Allow Docker CLI to set the GODEBUG environment variable when the key-value pair ("GODEBUG":"...") exists inside the docker context metadata. docker/cli#6399
Bug fixes and enhancements
Add shell completion for docker pull and docker image pull. docker/cli#6420
Fix a regression in v28.3.3 that could cause a panic on docker push if the client did not send an X-Registry-Auth header. moby/moby#50738
Windows: Potentially fix an issue with "access denied" error when pulling images. moby/moby#50871
containerd image store: Fix docker history failing with snapshot X does not exist when calling on a non-native image that was built locally. moby/moby#50875
containerd image store: Fix docker image prune to emit correct untag and delete events and list only the deleted images root digests instead of every blob. moby/moby#50837
Remove interactive login prompt from docker push and docker pull after a failure caused by missing authentication. docker/cli#6256
Deprecate special handling for quoted values for the --tlscacert, --tlscert, and --tlskey command-line flags. docker/cli#6291
Mark legacy links env vars (DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS) as deprecated in v28.4 and set for removal in v30.0. docker/cli#6309
Go-SDK: Deprecate field NetworkSettingsBase.Bridge, struct NetworkSettingsBase, all the fields of DefaultNetworkSettings, and struct DefaultNetworkSettings. moby/moby#50839
Go-SDK: api/types: build.CacheDiskUsage, container.DiskUsage, images.DiskUsage and volumes.DiskUsage are now deprecated and will be removed in the next major release. moby/moby#50768
Go-SDK: cli-plugins/manager: deprecate annotation aliases (CommandAnnotationPlugin, CommandAnnotationPluginVendor, CommandAnnotationPluginVersion, CommandAnnotationPluginInvalid, CommandAnnotationPluginCommandPath) in favor of their equivalent in cli-plugins/manager/metadata. docker/cli#6298
... (truncated)
Commits
249d679 Merge pull request #50890 from vvoland/50889-28.x
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/newt/pull/148
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 9/22/2025
**Status:** ✅ Merged
**Merged:** 9/29/2025
**Merged by:** [@oschwartz10612](https://github.com/oschwartz10612)
**Base:** `main` ← **Head:** `dependabot/go_modules/github.com/docker/docker-28.4.0incompatible`
---
### 📝 Commits (1)
- [`f1c4e1d`](https://github.com/fosrl/newt/commit/f1c4e1db71acdf9a1782b8af95d6c8e8ec6b07c7) Bump github.com/docker/docker
### 📊 Changes
**2 files changed** (+15 additions, -29 deletions)
<details>
<summary>View changed files</summary>
📝 `go.mod` (+3 -4)
📝 `go.sum` (+12 -25)
</details>
### 📄 Description
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 28.3.3+incompatible to 28.4.0+incompatible.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p>
<blockquote>
<h2>v28.4.0</h2>
<h2>28.4.0</h2>
<p>For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:</p>
<ul>
<li><a href="https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.4.0">docker/cli, 28.4.0 milestone</a></li>
<li><a href="https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.4.0">moby/moby, 28.4.0 milestone</a></li>
<li>Deprecated and removed features, see <a href="https://github.com/docker/cli/blob/v28.4.0/docs/deprecated.md">Deprecated Features</a>.</li>
<li>Changes to the Engine API, see <a href="https://github.com/moby/moby/blob/v28.4.0/docs/api/version-history.md">API version history</a>.</li>
</ul>
<h3>New</h3>
<ul>
<li>Allow Docker CLI to set the <code>GODEBUG</code> environment variable when the key-value pair (<code>"GODEBUG":"..."</code>) exists inside the docker context metadata. <a href="https://redirect.github.com/docker/cli/pull/6399">docker/cli#6399</a></li>
</ul>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>Add shell completion for <code>docker pull</code> and <code>docker image pull</code>. <a href="https://redirect.github.com/docker/cli/pull/6420">docker/cli#6420</a></li>
<li>Fix a regression in v28.3.3 that could cause a panic on <code>docker push</code> if the client did not send an <code>X-Registry-Auth</code> header. <a href="https://redirect.github.com/moby/moby/pull/50738">moby/moby#50738</a></li>
<li>Windows: Potentially fix an issue with "access denied" error when pulling images. <a href="https://redirect.github.com/moby/moby/pull/50871">moby/moby#50871</a></li>
<li>containerd image store: Fix <code>docker history</code> failing with <code>snapshot X does not exist</code> when calling on a non-native image that was built locally. <a href="https://redirect.github.com/moby/moby/pull/50875">moby/moby#50875</a></li>
<li>containerd image store: Fix <code>docker image prune</code> to emit correct <code>untag</code> and <code>delete</code> events and list only the deleted images root digests instead of every blob. <a href="https://redirect.github.com/moby/moby/pull/50837">moby/moby#50837</a></li>
<li>Remove interactive login prompt from <code>docker push</code> and <code>docker pull</code> after a failure caused by missing authentication. <a href="https://redirect.github.com/docker/cli/pull/6256">docker/cli#6256</a></li>
</ul>
<h3>Packaging updates</h3>
<ul>
<li>Update BuildKit to <a href="https://github.com/moby/buildkit/releases/tag/v0.24.0">v0.24.0</a>. <a href="https://redirect.github.com/moby/moby/pull/50888">moby#50888</a></li>
<li>Update Go runtime to <a href="https://go.dev/doc/devel/release#go1.24.6">1.24.7</a>. <a href="https://redirect.github.com/moby/moby/pull/50889">moby/moby#50889</a>, <a href="https://redirect.github.com/docker/cli/pull/6422">docker/cli#6422</a></li>
<li>Update <code>runc</code> to <a href="https://github.com/opencontainers/runc/releases/tag/v1.3.0">v1.3.0</a>. <a href="https://redirect.github.com/moby/moby/pull/50699">moby/moby#50699</a></li>
<li>Update containerd (static binaries only) to <a href="https://github.com/containerd/containerd/releases/tag/v1.7.28">v1.7.28</a>. <a href="https://redirect.github.com/moby/moby/pull/50700">moby/moby#50700</a></li>
</ul>
<h3>Networking</h3>
<ul>
<li>Fix an issue that could cause slow container restart on live-restore. <a href="https://redirect.github.com/moby/moby/pull/50829">moby/moby#50829</a></li>
</ul>
<h3>API</h3>
<ul>
<li>Update deprecation message for <code>AuthConfig.Email</code> field. <a href="https://redirect.github.com/moby/moby/pull/50797">moby/moby#50797</a></li>
</ul>
<h3>Go SDK</h3>
<ul>
<li>Deprecate profiles package which got migrated to <a href="https://github.com/moby/profiles">github.com/moby/profiles</a>. <a href="https://redirect.github.com/moby/moby/pull/50513">moby/moby#50513</a></li>
</ul>
<h3>Deprecations</h3>
<ul>
<li>Deprecate special handling for quoted values for the <code>--tlscacert</code>, <code>--tlscert</code>, and <code>--tlskey</code> command-line flags. <a href="https://redirect.github.com/docker/cli/pull/6291">docker/cli#6291</a></li>
<li>Mark legacy links env vars (<code>DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS</code>) as deprecated in v28.4 and set for removal in v30.0. <a href="https://redirect.github.com/docker/cli/pull/6309">docker/cli#6309</a></li>
<li>Go-SDK: Deprecate field <code>NetworkSettingsBase.Bridge</code>, struct <code>NetworkSettingsBase</code>, all the fields of <code>DefaultNetworkSettings</code>, and struct <code>DefaultNetworkSettings</code>. <a href="https://redirect.github.com/moby/moby/pull/50839">moby/moby#50839</a></li>
<li>Go-SDK: api/types: <code>build.CacheDiskUsage</code>, <code>container.DiskUsage</code>, <code>images.DiskUsage</code> and <code>volumes.DiskUsage</code> are now deprecated and will be removed in the next major release. <a href="https://redirect.github.com/moby/moby/pull/50768">moby/moby#50768</a></li>
<li>Go-SDK: cli-plugins/manager: deprecate <code>ReexecEnvvar</code>. <a href="https://redirect.github.com/docker/cli/pull/6411">docker/cli#6411</a></li>
<li>Go-SDK: cli-plugins/manager: deprecate annotation aliases (<code>CommandAnnotationPlugin</code>, <code>CommandAnnotationPluginVendor</code>, <code>CommandAnnotationPluginVersion</code>, <code>CommandAnnotationPluginInvalid</code>, <code>CommandAnnotationPluginCommandPath</code>) in favor of their equivalent in <code>cli-plugins/manager/metadata</code>. <a href="https://redirect.github.com/docker/cli/pull/6298">docker/cli#6298</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/moby/moby/commit/249d679a6baf8a32bb6d72d6ac5cc7ab9c90b4ea"><code>249d679</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/50890">#50890</a> from vvoland/50889-28.x</li>
<li><a href="https://github.com/moby/moby/commit/d664cfe1390eb623963dfc6f2d8bf02e6875ca60"><code>d664cfe</code></a> update to go1.24.7</li>
<li><a href="https://github.com/moby/moby/commit/b384cd2a45f543ceac77526e58761ab49494c8c5"><code>b384cd2</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/50888">#50888</a> from vvoland/50885-28.x</li>
<li><a href="https://github.com/moby/moby/commit/c1ce88e7f8bba7760fddbb131f2a3e8d1f0069c4"><code>c1ce88e</code></a> vendor: update buildkit to v0.24.0</li>
<li><a href="https://github.com/moby/moby/commit/4a34e8e9f69367e4adc830d0562c8a36d1cb855e"><code>4a34e8e</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/50875">#50875</a> from vvoland/50867-28.x</li>
<li><a href="https://github.com/moby/moby/commit/cfa70d073ec486c561dd2024050f66d5192a5a34"><code>cfa70d0</code></a> gha/arm64: Setup qemu</li>
<li><a href="https://github.com/moby/moby/commit/d70382e4424e19cf65d9837a6d8ed8fcb9a5f566"><code>d70382e</code></a> integration/internal: Print Buildkit logs</li>
<li><a href="https://github.com/moby/moby/commit/687b206c6b642608f0d61bda090a4169311dca0d"><code>687b206</code></a> c8d/history: Fix non-native platforms</li>
<li><a href="https://github.com/moby/moby/commit/e4224f86c085c609303cdd72fef39384237af430"><code>e4224f8</code></a> integration/internal: Handle Buildkit in GetImageIDFromBody</li>
<li><a href="https://github.com/moby/moby/commit/5d5332b00c7618f3ad1ab4eda4ac4102c4a9fa8c"><code>5d5332b</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/50871">#50871</a> from vvoland/50870-28.x</li>
<li>Additional commits viewable in <a href="https://github.com/docker/docker/compare/v28.3.3...v28.4.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/newt/pull/148
Author: @dependabot[bot]
Created: 9/22/2025
Status: ✅ Merged
Merged: 9/29/2025
Merged by: @oschwartz10612
Base:
main← Head:dependabot/go_modules/github.com/docker/docker-28.4.0incompatible📝 Commits (1)
f1c4e1dBump github.com/docker/docker📊 Changes
2 files changed (+15 additions, -29 deletions)
View changed files
📝
go.mod(+3 -4)📝
go.sum(+12 -25)📄 Description
Bumps github.com/docker/docker from 28.3.3+incompatible to 28.4.0+incompatible.
Release notes
Sourced from github.com/docker/docker's releases.
... (truncated)
Commits
249d679Merge pull request #50890 from vvoland/50889-28.xd664cfeupdate to go1.24.7b384cd2Merge pull request #50888 from vvoland/50885-28.xc1ce88evendor: update buildkit to v0.24.04a34e8eMerge pull request #50875 from vvoland/50867-28.xcfa70d0gha/arm64: Setup qemud70382eintegration/internal: Print Buildkit logs687b206c8d/history: Fix non-native platformse4224f8integration/internal: Handle Buildkit in GetImageIDFromBody5d5332bMerge pull request #50871 from vvoland/50870-28.xDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.