28.0.0-rc.1

This is a pre-release of the upcoming 28.0.0 release.

Pre-releases are intended for testing new releases: only install in a test environment!

curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh

Bugs and regressions can be reported in these issue trackers:

• Related to the CLI: https://github.com/docker/cli/issues
• Related to the Docker Engine https://github.com/moby/moby/issues

When reporting issues, include [28.0.0-rc] in the issue title

What's Changed

• update golangci-lint to v1.59.1 by @thaJeztah in #48058
• api/types: deprecate ContainerJSONBase.Node, ContainerNode by @thaJeztah in #48055
• daemon/graphdriver, layer: rename vars that shadowed imports by @thaJeztah in #48071
• Dockerfile: update compose to v2.28.1, update cli to v27.0.2 by @vvoland in #48073
• daemon/graphdriver: remove support for external graphdriver plugins by @thaJeztah in #48072
• daemon/graphdriver: deprecate GetDriver(), and remove its use by @thaJeztah in #48079
• Fix duplicate subnet allocations by @robmry in #48084
• fix some gofmt issues reported by goreportcard by @thaJeztah in #48080
• daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ (fix "failed to Lchown "/dev/console") by @thaJeztah in #48083
• Fix incorrect validation of port mapping by @robmry in #48088
• cleanup: Remove unnecessary return value by @coolljt0725 in #48095
• runconfig, runconfig/opts: remove deprecated types and functions by @thaJeztah in #48102
• daemon/logger, volume/drivers: remove redundant import-aliases by @thaJeztah in #48098
• errdefs: FromStatusCode(): use early returns by @thaJeztah in #48100
• vendor: github.com/microsoft/hcsshim v0.11.7 by @thaJeztah in #48091
• do another run of gofumpt by @thaJeztah in #48081
• builder/builder-next: applySourcePolicies: remove redundant check and vars by @thaJeztah in #48070
• pkg/capabilities move to daemon/internal by @thaJeztah in #48101
• pkg/containerfs: move to internal by @thaJeztah in #48097
• pkg/rootless/specconv: move to internal by @thaJeztah in #48110
• pkg/dmesg: remove deprecated package by @thaJeztah in #48109
• pkg/directory: deprecate, and move to internal by @thaJeztah in #48108
• api/types/system: remove deprecated Info.ExecutionDriver by @thaJeztah in #48111
• api/types: migrate more types to separate packages by @thaJeztah in #48057
• api/types: remove aliases for deprecated types by @thaJeztah in #48107
• update containerd binary to v1.7.19 by @thaJeztah in #48117
• daemon/logger/journald: add //nolint:unused for readSyncTimeout by @thaJeztah in #48115
• update to go1.21.12 by @vvoland in #48120
• update to go1.21.12 [part 2] by @vvoland in #48121
• api/types/container: InspectResponse: keep old name for embedded type by @thaJeztah in #48124
• vendor: update dependencies in preparation of BuildKit v0.15 by @thaJeztah in #48127
• vendor: github.com/containerd/containerd v1.7.19, migrate to github.com/containerd/platforms module by @thaJeztah in #47142
• Remove IPv6 bridge RouteAdd() that always fails by @robmry in #48135
• rootless: add Requires=dbus.socket by @AkihiroSuda in #48134
• daemon/graphdriver: split, internalize packages to separate snapshotters and graphdrivers by @thaJeztah in #48092
• vendor: update buildkit to v0.15.0-rc1 by @tonistiigi in #48126
• By-default, don't create an iptables rule to checksum SCTP by @robmry in #48149
• Fix API version in TestSetInterfaceSysctl by @robmry in #48156
• docs/api: Add missing ` by @vvoland in #48154
• vendor: update buildkit to v0.15.0-rc2 by @tonistiigi in #48150
• vendor: update buildkit to v0.15.0 by @tonistiigi in #48159
• all: switch to Go 1.19 atomics by @corhere in #48139
• daemon/graphdriver: remove Capabilities, CapabilityDriver by @thaJeztah in #48143
• vendor: cloud.google.com/go/logging v1.9.0 by @thaJeztah in #48165
• rm regexp use by @kolyshkin in #48169
• README: replace obsolete Docker EE mention by @corhere in #48176
• c8d/build: Log image tag event when image was built with Buildkit by @vvoland in #48078
• gha: check-pr-branch: verify major version only by @thaJeztah in #48177
• Dockerfile: update buildx to v0.16.1, compose to v2.29.0 by @thaJeztah in #48186
• gha: check-pr-branch: fix branch check regression by @thaJeztah in #48194
• update containerd binary to v1.7.20 by @thaJeztah in #48190
• vendor: github.com/containerd/containerd v1.7.20 by @thaJeztah in #48188
• vendor: update moby/sys modules by @thaJeztah in #48189
• vendor: github.com/moby/sys/sequential v0.6.0 by @thaJeztah in #48198
• hack: explicitly control enabling the journald logging driver by @williamh in #47789
• contrib/check-config.sh: remove special case for userns on CentOS/RHEL 7 by @thaJeztah in #48212
• Clean up networks in 'integration/network' tests by @robmry in #48217
• dockerd-rootless-setuptool.sh: move RootlessKit smoke test by @AkihiroSuda in #48216
• vendor: github.com/gofrs/flock v0.12.1 by @thaJeztah in #48234
• migrate to github.com/moby/sys/user/userns by @thaJeztah in #48170
• vendor: update buildkit to v0.15.1 by @crazy-max in #48239
• remove support for setting CORS headers (deprecated) by @thaJeztah in #48209
• api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize by @thaJeztah in #48242
• images: Extract ImageInspect from GetImage by @vvoland in #48240
• daemon: remove setMayDetachMounts (set may_detach_mounts=1 on startup) by @thaJeztah in #48210
• daemon: isPermissibleC8dRuntimeName: use local utility to reduce c8d deps by @thaJeztah in #48251
• daemon: remove unused import by @thaJeztah in #48263
• Split Linux/bridge and Windows/nat integration tests by @robmry in #48247
• gha: set permissions to read-only by default by @thaJeztah in #48262
• IPv6 related refactoring by @robmry in #48248
• libcontainerd/supervisor: remove remnants of adjusting oom-score by @thaJeztah in #48252
• daemon: assorted cleanups and minor improvements by @thaJeztah in #48244
• Improve documentation around maintenance, building, and packaging by @neersighted in #46772
• hack/make: suppress "not mounted" message by @kolyshkin in #48272
• libnetwork/networkdb: switch to go-immutable-radix v2 by @thaJeztah in #48157
• IPv6 only: add API option enable/disable IPv4 by @robmry in #48271
• plugin, api/types: fix typos and GoDoc by @thaJeztah in #48279
• vendor: golang.org/x/time v0.5.0, google.golang.org/grpc v1.62.0 by @thaJeztah in #48283
• IPv6 only: IPv4 is required for Windows and Swarm networks by @robmry in #48278
• touch-up security policy by @thaJeztah in #48280
• vendor: github.com/containerd/nydus-snapshotter v0.14.0 by @thaJeztah in #48288
• IPv6 only: gateway, IPAM and address configuration by @robmry in #48284
• c8d/image: Simplify presentImages and better "platform not found" error by @vvoland in #48276
• Migrate per-endpoint sysctls until 28.0.0 by @robmry in #48281
• update to go1.21.13 by @vvoland in #48300
• Makefile: Add BIND_GIT variable by @vvoland in #48303
• c8d: Multi-platform image list by @vvoland in #47526
• migrate to github.com/moby/sys/userns by @thaJeztah in #48307
• Create docker-proxy TCP/UDP listener sockets in the daemon by @robmry in #48132
• api/swagger: fix x-nullable for SystemInfo.Containerd (api v1.46) by @thaJeztah in #48275
• govulncheck to report known vulnerabilities by @crazy-max in #48311
• add Austin Vazquez (austinvazquez) to curators by @thaJeztah in #48310
• remove leftovers for building docker-proxy on Windows by @thaJeztah in #48318
• IPv6 only: DNS changes by @robmry in #48290
• Allow 64-bit --ip-range by @robmry in #48322
• c8d/list: Fix Total size calculation by @vvoland in #48330
• vendor: update buildkit to v0.15.2 by @tonistiigi in #48340
• fix deprecation comments, and update some godoc by @thaJeztah in #48324
• c8d/list: Don't require opts.ContainerCount for manifest containers by @vvoland in #48345
• feat(stream): log the event when stream copy failed by @7sunarni in #48334
• vendor.mod: github.com/microsoft/hcsshim v0.12.5 by @AkihiroSuda in #48174
• integration/container: rename var that collided with import by @thaJeztah in #48351
• libcontainerd/supervisor: consolidate platform-specific defaults by @thaJeztah in #48353
• Dockerfile: update xx to v1.5.0 by @thaJeztah in #48261
• libcontainerd/supervisor: set log-level through the config-file by @thaJeztah in #48355
• vendor: tags.cncf.io/container-device-interface v0.8.0 by @thaJeztah in #48371
• libnetwork: resolvconf: remove dependency on errdefs by @thaJeztah in #48370
• c8d/list: Fix race condition when traversing containers by @vvoland in #48367
• vendor: dario.cat/mergo v1.0.1 by @thaJeztah in #48372
• Move dockerd man page back from docker/cli by @corhere in #48298
• c8d/load: Multi-platform fixes by @vvoland in #48293
• c8d/pull: Keep the replaced image as dangling by @vvoland in #48374
• Dockerfile/vendor: update containerd to v1.7.21 by @vvoland in #48382
• vendor: github.com/vishvananda/netlink v1.3.0 by @thaJeztah in #48368
• Fix linting issues in preparation of Go and GolangCI-lint update by @thaJeztah in #48359
• libnetwork/portallocator: assorted cleanups by @thaJeztah in #48373
• vendor.mod: golang.org/x/* latest by @AkihiroSuda in #48398
• c8d/list: Don't exclude non-container images by @vvoland in #48399
• Dockerfile: update registry to v3.0.0-beta.1 by @thaJeztah in #48403
• man: create parent directories in install recipe by @corhere in #48388
• api/types: move RequestPrivilegeFunc to api/types/registry by @thaJeztah in #48119
• c8d/pull: Same error message for non-matching platform by @vvoland in #48414
• update to go1.22.6 by @thaJeztah in #46982
• docs/api: add documentation for API v1.47 by @vvoland in #48422
• update runc binary to 1.1.14 by @thaJeztah in #48424
• Make log reading more robust to errors by @cpuguy83 in #47983
• hack/make/.binary: enable pie mode on windows/arm64 by @thaJeztah in #48421
• vendor: github.com/opencontainers/runc v1.1.14 by @thaJeztah in #48425
• update to go1.22.7 by @vvoland in #48432
• Fix typos by @NathanBaulch in #48393
• add more //go:build directives to prevent downgrading to go1.16 by @thaJeztah in #48434
• gha/bin-image: Also run on branches like 27.x by @vvoland in #48450
• container/stream: Config.CloseStreams(): use errors.Join by @thaJeztah in #48435
• internal/unix_noeintr: fix godoc for package by @thaJeztah in #48453
• vendor: update buildkit to v0.16.0-rc1 by @crazy-max in #48309
• vendor: update buildkit to v0.16.0-rc2 by @tonistiigi in #48456
• seccomp: add riscv64 mapping to seccomp_linux.go by @gdams in #48455
• Dockerfile/vendor: update containerd to v1.7.22 by @thaJeztah in #48458
• vendor: update buildkit to v0.16.0 by @crazy-max in #48472
• integration/system: rename vars to prevent shadowing imports by @thaJeztah in #48473
• api/swagger: update deprecation version for erroneous fields by @thaJeztah in #48446
• api: swagger: fix documentation for image push endpoint by @thaJeztah in #48443
• API: bump version to 1.48 by @thaJeztah in #48476
• project: update 23.0 EOL and add 25.0 LTM branch by @corhere in #48474
• layer: layerStore.deleteLayer(): remove redundant error-check by @thaJeztah in #48461
• image/tarexport: fix some minor linting issues by @thaJeztah in #48467
• Dockerfile: Update CLI, buildx and compose by @vvoland in #48475
• update RootlessKit to v2.3.1 by @AkihiroSuda in #48172
• TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping by @thaJeztah in #48480
• Explicitly disable nvidia device injection for --gpus=0 by @elezar in #48482
• c8d/prune: Keep the last tagged image instead of creating dangling image by @vvoland in #48076
• c8d: Add platform parameter to history, save and load by @vvoland in #48295
• Add --feature to daemon flags by @dmcgowan in #48167
• man: update dockerd man-page to include --feature flag by @thaJeztah in #48486
• IPv6 only: macvlan and ipvlan drivers by @robmry in #48299
• Update dlv in the dev-env by @robmry in #48497
• dockerd: fix docs, improve validation and improve coverage of "--feature" flag by @thaJeztah in #48502
• man: dockerd: add description for --log-format option by @thaJeztah in #48505
• man: remove docs for deprecated --api-cors-header by @thaJeztah in #48504
• remove deprecated image/spec package by @thaJeztah in #48460
• Only enable bridge netfiltering when needed by @robmry in #48492
• Dockerfile: update buildx to v0.17.1, compose to v2.29.4 by @thaJeztah in #48509
• Retry on EINTR from netlink dump calls by @robmry in #48407
• Do not DNAT packets from WSL2's loopback0 by @robmry in #48075
• Fix merge problem by @robmry in #48515
• cmd/dockerd: assorted changes to improve context-passing, config loading by @thaJeztah in #47412
• IPv6 only: bug fix - enableIPv4 for old networks by @robmry in #48489
• cmd/dockerd: use golang.org/x/sys/windows/service param-change consts by @thaJeztah in #48513
• cmd/dockerd: runDaemon: extract platform-agnostic code by @thaJeztah in #48519
• gha: govulncheck: make sure read permissions are set by @thaJeztah in #48524
• gha: add CodeQL Analysis workflow by @thaJeztah in #47034
• libnet/ds, libnet/config: various cleanups by @akerouanton in #47992
• Dockerfile: update docker CLI to v27.3.1, compose to v2.29.7 by @thaJeztah in #48537
• daemon: add IPv6 loopback as insecure registry by @thaJeztah in #48540
• client.ContainerCreate: use container.CreateRequest instead of local type by @thaJeztah in #48553
• Update download-frozen-image-v2.sh added OCI v1 support (carry 48533) by @thaJeztah in #48546
• runconfig: validateNetContainerMode: simplify validation by @thaJeztah in #48554
• api: info: deprecate "Commit.Expected" fields by @thaJeztah in #48478
• daemon/exec: don't overwrite exit code if set by @laurazard in #48552
• client: ContainerCreate: normalize CapAdd, CapDrop capabilities by @thaJeztah in #48551
• cmd/dockerd: windows: don't use Fatal log to prevent early exit by @thaJeztah in #48518
• update to go1.22.8 by @thaJeztah in #48573
• integration: Add tests for port mappings by @akerouanton in #48545
• Fix vendoring for moby/docker-image-spec by @robmry in #48592
• api: postImagesLoad: fix API version for platform by @thaJeztah in #48588
• Set NODAD on bridge IPv6 addresses by @robmry in #48609
• libnet/d/bridge: port mapping: proxy LL connections by @akerouanton in #48570
• cmd/docker-proxy: re-add SO_REUSEADDR by @akerouanton in #48567
• gha: buildkit: make sure expected Go version is installed by @thaJeztah in #48615
• vendor assorted dependencies in preparation of BuildKit v0.17 by @thaJeztah in #48613
• integration/build: remove TestBuildWithSession, and fsutil direct dependency by @thaJeztah in #48628
• gha: add guardrails timeouts on all jobs by @thaJeztah in #48629
• gha: remove stray double empty line by @thaJeztah in #48636
• Disable iptables/ip6tables in two tests to remove conflict by @robmry in #48642
• Use pools.Copy for archive file copy operations by @akx in #48605
• vendor: github.com/moby/buildkit v0.17.0-rc1 by @thaJeztah in #48634
• gha: restrict cross and bin-image to 20 minutes by @thaJeztah in #48645
• Touch-up some errors for missing platforms by @thaJeztah in #48631
• gha: more limits, update alpine version, and some minor improvements by @thaJeztah in #48654
• builder/builder-next: Builder.Build: use network-mode consts by @thaJeztah in #48652
• docs: api: document w (width) and h (height) query params as required by @thaJeztah in #48663
• update links to API documentation by @thaJeztah in #48653
• After retries, use netlink data even if the dump is still interrupted by @robmry in #48598
• Internal documentation for iptables rules by @robmry in #48593
• cmd/docker-proxy: UDP: reply to clients with original daddr by @akerouanton in #48571
• api/server/router/container: move API adjustments to API by @thaJeztah in #48672
• container/integration: TestResize: add more test-cases, and add TestExecResize by @thaJeztah in #48665
• daemon: killWithSignal: use more structured logs by @thaJeztah in #48673
• container: deprecate ErrNameReserved, ErrNameNotReserved, use errdefs instead by @thaJeztah in #48668
• README: add some badges by @thaJeztah in #48655
• client: imageBuildOptionsToQuery: omit empty and default values from query by @thaJeztah in #48651
• Log rather than error if port mapping is overspecified by @robmry in #48575
• api/server/httputils: DecodePlatform: improve test-coverage by @thaJeztah in #48680
• Enable bridge netfiltering if userland-proxy=false by @robmry in #48676
• distribution: remove formatPlatform utility by @thaJeztah in #48682
• api: container, exec resize: improve errors for invalid width/height by @thaJeztah in #48679
• build: create distinct history db for each store by @crazy-max in #48565
• vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e by @thaJeztah in #48686
• ci: run integration tests with firewalld enabled by @akerouanton in #48603
• daemon: fix restoring containers with name matching an ID by @thaJeztah in #48669
• cmd/dockerd: Add workaround for OTEL meter leak by @vvoland in #48690
• dockerd-rootless-setuptool.sh: let --force ignore smoke test errors by @AkihiroSuda in #48683
• api/server/middleware: use structured logs for debug-logs by @thaJeztah in #48677
• volume/service: change some logs to use structured logs by @thaJeztah in #48675
• pkg/stringid: remove deprecated IsShortID, ValidateID by @thaJeztah in #48705
• pkg/archive: remove deprecated CanonicalTarNameForPath, NewTempArchive, TempArchive by @thaJeztah in #48708
• daemon: deprecate Daemon.Register and make it internal by @thaJeztah in #48702
• api: GET /images/json: preserve original manifest order by @thaJeztah in #48701
• Releases container layer on docker export by @grautxo in #48517
• Fix: setup user chains during libnetwork controller initialization by @am97 in #48577
• pkg/stringid: replace TestShortenIdXXX with TestTruncateID table test by @thaJeztah in #48707
• daemon: Daemon.newContainer: inline Daemon.generateHostname by @thaJeztah in #48704
• pkg/stringid: optimize GenerateRandomID by @thaJeztah in #48706
• daemon: deprecate Daemon.Exists and Daemon.IsPaused by @thaJeztah in #48670
• Increase flaky test sleep, replace deprecated assert by @adams1mon in #48417
• vendor: go.etcd.io/etcd v3.5.16, go.etcd.io/etcd/server/v3 v3.5.16 by @thaJeztah in #48650
• daemon: remove deprecated Daemon.Exists and Daemon.IsPaused by @thaJeztah in #48723
• daemon: use OwnCgroupPath in withCgroups by @kolyshkin in #48730
• Remove dependency on the filter-FORWARD policy by @robmry in #48724
• container: remove deprecated ErrNameReserved, ErrNameNotReserved by @thaJeztah in #48728
• client: explicitly return zero-type on failures in prune functions by @thaJeztah in #48713
• daemon: remove Daemon.containerRoot, Daemon.newBaseContainer by @thaJeztah in #48725
• daemon: remove configsSupported, secretsSupported utilities by @thaJeztah in #48703
• vendor: github.com/cyphar/filepath-securejoin v0.3.4 by @thaJeztah in #48732
• ci/gha: enable go caching by @kolyshkin in #48729
• vendor: github.com/opencontainers/selinux v1.11.1 by @thaJeztah in #48741
• vendor: github.com/cilium/ebpf v0.16.0 by @thaJeztah in #48735
• update to go1.23.2 by @AkihiroSuda in #48715
• Remove feature flag "windows-dns-proxy" by @robmry in #48738
• From 28.0.0, don't migrate per-endpoint sysctls by @robmry in #48746
• vendor: google.golang.org/protobuf v1.34.2 by @thaJeztah in #48751
• inte/t/networking: delete veth ifaces before netns by @akerouanton in #48749
• vendor: github.com/opencontainers/runc v1.2.0 by @thaJeztah in #47668
• vendor: github.com/prometheus/client_golang v1.20.5 by @thaJeztah in #48753
• api/types/filters: GetBoolOrDefault: remove unreachableCode by @thaJeztah in #48745
• vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 by @thaJeztah in #48750
• vendor: github.com/go-logr/logr v1.4.2, github.com/cenkalti/backoff/v4 v4.3.0 by @thaJeztah in #48752
• volume/mounts: fix anonymous volume not being labeled by @thaJeztah in #48754
• container: update confusing GoDoc for Container and State by @thaJeztah in #48726
• client: prevent idle connections leaking FDs by @laurazard in #48736
• c8d/load: Don't ignore missing platform when requested by @vvoland in #48718
• volume: VolumesService.Create: fix log-level for debug logs by @thaJeztah in #48767
• Update tmLanguage file to cover first escape character by @Myeongjoon in #36766
• remove redundant alias for runtime-spec by @thaJeztah in #48769
• demon: ImageService.Mount: use structured logs by @thaJeztah in #48770
• daemon: cdiHandler.getErrors: remove var that shadowed import by @thaJeztah in #48771
• internal/safepath: log some unhandled errors, and remove workaround for ECI / Sysbox by @thaJeztah in #48774
• volume/mounts: minor linting issues, touch-ups, and improve test-coverage by @thaJeztah in #48776
• remove deprecated pkg/longpath.Prefix, pkg/directory by @thaJeztah in #48779
• c8d/inspect: Fix duplicate RepoDigests by @vvoland in #48777
• volume/service: use local driver as default for anonymous volumes by @thaJeztah in #48775
• Revert "ci: run integration tests with firewalld enabled" by @akerouanton in #48788
• chore: fix some function names by @jinjiadu in #48781
• vendor: go.opentelemetry.io/otel v1.28.0, go.opentelemetry.io/contrib v0.53.0 by @thaJeztah in #48757
• vendor: github.com/Microsoft/hcsshim v0.12.7 by @thaJeztah in #48790
• Restore 27.x path for libnet's Bolt database by @robmry in #48793
• vendor: update buildkit to v0.17.0-rc2 by @tonistiigi in #48792
• builder-next: exporter: emptyImageConfig: use platform directly by @thaJeztah in #48794
• container create: add warning for volumeDriver together with mounts by @thaJeztah in #48789
• hack/unit: Rerun failed flaky libnetwork tests by @vvoland in #47553
• Remove libnetwork_test.TestMain by @robmry in #48796
• Registry host configuration cleanup by @dmcgowan in #47380
• vendor: update buildkit to v0.17.0 by @tonistiigi in #48801
• vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8 by @thaJeztah in #48544
• client: add utilities to encode platforms by @thaJeztah in #48806
• Allocate IPv6 addresses after detecting IPv6 support by @robmry in #47406
• c8d/save: Add tests by @vvoland in #48722
• client: Client.ImageHistory: don't decorate error twice, and improve tests by @thaJeztah in #48819
• Remove function isLinkable by @robmry in #48821
• fix(systemd): start Docker engine after DNS resolution is ready by @Octol1ttle in #48812
• libnetwork: endpointJoinInfo.UnmarshalJSON: fix shadowed variable (go… by @thaJeztah in #48822
• chore: fix function name by @tcpdumppy in #48813
• fix vendor of github.com/containerd/containerd by @thaJeztah in #48826
• fix, and update golangci-lint config, and fix some linting issues by @thaJeztah in #48824
• api/swagger: Improve description for platform in images/push by @vvoland in #48357
• vendor: github.com/containerd/typeurl v2.2.3 by @thaJeztah in #48827
• Improve /etc/hosts generation by @robmry in #48823
• golangci: enable all govet linters, run gosec on tests as well by @thaJeztah in #48825
• update to go1.23.3 by @vvoland in #48831
• IPv6 only: changes to bridge driver and gateway Endpoint selection by @robmry in #48323
• all: Remove redundant units alias for go-units by @vvoland in #48834
• vendor: update buildkit to v0.17.1 by @tonistiigi in #48836
• Only set ip6tables filter-FORWARD DROP if necessary by @robmry in #48594
• chore(libnetwork): fix some comments by @pinglanlu in #48846
• Dockerfile: update registry to v3.0.0-rc.1 by @thaJeztah in #48848
• ci: re-add firewalld jobs by @akerouanton in #48756
• update go:build tags to use go1.22, and enable copyloopvar linter by @thaJeztah in #48856
• deprecate pkg/platform and move internal by @thaJeztah in #48862
• hack: Add explicit containerd feature to daemon.json by @vvoland in #48860
• Dockerfile: update buildx to v0.18.0, compose to v2.30.3 by @thaJeztah in #48866
• c8d/list: Return Descriptor by @vvoland in #48861
• Only masquerade access to own published ports for userland-proxy=false by @robmry in #48854
• Windows: Run containerd as managed process by @CharityKathure in #47955
• Fix /etc/hosts update for net disconnect by @robmry in #48857
• Move Austin Vazquez (austinvazquez) to maintainers by @thaJeztah in #48873
• fix missing go:build tags by @thaJeztah in #48884
• EnableIPv4 will be in API 1.48, not 1.47 by @robmry in #48888
• daemon/logger: logDriverError: use WithFields for logs by @thaJeztah in #48887
• daemon/images: fix godoc for ImageActions by @thaJeztah in #48871
• Makefile: don't automatically inherit graph-driver from host by @thaJeztah in #48895
• c8d/image/inspect: Return Descriptor by @vvoland in #48894
• remove logentries check and migration code by @thaJeztah in #48891
• vendor: google.golang.org/grpc v1.66.3 by @thaJeztah in #48898
• client: improve/refactor some unit-tests and add "platform" test-cases to them by @thaJeztah in #48896
• runc-1.2.0 merge followups by @kolyshkin in #48766
• c8d/container/inspect: Return ImageManifestDescriptor by @vvoland in #48855
• Make containers on routed-mode networks accessible from other bridge networks by @robmry in #48596
• vendor: github.com/opencontainers/runc v1.2.2 by @thaJeztah in #48900
• update golangci-lint to v1.62.0 by @thaJeztah in #48901
• client: support multiple platforms on save and load by @thaJeztah in #48902
• client: ImageImport: omit empty query-parameters by @thaJeztah in #48897
• vendor: github.com/golang-jwt/jwt/[email protected] by @austinvazquez in #48911
• Dockerfile: update to runc v1.2.2 by @thaJeztah in #47666
• volume/testutils: simplify fakePluginGetter by @thaJeztah in #48916
• Update containerd to v1.7.24 by @dmcgowan in #48917
• Dockerfile: update containerd v1.7.24 by @austinvazquez in #48918
• vendor: github.com/containerd/continuity v0.4.5 by @thaJeztah in #48925
• integration/container: TestCDISpecDirsAreInSystemInfo: use fixtures by @thaJeztah in #48929
• vendor: github.com/tonistiigi/go-actions-cache 394979b8119e by @thaJeztah in #48932
• vendor: update buildkit to v0.18.0-rc1 by @tonistiigi in #48923
• vendor: resenje.org/singleflight v0.4.3 by @vvoland in #48930
• tests: migrate assertions to be more modern by @cyphar in #48915
• vendor: github.com/vishvananda/netns v0.0.5 by @thaJeztah in #48937
• Disallow "network generic data" with type options.Generic by @robmry in #48906
• api/types/filters: rewrite / improve some tests by @thaJeztah in #48945
• Align fixed-cidr-v6 with fixed-cidr, use default ULA prefix if no fixed-cidr-v6 by @robmry in #48319
• vendor: update buildkit to v0.18.0-rc2 by @tonistiigi in #48952
• Fix lease management during pull and export by @dmcgowan in #48910
• Remove buildkit init timeout by @thaJeztah in #48953
• vendor: update buildkit to v0.18.0 by @tonistiigi in #48961
• Fix br_netfilter module loading logic by @sshedi in #48960
• IPv6 only: Allow IPv4 and IPv6 host-gateway-ip addresses by @robmry in #48807
• integration: add wait by @thaJeztah in #48940
• integration: remove default poll delay and timeouts by @thaJeztah in #48956
• daemon/graphdriver/zfs: ignore non-existent dataset on removal by @arcenik in #48520
• gofumpt code by @thaJeztah in #48978
• ci: use edge releases of buildx by @crazy-max in #48982
• cmd/dockerd: newRouterOptions: rename arg that shadowed import by @thaJeztah in #48980
• daemon: getCD: remove use of parsers.ParseKeyValueOpt by @thaJeztah in #48981
• daemon/config: some refactor and deprecate Config.ValidatePlatformConfig by @thaJeztah in #48985
• daemon: Daemon.RegistryHosts: use internal method to get daemon config by @thaJeztah in #48984
• cmd/dockerd: change routerOptions.Build to a regular func by @thaJeztah in #48986
• api: add GwPriority field to EndpointSettings by @akerouanton in #48936
• Add gateway mode "nat-unprotected" by @robmry in #48597
• Add --host-gateway-ip to the dockerd manpage by @robmry in #48988
• Jenkinsfile: modprobe br_netfilter by @thaJeztah in #48993
• registry: remove deprecated APIEndpoint.Version and APIVersion type by @thaJeztah in #49004
• registry: deprecate RepositoryInfo.Class by @thaJeztah in #49006
• c8d/tag: Don't log a warning if the source image is not dangling by @vvoland in #49009
• daemon/daemon_linux.go: Fix a typo in comment by @coolljt0725 in #49019
• Wait longer for a stable goroutine count in tests by @robmry in #49017
• registry: isCIDRMatch: avoid performing DNS lookups if not needed by @thaJeztah in #48999
• registry: remove assignment of default values in some tests by @thaJeztah in #49015
• Dockerd rootless: make {/etc,/var/run}/cdi available by @ereslibre in #48541
• vendor: update buildkit to v0.18.1 by @tonistiigi in #49023
• update to go1.23.4 by @thaJeztah in #49025
• distribution: verifySchema1Manifest: pass through context by @thaJeztah in #49021
• vendor: update various golang.org/x/ dependencies for containerd/cgroups by @thaJeztah in #49030
• vendor: google.golang.org/protobuf v1.35.2 by @thaJeztah in #49031
• Try to load kernel modules, without modprobe by @robmry in #49038
• Ignore kernel-assigned LL addrs when selecting "bip6" by @robmry in #49022
• api/types/network: add godoc for EndpointSettings.GwPriority by @thaJeztah in #49045
• cmd/dockerd: ignore some unhandled errors by @thaJeztah in #49053
• daemon: remove Daemon.NetworkControllerEnabled by @thaJeztah in #49052
• daemon/containerd: hostsWrapper: remove unused regService argument by @thaJeztah in #49049
• registry: deprecate APIEndpoint.TrimHostname by @thaJeztah in #49005
• chore: fix some function names in comment by @avoidaway in #49055
• api/server/router: fix debug routes, and refactor by @thaJeztah in #49051
• update xx to v1.6.1 for compatibility with alpine 3.21 by @thaJeztah in #49058
• registry: some optimizations to reduce network connections and DNS lookups if not needed by @thaJeztah in #49050
• daemon/containerd: Extract createOrReplaceImage by @vvoland in #48316
• Dockerfile: remove libapparmor-dev dependency by @thaJeztah in #49066
• man: vendor: github.com/cpuguy83/go-md2man v2.0.5 by @thaJeztah in #49059
• vendor: update golang.org/x/ dependencies by @thaJeztah in #49070
• Dockerfile: update runc binary to v1.2.3 by @thaJeztah in #49071
• Dockerfile: remove dpkg-dev, libudev-dev, libsecret-1-dev, libbtrfs-dev dependencies by @thaJeztah in #49067
• otel: Avoid excessive memory allocations if not configured by @vvoland in #49078
• remove support for configuring pushing non-distributable artifacts and deprecate API fields and config by @thaJeztah in #49065
• c8d/pull: Show Extracting layer status by @vvoland in #49064
• daemon: info: remove bridge-nf-call-iptables / ip6tables warnings by @thaJeztah in #49089
• libnet/d/bridge: unconditionally error out if LinkSetMTU fails by @akerouanton in #49092
• vendor: golang.org/x/net v0.32.0 by @thaJeztah in #49094
• vendor: github.com/cyphar/filepath-securejoin v0.3.5, github.com/opencontainers/runc v1.2.3 by @thaJeztah in #49077
• libnet/iptables: deprecate type IPV by @akerouanton in #49093
• integration-cli: don't skip AppArmor tests on SLES by @cyphar in #49061
• libnet/iptables: remove mutex-based serialization by @akerouanton in #49096
• Accurately reflect the canonical casing of API-Version and OS-Type headers by @maggie44 in #49054
• libnet/osl: drop netns path GC by @akerouanton in #49099
• integration/build: make TestBuildEmitsImageCreateEvent less noisy by @thaJeztah in #49102
• pkg/archive: replace uses of pkg/errors for stdlib errors by @thaJeztah in #49101
• pkg/system: deprecate types and functions that are only used internally by @thaJeztah in #49098
• docs/api: document correct case for Api-Version header by @thaJeztah in #49103
• libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err by @thaJeztah in #49109
• Decouple pkg/archive from pkg/ioutils by @dmcgowan in #49073
• vendor: update buildkit to v0.18.2 by @tonistiigi in #49116
• docs/api: version-history.md: fix markdown by @thaJeztah in #49113
• Create static iptables rules during bridge driver init by @robmry in #48640
• libnetwork/iptables: deprecate Passthrough by @thaJeztah in #49115
• Combine Outgoing and ICC=true iptables rules by @robmry in #48641
• pkg/reexec: some cleaning up in preparation of moving to a separate module by @thaJeztah in #49118
• libnet/iptables: split ProgramChain and move to bridge driver by @akerouanton in #49107
• libnetwork/iptables: remove deprecated IPV, Iptables, IP6Tables, Passthrough() by @thaJeztah in #49121
• Deprecate BridgeNfIptables and BridgeNfIp6tables fields by @thaJeztah in #49114
• [master forward-port] libnet: don't put external DNS answers in OTel spans by @akerouanton in #49123
• Enable external DNS if a network has an IPv6 gateway by @robmry in #49128
• builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy by @dvdksn in #49062
• pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec by @thaJeztah in #49129
• libcontainer: ReplaceContainer: fix var shadowing import by @thaJeztah in #49106
• libnet/d/bridge: move iptRule to iptables pkg by @akerouanton in #49125
• add Shaun Thompson as curator by @thaJeztah in #49127
• api: Allow for an empty string for Isolation in Swagger specs by @dgunzy in #48616
• api: Remove unused imageStore and layerStore by @vvoland in #49138
• docs: Update example section for SwarmJoinRequest by @XxRoloxX in #49122
• image: Remove GetImageManifest by @vvoland in #49133
• vendor: golang.org/x/net v0.33.0 by @thaJeztah in #49146
• docs/api: allow for an empty string for Isolation (api v1.25-v1.47) by @thaJeztah in #49144
• Decouple pkg/archive from pkg/system by @dmcgowan in #49072
• vendor: github.com/containerd/cgroups v3.0.5 by @thaJeztah in #49032
• daemon/c8d: Fix duplicate containerd/images import by @vvoland in #49140
• pkg/chrootarchive: use stdlib errors, remove "// import" comments by @thaJeztah in #49151
• builder: don't fall back to defaultKeepStorage when set to zero by @thaJeztah in #49147
• libnet: pass store as an arg to netdrivers by @akerouanton in #49158
• pkg/system: deprecate MkdirAll and remove custom volume GUID handling by @thaJeztah in #49162
• Remove use of pkg/pools in archive by @dmcgowan in #49117
• pkg/ioutils: remove OnEOFReader and move it internal by @thaJeztah in #49170
• daemon: parseSecurityOpt: rename var that shadowed function by @thaJeztah in #49176
• pkg/parsers: rename var that collided with builtin by @thaJeztah in #49182
• daemon: add missing "//go:build" directive by @thaJeztah in #49186
• daemon: adjust tests for changes in go1.24 JSON errors by @thaJeztah in #49188
• remove pkg/broadcaster and make it internal to container/streams by @thaJeztah in #49172
• daemon: minor cleanups for getting system info by @thaJeztah in #49185
• Restore labels when re-creating Windows networks by @robmry in #49196
• daemon: don't repeatedly call NumCPU if not needed by @thaJeztah in #49192
• daemon: ignore some errors when setting env-vars by @thaJeztah in #49163
• builder/dockerfile: unconvert by @thaJeztah in #49168
• vendor: github.com/Azure/go-ansiterm faa5f7b0171c, remove workaround for OSC string terminator parsing by @thaJeztah in #49195
• pkg/sysinfo: cleanup tests by @thaJeztah in #49189
• fix non-constant format string (caught by go1.24) by @thaJeztah in #49201
• use lazyregexp to compile regexes on first use by @thaJeztah in #48166
• Down with the sickness (AUTO_GOPATH) by @cpuguy83 in #48958
• distribution: Pass Traceparent OTEL header by @vvoland in #49156
• libnetwork/drivers/windows: fix error-matching for hcsshim "not found" by @thaJeztah in #49202
• Add testutil daemon.WithResolvConf by @robmry in #49132
• integration: minor cleanups and linting fixes by @thaJeztah in #49199
• integration-cli: TestRunInvalidCpuset.. create instead of run by @thaJeztah in #49181
• pkg/fileutils: deprecate GetTotalUsedFds by @thaJeztah in #49208
• c8d: Use the roundtripper during build by @rumpl in #49178
• pkg/fileutils: move GetTotalUsedFds internal in daemon by @thaJeztah in #49210
• golangci-lint: remove temporary exception for deprecated code by @thaJeztah in #49211
• Update swarm to latest for server alpn config by @dmcgowan in #49214
• vendor: github.com/moby/term v0.5.2 by @thaJeztah in #49216
• man: remove --allow-nondistributable-artifacts by @thaJeztah in #49215
• Only set up an L3-ipvlan's default route when it's the gateway endpoint by @robmry in #49130
• pkg/sysinfo: internalize parsing cpusets by @thaJeztah in #49193
• daemon/config: add validation of exec-config options by @thaJeztah in #48979
• pkg/sysinfo: parse cpuset.cpus/mems once and memoize by @thaJeztah in #49221
• Fix live restore for IPv6-only and multiple gateway endpoints by @robmry in #49150
• integration/internal/container: IsInState: touch up error-logs by @thaJeztah in #49220
• libnetwork/osl: Namespace.setSysctls: use stdlib errors by @thaJeztah in #49224
• daemon: isOnlineFSOperationPermitted: cleanup confusing syntax by @thaJeztah in #49218
• Centralize daemon metrics by @vvoland in #49165
• pkg/parsers: deprecate ParseUintListMaximum, ParseUintList by @thaJeztah in #49222
• pkg/idtools: rewrite to use moby/sys/user by @thaJeztah in #49226
• Split idtools to an internal package and package to be moved by @dmcgowan in #49087
• integration-cli: migrate TestCreateByImageID to integration suite by @thaJeztah in #49198
• daemon: remove workaround for go1.21 compiler bug by @thaJeztah in #49187
• Use bridge consts for "DefaultGatewayIPv[46]" aux-addr keys by @robmry in #49229
• ci: update bake-action to v6 by @crazy-max in #49233
• runconfig: cleanup and fix tests, and fix error-types to use correct errdefs by @thaJeztah in #49217
• pkg/ioutils: move atomic file-writers to a separate (pkg/atomicwriter) package by @thaJeztah in #49171
• daemon: ImageService.LogImageEvent: pass through context by @thaJeztah in #49014
• Clear RWLayer reference under container lock by @teqwve in #49228
• libnetwork/drivers/bridge: processIPAM: remove unused arg by @thaJeztah in #49235
• daemon/links: use gotest.tools, remove unneeded utility and duplicated test by @thaJeztah in #49232
• image/save: set a stable timestamp for assets by @stevvooe in #48611
• Dockerfile: update runc binary to v1.2.4 by @thaJeztah in #49238
• pkg/ioutils: un-export ReadCloserWrapper by @thaJeztah in #49237
• deprecate pkg/parsers.ParseKeyValueOpt and move internal by @thaJeztah in #49177
• improve validation of cpu-shares, and migrate TestRunInvalidCPUShares by @thaJeztah in #49180
• pkg/sysinfo: Deprecate NumCPU by @vvoland in #49241
• pkg/ioutils: deprecate unused types and functions by @thaJeztah in https://github.com/moby/moby/pull/49244
• Fix unit tests for an nftables host by @robmry in https://github.com/moby/moby/pull/49248
• pkg/sysinfo: Remove deprecated NumCPU by @vvoland in https://github.com/moby/moby/pull/49242
• pkg/ioutils: remove or internalize deprecated types and functions by @thaJeztah in https://github.com/moby/moby/pull/49245
• Dockerfile: update containerd to v1.7.25 by @thaJeztah in https://github.com/moby/moby/pull/49252
• pkg/ioutils: deprecate NopWriter, NopWriteCloser by @thaJeztah in https://github.com/moby/moby/pull/49254
• pkg/ioutils: remove deprecated NopWriter, NopWriteCloser by @thaJeztah in https://github.com/moby/moby/pull/49256
• pkg/archive: nosysFileInfo: implement tar.FileInfoNames to prevent lookups by @thaJeztah in https://github.com/moby/moby/pull/49152
• vendor: github.com/containerd/containerd v1.7.25 by @thaJeztah in https://github.com/moby/moby/pull/49251
• vendor: github.com/containerd/containerd/api v1.8.0 by @thaJeztah in https://github.com/moby/moby/pull/49250
• pkg/ioutils: remove unused NewReaderErrWrapper by @thaJeztah in https://github.com/moby/moby/pull/49258
• c8d: Implement RWLayer by @vvoland in https://github.com/moby/moby/pull/49120
• Update MAINTAINERS file by @laurazard in https://github.com/moby/moby/pull/49259
• imageService: Remove PerformWithBaseFS by @vvoland in https://github.com/moby/moby/pull/49263
• libnet/d/bridge: init driver.nlh in newDriver by @akerouanton in https://github.com/moby/moby/pull/49267
• daemon/export: Stop when context is canceled by @vvoland in https://github.com/moby/moby/pull/49265
• logger/fluentd: remove deprecated fluentd-async-connect option by @akerouanton in https://github.com/moby/moby/pull/46114
• vendor: cloud.google.com/go/compute/metadata v0.5.0 by @thaJeztah in https://github.com/moby/moby/pull/49273
• libnet/d/bridge: port mappings: filter by input iface by @akerouanton in https://github.com/moby/moby/pull/48721
• vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto 324edc3d5d38 by @thaJeztah in https://github.com/moby/moby/pull/49275
• vendor: github.com/aws/aws-sdk-go-v2 v1.30.3 by @thaJeztah in https://github.com/moby/moby/pull/49277
• vendor: github.com/creack/pty v1.1.24 by @thaJeztah in https://github.com/moby/moby/pull/49278
• vendor: otel v0.56.0 / v1.31.0 by @thaJeztah in https://github.com/moby/moby/pull/49276
• testutil: update to semconv v1.26.0 by @thaJeztah in https://github.com/moby/moby/pull/49280
• vendor: containerd 2.0 / buildkit v0.19.0 dependencies by @thaJeztah in https://github.com/moby/moby/pull/49274
• pkg/ioutils: remove crypto/sha256, crypto/sha512 imports by @thaJeztah in https://github.com/moby/moby/pull/49281
• Update to containerd 2.0, buildkit v0.19 by @dmcgowan in https://github.com/moby/moby/pull/48872
• daemon/logger: un-export RingLogger by @thaJeztah in https://github.com/moby/moby/pull/48893
• Increase integration test timeout from 5m to 10m by @robmry in https://github.com/moby/moby/pull/49283
• Ask network drivers if they'll use a gateway address by @robmry in https://github.com/moby/moby/pull/49261
• use StatsResponse instead of Stats in tests by @thaJeztah in https://github.com/moby/moby/pull/49284
• daemon: remove kernel-version check for kernel < 4.0.0 by @thaJeztah in https://github.com/moby/moby/pull/49184
• api/types/container: merge Stats and StatsResponse by @thaJeztah in https://github.com/moby/moby/pull/49287
• api/server/middleware: log before, not after the request by @thaJeztah in https://github.com/moby/moby/pull/48740
• ci: switch from jenkins to gha for arm64 build and tests by @crazy-max in https://github.com/moby/moby/pull/49290
• ci(bin-image): fix bake build by @crazy-max in https://github.com/moby/moby/pull/49289
• daemon: assorted fixes and cleanups for archive endpoints by @thaJeztah in https://github.com/moby/moby/pull/49219
• api: swagger: document StatsResponse by @thaJeztah in https://github.com/moby/moby/pull/49286
• awslogs: Prevent close from being blocked on log by @cpuguy83 in https://github.com/moby/moby/pull/47748
• spelling fix in comments (daemon/logger/loggerutils/queue.go) by @thompson-shaun in https://github.com/moby/moby/pull/49296
• Recover from default bridge init failure by @robmry in https://github.com/moby/moby/pull/49292
• vendor: update buildkit to v0.19.0-rc3 by @tonistiigi in https://github.com/moby/moby/pull/49294
• Ignore error when adding a bridge already in the ipset by @robmry in https://github.com/moby/moby/pull/49295
• build: log when build is cancelled by @thaJeztah in https://github.com/moby/moby/pull/48696
• Allow users to ignore missing br_netfilter by @robmry in https://github.com/moby/moby/pull/49293
• Update RootlessKit to v2.3.2 by @AkihiroSuda in https://github.com/moby/moby/pull/49303
• Fix: Duplicate event on network disconnect by @AmirBuddy in https://github.com/moby/moby/pull/48800
• Assorted fixes, improvements, and refactoring of network diagnostic server by @thaJeztah in https://github.com/moby/moby/pull/49305
• daemon/links: assorted bug fixes and cleanup by @thaJeztah in https://github.com/moby/moby/pull/49300
• Revert "libnet/d/bridge: port mappings: filter by input iface" by @akerouanton in https://github.com/moby/moby/pull/49310
• build: don't print warning when connection was terminated by @thaJeztah in https://github.com/moby/moby/pull/49299
• update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336) by @thaJeztah in https://github.com/moby/moby/pull/49311
• gha: Adjust release branches by @vvoland in https://github.com/moby/moby/pull/49313
• Fix parsing of user/group during copy operation by @thaJeztah in https://github.com/moby/moby/pull/34143
• vendor: update buildkit to v0.19.0 by @crazy-max in https://github.com/moby/moby/pull/49315
• docs: clarify that tag or digest in fromImage is ignored by @dvdksn in https://github.com/moby/moby/pull/49266
• Dockerfile: dev-container: update CLI v27.5.0, buildx v0.20.0, compose v2.32.4 by @thaJeztah in https://github.com/moby/moby/pull/49316
• IPAM: handle subnets bigger than "/64" by @robmry in https://github.com/moby/moby/pull/49223
• libnetwork/driverapi: fix GoDoc for UpdateIpamConfig by @thaJeztah in https://github.com/moby/moby/pull/49319
• libnetwork/types: align error-types with errdefs by @thaJeztah in https://github.com/moby/moby/pull/49318
• daemon: NewDaemon: align grpc options with containerd's defaults by @thaJeztah in https://github.com/moby/moby/pull/48617
• layerStore.registerWithDescriptor: improve logs for cleaning up cache by @thaJeztah in https://github.com/moby/moby/pull/49298
• gha: update DCO check to alpine 3.21 by @thaJeztah in https://github.com/moby/moby/pull/49323
• distribution: fix / improve handling of "closed pipe" and context cancellation / timeouts by @thaJeztah in https://github.com/moby/moby/pull/49297
• libnetwork/drivers/bridge: driver.configure: move vars close to where used by @thaJeztah in https://github.com/moby/moby/pull/49328
• libnetwork: use errdefs and gotest.tools for asserting error-types (step 1) by @thaJeztah in https://github.com/moby/moby/pull/49326
• IPv6 only: use random MAC addresses by @robmry in https://github.com/moby/moby/pull/48808
• libnetwork: remove some redundant type-conversions by @thaJeztah in https://github.com/moby/moby/pull/49327
• libnetwork: rewrite some tests to use gotest.tools by @thaJeztah in https://github.com/moby/moby/pull/49329
• IPv6 only: not experimental by @robmry in https://github.com/moby/moby/pull/48809
• daemon/&container/: enable --security-opt writable-cgroups=true|false as an option by @vbatts in https://github.com/moby/moby/pull/48828
• libnetwork: use gotest.tools for errdefs assertions in various tests by @thaJeztah in https://github.com/moby/moby/pull/49332
• man: vendor github.com/cpuguy83/go-md2man/v2 v2.0.6 by @thaJeztah in https://github.com/moby/moby/pull/49340
• libnetwork: remove Network.EndpointByID as it must not be used by @thaJeztah in https://github.com/moby/moby/pull/49341
• dockerd: enable shell-completion; add (hidden) completion subcommand by @thaJeztah in https://github.com/moby/moby/pull/49339
• libnetwork: remove ErrNoSuchEndpoint, ErrInvalidID, ErrInvalidName by @thaJeztah in https://github.com/moby/moby/pull/49344
• daemon: make daemon.getEntrypointAndArgs a regular function by @thaJeztah in https://github.com/moby/moby/pull/49335
• daemon: health: getShell: simplify logic (LCOW remnants) by @thaJeztah in https://github.com/moby/moby/pull/49337
• integration: remove assertAttachedStream, check both STDERR and STDOUT by @thaJeztah in https://github.com/moby/moby/pull/49338
• daemon/cluster/executor: simplify handling of Network Attachments by @thaJeztah in https://github.com/moby/moby/pull/49343
• remove redundant uses of api/types/strslice.StrSlice by @thaJeztah in https://github.com/moby/moby/pull/49336
• Create bridge veth in container netns by @robmry in https://github.com/moby/moby/pull/49302
• Debug flaky unsolicited Neighbour Advertisements by @robmry in https://github.com/moby/moby/pull/49342
• libnetwork/options: rewrite tests with gotest.tools by @thaJeztah in https://github.com/moby/moby/pull/49347
• libnetwork/drivers/windows: remove ErrUnsupportedAddressType by @thaJeztah in https://github.com/moby/moby/pull/49350
• libnet/d/bridge: drop connections to lo mappings, and direct remote connections by @akerouanton in https://github.com/moby/moby/pull/49325
• libnetwork/drivers/bridge: remove, or internalize errors by @thaJeztah in https://github.com/moby/moby/pull/49349
• Dockerfile: Use CLI generated completions in the dev shell by @vvoland in https://github.com/moby/moby/pull/47649
• api/types: remove some redundant imports by @thaJeztah in https://github.com/moby/moby/pull/49355
• client: remove uses of pkg/errors in tests by @thaJeztah in https://github.com/moby/moby/pull/49356
• client: WithVersion: strip v-prefix when setting API version by @thaJeztah in https://github.com/moby/moby/pull/49352
• client: improve test-coverage for error-responses by @thaJeztah in https://github.com/moby/moby/pull/49354
• daemon: remove Daemon.children(), Daemon.parents() wrappers by @thaJeztah in https://github.com/moby/moby/pull/49369
• daemon: Daemon.rmLink: don't fuzzy-match container when using ID by @thaJeztah in https://github.com/moby/moby/pull/49368
• daemon: Daemon.getNetworkedContainer: fix errors for invalid network container by @thaJeztah in https://github.com/moby/moby/pull/49367
• Before sending ARPs/NAs, check the bridge is ready by @robmry in https://github.com/moby/moby/pull/49364
• client: improve handling of JSON error-responses with incorrect schema by @thaJeztah in https://github.com/moby/moby/pull/49373
• Fix typo in API docs by @LaurentGoderre in https://github.com/moby/moby/pull/49375
• Fix concurrency issue in dind by @JSchltggr in https://github.com/moby/moby/pull/48850
• gha/validate-pr: Also run when PR has new commits by @vvoland in https://github.com/moby/moby/pull/49361
• builder: wire up new gc types for buildkit prune functionality by @jsternberg in https://github.com/moby/moby/pull/48720
• github: Clarify release notes description by @vvoland in https://github.com/moby/moby/pull/49362
• client: normalize and validate empty ID / name arguments to fail early by @thaJeztah in https://github.com/moby/moby/pull/49381
• errdefs: touch-up godoc for helpers by @thaJeztah in https://github.com/moby/moby/pull/49391
• client: deprecate ErrorConnectionFailed helper by @thaJeztah in https://github.com/moby/moby/pull/49389
• client: deprecate CommonAPIClient interface, add HijackDialer, SwarmManagementAPIClient interfaces by @thaJeztah in https://github.com/moby/moby/pull/49388
• Add gateway mode "isolated" by @robmry in https://github.com/moby/moby/pull/49262
• implement missing "Unwrapper" interface on errors that implemented "Causer" interface by @thaJeztah in https://github.com/moby/moby/pull/49390
• Implement GwAllocChecker for the remote network driver by @robmry in https://github.com/moby/moby/pull/49372
• update to go1.23.6 by @vvoland in https://github.com/moby/moby/pull/49393
• Implement mount from image by @LaurentGoderre in https://github.com/moby/moby/pull/48798
• c8d/inspect: Add Manifests field by @vvoland in https://github.com/moby/moby/pull/48264
• cmd/dockerd: refactor buildkit init in daemon startup by @thaJeztah in https://github.com/moby/moby/pull/49040
• Use getsubids tool for subid validation if possible by @stevapple in https://github.com/moby/moby/pull/49036
• Wait for a route to ff02::1 before sending NAs by @robmry in https://github.com/moby/moby/pull/49392
• pkg/idtools: un-deprecate Windows consts for now by @thaJeztah in https://github.com/moby/moby/pull/49405
• add //go:build directives to prevent downgrading to go1.16 language by @vvoland in https://github.com/moby/moby/pull/49406
• libnet: add support for custom interface names by @akerouanton in https://github.com/moby/moby/pull/49155

Full Changelog: v27.5.1...v28.0.0-rc.1