⚡ Sangsakala Proxy 🏠 Home
Skip to content

fix: Move from github.com/docker/docker to github.com/moby/moby client modules - #23647

Merged
kodiakhq[bot] merged 3 commits into
mainfrom
apo-1339-docker-cves
Oct 30, 2026
Merged

kodiakhq[bot] merged 3 commits into
mainfrom
apo-1339-docker-cves

Conversation

@dcelasun

Copy link
Copy Markdown
Member

Move the CLI and its plugin-pb-go dependency (v1.28.3) from github.com/docker/docker, which has no fixed release for CVE-2026-41567, CVE-2026-42306, CVE-2026-34040 and CVE-2026-33997, to the unaffected github.com/moby/moby/client and github.com/moby/moby/api modules.

Fixes https://linear.app/env-zero/issue/APO-1339

@dcelasun
dcelasun requested a review from a team as a code owner October 30, 2026 10:09
@dcelasun
dcelasun requested a review from chpl October 30, 2026 10:09
@dcelasun dcelasun added the automerge Automatically merge once required checks pass label Oct 30, 2026
@kodiakhq
kodiakhq Bot merged commit 0afa5d6 into main Oct 30, 2026
11 checks passed
@kodiakhq
kodiakhq Bot deleted the apo-1339-docker-cves branch October 30, 2026 11:28
kodiakhq Bot pushed a commit that referenced this pull request Nov 2, 2026
🤖 I have created a release *beep* *boop*
---


## [6.50.0](cli-v6.49.2...cli-v6.50.0) (2026-11-02)


### Features

* Drop support for source plugins on protocol v1 and v2 ([#23654](#23654)) ([2739b66](2739b66))
* Remove legacy sync summary analytics client ([#23653](#23653)) ([d21b5f6](d21b5f6))


### Bug Fixes

* **deps:** Update alpine Docker tag to v3.24.3 ([#23668](#23668)) ([bc42892](bc42892))
* **deps:** Update module github.com/cenkalti/backoff/v7 to v7.0.2 ([#23674](#23674)) ([92218f0](92218f0))
* **deps:** Update module github.com/cloudquery/plugin-sdk/v4 to v4.99.1 ([#23622](#23622)) ([2427faa](2427faa))
* **deps:** Update module github.com/getsentry/sentry-go to v0.50.0 ([#23691](#23691)) ([449eb75](449eb75))
* **deps:** Update module github.com/pb33f/ordered-map/v2 to v2.3.2 ([#23676](#23676)) ([62e3584](62e3584))
* **deps:** Update module github.com/yuin/goldmark/v2 to v2.1.8 ([#23679](#23679)) ([25e00ee](25e00ee))
* **deps:** Update opentelemetry-go monorepo ([#23697](#23697)) ([682ee5b](682ee5b))
* Move from github.com/docker/docker to github.com/moby/moby client modules ([#23647](#23647)) ([0afa5d6](0afa5d6))

---
This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/cli automerge Automatically merge once required checks pass

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants