chore(deps): bump the docker group across 1 directory with 4 updates

[dependabot]

Bumps the docker group with 3 updates in the / directory: github.com/docker/cli, github.com/moby/buildkit and github.com/moby/moby/client.

Updates github.com/docker/cli from 29.1.4+incompatible to 29.3.0+incompatible

Commits

• 5927d80 Merge pull request #6844 from vvoland/update-docker
• 206fc8c vendor: github.com/moby/moby/client v0.3.0
• 874a8df vendor: github.com/moby/moby/api v1.54.0
• 964a6d2 Merge pull request #6792 from vvoland/bind-create
• 210147d Merge pull request #6843 from docker/dependabot/github_actions/docker/setup-b...
• 847f547 Merge pull request #6842 from docker/dependabot/github_actions/docker/login-a...
• 668b367 build(deps): bump docker/setup-buildx-action from 3 to 4
• 30a2ace build(deps): bump docker/login-action from 3 to 4
• 32aa575 docs/service: Document bind-create-src
• c747cff container/opts: Add bind-create-src mount option
• Additional commits viewable in compare view

Updates github.com/moby/buildkit from 0.27.1 to 0.28.0

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.28.0

buildkit 0.28.0

Welcome to the v0.28.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• Akihiro Suda
• Amr Mahdi
• Dan Duvall
• David Karlsson
• Jonas Geiler
• Kevin L.
• rsteube

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.22.0 changelog
• The default provenance format has been switched to SLSA v1.0 from the previous v0.2. The old format can still be generated by setting the version attribute. #6526
• Provenance attestation for an image can now be directly pulled via Source metadata request. #6516 #6514 #6537
• Pushing result images and exporting build cache now happens in parallel, for better performance. #6451
• LLB definition now supports two new Source types for accessing raw blobs from image registries and from OCI layouts. New sources use identifier protocols docker-image+blob:// and oci-layout+blob://. #4286
• LLB API now supports custom checksum requests for HTTP sources, allowing fetching checksums for different algorithms than the default SHA256 and with optional suffixes. #6527 #6537
• LLB API now supports validating HTTP sources with PGP signatures, similarly to previous support for Git sources. #6527
• With the update to a newer version of the in-toto library, the provenance attestation key InvocationID has changed to InvocationId to strictly follow the SLSA spec. This change doesn't affect BuildKit/Buildx Golang tooling, but could affect 3rd party tools if they are using case-sensitive JSON parsing. #6533
• Embedded Qemu emulator support has been updated to v10.1.3 #6524
• Update BuildKit Cgroups implementation to work in (Kubernetes) environments that don't have their own Cgroup namespace. #6368
• Buildctl binary now supports bash completion. #6474
• PGP signature verification now supports combined public keys as input for defining the required signer. #6519
• Fix possible "failed to read expected number of bytes" error when reading attestation chains #6520
• Fix possible error from race condition when creating images in parallel #6477

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.39.6 -> v1.41.1
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.2 -> v1.7.4
• github.com/aws/aws-sdk-go-v2/config v1.31.20 -> v1.32.7
• github.com/aws/aws-sdk-go-v2/credentials v1.18.24 -> v1.19.7
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.13 -> v1.18.17
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.13 -> v1.4.17

... (truncated)

Commits

• 5245d86 Merge pull request #6551 from tonistiigi/v0.28-cherry-picks
• 90ee5de vendor: update x/net to v0.51.0
• 3eab156 vendor: update cloudflare/circl v1.6.3
• ecde336 Merge pull request #6537 from tonistiigi/add-v0.28-sourcemeta-caps
• 8d58a58 gateway: add caps for source metadata extensions
• 373d0ad Merge pull request #6534 from jsternberg/copy-ignored-file-linter-negated-mat...
• 9a083f4 Merge pull request #6532 from crazy-max/update-aec
• 809fe38 Merge pull request #4286 from tonistiigi/imageblob
• d4e025a linter: do not attempt to check for copying ignored file when negated pattern...
• c5cee9e Merge pull request #6533 from crazy-max/update-intoto-golang
• Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.2.2 to 0.3.0

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.3.0

0.3.0

New

• client: ImageListOptions now supports Identity field. When set, the response includes manifest summaries and may include an Identity field for each manifest with trusted identity and origin information. moby/moby#52030

Bug fixes and enhancements

• Lower minimum API version from v1.44. to v1.40 (Docker 19.03). moby/moby#52067
• client/pkg/jsonmessage.DisplayJSONMessages now accepts an iter.Seq2[jsonstream.Message, error] instead of only a JSONMessagesStream,. moby/moby#52062

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.3.0 (2013-05-06)

• Registry: Implement the new registry
• Documentation: new example: sharing data between 2 couchdb databases

• Runtime: Fix the command existance check
• Runtime: strings.Split may return an empty string on no match
• Runtime: Fix an index out of range crash if cgroup memory is not

• Documentation: Various improvments
• Vagrant: Use only one deb line in /etc/apt

Commits

• 4f202cd Bumped version to 0.3.0
• da01dd3 Merge remote-tracking branch 'origin/registry-update'
• 09f1cba Fixed imports
• c9994ed Moved the Debugf message in a registry to a more useful place
• b0e076f Add output to checksums, code cleaning
• 00266df Fixed public pull + Added some verbosity about what is happening
• 3febeb9 Added help message to invite to login when getting a 401
• bcdf030 Fixed pulling repositories from library
• a372f98 Switching to prod index server
• d985050 gofmt pass
• Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.53.0 to 1.54.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.54.0

1.54.0

New

• GET /images/json now supports an identity query parameter. When set, the response includes manifest summaries and may include an Identity field for each manifest with trusted identity and origin information. moby/moby#52030

Bug fixes and enhancements

• api/types/swarm: PortConfig: add Compare method. moby/moby#52047
• api: swagger: document "platform" param for GET /image/{name}/json. moby/moby#52082
• Fix swagger/OpenAPI return value specification for /system/df endpoint. moby/moby#52124
• Add a MediaType pseudo-type to help discoverability of available mediatypes. moby/moby#52089
• api/types/jsonstream: Add sanity-check for Message marshaling. moby/moby#52059
• api/types/jsonstream: Prevent panic on nil-Error. moby/moby#52059

Commits

• 7f1a670 Merge pull request #52140 from vvoland/drop-replace
• 4569055 Drop replace rules
• 37cc25c Merge pull request #52040 from vvoland/network-connect-macaddres
• 2fa6029 network/connect: Support MacAddress
• c0625f2 Merge pull request #52124 from chemodax/patch-1
• 4c19a01 Merge pull request #52048 from shiv-tyagi/vendor-detection
• 018cdea Merge pull request #52119 from ricardobranco777/saveload
• 6d771cc Merge pull request #52137 from vvoland/label-notesting
• 71c4815 gha/labeler: Remove *_test.go from area/testing label
• 13a8626 daemon/devices: Turn RegisterGPUDeviceDrivers into func
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions