Skip to content

Conversation

@thaJeztah
Copy link
Member

vendor: golang.org/x/oauth2 v0.29.0

notable changes

  • fixes CVE-2025-22868
  • oauth2.go: use a more straightforward return value
  • oauth2: Deep copy context client in NewClient
  • jws: improve fix for CVE-2025-22868

full diff: golang/oauth2@v0.23.0...v0.29.0

vendor: github.com/containerd/containerd v2.0.5

full diff: containerd/containerd@v2.0.4...v2.0.5

vendor: github.com/docker/docker v28.1.1

diff: moby/moby@v28.1.0...v28.1.1

vendor: github.com/docker/cli v28.1.1

no changes in vendored code

diff: docker/cli@v28.1.0...v28.1.1

notable changes

- fixes CVE-2025-22868
- oauth2.go: use a more straightforward return value
- oauth2: Deep copy context client in NewClient
- jws: improve fix for CVE-2025-22868

full diff: golang/oauth2@v0.23.0...v0.29.0

Signed-off-by: Sebastiaan van Stijn <[email protected]>
no changes in vendored code

diff:  docker/cli@v28.1.0...v28.1.1

Signed-off-by: Sebastiaan van Stijn <[email protected]>
@tonistiigi tonistiigi merged commit 2799ed6 into docker:master Apr 22, 2025
136 of 139 checks passed
@thaJeztah thaJeztah deleted the bump_docker_28.1.1 branch April 22, 2025 18:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants