full diff: moby/moby@d21856f...v28.5.0-rc.1

Signed-off-by: Sebastiaan van Stijn <[email protected]>

[28.x] vendor: github.com/docker/docker v28.5.0-rc.1

- Remove redundant intermediate variables
- Explicitly use an early return on error instead of combining with
  other checks.
- Fix unhandled errors and combine defers
- Remove outstanding TODO that unlikely will be addressed

Signed-off-by: Sebastiaan van Stijn <[email protected]>
(cherry picked from commit c36e67d)
Signed-off-by: Sebastiaan van Stijn <[email protected]>

Docker Hub's Notary service is being retired, and now produces
failures in most cases. Add a warning when attempting to use
it, pending full removal of trust;
https://www.docker.com/blog/retiring-docker-content-trust/

With this PR:

    DOCKER_CONTENT_TRUST=1 docker pull -q hello-world
    WARNING: Docker is retiring DCT for Docker Official Images (DOI).
             For details, refer to https://docs.docker.com/go/dct-deprecation/

    could not validate the path to a trusted root: unable to retrieve valid leaf certificates

Signed-off-by: Sebastiaan van Stijn <[email protected]>
(cherry picked from commit 43b03ef)
Signed-off-by: Sebastiaan van Stijn <[email protected]>

…exInfo

All information needed can be deducted from the image reference, which
is used to create a indexInfo, repoInfo, and to resolve auth-config.

In some situations this may result in resolving the auth-config twice
after it already was resolved to an encoded auth-config.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
(cherry picked from commit 9a6313e)
Signed-off-by: Sebastiaan van Stijn <[email protected]>

[28.x backport] trust: print deprecation warning when using hub Notary server

[28.x backport] cli/command/image: pushTrustedReference: internalize constructing indexInfo

Deprecate the IsNotFound utility in favor of errdefs.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
(cherry picked from commit f3fb772)
Signed-off-by: Sebastiaan van Stijn <[email protected]>

This utility was added in 9b83d5b, but
was never used. Remove the utility, and rewrite the error returned to
implement the errdefs.NotFound interface, so that it can be detected
using the errdefs.IsNotFound() utility if needed.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
(cherry picked from commit 3c78ac2)
Signed-off-by: Sebastiaan van Stijn <[email protected]>

Commit [cli@27b2797] forked the AuthConfig type from the API, and changed
existing code to do a direct cast / convert of the forked type to the API
type. This can cause issues if the API types diverges, such as the removal
of the Email field.

This patch explicitly maps each field to the corresponding API type, but
adds some TODOs, because various code-paths only included a subset of the
fields, which may be intentional for fields that were meant to be handled
on the daemon / registry-client only.

We should evaluate these conversions to make sure these fields should
be sent from the client or not (and possibly even removed from the API
type).

[cli@27b2797]: 27b2797

Signed-off-by: Sebastiaan van Stijn <[email protected]>
(cherry picked from commit 9f02d96)
Signed-off-by: Sebastiaan van Stijn <[email protected]>

…otfound

[28.x backport] cli/manifest/store: deprecate IsNotFound

…nderr

[28.x backport] cli/config/memorystore: remove unused IsErrValueNotFound

…irect_cast

[28.x backport] cli/command: explicitly map AuthConfig fields instead of a direct cast

The ResolveDefaultContext function was exported in [cli@f820766] to allow
(unit) testing, but did not document that it was only exported for this
purpose. The only external use of this function is in buildx, which uses
it in a unit test that can be implemented without this function.

This patch deprecates the function so that we can remove it.

[cli@f820766]: f820766

Signed-off-by: Sebastiaan van Stijn <[email protected]>
(cherry picked from commit 311a97a)
Signed-off-by: Sebastiaan van Stijn <[email protected]>

The macOS 13 runners are deprecated and will be removed on December 4th,
with brownouts in November;
https://github.blog/changelog/2025-09-19-github-actions-macos-13-runner-image-is-closing-down/

Signed-off-by: Sebastiaan van Stijn <[email protected]>
(cherry picked from commit 91d8c0b)
Signed-off-by: Sebastiaan van Stijn <[email protected]>

…veDefaultContext

[28.x backport] cli/command: deprecate ResolveDefaultContext

full diff: moby/moby@v28.5.0-rc.1...cd04830

Signed-off-by: Sebastiaan van Stijn <[email protected]>

[28.x backport] gha: add macOS 15, remove macOS 13 (deprecated)

[28.x] vendor: github.com/docker/docker cd048300a487 (v28.5.0-dev)