build(deps): bump the go-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the go-dependencies group with 5 updates in the / directory:

Package	From	To
github.com/docker/cli	29.3.0+incompatible	29.3.1+incompatible
github.com/go-git/go-git/v5	5.17.0	5.17.2
github.com/google/go-containerregistry	0.21.3	0.21.4
github.com/moby/moby/api	1.54.0	1.54.1
github.com/moby/moby/client	0.3.0	0.4.0

Updates github.com/docker/cli from 29.3.0+incompatible to 29.3.1+incompatible

Commits

• c2be9cc Merge pull request #6887 from thaJeztah/29.x_backport_pin_actions
• 0da6a51 ci: pin actions to digests
• 6b3ca8f Merge pull request #6884 from thaJeztah/29.x_backport_missing_buildtags
• f47603c Merge pull request #6885 from thaJeztah/29.x_backport_update_actions
• 9709c8f build(deps): bump docker/metadata-action from 5 to 6
• af45a23 build(deps): bump docker/bake-action from 6 to 7
• bc97f5a Merge pull request #6883 from thaJeztah/29.x_backport_update_go1.25.8
• 6d71967 cli/command: add missing "go:build" comments
• 9b51892 update to go1.25.8
• See full diff in compare view

Updates github.com/go-git/go-git/v5 from 5.17.0 to 5.17.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.17.2

What's Changed

• build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in go-git/go-git#1941
• dotgit: skip writing pack files that already exist on disk by @​pjbgf in go-git/go-git#1944

⚠️ This release fixes a bug (go-git/go-git#1942) that blocked some users from upgrading to v5.17.1. Thanks @​pskrbasu for reporting it. 🙇

Full Changelog: go-git/go-git@v5.17.1...v5.17.2

v5.17.1

What's Changed

• build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in go-git/go-git#1930
• [v5] plumbing: format/index, Improve v4 entry name validation by @​pjbgf in go-git/go-git#1935
• [v5] plumbing: format/idxfile, Fix version and fanout checks by @​pjbgf in go-git/go-git#1937

Full Changelog: go-git/go-git@v5.17.0...v5.17.1

Commits

• 45ae193 Merge pull request #1944 from go-git/fix-perms
• fda4f74 storage: filesystem/dotgit, Skip writing pack files that already exist on disk
• 2212dc7 Merge pull request #1941 from go-git/renovate/releases/v5.x-go-mygithub.libinneed.workers.dev-go-...
• ebb2d7d build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY]
• 5e23dfd Merge pull request #1937 from pjbgf/idx-v5
• 6b38a32 Merge pull request #1935 from pjbgf/index-v5
• cd757fc plumbing: format/idxfile, Fix version and fanout checks
• 3ec0d70 plumbing: format/index, Fix tree extension invalidated entry parsing
• dbe10b6 plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git
• e9b65df plumbing: format/index, Improve v4 entry name validation
• Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.3 to 0.21.4

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.4

What's Changed

• go.mod: do not make a viral minimum go version by @​howardjohn in google/go-containerregistry#2237
• Avoid pruning absolute links from extracted and flattened images by @​Subserial in google/go-containerregistry#2241
• Bump the go-deps group across 3 directories with 5 updates by @​dependabot[bot] in google/go-containerregistry#2245
• fix: update to go1.25.8, and use separate .go-version file by @​thaJeztah in google/go-containerregistry#2246
• Bump CI go version to 1.26.1 by @​Subserial in google/go-containerregistry#2242
• Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group by @​dependabot[bot] in google/go-containerregistry#2240
• fork distribution client v3 auth-challenge as an internal package (squashed) by @​thaJeztah in google/go-containerregistry#2248
• transport: validate Bearer realm URL to prevent SSRF by @​evilgensec in google/go-containerregistry#2243
• revert path traversal and symlink escape from #2227 by @​Subserial in google/go-containerregistry#2250
• Fix pkg/v1/google/auth tests for arm64 by @​Subserial in google/go-containerregistry#2085
• goreleaser: Update goreleaser config and GH action by @​Subserial in google/go-containerregistry#2253

New Contributors

• @​evilgensec made their first contribution in google/go-containerregistry#2243

Full Changelog: google/go-containerregistry@v0.21.3...v0.21.4

Commits

• e8813dd goreleaser: Update goreleaser config and GH action for releases (#2253)
• e90447d replace gcloud in binary calls in pkg/v1/google tests (#2085)
• 0d0368c revert path traversal and symlink escape changes (#2250)
• a2f47d4 transport: validate Bearer realm URL to prevent SSRF (#2243)
• 19a36cd fork distribution client v3 auth-challenge as an internal package (squashed) ...
• c612a9b Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group (#2240)
• 8f92f59 Bump CI go version to 1.26.1 (#2242)
• c99e7cf fix: update to go1.25.8, and use separate .go-version file (#2246)
• 0794660 Bump the go-deps group across 3 directories with 5 updates (#2245)
• 4cb93ae Undo pruning absolute links from extracted and flattened images (#2241)
• Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.54.0 to 1.54.1

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.54.1

Changelog

• api/types/network: add Port.Port() method to return the port-number as a string. moby/moby#52165
• api, client: add //go:fix inline directives to deprecated functions. moby/moby#52178
• api, client: go.mod: remove patch version. moby/moby#52174
• api/types/network: fix handling of unmapped ports (ephemeral ports). moby/moby#52288

Full Changelog: moby/moby@api/v1.54.0...api/v1.54.1

Commits

• a3d12a2 Merge pull request #52293 from vvoland/dropreplace
• f1b420b Drop replace rules
• ef0a1e4 Merge pull request #52277 from nvsahana/fix-typos-comments
• 4436298 Merge pull request #52172 from Wang-squirrel/dev_1
• e39d2cd Merge pull request #52291 from thaJeztah/update_authors_mailmap
• 359ce1c Merge pull request #52290 from thaJeztah/client_flip_args
• 07a5e92 Fix typos and misspellings in comments, tests, and docs
• c493753 Merge pull request #52170 from thaJeztah/no_mod
• 6604bd0 update AUTHORS and .mailmap
• 88b79ac Merge pull request #52075 from htoyoda18/fix/swarm-event-handling
• Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.3.0 to 0.4.0

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.4.0

v0.4.0

Bug fixes and enhancements

• api, client: add //go:fix inline directives to deprecated functions to help automatically migrating using go fix. moby/moby#52178
• client/pkg/jsonmessage: add DisplayStream and DisplayMessages utils. moby/moby#52273
• client/pkg/jsonmessage: use functional options for display funcs. moby/moby#52285
• client: prevent panic when passing nil Opts to client.New. moby/moby#52184
• client: the client now sets a default User-Agent if none was set, to prevent Go's default (Go-http-client/1.1) from being used. moby/moby#52167
• Fix /system/df reporting in-use images as reclaimable. moby/moby#51778
• Go SDK: client.WithHTTPHeaders now detects if duplicate headers are set, and produces an error. Previously, duplicate errors would be randomized, resulting in undefined behavior. moby/moby#52204

Full Changelog: moby/moby@client/v0.3.0...client/v0.4.0

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.4.0 (2013-06-03)

• Introducing Builder: 'docker build' builds a container, layer by layer, from a source repository containing a Dockerfile
• Introducing Remote API: control Docker programmatically using a simple HTTP/json API

• Runtime: various reliability and usability improvements

0.3.4 (2013-05-30)

• Builder: 'docker build' builds a container, layer by layer, from a source repository containing a Dockerfile
• Builder: 'docker build -t FOO' applies the tag FOO to the newly built container.
• Runtime: interactive TTYs correctly handle window resize

• Runtime: fix how configuration is merged between layers

• Remote API: split stdout and stderr on 'docker run'
• Remote API: optionally listen on a different IP and port (use at your own risk)

• Documentation: improved install instructions.

0.3.3 (2013-05-23)

• Registry: Fix push regression
• Various bugfixes

0.3.2 (2013-05-09)

• Runtime: Store the actual archive on commit
• Registry: Improve the checksum process
• Registry: Use the size to have a good progress bar while pushing
• Registry: Use the actual archive if it exists in order to speed up the push

• Registry: Fix error 400 on push

0.3.1 (2013-05-08)

• Builder: Implement the autorun capability within docker builder
• Builder: Add caching to docker builder
• Builder: Add support for docker builder with native API as top level command
• Runtime: Add go version to debug infos
• Builder: Implement ENV within docker builder
• Registry: Add docker search top level command in order to search a repository
• Images: output graph of images to dot (graphviz)
• Documentation: new introduction and high-level overview
• Documentation: Add the documentation for docker builder
• Website: new high-level overview

• Makefile: Swap "go get" for "go get -d", especially to compile on go1.1rc
• Images: fix ByParent function
• Builder: Check the command existance prior create and add Unit tests for the case
• Registry: Fix pull for official images with specific tag
• Registry: Fix issue when login in with a different user and trying to push
• Documentation: CSS fix for docker documentation to make REST API docs look better.
• Documentation: Fixed CouchDB example page header mistake
• Documentation: fixed README formatting

• Registry: Improve checksum - async calculation
• Runtime: kernel version - don't show the dash if flavor is empty
• Documentation: updated www.docker.io website.
• Builder: use any whitespaces instead of tabs
• Packaging: packaging ubuntu; issue #510: Use goland-stable PPA package to build docker

Commits

• a8ae398 Bumped version to 0.4.0
• 7a4408f Merge pull request #794 from dotcloud/780-diff-fix2
• 854039b remove TrimLeft as it's go1.1
• 070923b Merge pull request #792 from dotcloud/780-diff-fix
• 71b1657 added test
• 1bafe9d Merge pull request #793 from dotcloud/774-remove_login_check_on_pull-fix
• 1ce4ba6 remove check on login
• 2b1b3c1 Merge pull request #784 from dotcloud/remove_cgo_dependency
• 8243f25 Update test to reflect new ApiInfo struct
• 0443cc3 Merge pull request #772 from dotcloud/improve_version_info_cmds
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions