/docker/docker-ce-packaging/pull/1217)\n-
        Update Compose to [v2.37.2](https://redirect.github.com/docker/compose/releases/tag/v2.37.2).
        [docker/docker-ce-packaging#1219](https://redirect.github.com/docker/docker-ce-packaging/pull/1219)\n-
        Update Docker Model CLI plugin to [v0.1.30](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.30).
        [docker/docker-ce-packaging#1218](https://redirect.github.com/docker/docker-ce-packaging/pull/1218)\n-
        Update Go runtime to [1.24.4](https://go.dev/doc/devel/release#go1.24.4).
        [docker/docker-ce-packaging#1213](https://redirect.github.com/docker/docker-ce-packaging/pull/1213),
        [moby/moby#50153](https://redirect.github.com/moby/moby/pull/50153), [docker/cli#6124](https://redirect.github.com/docker/cli/pull/6124)\n\n#####
        Networking\n\n- Revert Swarm related changes added in 28.2.x builds, due to
        a regression reported in [#&#8203;50129](https://redirect.github.com/moby/moby/issues/50129).
        [moby/moby#50169](https://redirect.github.com/moby/moby/pull/50169)\n  - Revert:
        Fix an issue where `docker network inspect --verbose` could sometimes crash
        the daemon ([#&#8203;49937](https://redirect.github.com/moby/moby/pull/49937)).\n
        \ - Revert: Fix an issue where the load-balancer IP address for an overlay
        network would not be released in certain cases if the Swarm was lacking an
        ingress network ([#&#8203;49948](https://redirect.github.com/moby/moby/pull/49948)).\n
        \ - Revert: Improve the reliability of NetworkDB in busy clusters and lossy
        networks ([#&#8203;49932](https://redirect.github.com/moby/moby/pull/49932)).\n
        \ - Revert: Improvements to the reliability and convergence speed of NetworkDB
        ([#&#8203;49939](https://redirect.github.com/moby/moby/pull/49939)).\n- Fix
        an issue that could cause container startup to fail, or lead to failed UDP
        port mappings, when some container ports are mapped to `0.0.0.0` and others
        are mapped to specific host addresses. [moby/moby#50054](https://redirect.github.com/moby/moby/pull/50054)\n-
        The `network inspect` response for an overlay network now reports that `EnableIPv4`
        is true. [moby/moby#50147](https://redirect.github.com/moby/moby/pull/50147)\n-
        Windows: Improve daemon startup time in cases where the host has networks
        of type `\"Mirrored\"`. [moby/moby#50155](https://redirect.github.com/moby/moby/pull/50155)\n-
        Windows: Make sure `docker system prune` and `docker network prune` only remove
        networks created by Docker. [moby/moby#50154](https://redirect.github.com/moby/moby/pull/50154)\n\n#####
        API\n\n- Update API version to 1.51. [moby/moby#50145](https://redirect.github.com/moby/moby/pull/50145)\n-
        `GET /images/json` now sets the value of the `Containers` field for all images
        to the count of containers using the image. [moby/moby#50146](https://redirect.github.com/moby/moby/pull/50146)\n\n#####
        Deprecations\n\n- Empty/nil image config fields in the `GET /images/{name}/json`
        response are now deprecated and will be removed in v29.0. [docker/cli#6129](https://redirect.github.com/docker/cli/pull/6129)\n-
        api/types/container: deprecate `ExecOptions.Detach`. This field is not used,
        and will be removed in a future release. [moby/moby#50219](https://redirect.github.com/moby/moby/pull/50219)\n-
        pkg/idtools: deprecate `IdentityMapping` and `Identity.Chown`. [moby/moby#50210](https://redirect.github.com/moby/moby/pull/50210)\n\n###
        [`v28.2.2`](https://redirect.github.com/moby/moby/releases/tag/v28.2.2): 28.2.2\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.2.1...v28.2.2)\n\n####
        28.2.2\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.2.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.2.2)\n-
        [moby/moby, 28.2.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.2.2)\n\n#####
        Bug fixes and enhancements\n\n- containerd image store: Fix a regression causing
        `docker build --push` to fail. This reverts [the fix](https://redirect.github.com/moby/moby/pull/49702)
        for `docker build` not persisting overridden images as dangling. [moby/moby#50105](https://redirect.github.com/moby/moby/pull/50105)\n\n#####
        Networking\n\n- When creating the iptables `DOCKER-USER` chain, do not add
        an explicit `RETURN` rule, allowing users to append as well as insert their
        own rules. Existing rules are not removed on upgrade, but it won't be replaced
        after a reboot. [moby/moby#50098](https://redirect.github.com/moby/moby/pull/50098)\n\n###
        [`v28.2.1`](https://redirect.github.com/moby/moby/releases/tag/v28.2.1): 28.2.1\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.2.0...v28.2.1)\n\n####
        28.2.1\n\n#### Packaging updates\n\n- Fix packaging regression in [v28.2.0](https://redirect.github.com/moby/moby/releases/tag/v28.2.0)
        which broke creating the `docker` group/user on fresh installations. [docker-ce-packaging#1209](https://redirect.github.com/docker/docker-ce-packaging/issues/1209)\n\n###
        [`v28.2.0`](https://redirect.github.com/moby/moby/releases/tag/v28.2.0): 28.2.0\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.1.1...v28.2.0)\n\n####
        28.2.0\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.2.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.2.0)\n-
        [moby/moby, 28.2.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.2.0)\n-
        Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.2.0/docs/deprecated.md).\n-
        Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.2.0/docs/api/version-history.md).\n\n>
        \\[!NOTE]\n> RHEL packages are currently not available and will be released
        later.\n\n##### New\n\n- Add `{{.Platform}}` as formatting option for `docker
        ps` to show the platform of the image the container is running. [docker/cli#6042](https://redirect.github.com/docker/cli/pull/6042)\n-
        Add support for relative parent paths (`../`) on bind mount sources when using
        `docker run/create` with `-v/--volume` or `--mount type=bind` options. [docker/cli#4966](https://redirect.github.com/docker/cli/pull/4966)\n-
        CDI is now enabled by default. [moby/moby#49963](https://redirect.github.com/moby/moby/pull/49963)\n-
        Show discovered CDI devices in `docker info`. [docker/cli#6078](https://redirect.github.com/docker/cli/pull/6078)\n-
        `docker image rm`: add `--platform` option to remove a variant from multi-platform
        images. [docker/cli#6109](https://redirect.github.com/docker/cli/pull/6109)\n-
        containerd image store: Initial BuildKit support for building Windows container
        images on Windows (requires an opt-in with `DOCKER_BUILDKIT=1`). [moby/moby#49740](https://redirect.github.com/moby/moby/pull/49740)\n\n#####
        Bug fixes and enhancements\n\n- Add a new log option for fluentd log driver
        (`fluentd-write-timeout`), which enables specifying write timeouts for fluentd
        connections. [moby/moby#49911](https://redirect.github.com/moby/moby/pull/49911)\n-
        Add support for `DOCKER_AUTH_CONFIG` for the experimental `--use-api-socket`
        option. [docker/cli#6019](https://redirect.github.com/docker/cli/pull/6019)\n-
        Fix `docker exec` waiting for 10 seconds if a non-existing user or group was
        specified. [moby/moby#49868](https://redirect.github.com/moby/moby/pull/49868)\n-
        Fix `docker swarm init` ignoring `cacert` option of `--external-ca`. [docker/cli#5995](https://redirect.github.com/docker/cli/pull/5995)\n-
        Fix an issue where the CLI would not correctly save the configuration file
        (`~/.docker/config.json`) if it was a relative symbolic link. [docker/cli#5282](https://redirect.github.com/docker/cli/pull/5282)\n-
        Fix containers with `--restart always` policy using CDI devices failing to
        start on daemon restart. [moby/moby#49990](https://redirect.github.com/moby/moby/pull/49990)\n-
        Fix shell-completion to only complete some flags once, even though they can
        be set multiple times. [docker/cli#6030](https://redirect.github.com/docker/cli/pull/6030)\n-
        Fix the `plugin does not implement PluginAddr interface` error for Swarm CSI
        drivers. [moby/moby#49961](https://redirect.github.com/moby/moby/pull/49961)\n-
        Improve `docker login` error messages for invalid options. [docker/cli#6036](https://redirect.github.com/docker/cli/pull/6036)\n-
        Make sure the terminal state is restored if the CLI is forcefully terminated.
        [docker/cli#6058](https://redirect.github.com/docker/cli/pull/6058)\n- Update
        the default seccomp profile to match the libseccomp v2.6.0. The new syscalls
        are: `listmount`, `statmount`, `lsm_get_self_attr`, `lsm_list_modules`, `lsm_set_self_attr`,
        `mseal`, `uretprobe`, `riscv_hwprobe`, `getxattrat`, `listxattrat`, `removexattrat`,
        and `setxattrat`. This prevents containers from receiving EPERM errors when
        using them. [moby/moby#50077](https://redirect.github.com/moby/moby/pull/50077)\n-
        `docker inspect`: add shell completion, improve flag-description for `--type`
        and improve validation. [docker/cli#6052](https://redirect.github.com/docker/cli/pull/6052)\n-
        containerd image store: Enable BuildKit garbage collector by default. [moby/moby#49899](https://redirect.github.com/moby/moby/pull/49899)\n-
        containerd image store: Fix `docker build` not persisting overridden images
        as dangling. [moby/moby#49702](https://redirect.github.com/moby/moby/pull/49702)\n-
        containerd image store: Fix `docker system df` reporting a negative reclaimable
        space amount. [moby/moby#49707](https://redirect.github.com/moby/moby/pull/49707)\n-
        containerd image store: Fix duplicate `PUT` requests when pushing a multi-platform
        image. [moby/moby#49949](https://redirect.github.com/moby/moby/pull/49949)\n\n#####
        Packaging updates\n\n- Drop Ubuntu 20.04 \"Focal\" packages as it reached
        end of life. [docker/docker-ce-packaging#1200](https://redirect.github.com/docker/docker-ce-packaging/pull/1200)\n-
        Fix install location for RPM-based `docker-ce` man-pages. [docker/docker-ce-packaging#1203](https://redirect.github.com/docker/docker-ce-packaging/pull/1203)\n-
        Update BuildKit to [v0.22.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.22.0).
        [moby/moby#50046](https://redirect.github.com/moby/moby/pull/50046)\n- Update
        Buildx to [v0.24.0](https://redirect.github.com/docker/buildx/releases/tag/v0.24.0).
        [docker/docker-ce-packaging#1205](https://redirect.github.com/docker/docker-ce-packaging/pull/1205)\n-
        Update Compose to [v2.36.2](https://redirect.github.com/docker/compose/releases/tag/v2.36.2).
        [docker/docker-ce-packaging#1208](https://redirect.github.com/docker/docker-ce-packaging/pull/1208)\n-
        Update Go runtime to [1.24.3](https://go.dev/doc/devel/release#go1.24.3).
        [docker/docker-ce-packaging#1192](https://redirect.github.com/docker/docker-ce-packaging/pull/1192),
        [docker/cli#6060](https://redirect.github.com/docker/cli/pull/6060), [moby/moby#49174](https://redirect.github.com/moby/moby/pull/49174)\n\n#####
        Networking\n\n- Add bridge network option `\"com.docker.network.bridge.trusted_host_interfaces\"`,
        accepting a colon-separated list of interface names. These interfaces have
        direct access to published ports on container IP addresses. [moby/moby#49832](https://redirect.github.com/moby/moby/pull/49832)\n-
        Add daemon option `\"allow-direct-routing\"` to disable filtering of packets
        from outside the host addressed directly to containers. [moby/moby#49832](https://redirect.github.com/moby/moby/pull/49832)\n-
        Do not display network options `com.docker.network.enable_ipv4` or `com.docker.network.enable_ipv6`
        in inspect output if they have been overridden by `EnableIPv4` or `EnableIPv6`
        in the network create request. [moby/moby#49866](https://redirect.github.com/moby/moby/pull/49866)\n-
        Fix an issue that could cause network deletion to fail after a daemon restart,
        with error \"has active endpoints\" listing empty endpoint names. [moby/moby#49901](https://redirect.github.com/moby/moby/pull/49901)\n-
        Fix an issue where `docker network inspect --verbose` could sometimes crash
        the daemon. [moby/moby#49937](https://redirect.github.com/moby/moby/pull/49937)\n-
        Fix an issue where the load-balancer IP address for an overlay network would
        not be released in certain cases if the Swarm was lacking an ingress network.
        [moby/moby#49948](https://redirect.github.com/moby/moby/pull/49948)\n- Improve
        the reliability of NetworkDB in busy clusters and lossy networks. [moby/moby#49932](https://redirect.github.com/moby/moby/pull/49932)\n-
        Improvements to the reliability and convergence speed of NetworkDB. [moby/moby#49939](https://redirect.github.com/moby/moby/pull/49939)\n\n#####
        API\n\n- Update API version to `1.50`.\n- `DELETE /images/{name}` now supports
        a `platforms` query parameter. It accepts an array of JSON-encoded OCI Platform
        objects, allowing for selecting a specific platforms to delete content for.
        [moby/moby#49982](https://redirect.github.com/moby/moby/pull/49982)\n- `GET
        /info` now includes a `DiscoveredDevices` field. This is an array of `DeviceInfo`
        objects, each providing details about a device discovered by a device driver.
        [moby/moby#49980](https://redirect.github.com/moby/moby/pull/49980)\n\n#####
        Go SDK\n\n- `api/types/container`: add `ContainerState` and constants for
        container state. [moby/moby#49965](https://redirect.github.com/moby/moby/pull/49965)\n-
        `api/types/container`: change `Summary.State` to a `ContainerState`. [moby/moby#49991](https://redirect.github.com/moby/moby/pull/49991)\n-
        `api/types/container`: define `HealthStatus` type for health-status constants.
        [moby/moby#49876](https://redirect.github.com/moby/moby/pull/49876)\n- `api/types`:
        deprecate `BuildResult`, `ImageBuildOptions`, `ImageBuildOutput`, `ImageBuildResponse`,
        `BuilderVersion`, `BuilderV1`, and `BuilderBuildKi` which were moved to `api/types/build`.
        [moby/moby#50025](https://redirect.github.com/moby/moby/pull/50025)\n\n#####
        Deprecations\n\n- API: Deprecated: `GET /images/{name}/json` no longer returns
        the following fields: `Config`, `Hostname`, `Domainname`, `AttachStdin`, `AttachStdout`,
        `AttachStderr`, `Tty`, `OpenStdin`, `StdinOnce`, `Image`, `NetworkDisabled`
        (already omitted unless set), `MacAddress` (already omitted unless set), `StopTimeout`
        (already omitted unless set). These additional fields were included in the
        response due to an implementation detail but not part of the image's Configuration,
        were marked deprecated in API v1.46, and are now omitted. [moby/moby#48457](https://redirect.github.com/moby/moby/pull/48457)\n-
        Go-SDK: Deprecate builder/remotecontext.Rel(). This function was needed on
        older versions of Go, but can now be replaced by `filepath.Rel()`. [moby/moby#49843](https://redirect.github.com/moby/moby/pull/49843)\n-
        Go-SDK: api/types: deprecate `BuildCachePruneOptions` in favor of `api/types/builder.CachePruneOptions`.
        [moby/moby#50015](https://redirect.github.com/moby/moby/pull/50015)\n- Go-SDK:
        api/types: deprecate `BuildCachePruneReport` in favor of `api/types/builder.CachePruneReport`.
        [moby/moby#50015](https://redirect.github.com/moby/moby/pull/50015)\n- Go-SDK:
        api/types: deprecate `NodeListOptions`, `NodeRemoveOptions`, `ServiceCreateOptions`,
        `ServiceUpdateOptions`, `RegistryAuthFromSpec`, `RegistryAuthFromPreviousSpec`,
        `ServiceListOptions`, `ServiceInspectOptions`, and `SwarmUnlockKeyResponse`
        which were moved to `api/types/swarm`. [moby/moby#50027](https://redirect.github.com/moby/moby/pull/50027)\n-
        Go-SDK: api/types: deprecate `SecretCreateResponse`, `SecretListOptions`,
        `ConfigCreateResponse`, `ConfigListOptions` which were moved to api/types/swarm.
        [moby/moby#50024](https://redirect.github.com/moby/moby/pull/50024)\n- Go-SDK:
        client: deprecate `IsErrNotFound`. [moby/moby#50012](https://redirect.github.com/moby/moby/pull/50012)\n-
        Go-SDK: container: deprecate `IsValidHealthString` in favor of `api/types/container.ValidateHealthStatus`.
        [moby/moby#49893](https://redirect.github.com/moby/moby/pull/49893)\n- Go-SDK:
        container: deprecate `StateStatus`, `WaitCondition`, and the related  `WaitConditionNotRunning`,
        `WaitConditionNextExit`, and `WaitConditionRemoved` consts in favor of their
        equivalents in `api/types/container`. [moby/moby#49874](https://redirect.github.com/moby/moby/pull/49874)\n-
        Go-SDK: opts: deprecate `ListOpts.GetAll` in favor of `ListOpts.GetSlice`.
        [docker/cli#6032](https://redirect.github.com/docker/cli/pull/6032)\n- Remove
        deprecated `IsAutomated` formatting placeholder from `docker search`. [docker/cli#6091](https://redirect.github.com/docker/cli/pull/6091)\n-
        Remove fallback for pulling images from non-OCI-compliant `docker.pkg.github.com`
        registry. [moby/moby#50094](https://redirect.github.com/moby/moby/pull/50094)\n-
        Remove support for pulling legacy v2, schema 1 images and remove `DOCKER_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGE`
        environment-variable. [moby/moby#50036](https://redirect.github.com/moby/moby/pull/50036),
        [moby/moby#42300](https://redirect.github.com/moby/moby/pull/42300)\n- The
        `BridgeNfIptables` and `BridgeNfIp6tables` fields in the `GET /info` response
        were deprecated in API v1.48, and are now omitted in API v1.50. [moby/moby#49904](https://redirect.github.com/moby/moby/pull/49904)\n-
        errdefs: Deprecate `errdefs.FromStatusCode`. Use containerd's `errhttp.ToNative`
        instead. [moby/moby#50030](https://redirect.github.com/moby/moby/pull/50030)\n\n###
        [`v28.1.1`](https://redirect.github.com/moby/moby/releases/tag/v28.1.1)\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.1.0...v28.1.1)\n\n####
        28.1.1\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.1.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.1.1)\n-
        [moby/moby, 28.1.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.1.1)\n\n#####
        Bug fixes and enhancements\n\n- Fix `dockerd-rootless-setuptool.sh` incorrectly
        reporting missing `iptables`. [moby/moby#49833](https://redirect.github.com/moby/moby/pull/49833)\n-
        containerd image store: Fix a potential daemon crash when using `docker load`
        with archives containing zero-size tar headers. [moby/moby#49837](https://redirect.github.com/moby/moby/pull/49837)\n\n#####
        Packaging updates\n\n- Update Buildx to [v0.23.0](https://redirect.github.com/docker/buildx/releases/tag/v0.23.0).
        [docker/docker-ce-packaging#1185](https://redirect.github.com/docker/docker-ce-packaging/pull/1185)\n-
        Update Compose to [v2.35.1](https://redirect.github.com/docker/compose/releases/tag/v2.35.1).
        [docker/docker-ce-packaging#1188](https://redirect.github.com/docker/docker-ce-packaging/pull/1188)\n\n#####
        Networking\n\n- Add a warning to a container's `/etc/resolv.conf` when no
        upstream DNS servers were found. [moby/moby#49827](https://redirect.github.com/moby/moby/pull/49827)\n\n###
        [`v28.1.0`](https://redirect.github.com/moby/moby/releases/tag/v28.1.0)\n\n[Compare
        Source](https://redirect.github.com/moby/moby/compare/v28.0.4...v28.1.0)\n\n####
        28.1.0\n\nFor a full list of pull requests and changes in this release, refer
        to the relevant GitHub milestones:\n\n- [docker/cli, 28.1.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.1.0)\n-
        [moby/moby, 28.1.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.1.0)\n-
        Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.1.0/docs/api/version-history.md).\n\n#####
        New\n\n- Add `docker bake` sub-command as alias for `docker buildx bake`.
        [docker/cli#5947](https://redirect.github.com/docker/cli/pull/5947)\n- Experimental:
        add a new `--use-api-socket` flag on `docker run` and `docker create` to enable
        access to Docker socket from inside a container and to share credentials from
        the host with the container. [docker/cli#5858](https://redirect.github.com/docker/cli/pull/5858)\n-
        `docker image inspect` now supports a `--platform` flag to inspect a specific
        platform of a multi-platform image. [docker/cli#5934](https://redirect.github.com/docker/cli/pull/5934)\n\n#####
        Bug fixes and enhancements\n\n- Add CLI shell-completion for context names.
        [docker/cli#6016](https://redirect.github.com/docker/cli/pull/6016)\n- Fix
        `docker images --tree` not including non-container images content size in
        the total image content size. [docker/cli#6000](https://redirect.github.com/docker/cli/pull/6000)\n-
        Fix `docker load` not preserving replaced images. [moby/moby#49650](https://redirect.github.com/moby/moby/pull/49650)\n-
        Fix `docker login` hints when logging in to a custom registry. [docker/cli#6015](https://redirect.github.com/docker/cli/pull/6015)\n-
        Fix `docker stats` not working properly on machines with high CPU core count.
        [moby/moby#49734](https://redirect.github.com/moby/moby/pull/49734)\n- Fix
        a regression causing `docker pull/push` to fail when interacting with a private
        repository. [docker/cli#5964](https://redirect.github.com/docker/cli/pull/5964)\n-
        Fix an issue preventing rootless Docker setup on a host with no `ip_tables`
        kernel module. [moby/moby#49727](https://redirect.github.com/moby/moby/pull/49727)\n-
        Fix an issue that could lead to unwanted iptables rules being restored and
        never deleted following a firewalld reload. [moby/moby#49728](https://redirect.github.com/moby/moby/pull/49728)\n-
        Improve CLI completion of `docker service scale`. [docker/cli#5968](https://redirect.github.com/docker/cli/pull/5968)\n-
        `docker images --tree` now hides both untagged and dangling images by default.
        [docker/cli#5924](https://redirect.github.com/docker/cli/pull/5924)\n- `docker
        system info` will provide an exit code if a connection cannot be established
        to the Docker daemon. [docker/cli#5918](https://redirect.github.com/docker/cli/pull/5918)\n-
        containerd image store: Fix `image tag` event not being emitted when building
        with BuildKit. [moby/moby#49678](https://redirect.github.com/moby/moby/pull/49678)\n-
        containerd image store: Improve `docker push/pull` handling of remote registry
        errors. [moby/moby#49770](https://redirect.github.com/moby/moby/pull/49770)\n-
        containerd image store: Show pull progress for non-layer image blobs. [moby/moby#49746](https://redirect.github.com/moby/moby/pull/49746)\n\n#####
        Packaging updates\n\n- Add Debian \"Trixie\" packages. [docker/docker-ce-packaging#1181](https://redirect.github.com/docker/docker-ce-packaging/pull/1181)\n-
        Add Fedora 42 packages. [docker/containerd-packaging#418](https://redirect.github.com/docker/containerd-packaging/pull/418),
        [docker/docker-ce-packaging#1169](https://redirect.github.com/docker/docker-ce-packaging/pull/1169)\n-
        Add Ubuntu 25.04 \"Plucky Puffin\" packages. [docker/containerd-packaging#419](https://redirect.github.com/docker/containerd-packaging/pull/419),
        [docker/docker-ce-packaging#1177](https://redirect.github.com/docker/docker-ce-packaging/pull/1177)\n-
        Update BuildKit to [v0.21.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.21.0).
        [moby/moby#49809](https://redirect.github.com/moby/moby/pull/49809)\n- Update
        Compose to [v2.35.0](https://redirect.github.com/docker/compose/releases/tag/v2.35.0).
        [docker/docker-ce-packaging#1183](https://redirect.github.com/docker/docker-ce-packaging/pull/1183)\n-
        Update Go runtime to [1.23.8](https://go.dev/doc/devel/release#go1.23.8).
        [docker/cli#5986](https://redirect.github.com/docker/cli/pull/5986), [docker/docker-ce-packaging#1180](https://redirect.github.com/docker/docker-ce-packaging/pull/1180),
        [moby/moby#49737](https://redirect.github.com/moby/moby/pull/49737)\n\n#####
        Networking\n\n- Fix a bug causing host port-mappings on Swarm containers to
        be duplicated on `docker ps` and `docker i\n\n> \u2702 **Note**\n> \n> PR
        body was truncated to here.\n\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
        **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
        Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
        Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
        **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
        checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
        about these updates again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
        to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by
        [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
      change_url: https://github.com/osism/release/pull/1807
      child_jobs: []
      commit_id: 4e5d7086fed9808ec3030da69e600b8a36c24c87
      event_id: c4f92db0-4fb7-11f1-8e0a-5b6ef6b97e87
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/c33d6dbcb56c45c3b6b6f1f2ae55719f/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/c33d6dbcb56c45c3b6b6f1f2ae55719f/work/logs
        result_data_file: /var/lib/zuul/builds/c33d6dbcb56c45c3b6b6f1f2ae55719f/work/results.json
        src_root: /var/lib/zuul/builds/c33d6dbcb56c45c3b6b6f1f2ae55719f/work/src
        work_root: /var/lib/zuul/builds/c33d6dbcb56c45c3b6b6f1f2ae55719f/work
      include_vars: []
      items:
      - branch: main
        change: '1807'
        change_message: "chore(deps): update dependency moby/moby to v28\n\n> \u2139\uFE0F
          **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [moby/moby](https://redirect.github.com/moby/moby) | major | `5:27.5.1`
          \u2192 `v28.5.2` |\n| [moby/moby](https://redirect.github.com/moby/moby)
          | major | `27.5.1` \u2192 `28.5.2` |\n\n---\n\n> [!WARNING]\n> Some dependencies
          could not be looked up. Check the [Dependency Dashboard](../issues/152)
          for more information.\n\n---\n\n### Release Notes\n\n<details>\n<summary>moby/moby
          (moby/moby)</summary>\n\n### [`v28.5.2`](https://redirect.github.com/moby/moby/releases/tag/v28.5.2)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.5.1...v28.5.2)\n\n####
          28.5.2\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.2)\n-
          [moby/moby, 28.5.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.2)\n\n>
          \\[!CAUTION]\n> This release contains fixes for three high-severity security
          vulnerabilities in runc:\n>\n> - [CVE-2025-31133](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2)\n>
          - [CVE-2025-52565](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r)\n>
          - [CVE-2025-52881](https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm)\n>\n>
          All three vulnerabilities ultimately allow (through different methods) for
          full container breakouts by bypassing runc's restrictions for writing to
          arbitrary `/proc` files.\n\n##### Packaging updates\n\n- Update runc to
          [v1.3.3](https://redirect.github.com/opencontainers/runc/releases/tag/v1.3.3).
          [moby/moby#51394](https://redirect.github.com/moby/moby/pull/51394)\n\n#####
          Bug fixes and enhancements\n\n- dockerd-rootless.sh: if slirp4netns is not
          installed, try using pasta (passt). [moby/moby#51162](https://redirect.github.com/moby/moby/pull/51162)\n-
          Update Go runtime to [1.24.9](https://go.dev/doc/devel/release#go1.24.9).
          [moby/moby#51387](https://redirect.github.com/moby/moby/pull/51387), [docker/cli#6613](https://redirect.github.com/docker/cli/pull/6613)\n\n#####
          Deprecations\n\n- Go-SDK: cli/command/image/build: deprecate `DefaultDockerfileName`,
          `DetectArchiveReader`, `WriteTempDockerfile`, `ResolveAndValidateContextPath`.
          These utilities were only used internally and will be removed in the next
          release. [docker/cli#6610](https://redirect.github.com/docker/cli/pull/6610)\n-
          Go-SDK: cli/command/image/build: deprecate IsArchive utility. [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n-
          Go-SDK: opts: deprecate `ValidateMACAddress`. [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n-
          Go-SDK: opts: deprecate ListOpts.Delete(). [docker/cli#6560](https://redirect.github.com/docker/cli/pull/6560)\n\n###
          [`v28.5.1`](https://redirect.github.com/moby/moby/releases/tag/v28.5.1)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.5.0...v28.5.1)\n\n####
          28.5.1\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.1)\n-
          [moby/moby, 28.5.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.1)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.5.1/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.5.1/docs/api/version-history.md).\n\n#####
          Bug fixes and enhancements\n\n- Update BuildKit to v0.25.1. [moby/moby#51137](https://redirect.github.com/moby/moby/pull/51137)\n-
          Update Go runtime to [1.24.8](https://go.dev/doc/devel/release#go1.24.8).
          [moby/moby#51133](https://redirect.github.com/moby/moby/pull/51133), [docker/cli#6541](https://redirect.github.com/docker/cli/pull/6541)\n\n#####
          Deprecations\n\n- api/types/image: InspectResponse: deprecate `Parent` and
          `DockerVersion` fields. [moby/moby#51105](https://redirect.github.com/moby/moby/pull/51105)\n-
          api/types/plugin: deprecate `Config.DockerVersion` field. [moby/moby#51110](https://redirect.github.com/moby/moby/pull/51110)\n\n###
          [`v28.5.0`](https://redirect.github.com/moby/moby/releases/tag/v28.5.0)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.4.0...v28.5.0)\n\n###
          28.5.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.5.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.0)\n-
          [moby/moby, 28.5.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.5.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.5.0/docs/api/version-history.md).\n\n#####
          Bug fixes and enhancements\n\n- Don't print warnings in `docker info` for
          broken symlinks in CLI-plugin directories. [docker/cli#6476](https://redirect.github.com/docker/cli/pull/6476)\n-
          Fix a panic during `stats` on empty event `Actor.ID`. [docker/cli#6471](https://redirect.github.com/docker/cli/pull/6471)\n\n#####
          Packaging updates\n\n- Remove support for legacy CBC cipher suites. [docker/cli#6474](https://redirect.github.com/docker/cli/pull/6474)\n-
          Update Buildkit to [v0.25.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.25.0).
          [moby/moby#51075](https://redirect.github.com/moby/moby/pull/51075)\n- Update
          Dockerfile syntax to [v1.19.0](https://redirect.github.com/moby/buildkit/releases/tag/dockerfile%2F1.19.0).
          [moby/moby#51075](https://redirect.github.com/moby/moby/pull/51075)\n\n#####
          Networking\n\n- Eliminated harmless warning about deletion of `endpoint_count`
          from the data store. [moby/moby#51064](https://redirect.github.com/moby/moby/pull/51064)\n-
          Fix a bug causing IPAM plugins to not be loaded on Windows. [moby/moby#51035](https://redirect.github.com/moby/moby/pull/51035)\n\n#####
          API\n\n- Deprecate support for kernel memory TCP accounting (`KernelMemoryTCP`).
          [moby/moby#51067](https://redirect.github.com/moby/moby/pull/51067)\n- Fix
          `GET containers/{name}/checkpoints` returning `null` instead of empty JSON
          array when there are no checkpoints. [moby/moby#51052](https://redirect.github.com/moby/moby/pull/51052)\n\n#####
          Go SDK\n\n- cli-plugins/plugin: Run: allow customizing the CLI. [docker/cli#6481](https://redirect.github.com/docker/cli/pull/6481)\n-
          cli/command: add `WithUserAgent` option. [docker/cli#6477](https://redirect.github.com/docker/cli/pull/6477)\n\n#####
          Deprecations\n\n- Go-SDK: cli/command: deprecate `DockerCli.Apply`. This
          method is no longer used and will be removed in the next release if there
          are no remaining uses. [docker/cli#6497](https://redirect.github.com/docker/cli/pull/6497)\n-
          Go-SDK: cli/command: deprecate `DockerCli.ContentTrustEnabled`. This method
          is no longer used and will be removed in the next release. [docker/cli#6495](https://redirect.github.com/docker/cli/pull/6495)\n-
          Go-SDK: cli/command: deprecate `DockerCli.DefaultVersion`. This method is
          no longer used and will be removed in the next release. [docker/cli#6491](https://redirect.github.com/docker/cli/pull/6491)\n-
          Go-SDK: cli/command: deprecate `ResolveDefaultContext` utility. [docker/cli#6529](https://redirect.github.com/docker/cli/pull/6529)\n-
          Go-SDK: cli/command: deprecate `WithContentTrustFromEnv`, `WithContentTrust`
          options. These options were used internally, and will be removed in the
          next release.. [docker/cli#6489](https://redirect.github.com/docker/cli/pull/6489)\n-
          Go-SDK: cli/manifest/store: deprecate `IsNotFound()`. [docker/cli#6514](https://redirect.github.com/docker/cli/pull/6514)\n-
          Go-SDK: templates: deprecate NewParse() function. [docker/cli#6469](https://redirect.github.com/docker/cli/pull/6469)\n\n###
          [`v28.4.0`](https://redirect.github.com/moby/moby/releases/tag/v28.4.0)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.3.3...v28.4.0)\n\n####
          28.4.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.4.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.4.0)\n-
          [moby/moby, 28.4.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.4.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.4.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.4.0/docs/api/version-history.md).\n\n#####
          New\n\n- Allow Docker CLI to set the `GODEBUG` environment variable when
          the key-value pair (`\"GODEBUG\":\"...\"`) exists inside the docker context
          metadata. [docker/cli#6399](https://redirect.github.com/docker/cli/pull/6399)\n\n#####
          Bug fixes and enhancements\n\n- Add shell completion for `docker pull` and
          `docker image pull`. [docker/cli#6420](https://redirect.github.com/docker/cli/pull/6420)\n-
          Fix a regression in v28.3.3 that could cause a panic on `docker push` if
          the client did not send an `X-Registry-Auth` header. [moby/moby#50738](https://redirect.github.com/moby/moby/pull/50738)\n-
          Windows: Potentially fix an issue with \"access denied\" error when pulling
          images. [moby/moby#50871](https://redirect.github.com/moby/moby/pull/50871)\n-
          containerd image store: Fix `docker history` failing with `snapshot X does
          not exist` when calling on a non-native image that was built locally. [moby/moby#50875](https://redirect.github.com/moby/moby/pull/50875)\n-
          containerd image store: Fix `docker image prune` to emit correct `untag`
          and `delete` events and list only the deleted images root digests instead
          of every blob. [moby/moby#50837](https://redirect.github.com/moby/moby/pull/50837)\n-
          Remove interactive login prompt from `docker push` and `docker pull` after
          a failure caused by missing authentication. [docker/cli#6256](https://redirect.github.com/docker/cli/pull/6256)\n\n#####
          Packaging updates\n\n- Update BuildKit to [v0.24.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.24.0).
          [moby#50888](https://redirect.github.com/moby/moby/pull/50888)\n- Update
          Go runtime to [1.24.7](https://go.dev/doc/devel/release#go1.24.6). [moby/moby#50889](https://redirect.github.com/moby/moby/pull/50889),
          [docker/cli#6422](https://redirect.github.com/docker/cli/pull/6422)\n- Update
          `runc` to [v1.3.0](https://redirect.github.com/opencontainers/runc/releases/tag/v1.3.0).
          [moby/moby#50699](https://redirect.github.com/moby/moby/pull/50699)\n- Update
          containerd (static binaries only) to [v1.7.28](https://redirect.github.com/containerd/containerd/releases/tag/v1.7.28).
          [moby/moby#50700](https://redirect.github.com/moby/moby/pull/50700)\n\n#####
          Networking\n\n- Fix an issue that could cause slow container restart on
          live-restore. [moby/moby#50829](https://redirect.github.com/moby/moby/pull/50829)\n\n#####
          API\n\n- Update deprecation message for `AuthConfig.Email` field. [moby/moby#50797](https://redirect.github.com/moby/moby/pull/50797)\n\n#####
          Go SDK\n\n- Deprecate profiles package which got migrated to [github.com/moby/profiles](https://redirect.github.com/moby/profiles).
          [moby/moby#50513](https://redirect.github.com/moby/moby/pull/50513)\n\n#####
          Deprecations\n\n- Deprecate special handling for quoted values for the `--tlscacert`,
          `--tlscert`, and `--tlskey` command-line flags. [docker/cli#6291](https://redirect.github.com/docker/cli/pull/6291)\n-
          Mark legacy links env vars (`DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS`)
          as deprecated in v28.4 and set for removal in v30.0. [docker/cli#6309](https://redirect.github.com/docker/cli/pull/6309)\n-
          Go-SDK: Deprecate field `NetworkSettingsBase.Bridge`, struct `NetworkSettingsBase`,
          all the fields of `DefaultNetworkSettings`, and struct `DefaultNetworkSettings`.
          [moby/moby#50839](https://redirect.github.com/moby/moby/pull/50839)\n- Go-SDK:
          api/types: `build.CacheDiskUsage`,  `container.DiskUsage`, `images.DiskUsage`
          and `volumes.DiskUsage` are now deprecated and will be removed in the next
          major release. [moby/moby#50768](https://redirect.github.com/moby/moby/pull/50768)\n-
          Go-SDK: cli-plugins/manager: deprecate `ReexecEnvvar`. [docker/cli#6411](https://redirect.github.com/docker/cli/pull/6411)\n-
          Go-SDK: cli-plugins/manager: deprecate annotation aliases (`CommandAnnotationPlugin`,
          `CommandAnnotationPluginVendor`, `CommandAnnotationPluginVersion`, `CommandAnnotationPluginInvalid`,
          `CommandAnnotationPluginCommandPath`) in favor of their equivalent in `cli-plugins/manager/metadata`.
          [docker/cli#6298](https://redirect.github.com/docker/cli/pull/6298)\n- Go-SDK:
          cli-plugins/manager: deprecate metadata aliases (`NamePrefix`, `MetadataSubcommandName`,
          `HookSubcommandName`, `Metadata`, `ReexecEnvvar`) in favor of their equivalent
          in `cli-plugins/manager/metadata`. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli-plugins/manager: remove `Candidate` interface, which was only
          for internal use. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli-plugins/manager: remove `NewPluginError` function, which was
          only for internal use. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli-plugins/manager: remove deprecated `ResourceAttributesEnvvar`
          const. [docker/cli#6269](https://redirect.github.com/docker/cli/pull/6269)\n-
          Go-SDK: cli/command/builder: deprecate `NewBuilderCommand` and `NewBakeStubCommand`.
          These functions will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/builder: deprecate `NewPruneCommand`. [docker/cli#6343](https://redirect.github.com/docker/cli/pull/6343)\n-
          Go-SDK: cli/command/checkpoint: deprecate `NewCheckpointCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/checkpoint: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/completion: deprecate `NoComplete`. [docker/cli#6405](https://redirect.github.com/docker/cli/pull/6405)\n-
          Go-SDK: cli/command/completion: remove deprecated `ValidArgsFn`. [docker/cli#6259](https://redirect.github.com/docker/cli/pull/6259)\n-
          Go-SDK: cli/command/config: deprecate `NewConfigCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/config: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/config: deprecate `RunConfigCreate`,  `CreateOptions`, `RunConfigInspect`,
          `InspectOptions`, `RunConfigList`, `ListOptions`, `RunConfigRemove`, and
          `RemoveOptions`. [docker/cli#6369](https://redirect.github.com/docker/cli/pull/6369)\n-
          Go-SDK: cli/command/container: deprecate `NewBuildCommand`, `NewPullCommand`,
          `NewPushCommand`, `NewImagesCommand`, `NewImageCommand`, `NewHistoryCommand`,
          `NewImportCommand`, `NewLoadCommand`, `NewRemoveCommand`, `NewSaveCommand`,
          `NewTagCommand`, `NewPruneCommand`. These functions will be removed in the
          next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/container: deprecate `NewDiffFormat`, `DiffFormatWrite`.
          These functions were only used internally and will be removed in the next
          release. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/container: deprecate `NewRunCommand`, `NewExecCommand`,
          `NewPsCommand`, `NewContainerCommand`, `NewAttachCommand`, `NewCommitCommand`,
          `NewCopyCommand`, `NewCreateCommand`, `NewDiffCommand`, `NewExportCommand`,
          `NewKillCommand`, `NewLogsCommand`, `NewPauseCommand`, `NewPortCommand`,
          `NewRenameCommand`, `NewRestartCommand`, `NewRmCommand`, `NewStartCommand`,
          `NewStatsCommand`, `NewStopCommand`, `NewTopCommand`, `NewUnpauseCommand`,
          `NewUpdateCommand`, `NewWaitCommand`, `NewPruneCommand`. These functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/context: deprecate `NewContextCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/context: deprecate `RunCreate` and `CreateOptions`.
          [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n- Go-SDK:
          cli/command/context: deprecate `RunExport` and `ExportOptions`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/context: deprecate `RunImport`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/context: deprecate `RunRemove` and `RemoveOptions`.
          [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n- Go-SDK:
          cli/command/context: deprecate `RunUpdate` and `UpdateOptions`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/context: deprecate `RunUse`. [docker/cli#6403](https://redirect.github.com/docker/cli/pull/6403)\n-
          Go-SDK: cli/command/image: deprecate `AuthResolver` utility. [docker/cli#6357](https://redirect.github.com/docker/cli/pull/6357)\n-
          Go-SDK: cli/command/image: deprecate `NewHistoryFormat`, `HistoryWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341), [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/manifest: deprecate `NewManifestCommand`. This functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/network: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/network: deprecate `NewNetworkCommand`. These functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/node: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/node: deprecate `NewNodeCommand`. This functions will be removed
          in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/plugin: deprecate `NewFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/plugin: deprecate `NewPluginCommand`. This function
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/registry: deprecate `NewLoginCommand`, `NewLogoutCommand`,
          `NewSearchCommand`. These functions will be removed in the next release.
          [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n- Go-SDK:
          cli/command/registry: deprecate `NewSearchFormat`, `SearchWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/registry: deprecate `OauthLoginEscapeHatchEnvVar` const.
          [docker/cli#6413](https://redirect.github.com/docker/cli/pull/6413)\n- Go-SDK:
          cli/command/secret: deprecate `NewFormat`, `FormatWrite`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/secret: deprecate `NewSecretCommand`. This functions will be
          removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/service: deprecate `NewFormat`, `InspectFormatWrite`.
          [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n- Go-SDK:
          cli/command/service: deprecate `NewServiceCommand`. This function will be
          removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/stack: deprecate `NewStackCommand`. This function will
          be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/stack: deprecate `RunList`, `RunServices`. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: cli/command/swarm: deprecate `NewSwarmCommand`. This function will
          be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/system: deprecate `NewVersionCommand`, `NewInfoCommand`,
          `NewSystemCommand`, `NewEventsCommand`, `NewInspectCommand`. These functions
          will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/task: deprecate `NewTaskFormat`, `FormatWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/trust: deprecate `NewTrustCommand`. This function will
          be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command/trust: deprecate `SignedTagInfo`, `SignerInfo`, `NewTrustTagFormat`,
          `NewSignerInfoFormat`, `TagWrite`, `SignerInfoWrite`. [docker/cli#6341](https://redirect.github.com/docker/cli/pull/6341)\n-
          Go-SDK: cli/command/volume: deprecate `NewVolumeCommand`, `NewPruneCommand`.
          These functions will be removed in the next release. [docker/cli#6312](https://redirect.github.com/docker/cli/pull/6312)\n-
          Go-SDK: cli/command: remove `AddTrustSigningFlags`,  `AddTrustVerificationFlags`,
          and `AddPlatformFlag` utilities, which were only used internally. [docker/cli#6311](https://redirect.github.com/docker/cli/pull/6311)\n-
          Go-SDK: cli/command: remove deprecated `ConfigureAuth` utility. [docker/cli#6257](https://redirect.github.com/docker/cli/pull/6257)\n-
          Go-SDK: cli/command: remove deprecated `CopyToFile` utility. [docker/cli#6257](https://redirect.github.com/docker/cli/pull/6257)\n-
          Go-SDK: cli/config/types: update deprecation message for `AuthConfig.Email`
          field. [docker/cli#6392](https://redirect.github.com/docker/cli/pull/6392)\n-
          Go-SDK: cli: deprecate `VisitAll`, `DisableFlagsInUseLine` utilities. These
          utilities were only used internally and will be removed in the next release.
          [docker/cli#6276](https://redirect.github.com/docker/cli/pull/6276)\n- Go-SDK:
          cli: remove `HasCompletionArg` utility. This utility was only used internally.
          [docker/cli#6276](https://redirect.github.com/docker/cli/pull/6276)\n- Go-SDK:
          deprecate `cli/command.RegistryAuthenticationPrivilegedFunc`. [docker/cli#6256](https://redirect.github.com/docker/cli/pull/6256)\n-
          Go-SDK: deprecate cli/command/stack/formatter. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: deprecate cli/command/stack/loader. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: deprecate cli/command/stack/options. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: deprecate cli/command/stack/swarm. [docker/cli#6391](https://redirect.github.com/docker/cli/pull/6391)\n-
          Go-SDK: opts: deprecate `NewNamedListOptsRef`, `NewNamedMapOpts`, `NamedListOpts`,
          `NamedMapOpts`, and `NamedOption`. These types and functions are no longer
          used and will be removed in the next release. [docker/cli#6292](https://redirect.github.com/docker/cli/pull/6292)\n-
          Go-SDK: opts: deprecate `ParseEnvFile` in favour of `kvfile.Parse`. [docker/cli#6381](https://redirect.github.com/docker/cli/pull/6381)\n-
          Go-SDK: opts: deprecate `QuotedString`. This utility is no longer used,
          and will be removed in the next release. [docker/cli#6275](https://redirect.github.com/docker/cli/pull/6275)\n-
          Go-SDK: opts: deprecate `ValidateHost` utility. This function is no longer
          used, and will be removed in the next release. [docker/cli#6280](https://redirect.github.com/docker/cli/pull/6280)\n-
          Go-SDK: pkg/jsonmessage: deprecate the `JSONMessage.From`, `JSONMessage.Time`,
          and `JSONMessage.TimeNano` fields, as they are no longer returned by the
          API for progress messages. Use the `events.Message` type instead to unmarshal
          the `/events` response. [moby/moby#50762](https://redirect.github.com/moby/moby/pull/50762)\n-
          Go-SDK: the cli/registry/client package is deprecated and will be removed
          in the next release. [docker/cli#6313](https://redirect.github.com/docker/cli/pull/6313)\n\n###
          [`v28.3.3`](https://redirect.github.com/moby/moby/releases/tag/v28.3.3)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.3.2...v28.3.3)\n\n####
          28.3.3\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.3 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.3)\n-
          [moby/moby, 28.3.3 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.3)\n\n#####
          Security\n\nThis release fixes an issue where, after a firewalld reload,
          published container ports could be accessed directly from the local network,
          even when they were intended to be accessible only via a loopback address.
          [CVE-2025-54388](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54388)
          /  [GHSA-x4rx-4gw3-53p4](https://redirect.github.com/moby/moby/security/advisories/GHSA-x4rx-4gw3-53p4)
          / [moby/moby#50506](https://redirect.github.com/moby/moby/pull/50506).\n\n#####
          Packaging updates\n\n- Update Buildx to [v0.26.1](https://redirect.github.com/docker/buildx/releases/tag/v0.26.1).
          [docker/docker-ce-packaging#1230](https://redirect.github.com/docker/docker-ce-packaging/pull/1230)\n-
          Update Compose to [v2.39.1](https://redirect.github.com/docker/compose/releases/tag/v2.39.1).
          [docker/docker-ce-packaging#1234](https://redirect.github.com/docker/docker-ce-packaging/pull/1234)\n-
          Update Docker Model CLI plugin to [v0.1.36](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.36).
          [docker/docker-ce-packaging#1233](https://redirect.github.com/docker/docker-ce-packaging/pull/1233)\n\n#####
          Go SDK\n\n- cli/command/formatter: add `TrunateID()` utility as alternative
          for `github.com/docker/docker/pkg/stringid.TrunateID()`. [docker/cli#6180](https://redirect.github.com/docker/cli/pull/6180)\n\n###
          [`v28.3.2`](https://redirect.github.com/moby/moby/releases/tag/v28.3.2):
          28.3.2\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.3.1...v28.3.2)\n\n####
          28.3.2\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.2)\n-
          [moby/moby, 28.3.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.2)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.2/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.2/docs/api/version-history.md).\n\n#####
          Bug fixes and enhancements\n\n- Fix `--use-api-socket` not working correctly
          when targeting a remote daemon. [docker/cli#6157](https://redirect.github.com/docker/cli/pull/6157)\n-
          Fix stray \"otel error\" logs being printed if debug logging is enabled.
          [docker/cli#6160](https://redirect.github.com/docker/cli/pull/6160)\n- Quote
          SSH arguments when connecting to a remote daemon over an SSH connection
          to avoid unexpected expansion. [docker/cli#6147](https://redirect.github.com/docker/cli/pull/6147)\n-
          Warn when `DOCKER_AUTH_CONFIG` is set during `docker login` and `docker
          logout`. [docker/cli#6163](https://redirect.github.com/docker/cli/pull/6163)\n\n#####
          Packaging updates\n\n- Update Compose to [v2.38.2](https://redirect.github.com/docker/compose/releases/tag/v2.38.2).
          [docker/docker-ce-packaging#1225](https://redirect.github.com/docker/docker-ce-packaging/pull/1225)\n-
          Update Docker Model CLI plugin to [v0.1.33](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.33).
          [docker/docker-ce-packaging#1227](https://redirect.github.com/docker/docker-ce-packaging/pull/1227)\n-
          Update Go runtime to 1.24.5. [moby/moby#50354](https://redirect.github.com/moby/moby/pull/50354)\n\n###
          [`v28.3.1`](https://redirect.github.com/moby/moby/releases/tag/v28.3.1):
          28.3.1\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.3.0...v28.3.1)\n\n####
          28.3.1\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.1)\n-
          [moby/moby, 28.3.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.1)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.1/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.1/docs/api/version-history.md).\n\n#####
          Packaging updates\n\n- Update BuildKit to [v0.23.2](https://redirect.github.com/moby/buildkit/releases/tag/v0.23.2).
          [moby/moby#50309](https://redirect.github.com/moby/moby/pull/50309)\n- Update
          Compose to [v2.38.1](https://redirect.github.com/docker/compose/releases/tag/v2.38.1).
          [docker/docker-ce-packaging#1221](https://redirect.github.com/docker/docker-ce-packaging/pull/1221)\n-
          Update Model to v0.1.32 which adds the support for the new top-level `models:`
          key in Docker Compose. [docker/docker-ce-packaging#1222](https://redirect.github.com/docker/docker-ce-packaging/pull/1222)\n\n###
          [`v28.3.0`](https://redirect.github.com/moby/moby/releases/tag/v28.3.0):
          28.3.0\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.2.2...v28.3.0)\n\n####
          28.3.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.3.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.3.0)\n-
          [moby/moby, 28.3.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.3.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.3.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.3.0/docs/api/version-history.md).\n\n#####
          New\n\n- Add support for AMD GPUs in `docker run --gpus`. [moby/moby#49952](https://redirect.github.com/moby/moby/pull/49952)\n-
          Use `DOCKER_AUTH_CONFIG` as a credential store. [docker/cli#6008](https://redirect.github.com/docker/cli/pull/6008)\n\n#####
          Bug fixes and enhancements\n\n- Ensure that the state of the container in
          the daemon database (used by [/containers/json](https://docs.docker.com/reference/api/engine/version/v1.49/#tag/Container/operation/ContainerList)
          API) is up to date when the container is stopped using the [/containers/{id}/stop](https://docs.docker.com/reference/api/engine/version/v1.49/#tag/Container/operation/ContainerStop)
          API (before response of API). [moby/moby#50136](https://redirect.github.com/moby/moby/pull/50136)\n-
          Fix `docker image inspect inspect` omitting empty fields. [moby/moby#50135](https://redirect.github.com/moby/moby/pull/50135)\n-
          Fix `docker images --tree` not marking images as in-use when the containerd
          image store is disabled. [docker/cli#6140](https://redirect.github.com/docker/cli/pull/6140)\n-
          Fix `docker pull/push` hang in non-interactive when authentication is required
          caused by prompting for login credentials. [docker/cli#6141](https://redirect.github.com/docker/cli/pull/6141)\n-
          Fix a potential resource leak when a node leaves a Swarm. [moby/moby#50115](https://redirect.github.com/moby/moby/pull/50115)\n-
          Fix a regression where a login prompt on `docker pull` would show Docker
          Hub-specific hints when logging in on other registries. [docker/cli#6135](https://redirect.github.com/docker/cli/pull/6135)\n-
          Fix an issue where all new tasks in the Swarm could get stuck in the PENDING
          state forever after scaling up a service with placement preferences. [moby/moby#50211](https://redirect.github.com/moby/moby/pull/50211)\n-
          Remove an undocumented, hidden, top-level `docker remove` command that was
          accidentally introduced in Docker 23.0. [docker/cli#6144](https://redirect.github.com/docker/cli/pull/6144)\n-
          Validate registry-mirrors configuration as part of `dockerd --validate`
          and improve error messages for invalid mirrors. [moby/moby#50240](https://redirect.github.com/moby/moby/pull/50240)\n-
          `dockerd-rootless-setuptool.sh`: Fix the script from silently returning
          with no error message when subuid/subgid system requirements are not satisfied.
          [moby/moby#50059](https://redirect.github.com/moby/moby/pull/50059)\n- containerd
          image store: Fix `docker push` not creating a tag on the remote repository.
          [moby/moby#50199](https://redirect.github.com/moby/moby/pull/50199)\n- containerd
          image store: Improve handling of errors returned by the token server during
          `docker pull/push`. [moby/moby#50176](https://redirect.github.com/moby/moby/pull/50176)\n\n#####
          Packaging updates\n\n- Allow customizing containerd service name for OpenRC.
          [moby/moby#50156](https://redirect.github.com/moby/moby/pull/50156)\n- Update
          BuildKit to [v0.23.1](https://redirect.github.com/moby/buildkit/releases/tag/v0.23.1).
          [moby/moby#50243](https://redirect.github.com/moby/moby/pull/50243)\n- Update
          Buildx to [v0.25.0](https://redirect.github.com/docker/buildx/releases/tag/v0.25.0).
          [docker/docker-ce-packaging#1217](https://redirect.github.com/docker/docker-ce-packaging/pull/1217)\n-
          Update Compose to [v2.37.2](https://redirect.github.com/docker/compose/releases/tag/v2.37.2).
          [docker/docker-ce-packaging#1219](https://redirect.github.com/docker/docker-ce-packaging/pull/1219)\n-
          Update Docker Model CLI plugin to [v0.1.30](https://redirect.github.com/docker/model-cli/releases/tag/v0.1.30).
          [docker/docker-ce-packaging#1218](https://redirect.github.com/docker/docker-ce-packaging/pull/1218)\n-
          Update Go runtime to [1.24.4](https://go.dev/doc/devel/release#go1.24.4).
          [docker/docker-ce-packaging#1213](https://redirect.github.com/docker/docker-ce-packaging/pull/1213),
          [moby/moby#50153](https://redirect.github.com/moby/moby/pull/50153), [docker/cli#6124](https://redirect.github.com/docker/cli/pull/6124)\n\n#####
          Networking\n\n- Revert Swarm related changes added in 28.2.x builds, due
          to a regression reported in [#&#8203;50129](https://redirect.github.com/moby/moby/issues/50129).
          [moby/moby#50169](https://redirect.github.com/moby/moby/pull/50169)\n  -
          Revert: Fix an issue where `docker network inspect --verbose` could sometimes
          crash the daemon ([#&#8203;49937](https://redirect.github.com/moby/moby/pull/49937)).\n
          \ - Revert: Fix an issue where the load-balancer IP address for an overlay
          network would not be released in certain cases if the Swarm was lacking
          an ingress network ([#&#8203;49948](https://redirect.github.com/moby/moby/pull/49948)).\n
          \ - Revert: Improve the reliability of NetworkDB in busy clusters and lossy
          networks ([#&#8203;49932](https://redirect.github.com/moby/moby/pull/49932)).\n
          \ - Revert: Improvements to the reliability and convergence speed of NetworkDB
          ([#&#8203;49939](https://redirect.github.com/moby/moby/pull/49939)).\n-
          Fix an issue that could cause container startup to fail, or lead to failed
          UDP port mappings, when some container ports are mapped to `0.0.0.0` and
          others are mapped to specific host addresses. [moby/moby#50054](https://redirect.github.com/moby/moby/pull/50054)\n-
          The `network inspect` response for an overlay network now reports that `EnableIPv4`
          is true. [moby/moby#50147](https://redirect.github.com/moby/moby/pull/50147)\n-
          Windows: Improve daemon startup time in cases where the host has networks
          of type `\"Mirrored\"`. [moby/moby#50155](https://redirect.github.com/moby/moby/pull/50155)\n-
          Windows: Make sure `docker system prune` and `docker network prune` only
          remove networks created by Docker. [moby/moby#50154](https://redirect.github.com/moby/moby/pull/50154)\n\n#####
          API\n\n- Update API version to 1.51. [moby/moby#50145](https://redirect.github.com/moby/moby/pull/50145)\n-
          `GET /images/json` now sets the value of the `Containers` field for all
          images to the count of containers using the image. [moby/moby#50146](https://redirect.github.com/moby/moby/pull/50146)\n\n#####
          Deprecations\n\n- Empty/nil image config fields in the `GET /images/{name}/json`
          response are now deprecated and will be removed in v29.0. [docker/cli#6129](https://redirect.github.com/docker/cli/pull/6129)\n-
          api/types/container: deprecate `ExecOptions.Detach`. This field is not used,
          and will be removed in a future release. [moby/moby#50219](https://redirect.github.com/moby/moby/pull/50219)\n-
          pkg/idtools: deprecate `IdentityMapping` and `Identity.Chown`. [moby/moby#50210](https://redirect.github.com/moby/moby/pull/50210)\n\n###
          [`v28.2.2`](https://redirect.github.com/moby/moby/releases/tag/v28.2.2):
          28.2.2\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.2.1...v28.2.2)\n\n####
          28.2.2\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.2.2 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.2.2)\n-
          [moby/moby, 28.2.2 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.2.2)\n\n#####
          Bug fixes and enhancements\n\n- containerd image store: Fix a regression
          causing `docker build --push` to fail. This reverts [the fix](https://redirect.github.com/moby/moby/pull/49702)
          for `docker build` not persisting overridden images as dangling. [moby/moby#50105](https://redirect.github.com/moby/moby/pull/50105)\n\n#####
          Networking\n\n- When creating the iptables `DOCKER-USER` chain, do not add
          an explicit `RETURN` rule, allowing users to append as well as insert their
          own rules. Existing rules are not removed on upgrade, but it won't be replaced
          after a reboot. [moby/moby#50098](https://redirect.github.com/moby/moby/pull/50098)\n\n###
          [`v28.2.1`](https://redirect.github.com/moby/moby/releases/tag/v28.2.1):
          28.2.1\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.2.0...v28.2.1)\n\n####
          28.2.1\n\n#### Packaging updates\n\n- Fix packaging regression in [v28.2.0](https://redirect.github.com/moby/moby/releases/tag/v28.2.0)
          which broke creating the `docker` group/user on fresh installations. [docker-ce-packaging#1209](https://redirect.github.com/docker/docker-ce-packaging/issues/1209)\n\n###
          [`v28.2.0`](https://redirect.github.com/moby/moby/releases/tag/v28.2.0):
          28.2.0\n\n[Compare Source](https://redirect.github.com/moby/moby/compare/v28.1.1...v28.2.0)\n\n####
          28.2.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.2.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.2.0)\n-
          [moby/moby, 28.2.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.2.0)\n-
          Deprecated and removed features, see [Deprecated Features](https://redirect.github.com/docker/cli/blob/v28.2.0/docs/deprecated.md).\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.2.0/docs/api/version-history.md).\n\n>
          \\[!NOTE]\n> RHEL packages are currently not available and will be released
          later.\n\n##### New\n\n- Add `{{.Platform}}` as formatting option for `docker
          ps` to show the platform of the image the container is running. [docker/cli#6042](https://redirect.github.com/docker/cli/pull/6042)\n-
          Add support for relative parent paths (`../`) on bind mount sources when
          using `docker run/create` with `-v/--volume` or `--mount type=bind` options.
          [docker/cli#4966](https://redirect.github.com/docker/cli/pull/4966)\n- CDI
          is now enabled by default. [moby/moby#49963](https://redirect.github.com/moby/moby/pull/49963)\n-
          Show discovered CDI devices in `docker info`. [docker/cli#6078](https://redirect.github.com/docker/cli/pull/6078)\n-
          `docker image rm`: add `--platform` option to remove a variant from multi-platform
          images. [docker/cli#6109](https://redirect.github.com/docker/cli/pull/6109)\n-
          containerd image store: Initial BuildKit support for building Windows container
          images on Windows (requires an opt-in with `DOCKER_BUILDKIT=1`). [moby/moby#49740](https://redirect.github.com/moby/moby/pull/49740)\n\n#####
          Bug fixes and enhancements\n\n- Add a new log option for fluentd log driver
          (`fluentd-write-timeout`), which enables specifying write timeouts for fluentd
          connections. [moby/moby#49911](https://redirect.github.com/moby/moby/pull/49911)\n-
          Add support for `DOCKER_AUTH_CONFIG` for the experimental `--use-api-socket`
          option. [docker/cli#6019](https://redirect.github.com/docker/cli/pull/6019)\n-
          Fix `docker exec` waiting for 10 seconds if a non-existing user or group
          was specified. [moby/moby#49868](https://redirect.github.com/moby/moby/pull/49868)\n-
          Fix `docker swarm init` ignoring `cacert` option of `--external-ca`. [docker/cli#5995](https://redirect.github.com/docker/cli/pull/5995)\n-
          Fix an issue where the CLI would not correctly save the configuration file
          (`~/.docker/config.json`) if it was a relative symbolic link. [docker/cli#5282](https://redirect.github.com/docker/cli/pull/5282)\n-
          Fix containers with `--restart always` policy using CDI devices failing
          to start on daemon restart. [moby/moby#49990](https://redirect.github.com/moby/moby/pull/49990)\n-
          Fix shell-completion to only complete some flags once, even though they
          can be set multiple times. [docker/cli#6030](https://redirect.github.com/docker/cli/pull/6030)\n-
          Fix the `plugin does not implement PluginAddr interface` error for Swarm
          CSI drivers. [moby/moby#49961](https://redirect.github.com/moby/moby/pull/49961)\n-
          Improve `docker login` error messages for invalid options. [docker/cli#6036](https://redirect.github.com/docker/cli/pull/6036)\n-
          Make sure the terminal state is restored if the CLI is forcefully terminated.
          [docker/cli#6058](https://redirect.github.com/docker/cli/pull/6058)\n- Update
          the default seccomp profile to match the libseccomp v2.6.0. The new syscalls
          are: `listmount`, `statmount`, `lsm_get_self_attr`, `lsm_list_modules`,
          `lsm_set_self_attr`, `mseal`, `uretprobe`, `riscv_hwprobe`, `getxattrat`,
          `listxattrat`, `removexattrat`, and `setxattrat`. This prevents containers
          from receiving EPERM errors when using them. [moby/moby#50077](https://redirect.github.com/moby/moby/pull/50077)\n-
          `docker inspect`: add shell completion, improve flag-description for `--type`
          and improve validation. [docker/cli#6052](https://redirect.github.com/docker/cli/pull/6052)\n-
          containerd image store: Enable BuildKit garbage collector by default. [moby/moby#49899](https://redirect.github.com/moby/moby/pull/49899)\n-
          containerd image store: Fix `docker build` not persisting overridden images
          as dangling. [moby/moby#49702](https://redirect.github.com/moby/moby/pull/49702)\n-
          containerd image store: Fix `docker system df` reporting a negative reclaimable
          space amount. [moby/moby#49707](https://redirect.github.com/moby/moby/pull/49707)\n-
          containerd image store: Fix duplicate `PUT` requests when pushing a multi-platform
          image. [moby/moby#49949](https://redirect.github.com/moby/moby/pull/49949)\n\n#####
          Packaging updates\n\n- Drop Ubuntu 20.04 \"Focal\" packages as it reached
          end of life. [docker/docker-ce-packaging#1200](https://redirect.github.com/docker/docker-ce-packaging/pull/1200)\n-
          Fix install location for RPM-based `docker-ce` man-pages. [docker/docker-ce-packaging#1203](https://redirect.github.com/docker/docker-ce-packaging/pull/1203)\n-
          Update BuildKit to [v0.22.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.22.0).
          [moby/moby#50046](https://redirect.github.com/moby/moby/pull/50046)\n- Update
          Buildx to [v0.24.0](https://redirect.github.com/docker/buildx/releases/tag/v0.24.0).
          [docker/docker-ce-packaging#1205](https://redirect.github.com/docker/docker-ce-packaging/pull/1205)\n-
          Update Compose to [v2.36.2](https://redirect.github.com/docker/compose/releases/tag/v2.36.2).
          [docker/docker-ce-packaging#1208](https://redirect.github.com/docker/docker-ce-packaging/pull/1208)\n-
          Update Go runtime to [1.24.3](https://go.dev/doc/devel/release#go1.24.3).
          [docker/docker-ce-packaging#1192](https://redirect.github.com/docker/docker-ce-packaging/pull/1192),
          [docker/cli#6060](https://redirect.github.com/docker/cli/pull/6060), [moby/moby#49174](https://redirect.github.com/moby/moby/pull/49174)\n\n#####
          Networking\n\n- Add bridge network option `\"com.docker.network.bridge.trusted_host_interfaces\"`,
          accepting a colon-separated list of interface names. These interfaces have
          direct access to published ports on container IP addresses. [moby/moby#49832](https://redirect.github.com/moby/moby/pull/49832)\n-
          Add daemon option `\"allow-direct-routing\"` to disable filtering of packets
          from outside the host addressed directly to containers. [moby/moby#49832](https://redirect.github.com/moby/moby/pull/49832)\n-
          Do not display network options `com.docker.network.enable_ipv4` or `com.docker.network.enable_ipv6`
          in inspect output if they have been overridden by `EnableIPv4` or `EnableIPv6`
          in the network create request. [moby/moby#49866](https://redirect.github.com/moby/moby/pull/49866)\n-
          Fix an issue that could cause network deletion to fail after a daemon restart,
          with error \"has active endpoints\" listing empty endpoint names. [moby/moby#49901](https://redirect.github.com/moby/moby/pull/49901)\n-
          Fix an issue where `docker network inspect --verbose` could sometimes crash
          the daemon. [moby/moby#49937](https://redirect.github.com/moby/moby/pull/49937)\n-
          Fix an issue where the load-balancer IP address for an overlay network would
          not be released in certain cases if the Swarm was lacking an ingress network.
          [moby/moby#49948](https://redirect.github.com/moby/moby/pull/49948)\n- Improve
          the reliability of NetworkDB in busy clusters and lossy networks. [moby/moby#49932](https://redirect.github.com/moby/moby/pull/49932)\n-
          Improvements to the reliability and convergence speed of NetworkDB. [moby/moby#49939](https://redirect.github.com/moby/moby/pull/49939)\n\n#####
          API\n\n- Update API version to `1.50`.\n- `DELETE /images/{name}` now supports
          a `platforms` query parameter. It accepts an array of JSON-encoded OCI Platform
          objects, allowing for selecting a specific platforms to delete content for.
          [moby/moby#49982](https://redirect.github.com/moby/moby/pull/49982)\n- `GET
          /info` now includes a `DiscoveredDevices` field. This is an array of `DeviceInfo`
          objects, each providing details about a device discovered by a device driver.
          [moby/moby#49980](https://redirect.github.com/moby/moby/pull/49980)\n\n#####
          Go SDK\n\n- `api/types/container`: add `ContainerState` and constants for
          container state. [moby/moby#49965](https://redirect.github.com/moby/moby/pull/49965)\n-
          `api/types/container`: change `Summary.State` to a `ContainerState`. [moby/moby#49991](https://redirect.github.com/moby/moby/pull/49991)\n-
          `api/types/container`: define `HealthStatus` type for health-status constants.
          [moby/moby#49876](https://redirect.github.com/moby/moby/pull/49876)\n- `api/types`:
          deprecate `BuildResult`, `ImageBuildOptions`, `ImageBuildOutput`, `ImageBuildResponse`,
          `BuilderVersion`, `BuilderV1`, and `BuilderBuildKi` which were moved to
          `api/types/build`. [moby/moby#50025](https://redirect.github.com/moby/moby/pull/50025)\n\n#####
          Deprecations\n\n- API: Deprecated: `GET /images/{name}/json` no longer returns
          the following fields: `Config`, `Hostname`, `Domainname`, `AttachStdin`,
          `AttachStdout`, `AttachStderr`, `Tty`, `OpenStdin`, `StdinOnce`, `Image`,
          `NetworkDisabled` (already omitted unless set), `MacAddress` (already omitted
          unless set), `StopTimeout` (already omitted unless set). These additional
          fields were included in the response due to an implementation detail but
          not part of the image's Configuration, were marked deprecated in API v1.46,
          and are now omitted. [moby/moby#48457](https://redirect.github.com/moby/moby/pull/48457)\n-
          Go-SDK: Deprecate builder/remotecontext.Rel(). This function was needed
          on older versions of Go, but can now be replaced by `filepath.Rel()`. [moby/moby#49843](https://redirect.github.com/moby/moby/pull/49843)\n-
          Go-SDK: api/types: deprecate `BuildCachePruneOptions` in favor of `api/types/builder.CachePruneOptions`.
          [moby/moby#50015](https://redirect.github.com/moby/moby/pull/50015)\n- Go-SDK:
          api/types: deprecate `BuildCachePruneReport` in favor of `api/types/builder.CachePruneReport`.
          [moby/moby#50015](https://redirect.github.com/moby/moby/pull/50015)\n- Go-SDK:
          api/types: deprecate `NodeListOptions`, `NodeRemoveOptions`, `ServiceCreateOptions`,
          `ServiceUpdateOptions`, `RegistryAuthFromSpec`, `RegistryAuthFromPreviousSpec`,
          `ServiceListOptions`, `ServiceInspectOptions`, and `SwarmUnlockKeyResponse`
          which were moved to `api/types/swarm`. [moby/moby#50027](https://redirect.github.com/moby/moby/pull/50027)\n-
          Go-SDK: api/types: deprecate `SecretCreateResponse`, `SecretListOptions`,
          `ConfigCreateResponse`, `ConfigListOptions` which were moved to api/types/swarm.
          [moby/moby#50024](https://redirect.github.com/moby/moby/pull/50024)\n- Go-SDK:
          client: deprecate `IsErrNotFound`. [moby/moby#50012](https://redirect.github.com/moby/moby/pull/50012)\n-
          Go-SDK: container: deprecate `IsValidHealthString` in favor of `api/types/container.ValidateHealthStatus`.
          [moby/moby#49893](https://redirect.github.com/moby/moby/pull/49893)\n- Go-SDK:
          container: deprecate `StateStatus`, `WaitCondition`, and the related  `WaitConditionNotRunning`,
          `WaitConditionNextExit`, and `WaitConditionRemoved` consts in favor of their
          equivalents in `api/types/container`. [moby/moby#49874](https://redirect.github.com/moby/moby/pull/49874)\n-
          Go-SDK: opts: deprecate `ListOpts.GetAll` in favor of `ListOpts.GetSlice`.
          [docker/cli#6032](https://redirect.github.com/docker/cli/pull/6032)\n- Remove
          deprecated `IsAutomated` formatting placeholder from `docker search`. [docker/cli#6091](https://redirect.github.com/docker/cli/pull/6091)\n-
          Remove fallback for pulling images from non-OCI-compliant `docker.pkg.github.com`
          registry. [moby/moby#50094](https://redirect.github.com/moby/moby/pull/50094)\n-
          Remove support for pulling legacy v2, schema 1 images and remove `DOCKER_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGE`
          environment-variable. [moby/moby#50036](https://redirect.github.com/moby/moby/pull/50036),
          [moby/moby#42300](https://redirect.github.com/moby/moby/pull/42300)\n- The
          `BridgeNfIptables` and `BridgeNfIp6tables` fields in the `GET /info` response
          were deprecated in API v1.48, and are now omitted in API v1.50. [moby/moby#49904](https://redirect.github.com/moby/moby/pull/49904)\n-
          errdefs: Deprecate `errdefs.FromStatusCode`. Use containerd's `errhttp.ToNative`
          instead. [moby/moby#50030](https://redirect.github.com/moby/moby/pull/50030)\n\n###
          [`v28.1.1`](https://redirect.github.com/moby/moby/releases/tag/v28.1.1)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.1.0...v28.1.1)\n\n####
          28.1.1\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.1.1 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.1.1)\n-
          [moby/moby, 28.1.1 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.1.1)\n\n#####
          Bug fixes and enhancements\n\n- Fix `dockerd-rootless-setuptool.sh` incorrectly
          reporting missing `iptables`. [moby/moby#49833](https://redirect.github.com/moby/moby/pull/49833)\n-
          containerd image store: Fix a potential daemon crash when using `docker
          load` with archives containing zero-size tar headers. [moby/moby#49837](https://redirect.github.com/moby/moby/pull/49837)\n\n#####
          Packaging updates\n\n- Update Buildx to [v0.23.0](https://redirect.github.com/docker/buildx/releases/tag/v0.23.0).
          [docker/docker-ce-packaging#1185](https://redirect.github.com/docker/docker-ce-packaging/pull/1185)\n-
          Update Compose to [v2.35.1](https://redirect.github.com/docker/compose/releases/tag/v2.35.1).
          [docker/docker-ce-packaging#1188](https://redirect.github.com/docker/docker-ce-packaging/pull/1188)\n\n#####
          Networking\n\n- Add a warning to a container's `/etc/resolv.conf` when no
          upstream DNS servers were found. [moby/moby#49827](https://redirect.github.com/moby/moby/pull/49827)\n\n###
          [`v28.1.0`](https://redirect.github.com/moby/moby/releases/tag/v28.1.0)\n\n[Compare
          Source](https://redirect.github.com/moby/moby/compare/v28.0.4...v28.1.0)\n\n####
          28.1.0\n\nFor a full list of pull requests and changes in this release,
          refer to the relevant GitHub milestones:\n\n- [docker/cli, 28.1.0 milestone](https://redirect.github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.1.0)\n-
          [moby/moby, 28.1.0 milestone](https://redirect.github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.1.0)\n-
          Changes to the Engine API, see [API version history](https://redirect.github.com/moby/moby/blob/v28.1.0/docs/api/version-history.md).\n\n#####
          New\n\n- Add `docker bake` sub-command as alias for `docker buildx bake`.
          [docker/cli#5947](https://redirect.github.com/docker/cli/pull/5947)\n- Experimental:
          add a new `--use-api-socket` flag on `docker run` and `docker create` to
          enable access to Docker socket from inside a container and to share credentials
          from the host with the container. [docker/cli#5858](https://redirect.github.com/docker/cli/pull/5858)\n-
          `docker image inspect` now supports a `--platform` flag to inspect a specific
          platform of a multi-platform image. [docker/cli#5934](https://redirect.github.com/docker/cli/pull/5934)\n\n#####
          Bug fixes and enhancements\n\n- Add CLI shell-completion for context names.
          [docker/cli#6016](https://redirect.github.com/docker/cli/pull/6016)\n- Fix
          `docker images --tree` not including non-container images content size in
          the total image content size. [docker/cli#6000](https://redirect.github.com/docker/cli/pull/6000)\n-
          Fix `docker load` not preserving replaced images. [moby/moby#49650](https://redirect.github.com/moby/moby/pull/49650)\n-
          Fix `docker login` hints when logging in to a custom registry. [docker/cli#6015](https://redirect.github.com/docker/cli/pull/6015)\n-
          Fix `docker stats` not working properly on machines with high CPU core count.
          [moby/moby#49734](https://redirect.github.com/moby/moby/pull/49734)\n- Fix
          a regression causing `docker pull/push` to fail when interacting with a
          private repository. [docker/cli#5964](https://redirect.github.com/docker/cli/pull/5964)\n-
          Fix an issue preventing rootless Docker setup on a host with no `ip_tables`
          kernel module. [moby/moby#49727](https://redirect.github.com/moby/moby/pull/49727)\n-
          Fix an issue that could lead to unwanted iptables rules being restored and
          never deleted following a firewalld reload. [moby/moby#49728](https://redirect.github.com/moby/moby/pull/49728)\n-
          Improve CLI completion of `docker service scale`. [docker/cli#5968](https://redirect.github.com/docker/cli/pull/5968)\n-
          `docker images --tree` now hides both untagged and dangling images by default.
          [docker/cli#5924](https://redirect.github.com/docker/cli/pull/5924)\n- `docker
          system info` will provide an exit code if a connection cannot be established
          to the Docker daemon. [docker/cli#5918](https://redirect.github.com/docker/cli/pull/5918)\n-
          containerd image store: Fix `image tag` event not being emitted when building
          with BuildKit. [moby/moby#49678](https://redirect.github.com/moby/moby/pull/49678)\n-
          containerd image store: Improve `docker push/pull` handling of remote registry
          errors. [moby/moby#49770](https://redirect.github.com/moby/moby/pull/49770)\n-
          containerd image store: Show pull progress for non-layer image blobs. [moby/moby#49746](https://redirect.github.com/moby/moby/pull/49746)\n\n#####
          Packaging updates\n\n- Add Debian \"Trixie\" packages. [docker/docker-ce-packaging#1181](https://redirect.github.com/docker/docker-ce-packaging/pull/1181)\n-
          Add Fedora 42 packages. [docker/containerd-packaging#418](https://redirect.github.com/docker/containerd-packaging/pull/418),
          [docker/docker-ce-packaging#1169](https://redirect.github.com/docker/docker-ce-packaging/pull/1169)\n-
          Add Ubuntu 25.04 \"Plucky Puffin\" packages. [docker/containerd-packaging#419](https://redirect.github.com/docker/containerd-packaging/pull/419),
          [docker/docker-ce-packaging#1177](https://redirect.github.com/docker/docker-ce-packaging/pull/1177)\n-
          Update BuildKit to [v0.21.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.21.0).
          [moby/moby#49809](https://redirect.github.com/moby/moby/pull/49809)\n- Update
          Compose to [v2.35.0](https://redirect.github.com/docker/compose/releases/tag/v2.35.0).
          [docker/docker-ce-packaging#1183](https://redirect.github.com/docker/docker-ce-packaging/pull/1183)\n-
          Update Go runtime to [1.23.8](https://go.dev/doc/devel/release#go1.23.8).
          [docker/cli#5986](https://redirect.github.com/docker/cli/pull/5986), [docker/docker-ce-packaging#1180](https://redirect.github.com/docker/docker-ce-packaging/pull/1180),
          [moby/moby#49737](https://redirect.github.com/moby/moby/pull/49737)\n\n#####
          Networking\n\n- Fix a bug causing host port-mappings on Swarm containers
          to be duplicated on `docker ps` and `docker i\n\n> \u2702 **Note**\n> \n>
          PR body was truncated to here.\n\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about these updates again.\n\n---\n\n - [ ] <!-- rebase-check -->If you
          want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/1807
        commit_id: 4e5d7086fed9808ec3030da69e600b8a36c24c87
        patchset: 4e5d7086fed9808ec3030da69e600b8a36c24c87
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
          src_dir: src/github.com/osism/release
        topic: null
      job: flake8
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 4e5d7086fed9808ec3030da69e600b8a36c24c87
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 58f24f5b479e15eb2d520850d27e3b1b6fc66aa6
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 58f24f5b479e15eb2d520850d27e3b1b6fc66aa6
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/flake8/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/release
        name: osism/release
        short_name: release
        src_dir: src/github.com/osism/release
      projects:
        github.com/osism/release:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          checkout: main
          checkout_description: zuul branch
          commit: edccabf77a124d8ae24ddab19e59d146bb075472
          name: osism/release
          required: false
          short_name: release
          src_dir: src/github.com/osism/release
      ref: refs/pull/1807/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
