source/compose
1
0
Fork 0
mirror of https://github.com/docker/compose.git synced 2026-02-09 01:59:22 +08:00
Code Issues Packages Projects Releases Wiki Activity
5,545 Commits 22 Branches 294 Tags
8d9d5259e0116de37abfeab05282d4067ae3b787
Commit Graph

5545 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Rashmi Vagha
8d9d5259e0 Fix grammar: change 'adopted' to 'adopt' in Docker Swarm note 
Signed-off-by: Rashmi Vagha <rvagha@umass.edu>
 2025-12-01 12:08:52 +01:00
Nicolas De Loof
b32297dccd add --wait option to start command 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-12-01 11:58:00 +01:00
Ignacio López Luna
af8cac5768 just warn user 
Signed-off-by: Ignacio López Luna <ignasi.lopez.luna@gmail.com>
 2025-11-28 18:52:36 +01:00
Ignacio Lopez
8477a85ce6 feat(model): reject runtime flags in model configuration 
Signed-off-by: Ignacio López Luna <ignasi.lopez.luna@gmail.com>
 2025-11-28 18:52:36 +01:00
Sebastiaan van Stijn
6ee7146354 build(deps): bump golang.org/x/crypto v0.45.0 
full diff: https://github.com/golang/crypto/compare/v0.44.0...v0.45.0

Hello gophers,

We have tagged version v0.45.0 of golang.org/x/crypto in order to address two
security issues.

This version fixes a vulnerability in the golang.org/x/crypto/ssh package and a
vulnerability in the golang.org/x/crypto/ssh/agent package which could cause
programs to consume unbounded memory or panic respectively.

SSH servers parsing GSSAPI authentication requests don't validate the number of
mechanisms specified in the request, allowing an attacker to cause unbounded
memory consumption.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-58181 and Go issue https://go.dev/issue/76363.

SSH Agent servers do not validate the size of messages when processing new
identity requests, which may cause the program to panic if the message is
malformed due to an out of bounds read.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-47914 and Go issue https://go.dev/issue/76364.

Cheers, Go Security team

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-28 15:44:55 +01:00
dependabot[bot]
f28503426c build(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0 
Bumps [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/hashicorp/go-version/releases)
- [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/go-version/compare/v1.7.0...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-version
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-28 10:13:47 +01:00
Nicolas De Loof
e0977c2df1 only check for env_file 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-28 09:48:55 +01:00
Nicolas De Loof
2d569916fe skip includes preparing publish 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-28 09:41:43 +01:00
liuyueyangxmu
3975f02153 refactor: use strings.Builder to improve performance 
Signed-off-by: liuyueyangxmu <liuyueyangxmu@outlook.com>
 2025-11-26 10:52:24 +01:00
Nicolas De Loof
fa832d72d7 Added support for build.no_cache_filter 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-26 09:37:04 +01:00
vicerace
822f5a702b refactor: replace Split in loops with more efficient SplitSeq 
Signed-off-by: vicerace <vicerace@sohu.com>
 2025-11-25 11:37:03 +01:00
Nicolas De Loof
68bb7a71ba bump dependencies 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-24 17:26:40 +00:00
Nicolas De Loof
6f365395e5 Fix support for port range 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-16 20:38:54 +01:00
Sebastiaan van Stijn
3052934624 build(deps): bump github.com/docker/buildx from v0.29.1 to v0.30.0 
full diff: https://github.com/docker/buildx/compare/v0.29.1...v0.30.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-16 14:55:26 +01:00
Sebastiaan van Stijn
428abab16a build(deps): bump github.com/moby/buildkit from v0.25.2 to v0.26.0 
full diff: https://github.com/moby/buildkit/compare/v0.25.2...v0.26.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-16 14:55:26 +01:00
Sebastiaan van Stijn
755618e707 build(deps): bump go.opentelemetry.io/otel v1.38.0, go.opentelemetry.io/contrib v0.63.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-16 14:55:26 +01:00
Sebastiaan van Stijn
c47b8c32e3 Dockerfile: update golangci-lint to v2.6.2 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-16 14:54:58 +01:00
Sebastiaan van Stijn
89d3944837 fix linting issues 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-16 14:54:58 +01:00
Sebastiaan van Stijn
f2b14fe1aa gha: use custom names for matrix 
Manually enumerate the combinations ((plugin|standalone), (version))
so that we can assign a predictable name ("stable", "oldstable") and
prevent having to update the branch-protection rules for each update
to mark the tests as required.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-16 14:42:03 +01:00
Sebastiaan van Stijn
bd2257b6d1 gha: test against docker v29, v28 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-16 14:42:03 +01:00
Nicolas De Loof
d7e5f20eb6 images command should display image Created time or N/A if not available 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
v5.0.0-rc.2 		2025-11-13 09:40:56 +01:00
Nicolas De Loof
2b4543935c next release will be major version v5.x 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-13 09:32:43 +01:00
aevesdocker
f0dce1b977 sdk docs: patch 
Signed-off-by: aevesdocker <allie.sadler@docker.com>
v5.0.0-rc.1 		2025-11-12 16:24:24 +01:00
Nicolas De Loof
6e55832b1c add (restore) support for detach keys 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-12 14:23:58 +01:00
Nicolas De Loof
45def51117 make DRYRUN_PREFIX a display attribute, move DryRunClient out of pkg/api 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-12 11:17:28 +01:00
Nicolas De Loof
aff5c115d6 move progress UI components into cmd 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-12 11:17:28 +01:00
Nicolas De Loof
5ef495c898 removed unecessary check 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-12 08:34:29 +01:00
Nicolas De Loof
9de7e2a388 SDK docs 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-10 16:15:36 +01:00
Jonty
dc90c4e44d Grammatical fix 
Signed-off-by: Jonty <jontyleslie@gmail.com>
 2025-11-10 11:34:18 +01:00
Jonty
91e1753d80 Grammatical fix 
Signed-off-by: Jonty <jontyleslie@gmail.com>
 2025-11-10 11:34:18 +01:00
Jonty
9db27a65c6 Making the American/British spellings consistent to the error messages 
Signed-off-by: Jonty <jontyleslie@gmail.com>
 2025-11-10 11:34:18 +01:00
dependabot[bot]
efd7424da7 build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.17.0 to 0.18.0.
- [Commits](https://github.com/golang/sync/compare/v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-10 11:09:20 +01:00
dependabot[bot]
02109c8d33 build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.37.0 to 0.38.0.
- [Commits](https://github.com/golang/sys/compare/v0.37.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-10 10:23:37 +01:00
Nicolas De Loof
c37ede62db on up buildOptions must include all enabled services 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-06 16:28:46 +01:00
Nicolas De Loof
7eb5adeef6 introduce --insecure-registry, reserved for testing purpose 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-06 16:17:21 +01:00
Nicolas De Loof
0793ad7c68 document support for OCI and Git remote resources 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-06 16:14:05 +01:00
dependabot[bot]
8137b2bce8 build(deps): bump github.com/docker/cli 
Bumps [github.com/docker/cli](https://github.com/docker/cli) from 28.5.1+incompatible to 28.5.2+incompatible.
- [Commits](https://github.com/docker/cli/compare/v28.5.1...v28.5.2)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 28.5.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-06 10:27:37 +01:00
dependabot[bot]
4e3372b473 build(deps): bump github.com/containerd/containerd/v2 
Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.1.4 to 2.2.0.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v2.1.4...v2.2.0)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-06 10:16:04 +01:00
dependabot[bot]
fef26fb372 build(deps): bump github.com/docker/docker 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 28.5.1+incompatible to 28.5.2+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v28.5.1...v28.5.2)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-version: 28.5.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-06 10:15:05 +01:00
dependabot[bot]
a32e13a2b0 build(deps): bump github.com/moby/buildkit from 0.25.1 to 0.25.2 
Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.25.1 to 0.25.2.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](https://github.com/moby/buildkit/compare/v0.25.1...v0.25.2)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-06 10:14:25 +01:00
Suleiman Dibirov
67e39a41f2 fixes 
Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>
 2025-11-06 08:02:59 +01:00
Suleiman Dibirov
dc1283289d fix: use NewParallelCLI in compose_run_build_once_test.go 
Signed-off-by: Suleiman Dibirov <idsulik@gmail.com>
 2025-11-06 08:02:59 +01:00
dependabot[bot]
0c596ed3cf build(deps): bump github.com/containerd/platforms 
Bumps [github.com/containerd/platforms](https://github.com/containerd/platforms) from 1.0.0-rc.1 to 1.0.0-rc.2.
- [Release notes](https://github.com/containerd/platforms/releases)
- [Commits](https://github.com/containerd/platforms/compare/v1.0.0-rc.1...v1.0.0-rc.2)

---
updated-dependencies:
- dependency-name: github.com/containerd/platforms
  dependency-version: 1.0.0-rc.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-05 17:43:11 +01:00
Nicolas De Loof
13870006fb disable progress UI when build is ran with --print 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-04 17:30:56 +01:00
Nicolas De Loof
af579ebd4b drop support for internal buildkit builder 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-04 11:36:40 +01:00
Nicolas De Loof
fc2a7d13fa from Compose CLI, we know the streams used to configure LogConsumer 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-04 10:25:14 +01:00
Nicolas De Loof
d70bb8cf5e distinguish event (short) status text and details 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-04 10:18:55 +01:00
Nicolas De Loof
bff3d35305 render events in order they were first received 
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
 2025-11-04 10:18:55 +01:00
Guillaume Lours
b80bb0586e Migrate CLI commands to use LoadProject API 
Simplifying the codebase and eliminating duplicate backend creation.

Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
 2025-11-03 08:58:30 +01:00
Guillaume Lours
d74274bc04 Add LoadProject method to Compose SDK API 
This commit adds a new LoadProject method to the Compose service API,
allowing SDK users to programmatically load Compose projects with full
control over the loading process.

Changes:

1. New API method (pkg/api/api.go):
   - LoadProject(ctx, ProjectLoadOptions) (*types.Project, error)
   - ProjectLoadOptions struct with all loader configuration
   - LoadListener callback for event notifications (metrics, etc.)
   - ProjectOptionsFns field for compose-go loader options

2. Implementation (pkg/compose/loader.go):
   - createRemoteLoaders: Git and OCI remote loader setup
   - buildProjectOptions: Translates ProjectLoadOptions to compose-go options
   - postProcessProject: Service filtering, labels, resource pruning

3. Unit test (pkg/compose/loader_test.go):
   - Tests basic project loading functionality
   - Verifies ProjectOptionsFns with cli.WithoutEnvironmentResolution

4. Mock update (pkg/mocks/mock_docker_compose_api.go):
   - Added LoadProject to mock interface

Key design decisions:
- LoadListener pattern keeps metrics collection in CLI, not SDK
- ProjectOptionsFns exposes compose-go options directly (e.g., cli.WithInterpolation(false))
- Post-processing in SDK: labels, service filtering, resource pruning
- Environment resolution NOT in SDK (command responsibility)
- Compatibility mode handling (api.Separator)

Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
 2025-11-03 08:58:30 +01:00