<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="46">
<package pkgid="518235faf6748308cc29a824d8e60c6f1c72c798d9efe453ac91737adea3ca0e9d4ba306a3d287af0764fcba39a16ab2de0abd846978e779320a470f59afb9db" name="containerd" arch="aarch64">
  <version epoch="0" ver="2.2.1" rel="3.5"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1767960000">- Update to containerd v2.2.1. Upstream release notes:
    &lt;https://github.com/containerd/containerd/releases/tag/v2.2.1&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="79b33e7c7ca8a6d4f3188376a0515591f3575e52c01f55fc29ebffb0cbde8637c738c6afde4453731301639c6aee0dd624e47a02d2fe4d722d02b7ae7011690b" name="containerd" arch="ppc64le">
  <version epoch="0" ver="2.2.1" rel="3.5"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1767960000">- Update to containerd v2.2.1. Upstream release notes:
    &lt;https://github.com/containerd/containerd/releases/tag/v2.2.1&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="742b8eac61ecd192c04ce4853ffcf5f2821cc647ce369cd6ea8e7bbc452f41fdb3d6db3d1921e5d1193c4ab66c447b785f1204cf36bf8bc0991f6438c9a1ba01" name="containerd" arch="s390x">
  <version epoch="0" ver="2.2.1" rel="3.5"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1767960000">- Update to containerd v2.2.1. Upstream release notes:
    &lt;https://github.com/containerd/containerd/releases/tag/v2.2.1&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="9155d0006e1fd542cfccc843fe026736e9884fcfee6ad1892290d77518cfda157e17809c205a6bd2fc7b9f19718e937c76c1a5a7a00c303bf552517bc519d5d4" name="containerd" arch="src">
  <version epoch="0" ver="2.2.1" rel="3.5"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1767960000">- Update to containerd v2.2.1. Upstream release notes:
    &lt;https://github.com/containerd/containerd/releases/tag/v2.2.1&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="017edae4656f3d951ae6e08b557c2a5be5fe94583fcb715b644e0019273b2c23da286e14177985056746c49144e365485a15d5e922be25acb226e4eea94063a6" name="containerd" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="3.5"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1767960000">- Update to containerd v2.2.1. Upstream release notes:
    &lt;https://github.com/containerd/containerd/releases/tag/v2.2.1&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="580b413950becbdfe012845db1ddbd6374a74b8ea4edc170f7ca5063c6c0f2c9613bb55b2af1e70394856c0edbcbee6ae728b3d4b91fb220321030b02cbedfc8" name="containerd-ctr" arch="aarch64">
  <version epoch="0" ver="2.2.1" rel="3.5"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1767960000">- Update to containerd v2.2.1. Upstream release notes:
    &lt;https://github.com/containerd/containerd/releases/tag/v2.2.1&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="b3b89c9d491309d9df9fc9a5ae5a791af93a775403d4bcfc2fc6687ef94bbdb51eb6ffbed7cd59fed0ab77c0b027b1bda812ad93fb4be68c0d71f8fb0c0790f0" name="containerd-ctr" arch="ppc64le">
  <version epoch="0" ver="2.2.1" rel="3.5"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1767960000">- Update to containerd v2.2.1. Upstream release notes:
    &lt;https://github.com/containerd/containerd/releases/tag/v2.2.1&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="1739fbe78b61b408e67152eeba11be8109ee975c6fcfccb7fe01fc1ed72f3e90b58d2b1da029928ffd47fa650802033c1303720144a729bc93222bef95c6ce29" name="containerd-ctr" arch="s390x">
  <version epoch="0" ver="2.2.1" rel="3.5"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1767960000">- Update to containerd v2.2.1. Upstream release notes:
    &lt;https://github.com/containerd/containerd/releases/tag/v2.2.1&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="dfa18456971b44ae99bd405ab7abc2557d20b4e78971af34ab120845cbf5266e7349adf49aea18f1fec09214d43f1653923e099565f85d7a830031e8ccaa30ef" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="3.5"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1767960000">- Update to containerd v2.2.1. Upstream release notes:
    &lt;https://github.com/containerd/containerd/releases/tag/v2.2.1&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="618d505ea79f19ac02180ad5d5785d00b229dc5fdad4a39baf894252da5c9dab2b9aabfbfd2c963e55408ecc96925924f3306fe2b7202426a0c621378bcf1f42" name="containerd-devel" arch="noarch">
  <version epoch="0" ver="2.2.1" rel="3.5"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1767960000">- Update to containerd v2.2.1. Upstream release notes:
    &lt;https://github.com/containerd/containerd/releases/tag/v2.2.1&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="da160d0cf73d3963c3444e437438d664edf49df902a9eca6789f6cc6c3d5ae0c2ae9581816fbedd051f0e80672b5e302ee266a9a81a5ac180f0d86177fd9fc94" name="distribution" arch="src">
  <version epoch="0" ver="3.0.0" rel="57.4"/>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="Stefan Nica &lt;snica@suse.com&gt;" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="Stefan Nica &lt;snica@suse.com&gt;" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="Jiri Suchomel &lt;jsuchome@suse.com&gt;" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1701086400">- update to 2.8.3 (bsc#1216491):
  * Pass `BUILDTAGS` argument to `go build`
  * Enable Go build tags
  * `reference`: replace deprecated function `SplitHostname`
  * Dont parse errors as JSON unless Content-Type is set to JSON
  * update to go 1.20.8
  * Set `Content-Type` header in registry client `ReadFrom`
  * deprecate reference package, migrate to
    github.com/distribution/reference
  * `digestset`: deprecate package in favor of `go-
    digest/digestset`
  * Do not close HTTP request body in HTTP handler
  * Add v2.8.3 release notes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1729684800">- remove unnecessary lock group</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1751284800">- update to 3.0.0 (jsc#PED-11728):
  * This is the first v3 stable release since `v2.8.3` which is a
    culmination of years of hard work of the container community
    and registry maintainers!
  * If you are upgrading from `v2.x` and have never used any of
    the release candidates, please familiarise yourselves with
    the `v2.x` deprecations properly.
  * oss and swift storage drivers are no longer supported
  * `docker/libtrust` has been replaced with `go-jose/go-jose` in
    https://github.com/distribution/distribution/pull/4096
  * `client` is no longer supported as a standalone package in
    https://github.com/distribution/distribution/pull/4126
  * the default configuration path has changed to
    `/etc/distribution/config.yml`
  * `ManifestBuilder` interface in 3886
  * `manifest.Versioned` has been deprecated in favor of
    `oci.Versioned` in 3887
  * `reference` package has been moved to
    github.com/distribution/reference in
    https://github.com/distribution/distribution/pull/4063</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1768305600">- Move config files in systemd tmpfiles dir for immutable mode
  (jsc#PED-14747)
  * Add distribution-registry.tmpfiles</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769169600">- Revert the use of tmpfiles that broke BCI images. Keeping an
  empty directory inside /var/lib should be good for immutable mode
  (bsc#1257110 jsc#PED-14747)
  * Remove distribution-registry.tmpfiles</changelog>
</package>
<package pkgid="de9cbeccb149f19ff6b92f08d8d267d7cd9834bb7985e434a7e00beaac7f9d6004a1d251616e2f2b91e296c079442ae2a109d3a65c90b557d0a63d381aaa741d" name="distribution-registry" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="57.4"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1701086400">- update to 2.8.3 (bsc#1216491):
  * Pass `BUILDTAGS` argument to `go build`
  * Enable Go build tags
  * `reference`: replace deprecated function `SplitHostname`
  * Dont parse errors as JSON unless Content-Type is set to JSON
  * update to go 1.20.8
  * Set `Content-Type` header in registry client `ReadFrom`
  * deprecate reference package, migrate to
    github.com/distribution/reference
  * `digestset`: deprecate package in favor of `go-
    digest/digestset`
  * Do not close HTTP request body in HTTP handler
  * Add v2.8.3 release notes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1729684800">- remove unnecessary lock group</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1751284800">- update to 3.0.0 (jsc#PED-11728):
  * This is the first v3 stable release since `v2.8.3` which is a
    culmination of years of hard work of the container community
    and registry maintainers!
  * If you are upgrading from `v2.x` and have never used any of
    the release candidates, please familiarise yourselves with
    the `v2.x` deprecations properly.
  * oss and swift storage drivers are no longer supported
  * `docker/libtrust` has been replaced with `go-jose/go-jose` in
    https://github.com/distribution/distribution/pull/4096
  * `client` is no longer supported as a standalone package in
    https://github.com/distribution/distribution/pull/4126
  * the default configuration path has changed to
    `/etc/distribution/config.yml`
  * `ManifestBuilder` interface in 3886
  * `manifest.Versioned` has been deprecated in favor of
    `oci.Versioned` in 3887
  * `reference` package has been moved to
    github.com/distribution/reference in
    https://github.com/distribution/distribution/pull/4063</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1768305600">- Move config files in systemd tmpfiles dir for immutable mode
  (jsc#PED-14747)
  * Add distribution-registry.tmpfiles</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769169600">- Revert the use of tmpfiles that broke BCI images. Keeping an
  empty directory inside /var/lib should be good for immutable mode
  (bsc#1257110 jsc#PED-14747)
  * Remove distribution-registry.tmpfiles</changelog>
</package>
<package pkgid="af4523437d349f3a99c18d82d59663438137d3ed100ad9eb4d4b71dec76745187ac872efe59ee158a0b11b252f833de770433a6bbac563b02e8f823e68cf5245" name="distribution-registry" arch="ppc64le">
  <version epoch="0" ver="3.0.0" rel="57.4"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1701086400">- update to 2.8.3 (bsc#1216491):
  * Pass `BUILDTAGS` argument to `go build`
  * Enable Go build tags
  * `reference`: replace deprecated function `SplitHostname`
  * Dont parse errors as JSON unless Content-Type is set to JSON
  * update to go 1.20.8
  * Set `Content-Type` header in registry client `ReadFrom`
  * deprecate reference package, migrate to
    github.com/distribution/reference
  * `digestset`: deprecate package in favor of `go-
    digest/digestset`
  * Do not close HTTP request body in HTTP handler
  * Add v2.8.3 release notes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1729684800">- remove unnecessary lock group</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1751284800">- update to 3.0.0 (jsc#PED-11728):
  * This is the first v3 stable release since `v2.8.3` which is a
    culmination of years of hard work of the container community
    and registry maintainers!
  * If you are upgrading from `v2.x` and have never used any of
    the release candidates, please familiarise yourselves with
    the `v2.x` deprecations properly.
  * oss and swift storage drivers are no longer supported
  * `docker/libtrust` has been replaced with `go-jose/go-jose` in
    https://github.com/distribution/distribution/pull/4096
  * `client` is no longer supported as a standalone package in
    https://github.com/distribution/distribution/pull/4126
  * the default configuration path has changed to
    `/etc/distribution/config.yml`
  * `ManifestBuilder` interface in 3886
  * `manifest.Versioned` has been deprecated in favor of
    `oci.Versioned` in 3887
  * `reference` package has been moved to
    github.com/distribution/reference in
    https://github.com/distribution/distribution/pull/4063</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1768305600">- Move config files in systemd tmpfiles dir for immutable mode
  (jsc#PED-14747)
  * Add distribution-registry.tmpfiles</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769169600">- Revert the use of tmpfiles that broke BCI images. Keeping an
  empty directory inside /var/lib should be good for immutable mode
  (bsc#1257110 jsc#PED-14747)
  * Remove distribution-registry.tmpfiles</changelog>
</package>
<package pkgid="39fe9bb710759cdef904dcc45cd7d5edd0a36094d88e4ba0f6245a8c2ecf8a1697aebce55b0d38bbf1d7b1fb839f0c1bd6397cbcba8d2ba17ea00a1fe1928069" name="distribution-registry" arch="s390x">
  <version epoch="0" ver="3.0.0" rel="57.4"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1701086400">- update to 2.8.3 (bsc#1216491):
  * Pass `BUILDTAGS` argument to `go build`
  * Enable Go build tags
  * `reference`: replace deprecated function `SplitHostname`
  * Dont parse errors as JSON unless Content-Type is set to JSON
  * update to go 1.20.8
  * Set `Content-Type` header in registry client `ReadFrom`
  * deprecate reference package, migrate to
    github.com/distribution/reference
  * `digestset`: deprecate package in favor of `go-
    digest/digestset`
  * Do not close HTTP request body in HTTP handler
  * Add v2.8.3 release notes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1729684800">- remove unnecessary lock group</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1751284800">- update to 3.0.0 (jsc#PED-11728):
  * This is the first v3 stable release since `v2.8.3` which is a
    culmination of years of hard work of the container community
    and registry maintainers!
  * If you are upgrading from `v2.x` and have never used any of
    the release candidates, please familiarise yourselves with
    the `v2.x` deprecations properly.
  * oss and swift storage drivers are no longer supported
  * `docker/libtrust` has been replaced with `go-jose/go-jose` in
    https://github.com/distribution/distribution/pull/4096
  * `client` is no longer supported as a standalone package in
    https://github.com/distribution/distribution/pull/4126
  * the default configuration path has changed to
    `/etc/distribution/config.yml`
  * `ManifestBuilder` interface in 3886
  * `manifest.Versioned` has been deprecated in favor of
    `oci.Versioned` in 3887
  * `reference` package has been moved to
    github.com/distribution/reference in
    https://github.com/distribution/distribution/pull/4063</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1768305600">- Move config files in systemd tmpfiles dir for immutable mode
  (jsc#PED-14747)
  * Add distribution-registry.tmpfiles</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769169600">- Revert the use of tmpfiles that broke BCI images. Keeping an
  empty directory inside /var/lib should be good for immutable mode
  (bsc#1257110 jsc#PED-14747)
  * Remove distribution-registry.tmpfiles</changelog>
</package>
<package pkgid="42663b882c96cbfaa8636db049083f531f29bb27e1e0bc42da55e361bb0b348f507bc8d81ed7246cb8498088e8b2f69422d77b756e7a5a7bdc50a5bff84b07fb" name="distribution-registry" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="57.4"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1701086400">- update to 2.8.3 (bsc#1216491):
  * Pass `BUILDTAGS` argument to `go build`
  * Enable Go build tags
  * `reference`: replace deprecated function `SplitHostname`
  * Dont parse errors as JSON unless Content-Type is set to JSON
  * update to go 1.20.8
  * Set `Content-Type` header in registry client `ReadFrom`
  * deprecate reference package, migrate to
    github.com/distribution/reference
  * `digestset`: deprecate package in favor of `go-
    digest/digestset`
  * Do not close HTTP request body in HTTP handler
  * Add v2.8.3 release notes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1729684800">- remove unnecessary lock group</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1751284800">- update to 3.0.0 (jsc#PED-11728):
  * This is the first v3 stable release since `v2.8.3` which is a
    culmination of years of hard work of the container community
    and registry maintainers!
  * If you are upgrading from `v2.x` and have never used any of
    the release candidates, please familiarise yourselves with
    the `v2.x` deprecations properly.
  * oss and swift storage drivers are no longer supported
  * `docker/libtrust` has been replaced with `go-jose/go-jose` in
    https://github.com/distribution/distribution/pull/4096
  * `client` is no longer supported as a standalone package in
    https://github.com/distribution/distribution/pull/4126
  * the default configuration path has changed to
    `/etc/distribution/config.yml`
  * `ManifestBuilder` interface in 3886
  * `manifest.Versioned` has been deprecated in favor of
    `oci.Versioned` in 3887
  * `reference` package has been moved to
    github.com/distribution/reference in
    https://github.com/distribution/distribution/pull/4063</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1768305600">- Move config files in systemd tmpfiles dir for immutable mode
  (jsc#PED-14747)
  * Add distribution-registry.tmpfiles</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769169600">- Revert the use of tmpfiles that broke BCI images. Keeping an
  empty directory inside /var/lib should be good for immutable mode
  (bsc#1257110 jsc#PED-14747)
  * Remove distribution-registry.tmpfiles</changelog>
</package>
<package pkgid="7a0e2ba182a20a73933d7c27e696ee20b2fd58422e3b2c45d8c87a0de09cca9dea76066066a84040bbd186ccacd28bc765b2823cb805edf3692c46defbddc346" name="docker" arch="aarch64">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="6b95b1774faa46c2ef5867513dd957d72923a224ef7223189110ba960da483abb12ec4cd80c365cd27da086cc1ea808042b0851f84abdc7685307a858f35f3c5" name="docker" arch="ppc64le">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="1b559c30c49cf8d476908219641f876387b3961efa2c9631c960e684cee3d67777e5221b9e453dfae38a9d65eeec9ffeb160f147aaf962916ba41a9981a4ffc6" name="docker" arch="s390x">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="b4b26f665804d706e3f2de83ec62e9463296676c89cb84c1fe31fdfbe6b930c75ad7796c0966e61a555d64e2a2f440f1a8ad2d119ebe3709fc1c2483c76f560b" name="docker" arch="src">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="e4ca83c5e9ecaf9349876ec82bd3305be355204d938049a0d6fe17313386002d7baeb4969692c494523e54d39b334ddf8014ab905196dcc7d31bda79fbe46c01" name="docker" arch="x86_64">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="c5f28f4cd5d76da27efe7100a5b9300b02f6cb08e6c4bdb1fc39fbbec1fd1375546c3a38b6d64eda5bde8230a04f3706c60ccfdcc239bc6bc533b7ea5c805b66" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="98cd47ed0c7d70a4cf5327acd51bc4092c4af8d5d9462ea245f337ea1352ba8fad10fd36dd981f8db03556f060dd654e4bcea5473ce1bee220d5c4c0414fc7f6" name="docker-buildx" arch="aarch64">
  <version epoch="0" ver="0.33.0" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="f96a48997e95cc1ad1b382376a54c5516b3dc33204b8417f2f62f02b665a1c37684cd6e02473db0108d6cc4f100bc07cb0cd63cfd42fd02a558b915abfe8917c" name="docker-buildx" arch="ppc64le">
  <version epoch="0" ver="0.33.0" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="1947085d21336792a6f77efed196efe6e866bbb0f1b8414103a9251ba2099da0ce2127b7f59e2cd76c6bd3d022ac18af4a1ea97fe2664cc6d6d154db95aefbe1" name="docker-buildx" arch="s390x">
  <version epoch="0" ver="0.33.0" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="4112af4155fcbb800c914306a97d6b0967cce5dec4a8b02a1adfa29e8b26a57a2a976e0a0e6c39e1ebb49d67a7c1c9da1c098829a81e7257f90aaa42828187f1" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.33.0" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="24229cdc1adf1ad51a4266823e290de2b0229a08682176bb818139b88372c89edc1e6d763866e8a48a5c05f17b6716b4a519d47f56a54780fda107ffd28fce08" name="docker-compose" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="198.5"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1753444800">- Update to version 2.39.1:
  * Internal
  - Add info about models usage to OpenTelemetry spans by @glours
    in #13094
  * Dependencies
  - Bump compose-go to v2.8.1 by @glours in #13096</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1754827200">- Update to version 2.39.2:
  * Fixes
  - Fix (regression): compose build render build output with tty
    support by @ndeloof in #13107
  - Add missing "_MODEL suffix" to model variable pass to
    dependent services of a model by @glours in #13109
  - Apply BUILDKIT_PROGRESS value when building with bake by
    @glours in #13110
  - Define pull and no_cache from either service or flags values
    when building with bake by @glours in #13133
  - Only monitor attached services on up command by @glours in
    [#13114]
  * Internal
  - Add Streams Comment by @suwakei in #13103
  - Add test of json.go by @suwakei in #13106
  - Refactoring of redundant condition checks by @suwakei in
    [#13104]
  - Eliminated magic string by @suwakei in #13105
  - Use log API for containers we didn't attached to by @ndeloof
    in #13111
  - Use cli-plugins/metadata package by @thaJeztah in #13130
  - pkg/compose: simplify getting auth-config key by @thaJeztah
    in #13120
  - Add go as a prerequisite in build instructions by @mattrunyon
    in #13131
  * Dependencies
  - Build(deps): bump github.com/docker/cli from
    28.3.2+incompatible to 28.3.3+incompatible by
    @dependabot[bot] in #13116
  - Build(deps): bump github.com/docker/docker from
    28.3.2+incompatible to 28.3.3+incompatible by
    @dependabot[bot] in #13115
  - Build(deps): bump github.com/containerd/containerd/v2 from
    2.1.3 to 2.1.4 by @dependabot[bot] in #13119
  - Build(deps): bump github.com/docker/go-connections from 0.5.0
    to 0.6.0 by @dependabot[bot] in #13137
  - Build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by
    @dependabot[bot] in #13138
  - Bump golang to 1.23.12 by @austinvazquez in #13142</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758196800">- Update to version 2.39.3:
  * Improvements
  - Add completions for the --progress flag by @m4rch3n1ng in
    [#13158]
  * Fixes
  - Add --provenance and --sbom flag to generated bake command
    line, by @glours in #13147
  - Fix runtime operations failing when env file is missing by
    @maxproske in #13156
  - Check the assume yes publish flag command before the presence
    of bind mounts by @glours in #13151
  - Fix: incorrect time when last tag time is not set by
    @kianelbo in #13171
  - Fix sigint/sigterm support in logs --follow by @ndeloof in
    [#13193]
  - Prefer application container vs one-off running exec without
    index by @ndeloof in #13178
  - Only force plain mode build if progress is set to auto by
    @ndeloof in #13181
  - Only propagate os.Env to bake, not the whole
    project.Environment by @ndeloof in #13180
  - Detect container is restarted by @ndeloof in #13210
  - Fix run --build support for service:* reference in
    additional_context by @ndeloof in #13183
  - Detect compose run wit --host and set DOCKER_HOST accordingly
    running bake by @ndeloof in #13182
  * Internal
  - Refactor to use maps.Copy by @cuiweixie in #13174
  - Replace most uses of hashicorp/go-multierror for stdlib by
    @thaJeztah in #13176
  - pkg/compose: composeService.Up: rewrite without go-multierror
    by @thaJeztah in #13177
  - Use enum-consts for State and Health by @thaJeztah in #13186
  - Unquote volume names in creation events by @rrjjvv in #13188
  - pkg/compose: use state consts from moby API by @thaJeztah in
    [#13216]
  - Document (hidden) --tty --interactive flags by @ndeloof in
    [#13201]
  * Dependencies
  - go.mod: github.com/docker/buildx v0.27.0 by @thaJeztah in
    [#13170]
  - Build(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by
    @dependabot[bot] in #13162
  - go.mod: bump buildkit v0.24.0-rc1, buildx v0.28.0-rc1 by
    @thaJeztah in #13185
  - Build(deps): bump github.com/stretchr/testify from 1.10.0 to
    1.11.1 by @dependabot[bot] in #13184
  - go.mod: bump buildx v0.28.0-rc2, buildkit v0.24.0-rc2 by
    @thaJeztah in #13197
  - Build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9
    by @dependabot[bot] in #13195
  - Build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    by @dependabot[bot] in #13198
  - go.mod: bump github.com/docker/docker, docker/cli v28.4.0 by
    @thaJeztah in #13168
  - Build(deps): bump github.com/docker/buildx from 0.28.0-rc2 to
    0.28.0 by @dependabot[bot] in #13207
  - Build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10
    by @dependabot[bot] in #13200
  - Bump golang to version 1.24.7 by @glours in #13219
  - Build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 by
    @dependabot[bot] in #13218
  - Build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0 by
    @dependabot[bot] in #13217
  - Bump compose-go to version v2.8.2 by @glours in #13220</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- Update to version 2.39.4:
  * Improvements
  - Add support of develop.watch.initial_sync attribute by
    @glours in #13232
  * Fixes
  - Volume ls command can run without a project by @ndeloof in
    [#13221]
  - Fix support for build with bake when target docker endpoint
    requires TLS by @ndeloof in #13231
  - Disable Tty if run command started from a piped command by
    @glours in #13233
  * Internal
  - Test: Set stop_signal to SIGTERM by @ricardobranco777 in
    [#13214]
  * Dependencies
  - Bump compose-go to version v2.9.0 by @glours in #13234</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1759492800">- Update to version 2.40.0:
  * Improvements
  - publish Compose application as compose.yaml + images by
    @ndeloof in #13257
  * Fixes
  - resolve secrets based on env var before executing bake by
    @ndeloof in #13237
  - pass bake secrets by env by @ndeloof in #13249
  - escape $ in bake.json as interpolation already has been
    managed by cpmpose by @ndeloof in #13259
  * Internal
  - pkg/compose: remove uses of deprecated mitchellh/mapstructure
    module by @thaJeztah in #13239
  - pkg/watch: remove unused IsWindowsShortReadError by
    @thaJeztah in #13052
  - pkg/compose: build: remove permissions warning on Windows by
    @thaJeztah in #13236
  - pluginMain: remove uses of DockerCLI.Apply by @thaJeztah in
    [#13240]
  - use containerd registry client by @ndeloof in #13245
  - provider services: use '--project-name=' notation by @glours
    in #13250
  - gha: update test-matrix: remove docker 26.x by @thaJeztah in
    [#13254]
  - pkg/compose: explicitly map AuthConfig fields instead of a
    direct cast by @thaJeztah in #13253
  - cmd/compose: fix minor linting issues by @thaJeztah in #13252
  - use containerd client for OCI operations by @ndeloof in
    [#13251]
  * Dependencies
  - build(deps): bump github.com/docker/docker, docker/cli
    v28.5.0-rc.1 by @thaJeztah in #13241
  - build(deps): bump github.com/docker/docker from
    28.5.0-rc.1+incompatible to 28.5.0+incompatible by
    @dependabot[bot] in #13260
  - build(deps): bump github.com/docker/cli from
    28.5.0-rc.1+incompatible to 28.5.0+incompatible by
    @dependabot[bot] in #13261</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- Update to version 2.40.1:
  * Fixes
  - Write error to watcher error channel if Start() fails by
    @Trolldemorted in #13263
  - Fix: set PWD only if not set by @kianelbo in #13268
  - bake only interpolates ${*} by @ndeloof in #13270
  - Fix: make "publish" push all compose files addressed in
    "extends" statements when using "profiles". by
    @ogoulpeau-ledger in #13277
  - Support Ctrl+Z to run compose in background by @ndeloof in
    [#13289]
  - Fix race-condition bug in publish command by @paul-kinexon in
    [#13291]
  - Set secret/config uid:gid to match container's USER by
    @ndeloof in #13288
  - Fix failure to delegate build with bake by @ndeloof in #13275
  - Make CTRL+Z a no-op operation on Windows by @glours in #13293
  * Internal
  - pkg/compose: align classic builder implementation with
    docker/cli by @thaJeztah in #13278
  - pkg/compose: build with bake: drop support for buildx v0.16
    and lower by @thaJeztah in #13280
  - Use fixed version of compose bridge transformer images by
    @glours in #13284
  * Dependencies
  - Build(deps): bump github.com/docker/docker from
    28.5.0+incompatible to 28.5.1+incompatible by
    @dependabot[bot] in #13274
  - Build(deps): bump github.com/docker/cli from
    28.5.0+incompatible to 28.5.1+incompatible by
    @dependabot[bot] in #13273
  - Build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by
    @dependabot[bot] in #13272
  - Build(deps): bump docker/buildx v0.29.1, moby/buildkit
    v0.25.1 by @thaJeztah in #13279
  - Bump golang to version 1.24.9 by @glours in #13285</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1761220800">- Update to version 2.40.2:
  * publish env_file references as opaque hash to prevent paths
    conflicts
  * Enforce compose files from OCI artifact all get into the same
    target (cache) folder
  * introduce WithPrompt to configure compose backend to use a
    plugable UI component for user interaction
  * test digest or canonical reference, not only tag, when checking
    if an image is already present
  * remove unused code to only rely on api.Service
  * fail build if minimal required version of buildx isn't
    installed
  * Compose can't create a tar with adequate uid:gid ownership as
    we can't get container UID/GID as int by ContainerInspect
    revert https://github.com/docker/compose/pull/13288</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1762084800">- Update to version 2.40.3:
  * Fixes
  - Fix OCI compose override support by @ndeloof #13311
  - Fix help output for "exec --no-tty" option by @tonyo #13314
  - Prompt default implementation to prevent a panic by @ndeloof
    [#13317]
  - Run hooks on restart by @ndeloof #13321
  - Fix(run): Ensure images exist only for the target service in
    run command by @idsulik #13325
  - Fix(git): Fix path traversal vulnerability in git remote
    loader by @idsulik #13331
  * Internal
  - Test to check writeComposeFile detects invalid OCI artifact
    by @ndeloof #13309
  - Code Cleanup by @ndeloof #13315
  * Dependencies
  - Bump compose-go to version v2.9.1 by @glours #13332</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1764936000">- Update to version 5.0.0:
  https://github.com/docker/compose/releases/tag/v5.0.0
  Why "v5" ?
  We decided to skip 3.0.0 for next major release after docker
  Compose v2 to prevent (more) confusion with the obsolete
  docker-compose file versions 2.x and 3.x inherited from Docker
  Compose v1. We also skipped 4.0.0 to have a clear separation with
  this legacy.
  * Major changes in this release:
  - Compose can now officially be used as a SDK to be integrated
    into third-party softwares
  - Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)
  * Improvements
  - drop support for internal buildkit builder by @ndeloof in
    [#13056]
  - Setup Compose service using functional parameters by @ndeloof
    in #13312
  - Introduce abstractions to support SDK usage without requiring
    Docker CLI by @glours in #13313
  - configure Compose service with io.Reader and io.Writer by
    @glours in #13322
  - Make progress Writer a CLI component by @ndeloof in #13316
  - SDK docs by @ndeloof in #13350
  - document support for OCI and Git remote resources by @ndeloof
    in #13362
  - run hooks on restart by @ndeloof in #13321
  - fix(run): Ensure images exist only for the target service in
    run command by @idsulik in #13325
  - Add load project to api definition by @glours in #13329
  - introduce --insecure-registry, reserved for testing purpose
    by @ndeloof in #13355
  - Move progress package to cmd as a command line component by
    @ndeloof in #13357
  - Added support for build.no_cache_filter by @ndeloof in #13377
  - add --wait option to start command by @ndeloof in #13409
  * Fixes
  - fix OCI compose override support by @ndeloof in #13311
  - Fix help output for "exec --no-tty" option by @tonyo in
    [#13314]
  - fix typo in error message by @stasadev in #13328
  - disable progress UI when build is ran with --print by
    @ndeloof in #13351
  - add (restore) support for detach keys by @ndeloof in #13369
  - images command should display image Created time or N/A if
    not available by @ndeloof in #13376
  - Fix support for port range by @ndeloof in #13381
  - skip includes preparing publish by @ndeloof in #13400
  - feat(model): ignore runtime flags in model configuration by
    @ilopezluna in #13404
  * Internal
  - Next release will be major version v5.x by @ndeloof in #13375
  - Test to check writeComposeFile detects invalid OCI artifact
    by @ndeloof in #13309
  - Code Cleanup by @ndeloof in #13315
  - fix various linting issues by @thaJeztah in #13326
  - Making the American/British spellings consistent to the error
    messages by @JLesDev in #13366
  - gha: test against docker v29, v28, and rename checks to use
    stable, oldstable by @thaJeztah in #13380
  - refactor: replace Split in loops with more efficient SplitSeq
    by @vicerace in #13393
  - refactor: use strings.Builder to improve performance by
    @liuyueyangxmu in #13398
  - Fix grammar: change 'adopted' to 'adopt' in Docker Swarm note
    by @rashmivagha in #13407
  - golangci-lint: use gci formatter instead of goimports by
    @thaJeztah in #13406
  - refactor: replace interface{} with any for clarity and
    modernization by @zjumathcode in #13411
  * Dependencies
  - Bump compose go to v2.10.0 by @ndeloof in #13410
  - build(deps): bump github.com/containerd/platforms from
    1.0.0-rc.1 to 1.0.0-rc.2 by @dependabot[bot] in #13353
  - build(deps): bump github.com/docker/docker from
    28.5.1+incompatible to 28.5.2+incompatible by
    @dependabot[bot] in #13361
  - build(deps): bump github.com/containerd/containerd/v2 from
    2.1.4 to 2.2.0 by @dependabot[bot] in #13358
  - build(deps): bump github.com/docker/cli from
    28.5.1+incompatible to 28.5.2+incompatible by
    @dependabot[bot] in #13360
  - build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 by
    @dependabot[bot] in #13367
  - build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 by
    @dependabot[bot] in #13368
  - Dockerfile: update golangci-lint to v2.6.2 by @thaJeztah in
    [#13370]
  - build(deps): bump buildx v0.30.0, buildkit v0.26.0, otel
    v1.38.0, otel/contrib v0.63.0 by @thaJeztah in #13379
  - bump dependencies by @ndeloof in #13392
  - build(deps): bump github.com/hashicorp/go-version from 1.7.0
    to 1.8.0 by @dependabot[bot] in #13403
  - build(deps): bump golang.org/x/crypto v0.45.0 by @thaJeztah
    in #13405</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1765368000">- Fix missing version (boo#1254726)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1766145600">- Update to version 5.0.1:
  * Fixes
  - Restored support for COMPOSE_COMPATIBILITY by @ndeloof in
    [#13424]
  - Fixed grammatical errors and improve clarity in code. by
    @xiaolinny in #13429
  - Fixed broken run --quiet. by @ndeloof in #13430
  - Fixed SDK example by @ndeloof in #13416
  - Added a check buildx version is set before comparing it. by
    @yangfeiyu20102011 in #13415
  - Fixed grammar: pluralize 'service' and remove apostrophes in
    lets. by @rashmivagha in #13423
  - Fixed progress UI not restoring terminal once operation
    completes. by @ndeloof in #13439
  - Fixed status alignment in progress UI. by @ndeloof in #13438
  - Restored image layer download progress details on pull. by
    @ndeloof in #13445
  - Added 'configured' event at the end of model configuration
    phase. by @glours in #13446
  - Introduced a build tag to select watcher implementation. by
    @ndeloof in #13452
  - Removed mention for v2 on README. by @alexislefebvre in
    [#13451]
  - Fixed missing error handling in setEnvWithDotEnv. by
    @htoyoda18 in #13450
  - Adopted morikuni/aec library over raw ANSI sequences. by
    @ndeloof in #13440
  - Prevented incorrect progress metrics to break compose
    display. by @ndeloof in #13457
  - Restored support for BUILDKIT_PROGRESS. by @ndeloof in #13455
  - Added check model plugin is successfully loaded. by @ndeloof
    in #13464
  - Added a warning when no service has been selected to build.
    by @ndeloof in #13467
  * Dependencies
  - Drop Go min patch version by @austinvazquez in #13418
  - bump golang 1.24.11 by @austinvazquez in #13417
  - bump osxcross by @ndeloof in #13425
  - bump golang.org/x/sys from 0.38.0 to 0.39.0 by
    @dependabot[bot] in #13433
  - bump github.com/docker/cli-docs-tool from 0.10.0 to 0.11.0 by
    @dependabot[bot] in #13437
  - bump golang.org/x/sync from 0.18.0 to 0.19.0 by
    @dependabot[bot] in #13434
  - bump tags.cncf.io/container-device-interface from 1.0.1 to
    1.1.0 by @dependabot[bot] in #13441
  - bump github.com/moby/buildkit from 0.26.2 to 0.26.3 by
    @dependabot[bot] in #13462</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1768996800">- Update to version 5.0.2:
  * Fixes
  - Fixed progress UI to adapt to terminal width by @ndeloof in
    [#13519]
  - Removed warning when no explicit build has been requested. by
    @ndeloof in #13493
  - Restored runtime_flags support in models by @ilopezluna in
    [#13460]
  - Added service name completion to down command by @bmo-at in
    [#13470]
  - Fixed tilde in --env-file paths expanded to user home
    directory by @tensorworkerr in #13510
  - Handle healthcheck.disable: true by @stavros-k in #13494
  - Fixed shutdown and error handling for large file change
    batches in watch by @amyssnippet in #13525
  * Internal
  - Added unit test for upOptions.OnExit method by @htoyoda18 in
    [#13489]
  - clean up temporary compose files after conversion by
    @htoyoda18 in #13483
  - Fixed typo in isSwarmEnabled method name by @htoyoda18 in
    [#13481]
  - Fixed incorrect usage of errgroup.WithContext by @htoyoda18
    in #13480
  - Fixed timeout initialization when waitTimeout is zero by
    @htoyoda18 in #13471
  - Extracted API version constants to dedicated file by
    @htoyoda18 in #13503
  - Replace tabbed indentation in sdk.md by @pkqk in #13505
  - Improved attach error handling and cleanup by @htoyoda18 in
    [#13488]
  - Modernize tests by @dgageot in #13531
  - set fsnotify build tag when building for OSX by @ndeloof in
    [#13532]
  * Dependencies
  - build(deps): bump github.com/klauspost/compress to v1.18.2 by
    @thaJeztah in #13499
  - go.mod: remove exclude rules by @thaJeztah in #13498
  - build(deps): bump github.com/containerd/containerd/v2 to
    v2.2.1 by @thaJeztah in #13497
  - build(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 by
    @dependabot[bot] in #13502
  - build(deps): bump google.golang.org/grpc from 1.77.0 to
    1.78.0 by @dependabot[bot] in #13475
  - build(deps): bump github.com/go-viper/mapstructure/v2 from
    2.4.0 to 2.5.0 by @dependabot[bot] in #13506
  - build(deps): bump github.com/sirupsen/logrus v1.9.4 by
    @thaJeztah in #13518
  - Bump compose to v2.10.1 by @ndeloof in #13528</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1772020800">- Update to version 5.1.0:
  * Fixes
  - emit container status events after network reconnection
    (fixes #13524) by @MaheshThakur9152 in #13529
  - Fix potential nil pointer dereference in container event
    monitoring by @Nepomuk5665 in #13551
  - compose: recreate container when mounted image digest changes
    by @ibrahimypr in #13549
  - fix panic by @ndeloof in #13562
  - Fix invalid path error when using OCI artifacts on Windows by
    @mikesir87 in #13574
  - fix: execute post_start hooks in docker compose run by
    @veeceey in #13607
  - Fix panic when watch rebuilds without up by @maxproske in
    [#13610]
  * Internal
  - fsnotify is set in Dockerfile by @ndeloof in #13533
  - Dockerfile: update golangci-lint to v2.8.0 by @thaJeztah in
    [#13535]
  - replace some uses of strings.Split(N) for strings.Cut by
    @thaJeztah in #13542
  - Upgrade GitHub Actions to latest versions by @salmanmkc in
    [#13546]
  - pkg/compose: remove dependency on
    github.com/docker/buildx/driver by @thaJeztah in #13563
  - use Docker GitHub Builder to build and sign binaries and bin
    image by @crazy-max in #13568
  - ci: fix bin-image job by @crazy-max in #13569
  - pkg/compose: defaultNetworkSettings: refactor by @thaJeztah
    in #13580
  - pkg/compose: un-export consts by @thaJeztah in #13584
  - modernize some code by @thaJeztah in #13588
  * Dependencies
  - update to go1.25.7 by @thaJeztah in #13573
  - build(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by
    @dependabot[bot] in #13578
  - build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.3 to
    4.0.0-rc.4 by @dependabot[bot] in #13541
  - migrate to moby modules by @thaJeztah in #13078</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1774008000">- Update to version 5.1.1:
  * Fixes
  - Only pass ConsoleSize to ExecAttach when TTY is enabled by
    @mikesir87 in #13616
  - Fix deadlock in ttyWriter.Done() by @maks2134 in #13640
  * Dependencies
  - update to go1.25.8 by @thaJeztah in #13622
  - bump github.com/moby/moby/api from 1.53.0 to 1.54.0 by
    @dependabot[bot] in #13619
  - bump golang.org/x/sys from 0.41.0 to 0.42.0 by
    @dependabot[bot] in #13626
  - bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.2
    by @dependabot[bot] in #13631
  - bump golang.org/x/sync from 0.19.0 to 0.20.0 by
    @dependabot[bot] in #13627
  - bump github.com/moby/moby/client from 0.2.2 to 0.3.0 by
    @dependabot[bot] in #13621</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1775736000">- Update to version 5.1.2:
  * Fixes
  - Fix TTY timer rendering when duration length changes by
    @MaybeSam05 in #13634
  - Fix up attach filtering by @false200 in #13664
  - Preserve ssh:// URL scheme when resolving Dockerfile path by
    @ssam18 in #13669
  - Initialize and pass envFiles map in processExtends by
    @Mohamed-Moumni in #13678
  - Fix TestRunHook_ConsoleSize on macOS by @thaJeztah in #13686
  - Restore post-connect fallback for multi-network stacks on API
    &lt; 1.44 by @jotka in #13629
  - Publish: return api.ErrCanceled when user declines
    interactive prompts by @ishwar170695 in #13674
  - Return error on non-ErrNotExist stat failures in Tar.Sync()
    by @Lidang-Jiang in #13684
  * Internal
  - Refactor: thread context through publish sensitive data check
    by @ishwar170695 in #13653
  - Add AI-powered PR review workflow via docker/cagent-action by
    @glours in #13659
  - Update cagent-action to latest (with better permissions) by
    @derekmisler in #13665
  - Pin GitHub Actions to commit SHA, remove pr-review workflow
    by @glours in #13662
  - Exclude hook_test.go from Windows builds and propagate
    ExecStart error in runWaitExec by @pawannn in #13683
  - Skip PR review workflow for Dependabot PRs by @glours in
    [#13679]
  - Use negotiated API version for network setup by @glours in
    [#13690]
  - Fix mixed assertion libraries in tests by @thaJeztah in
    [#13689]
  - Test: use random host port for dind TLS build test by
    @ricardobranco777 in #13630
  - Remove direct dependency on docker/docker by @glours in
    [#13706]
  * Dependencies
  - Bump github.com/containerd/platforms from 1.0.0-rc.2 to
    1.0.0-rc.3 by @dependabot[bot] in #13657
  - Bump golangci-lint to v2.11.3 and configure CLAUDE to use it
    on change by @ndeloof in #13656
  - Bump google.golang.org/grpc from 1.78.0 to 1.79.3 by
    @dependabot[bot] in #13642
  - Bump github.com/moby/patternmatcher from 0.6.0 to 0.6.1 by
    @dependabot[bot] in #13667
  - Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.42.0 by
    @glours in #13663
  - Bump github.com/docker/cli from 29.2.1+incompatible to
    29.3.1+incompatible by @dependabot[bot] in #13670
  - Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by
    @dependabot[bot] in #13692
  - Bump github.com/docker/buildx v0.33.0, buildkit v0.29.0 by
    @thaJeztah in #13693
  - Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by
    @dependabot[bot] in #13697
  - Bump github.com/containerd/platforms from 1.0.0-rc.3 to
    1.0.0-rc.4 by @dependabot[bot] in #13696
  - Bump github.com/moby/moby/client v0.4.0, moby/api v1.54.1 by
    @thaJeztah in #13708
  - Bump github.com/docker/cli v29.4.0 by @thaJeztah in #13707
  - Bump compose-go to version v2.10.2 by @glours in #13705
  - Bump to Go 1.25.9 by @thaJeztah in #13720</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1776427200">- Update to version 5.1.3:
  * Fixes
  - fix: provider output handling and watch rebuild re-invocation
    by @glours in #13732
  * Internal
  - Add Docker Desktop Logs view hints and navigation shortcut by
    @glours in #13721
  - Build and push Docker Desktop module image on release by
    @glours in #13726
  - Fix typo in SECURITY.md by @glours in #13730
  - Make hook hint deep links clickable using OSC 8 terminal
    hyperlinks by @glours in #13734
  - Remove 'provenance' attribute' by @glours in #13738
  * Dependencies
  - build(deps): bump github.com/containerd/containerd/v2 from
    2.2.2 to 2.2.3 by @dependabot[bot] in #13737</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1779364800">- Update to version 5.1.4:
  * Improvements
  - feat: add stop lifecycle hook for external providers by
    @glours in #13779
  * Fixes
  - fix: route OCI artifact pulls through Docker Desktop HTTP
    proxy by @glours in #13770
  - fix: restore stoppingEvent/stoppedEvent helpers for plugin
    stop hook by @glours in #13794
  - fix(publish): flag literal inline environment values by
    @glours in #13760
  * Internal
  - ci: remove unused e2e job from merge workflow by @glours in
    [#13740]
  - chore: update cagent-action to v1.4.4 by @derekmisler in
    [#13745]
  - Change verb tense in Docker Compose reference documentation
    by @ryanjbonnell in #13773
  - pkg/compose: go fix by @thaJeztah in #13782
  - refactor: code deduplication and simplification by @ndeloof
    in #13759
  - fix: make e2e tests pass reliably locally with Docker Desktop
    by @glours in #13741
  - refactor: drop Desktop beta-settings check; gate hint on
    LogsTab flag by @glours in #13755
  * Dependencies
  - build(deps): bump github.com/mattn/go-shellwords from 1.0.12
    to 1.0.13 by @dependabot[bot] in #13731
  - build(deps): bump github.com/docker/cli from
    29.4.0+incompatible to 29.4.2+incompatible by
    @dependabot[bot] in #13768
  - build(deps): bump github.com/moby/moby/client from 0.4.0 to
    0.4.1 by @dependabot[bot] in #13752
  - build(deps): bump github.com/docker/cli from
    29.4.2+incompatible to 29.4.3+incompatible by
    @dependabot[bot] in #13776
  - build(deps): bump google.golang.org/grpc from 1.80.0 to
    1.81.0 by @dependabot[bot] in #13775
  - build(deps): update to go 1.26.3 by @thaJeztah in #13783
  - build(deps): bump google.golang.org/grpc from 1.81.0 to
    1.81.1 by @dependabot[bot] in #13791
  - build(deps): bump github.com/compose-spec/compose-go/v2 from
    2.10.2 to 2.11.0 by @dependabot[bot] in #13798
  - build(deps): bump github.com/docker/cli from
    29.4.3+incompatible to 29.5.1+incompatible by
    @dependabot[bot] in #13796
  - build(deps): bump golang.org/x/sys from 0.42.0 to 0.44.0 by
    @dependabot[bot] in #13788</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1782302400">- Update to version 5.2.0:
  This version introduces a new reconciliation algorithm between
  the observed state and the expected state.
  If you experience any issues with a Compose workload that was
  previously working, please open an issue.
  * Improvements
  - Reconciliation plan by @ndeloof &amp; @glours in #13830
  - Add rawsetenv message type for provider plugins by @rajyan in
    [#13742]
  * Fixes
  - Fix(build): skip remote URL contexts from bake fs.read
    allowlist by @ndeloof in #13816
  - Skip validation when extracting config variables by
    @scarab-systems in #13831
  - Fix(progress): probe stderr (not stdout) for TTY
    auto-detection by @glours in #13837
  - Fix(publish): honor env_file required: false for missing
    files by @Ijtihed in #13848
  * Internal
  - Docs: compose logs: add links for since/until flag
    descriptions by @thaJeztah in #13806
  - Ci: add Dependabot cooldown (20260603-170456) by
    @securityeng-bot[bot] in #13820
  - Docs(CLAUDE.md): note that commits must be signed off (DCO)
    by @ndeloof in #13817
  - Refactor: replace Split in loops with more efficient SplitSeq
    and replace HasPrefix+TrimPrefix with CutPrefix by
    @caltechustc in #13810
  - Chore: fix some comments to improve readability by @solunolab
    in #13823
  - GHA: update docs-upstream to pin workflows by sha by
    @thaJeztah in #13834
  - Docs: compose logs: add more links for flag descriptions by
    @thaJeztah in #13833
  - Fix/progress tty line overflow 13595 by @glours in #13840
  - Fix(publish): bypass Docker Desktop proxy for loopback
    registries by @ptrdom in #13825
  - Watch: do not rebuild depends_on services on file change by
    @ndeloof in #13856
  - pkg/e2e: fix malformed JWT in fixtures by @thaJeztah in
    [#13857]
  - pkg/e2e: drop unused run param from getEnv by @glours in
    [#13867]
  - Docs: ps --format json outputs JSON Lines, not a JSON array
    by @glours in #13868
  * Dependencies
  - Build(deps): bump github.com/docker/cli from
    29.5.1+incompatible to 29.5.2+incompatible by
    @dependabot[bot] in #13802
  - Update to go 1.26.4 by @thaJeztah in #13828
  - Chore(deps): github.com/containerd/typeurl/v2 v2.3.0 by
    @thaJeztah in #13829
  - Build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by
    @dependabot[bot] in #13838
  - Chore(deps): github.com/docker/cli v29.5.3,
    github.com/docker/buildx v0.34.1, buildkit v0.30.0 by
    @thaJeztah in #13841
  - Build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by
    @dependabot[bot] in #13832
  - Chore(deps): golang.org/x/crypto v0.53.0 by @thaJeztah in
    [#13844]
  - Build(deps): bump github.com/containerd/containerd/v2 from
    2.2.3 to 2.2.4 in the go_modules group across 1 directory by
    @dependabot[bot] in #13804
  - Chore(deps): bump github.com/containerd/containerd/v2 to
    v2.2.5 by @thaJeztah in #13855
  - Chore(deps): bump github.com/golang-jwt/jwt/v5 to v5.3.1 by
    @thaJeztah in #13847
  - Chore(deps): github.com/docker/cli v29.6.0,
    github.com/docker/buildx v0.35.0, buildkit v0.31.0 by
    @thaJeztah in #13842
  - Bump compose-go to version v2.12.1 by @glours in #13865</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1782993600">- Update to version 5.3.0:
  This release introduces native support for init containers.
  * Improvements
  - Pre start init containers by @glours in #13862
  * Fixes
  - Fix(oci): route authorizer token fetches through provided
    transport by @glours in #13873
  - Fix(run): scope Running events to project.Services by @glours
    in #13883
  * Internal
  - Chore: migrate cagent-action to docker-agent-action (v2.0.0)
    by @docker-agent in #13869
  - Chore: migrate to docker-agent-action v2.0.1 by @docker-agent
    in #13872
  - Fix(reconcile): hash resolved service refs to match executor
    by @glours in #13880
  - Fix(compose/port): show private port in portNotFoundError
    message by @vmphase in #13875
  - Fix(run): normalize --no-TTY flag to --no-tty by @nickjj in
    [#13885]
  * Dependencies
  - Bump compose-go to version v2.13.0 by @glours in #13886</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1783425600">- Update to version 5.3.1:
  * Internal
  - Ci: add concurrency group to pr-review-trigger to prevent
    duplicate reviews by @derekmisler in #13890
  - Fix grammar in Attestations field comment by @blackflytech in
    [#13891]
  - Ci: remove unused desktop-edge-test workflow by @thaJeztah in
    [#13897]
  - Ci: zizmor workflow by @crazy-max in #13901
  - Ci: fix docs-upstream workflow by @crazy-max in #13912
  - CODEOWNERS: add compose-reviewers by @thaJeztah in #13913
  - Ci: harden GitHub Actions workflows by @glours in #13896
  - GHA: dependabot: group docker/* actions updates by @thaJeztah
    in #13914
  * Dependencies
  - Build(deps): bump github.com/moby/buildkit from 0.31.0 to
    0.31.1 by @dependabot[bot] in #13892
  - Build(deps): bump github.com/moby/sys/user to v0.4.1 by
    @thaJeztah in #13893
  - Build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to
    4.0.0-rc.6 by @dependabot[bot] in #13876
  - Build(deps): bump github.com/docker/cli from
    29.6.0+incompatible to 29.6.1+incompatible by
    @dependabot[bot] in #13895
  - Build(deps): bump actions/stale from 10.2.0 to 10.3.0 by
    @dependabot[bot] in #13902
  - Build(deps): bump the docker-actions group with 3 updates by
    @dependabot[bot] in #13916
  - Build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
    by @dependabot[bot] in #13908
  - Build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 by
    @dependabot[bot] in #13907
  - Build(deps): bump test-summary/action from 2.4 to 2.6 by
    @dependabot[bot] in #13903
  - Build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24 by
    @dependabot[bot] in #13910
  - Build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0
    by @dependabot[bot] in #13904
  - Build(deps): bump github/codeql-action/upload-sarif from
    3.36.3 to 4.36.2 by @dependabot[bot] in #13917
  - Build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by
    @dependabot[bot] in #13911</changelog>
</package>
<package pkgid="19cf0c7ac1406272f1930edab60a70b71f8c2751f7376f3cf71c57457fae7f21335a78fae1d1f1edc1f0ea533c919effd1a7481605232f6045017c9f4470d278" name="docker-compose" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="198.5"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1753444800">- Update to version 2.39.1:
  * Internal
  - Add info about models usage to OpenTelemetry spans by @glours
    in #13094
  * Dependencies
  - Bump compose-go to v2.8.1 by @glours in #13096</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1754827200">- Update to version 2.39.2:
  * Fixes
  - Fix (regression): compose build render build output with tty
    support by @ndeloof in #13107
  - Add missing "_MODEL suffix" to model variable pass to
    dependent services of a model by @glours in #13109
  - Apply BUILDKIT_PROGRESS value when building with bake by
    @glours in #13110
  - Define pull and no_cache from either service or flags values
    when building with bake by @glours in #13133
  - Only monitor attached services on up command by @glours in
    [#13114]
  * Internal
  - Add Streams Comment by @suwakei in #13103
  - Add test of json.go by @suwakei in #13106
  - Refactoring of redundant condition checks by @suwakei in
    [#13104]
  - Eliminated magic string by @suwakei in #13105
  - Use log API for containers we didn't attached to by @ndeloof
    in #13111
  - Use cli-plugins/metadata package by @thaJeztah in #13130
  - pkg/compose: simplify getting auth-config key by @thaJeztah
    in #13120
  - Add go as a prerequisite in build instructions by @mattrunyon
    in #13131
  * Dependencies
  - Build(deps): bump github.com/docker/cli from
    28.3.2+incompatible to 28.3.3+incompatible by
    @dependabot[bot] in #13116
  - Build(deps): bump github.com/docker/docker from
    28.3.2+incompatible to 28.3.3+incompatible by
    @dependabot[bot] in #13115
  - Build(deps): bump github.com/containerd/containerd/v2 from
    2.1.3 to 2.1.4 by @dependabot[bot] in #13119
  - Build(deps): bump github.com/docker/go-connections from 0.5.0
    to 0.6.0 by @dependabot[bot] in #13137
  - Build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by
    @dependabot[bot] in #13138
  - Bump golang to 1.23.12 by @austinvazquez in #13142</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758196800">- Update to version 2.39.3:
  * Improvements
  - Add completions for the --progress flag by @m4rch3n1ng in
    [#13158]
  * Fixes
  - Add --provenance and --sbom flag to generated bake command
    line, by @glours in #13147
  - Fix runtime operations failing when env file is missing by
    @maxproske in #13156
  - Check the assume yes publish flag command before the presence
    of bind mounts by @glours in #13151
  - Fix: incorrect time when last tag time is not set by
    @kianelbo in #13171
  - Fix sigint/sigterm support in logs --follow by @ndeloof in
    [#13193]
  - Prefer application container vs one-off running exec without
    index by @ndeloof in #13178
  - Only force plain mode build if progress is set to auto by
    @ndeloof in #13181
  - Only propagate os.Env to bake, not the whole
    project.Environment by @ndeloof in #13180
  - Detect container is restarted by @ndeloof in #13210
  - Fix run --build support for service:* reference in
    additional_context by @ndeloof in #13183
  - Detect compose run wit --host and set DOCKER_HOST accordingly
    running bake by @ndeloof in #13182
  * Internal
  - Refactor to use maps.Copy by @cuiweixie in #13174
  - Replace most uses of hashicorp/go-multierror for stdlib by
    @thaJeztah in #13176
  - pkg/compose: composeService.Up: rewrite without go-multierror
    by @thaJeztah in #13177
  - Use enum-consts for State and Health by @thaJeztah in #13186
  - Unquote volume names in creation events by @rrjjvv in #13188
  - pkg/compose: use state consts from moby API by @thaJeztah in
    [#13216]
  - Document (hidden) --tty --interactive flags by @ndeloof in
    [#13201]
  * Dependencies
  - go.mod: github.com/docker/buildx v0.27.0 by @thaJeztah in
    [#13170]
  - Build(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by
    @dependabot[bot] in #13162
  - go.mod: bump buildkit v0.24.0-rc1, buildx v0.28.0-rc1 by
    @thaJeztah in #13185
  - Build(deps): bump github.com/stretchr/testify from 1.10.0 to
    1.11.1 by @dependabot[bot] in #13184
  - go.mod: bump buildx v0.28.0-rc2, buildkit v0.24.0-rc2 by
    @thaJeztah in #13197
  - Build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9
    by @dependabot[bot] in #13195
  - Build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    by @dependabot[bot] in #13198
  - go.mod: bump github.com/docker/docker, docker/cli v28.4.0 by
    @thaJeztah in #13168
  - Build(deps): bump github.com/docker/buildx from 0.28.0-rc2 to
    0.28.0 by @dependabot[bot] in #13207
  - Build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10
    by @dependabot[bot] in #13200
  - Bump golang to version 1.24.7 by @glours in #13219
  - Build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 by
    @dependabot[bot] in #13218
  - Build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0 by
    @dependabot[bot] in #13217
  - Bump compose-go to version v2.8.2 by @glours in #13220</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- Update to version 2.39.4:
  * Improvements
  - Add support of develop.watch.initial_sync attribute by
    @glours in #13232
  * Fixes
  - Volume ls command can run without a project by @ndeloof in
    [#13221]
  - Fix support for build with bake when target docker endpoint
    requires TLS by @ndeloof in #13231
  - Disable Tty if run command started from a piped command by
    @glours in #13233
  * Internal
  - Test: Set stop_signal to SIGTERM by @ricardobranco777 in
    [#13214]
  * Dependencies
  - Bump compose-go to version v2.9.0 by @glours in #13234</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1759492800">- Update to version 2.40.0:
  * Improvements
  - publish Compose application as compose.yaml + images by
    @ndeloof in #13257
  * Fixes
  - resolve secrets based on env var before executing bake by
    @ndeloof in #13237
  - pass bake secrets by env by @ndeloof in #13249
  - escape $ in bake.json as interpolation already has been
    managed by cpmpose by @ndeloof in #13259
  * Internal
  - pkg/compose: remove uses of deprecated mitchellh/mapstructure
    module by @thaJeztah in #13239
  - pkg/watch: remove unused IsWindowsShortReadError by
    @thaJeztah in #13052
  - pkg/compose: build: remove permissions warning on Windows by
    @thaJeztah in #13236
  - pluginMain: remove uses of DockerCLI.Apply by @thaJeztah in
    [#13240]
  - use containerd registry client by @ndeloof in #13245
  - provider services: use '--project-name=' notation by @glours
    in #13250
  - gha: update test-matrix: remove docker 26.x by @thaJeztah in
    [#13254]
  - pkg/compose: explicitly map AuthConfig fields instead of a
    direct cast by @thaJeztah in #13253
  - cmd/compose: fix minor linting issues by @thaJeztah in #13252
  - use containerd client for OCI operations by @ndeloof in
    [#13251]
  * Dependencies
  - build(deps): bump github.com/docker/docker, docker/cli
    v28.5.0-rc.1 by @thaJeztah in #13241
  - build(deps): bump github.com/docker/docker from
    28.5.0-rc.1+incompatible to 28.5.0+incompatible by
    @dependabot[bot] in #13260
  - build(deps): bump github.com/docker/cli from
    28.5.0-rc.1+incompatible to 28.5.0+incompatible by
    @dependabot[bot] in #13261</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- Update to version 2.40.1:
  * Fixes
  - Write error to watcher error channel if Start() fails by
    @Trolldemorted in #13263
  - Fix: set PWD only if not set by @kianelbo in #13268
  - bake only interpolates ${*} by @ndeloof in #13270
  - Fix: make "publish" push all compose files addressed in
    "extends" statements when using "profiles". by
    @ogoulpeau-ledger in #13277
  - Support Ctrl+Z to run compose in background by @ndeloof in
    [#13289]
  - Fix race-condition bug in publish command by @paul-kinexon in
    [#13291]
  - Set secret/config uid:gid to match container's USER by
    @ndeloof in #13288
  - Fix failure to delegate build with bake by @ndeloof in #13275
  - Make CTRL+Z a no-op operation on Windows by @glours in #13293
  * Internal
  - pkg/compose: align classic builder implementation with
    docker/cli by @thaJeztah in #13278
  - pkg/compose: build with bake: drop support for buildx v0.16
    and lower by @thaJeztah in #13280
  - Use fixed version of compose bridge transformer images by
    @glours in #13284
  * Dependencies
  - Build(deps): bump github.com/docker/docker from
    28.5.0+incompatible to 28.5.1+incompatible by
    @dependabot[bot] in #13274
  - Build(deps): bump github.com/docker/cli from
    28.5.0+incompatible to 28.5.1+incompatible by
    @dependabot[bot] in #13273
  - Build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by
    @dependabot[bot] in #13272
  - Build(deps): bump docker/buildx v0.29.1, moby/buildkit
    v0.25.1 by @thaJeztah in #13279
  - Bump golang to version 1.24.9 by @glours in #13285</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1761220800">- Update to version 2.40.2:
  * publish env_file references as opaque hash to prevent paths
    conflicts
  * Enforce compose files from OCI artifact all get into the same
    target (cache) folder
  * introduce WithPrompt to configure compose backend to use a
    plugable UI component for user interaction
  * test digest or canonical reference, not only tag, when checking
    if an image is already present
  * remove unused code to only rely on api.Service
  * fail build if minimal required version of buildx isn't
    installed
  * Compose can't create a tar with adequate uid:gid ownership as
    we can't get container UID/GID as int by ContainerInspect
    revert https://github.com/docker/compose/pull/13288</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1762084800">- Update to version 2.40.3:
  * Fixes
  - Fix OCI compose override support by @ndeloof #13311
  - Fix help output for "exec --no-tty" option by @tonyo #13314
  - Prompt default implementation to prevent a panic by @ndeloof
    [#13317]
  - Run hooks on restart by @ndeloof #13321
  - Fix(run): Ensure images exist only for the target service in
    run command by @idsulik #13325
  - Fix(git): Fix path traversal vulnerability in git remote
    loader by @idsulik #13331
  * Internal
  - Test to check writeComposeFile detects invalid OCI artifact
    by @ndeloof #13309
  - Code Cleanup by @ndeloof #13315
  * Dependencies
  - Bump compose-go to version v2.9.1 by @glours #13332</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1764936000">- Update to version 5.0.0:
  https://github.com/docker/compose/releases/tag/v5.0.0
  Why "v5" ?
  We decided to skip 3.0.0 for next major release after docker
  Compose v2 to prevent (more) confusion with the obsolete
  docker-compose file versions 2.x and 3.x inherited from Docker
  Compose v1. We also skipped 4.0.0 to have a clear separation with
  this legacy.
  * Major changes in this release:
  - Compose can now officially be used as a SDK to be integrated
    into third-party softwares
  - Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)
  * Improvements
  - drop support for internal buildkit builder by @ndeloof in
    [#13056]
  - Setup Compose service using functional parameters by @ndeloof
    in #13312
  - Introduce abstractions to support SDK usage without requiring
    Docker CLI by @glours in #13313
  - configure Compose service with io.Reader and io.Writer by
    @glours in #13322
  - Make progress Writer a CLI component by @ndeloof in #13316
  - SDK docs by @ndeloof in #13350
  - document support for OCI and Git remote resources by @ndeloof
    in #13362
  - run hooks on restart by @ndeloof in #13321
  - fix(run): Ensure images exist only for the target service in
    run command by @idsulik in #13325
  - Add load project to api definition by @glours in #13329
  - introduce --insecure-registry, reserved for testing purpose
    by @ndeloof in #13355
  - Move progress package to cmd as a command line component by
    @ndeloof in #13357
  - Added support for build.no_cache_filter by @ndeloof in #13377
  - add --wait option to start command by @ndeloof in #13409
  * Fixes
  - fix OCI compose override support by @ndeloof in #13311
  - Fix help output for "exec --no-tty" option by @tonyo in
    [#13314]
  - fix typo in error message by @stasadev in #13328
  - disable progress UI when build is ran with --print by
    @ndeloof in #13351
  - add (restore) support for detach keys by @ndeloof in #13369
  - images command should display image Created time or N/A if
    not available by @ndeloof in #13376
  - Fix support for port range by @ndeloof in #13381
  - skip includes preparing publish by @ndeloof in #13400
  - feat(model): ignore runtime flags in model configuration by
    @ilopezluna in #13404
  * Internal
  - Next release will be major version v5.x by @ndeloof in #13375
  - Test to check writeComposeFile detects invalid OCI artifact
    by @ndeloof in #13309
  - Code Cleanup by @ndeloof in #13315
  - fix various linting issues by @thaJeztah in #13326
  - Making the American/British spellings consistent to the error
    messages by @JLesDev in #13366
  - gha: test against docker v29, v28, and rename checks to use
    stable, oldstable by @thaJeztah in #13380
  - refactor: replace Split in loops with more efficient SplitSeq
    by @vicerace in #13393
  - refactor: use strings.Builder to improve performance by
    @liuyueyangxmu in #13398
  - Fix grammar: change 'adopted' to 'adopt' in Docker Swarm note
    by @rashmivagha in #13407
  - golangci-lint: use gci formatter instead of goimports by
    @thaJeztah in #13406
  - refactor: replace interface{} with any for clarity and
    modernization by @zjumathcode in #13411
  * Dependencies
  - Bump compose go to v2.10.0 by @ndeloof in #13410
  - build(deps): bump github.com/containerd/platforms from
    1.0.0-rc.1 to 1.0.0-rc.2 by @dependabot[bot] in #13353
  - build(deps): bump github.com/docker/docker from
    28.5.1+incompatible to 28.5.2+incompatible by
    @dependabot[bot] in #13361
  - build(deps): bump github.com/containerd/containerd/v2 from
    2.1.4 to 2.2.0 by @dependabot[bot] in #13358
  - build(deps): bump github.com/docker/cli from
    28.5.1+incompatible to 28.5.2+incompatible by
    @dependabot[bot] in #13360
  - build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 by
    @dependabot[bot] in #13367
  - build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 by
    @dependabot[bot] in #13368
  - Dockerfile: update golangci-lint to v2.6.2 by @thaJeztah in
    [#13370]
  - build(deps): bump buildx v0.30.0, buildkit v0.26.0, otel
    v1.38.0, otel/contrib v0.63.0 by @thaJeztah in #13379
  - bump dependencies by @ndeloof in #13392
  - build(deps): bump github.com/hashicorp/go-version from 1.7.0
    to 1.8.0 by @dependabot[bot] in #13403
  - build(deps): bump golang.org/x/crypto v0.45.0 by @thaJeztah
    in #13405</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1765368000">- Fix missing version (boo#1254726)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1766145600">- Update to version 5.0.1:
  * Fixes
  - Restored support for COMPOSE_COMPATIBILITY by @ndeloof in
    [#13424]
  - Fixed grammatical errors and improve clarity in code. by
    @xiaolinny in #13429
  - Fixed broken run --quiet. by @ndeloof in #13430
  - Fixed SDK example by @ndeloof in #13416
  - Added a check buildx version is set before comparing it. by
    @yangfeiyu20102011 in #13415
  - Fixed grammar: pluralize 'service' and remove apostrophes in
    lets. by @rashmivagha in #13423
  - Fixed progress UI not restoring terminal once operation
    completes. by @ndeloof in #13439
  - Fixed status alignment in progress UI. by @ndeloof in #13438
  - Restored image layer download progress details on pull. by
    @ndeloof in #13445
  - Added 'configured' event at the end of model configuration
    phase. by @glours in #13446
  - Introduced a build tag to select watcher implementation. by
    @ndeloof in #13452
  - Removed mention for v2 on README. by @alexislefebvre in
    [#13451]
  - Fixed missing error handling in setEnvWithDotEnv. by
    @htoyoda18 in #13450
  - Adopted morikuni/aec library over raw ANSI sequences. by
    @ndeloof in #13440
  - Prevented incorrect progress metrics to break compose
    display. by @ndeloof in #13457
  - Restored support for BUILDKIT_PROGRESS. by @ndeloof in #13455
  - Added check model plugin is successfully loaded. by @ndeloof
    in #13464
  - Added a warning when no service has been selected to build.
    by @ndeloof in #13467
  * Dependencies
  - Drop Go min patch version by @austinvazquez in #13418
  - bump golang 1.24.11 by @austinvazquez in #13417
  - bump osxcross by @ndeloof in #13425
  - bump golang.org/x/sys from 0.38.0 to 0.39.0 by
    @dependabot[bot] in #13433
  - bump github.com/docker/cli-docs-tool from 0.10.0 to 0.11.0 by
    @dependabot[bot] in #13437
  - bump golang.org/x/sync from 0.18.0 to 0.19.0 by
    @dependabot[bot] in #13434
  - bump tags.cncf.io/container-device-interface from 1.0.1 to
    1.1.0 by @dependabot[bot] in #13441
  - bump github.com/moby/buildkit from 0.26.2 to 0.26.3 by
    @dependabot[bot] in #13462</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1768996800">- Update to version 5.0.2:
  * Fixes
  - Fixed progress UI to adapt to terminal width by @ndeloof in
    [#13519]
  - Removed warning when no explicit build has been requested. by
    @ndeloof in #13493
  - Restored runtime_flags support in models by @ilopezluna in
    [#13460]
  - Added service name completion to down command by @bmo-at in
    [#13470]
  - Fixed tilde in --env-file paths expanded to user home
    directory by @tensorworkerr in #13510
  - Handle healthcheck.disable: true by @stavros-k in #13494
  - Fixed shutdown and error handling for large file change
    batches in watch by @amyssnippet in #13525
  * Internal
  - Added unit test for upOptions.OnExit method by @htoyoda18 in
    [#13489]
  - clean up temporary compose files after conversion by
    @htoyoda18 in #13483
  - Fixed typo in isSwarmEnabled method name by @htoyoda18 in
    [#13481]
  - Fixed incorrect usage of errgroup.WithContext by @htoyoda18
    in #13480
  - Fixed timeout initialization when waitTimeout is zero by
    @htoyoda18 in #13471
  - Extracted API version constants to dedicated file by
    @htoyoda18 in #13503
  - Replace tabbed indentation in sdk.md by @pkqk in #13505
  - Improved attach error handling and cleanup by @htoyoda18 in
    [#13488]
  - Modernize tests by @dgageot in #13531
  - set fsnotify build tag when building for OSX by @ndeloof in
    [#13532]
  * Dependencies
  - build(deps): bump github.com/klauspost/compress to v1.18.2 by
    @thaJeztah in #13499
  - go.mod: remove exclude rules by @thaJeztah in #13498
  - build(deps): bump github.com/containerd/containerd/v2 to
    v2.2.1 by @thaJeztah in #13497
  - build(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 by
    @dependabot[bot] in #13502
  - build(deps): bump google.golang.org/grpc from 1.77.0 to
    1.78.0 by @dependabot[bot] in #13475
  - build(deps): bump github.com/go-viper/mapstructure/v2 from
    2.4.0 to 2.5.0 by @dependabot[bot] in #13506
  - build(deps): bump github.com/sirupsen/logrus v1.9.4 by
    @thaJeztah in #13518
  - Bump compose to v2.10.1 by @ndeloof in #13528</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1772020800">- Update to version 5.1.0:
  * Fixes
  - emit container status events after network reconnection
    (fixes #13524) by @MaheshThakur9152 in #13529
  - Fix potential nil pointer dereference in container event
    monitoring by @Nepomuk5665 in #13551
  - compose: recreate container when mounted image digest changes
    by @ibrahimypr in #13549
  - fix panic by @ndeloof in #13562
  - Fix invalid path error when using OCI artifacts on Windows by
    @mikesir87 in #13574
  - fix: execute post_start hooks in docker compose run by
    @veeceey in #13607
  - Fix panic when watch rebuilds without up by @maxproske in
    [#13610]
  * Internal
  - fsnotify is set in Dockerfile by @ndeloof in #13533
  - Dockerfile: update golangci-lint to v2.8.0 by @thaJeztah in
    [#13535]
  - replace some uses of strings.Split(N) for strings.Cut by
    @thaJeztah in #13542
  - Upgrade GitHub Actions to latest versions by @salmanmkc in
    [#13546]
  - pkg/compose: remove dependency on
    github.com/docker/buildx/driver by @thaJeztah in #13563
  - use Docker GitHub Builder to build and sign binaries and bin
    image by @crazy-max in #13568
  - ci: fix bin-image job by @crazy-max in #13569
  - pkg/compose: defaultNetworkSettings: refactor by @thaJeztah
    in #13580
  - pkg/compose: un-export consts by @thaJeztah in #13584
  - modernize some code by @thaJeztah in #13588
  * Dependencies
  - update to go1.25.7 by @thaJeztah in #13573
  - build(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by
    @dependabot[bot] in #13578
  - build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.3 to
    4.0.0-rc.4 by @dependabot[bot] in #13541
  - migrate to moby modules by @thaJeztah in #13078</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1774008000">- Update to version 5.1.1:
  * Fixes
  - Only pass ConsoleSize to ExecAttach when TTY is enabled by
    @mikesir87 in #13616
  - Fix deadlock in ttyWriter.Done() by @maks2134 in #13640
  * Dependencies
  - update to go1.25.8 by @thaJeztah in #13622
  - bump github.com/moby/moby/api from 1.53.0 to 1.54.0 by
    @dependabot[bot] in #13619
  - bump golang.org/x/sys from 0.41.0 to 0.42.0 by
    @dependabot[bot] in #13626
  - bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.2
    by @dependabot[bot] in #13631
  - bump golang.org/x/sync from 0.19.0 to 0.20.0 by
    @dependabot[bot] in #13627
  - bump github.com/moby/moby/client from 0.2.2 to 0.3.0 by
    @dependabot[bot] in #13621</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1775736000">- Update to version 5.1.2:
  * Fixes
  - Fix TTY timer rendering when duration length changes by
    @MaybeSam05 in #13634
  - Fix up attach filtering by @false200 in #13664
  - Preserve ssh:// URL scheme when resolving Dockerfile path by
    @ssam18 in #13669
  - Initialize and pass envFiles map in processExtends by
    @Mohamed-Moumni in #13678
  - Fix TestRunHook_ConsoleSize on macOS by @thaJeztah in #13686
  - Restore post-connect fallback for multi-network stacks on API
    &lt; 1.44 by @jotka in #13629
  - Publish: return api.ErrCanceled when user declines
    interactive prompts by @ishwar170695 in #13674
  - Return error on non-ErrNotExist stat failures in Tar.Sync()
    by @Lidang-Jiang in #13684
  * Internal
  - Refactor: thread context through publish sensitive data check
    by @ishwar170695 in #13653
  - Add AI-powered PR review workflow via docker/cagent-action by
    @glours in #13659
  - Update cagent-action to latest (with better permissions) by
    @derekmisler in #13665
  - Pin GitHub Actions to commit SHA, remove pr-review workflow
    by @glours in #13662
  - Exclude hook_test.go from Windows builds and propagate
    ExecStart error in runWaitExec by @pawannn in #13683
  - Skip PR review workflow for Dependabot PRs by @glours in
    [#13679]
  - Use negotiated API version for network setup by @glours in
    [#13690]
  - Fix mixed assertion libraries in tests by @thaJeztah in
    [#13689]
  - Test: use random host port for dind TLS build test by
    @ricardobranco777 in #13630
  - Remove direct dependency on docker/docker by @glours in
    [#13706]
  * Dependencies
  - Bump github.com/containerd/platforms from 1.0.0-rc.2 to
    1.0.0-rc.3 by @dependabot[bot] in #13657
  - Bump golangci-lint to v2.11.3 and configure CLAUDE to use it
    on change by @ndeloof in #13656
  - Bump google.golang.org/grpc from 1.78.0 to 1.79.3 by
    @dependabot[bot] in #13642
  - Bump github.com/moby/patternmatcher from 0.6.0 to 0.6.1 by
    @dependabot[bot] in #13667
  - Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.42.0 by
    @glours in #13663
  - Bump github.com/docker/cli from 29.2.1+incompatible to
    29.3.1+incompatible by @dependabot[bot] in #13670
  - Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by
    @dependabot[bot] in #13692
  - Bump github.com/docker/buildx v0.33.0, buildkit v0.29.0 by
    @thaJeztah in #13693
  - Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by
    @dependabot[bot] in #13697
  - Bump github.com/containerd/platforms from 1.0.0-rc.3 to
    1.0.0-rc.4 by @dependabot[bot] in #13696
  - Bump github.com/moby/moby/client v0.4.0, moby/api v1.54.1 by
    @thaJeztah in #13708
  - Bump github.com/docker/cli v29.4.0 by @thaJeztah in #13707
  - Bump compose-go to version v2.10.2 by @glours in #13705
  - Bump to Go 1.25.9 by @thaJeztah in #13720</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1776427200">- Update to version 5.1.3:
  * Fixes
  - fix: provider output handling and watch rebuild re-invocation
    by @glours in #13732
  * Internal
  - Add Docker Desktop Logs view hints and navigation shortcut by
    @glours in #13721
  - Build and push Docker Desktop module image on release by
    @glours in #13726
  - Fix typo in SECURITY.md by @glours in #13730
  - Make hook hint deep links clickable using OSC 8 terminal
    hyperlinks by @glours in #13734
  - Remove 'provenance' attribute' by @glours in #13738
  * Dependencies
  - build(deps): bump github.com/containerd/containerd/v2 from
    2.2.2 to 2.2.3 by @dependabot[bot] in #13737</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1779364800">- Update to version 5.1.4:
  * Improvements
  - feat: add stop lifecycle hook for external providers by
    @glours in #13779
  * Fixes
  - fix: route OCI artifact pulls through Docker Desktop HTTP
    proxy by @glours in #13770
  - fix: restore stoppingEvent/stoppedEvent helpers for plugin
    stop hook by @glours in #13794
  - fix(publish): flag literal inline environment values by
    @glours in #13760
  * Internal
  - ci: remove unused e2e job from merge workflow by @glours in
    [#13740]
  - chore: update cagent-action to v1.4.4 by @derekmisler in
    [#13745]
  - Change verb tense in Docker Compose reference documentation
    by @ryanjbonnell in #13773
  - pkg/compose: go fix by @thaJeztah in #13782
  - refactor: code deduplication and simplification by @ndeloof
    in #13759
  - fix: make e2e tests pass reliably locally with Docker Desktop
    by @glours in #13741
  - refactor: drop Desktop beta-settings check; gate hint on
    LogsTab flag by @glours in #13755
  * Dependencies
  - build(deps): bump github.com/mattn/go-shellwords from 1.0.12
    to 1.0.13 by @dependabot[bot] in #13731
  - build(deps): bump github.com/docker/cli from
    29.4.0+incompatible to 29.4.2+incompatible by
    @dependabot[bot] in #13768
  - build(deps): bump github.com/moby/moby/client from 0.4.0 to
    0.4.1 by @dependabot[bot] in #13752
  - build(deps): bump github.com/docker/cli from
    29.4.2+incompatible to 29.4.3+incompatible by
    @dependabot[bot] in #13776
  - build(deps): bump google.golang.org/grpc from 1.80.0 to
    1.81.0 by @dependabot[bot] in #13775
  - build(deps): update to go 1.26.3 by @thaJeztah in #13783
  - build(deps): bump google.golang.org/grpc from 1.81.0 to
    1.81.1 by @dependabot[bot] in #13791
  - build(deps): bump github.com/compose-spec/compose-go/v2 from
    2.10.2 to 2.11.0 by @dependabot[bot] in #13798
  - build(deps): bump github.com/docker/cli from
    29.4.3+incompatible to 29.5.1+incompatible by
    @dependabot[bot] in #13796
  - build(deps): bump golang.org/x/sys from 0.42.0 to 0.44.0 by
    @dependabot[bot] in #13788</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1782302400">- Update to version 5.2.0:
  This version introduces a new reconciliation algorithm between
  the observed state and the expected state.
  If you experience any issues with a Compose workload that was
  previously working, please open an issue.
  * Improvements
  - Reconciliation plan by @ndeloof &amp; @glours in #13830
  - Add rawsetenv message type for provider plugins by @rajyan in
    [#13742]
  * Fixes
  - Fix(build): skip remote URL contexts from bake fs.read
    allowlist by @ndeloof in #13816
  - Skip validation when extracting config variables by
    @scarab-systems in #13831
  - Fix(progress): probe stderr (not stdout) for TTY
    auto-detection by @glours in #13837
  - Fix(publish): honor env_file required: false for missing
    files by @Ijtihed in #13848
  * Internal
  - Docs: compose logs: add links for since/until flag
    descriptions by @thaJeztah in #13806
  - Ci: add Dependabot cooldown (20260603-170456) by
    @securityeng-bot[bot] in #13820
  - Docs(CLAUDE.md): note that commits must be signed off (DCO)
    by @ndeloof in #13817
  - Refactor: replace Split in loops with more efficient SplitSeq
    and replace HasPrefix+TrimPrefix with CutPrefix by
    @caltechustc in #13810
  - Chore: fix some comments to improve readability by @solunolab
    in #13823
  - GHA: update docs-upstream to pin workflows by sha by
    @thaJeztah in #13834
  - Docs: compose logs: add more links for flag descriptions by
    @thaJeztah in #13833
  - Fix/progress tty line overflow 13595 by @glours in #13840
  - Fix(publish): bypass Docker Desktop proxy for loopback
    registries by @ptrdom in #13825
  - Watch: do not rebuild depends_on services on file change by
    @ndeloof in #13856
  - pkg/e2e: fix malformed JWT in fixtures by @thaJeztah in
    [#13857]
  - pkg/e2e: drop unused run param from getEnv by @glours in
    [#13867]
  - Docs: ps --format json outputs JSON Lines, not a JSON array
    by @glours in #13868
  * Dependencies
  - Build(deps): bump github.com/docker/cli from
    29.5.1+incompatible to 29.5.2+incompatible by
    @dependabot[bot] in #13802
  - Update to go 1.26.4 by @thaJeztah in #13828
  - Chore(deps): github.com/containerd/typeurl/v2 v2.3.0 by
    @thaJeztah in #13829
  - Build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by
    @dependabot[bot] in #13838
  - Chore(deps): github.com/docker/cli v29.5.3,
    github.com/docker/buildx v0.34.1, buildkit v0.30.0 by
    @thaJeztah in #13841
  - Build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by
    @dependabot[bot] in #13832
  - Chore(deps): golang.org/x/crypto v0.53.0 by @thaJeztah in
    [#13844]
  - Build(deps): bump github.com/containerd/containerd/v2 from
    2.2.3 to 2.2.4 in the go_modules group across 1 directory by
    @dependabot[bot] in #13804
  - Chore(deps): bump github.com/containerd/containerd/v2 to
    v2.2.5 by @thaJeztah in #13855
  - Chore(deps): bump github.com/golang-jwt/jwt/v5 to v5.3.1 by
    @thaJeztah in #13847
  - Chore(deps): github.com/docker/cli v29.6.0,
    github.com/docker/buildx v0.35.0, buildkit v0.31.0 by
    @thaJeztah in #13842
  - Bump compose-go to version v2.12.1 by @glours in #13865</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1782993600">- Update to version 5.3.0:
  This release introduces native support for init containers.
  * Improvements
  - Pre start init containers by @glours in #13862
  * Fixes
  - Fix(oci): route authorizer token fetches through provided
    transport by @glours in #13873
  - Fix(run): scope Running events to project.Services by @glours
    in #13883
  * Internal
  - Chore: migrate cagent-action to docker-agent-action (v2.0.0)
    by @docker-agent in #13869
  - Chore: migrate to docker-agent-action v2.0.1 by @docker-agent
    in #13872
  - Fix(reconcile): hash resolved service refs to match executor
    by @glours in #13880
  - Fix(compose/port): show private port in portNotFoundError
    message by @vmphase in #13875
  - Fix(run): normalize --no-TTY flag to --no-tty by @nickjj in
    [#13885]
  * Dependencies
  - Bump compose-go to version v2.13.0 by @glours in #13886</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1783425600">- Update to version 5.3.1:
  * Internal
  - Ci: add concurrency group to pr-review-trigger to prevent
    duplicate reviews by @derekmisler in #13890
  - Fix grammar in Attestations field comment by @blackflytech in
    [#13891]
  - Ci: remove unused desktop-edge-test workflow by @thaJeztah in
    [#13897]
  - Ci: zizmor workflow by @crazy-max in #13901
  - Ci: fix docs-upstream workflow by @crazy-max in #13912
  - CODEOWNERS: add compose-reviewers by @thaJeztah in #13913
  - Ci: harden GitHub Actions workflows by @glours in #13896
  - GHA: dependabot: group docker/* actions updates by @thaJeztah
    in #13914
  * Dependencies
  - Build(deps): bump github.com/moby/buildkit from 0.31.0 to
    0.31.1 by @dependabot[bot] in #13892
  - Build(deps): bump github.com/moby/sys/user to v0.4.1 by
    @thaJeztah in #13893
  - Build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to
    4.0.0-rc.6 by @dependabot[bot] in #13876
  - Build(deps): bump github.com/docker/cli from
    29.6.0+incompatible to 29.6.1+incompatible by
    @dependabot[bot] in #13895
  - Build(deps): bump actions/stale from 10.2.0 to 10.3.0 by
    @dependabot[bot] in #13902
  - Build(deps): bump the docker-actions group with 3 updates by
    @dependabot[bot] in #13916
  - Build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
    by @dependabot[bot] in #13908
  - Build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 by
    @dependabot[bot] in #13907
  - Build(deps): bump test-summary/action from 2.4 to 2.6 by
    @dependabot[bot] in #13903
  - Build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24 by
    @dependabot[bot] in #13910
  - Build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0
    by @dependabot[bot] in #13904
  - Build(deps): bump github/codeql-action/upload-sarif from
    3.36.3 to 4.36.2 by @dependabot[bot] in #13917
  - Build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by
    @dependabot[bot] in #13911</changelog>
</package>
<package pkgid="3bab79f4847b6e7e582bbf8de35e0931418178bfd1083ed670420e83b6b5abe74d51c4708fea270489328b3c2891d0c9d774d1df6d550b55377ae09d31ddca73" name="docker-compose" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="198.5"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1753444800">- Update to version 2.39.1:
  * Internal
  - Add info about models usage to OpenTelemetry spans by @glours
    in #13094
  * Dependencies
  - Bump compose-go to v2.8.1 by @glours in #13096</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1754827200">- Update to version 2.39.2:
  * Fixes
  - Fix (regression): compose build render build output with tty
    support by @ndeloof in #13107
  - Add missing "_MODEL suffix" to model variable pass to
    dependent services of a model by @glours in #13109
  - Apply BUILDKIT_PROGRESS value when building with bake by
    @glours in #13110
  - Define pull and no_cache from either service or flags values
    when building with bake by @glours in #13133
  - Only monitor attached services on up command by @glours in
    [#13114]
  * Internal
  - Add Streams Comment by @suwakei in #13103
  - Add test of json.go by @suwakei in #13106
  - Refactoring of redundant condition checks by @suwakei in
    [#13104]
  - Eliminated magic string by @suwakei in #13105
  - Use log API for containers we didn't attached to by @ndeloof
    in #13111
  - Use cli-plugins/metadata package by @thaJeztah in #13130
  - pkg/compose: simplify getting auth-config key by @thaJeztah
    in #13120
  - Add go as a prerequisite in build instructions by @mattrunyon
    in #13131
  * Dependencies
  - Build(deps): bump github.com/docker/cli from
    28.3.2+incompatible to 28.3.3+incompatible by
    @dependabot[bot] in #13116
  - Build(deps): bump github.com/docker/docker from
    28.3.2+incompatible to 28.3.3+incompatible by
    @dependabot[bot] in #13115
  - Build(deps): bump github.com/containerd/containerd/v2 from
    2.1.3 to 2.1.4 by @dependabot[bot] in #13119
  - Build(deps): bump github.com/docker/go-connections from 0.5.0
    to 0.6.0 by @dependabot[bot] in #13137
  - Build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by
    @dependabot[bot] in #13138
  - Bump golang to 1.23.12 by @austinvazquez in #13142</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758196800">- Update to version 2.39.3:
  * Improvements
  - Add completions for the --progress flag by @m4rch3n1ng in
    [#13158]
  * Fixes
  - Add --provenance and --sbom flag to generated bake command
    line, by @glours in #13147
  - Fix runtime operations failing when env file is missing by
    @maxproske in #13156
  - Check the assume yes publish flag command before the presence
    of bind mounts by @glours in #13151
  - Fix: incorrect time when last tag time is not set by
    @kianelbo in #13171
  - Fix sigint/sigterm support in logs --follow by @ndeloof in
    [#13193]
  - Prefer application container vs one-off running exec without
    index by @ndeloof in #13178
  - Only force plain mode build if progress is set to auto by
    @ndeloof in #13181
  - Only propagate os.Env to bake, not the whole
    project.Environment by @ndeloof in #13180
  - Detect container is restarted by @ndeloof in #13210
  - Fix run --build support for service:* reference in
    additional_context by @ndeloof in #13183
  - Detect compose run wit --host and set DOCKER_HOST accordingly
    running bake by @ndeloof in #13182
  * Internal
  - Refactor to use maps.Copy by @cuiweixie in #13174
  - Replace most uses of hashicorp/go-multierror for stdlib by
    @thaJeztah in #13176
  - pkg/compose: composeService.Up: rewrite without go-multierror
    by @thaJeztah in #13177
  - Use enum-consts for State and Health by @thaJeztah in #13186
  - Unquote volume names in creation events by @rrjjvv in #13188
  - pkg/compose: use state consts from moby API by @thaJeztah in
    [#13216]
  - Document (hidden) --tty --interactive flags by @ndeloof in
    [#13201]
  * Dependencies
  - go.mod: github.com/docker/buildx v0.27.0 by @thaJeztah in
    [#13170]
  - Build(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by
    @dependabot[bot] in #13162
  - go.mod: bump buildkit v0.24.0-rc1, buildx v0.28.0-rc1 by
    @thaJeztah in #13185
  - Build(deps): bump github.com/stretchr/testify from 1.10.0 to
    1.11.1 by @dependabot[bot] in #13184
  - go.mod: bump buildx v0.28.0-rc2, buildkit v0.24.0-rc2 by
    @thaJeztah in #13197
  - Build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9
    by @dependabot[bot] in #13195
  - Build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    by @dependabot[bot] in #13198
  - go.mod: bump github.com/docker/docker, docker/cli v28.4.0 by
    @thaJeztah in #13168
  - Build(deps): bump github.com/docker/buildx from 0.28.0-rc2 to
    0.28.0 by @dependabot[bot] in #13207
  - Build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10
    by @dependabot[bot] in #13200
  - Bump golang to version 1.24.7 by @glours in #13219
  - Build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 by
    @dependabot[bot] in #13218
  - Build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0 by
    @dependabot[bot] in #13217
  - Bump compose-go to version v2.8.2 by @glours in #13220</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- Update to version 2.39.4:
  * Improvements
  - Add support of develop.watch.initial_sync attribute by
    @glours in #13232
  * Fixes
  - Volume ls command can run without a project by @ndeloof in
    [#13221]
  - Fix support for build with bake when target docker endpoint
    requires TLS by @ndeloof in #13231
  - Disable Tty if run command started from a piped command by
    @glours in #13233
  * Internal
  - Test: Set stop_signal to SIGTERM by @ricardobranco777 in
    [#13214]
  * Dependencies
  - Bump compose-go to version v2.9.0 by @glours in #13234</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1759492800">- Update to version 2.40.0:
  * Improvements
  - publish Compose application as compose.yaml + images by
    @ndeloof in #13257
  * Fixes
  - resolve secrets based on env var before executing bake by
    @ndeloof in #13237
  - pass bake secrets by env by @ndeloof in #13249
  - escape $ in bake.json as interpolation already has been
    managed by cpmpose by @ndeloof in #13259
  * Internal
  - pkg/compose: remove uses of deprecated mitchellh/mapstructure
    module by @thaJeztah in #13239
  - pkg/watch: remove unused IsWindowsShortReadError by
    @thaJeztah in #13052
  - pkg/compose: build: remove permissions warning on Windows by
    @thaJeztah in #13236
  - pluginMain: remove uses of DockerCLI.Apply by @thaJeztah in
    [#13240]
  - use containerd registry client by @ndeloof in #13245
  - provider services: use '--project-name=' notation by @glours
    in #13250
  - gha: update test-matrix: remove docker 26.x by @thaJeztah in
    [#13254]
  - pkg/compose: explicitly map AuthConfig fields instead of a
    direct cast by @thaJeztah in #13253
  - cmd/compose: fix minor linting issues by @thaJeztah in #13252
  - use containerd client for OCI operations by @ndeloof in
    [#13251]
  * Dependencies
  - build(deps): bump github.com/docker/docker, docker/cli
    v28.5.0-rc.1 by @thaJeztah in #13241
  - build(deps): bump github.com/docker/docker from
    28.5.0-rc.1+incompatible to 28.5.0+incompatible by
    @dependabot[bot] in #13260
  - build(deps): bump github.com/docker/cli from
    28.5.0-rc.1+incompatible to 28.5.0+incompatible by
    @dependabot[bot] in #13261</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- Update to version 2.40.1:
  * Fixes
  - Write error to watcher error channel if Start() fails by
    @Trolldemorted in #13263
  - Fix: set PWD only if not set by @kianelbo in #13268
  - bake only interpolates ${*} by @ndeloof in #13270
  - Fix: make "publish" push all compose files addressed in
    "extends" statements when using "profiles". by
    @ogoulpeau-ledger in #13277
  - Support Ctrl+Z to run compose in background by @ndeloof in
    [#13289]
  - Fix race-condition bug in publish command by @paul-kinexon in
    [#13291]
  - Set secret/config uid:gid to match container's USER by
    @ndeloof in #13288
  - Fix failure to delegate build with bake by @ndeloof in #13275
  - Make CTRL+Z a no-op operation on Windows by @glours in #13293
  * Internal
  - pkg/compose: align classic builder implementation with
    docker/cli by @thaJeztah in #13278
  - pkg/compose: build with bake: drop support for buildx v0.16
    and lower by @thaJeztah in #13280
  - Use fixed version of compose bridge transformer images by
    @glours in #13284
  * Dependencies
  - Build(deps): bump github.com/docker/docker from
    28.5.0+incompatible to 28.5.1+incompatible by
    @dependabot[bot] in #13274
  - Build(deps): bump github.com/docker/cli from
    28.5.0+incompatible to 28.5.1+incompatible by
    @dependabot[bot] in #13273
  - Build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by
    @dependabot[bot] in #13272
  - Build(deps): bump docker/buildx v0.29.1, moby/buildkit
    v0.25.1 by @thaJeztah in #13279
  - Bump golang to version 1.24.9 by @glours in #13285</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1761220800">- Update to version 2.40.2:
  * publish env_file references as opaque hash to prevent paths
    conflicts
  * Enforce compose files from OCI artifact all get into the same
    target (cache) folder
  * introduce WithPrompt to configure compose backend to use a
    plugable UI component for user interaction
  * test digest or canonical reference, not only tag, when checking
    if an image is already present
  * remove unused code to only rely on api.Service
  * fail build if minimal required version of buildx isn't
    installed
  * Compose can't create a tar with adequate uid:gid ownership as
    we can't get container UID/GID as int by ContainerInspect
    revert https://github.com/docker/compose/pull/13288</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1762084800">- Update to version 2.40.3:
  * Fixes
  - Fix OCI compose override support by @ndeloof #13311
  - Fix help output for "exec --no-tty" option by @tonyo #13314
  - Prompt default implementation to prevent a panic by @ndeloof
    [#13317]
  - Run hooks on restart by @ndeloof #13321
  - Fix(run): Ensure images exist only for the target service in
    run command by @idsulik #13325
  - Fix(git): Fix path traversal vulnerability in git remote
    loader by @idsulik #13331
  * Internal
  - Test to check writeComposeFile detects invalid OCI artifact
    by @ndeloof #13309
  - Code Cleanup by @ndeloof #13315
  * Dependencies
  - Bump compose-go to version v2.9.1 by @glours #13332</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1764936000">- Update to version 5.0.0:
  https://github.com/docker/compose/releases/tag/v5.0.0
  Why "v5" ?
  We decided to skip 3.0.0 for next major release after docker
  Compose v2 to prevent (more) confusion with the obsolete
  docker-compose file versions 2.x and 3.x inherited from Docker
  Compose v1. We also skipped 4.0.0 to have a clear separation with
  this legacy.
  * Major changes in this release:
  - Compose can now officially be used as a SDK to be integrated
    into third-party softwares
  - Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)
  * Improvements
  - drop support for internal buildkit builder by @ndeloof in
    [#13056]
  - Setup Compose service using functional parameters by @ndeloof
    in #13312
  - Introduce abstractions to support SDK usage without requiring
    Docker CLI by @glours in #13313
  - configure Compose service with io.Reader and io.Writer by
    @glours in #13322
  - Make progress Writer a CLI component by @ndeloof in #13316
  - SDK docs by @ndeloof in #13350
  - document support for OCI and Git remote resources by @ndeloof
    in #13362
  - run hooks on restart by @ndeloof in #13321
  - fix(run): Ensure images exist only for the target service in
    run command by @idsulik in #13325
  - Add load project to api definition by @glours in #13329
  - introduce --insecure-registry, reserved for testing purpose
    by @ndeloof in #13355
  - Move progress package to cmd as a command line component by
    @ndeloof in #13357
  - Added support for build.no_cache_filter by @ndeloof in #13377
  - add --wait option to start command by @ndeloof in #13409
  * Fixes
  - fix OCI compose override support by @ndeloof in #13311
  - Fix help output for "exec --no-tty" option by @tonyo in
    [#13314]
  - fix typo in error message by @stasadev in #13328
  - disable progress UI when build is ran with --print by
    @ndeloof in #13351
  - add (restore) support for detach keys by @ndeloof in #13369
  - images command should display image Created time or N/A if
    not available by @ndeloof in #13376
  - Fix support for port range by @ndeloof in #13381
  - skip includes preparing publish by @ndeloof in #13400
  - feat(model): ignore runtime flags in model configuration by
    @ilopezluna in #13404
  * Internal
  - Next release will be major version v5.x by @ndeloof in #13375
  - Test to check writeComposeFile detects invalid OCI artifact
    by @ndeloof in #13309
  - Code Cleanup by @ndeloof in #13315
  - fix various linting issues by @thaJeztah in #13326
  - Making the American/British spellings consistent to the error
    messages by @JLesDev in #13366
  - gha: test against docker v29, v28, and rename checks to use
    stable, oldstable by @thaJeztah in #13380
  - refactor: replace Split in loops with more efficient SplitSeq
    by @vicerace in #13393
  - refactor: use strings.Builder to improve performance by
    @liuyueyangxmu in #13398
  - Fix grammar: change 'adopted' to 'adopt' in Docker Swarm note
    by @rashmivagha in #13407
  - golangci-lint: use gci formatter instead of goimports by
    @thaJeztah in #13406
  - refactor: replace interface{} with any for clarity and
    modernization by @zjumathcode in #13411
  * Dependencies
  - Bump compose go to v2.10.0 by @ndeloof in #13410
  - build(deps): bump github.com/containerd/platforms from
    1.0.0-rc.1 to 1.0.0-rc.2 by @dependabot[bot] in #13353
  - build(deps): bump github.com/docker/docker from
    28.5.1+incompatible to 28.5.2+incompatible by
    @dependabot[bot] in #13361
  - build(deps): bump github.com/containerd/containerd/v2 from
    2.1.4 to 2.2.0 by @dependabot[bot] in #13358
  - build(deps): bump github.com/docker/cli from
    28.5.1+incompatible to 28.5.2+incompatible by
    @dependabot[bot] in #13360
  - build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 by
    @dependabot[bot] in #13367
  - build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 by
    @dependabot[bot] in #13368
  - Dockerfile: update golangci-lint to v2.6.2 by @thaJeztah in
    [#13370]
  - build(deps): bump buildx v0.30.0, buildkit v0.26.0, otel
    v1.38.0, otel/contrib v0.63.0 by @thaJeztah in #13379
  - bump dependencies by @ndeloof in #13392
  - build(deps): bump github.com/hashicorp/go-version from 1.7.0
    to 1.8.0 by @dependabot[bot] in #13403
  - build(deps): bump golang.org/x/crypto v0.45.0 by @thaJeztah
    in #13405</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1765368000">- Fix missing version (boo#1254726)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1766145600">- Update to version 5.0.1:
  * Fixes
  - Restored support for COMPOSE_COMPATIBILITY by @ndeloof in
    [#13424]
  - Fixed grammatical errors and improve clarity in code. by
    @xiaolinny in #13429
  - Fixed broken run --quiet. by @ndeloof in #13430
  - Fixed SDK example by @ndeloof in #13416
  - Added a check buildx version is set before comparing it. by
    @yangfeiyu20102011 in #13415
  - Fixed grammar: pluralize 'service' and remove apostrophes in
    lets. by @rashmivagha in #13423
  - Fixed progress UI not restoring terminal once operation
    completes. by @ndeloof in #13439
  - Fixed status alignment in progress UI. by @ndeloof in #13438
  - Restored image layer download progress details on pull. by
    @ndeloof in #13445
  - Added 'configured' event at the end of model configuration
    phase. by @glours in #13446
  - Introduced a build tag to select watcher implementation. by
    @ndeloof in #13452
  - Removed mention for v2 on README. by @alexislefebvre in
    [#13451]
  - Fixed missing error handling in setEnvWithDotEnv. by
    @htoyoda18 in #13450
  - Adopted morikuni/aec library over raw ANSI sequences. by
    @ndeloof in #13440
  - Prevented incorrect progress metrics to break compose
    display. by @ndeloof in #13457
  - Restored support for BUILDKIT_PROGRESS. by @ndeloof in #13455
  - Added check model plugin is successfully loaded. by @ndeloof
    in #13464
  - Added a warning when no service has been selected to build.
    by @ndeloof in #13467
  * Dependencies
  - Drop Go min patch version by @austinvazquez in #13418
  - bump golang 1.24.11 by @austinvazquez in #13417
  - bump osxcross by @ndeloof in #13425
  - bump golang.org/x/sys from 0.38.0 to 0.39.0 by
    @dependabot[bot] in #13433
  - bump github.com/docker/cli-docs-tool from 0.10.0 to 0.11.0 by
    @dependabot[bot] in #13437
  - bump golang.org/x/sync from 0.18.0 to 0.19.0 by
    @dependabot[bot] in #13434
  - bump tags.cncf.io/container-device-interface from 1.0.1 to
    1.1.0 by @dependabot[bot] in #13441
  - bump github.com/moby/buildkit from 0.26.2 to 0.26.3 by
    @dependabot[bot] in #13462</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1768996800">- Update to version 5.0.2:
  * Fixes
  - Fixed progress UI to adapt to terminal width by @ndeloof in
    [#13519]
  - Removed warning when no explicit build has been requested. by
    @ndeloof in #13493
  - Restored runtime_flags support in models by @ilopezluna in
    [#13460]
  - Added service name completion to down command by @bmo-at in
    [#13470]
  - Fixed tilde in --env-file paths expanded to user home
    directory by @tensorworkerr in #13510
  - Handle healthcheck.disable: true by @stavros-k in #13494
  - Fixed shutdown and error handling for large file change
    batches in watch by @amyssnippet in #13525
  * Internal
  - Added unit test for upOptions.OnExit method by @htoyoda18 in
    [#13489]
  - clean up temporary compose files after conversion by
    @htoyoda18 in #13483
  - Fixed typo in isSwarmEnabled method name by @htoyoda18 in
    [#13481]
  - Fixed incorrect usage of errgroup.WithContext by @htoyoda18
    in #13480
  - Fixed timeout initialization when waitTimeout is zero by
    @htoyoda18 in #13471
  - Extracted API version constants to dedicated file by
    @htoyoda18 in #13503
  - Replace tabbed indentation in sdk.md by @pkqk in #13505
  - Improved attach error handling and cleanup by @htoyoda18 in
    [#13488]
  - Modernize tests by @dgageot in #13531
  - set fsnotify build tag when building for OSX by @ndeloof in
    [#13532]
  * Dependencies
  - build(deps): bump github.com/klauspost/compress to v1.18.2 by
    @thaJeztah in #13499
  - go.mod: remove exclude rules by @thaJeztah in #13498
  - build(deps): bump github.com/containerd/containerd/v2 to
    v2.2.1 by @thaJeztah in #13497
  - build(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 by
    @dependabot[bot] in #13502
  - build(deps): bump google.golang.org/grpc from 1.77.0 to
    1.78.0 by @dependabot[bot] in #13475
  - build(deps): bump github.com/go-viper/mapstructure/v2 from
    2.4.0 to 2.5.0 by @dependabot[bot] in #13506
  - build(deps): bump github.com/sirupsen/logrus v1.9.4 by
    @thaJeztah in #13518
  - Bump compose to v2.10.1 by @ndeloof in #13528</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1772020800">- Update to version 5.1.0:
  * Fixes
  - emit container status events after network reconnection
    (fixes #13524) by @MaheshThakur9152 in #13529
  - Fix potential nil pointer dereference in container event
    monitoring by @Nepomuk5665 in #13551
  - compose: recreate container when mounted image digest changes
    by @ibrahimypr in #13549
  - fix panic by @ndeloof in #13562
  - Fix invalid path error when using OCI artifacts on Windows by
    @mikesir87 in #13574
  - fix: execute post_start hooks in docker compose run by
    @veeceey in #13607
  - Fix panic when watch rebuilds without up by @maxproske in
    [#13610]
  * Internal
  - fsnotify is set in Dockerfile by @ndeloof in #13533
  - Dockerfile: update golangci-lint to v2.8.0 by @thaJeztah in
    [#13535]
  - replace some uses of strings.Split(N) for strings.Cut by
    @thaJeztah in #13542
  - Upgrade GitHub Actions to latest versions by @salmanmkc in
    [#13546]
  - pkg/compose: remove dependency on
    github.com/docker/buildx/driver by @thaJeztah in #13563
  - use Docker GitHub Builder to build and sign binaries and bin
    image by @crazy-max in #13568
  - ci: fix bin-image job by @crazy-max in #13569
  - pkg/compose: defaultNetworkSettings: refactor by @thaJeztah
    in #13580
  - pkg/compose: un-export consts by @thaJeztah in #13584
  - modernize some code by @thaJeztah in #13588
  * Dependencies
  - update to go1.25.7 by @thaJeztah in #13573
  - build(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by
    @dependabot[bot] in #13578
  - build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.3 to
    4.0.0-rc.4 by @dependabot[bot] in #13541
  - migrate to moby modules by @thaJeztah in #13078</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1774008000">- Update to version 5.1.1:
  * Fixes
  - Only pass ConsoleSize to ExecAttach when TTY is enabled by
    @mikesir87 in #13616
  - Fix deadlock in ttyWriter.Done() by @maks2134 in #13640
  * Dependencies
  - update to go1.25.8 by @thaJeztah in #13622
  - bump github.com/moby/moby/api from 1.53.0 to 1.54.0 by
    @dependabot[bot] in #13619
  - bump golang.org/x/sys from 0.41.0 to 0.42.0 by
    @dependabot[bot] in #13626
  - bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.2
    by @dependabot[bot] in #13631
  - bump golang.org/x/sync from 0.19.0 to 0.20.0 by
    @dependabot[bot] in #13627
  - bump github.com/moby/moby/client from 0.2.2 to 0.3.0 by
    @dependabot[bot] in #13621</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1775736000">- Update to version 5.1.2:
  * Fixes
  - Fix TTY timer rendering when duration length changes by
    @MaybeSam05 in #13634
  - Fix up attach filtering by @false200 in #13664
  - Preserve ssh:// URL scheme when resolving Dockerfile path by
    @ssam18 in #13669
  - Initialize and pass envFiles map in processExtends by
    @Mohamed-Moumni in #13678
  - Fix TestRunHook_ConsoleSize on macOS by @thaJeztah in #13686
  - Restore post-connect fallback for multi-network stacks on API
    &lt; 1.44 by @jotka in #13629
  - Publish: return api.ErrCanceled when user declines
    interactive prompts by @ishwar170695 in #13674
  - Return error on non-ErrNotExist stat failures in Tar.Sync()
    by @Lidang-Jiang in #13684
  * Internal
  - Refactor: thread context through publish sensitive data check
    by @ishwar170695 in #13653
  - Add AI-powered PR review workflow via docker/cagent-action by
    @glours in #13659
  - Update cagent-action to latest (with better permissions) by
    @derekmisler in #13665
  - Pin GitHub Actions to commit SHA, remove pr-review workflow
    by @glours in #13662
  - Exclude hook_test.go from Windows builds and propagate
    ExecStart error in runWaitExec by @pawannn in #13683
  - Skip PR review workflow for Dependabot PRs by @glours in
    [#13679]
  - Use negotiated API version for network setup by @glours in
    [#13690]
  - Fix mixed assertion libraries in tests by @thaJeztah in
    [#13689]
  - Test: use random host port for dind TLS build test by
    @ricardobranco777 in #13630
  - Remove direct dependency on docker/docker by @glours in
    [#13706]
  * Dependencies
  - Bump github.com/containerd/platforms from 1.0.0-rc.2 to
    1.0.0-rc.3 by @dependabot[bot] in #13657
  - Bump golangci-lint to v2.11.3 and configure CLAUDE to use it
    on change by @ndeloof in #13656
  - Bump google.golang.org/grpc from 1.78.0 to 1.79.3 by
    @dependabot[bot] in #13642
  - Bump github.com/moby/patternmatcher from 0.6.0 to 0.6.1 by
    @dependabot[bot] in #13667
  - Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.42.0 by
    @glours in #13663
  - Bump github.com/docker/cli from 29.2.1+incompatible to
    29.3.1+incompatible by @dependabot[bot] in #13670
  - Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by
    @dependabot[bot] in #13692
  - Bump github.com/docker/buildx v0.33.0, buildkit v0.29.0 by
    @thaJeztah in #13693
  - Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by
    @dependabot[bot] in #13697
  - Bump github.com/containerd/platforms from 1.0.0-rc.3 to
    1.0.0-rc.4 by @dependabot[bot] in #13696
  - Bump github.com/moby/moby/client v0.4.0, moby/api v1.54.1 by
    @thaJeztah in #13708
  - Bump github.com/docker/cli v29.4.0 by @thaJeztah in #13707
  - Bump compose-go to version v2.10.2 by @glours in #13705
  - Bump to Go 1.25.9 by @thaJeztah in #13720</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1776427200">- Update to version 5.1.3:
  * Fixes
  - fix: provider output handling and watch rebuild re-invocation
    by @glours in #13732
  * Internal
  - Add Docker Desktop Logs view hints and navigation shortcut by
    @glours in #13721
  - Build and push Docker Desktop module image on release by
    @glours in #13726
  - Fix typo in SECURITY.md by @glours in #13730
  - Make hook hint deep links clickable using OSC 8 terminal
    hyperlinks by @glours in #13734
  - Remove 'provenance' attribute' by @glours in #13738
  * Dependencies
  - build(deps): bump github.com/containerd/containerd/v2 from
    2.2.2 to 2.2.3 by @dependabot[bot] in #13737</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1779364800">- Update to version 5.1.4:
  * Improvements
  - feat: add stop lifecycle hook for external providers by
    @glours in #13779
  * Fixes
  - fix: route OCI artifact pulls through Docker Desktop HTTP
    proxy by @glours in #13770
  - fix: restore stoppingEvent/stoppedEvent helpers for plugin
    stop hook by @glours in #13794
  - fix(publish): flag literal inline environment values by
    @glours in #13760
  * Internal
  - ci: remove unused e2e job from merge workflow by @glours in
    [#13740]
  - chore: update cagent-action to v1.4.4 by @derekmisler in
    [#13745]
  - Change verb tense in Docker Compose reference documentation
    by @ryanjbonnell in #13773
  - pkg/compose: go fix by @thaJeztah in #13782
  - refactor: code deduplication and simplification by @ndeloof
    in #13759
  - fix: make e2e tests pass reliably locally with Docker Desktop
    by @glours in #13741
  - refactor: drop Desktop beta-settings check; gate hint on
    LogsTab flag by @glours in #13755
  * Dependencies
  - build(deps): bump github.com/mattn/go-shellwords from 1.0.12
    to 1.0.13 by @dependabot[bot] in #13731
  - build(deps): bump github.com/docker/cli from
    29.4.0+incompatible to 29.4.2+incompatible by
    @dependabot[bot] in #13768
  - build(deps): bump github.com/moby/moby/client from 0.4.0 to
    0.4.1 by @dependabot[bot] in #13752
  - build(deps): bump github.com/docker/cli from
    29.4.2+incompatible to 29.4.3+incompatible by
    @dependabot[bot] in #13776
  - build(deps): bump google.golang.org/grpc from 1.80.0 to
    1.81.0 by @dependabot[bot] in #13775
  - build(deps): update to go 1.26.3 by @thaJeztah in #13783
  - build(deps): bump google.golang.org/grpc from 1.81.0 to
    1.81.1 by @dependabot[bot] in #13791
  - build(deps): bump github.com/compose-spec/compose-go/v2 from
    2.10.2 to 2.11.0 by @dependabot[bot] in #13798
  - build(deps): bump github.com/docker/cli from
    29.4.3+incompatible to 29.5.1+incompatible by
    @dependabot[bot] in #13796
  - build(deps): bump golang.org/x/sys from 0.42.0 to 0.44.0 by
    @dependabot[bot] in #13788</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1782302400">- Update to version 5.2.0:
  This version introduces a new reconciliation algorithm between
  the observed state and the expected state.
  If you experience any issues with a Compose workload that was
  previously working, please open an issue.
  * Improvements
  - Reconciliation plan by @ndeloof &amp; @glours in #13830
  - Add rawsetenv message type for provider plugins by @rajyan in
    [#13742]
  * Fixes
  - Fix(build): skip remote URL contexts from bake fs.read
    allowlist by @ndeloof in #13816
  - Skip validation when extracting config variables by
    @scarab-systems in #13831
  - Fix(progress): probe stderr (not stdout) for TTY
    auto-detection by @glours in #13837
  - Fix(publish): honor env_file required: false for missing
    files by @Ijtihed in #13848
  * Internal
  - Docs: compose logs: add links for since/until flag
    descriptions by @thaJeztah in #13806
  - Ci: add Dependabot cooldown (20260603-170456) by
    @securityeng-bot[bot] in #13820
  - Docs(CLAUDE.md): note that commits must be signed off (DCO)
    by @ndeloof in #13817
  - Refactor: replace Split in loops with more efficient SplitSeq
    and replace HasPrefix+TrimPrefix with CutPrefix by
    @caltechustc in #13810
  - Chore: fix some comments to improve readability by @solunolab
    in #13823
  - GHA: update docs-upstream to pin workflows by sha by
    @thaJeztah in #13834
  - Docs: compose logs: add more links for flag descriptions by
    @thaJeztah in #13833
  - Fix/progress tty line overflow 13595 by @glours in #13840
  - Fix(publish): bypass Docker Desktop proxy for loopback
    registries by @ptrdom in #13825
  - Watch: do not rebuild depends_on services on file change by
    @ndeloof in #13856
  - pkg/e2e: fix malformed JWT in fixtures by @thaJeztah in
    [#13857]
  - pkg/e2e: drop unused run param from getEnv by @glours in
    [#13867]
  - Docs: ps --format json outputs JSON Lines, not a JSON array
    by @glours in #13868
  * Dependencies
  - Build(deps): bump github.com/docker/cli from
    29.5.1+incompatible to 29.5.2+incompatible by
    @dependabot[bot] in #13802
  - Update to go 1.26.4 by @thaJeztah in #13828
  - Chore(deps): github.com/containerd/typeurl/v2 v2.3.0 by
    @thaJeztah in #13829
  - Build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by
    @dependabot[bot] in #13838
  - Chore(deps): github.com/docker/cli v29.5.3,
    github.com/docker/buildx v0.34.1, buildkit v0.30.0 by
    @thaJeztah in #13841
  - Build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by
    @dependabot[bot] in #13832
  - Chore(deps): golang.org/x/crypto v0.53.0 by @thaJeztah in
    [#13844]
  - Build(deps): bump github.com/containerd/containerd/v2 from
    2.2.3 to 2.2.4 in the go_modules group across 1 directory by
    @dependabot[bot] in #13804
  - Chore(deps): bump github.com/containerd/containerd/v2 to
    v2.2.5 by @thaJeztah in #13855
  - Chore(deps): bump github.com/golang-jwt/jwt/v5 to v5.3.1 by
    @thaJeztah in #13847
  - Chore(deps): github.com/docker/cli v29.6.0,
    github.com/docker/buildx v0.35.0, buildkit v0.31.0 by
    @thaJeztah in #13842
  - Bump compose-go to version v2.12.1 by @glours in #13865</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1782993600">- Update to version 5.3.0:
  This release introduces native support for init containers.
  * Improvements
  - Pre start init containers by @glours in #13862
  * Fixes
  - Fix(oci): route authorizer token fetches through provided
    transport by @glours in #13873
  - Fix(run): scope Running events to project.Services by @glours
    in #13883
  * Internal
  - Chore: migrate cagent-action to docker-agent-action (v2.0.0)
    by @docker-agent in #13869
  - Chore: migrate to docker-agent-action v2.0.1 by @docker-agent
    in #13872
  - Fix(reconcile): hash resolved service refs to match executor
    by @glours in #13880
  - Fix(compose/port): show private port in portNotFoundError
    message by @vmphase in #13875
  - Fix(run): normalize --no-TTY flag to --no-tty by @nickjj in
    [#13885]
  * Dependencies
  - Bump compose-go to version v2.13.0 by @glours in #13886</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1783425600">- Update to version 5.3.1:
  * Internal
  - Ci: add concurrency group to pr-review-trigger to prevent
    duplicate reviews by @derekmisler in #13890
  - Fix grammar in Attestations field comment by @blackflytech in
    [#13891]
  - Ci: remove unused desktop-edge-test workflow by @thaJeztah in
    [#13897]
  - Ci: zizmor workflow by @crazy-max in #13901
  - Ci: fix docs-upstream workflow by @crazy-max in #13912
  - CODEOWNERS: add compose-reviewers by @thaJeztah in #13913
  - Ci: harden GitHub Actions workflows by @glours in #13896
  - GHA: dependabot: group docker/* actions updates by @thaJeztah
    in #13914
  * Dependencies
  - Build(deps): bump github.com/moby/buildkit from 0.31.0 to
    0.31.1 by @dependabot[bot] in #13892
  - Build(deps): bump github.com/moby/sys/user to v0.4.1 by
    @thaJeztah in #13893
  - Build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to
    4.0.0-rc.6 by @dependabot[bot] in #13876
  - Build(deps): bump github.com/docker/cli from
    29.6.0+incompatible to 29.6.1+incompatible by
    @dependabot[bot] in #13895
  - Build(deps): bump actions/stale from 10.2.0 to 10.3.0 by
    @dependabot[bot] in #13902
  - Build(deps): bump the docker-actions group with 3 updates by
    @dependabot[bot] in #13916
  - Build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
    by @dependabot[bot] in #13908
  - Build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 by
    @dependabot[bot] in #13907
  - Build(deps): bump test-summary/action from 2.4 to 2.6 by
    @dependabot[bot] in #13903
  - Build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24 by
    @dependabot[bot] in #13910
  - Build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0
    by @dependabot[bot] in #13904
  - Build(deps): bump github/codeql-action/upload-sarif from
    3.36.3 to 4.36.2 by @dependabot[bot] in #13917
  - Build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by
    @dependabot[bot] in #13911</changelog>
</package>
<package pkgid="b56f774587042e1fc247b745488ffee7794f4bea9ae521ede85e60aa22ae1c6b4ee2cfe630075434b64f937c35167dee9786c0bfcf02f7ea4d7cd2f06dfde85e" name="docker-compose" arch="src">
  <version epoch="0" ver="5.3.1" rel="198.5"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1753444800">- Update to version 2.39.1:
  * Internal
  - Add info about models usage to OpenTelemetry spans by @glours
    in #13094
  * Dependencies
  - Bump compose-go to v2.8.1 by @glours in #13096</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1754827200">- Update to version 2.39.2:
  * Fixes
  - Fix (regression): compose build render build output with tty
    support by @ndeloof in #13107
  - Add missing "_MODEL suffix" to model variable pass to
    dependent services of a model by @glours in #13109
  - Apply BUILDKIT_PROGRESS value when building with bake by
    @glours in #13110
  - Define pull and no_cache from either service or flags values
    when building with bake by @glours in #13133
  - Only monitor attached services on up command by @glours in
    [#13114]
  * Internal
  - Add Streams Comment by @suwakei in #13103
  - Add test of json.go by @suwakei in #13106
  - Refactoring of redundant condition checks by @suwakei in
    [#13104]
  - Eliminated magic string by @suwakei in #13105
  - Use log API for containers we didn't attached to by @ndeloof
    in #13111
  - Use cli-plugins/metadata package by @thaJeztah in #13130
  - pkg/compose: simplify getting auth-config key by @thaJeztah
    in #13120
  - Add go as a prerequisite in build instructions by @mattrunyon
    in #13131
  * Dependencies
  - Build(deps): bump github.com/docker/cli from
    28.3.2+incompatible to 28.3.3+incompatible by
    @dependabot[bot] in #13116
  - Build(deps): bump github.com/docker/docker from
    28.3.2+incompatible to 28.3.3+incompatible by
    @dependabot[bot] in #13115
  - Build(deps): bump github.com/containerd/containerd/v2 from
    2.1.3 to 2.1.4 by @dependabot[bot] in #13119
  - Build(deps): bump github.com/docker/go-connections from 0.5.0
    to 0.6.0 by @dependabot[bot] in #13137
  - Build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by
    @dependabot[bot] in #13138
  - Bump golang to 1.23.12 by @austinvazquez in #13142</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758196800">- Update to version 2.39.3:
  * Improvements
  - Add completions for the --progress flag by @m4rch3n1ng in
    [#13158]
  * Fixes
  - Add --provenance and --sbom flag to generated bake command
    line, by @glours in #13147
  - Fix runtime operations failing when env file is missing by
    @maxproske in #13156
  - Check the assume yes publish flag command before the presence
    of bind mounts by @glours in #13151
  - Fix: incorrect time when last tag time is not set by
    @kianelbo in #13171
  - Fix sigint/sigterm support in logs --follow by @ndeloof in
    [#13193]
  - Prefer application container vs one-off running exec without
    index by @ndeloof in #13178
  - Only force plain mode build if progress is set to auto by
    @ndeloof in #13181
  - Only propagate os.Env to bake, not the whole
    project.Environment by @ndeloof in #13180
  - Detect container is restarted by @ndeloof in #13210
  - Fix run --build support for service:* reference in
    additional_context by @ndeloof in #13183
  - Detect compose run wit --host and set DOCKER_HOST accordingly
    running bake by @ndeloof in #13182
  * Internal
  - Refactor to use maps.Copy by @cuiweixie in #13174
  - Replace most uses of hashicorp/go-multierror for stdlib by
    @thaJeztah in #13176
  - pkg/compose: composeService.Up: rewrite without go-multierror
    by @thaJeztah in #13177
  - Use enum-consts for State and Health by @thaJeztah in #13186
  - Unquote volume names in creation events by @rrjjvv in #13188
  - pkg/compose: use state consts from moby API by @thaJeztah in
    [#13216]
  - Document (hidden) --tty --interactive flags by @ndeloof in
    [#13201]
  * Dependencies
  - go.mod: github.com/docker/buildx v0.27.0 by @thaJeztah in
    [#13170]
  - Build(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by
    @dependabot[bot] in #13162
  - go.mod: bump buildkit v0.24.0-rc1, buildx v0.28.0-rc1 by
    @thaJeztah in #13185
  - Build(deps): bump github.com/stretchr/testify from 1.10.0 to
    1.11.1 by @dependabot[bot] in #13184
  - go.mod: bump buildx v0.28.0-rc2, buildkit v0.24.0-rc2 by
    @thaJeztah in #13197
  - Build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9
    by @dependabot[bot] in #13195
  - Build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    by @dependabot[bot] in #13198
  - go.mod: bump github.com/docker/docker, docker/cli v28.4.0 by
    @thaJeztah in #13168
  - Build(deps): bump github.com/docker/buildx from 0.28.0-rc2 to
    0.28.0 by @dependabot[bot] in #13207
  - Build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10
    by @dependabot[bot] in #13200
  - Bump golang to version 1.24.7 by @glours in #13219
  - Build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 by
    @dependabot[bot] in #13218
  - Build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0 by
    @dependabot[bot] in #13217
  - Bump compose-go to version v2.8.2 by @glours in #13220</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- Update to version 2.39.4:
  * Improvements
  - Add support of develop.watch.initial_sync attribute by
    @glours in #13232
  * Fixes
  - Volume ls command can run without a project by @ndeloof in
    [#13221]
  - Fix support for build with bake when target docker endpoint
    requires TLS by @ndeloof in #13231
  - Disable Tty if run command started from a piped command by
    @glours in #13233
  * Internal
  - Test: Set stop_signal to SIGTERM by @ricardobranco777 in
    [#13214]
  * Dependencies
  - Bump compose-go to version v2.9.0 by @glours in #13234</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1759492800">- Update to version 2.40.0:
  * Improvements
  - publish Compose application as compose.yaml + images by
    @ndeloof in #13257
  * Fixes
  - resolve secrets based on env var before executing bake by
    @ndeloof in #13237
  - pass bake secrets by env by @ndeloof in #13249
  - escape $ in bake.json as interpolation already has been
    managed by cpmpose by @ndeloof in #13259
  * Internal
  - pkg/compose: remove uses of deprecated mitchellh/mapstructure
    module by @thaJeztah in #13239
  - pkg/watch: remove unused IsWindowsShortReadError by
    @thaJeztah in #13052
  - pkg/compose: build: remove permissions warning on Windows by
    @thaJeztah in #13236
  - pluginMain: remove uses of DockerCLI.Apply by @thaJeztah in
    [#13240]
  - use containerd registry client by @ndeloof in #13245
  - provider services: use '--project-name=' notation by @glours
    in #13250
  - gha: update test-matrix: remove docker 26.x by @thaJeztah in
    [#13254]
  - pkg/compose: explicitly map AuthConfig fields instead of a
    direct cast by @thaJeztah in #13253
  - cmd/compose: fix minor linting issues by @thaJeztah in #13252
  - use containerd client for OCI operations by @ndeloof in
    [#13251]
  * Dependencies
  - build(deps): bump github.com/docker/docker, docker/cli
    v28.5.0-rc.1 by @thaJeztah in #13241
  - build(deps): bump github.com/docker/docker from
    28.5.0-rc.1+incompatible to 28.5.0+incompatible by
    @dependabot[bot] in #13260
  - build(deps): bump github.com/docker/cli from
    28.5.0-rc.1+incompatible to 28.5.0+incompatible by
    @dependabot[bot] in #13261</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- Update to version 2.40.1:
  * Fixes
  - Write error to watcher error channel if Start() fails by
    @Trolldemorted in #13263
  - Fix: set PWD only if not set by @kianelbo in #13268
  - bake only interpolates ${*} by @ndeloof in #13270
  - Fix: make "publish" push all compose files addressed in
    "extends" statements when using "profiles". by
    @ogoulpeau-ledger in #13277
  - Support Ctrl+Z to run compose in background by @ndeloof in
    [#13289]
  - Fix race-condition bug in publish command by @paul-kinexon in
    [#13291]
  - Set secret/config uid:gid to match container's USER by
    @ndeloof in #13288
  - Fix failure to delegate build with bake by @ndeloof in #13275
  - Make CTRL+Z a no-op operation on Windows by @glours in #13293
  * Internal
  - pkg/compose: align classic builder implementation with
    docker/cli by @thaJeztah in #13278
  - pkg/compose: build with bake: drop support for buildx v0.16
    and lower by @thaJeztah in #13280
  - Use fixed version of compose bridge transformer images by
    @glours in #13284
  * Dependencies
  - Build(deps): bump github.com/docker/docker from
    28.5.0+incompatible to 28.5.1+incompatible by
    @dependabot[bot] in #13274
  - Build(deps): bump github.com/docker/cli from
    28.5.0+incompatible to 28.5.1+incompatible by
    @dependabot[bot] in #13273
  - Build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by
    @dependabot[bot] in #13272
  - Build(deps): bump docker/buildx v0.29.1, moby/buildkit
    v0.25.1 by @thaJeztah in #13279
  - Bump golang to version 1.24.9 by @glours in #13285</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1761220800">- Update to version 2.40.2:
  * publish env_file references as opaque hash to prevent paths
    conflicts
  * Enforce compose files from OCI artifact all get into the same
    target (cache) folder
  * introduce WithPrompt to configure compose backend to use a
    plugable UI component for user interaction
  * test digest or canonical reference, not only tag, when checking
    if an image is already present
  * remove unused code to only rely on api.Service
  * fail build if minimal required version of buildx isn't
    installed
  * Compose can't create a tar with adequate uid:gid ownership as
    we can't get container UID/GID as int by ContainerInspect
    revert https://github.com/docker/compose/pull/13288</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1762084800">- Update to version 2.40.3:
  * Fixes
  - Fix OCI compose override support by @ndeloof #13311
  - Fix help output for "exec --no-tty" option by @tonyo #13314
  - Prompt default implementation to prevent a panic by @ndeloof
    [#13317]
  - Run hooks on restart by @ndeloof #13321
  - Fix(run): Ensure images exist only for the target service in
    run command by @idsulik #13325
  - Fix(git): Fix path traversal vulnerability in git remote
    loader by @idsulik #13331
  * Internal
  - Test to check writeComposeFile detects invalid OCI artifact
    by @ndeloof #13309
  - Code Cleanup by @ndeloof #13315
  * Dependencies
  - Bump compose-go to version v2.9.1 by @glours #13332</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1764936000">- Update to version 5.0.0:
  https://github.com/docker/compose/releases/tag/v5.0.0
  Why "v5" ?
  We decided to skip 3.0.0 for next major release after docker
  Compose v2 to prevent (more) confusion with the obsolete
  docker-compose file versions 2.x and 3.x inherited from Docker
  Compose v1. We also skipped 4.0.0 to have a clear separation with
  this legacy.
  * Major changes in this release:
  - Compose can now officially be used as a SDK to be integrated
    into third-party softwares
  - Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)
  * Improvements
  - drop support for internal buildkit builder by @ndeloof in
    [#13056]
  - Setup Compose service using functional parameters by @ndeloof
    in #13312
  - Introduce abstractions to support SDK usage without requiring
    Docker CLI by @glours in #13313
  - configure Compose service with io.Reader and io.Writer by
    @glours in #13322
  - Make progress Writer a CLI component by @ndeloof in #13316
  - SDK docs by @ndeloof in #13350
  - document support for OCI and Git remote resources by @ndeloof
    in #13362
  - run hooks on restart by @ndeloof in #13321
  - fix(run): Ensure images exist only for the target service in
    run command by @idsulik in #13325
  - Add load project to api definition by @glours in #13329
  - introduce --insecure-registry, reserved for testing purpose
    by @ndeloof in #13355
  - Move progress package to cmd as a command line component by
    @ndeloof in #13357
  - Added support for build.no_cache_filter by @ndeloof in #13377
  - add --wait option to start command by @ndeloof in #13409
  * Fixes
  - fix OCI compose override support by @ndeloof in #13311
  - Fix help output for "exec --no-tty" option by @tonyo in
    [#13314]
  - fix typo in error message by @stasadev in #13328
  - disable progress UI when build is ran with --print by
    @ndeloof in #13351
  - add (restore) support for detach keys by @ndeloof in #13369
  - images command should display image Created time or N/A if
    not available by @ndeloof in #13376
  - Fix support for port range by @ndeloof in #13381
  - skip includes preparing publish by @ndeloof in #13400
  - feat(model): ignore runtime flags in model configuration by
    @ilopezluna in #13404
  * Internal
  - Next release will be major version v5.x by @ndeloof in #13375
  - Test to check writeComposeFile detects invalid OCI artifact
    by @ndeloof in #13309
  - Code Cleanup by @ndeloof in #13315
  - fix various linting issues by @thaJeztah in #13326
  - Making the American/British spellings consistent to the error
    messages by @JLesDev in #13366
  - gha: test against docker v29, v28, and rename checks to use
    stable, oldstable by @thaJeztah in #13380
  - refactor: replace Split in loops with more efficient SplitSeq
    by @vicerace in #13393
  - refactor: use strings.Builder to improve performance by
    @liuyueyangxmu in #13398
  - Fix grammar: change 'adopted' to 'adopt' in Docker Swarm note
    by @rashmivagha in #13407
  - golangci-lint: use gci formatter instead of goimports by
    @thaJeztah in #13406
  - refactor: replace interface{} with any for clarity and
    modernization by @zjumathcode in #13411
  * Dependencies
  - Bump compose go to v2.10.0 by @ndeloof in #13410
  - build(deps): bump github.com/containerd/platforms from
    1.0.0-rc.1 to 1.0.0-rc.2 by @dependabot[bot] in #13353
  - build(deps): bump github.com/docker/docker from
    28.5.1+incompatible to 28.5.2+incompatible by
    @dependabot[bot] in #13361
  - build(deps): bump github.com/containerd/containerd/v2 from
    2.1.4 to 2.2.0 by @dependabot[bot] in #13358
  - build(deps): bump github.com/docker/cli from
    28.5.1+incompatible to 28.5.2+incompatible by
    @dependabot[bot] in #13360
  - build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 by
    @dependabot[bot] in #13367
  - build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 by
    @dependabot[bot] in #13368
  - Dockerfile: update golangci-lint to v2.6.2 by @thaJeztah in
    [#13370]
  - build(deps): bump buildx v0.30.0, buildkit v0.26.0, otel
    v1.38.0, otel/contrib v0.63.0 by @thaJeztah in #13379
  - bump dependencies by @ndeloof in #13392
  - build(deps): bump github.com/hashicorp/go-version from 1.7.0
    to 1.8.0 by @dependabot[bot] in #13403
  - build(deps): bump golang.org/x/crypto v0.45.0 by @thaJeztah
    in #13405</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1765368000">- Fix missing version (boo#1254726)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1766145600">- Update to version 5.0.1:
  * Fixes
  - Restored support for COMPOSE_COMPATIBILITY by @ndeloof in
    [#13424]
  - Fixed grammatical errors and improve clarity in code. by
    @xiaolinny in #13429
  - Fixed broken run --quiet. by @ndeloof in #13430
  - Fixed SDK example by @ndeloof in #13416
  - Added a check buildx version is set before comparing it. by
    @yangfeiyu20102011 in #13415
  - Fixed grammar: pluralize 'service' and remove apostrophes in
    lets. by @rashmivagha in #13423
  - Fixed progress UI not restoring terminal once operation
    completes. by @ndeloof in #13439
  - Fixed status alignment in progress UI. by @ndeloof in #13438
  - Restored image layer download progress details on pull. by
    @ndeloof in #13445
  - Added 'configured' event at the end of model configuration
    phase. by @glours in #13446
  - Introduced a build tag to select watcher implementation. by
    @ndeloof in #13452
  - Removed mention for v2 on README. by @alexislefebvre in
    [#13451]
  - Fixed missing error handling in setEnvWithDotEnv. by
    @htoyoda18 in #13450
  - Adopted morikuni/aec library over raw ANSI sequences. by
    @ndeloof in #13440
  - Prevented incorrect progress metrics to break compose
    display. by @ndeloof in #13457
  - Restored support for BUILDKIT_PROGRESS. by @ndeloof in #13455
  - Added check model plugin is successfully loaded. by @ndeloof
    in #13464
  - Added a warning when no service has been selected to build.
    by @ndeloof in #13467
  * Dependencies
  - Drop Go min patch version by @austinvazquez in #13418
  - bump golang 1.24.11 by @austinvazquez in #13417
  - bump osxcross by @ndeloof in #13425
  - bump golang.org/x/sys from 0.38.0 to 0.39.0 by
    @dependabot[bot] in #13433
  - bump github.com/docker/cli-docs-tool from 0.10.0 to 0.11.0 by
    @dependabot[bot] in #13437
  - bump golang.org/x/sync from 0.18.0 to 0.19.0 by
    @dependabot[bot] in #13434
  - bump tags.cncf.io/container-device-interface from 1.0.1 to
    1.1.0 by @dependabot[bot] in #13441
  - bump github.com/moby/buildkit from 0.26.2 to 0.26.3 by
    @dependabot[bot] in #13462</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1768996800">- Update to version 5.0.2:
  * Fixes
  - Fixed progress UI to adapt to terminal width by @ndeloof in
    [#13519]
  - Removed warning when no explicit build has been requested. by
    @ndeloof in #13493
  - Restored runtime_flags support in models by @ilopezluna in
    [#13460]
  - Added service name completion to down command by @bmo-at in
    [#13470]
  - Fixed tilde in --env-file paths expanded to user home
    directory by @tensorworkerr in #13510
  - Handle healthcheck.disable: true by @stavros-k in #13494
  - Fixed shutdown and error handling for large file change
    batches in watch by @amyssnippet in #13525
  * Internal
  - Added unit test for upOptions.OnExit method by @htoyoda18 in
    [#13489]
  - clean up temporary compose files after conversion by
    @htoyoda18 in #13483
  - Fixed typo in isSwarmEnabled method name by @htoyoda18 in
    [#13481]
  - Fixed incorrect usage of errgroup.WithContext by @htoyoda18
    in #13480
  - Fixed timeout initialization when waitTimeout is zero by
    @htoyoda18 in #13471
  - Extracted API version constants to dedicated file by
    @htoyoda18 in #13503
  - Replace tabbed indentation in sdk.md by @pkqk in #13505
  - Improved attach error handling and cleanup by @htoyoda18 in
    [#13488]
  - Modernize tests by @dgageot in #13531
  - set fsnotify build tag when building for OSX by @ndeloof in
    [#13532]
  * Dependencies
  - build(deps): bump github.com/klauspost/compress to v1.18.2 by
    @thaJeztah in #13499
  - go.mod: remove exclude rules by @thaJeztah in #13498
  - build(deps): bump github.com/containerd/containerd/v2 to
    v2.2.1 by @thaJeztah in #13497
  - build(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 by
    @dependabot[bot] in #13502
  - build(deps): bump google.golang.org/grpc from 1.77.0 to
    1.78.0 by @dependabot[bot] in #13475
  - build(deps): bump github.com/go-viper/mapstructure/v2 from
    2.4.0 to 2.5.0 by @dependabot[bot] in #13506
  - build(deps): bump github.com/sirupsen/logrus v1.9.4 by
    @thaJeztah in #13518
  - Bump compose to v2.10.1 by @ndeloof in #13528</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1772020800">- Update to version 5.1.0:
  * Fixes
  - emit container status events after network reconnection
    (fixes #13524) by @MaheshThakur9152 in #13529
  - Fix potential nil pointer dereference in container event
    monitoring by @Nepomuk5665 in #13551
  - compose: recreate container when mounted image digest changes
    by @ibrahimypr in #13549
  - fix panic by @ndeloof in #13562
  - Fix invalid path error when using OCI artifacts on Windows by
    @mikesir87 in #13574
  - fix: execute post_start hooks in docker compose run by
    @veeceey in #13607
  - Fix panic when watch rebuilds without up by @maxproske in
    [#13610]
  * Internal
  - fsnotify is set in Dockerfile by @ndeloof in #13533
  - Dockerfile: update golangci-lint to v2.8.0 by @thaJeztah in
    [#13535]
  - replace some uses of strings.Split(N) for strings.Cut by
    @thaJeztah in #13542
  - Upgrade GitHub Actions to latest versions by @salmanmkc in
    [#13546]
  - pkg/compose: remove dependency on
    github.com/docker/buildx/driver by @thaJeztah in #13563
  - use Docker GitHub Builder to build and sign binaries and bin
    image by @crazy-max in #13568
  - ci: fix bin-image job by @crazy-max in #13569
  - pkg/compose: defaultNetworkSettings: refactor by @thaJeztah
    in #13580
  - pkg/compose: un-export consts by @thaJeztah in #13584
  - modernize some code by @thaJeztah in #13588
  * Dependencies
  - update to go1.25.7 by @thaJeztah in #13573
  - build(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by
    @dependabot[bot] in #13578
  - build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.3 to
    4.0.0-rc.4 by @dependabot[bot] in #13541
  - migrate to moby modules by @thaJeztah in #13078</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1774008000">- Update to version 5.1.1:
  * Fixes
  - Only pass ConsoleSize to ExecAttach when TTY is enabled by
    @mikesir87 in #13616
  - Fix deadlock in ttyWriter.Done() by @maks2134 in #13640
  * Dependencies
  - update to go1.25.8 by @thaJeztah in #13622
  - bump github.com/moby/moby/api from 1.53.0 to 1.54.0 by
    @dependabot[bot] in #13619
  - bump golang.org/x/sys from 0.41.0 to 0.42.0 by
    @dependabot[bot] in #13626
  - bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.2
    by @dependabot[bot] in #13631
  - bump golang.org/x/sync from 0.19.0 to 0.20.0 by
    @dependabot[bot] in #13627
  - bump github.com/moby/moby/client from 0.2.2 to 0.3.0 by
    @dependabot[bot] in #13621</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1775736000">- Update to version 5.1.2:
  * Fixes
  - Fix TTY timer rendering when duration length changes by
    @MaybeSam05 in #13634
  - Fix up attach filtering by @false200 in #13664
  - Preserve ssh:// URL scheme when resolving Dockerfile path by
    @ssam18 in #13669
  - Initialize and pass envFiles map in processExtends by
    @Mohamed-Moumni in #13678
  - Fix TestRunHook_ConsoleSize on macOS by @thaJeztah in #13686
  - Restore post-connect fallback for multi-network stacks on API
    &lt; 1.44 by @jotka in #13629
  - Publish: return api.ErrCanceled when user declines
    interactive prompts by @ishwar170695 in #13674
  - Return error on non-ErrNotExist stat failures in Tar.Sync()
    by @Lidang-Jiang in #13684
  * Internal
  - Refactor: thread context through publish sensitive data check
    by @ishwar170695 in #13653
  - Add AI-powered PR review workflow via docker/cagent-action by
    @glours in #13659
  - Update cagent-action to latest (with better permissions) by
    @derekmisler in #13665
  - Pin GitHub Actions to commit SHA, remove pr-review workflow
    by @glours in #13662
  - Exclude hook_test.go from Windows builds and propagate
    ExecStart error in runWaitExec by @pawannn in #13683
  - Skip PR review workflow for Dependabot PRs by @glours in
    [#13679]
  - Use negotiated API version for network setup by @glours in
    [#13690]
  - Fix mixed assertion libraries in tests by @thaJeztah in
    [#13689]
  - Test: use random host port for dind TLS build test by
    @ricardobranco777 in #13630
  - Remove direct dependency on docker/docker by @glours in
    [#13706]
  * Dependencies
  - Bump github.com/containerd/platforms from 1.0.0-rc.2 to
    1.0.0-rc.3 by @dependabot[bot] in #13657
  - Bump golangci-lint to v2.11.3 and configure CLAUDE to use it
    on change by @ndeloof in #13656
  - Bump google.golang.org/grpc from 1.78.0 to 1.79.3 by
    @dependabot[bot] in #13642
  - Bump github.com/moby/patternmatcher from 0.6.0 to 0.6.1 by
    @dependabot[bot] in #13667
  - Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.42.0 by
    @glours in #13663
  - Bump github.com/docker/cli from 29.2.1+incompatible to
    29.3.1+incompatible by @dependabot[bot] in #13670
  - Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by
    @dependabot[bot] in #13692
  - Bump github.com/docker/buildx v0.33.0, buildkit v0.29.0 by
    @thaJeztah in #13693
  - Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by
    @dependabot[bot] in #13697
  - Bump github.com/containerd/platforms from 1.0.0-rc.3 to
    1.0.0-rc.4 by @dependabot[bot] in #13696
  - Bump github.com/moby/moby/client v0.4.0, moby/api v1.54.1 by
    @thaJeztah in #13708
  - Bump github.com/docker/cli v29.4.0 by @thaJeztah in #13707
  - Bump compose-go to version v2.10.2 by @glours in #13705
  - Bump to Go 1.25.9 by @thaJeztah in #13720</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1776427200">- Update to version 5.1.3:
  * Fixes
  - fix: provider output handling and watch rebuild re-invocation
    by @glours in #13732
  * Internal
  - Add Docker Desktop Logs view hints and navigation shortcut by
    @glours in #13721
  - Build and push Docker Desktop module image on release by
    @glours in #13726
  - Fix typo in SECURITY.md by @glours in #13730
  - Make hook hint deep links clickable using OSC 8 terminal
    hyperlinks by @glours in #13734
  - Remove 'provenance' attribute' by @glours in #13738
  * Dependencies
  - build(deps): bump github.com/containerd/containerd/v2 from
    2.2.2 to 2.2.3 by @dependabot[bot] in #13737</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1779364800">- Update to version 5.1.4:
  * Improvements
  - feat: add stop lifecycle hook for external providers by
    @glours in #13779
  * Fixes
  - fix: route OCI artifact pulls through Docker Desktop HTTP
    proxy by @glours in #13770
  - fix: restore stoppingEvent/stoppedEvent helpers for plugin
    stop hook by @glours in #13794
  - fix(publish): flag literal inline environment values by
    @glours in #13760
  * Internal
  - ci: remove unused e2e job from merge workflow by @glours in
    [#13740]
  - chore: update cagent-action to v1.4.4 by @derekmisler in
    [#13745]
  - Change verb tense in Docker Compose reference documentation
    by @ryanjbonnell in #13773
  - pkg/compose: go fix by @thaJeztah in #13782
  - refactor: code deduplication and simplification by @ndeloof
    in #13759
  - fix: make e2e tests pass reliably locally with Docker Desktop
    by @glours in #13741
  - refactor: drop Desktop beta-settings check; gate hint on
    LogsTab flag by @glours in #13755
  * Dependencies
  - build(deps): bump github.com/mattn/go-shellwords from 1.0.12
    to 1.0.13 by @dependabot[bot] in #13731
  - build(deps): bump github.com/docker/cli from
    29.4.0+incompatible to 29.4.2+incompatible by
    @dependabot[bot] in #13768
  - build(deps): bump github.com/moby/moby/client from 0.4.0 to
    0.4.1 by @dependabot[bot] in #13752
  - build(deps): bump github.com/docker/cli from
    29.4.2+incompatible to 29.4.3+incompatible by
    @dependabot[bot] in #13776
  - build(deps): bump google.golang.org/grpc from 1.80.0 to
    1.81.0 by @dependabot[bot] in #13775
  - build(deps): update to go 1.26.3 by @thaJeztah in #13783
  - build(deps): bump google.golang.org/grpc from 1.81.0 to
    1.81.1 by @dependabot[bot] in #13791
  - build(deps): bump github.com/compose-spec/compose-go/v2 from
    2.10.2 to 2.11.0 by @dependabot[bot] in #13798
  - build(deps): bump github.com/docker/cli from
    29.4.3+incompatible to 29.5.1+incompatible by
    @dependabot[bot] in #13796
  - build(deps): bump golang.org/x/sys from 0.42.0 to 0.44.0 by
    @dependabot[bot] in #13788</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1782302400">- Update to version 5.2.0:
  This version introduces a new reconciliation algorithm between
  the observed state and the expected state.
  If you experience any issues with a Compose workload that was
  previously working, please open an issue.
  * Improvements
  - Reconciliation plan by @ndeloof &amp; @glours in #13830
  - Add rawsetenv message type for provider plugins by @rajyan in
    [#13742]
  * Fixes
  - Fix(build): skip remote URL contexts from bake fs.read
    allowlist by @ndeloof in #13816
  - Skip validation when extracting config variables by
    @scarab-systems in #13831
  - Fix(progress): probe stderr (not stdout) for TTY
    auto-detection by @glours in #13837
  - Fix(publish): honor env_file required: false for missing
    files by @Ijtihed in #13848
  * Internal
  - Docs: compose logs: add links for since/until flag
    descriptions by @thaJeztah in #13806
  - Ci: add Dependabot cooldown (20260603-170456) by
    @securityeng-bot[bot] in #13820
  - Docs(CLAUDE.md): note that commits must be signed off (DCO)
    by @ndeloof in #13817
  - Refactor: replace Split in loops with more efficient SplitSeq
    and replace HasPrefix+TrimPrefix with CutPrefix by
    @caltechustc in #13810
  - Chore: fix some comments to improve readability by @solunolab
    in #13823
  - GHA: update docs-upstream to pin workflows by sha by
    @thaJeztah in #13834
  - Docs: compose logs: add more links for flag descriptions by
    @thaJeztah in #13833
  - Fix/progress tty line overflow 13595 by @glours in #13840
  - Fix(publish): bypass Docker Desktop proxy for loopback
    registries by @ptrdom in #13825
  - Watch: do not rebuild depends_on services on file change by
    @ndeloof in #13856
  - pkg/e2e: fix malformed JWT in fixtures by @thaJeztah in
    [#13857]
  - pkg/e2e: drop unused run param from getEnv by @glours in
    [#13867]
  - Docs: ps --format json outputs JSON Lines, not a JSON array
    by @glours in #13868
  * Dependencies
  - Build(deps): bump github.com/docker/cli from
    29.5.1+incompatible to 29.5.2+incompatible by
    @dependabot[bot] in #13802
  - Update to go 1.26.4 by @thaJeztah in #13828
  - Chore(deps): github.com/containerd/typeurl/v2 v2.3.0 by
    @thaJeztah in #13829
  - Build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by
    @dependabot[bot] in #13838
  - Chore(deps): github.com/docker/cli v29.5.3,
    github.com/docker/buildx v0.34.1, buildkit v0.30.0 by
    @thaJeztah in #13841
  - Build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by
    @dependabot[bot] in #13832
  - Chore(deps): golang.org/x/crypto v0.53.0 by @thaJeztah in
    [#13844]
  - Build(deps): bump github.com/containerd/containerd/v2 from
    2.2.3 to 2.2.4 in the go_modules group across 1 directory by
    @dependabot[bot] in #13804
  - Chore(deps): bump github.com/containerd/containerd/v2 to
    v2.2.5 by @thaJeztah in #13855
  - Chore(deps): bump github.com/golang-jwt/jwt/v5 to v5.3.1 by
    @thaJeztah in #13847
  - Chore(deps): github.com/docker/cli v29.6.0,
    github.com/docker/buildx v0.35.0, buildkit v0.31.0 by
    @thaJeztah in #13842
  - Bump compose-go to version v2.12.1 by @glours in #13865</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1782993600">- Update to version 5.3.0:
  This release introduces native support for init containers.
  * Improvements
  - Pre start init containers by @glours in #13862
  * Fixes
  - Fix(oci): route authorizer token fetches through provided
    transport by @glours in #13873
  - Fix(run): scope Running events to project.Services by @glours
    in #13883
  * Internal
  - Chore: migrate cagent-action to docker-agent-action (v2.0.0)
    by @docker-agent in #13869
  - Chore: migrate to docker-agent-action v2.0.1 by @docker-agent
    in #13872
  - Fix(reconcile): hash resolved service refs to match executor
    by @glours in #13880
  - Fix(compose/port): show private port in portNotFoundError
    message by @vmphase in #13875
  - Fix(run): normalize --no-TTY flag to --no-tty by @nickjj in
    [#13885]
  * Dependencies
  - Bump compose-go to version v2.13.0 by @glours in #13886</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1783425600">- Update to version 5.3.1:
  * Internal
  - Ci: add concurrency group to pr-review-trigger to prevent
    duplicate reviews by @derekmisler in #13890
  - Fix grammar in Attestations field comment by @blackflytech in
    [#13891]
  - Ci: remove unused desktop-edge-test workflow by @thaJeztah in
    [#13897]
  - Ci: zizmor workflow by @crazy-max in #13901
  - Ci: fix docs-upstream workflow by @crazy-max in #13912
  - CODEOWNERS: add compose-reviewers by @thaJeztah in #13913
  - Ci: harden GitHub Actions workflows by @glours in #13896
  - GHA: dependabot: group docker/* actions updates by @thaJeztah
    in #13914
  * Dependencies
  - Build(deps): bump github.com/moby/buildkit from 0.31.0 to
    0.31.1 by @dependabot[bot] in #13892
  - Build(deps): bump github.com/moby/sys/user to v0.4.1 by
    @thaJeztah in #13893
  - Build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to
    4.0.0-rc.6 by @dependabot[bot] in #13876
  - Build(deps): bump github.com/docker/cli from
    29.6.0+incompatible to 29.6.1+incompatible by
    @dependabot[bot] in #13895
  - Build(deps): bump actions/stale from 10.2.0 to 10.3.0 by
    @dependabot[bot] in #13902
  - Build(deps): bump the docker-actions group with 3 updates by
    @dependabot[bot] in #13916
  - Build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
    by @dependabot[bot] in #13908
  - Build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 by
    @dependabot[bot] in #13907
  - Build(deps): bump test-summary/action from 2.4 to 2.6 by
    @dependabot[bot] in #13903
  - Build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24 by
    @dependabot[bot] in #13910
  - Build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0
    by @dependabot[bot] in #13904
  - Build(deps): bump github/codeql-action/upload-sarif from
    3.36.3 to 4.36.2 by @dependabot[bot] in #13917
  - Build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by
    @dependabot[bot] in #13911</changelog>
</package>
<package pkgid="fd62bb380e2fe0cf739614a50e9a5f096c94b6df525bd328b154a705e9e1ba86f42f1be54bb32d36a9e697da4fd7a9af1510ff194bef33190ce3b67d2d9e8835" name="docker-compose" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="198.5"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1753444800">- Update to version 2.39.1:
  * Internal
  - Add info about models usage to OpenTelemetry spans by @glours
    in #13094
  * Dependencies
  - Bump compose-go to v2.8.1 by @glours in #13096</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1754827200">- Update to version 2.39.2:
  * Fixes
  - Fix (regression): compose build render build output with tty
    support by @ndeloof in #13107
  - Add missing "_MODEL suffix" to model variable pass to
    dependent services of a model by @glours in #13109
  - Apply BUILDKIT_PROGRESS value when building with bake by
    @glours in #13110
  - Define pull and no_cache from either service or flags values
    when building with bake by @glours in #13133
  - Only monitor attached services on up command by @glours in
    [#13114]
  * Internal
  - Add Streams Comment by @suwakei in #13103
  - Add test of json.go by @suwakei in #13106
  - Refactoring of redundant condition checks by @suwakei in
    [#13104]
  - Eliminated magic string by @suwakei in #13105
  - Use log API for containers we didn't attached to by @ndeloof
    in #13111
  - Use cli-plugins/metadata package by @thaJeztah in #13130
  - pkg/compose: simplify getting auth-config key by @thaJeztah
    in #13120
  - Add go as a prerequisite in build instructions by @mattrunyon
    in #13131
  * Dependencies
  - Build(deps): bump github.com/docker/cli from
    28.3.2+incompatible to 28.3.3+incompatible by
    @dependabot[bot] in #13116
  - Build(deps): bump github.com/docker/docker from
    28.3.2+incompatible to 28.3.3+incompatible by
    @dependabot[bot] in #13115
  - Build(deps): bump github.com/containerd/containerd/v2 from
    2.1.3 to 2.1.4 by @dependabot[bot] in #13119
  - Build(deps): bump github.com/docker/go-connections from 0.5.0
    to 0.6.0 by @dependabot[bot] in #13137
  - Build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by
    @dependabot[bot] in #13138
  - Bump golang to 1.23.12 by @austinvazquez in #13142</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758196800">- Update to version 2.39.3:
  * Improvements
  - Add completions for the --progress flag by @m4rch3n1ng in
    [#13158]
  * Fixes
  - Add --provenance and --sbom flag to generated bake command
    line, by @glours in #13147
  - Fix runtime operations failing when env file is missing by
    @maxproske in #13156
  - Check the assume yes publish flag command before the presence
    of bind mounts by @glours in #13151
  - Fix: incorrect time when last tag time is not set by
    @kianelbo in #13171
  - Fix sigint/sigterm support in logs --follow by @ndeloof in
    [#13193]
  - Prefer application container vs one-off running exec without
    index by @ndeloof in #13178
  - Only force plain mode build if progress is set to auto by
    @ndeloof in #13181
  - Only propagate os.Env to bake, not the whole
    project.Environment by @ndeloof in #13180
  - Detect container is restarted by @ndeloof in #13210
  - Fix run --build support for service:* reference in
    additional_context by @ndeloof in #13183
  - Detect compose run wit --host and set DOCKER_HOST accordingly
    running bake by @ndeloof in #13182
  * Internal
  - Refactor to use maps.Copy by @cuiweixie in #13174
  - Replace most uses of hashicorp/go-multierror for stdlib by
    @thaJeztah in #13176
  - pkg/compose: composeService.Up: rewrite without go-multierror
    by @thaJeztah in #13177
  - Use enum-consts for State and Health by @thaJeztah in #13186
  - Unquote volume names in creation events by @rrjjvv in #13188
  - pkg/compose: use state consts from moby API by @thaJeztah in
    [#13216]
  - Document (hidden) --tty --interactive flags by @ndeloof in
    [#13201]
  * Dependencies
  - go.mod: github.com/docker/buildx v0.27.0 by @thaJeztah in
    [#13170]
  - Build(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by
    @dependabot[bot] in #13162
  - go.mod: bump buildkit v0.24.0-rc1, buildx v0.28.0-rc1 by
    @thaJeztah in #13185
  - Build(deps): bump github.com/stretchr/testify from 1.10.0 to
    1.11.1 by @dependabot[bot] in #13184
  - go.mod: bump buildx v0.28.0-rc2, buildkit v0.24.0-rc2 by
    @thaJeztah in #13197
  - Build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9
    by @dependabot[bot] in #13195
  - Build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    by @dependabot[bot] in #13198
  - go.mod: bump github.com/docker/docker, docker/cli v28.4.0 by
    @thaJeztah in #13168
  - Build(deps): bump github.com/docker/buildx from 0.28.0-rc2 to
    0.28.0 by @dependabot[bot] in #13207
  - Build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10
    by @dependabot[bot] in #13200
  - Bump golang to version 1.24.7 by @glours in #13219
  - Build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 by
    @dependabot[bot] in #13218
  - Build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0 by
    @dependabot[bot] in #13217
  - Bump compose-go to version v2.8.2 by @glours in #13220</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- Update to version 2.39.4:
  * Improvements
  - Add support of develop.watch.initial_sync attribute by
    @glours in #13232
  * Fixes
  - Volume ls command can run without a project by @ndeloof in
    [#13221]
  - Fix support for build with bake when target docker endpoint
    requires TLS by @ndeloof in #13231
  - Disable Tty if run command started from a piped command by
    @glours in #13233
  * Internal
  - Test: Set stop_signal to SIGTERM by @ricardobranco777 in
    [#13214]
  * Dependencies
  - Bump compose-go to version v2.9.0 by @glours in #13234</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1759492800">- Update to version 2.40.0:
  * Improvements
  - publish Compose application as compose.yaml + images by
    @ndeloof in #13257
  * Fixes
  - resolve secrets based on env var before executing bake by
    @ndeloof in #13237
  - pass bake secrets by env by @ndeloof in #13249
  - escape $ in bake.json as interpolation already has been
    managed by cpmpose by @ndeloof in #13259
  * Internal
  - pkg/compose: remove uses of deprecated mitchellh/mapstructure
    module by @thaJeztah in #13239
  - pkg/watch: remove unused IsWindowsShortReadError by
    @thaJeztah in #13052
  - pkg/compose: build: remove permissions warning on Windows by
    @thaJeztah in #13236
  - pluginMain: remove uses of DockerCLI.Apply by @thaJeztah in
    [#13240]
  - use containerd registry client by @ndeloof in #13245
  - provider services: use '--project-name=' notation by @glours
    in #13250
  - gha: update test-matrix: remove docker 26.x by @thaJeztah in
    [#13254]
  - pkg/compose: explicitly map AuthConfig fields instead of a
    direct cast by @thaJeztah in #13253
  - cmd/compose: fix minor linting issues by @thaJeztah in #13252
  - use containerd client for OCI operations by @ndeloof in
    [#13251]
  * Dependencies
  - build(deps): bump github.com/docker/docker, docker/cli
    v28.5.0-rc.1 by @thaJeztah in #13241
  - build(deps): bump github.com/docker/docker from
    28.5.0-rc.1+incompatible to 28.5.0+incompatible by
    @dependabot[bot] in #13260
  - build(deps): bump github.com/docker/cli from
    28.5.0-rc.1+incompatible to 28.5.0+incompatible by
    @dependabot[bot] in #13261</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- Update to version 2.40.1:
  * Fixes
  - Write error to watcher error channel if Start() fails by
    @Trolldemorted in #13263
  - Fix: set PWD only if not set by @kianelbo in #13268
  - bake only interpolates ${*} by @ndeloof in #13270
  - Fix: make "publish" push all compose files addressed in
    "extends" statements when using "profiles". by
    @ogoulpeau-ledger in #13277
  - Support Ctrl+Z to run compose in background by @ndeloof in
    [#13289]
  - Fix race-condition bug in publish command by @paul-kinexon in
    [#13291]
  - Set secret/config uid:gid to match container's USER by
    @ndeloof in #13288
  - Fix failure to delegate build with bake by @ndeloof in #13275
  - Make CTRL+Z a no-op operation on Windows by @glours in #13293
  * Internal
  - pkg/compose: align classic builder implementation with
    docker/cli by @thaJeztah in #13278
  - pkg/compose: build with bake: drop support for buildx v0.16
    and lower by @thaJeztah in #13280
  - Use fixed version of compose bridge transformer images by
    @glours in #13284
  * Dependencies
  - Build(deps): bump github.com/docker/docker from
    28.5.0+incompatible to 28.5.1+incompatible by
    @dependabot[bot] in #13274
  - Build(deps): bump github.com/docker/cli from
    28.5.0+incompatible to 28.5.1+incompatible by
    @dependabot[bot] in #13273
  - Build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by
    @dependabot[bot] in #13272
  - Build(deps): bump docker/buildx v0.29.1, moby/buildkit
    v0.25.1 by @thaJeztah in #13279
  - Bump golang to version 1.24.9 by @glours in #13285</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1761220800">- Update to version 2.40.2:
  * publish env_file references as opaque hash to prevent paths
    conflicts
  * Enforce compose files from OCI artifact all get into the same
    target (cache) folder
  * introduce WithPrompt to configure compose backend to use a
    plugable UI component for user interaction
  * test digest or canonical reference, not only tag, when checking
    if an image is already present
  * remove unused code to only rely on api.Service
  * fail build if minimal required version of buildx isn't
    installed
  * Compose can't create a tar with adequate uid:gid ownership as
    we can't get container UID/GID as int by ContainerInspect
    revert https://github.com/docker/compose/pull/13288</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1762084800">- Update to version 2.40.3:
  * Fixes
  - Fix OCI compose override support by @ndeloof #13311
  - Fix help output for "exec --no-tty" option by @tonyo #13314
  - Prompt default implementation to prevent a panic by @ndeloof
    [#13317]
  - Run hooks on restart by @ndeloof #13321
  - Fix(run): Ensure images exist only for the target service in
    run command by @idsulik #13325
  - Fix(git): Fix path traversal vulnerability in git remote
    loader by @idsulik #13331
  * Internal
  - Test to check writeComposeFile detects invalid OCI artifact
    by @ndeloof #13309
  - Code Cleanup by @ndeloof #13315
  * Dependencies
  - Bump compose-go to version v2.9.1 by @glours #13332</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1764936000">- Update to version 5.0.0:
  https://github.com/docker/compose/releases/tag/v5.0.0
  Why "v5" ?
  We decided to skip 3.0.0 for next major release after docker
  Compose v2 to prevent (more) confusion with the obsolete
  docker-compose file versions 2.x and 3.x inherited from Docker
  Compose v1. We also skipped 4.0.0 to have a clear separation with
  this legacy.
  * Major changes in this release:
  - Compose can now officially be used as a SDK to be integrated
    into third-party softwares
  - Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)
  * Improvements
  - drop support for internal buildkit builder by @ndeloof in
    [#13056]
  - Setup Compose service using functional parameters by @ndeloof
    in #13312
  - Introduce abstractions to support SDK usage without requiring
    Docker CLI by @glours in #13313
  - configure Compose service with io.Reader and io.Writer by
    @glours in #13322
  - Make progress Writer a CLI component by @ndeloof in #13316
  - SDK docs by @ndeloof in #13350
  - document support for OCI and Git remote resources by @ndeloof
    in #13362
  - run hooks on restart by @ndeloof in #13321
  - fix(run): Ensure images exist only for the target service in
    run command by @idsulik in #13325
  - Add load project to api definition by @glours in #13329
  - introduce --insecure-registry, reserved for testing purpose
    by @ndeloof in #13355
  - Move progress package to cmd as a command line component by
    @ndeloof in #13357
  - Added support for build.no_cache_filter by @ndeloof in #13377
  - add --wait option to start command by @ndeloof in #13409
  * Fixes
  - fix OCI compose override support by @ndeloof in #13311
  - Fix help output for "exec --no-tty" option by @tonyo in
    [#13314]
  - fix typo in error message by @stasadev in #13328
  - disable progress UI when build is ran with --print by
    @ndeloof in #13351
  - add (restore) support for detach keys by @ndeloof in #13369
  - images command should display image Created time or N/A if
    not available by @ndeloof in #13376
  - Fix support for port range by @ndeloof in #13381
  - skip includes preparing publish by @ndeloof in #13400
  - feat(model): ignore runtime flags in model configuration by
    @ilopezluna in #13404
  * Internal
  - Next release will be major version v5.x by @ndeloof in #13375
  - Test to check writeComposeFile detects invalid OCI artifact
    by @ndeloof in #13309
  - Code Cleanup by @ndeloof in #13315
  - fix various linting issues by @thaJeztah in #13326
  - Making the American/British spellings consistent to the error
    messages by @JLesDev in #13366
  - gha: test against docker v29, v28, and rename checks to use
    stable, oldstable by @thaJeztah in #13380
  - refactor: replace Split in loops with more efficient SplitSeq
    by @vicerace in #13393
  - refactor: use strings.Builder to improve performance by
    @liuyueyangxmu in #13398
  - Fix grammar: change 'adopted' to 'adopt' in Docker Swarm note
    by @rashmivagha in #13407
  - golangci-lint: use gci formatter instead of goimports by
    @thaJeztah in #13406
  - refactor: replace interface{} with any for clarity and
    modernization by @zjumathcode in #13411
  * Dependencies
  - Bump compose go to v2.10.0 by @ndeloof in #13410
  - build(deps): bump github.com/containerd/platforms from
    1.0.0-rc.1 to 1.0.0-rc.2 by @dependabot[bot] in #13353
  - build(deps): bump github.com/docker/docker from
    28.5.1+incompatible to 28.5.2+incompatible by
    @dependabot[bot] in #13361
  - build(deps): bump github.com/containerd/containerd/v2 from
    2.1.4 to 2.2.0 by @dependabot[bot] in #13358
  - build(deps): bump github.com/docker/cli from
    28.5.1+incompatible to 28.5.2+incompatible by
    @dependabot[bot] in #13360
  - build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 by
    @dependabot[bot] in #13367
  - build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 by
    @dependabot[bot] in #13368
  - Dockerfile: update golangci-lint to v2.6.2 by @thaJeztah in
    [#13370]
  - build(deps): bump buildx v0.30.0, buildkit v0.26.0, otel
    v1.38.0, otel/contrib v0.63.0 by @thaJeztah in #13379
  - bump dependencies by @ndeloof in #13392
  - build(deps): bump github.com/hashicorp/go-version from 1.7.0
    to 1.8.0 by @dependabot[bot] in #13403
  - build(deps): bump golang.org/x/crypto v0.45.0 by @thaJeztah
    in #13405</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1765368000">- Fix missing version (boo#1254726)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1766145600">- Update to version 5.0.1:
  * Fixes
  - Restored support for COMPOSE_COMPATIBILITY by @ndeloof in
    [#13424]
  - Fixed grammatical errors and improve clarity in code. by
    @xiaolinny in #13429
  - Fixed broken run --quiet. by @ndeloof in #13430
  - Fixed SDK example by @ndeloof in #13416
  - Added a check buildx version is set before comparing it. by
    @yangfeiyu20102011 in #13415
  - Fixed grammar: pluralize 'service' and remove apostrophes in
    lets. by @rashmivagha in #13423
  - Fixed progress UI not restoring terminal once operation
    completes. by @ndeloof in #13439
  - Fixed status alignment in progress UI. by @ndeloof in #13438
  - Restored image layer download progress details on pull. by
    @ndeloof in #13445
  - Added 'configured' event at the end of model configuration
    phase. by @glours in #13446
  - Introduced a build tag to select watcher implementation. by
    @ndeloof in #13452
  - Removed mention for v2 on README. by @alexislefebvre in
    [#13451]
  - Fixed missing error handling in setEnvWithDotEnv. by
    @htoyoda18 in #13450
  - Adopted morikuni/aec library over raw ANSI sequences. by
    @ndeloof in #13440
  - Prevented incorrect progress metrics to break compose
    display. by @ndeloof in #13457
  - Restored support for BUILDKIT_PROGRESS. by @ndeloof in #13455
  - Added check model plugin is successfully loaded. by @ndeloof
    in #13464
  - Added a warning when no service has been selected to build.
    by @ndeloof in #13467
  * Dependencies
  - Drop Go min patch version by @austinvazquez in #13418
  - bump golang 1.24.11 by @austinvazquez in #13417
  - bump osxcross by @ndeloof in #13425
  - bump golang.org/x/sys from 0.38.0 to 0.39.0 by
    @dependabot[bot] in #13433
  - bump github.com/docker/cli-docs-tool from 0.10.0 to 0.11.0 by
    @dependabot[bot] in #13437
  - bump golang.org/x/sync from 0.18.0 to 0.19.0 by
    @dependabot[bot] in #13434
  - bump tags.cncf.io/container-device-interface from 1.0.1 to
    1.1.0 by @dependabot[bot] in #13441
  - bump github.com/moby/buildkit from 0.26.2 to 0.26.3 by
    @dependabot[bot] in #13462</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1768996800">- Update to version 5.0.2:
  * Fixes
  - Fixed progress UI to adapt to terminal width by @ndeloof in
    [#13519]
  - Removed warning when no explicit build has been requested. by
    @ndeloof in #13493
  - Restored runtime_flags support in models by @ilopezluna in
    [#13460]
  - Added service name completion to down command by @bmo-at in
    [#13470]
  - Fixed tilde in --env-file paths expanded to user home
    directory by @tensorworkerr in #13510
  - Handle healthcheck.disable: true by @stavros-k in #13494
  - Fixed shutdown and error handling for large file change
    batches in watch by @amyssnippet in #13525
  * Internal
  - Added unit test for upOptions.OnExit method by @htoyoda18 in
    [#13489]
  - clean up temporary compose files after conversion by
    @htoyoda18 in #13483
  - Fixed typo in isSwarmEnabled method name by @htoyoda18 in
    [#13481]
  - Fixed incorrect usage of errgroup.WithContext by @htoyoda18
    in #13480
  - Fixed timeout initialization when waitTimeout is zero by
    @htoyoda18 in #13471
  - Extracted API version constants to dedicated file by
    @htoyoda18 in #13503
  - Replace tabbed indentation in sdk.md by @pkqk in #13505
  - Improved attach error handling and cleanup by @htoyoda18 in
    [#13488]
  - Modernize tests by @dgageot in #13531
  - set fsnotify build tag when building for OSX by @ndeloof in
    [#13532]
  * Dependencies
  - build(deps): bump github.com/klauspost/compress to v1.18.2 by
    @thaJeztah in #13499
  - go.mod: remove exclude rules by @thaJeztah in #13498
  - build(deps): bump github.com/containerd/containerd/v2 to
    v2.2.1 by @thaJeztah in #13497
  - build(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 by
    @dependabot[bot] in #13502
  - build(deps): bump google.golang.org/grpc from 1.77.0 to
    1.78.0 by @dependabot[bot] in #13475
  - build(deps): bump github.com/go-viper/mapstructure/v2 from
    2.4.0 to 2.5.0 by @dependabot[bot] in #13506
  - build(deps): bump github.com/sirupsen/logrus v1.9.4 by
    @thaJeztah in #13518
  - Bump compose to v2.10.1 by @ndeloof in #13528</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1772020800">- Update to version 5.1.0:
  * Fixes
  - emit container status events after network reconnection
    (fixes #13524) by @MaheshThakur9152 in #13529
  - Fix potential nil pointer dereference in container event
    monitoring by @Nepomuk5665 in #13551
  - compose: recreate container when mounted image digest changes
    by @ibrahimypr in #13549
  - fix panic by @ndeloof in #13562
  - Fix invalid path error when using OCI artifacts on Windows by
    @mikesir87 in #13574
  - fix: execute post_start hooks in docker compose run by
    @veeceey in #13607
  - Fix panic when watch rebuilds without up by @maxproske in
    [#13610]
  * Internal
  - fsnotify is set in Dockerfile by @ndeloof in #13533
  - Dockerfile: update golangci-lint to v2.8.0 by @thaJeztah in
    [#13535]
  - replace some uses of strings.Split(N) for strings.Cut by
    @thaJeztah in #13542
  - Upgrade GitHub Actions to latest versions by @salmanmkc in
    [#13546]
  - pkg/compose: remove dependency on
    github.com/docker/buildx/driver by @thaJeztah in #13563
  - use Docker GitHub Builder to build and sign binaries and bin
    image by @crazy-max in #13568
  - ci: fix bin-image job by @crazy-max in #13569
  - pkg/compose: defaultNetworkSettings: refactor by @thaJeztah
    in #13580
  - pkg/compose: un-export consts by @thaJeztah in #13584
  - modernize some code by @thaJeztah in #13588
  * Dependencies
  - update to go1.25.7 by @thaJeztah in #13573
  - build(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by
    @dependabot[bot] in #13578
  - build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.3 to
    4.0.0-rc.4 by @dependabot[bot] in #13541
  - migrate to moby modules by @thaJeztah in #13078</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1774008000">- Update to version 5.1.1:
  * Fixes
  - Only pass ConsoleSize to ExecAttach when TTY is enabled by
    @mikesir87 in #13616
  - Fix deadlock in ttyWriter.Done() by @maks2134 in #13640
  * Dependencies
  - update to go1.25.8 by @thaJeztah in #13622
  - bump github.com/moby/moby/api from 1.53.0 to 1.54.0 by
    @dependabot[bot] in #13619
  - bump golang.org/x/sys from 0.41.0 to 0.42.0 by
    @dependabot[bot] in #13626
  - bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.2
    by @dependabot[bot] in #13631
  - bump golang.org/x/sync from 0.19.0 to 0.20.0 by
    @dependabot[bot] in #13627
  - bump github.com/moby/moby/client from 0.2.2 to 0.3.0 by
    @dependabot[bot] in #13621</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1775736000">- Update to version 5.1.2:
  * Fixes
  - Fix TTY timer rendering when duration length changes by
    @MaybeSam05 in #13634
  - Fix up attach filtering by @false200 in #13664
  - Preserve ssh:// URL scheme when resolving Dockerfile path by
    @ssam18 in #13669
  - Initialize and pass envFiles map in processExtends by
    @Mohamed-Moumni in #13678
  - Fix TestRunHook_ConsoleSize on macOS by @thaJeztah in #13686
  - Restore post-connect fallback for multi-network stacks on API
    &lt; 1.44 by @jotka in #13629
  - Publish: return api.ErrCanceled when user declines
    interactive prompts by @ishwar170695 in #13674
  - Return error on non-ErrNotExist stat failures in Tar.Sync()
    by @Lidang-Jiang in #13684
  * Internal
  - Refactor: thread context through publish sensitive data check
    by @ishwar170695 in #13653
  - Add AI-powered PR review workflow via docker/cagent-action by
    @glours in #13659
  - Update cagent-action to latest (with better permissions) by
    @derekmisler in #13665
  - Pin GitHub Actions to commit SHA, remove pr-review workflow
    by @glours in #13662
  - Exclude hook_test.go from Windows builds and propagate
    ExecStart error in runWaitExec by @pawannn in #13683
  - Skip PR review workflow for Dependabot PRs by @glours in
    [#13679]
  - Use negotiated API version for network setup by @glours in
    [#13690]
  - Fix mixed assertion libraries in tests by @thaJeztah in
    [#13689]
  - Test: use random host port for dind TLS build test by
    @ricardobranco777 in #13630
  - Remove direct dependency on docker/docker by @glours in
    [#13706]
  * Dependencies
  - Bump github.com/containerd/platforms from 1.0.0-rc.2 to
    1.0.0-rc.3 by @dependabot[bot] in #13657
  - Bump golangci-lint to v2.11.3 and configure CLAUDE to use it
    on change by @ndeloof in #13656
  - Bump google.golang.org/grpc from 1.78.0 to 1.79.3 by
    @dependabot[bot] in #13642
  - Bump github.com/moby/patternmatcher from 0.6.0 to 0.6.1 by
    @dependabot[bot] in #13667
  - Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.42.0 by
    @glours in #13663
  - Bump github.com/docker/cli from 29.2.1+incompatible to
    29.3.1+incompatible by @dependabot[bot] in #13670
  - Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by
    @dependabot[bot] in #13692
  - Bump github.com/docker/buildx v0.33.0, buildkit v0.29.0 by
    @thaJeztah in #13693
  - Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by
    @dependabot[bot] in #13697
  - Bump github.com/containerd/platforms from 1.0.0-rc.3 to
    1.0.0-rc.4 by @dependabot[bot] in #13696
  - Bump github.com/moby/moby/client v0.4.0, moby/api v1.54.1 by
    @thaJeztah in #13708
  - Bump github.com/docker/cli v29.4.0 by @thaJeztah in #13707
  - Bump compose-go to version v2.10.2 by @glours in #13705
  - Bump to Go 1.25.9 by @thaJeztah in #13720</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1776427200">- Update to version 5.1.3:
  * Fixes
  - fix: provider output handling and watch rebuild re-invocation
    by @glours in #13732
  * Internal
  - Add Docker Desktop Logs view hints and navigation shortcut by
    @glours in #13721
  - Build and push Docker Desktop module image on release by
    @glours in #13726
  - Fix typo in SECURITY.md by @glours in #13730
  - Make hook hint deep links clickable using OSC 8 terminal
    hyperlinks by @glours in #13734
  - Remove 'provenance' attribute' by @glours in #13738
  * Dependencies
  - build(deps): bump github.com/containerd/containerd/v2 from
    2.2.2 to 2.2.3 by @dependabot[bot] in #13737</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1779364800">- Update to version 5.1.4:
  * Improvements
  - feat: add stop lifecycle hook for external providers by
    @glours in #13779
  * Fixes
  - fix: route OCI artifact pulls through Docker Desktop HTTP
    proxy by @glours in #13770
  - fix: restore stoppingEvent/stoppedEvent helpers for plugin
    stop hook by @glours in #13794
  - fix(publish): flag literal inline environment values by
    @glours in #13760
  * Internal
  - ci: remove unused e2e job from merge workflow by @glours in
    [#13740]
  - chore: update cagent-action to v1.4.4 by @derekmisler in
    [#13745]
  - Change verb tense in Docker Compose reference documentation
    by @ryanjbonnell in #13773
  - pkg/compose: go fix by @thaJeztah in #13782
  - refactor: code deduplication and simplification by @ndeloof
    in #13759
  - fix: make e2e tests pass reliably locally with Docker Desktop
    by @glours in #13741
  - refactor: drop Desktop beta-settings check; gate hint on
    LogsTab flag by @glours in #13755
  * Dependencies
  - build(deps): bump github.com/mattn/go-shellwords from 1.0.12
    to 1.0.13 by @dependabot[bot] in #13731
  - build(deps): bump github.com/docker/cli from
    29.4.0+incompatible to 29.4.2+incompatible by
    @dependabot[bot] in #13768
  - build(deps): bump github.com/moby/moby/client from 0.4.0 to
    0.4.1 by @dependabot[bot] in #13752
  - build(deps): bump github.com/docker/cli from
    29.4.2+incompatible to 29.4.3+incompatible by
    @dependabot[bot] in #13776
  - build(deps): bump google.golang.org/grpc from 1.80.0 to
    1.81.0 by @dependabot[bot] in #13775
  - build(deps): update to go 1.26.3 by @thaJeztah in #13783
  - build(deps): bump google.golang.org/grpc from 1.81.0 to
    1.81.1 by @dependabot[bot] in #13791
  - build(deps): bump github.com/compose-spec/compose-go/v2 from
    2.10.2 to 2.11.0 by @dependabot[bot] in #13798
  - build(deps): bump github.com/docker/cli from
    29.4.3+incompatible to 29.5.1+incompatible by
    @dependabot[bot] in #13796
  - build(deps): bump golang.org/x/sys from 0.42.0 to 0.44.0 by
    @dependabot[bot] in #13788</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1782302400">- Update to version 5.2.0:
  This version introduces a new reconciliation algorithm between
  the observed state and the expected state.
  If you experience any issues with a Compose workload that was
  previously working, please open an issue.
  * Improvements
  - Reconciliation plan by @ndeloof &amp; @glours in #13830
  - Add rawsetenv message type for provider plugins by @rajyan in
    [#13742]
  * Fixes
  - Fix(build): skip remote URL contexts from bake fs.read
    allowlist by @ndeloof in #13816
  - Skip validation when extracting config variables by
    @scarab-systems in #13831
  - Fix(progress): probe stderr (not stdout) for TTY
    auto-detection by @glours in #13837
  - Fix(publish): honor env_file required: false for missing
    files by @Ijtihed in #13848
  * Internal
  - Docs: compose logs: add links for since/until flag
    descriptions by @thaJeztah in #13806
  - Ci: add Dependabot cooldown (20260603-170456) by
    @securityeng-bot[bot] in #13820
  - Docs(CLAUDE.md): note that commits must be signed off (DCO)
    by @ndeloof in #13817
  - Refactor: replace Split in loops with more efficient SplitSeq
    and replace HasPrefix+TrimPrefix with CutPrefix by
    @caltechustc in #13810
  - Chore: fix some comments to improve readability by @solunolab
    in #13823
  - GHA: update docs-upstream to pin workflows by sha by
    @thaJeztah in #13834
  - Docs: compose logs: add more links for flag descriptions by
    @thaJeztah in #13833
  - Fix/progress tty line overflow 13595 by @glours in #13840
  - Fix(publish): bypass Docker Desktop proxy for loopback
    registries by @ptrdom in #13825
  - Watch: do not rebuild depends_on services on file change by
    @ndeloof in #13856
  - pkg/e2e: fix malformed JWT in fixtures by @thaJeztah in
    [#13857]
  - pkg/e2e: drop unused run param from getEnv by @glours in
    [#13867]
  - Docs: ps --format json outputs JSON Lines, not a JSON array
    by @glours in #13868
  * Dependencies
  - Build(deps): bump github.com/docker/cli from
    29.5.1+incompatible to 29.5.2+incompatible by
    @dependabot[bot] in #13802
  - Update to go 1.26.4 by @thaJeztah in #13828
  - Chore(deps): github.com/containerd/typeurl/v2 v2.3.0 by
    @thaJeztah in #13829
  - Build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by
    @dependabot[bot] in #13838
  - Chore(deps): github.com/docker/cli v29.5.3,
    github.com/docker/buildx v0.34.1, buildkit v0.30.0 by
    @thaJeztah in #13841
  - Build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by
    @dependabot[bot] in #13832
  - Chore(deps): golang.org/x/crypto v0.53.0 by @thaJeztah in
    [#13844]
  - Build(deps): bump github.com/containerd/containerd/v2 from
    2.2.3 to 2.2.4 in the go_modules group across 1 directory by
    @dependabot[bot] in #13804
  - Chore(deps): bump github.com/containerd/containerd/v2 to
    v2.2.5 by @thaJeztah in #13855
  - Chore(deps): bump github.com/golang-jwt/jwt/v5 to v5.3.1 by
    @thaJeztah in #13847
  - Chore(deps): github.com/docker/cli v29.6.0,
    github.com/docker/buildx v0.35.0, buildkit v0.31.0 by
    @thaJeztah in #13842
  - Bump compose-go to version v2.12.1 by @glours in #13865</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1782993600">- Update to version 5.3.0:
  This release introduces native support for init containers.
  * Improvements
  - Pre start init containers by @glours in #13862
  * Fixes
  - Fix(oci): route authorizer token fetches through provided
    transport by @glours in #13873
  - Fix(run): scope Running events to project.Services by @glours
    in #13883
  * Internal
  - Chore: migrate cagent-action to docker-agent-action (v2.0.0)
    by @docker-agent in #13869
  - Chore: migrate to docker-agent-action v2.0.1 by @docker-agent
    in #13872
  - Fix(reconcile): hash resolved service refs to match executor
    by @glours in #13880
  - Fix(compose/port): show private port in portNotFoundError
    message by @vmphase in #13875
  - Fix(run): normalize --no-TTY flag to --no-tty by @nickjj in
    [#13885]
  * Dependencies
  - Bump compose-go to version v2.13.0 by @glours in #13886</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1783425600">- Update to version 5.3.1:
  * Internal
  - Ci: add concurrency group to pr-review-trigger to prevent
    duplicate reviews by @derekmisler in #13890
  - Fix grammar in Attestations field comment by @blackflytech in
    [#13891]
  - Ci: remove unused desktop-edge-test workflow by @thaJeztah in
    [#13897]
  - Ci: zizmor workflow by @crazy-max in #13901
  - Ci: fix docs-upstream workflow by @crazy-max in #13912
  - CODEOWNERS: add compose-reviewers by @thaJeztah in #13913
  - Ci: harden GitHub Actions workflows by @glours in #13896
  - GHA: dependabot: group docker/* actions updates by @thaJeztah
    in #13914
  * Dependencies
  - Build(deps): bump github.com/moby/buildkit from 0.31.0 to
    0.31.1 by @dependabot[bot] in #13892
  - Build(deps): bump github.com/moby/sys/user to v0.4.1 by
    @thaJeztah in #13893
  - Build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to
    4.0.0-rc.6 by @dependabot[bot] in #13876
  - Build(deps): bump github.com/docker/cli from
    29.6.0+incompatible to 29.6.1+incompatible by
    @dependabot[bot] in #13895
  - Build(deps): bump actions/stale from 10.2.0 to 10.3.0 by
    @dependabot[bot] in #13902
  - Build(deps): bump the docker-actions group with 3 updates by
    @dependabot[bot] in #13916
  - Build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
    by @dependabot[bot] in #13908
  - Build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 by
    @dependabot[bot] in #13907
  - Build(deps): bump test-summary/action from 2.4 to 2.6 by
    @dependabot[bot] in #13903
  - Build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24 by
    @dependabot[bot] in #13910
  - Build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0
    by @dependabot[bot] in #13904
  - Build(deps): bump github/codeql-action/upload-sarif from
    3.36.3 to 4.36.2 by @dependabot[bot] in #13917
  - Build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by
    @dependabot[bot] in #13911</changelog>
</package>
<package pkgid="3757f975ed128cb9d10f06faa80604f6bc631abc87a83f8e7e0103eeb5c29d33402509d02401bb50058b9fe89a824a9eb09b51a418e38608448820aeef8a8757" name="docker-debuginfo" arch="aarch64">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="ca214885b0c7d7c8303578c338ead0267ffb7f886454d1c023f7f93454af30923481b1748f4363aee6b9bfbad3759405abc93684a7b2018a6f52936efb2e542e" name="docker-debuginfo" arch="ppc64le">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="c42078975f0a611bc901591c44915f89330475b57a74f619a22e6132fecbbfd556506ff9a3ee868bce839a765968cf9fee24d94aa1a636b9823fc3573347fb01" name="docker-debuginfo" arch="s390x">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="8308a9f0ebd90d884acbf4aafc3038d6afd71ae4a2eb0e1d51a692e89bb978355b12fef2512a75119faaf692f81f30b1a98f1f16098fbfb160415d12874558ee" name="docker-debuginfo" arch="x86_64">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="a8a015342981bc3e973f7285faed1e9ce71afd4952db5c41b19abbc8641bb5aeac03ca580f520e1574b1580d3636a03a022930b1029926de3061262bc6d5d60b" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="3c5470d79ac7aceed36040ca8fee7122afd8f40fce3d61e93324d1e7eb37a0b8de7ad6f10ce34be54c204f86bcf11aa658be8046b787d402397dc08a28d3b644" name="docker-rootless-extras" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="3b62f8ba694aed568073b565037c46c754244999d3fef5b66d590614192c71113b069d44dc57879044398d94f14bdfa9dc8695f13c0f35789ca2e22ccd80b9ae" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="4.4"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Add Requires containers-selinux on systems with selinux-policy installed.
  bsc#1252672</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769601600">- Update to Docker 29.2.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2920&gt;
  Fix CVE-2025-67499 (bsc#255500)
- Update to buildx 0.31.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Build of buildx moved from Makefile to go build to not use
  Dockerfile.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1769774400">- Update to docker-buildx v0.31.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.31.1&gt;</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1770292800">- Update to Docker 29.2.1. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2921&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1771329600">- Fix package from immutable mode (jsc#PED-14748)
  * Migrate /var/lib/docker creation to docker.tmpfiles
- Replace obsolete packageand syntax with newer syntax</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1773144000">- Update to Docker 29.3.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2930&gt;
- Update to buildx 0.32.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.32.1&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1778068800">- Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1782216000">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">-  Fix symlink escape in mount destination creation
  (bsc#1268280, CVE-2026-41568)
  * 0011-CVE-2026-41568-daemon-copy-Fix-symlink-escape-in-mou.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="b5aa864908deadb156b6c3feeb5ee95b6fa20b02fe1b82fe482129ac9dae90e646dca347f23801c34330f7f36077f385d542d700eda9c6a8345731d8580ee854" name="runc" arch="aarch64">
  <version epoch="0" ver="1.4.3" rel="207.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1779883200">- Update to runc v1.4.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.2&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1784203200">- update to 1.4.3 (bsc#1268275, CVE-2026-41579):
  * [CVE-2026-41579][] allowed a malicious image with a `/dev`
    symlink to have limited write access to the host filesystem in
    ways that our analysis indicates was too limited to be
    problematic in practice. This bug was very similar to those
    fixed in [CVE-2025-31133][], [CVE-2025-52565][],
    [CVE-2025-31133][] and was simply missed at the time when we
    hardened the rootfs preparation code. We have conducted a
    deeper audit and not found any other problematic cases.
  * Various integration test improvements. (#5222, #5237, #5226,
    [#5229], #5239, #5249, #5269, #5287, #5295, #5304)
  * When masking directories with `maskPaths`, runc will now re-
    use a single `tmpfs` instance (which is not writeable) to
    reduce the number `tmpfs` superblocks that need to be reaped
    when containers die (in particular, Kubernetes applies masks
    to per-CPU sysfs directories which get expensive quickly).
- add vendor.tar.gz to bump x/net</changelog>
</package>
<package pkgid="bf24c9bdde8b9dfa1dfb34e20c4b4fdd33dc834f0390d0c1376283154ded19b651f152a23efe3eb391d8015008c642e601c7b75f004a46c7800709655fb1d261" name="runc" arch="ppc64le">
  <version epoch="0" ver="1.4.3" rel="207.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1779883200">- Update to runc v1.4.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.2&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1784203200">- update to 1.4.3 (bsc#1268275, CVE-2026-41579):
  * [CVE-2026-41579][] allowed a malicious image with a `/dev`
    symlink to have limited write access to the host filesystem in
    ways that our analysis indicates was too limited to be
    problematic in practice. This bug was very similar to those
    fixed in [CVE-2025-31133][], [CVE-2025-52565][],
    [CVE-2025-31133][] and was simply missed at the time when we
    hardened the rootfs preparation code. We have conducted a
    deeper audit and not found any other problematic cases.
  * Various integration test improvements. (#5222, #5237, #5226,
    [#5229], #5239, #5249, #5269, #5287, #5295, #5304)
  * When masking directories with `maskPaths`, runc will now re-
    use a single `tmpfs` instance (which is not writeable) to
    reduce the number `tmpfs` superblocks that need to be reaped
    when containers die (in particular, Kubernetes applies masks
    to per-CPU sysfs directories which get expensive quickly).
- add vendor.tar.gz to bump x/net</changelog>
</package>
<package pkgid="b41e38c9e603ea36e12e2e09e1fce7d27faad7a5cf5e12e31efb56cfc7e7b2081035cfb4ec0bf58cb841c34c0d7acad9862cef97e68f76fb463860666aa967f6" name="runc" arch="s390x">
  <version epoch="0" ver="1.4.3" rel="207.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1779883200">- Update to runc v1.4.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.2&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1784203200">- update to 1.4.3 (bsc#1268275, CVE-2026-41579):
  * [CVE-2026-41579][] allowed a malicious image with a `/dev`
    symlink to have limited write access to the host filesystem in
    ways that our analysis indicates was too limited to be
    problematic in practice. This bug was very similar to those
    fixed in [CVE-2025-31133][], [CVE-2025-52565][],
    [CVE-2025-31133][] and was simply missed at the time when we
    hardened the rootfs preparation code. We have conducted a
    deeper audit and not found any other problematic cases.
  * Various integration test improvements. (#5222, #5237, #5226,
    [#5229], #5239, #5249, #5269, #5287, #5295, #5304)
  * When masking directories with `maskPaths`, runc will now re-
    use a single `tmpfs` instance (which is not writeable) to
    reduce the number `tmpfs` superblocks that need to be reaped
    when containers die (in particular, Kubernetes applies masks
    to per-CPU sysfs directories which get expensive quickly).
- add vendor.tar.gz to bump x/net</changelog>
</package>
<package pkgid="cd7a8b4591b347d8a31ee773acb8159960738cc31ac0a97a0e848969b5f2a047d6f72959a95e831226f6dbd6a2292ffafd9b7c42b561c1cdb6af751ae3ba666f" name="runc" arch="src">
  <version epoch="0" ver="1.4.3" rel="207.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1779883200">- Update to runc v1.4.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.2&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1784203200">- update to 1.4.3 (bsc#1268275, CVE-2026-41579):
  * [CVE-2026-41579][] allowed a malicious image with a `/dev`
    symlink to have limited write access to the host filesystem in
    ways that our analysis indicates was too limited to be
    problematic in practice. This bug was very similar to those
    fixed in [CVE-2025-31133][], [CVE-2025-52565][],
    [CVE-2025-31133][] and was simply missed at the time when we
    hardened the rootfs preparation code. We have conducted a
    deeper audit and not found any other problematic cases.
  * Various integration test improvements. (#5222, #5237, #5226,
    [#5229], #5239, #5249, #5269, #5287, #5295, #5304)
  * When masking directories with `maskPaths`, runc will now re-
    use a single `tmpfs` instance (which is not writeable) to
    reduce the number `tmpfs` superblocks that need to be reaped
    when containers die (in particular, Kubernetes applies masks
    to per-CPU sysfs directories which get expensive quickly).
- add vendor.tar.gz to bump x/net</changelog>
</package>
<package pkgid="73a186f8a21f570a101c9d180aaeb53b5d190a3dcabceaa100477fb0d5f8cf18322f1bdae0047fde11b3e0bc734195ecc75bc89a95435a563c2c23fbd4fd5070" name="runc" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="207.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1779883200">- Update to runc v1.4.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.2&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1784203200">- update to 1.4.3 (bsc#1268275, CVE-2026-41579):
  * [CVE-2026-41579][] allowed a malicious image with a `/dev`
    symlink to have limited write access to the host filesystem in
    ways that our analysis indicates was too limited to be
    problematic in practice. This bug was very similar to those
    fixed in [CVE-2025-31133][], [CVE-2025-52565][],
    [CVE-2025-31133][] and was simply missed at the time when we
    hardened the rootfs preparation code. We have conducted a
    deeper audit and not found any other problematic cases.
  * Various integration test improvements. (#5222, #5237, #5226,
    [#5229], #5239, #5249, #5269, #5287, #5295, #5304)
  * When masking directories with `maskPaths`, runc will now re-
    use a single `tmpfs` instance (which is not writeable) to
    reduce the number `tmpfs` superblocks that need to be reaped
    when containers die (in particular, Kubernetes applies masks
    to per-CPU sysfs directories which get expensive quickly).
- add vendor.tar.gz to bump x/net</changelog>
</package>
<package pkgid="d09e263fde545b07fd59f02f6057dcf3d41453d8468c6ac342bf7036fbbb71002e3a63907502f170746ef5f36ba98659cdd35774e4646774d071701e79486377" name="runc-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.3" rel="207.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1779883200">- Update to runc v1.4.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.2&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1784203200">- update to 1.4.3 (bsc#1268275, CVE-2026-41579):
  * [CVE-2026-41579][] allowed a malicious image with a `/dev`
    symlink to have limited write access to the host filesystem in
    ways that our analysis indicates was too limited to be
    problematic in practice. This bug was very similar to those
    fixed in [CVE-2025-31133][], [CVE-2025-52565][],
    [CVE-2025-31133][] and was simply missed at the time when we
    hardened the rootfs preparation code. We have conducted a
    deeper audit and not found any other problematic cases.
  * Various integration test improvements. (#5222, #5237, #5226,
    [#5229], #5239, #5249, #5269, #5287, #5295, #5304)
  * When masking directories with `maskPaths`, runc will now re-
    use a single `tmpfs` instance (which is not writeable) to
    reduce the number `tmpfs` superblocks that need to be reaped
    when containers die (in particular, Kubernetes applies masks
    to per-CPU sysfs directories which get expensive quickly).
- add vendor.tar.gz to bump x/net</changelog>
</package>
<package pkgid="0bae275e9232976609641552d4267d9ba5296fadccaff2a0cd3c226891d0787e88f29e51a810fe2764de33e20984ab06f5e787bdeef2d9b98ffd2911f091531a" name="runc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.3" rel="207.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1779883200">- Update to runc v1.4.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.2&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1784203200">- update to 1.4.3 (bsc#1268275, CVE-2026-41579):
  * [CVE-2026-41579][] allowed a malicious image with a `/dev`
    symlink to have limited write access to the host filesystem in
    ways that our analysis indicates was too limited to be
    problematic in practice. This bug was very similar to those
    fixed in [CVE-2025-31133][], [CVE-2025-52565][],
    [CVE-2025-31133][] and was simply missed at the time when we
    hardened the rootfs preparation code. We have conducted a
    deeper audit and not found any other problematic cases.
  * Various integration test improvements. (#5222, #5237, #5226,
    [#5229], #5239, #5249, #5269, #5287, #5295, #5304)
  * When masking directories with `maskPaths`, runc will now re-
    use a single `tmpfs` instance (which is not writeable) to
    reduce the number `tmpfs` superblocks that need to be reaped
    when containers die (in particular, Kubernetes applies masks
    to per-CPU sysfs directories which get expensive quickly).
- add vendor.tar.gz to bump x/net</changelog>
</package>
<package pkgid="21acf6104a5bf32926a10f6b8908edad5140e4f03751416e1dbe3db6d912de56fc769e98b7764a3533faf79e1609207287833d3bb54f16789c25f9907a47d770" name="runc-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.3" rel="207.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1779883200">- Update to runc v1.4.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.2&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1784203200">- update to 1.4.3 (bsc#1268275, CVE-2026-41579):
  * [CVE-2026-41579][] allowed a malicious image with a `/dev`
    symlink to have limited write access to the host filesystem in
    ways that our analysis indicates was too limited to be
    problematic in practice. This bug was very similar to those
    fixed in [CVE-2025-31133][], [CVE-2025-52565][],
    [CVE-2025-31133][] and was simply missed at the time when we
    hardened the rootfs preparation code. We have conducted a
    deeper audit and not found any other problematic cases.
  * Various integration test improvements. (#5222, #5237, #5226,
    [#5229], #5239, #5249, #5269, #5287, #5295, #5304)
  * When masking directories with `maskPaths`, runc will now re-
    use a single `tmpfs` instance (which is not writeable) to
    reduce the number `tmpfs` superblocks that need to be reaped
    when containers die (in particular, Kubernetes applies masks
    to per-CPU sysfs directories which get expensive quickly).
- add vendor.tar.gz to bump x/net</changelog>
</package>
<package pkgid="bd8bf0c756854b023c899d3ba6bf014cf94cff58f32e7254342288b222dc83dd21c4dacda8729e35b428640dee7ea08526038d00f9254a123e5fa3d5d60231d4" name="runc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="207.3"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364800">[ This was only ever released for SLES and Leap. ]
- Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092
- Rebase patches:
  * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1725364801">- Update to runc v1.2.0~rc3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3&gt;.
  Includes the patch for CVE-2024-45310. bsc#1230092</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Update to runc v1.2.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.0&gt;.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730462400">- Update to runc v1.2.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.1&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731758400">- Update to runc v1.2.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.2&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733918400">- Update to runc v1.2.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.3&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1736251200">- Update to runc v1.2.4. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.4&gt;.
- Update runc.keyring to match upstream.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1739534400">- Update to runc v1.2.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.5&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1744286400">- Update to runc v1.2.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.6&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1745928000">- Update to runc v1.3.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1756987200">- Update to runc v1.3.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;
- Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1759579200">- Update to runc v1.3.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110
  - Includes an important fix for the CPUSet translation for cgroupv2.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760097600">[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.2.7&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1760616000">[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1762344000">- Update to runc v1.3.3. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331200">- Update to runc v1.4.0. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.0&gt;. bsc#1254362</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1764331201">- Add libpathrs build option to allow builds to switch to libpathrs. In future
  we will switch to enabling this by default for Tumbleweed and Leap &gt;= 16.</changelog>
  <changelog author="Aleksa Sarai &lt;cyphar@cyphar.com&gt;" date="1773403200">- Update to runc v1.4.1. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.1&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1779883200">- Update to runc v1.4.2. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.4.2&gt;.
- runc.keyring has been updated to match the new version from upstream.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1784203200">- update to 1.4.3 (bsc#1268275, CVE-2026-41579):
  * [CVE-2026-41579][] allowed a malicious image with a `/dev`
    symlink to have limited write access to the host filesystem in
    ways that our analysis indicates was too limited to be
    problematic in practice. This bug was very similar to those
    fixed in [CVE-2025-31133][], [CVE-2025-52565][],
    [CVE-2025-31133][] and was simply missed at the time when we
    hardened the rootfs preparation code. We have conducted a
    deeper audit and not found any other problematic cases.
  * Various integration test improvements. (#5222, #5237, #5226,
    [#5229], #5239, #5249, #5269, #5287, #5295, #5304)
  * When masking directories with `maskPaths`, runc will now re-
    use a single `tmpfs` instance (which is not writeable) to
    reduce the number `tmpfs` superblocks that need to be reaped
    when containers die (in particular, Kubernetes applies masks
    to per-CPU sysfs directories which get expensive quickly).
- add vendor.tar.gz to bump x/net</changelog>
</package>
</otherdata>