[meta-virtualization][wrynose][PATCH] docker: upgrade to v29.4.3

Bumping moby to version docker-v29.4.3, which comprises the following commits:

    96127a375b daemon: Always reload AppArmor profile at daemon startup
    4dcaf2c1c6 vendor: github.com/moby/profiles/seccomp v0.2.3 (Drop socketcall block)
    b8cccd63c1 integration/container: Handle socketcall return EPERM
    4bce638439 vendor: github.com/moby/profiles/apparmor v0.2.1 (deny network alg)
    67d638fca9 integration/container: skip socketcall test without AppArmor or SELinux
    ee5ac4c7ca contrib/selinux: Add CIL policy to deny AF_ALG sockets in containers
    dc7f064875 integration/container: Verify AF_INET socketcall still works
    f89c5935ab integration/container: Drop i386 cross-compile socketcall test
    729750e8f1 gha/validate-milestone: Read versions.yaml from base branch
    56a72c7494 [docker-29.x] update milestone version
    becdb42e26 vendor: github.com/moby/profiles/seccomp v0.2.2
    a1197d997e vendor: github.com/moby/profiles/seccomp v0.2.1
    1818ec7c13 integration/container: Add socketcall AF_ALG denial tests
    c7337e2430 integration/container: Add test for denied socket address families
    a529a27817 integration/container: Fix flaky TestContainerRestartWithCancelledRequest on Windows
    a65bd0440b releases: Bump patch
    34bd1ebdf4 vendor: github.com/moby/moby/client v0.4.1
    b63208b64b vendor: github.com/moby/moby/api v1.54.2
    5be108f817 vendor: github.com/sigstore/timestamp-authority/v2 v2.0.6
    727b81991c vendor: github.com/sigstore/sigstore v1.10.5
    bad8e1b799 vendor: github.com/go-openapi/* deps
    f3cadf69dc vendor: github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0
    5c6a343842 vendor: google.golang.org/api v0.272.0
    463f4c0943 No longer a reviewer; update email address
    98c7106fbe vendor: github.com/hashicorp/memberlist v0.5.4, hashicorp/serf v0.10.2
    f69fed1350 fix(deps): update module github.com/aws/smithy-go to v1.25.0
    eb2672a3b9 chore(deps): update actions/github-script action to v9
    75c2f4fb37 fix(deps): update module go.opentelemetry.io/contrib/processors/baggagecopy to v0.16.0
    6fa46cf8c7 fix(deps): update golang.org/x packages
    0aaa2d3e3a README: Add Go modules section documenting the v29 module split
    68d1d1a947 vendor: go.opentelemetry.io/contrib v0.68.0
    8384598603 vendor: go.opentelemetry.io/otel v1.43.0
    836b06d8da vendor: google.golang.org/genproto 9d38bb4040a9
    0aa66fca01 fix(deps): update module google.golang.org/grpc to v1.80.0
    7ab051cf89 daemon/logger/local: marshal: remove redundant resetProto
    23020513e6 chore(deps): update docker/github-builder action to v1.6.0
    6e22bc8095 chore(deps): update docker/bake-action action to v7.1.0
    b1637ed54b vendor: github.com/hashicorp/golang-lru v1.0.2
    d994daf576 daemon/containerd: fix label!= filter ignoring images without label
    c255b67c0f Update github/codeql-action action to v4.35.2
    9136afe4fe Update actions/upload-artifact action to v7.0.1
    dc48cea266 api/docs: cleanup changelog
    9c084cad3e ci: skip using xargs
    c621624e2f libnetwork: Always clean up endpoint driver info in sbLeave
    6e9f9bc0a5 ci: fix workflow permission errors
    10b0401423 Update actions/cache action to v5.0.5
    b7e7d3f065 libnetwork: Remove montanaflynn/stats dependency
    70907e2988 libnetwork: Drop golang-set dependency
    2437d5d646 ci: use bake matrix subaction
    1743957d3f fix zizmor findings
    7136f5e946 Dockerfile: update delve to v1.26.1
    0f5a7ae948 Dockerfile: update Docker CLI to v29.4.0
    270b511972 Dockerfile: update docker compose to v5.1.3
    cdb3fc279d Dockerfile: update buildx to v0.33.0
    c6d4830c14 vendor: github.com/docker/go-connections v0.7.0
    5c80a6e826 api: align Topology in versioned OpenAPI specs with Segments JSON shape
    0c878186d3 ci: zizmor workflow
    97cb71d7ed pkg/registry: use stdlib's x509.SystemCertPool on Windows
    ba1f3e8aa8 Dockerfile: update containerd binary to v2.2.3, runhcs v0.14.1
    a2cdd57812 vendor: github.com/containerd/containerd/v2 v2.2.3
    c4f4eb3f5f api: align Topology swagger with Segments JSON shape
    f8873b7796 daemon/logger: use consts for common log-options
    30b7b3f919 daemon/logger: define consts for common log-options
    9008249e8a daemon/logger/local: add a constructor for config
    33261e9a45 daemon/logger/local: unify constructors
    5d5797002d daemon/logger/local: test cleanups
    69caf3d4c7 daemon/logger/local: improve TestDecode, rename to TestDecodeIncompleteRecord
    f3f3040713 daemon/logger/local: use struct-literal for pmetadata
    a331d4d7a3 gha: Add milestone validation workflow
    10eb86543f Cleanup releases dir
    3b22c500d5 daemon: retry secrets dir remount on transient EBUSY
    0ea9255e50 daemon/logger/splunk: tryPostMessages use http.NewRequestWithContext
    0677030570 daemon/logger: use uniform location for registering drivers
    8e79aacee6 daemon/logger/journald: remove outdated comment
    e0b5ab2f98 daemon/logger/loggerutils: ParseLogTag: add fast path
    3ba0b72b78 daemon/logger/loggerutils: ParseLogTag: fix panic and image ID
    4f2553e81a daemon/logger/loggerutils: ParseLogTag: improve test-coverage
    7bfa790f2b daemon/logger/jsonfilelog: be more explicit on handling optional "tag"
    ec909a2239 daemon/logger/jsonfilelog: JSONFileLogger: remove unused "tag" field
    6a5e00fe5f daemon/logger: Info: touch-up godoc
    1a45789c04 client: imageDiskUsageFromLegacyAPI: explicitly exclude "-1" for containers
    25ffdb23d9 daemon: Daemon.imageDiskUsage: explicitly exclude "-1" for containers
    e0fc07b8cf gha/labeler: Only assign Windows to Windows-only changes
    b3bd13ad10 daemon/pkg/registry: minor cleanups
    377e85700f vendor: github.com/Microsoft/hcsshim v0.14.1
    e30a6fa93b libnetwork: respect gw priority per address family
    3541b0d0fd update to Go 1.26.2
    2601915b10 client/internal: touch-up godoc
    689accfe29 client/internal: fix RSFilterReader returning (0, nil) after filtering
    159b3317f0 client/internal: RSFilterReader: un-export, and remove unused buffer
    ba66582228 client/internal: Stream.JSONMessages: improve error handling
    5f08008342 client/internal: Stream.JSONMessages: move reader inside the func
    d5d18015e1 client/internal: Stream.Wait: return errdefs errors
    82ff7e9f76 client/internal: Stream.Wait: fix missing error-handling
    4d1d9ee358 go.mod: add back replace rules
    00840cd39c ci: buildkit: pin registry to v3.0.0
    a2eaebb011 api/docs: lower deprecation heading to a h4
    f44956451a CI: add back ubuntu-24.04 + rootless
    ca69153e28 api/docs: restore changelog for API v1.0 - v1.13
    1055b7a1a6 api/docs: restore API versions v1.0 - v1.13
    0d2d3f348d api/docs: restore API versions v1.14 - v1.17
    dc824e3d8d api/docs: restore API versions v1.18 - v1.23
    70043cd439 ci: fix bin-image workflow
    f42ff6a603 internal/testutil/daemon.New: cleanup test paths
    7094e8c3ef integration/daemon: TestLiveRestore remove quote from test-name
    3a7e8e285e vendor: github.com/moby/moby/client v0.4.0
    f8946fc137 vendor: github.com/moby/moby/api v1.54.1
    f1b420bf02 Drop replace rules
    c286d4ce13 Dockerfile: go install: use Git SourceOp
    d3a677d730 Dockerfile: use Git SourceOp
    07a5e924ce Fix typos and misspellings in comments, tests, and docs
    6604bd0ddc update AUTHORS and .mailmap
    84743bdda3 client/internal/mod: swap order of "ok" bool
    9dec3bf78f daemon: include moby module version in version response
    de68dce70d daemon/internal/mod: also check main module
    1bed74db50 daemon/internal/mod: reimplement without golang.org/x/mod dependency
    74e74ed5ee builder-next/worker: move mod package to daemon/internal
    80c22f0982 daemon: respect explicit AppArmor profile on privileged containers
    b8057a3a58 api/types/network: fix handling of unmapped ports (ephemeral ports)
    2d35a29f63 vendor: github.com/microsoft/hcsshim v0.14.0
    4975231ecc daemon/volume/local: New: ignore non-volume directories
    538f407103 daemon/volume/local: store path to opts.json
    5eeb08ae1c fix: use t.Cleanup to prevent goroutine leak in TestCancelledUpload
    735d17e1a5 fix: return 400 instead of 500 for invalid request parameters
    9aa5ac3034 client/pkg/jsonmessage: use functional options for display funcs
    06b31dcd12 daemon/pkg/opts: fix ValidateIPAddress docstring
    ad67096edf gha: validate-api-swagger: remove redundant 'make image'
    8769bda667 gha: buildkit: fix go version
    e0999bd5ec update to go1.26.1
    6ddd4ff73d integration/plugin: remove redundant assert
    9295e2cd84 client: fix race in cancelReadCloser
    6bfde409bd client: fix typo: TestWithHTTTPHeaders -> TestWithHTTPHeaders
    72142ab278 daemon: buildSandboxOptions: warn, not panic on invalid extra host
    98840db4d3 daemon: Daemon.restore: trim whitespace in extra-hosts
    dd11127524 daemon/pkg/opts: ValidateIPAddress: use netip.Parse
    333f39ce02 remove uses of jsonmessage.DisplayJSONMessagesStream in tests
    6aedc6ba32 client/pkg/jsonmessage: add DisplayStream and DisplayMessages utils
    5672c51b00 vendor: update buildkit to v0.29.0
    abb2a31c8a daemon: Daemon.SystemVersion: align fields with api type
    65ce470c2a fix(deps): update module github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.66.0
    281f4b6767 chore(deps): update actions/setup-go action to v6.4.0
    38c77a9189 daemon/libnetwork/ns: make NetlinkSocketsTimeout a const
    5378f5427f daemon/libnetwork/ns: remove ParseHandlerInt, add NsHandle
    af73684bc3 daemon/libnetwork/ns: use sync.OnceValues
    635f4c3dc4 daemon/libnetwork/ns: remove windows stub
    579280d444 daemon/libnetwork/ns: suppress some unhandled errors
    dee7411f05 fix(libnetwork): nil pointer will cause panic
    434ec1655c daemon/volume/service: deprecate OpErr.Cause (Causer interface)
    57d0f88684 golangci-lint: enable godoclint linter
    dee3c452d7 daemon/volume/local: remove duplicate package doc
    28aeae20dc client: WithHTTPHeaders: produce error if duplicate headers are detected
    1ec892c555 client: WithHTTPHeaders: improve doc and add test coverage
    d7d856927b daemon: fix typo in filedescriptors filenames
    d71f3ea5da ci: fix upload sarif action
    1769b3eb5d chore(deps): update github/codeql-action action to v4.35.1
    beba95c819 vendor: update buildkit to v0.29.0-rc1
    5da773a71d chore(deps): update codecov/codecov-action action to v6
    1293d50b38 fix(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0
    12ae6dd67e fix(deps): update module github.com/montanaflynn/stats to v0.9.0
    3fa5ec578b chore(deps): update github/codeql-action action to v4.34.1
    0c7f2b3d38 chore(deps): update codecov/codecov-action action to v5.5.4
    c66815426c chore(deps): update docker/github-builder action to v1.4.0
    615cf6345f chore(deps): update actions/setup-go action to v6.3.0
    fb146a3806 fix(deps): update aws-sdk-go-v2 monorepo
    c36e70524b chore(deps): update actions/labeler action to v6.0.1
    0d0751397d Dockerfile: update runc binary to v1.3.5
    96343dd0b5 chore(deps): update actions/download-artifact action to v8.0.1
    49a4a47df5 chore(deps): update actions/checkout action to v6.0.2
    45ec277dd5 vendor: go.opentelemetry.io/otel/exporters v1.42.0
    bb79587d84 fix(deps): update opentelemetry-go-contrib monorepo
    ce7b3aaa0e chore(deps): update actions/cache action to v5.0.4
    f7e4fff10b docs: fix remaining broken links in contributing docs
    9e26694618 vendor: github.com/moby/policy-helpers b7c0b994300b
    044d59bbd1 Dockerfile: use set -x in here-docs for visibility in build-logs
    695e8b3074 vendor: golang.org/x/tools v0.43.0
    e18b58d6a4 vendor: golang.org/x/oauth2 v0.36.0
    cb3065011c vendor: golang.org/x/mod v0.34.0
    c02c294e81 vendor: golang.org/x/net v0.52.0
    7b9fe27a4d vendor: golang.org/x/time v0.15.0
    07304a4ffc vendor: golang.org/x/text v0.35.0
    37ece0f46e vendor: golang.org/x/sync v0.20.0
    c0e612d623 vendor: golang.org/x/sys v0.42.0
    21d4e2525a fix(deps): update opentelemetry-go monorepo to v1.42.0
    dcbc18d954 fix(deps): update module github.com/aws/smithy-go to v1.24.2
    b24c8272e5 go fix "omitempty"
    f7aea04bb3 go fix (GOOS=linux and windows)
    5cf47c0d15 pkg/plugins/pluginrpc-gen: go fix, and tidy up
    91cd097119 docs: fix broken docker docs links in CONTRIBUTING.md
    701ea1cb6b vendor: update buildkit to v0.28.1
    830ddb26a2 vendor: update buildkit to v0.28.1
    c7fdc58b04 ci: pin all actions
    5ba08b6ff1 chore(deps): update docker/setup-qemu-action action to v4
    db1af4f6f9 chore(deps): update docker/setup-buildx-action action to v4
    b588d1a594 ci: pin all actions
    f4d6f25bf0 plugin: Fix off-by-one in privilege validation
    99a095ecf0 plugin: Fix off-by-one in privilege validation
    f302d06687 pkg/authz: Increase body limit to 4 MiB
    7a40298211 pkg/authz: Reject requests exceeding body size limit
    6f80a57b4f chore(deps): update docker/setup-qemu-action action to v4
    849efd0d3e chore(deps): update docker/setup-buildx-action action to v4
    ec76e94183 pkg/authz: Increase body limit to 4 MiB
    7a767b27fd pkg/authz: Reject requests exceeding body size limit
    b66b2f77e0 ci: renovate: pin actions to digests
    f848306ce3 vendor: github.com/moby/patternmatcher v0.6.1
    e1c0b3d487 Dockerfile: update containerd to v2.2.2
    a9dbf50521 ci: update docker/bake-action v7
    ef08116394 update to go1.25.8
    b9e4f34371 ci: module-replace: ignore Dockerfile for api changes
    1175d707ad vendor: github.com/containerd/ttrpc v1.2.8
    968fb5787c daemon: restore: register containers without rwlayer
    1bd71d5d87 vendor: github.com/moby/patternmatcher v0.6.1
    391789a6e1 vendor: github.com/klauspost/compress v1.18.5
    435fd64319 client: fix TestNewClientWithOpsFromEnv
    673e2e2467 client: WithTraceProvider don't wrap WithTraceOptions
    760f375400 client: WithTLSClientConfig, WithTLSClientConfigFromEnv: touch-up docs
    d85e410aa6 daemon/containerd: register Sigstore media type prefixes to suppress unknown-type warnings
    619ecc9b53 transport: enable HTTP keep-alive for registry connections
    26d0774539 integration: ignore container Status field in DiskUsage test comparisons
    d74953b829 fix(deps): update module cloud.google.com/go/logging to v1.13.2
    5220d603f9 chore(deps): update docker/compose-bin docker tag to v5.1.1
    04c1d25809 daemon/internal/containerfs: Retry on ENOTEMPTY error during directory deletion
    46dba49ec8 Fix reclaimable image disk usage calculation for in-use images
    a17a5647f8 fix(deps): update module google.golang.org/grpc to v1.79.3 [security]
    3cb98cb1b3 ci: update docker/bake-action v7
    7d06c6c502 add example for go fix
    20f84d21ee client: add //go:fix inline directives to deprecated functions
    d0a29867e7 api/types/strslice: add //go:fix inline directives for deprecated type
    8582136c90 golanci-lint: gocheckcompilerdirectives: ignore "//go:fix"
    28b29bd8b0 builder-next: replace duplicated oneOffProgress with progress.OneOff
    b5bc84bec3 Fix issue moby#48093: set SystemTemp environment variable On Windows also set the SystemTemp environment variable, because for system processes GetTempPath2() uses it rather than TEMP/TMP: https://learn.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-gettemppath2w
    f04f350568 dockerd-rootless.sh: check containerd-rootless.sh conflict
    405a787917 daemon/server: don't log context cancelation as error
    f401a9678b daemon/server/backend: ContainerLogsOptions: use time.Time for since, until
    210cdcbd46 daemon/server/router: fix "no stream selected" error and status
    568312cb85 daemon/internal/timestamp: replace ParseTimestamps with ParseUnixTimestamp
    cfeceed9c0 daemon/internal/timestamp: improve unix timestamp parsing
    553420b8f3 daemon/internal/timestamp: replace GetTimestamp for Parse
    fc3cb00398 daemon/internal/timestamp: don't return value on err
    f37fc9fb63 daemon/internal/timestamp: use table-tests
    282297aa0c daemon/internal: GetTimestamp: don't discard nanosecs, and trim zero
    8f8b23c729 daemon: fix some untyped "invalid parameter" errors
    2d0676b8bb daemon: prevent invalid swarm events from unknown action kinds
    3debf539c0 fix: typos in comments
    480df69696 update to go1.25.6
    ff5e19865b ci: Remove concurrency setting from golangci-lint config
    01fc4fcf8b libnetwork: fix graceful service endpoint removal
    3eca177282 daemon/libnetwork: Fix panic in findHNSEp when IP networks are nil
    c4f4c6765e daemon/volumes: More fs friendly image mount layer names
    a1f7fff7a9 daemon/layer_store: Use named return error for defer
    0e600c7fc4 layer: Clean up init layer if initialization fails
    734bb626e4 remove uses of deprecated go-archive consts
    5eaae6db52 layer: Clean up RW layer if mount metadata save fails
    8ebb104e36 vendor: github.com/moby/buildkit v0.26.3
    518779c90b layer: Fix orphan creation in registerWithDescriptor
    5a99e1d1a4 vendor: github.com/containernetworking/plugins v1.9.0
    298e2f7d52 daemon: disallow container port 0
    3376758770 daemon: clean up dead containers on start
    bb2e099c3a daemon/container: Container.BackfillEmptyPBs: prevent nil map
    5898ee60f4 daemon: buildCreateEndpointOptions: fix panic with "publish all"
    ab55325b58 gha: Fix PR branch validation
    6280a80f32 Allow configured address with no configured subnet
    9cbafeac46 Update docker-py in test-docker-py
    3c6e5f0f5a Restore missing nwEndpointsMu.Lock
    7faaa44e18 Don't try to remove cleared docker_gwbridge endpoint
    43f91f775a integration: skip TestBuildWithHugeFile
    bb0d79cb1a rootless: ignore error when enabling IPv6 forwarding
    2ad480ccf5 vendor: github.com/ishidawataru/sctp v0.0.0-20251114114122-1
    3076530aa6 daemon: Fix image store choice priority for prior graphdriver state
    7a3cdd2c86 daemon: Add TestDetermineImageStoreChoice
    d7b6f3a7d3 inte/networking: TestDisableIPv6OnInterface: add '-c1' to ping
    7f5694cda1 inte/networking: test DNS resolution for non swarm-scoped nws
    0e2d804e48 libnet: create DNS records on sbJoin (if not agent node)
    7242ccd7a0 c8d/builder-next: Don't force unpack
    b6705d5e1a hack/test/unit: Fix api and client module testing without replace rules

Bumping docker/cli to v29.4.3, which comprises the following commits:

    d0f5b279e9 cmd/docker-trust: bump moby/client v0.4.1, moby/api v1.54.2
    b7f37e86da vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2
    266f039bb5 Dockerfile: update compose to v5.1.3
    d74d3c3b16 Dockerfile: update buildx to v0.33.0
    58a7c3155b golangci-lint: fix lint failures from v2.10.1 upgrade
    f37a9e663f Dockerfile: update golangci-lint to v2.10.1
    ee56098b07 cmd/docker-trust: bump dependencies
    efbbc0c68c gha: Add milestone validation workflow
    a75ab98e43 vendor: github.com/mattn/go-runewidth v0.0.23
    b9549d3ab5 vendor: golang.org/x/net v0.53.0
    2edf815a80 vendor: golang.org/x/term v0.42.0
    258010c788 vendor: golang.org/x/text v0.36.0
    cfa80d8644 vendor: golang.org/x/mod v0.35.0
    c20b2479e0 vendor: golang.org/x/sys v0.43.0
    573dd31bf7 vendor: github.com/docker/docker-credential-helpers v0.9.6
    2988338b99 docs/reference: remove deprecated "--kernel-memory" flag
    58c7328df6 man: remove deprecated "--kernel-memory" flag
    5468871a02 contrib/completion: remove deprecated "--kernel-memory" flags
    acbbeb3c3a docs: refresh legacy plugin references
    3362ae31d0 vendor: go.opentelemetry.io/contrib v0.68.0
    a1edb22832 vendor: go.opentelemetry.io/otel v1.43.0
    0a24da3382 vendor: google.golang.org/grpc v1.80.0
    f24c779887 vendor: google.golang.org/genproto/* 9d38bb4040a9
    99aaff1807 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
    f3c060c382 build(deps): bump docker/bake-action from 7.0.0 to 7.1.0
    b9a052a987 vendor: github.com/docker/go-connections v0.7.0
    0d32fde8e3 internal/registry: use stdlib's x509.SystemCertPool on Windows
    ad641e5d61 cmd/docker-trust: use stdlib's x509.SystemCertPool on Windows
    14aa781767 build(deps): bump docker/login-action from 4.0.0 to 4.1.0
    d1920f0b2c update to Go 1.26.2
    b23c1a2d76 build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
    c88681f8d8 vendor: moby/api v1.54.1, moby/client v0.4.0
    5ddc1553ae bump version to v29.4.0-dev
    a347d9e103 update AUTHORS and .mailmap
    5fca671ef4 vendor: github.com/mattn/go-runewidth v0.0.22
    42da40a605 vendor: moby/client and moby/api master
    0029d5936a build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
    e7cbaafa9d cli/command/container: statsFormatWrite: inline render func
    c44a4d9758 cli/command/container: RunStats: avoid bytes to strings conversions
    d92d1187fc cli/command/container: RunStats: rename buffer var for brevity
    ee88c60a5e cli/command/container: stats: add snapshot method
    4c5efd61ea cli/command/container: fix buffer reuse when printing stats
    b309524f60 cli/command/formatter: NewStats: update GoDoc and add TODO
    abd2e211b9 cli/command/formatter: add Format.templateString, remove Context.preFormat
    cb615a9772 cli/command/formatter: Context.postFormat: remove redundant buffer
    f7a909d56b cli/command/formatter: optimize ContainerContext.Names
    94d4929a04 cli/streams: Out, In: preserve original os.File when available
    526dfffc26 cli/streams: simplify CheckTty
    48721c2340 cli/streams: don't depend on embedding
    39e82e6524 cli/streams: move constructors to the start
    34805dd013 cli/streams: (In|Out).SetRawTerminal: dry
    6e1f03c2e0 cmd/docker-trust: bump dependencies
    87a222158d Updated example tokens in swarm docs
    98d978df6b vendor: go.opentelemetry.io/otel v1.42.0, otel/contrib v1.67.0
    a48ff6b591 cli/command/completion: don't provide duplicate completions
    091afa4957 vendor: github.com/go-jose/go-jose/v4 v4.1.4
    968ad0ea6c vendor: golang.org/x/net v0.52.0
    78fb018754 vendor: golang.org/x/time v0.15.0
    18739a5ef6 vendor: golang.org/x/term v0.41.0
    9b21846cde vendor: golang.org/x/text v0.35.0
    c22bf3c77e vendor: golang.org/x/mod v0.34.0
    d792fc53b7 vendor: golang.org/x/sync v0.20.0
    e9664a72ea vendor: golang.org/x/sys v0.42.0
    fb776458cb update to go1.26.1
    62d80156e1 ci: pin remaining actions
    ea74248e8e cli/command/formatter: modernize
    5efed5fa30 vendor: github.com/klauspost/compress v1.18.5
    cd9e5ae84f vendor: github.com/moby/patternmatcher v0.6.1
    bf6a1e1fcf cli-plugins/socket: modernize
    8f7dc04070 update minimum go version to go1.25
    a14db81c9c vendor: google.golang.org/grpc v1.79.3
    e660030f3a docs: fix typo in run reference
    58c1585b49 gha: validate gocompat
    ea42337d01 implement module compatibility check
    d573c171fe docs: clarify multiple --filter behavior in prune commands
    07bb479a45 cli-plugins/hooks: add missing "go:build" comments
    97b9e04a94 ci: pin actions to digests
    2bc4307816 fix(cmd/docker): prevent race between force-exit goroutine and plugin wait
    9c117d3c5d cli/command/container: add shell completion for docker rm --link
    df57ff7201 cli/command/completion: ContainerNames: skip legacy link names
    dfda342e51 cli/command/formatter: StripNamePrefix only strip "/" prefix
    b5efd66ba6 cli/command/container: stats: make stripping "/" prefix deterministic
    64c8d68045 cli/command/image: getPossibleChips: simplify
    4bf4d567bd cli-plugins/hooks: PrintNextSteps: slight cleanup
    dd1f7f5856 cli-plugins/hooks: simplify templating formats
    9243240346 cli-plugins/hooks: add commandInfo type for templating
    4a1b2ef2c5 cli-plugins/hooks: update godoc
    4142d4026e cli-plugins/hooks: detect if templating is needed
    cd053606a6 cli-plugins/hooks: slight tweaks in templates
    aadfe6214f cli-plugins/hooks: update tests
    dce201d6ee cli-plugins/hooks: move template utils separate from render code
    e26f94d823 cli-plugins/hooks: add JSON labels, omitzero
    0431e4d23c cli-plugins/hooks: rename HookType to ResponseType
    607ebfca5d cli-plugins/hooks: rename HookMessage to Response
    60180924e3 cli-plugins/manager: move HookPluginData to hooks.Request
    dd91ed3f2d cli-plugins/manager: refactor for easier debugging
    0501cf8293 cli-plugins/manager: simplify ctx-cancel check
    5343bdc792 cli-plugins/manager: Plugin.RunHook: improve error message
    5fb5e0b0da docker stats --all: remove containers when removed
    560db7d451 vendor: github.com/mattn/go-runewidth v0.0.21
    dc4abf8b99 golangci-lint: gocheckcompilerdirectives: ignore "//go:fix"
    7f781688ed golangci-lint: remove outdated exclusion
    21293265b1 cli/command/image/build: use t.Chdir() in tests
    3f51d0a9d2 cli/command/container: RunStats: refactor to DRY
    9645db767a cli/command/container: RunStats: pass ctx to stats event handlers
    2bc66ecbc7 docker cp: report both content size and transferred size
    33790e88d0 docs: use generic myplugin example for plugin documentation
    6b1ba1ad84 fix: restore os.Args after plugin completion and fix error return
    300d8231da feat: add linux/riscv64 to bin-image-cross release target
    9a471180cb cli/command: add missing "go:build" comments
    f7d83cbae8 update to go1.25.8
    39d676c72d build(deps): bump docker/metadata-action from 5 to 6
    6453c4c3a7 build(deps): bump docker/bake-action from 6 to 7
    eef3c957be cli/config/credentials: ConvertToHostname: update godoc
    71db1520de scripts/warn-outside-container: fix font representation
    206fc8c165 vendor: github.com/moby/moby/client v0.3.0
    874a8df0eb vendor: github.com/moby/moby/api v1.54.0
    668b3671bd build(deps): bump docker/setup-buildx-action from 3 to 4
    30a2ace7f2 build(deps): bump docker/login-action from 3 to 4
    32aa575aff docs/service: Document bind-create-src
    c747cff9ab container/opts: Add bind-create-src mount option
    ba349f5afd build(deps): bump docker/setup-qemu-action from 3 to 4
    e2cafd657e cli/command/registry: preserve all whitespace in secrets
    10ebb3b204 build(deps): bump go.opentelemetry.io/otel/sdk
    681f15674c Fix typos in code and documentation
    0bf060f777 vendor: github.com/moby/moby/client v0.2.3-rc.1
    139b58d7f4 vendor: github.com/moby/moby/api v1.54.0-rc.1
    8eedbdc6a8 vendor: moby/api v1.54.0-dev, moby/client v0.2.3-dev
    cd070a5ed5 vendor: github.com/mattn/go-runewidth v0.0.20
    8c3d05398e Dockerfile: update mvdan.cc/gofump to v0.9.2
    b206927e0c Dockerfile: update buildx to v0.31.1
    6b5acd3a6e Dockerfile: update compose to v5.1.0
    caa8a50468 vendor: github.com/klauspost/compress v1.18.4
    5c498778ec vendor: go.opentelemetry.io/contrib v0.65.0
    fbd0e7f7c4 vendor: go.opentelemetry.io/otel v1.40.0
    95a5a9e709 build(deps): bump actions/upload-artifact from 6 to 7
    a7b95f228f chore: use canonical url for buildx build cli doc
    13c993f101 cli/compose/loader: merge: use errors.Join
    8b6f23d18b cli/compose/loader: remove some wrapper utilities
    b35a2d0837 cli/compose/loader: remove getLoggingDriver
    42a211162c cli/compose/loader: mergeServices: inline mapByName
    6e1393089b cli/compose/loader: mergeServices: remove intermediate map for overrides
    78458e11e1 cli/compose/loader: mergeServices: tidy up and modernize
    09cf89e82e cli/compose/convert: convertEndpointSpec: fix sorting of ports
    db28780976 cli/compose/convert: convertUlimits: modernize
    830d05d16e error-hooks approach
    9bc18993a4 Fix: run plugin hooks on command failure, not just success
    fdebf0afae cli/command/container: fix some unhandled errors in test
    e47a5c7734 remove redundant uses of streamformatter in tests
    2fa6b736d0 scripts/build/.variables: don't use "netgo" when building Windows binaries
    61f03db682 cli/command/registry: refactor reading from stdin
    74d4554ccd github/issues: Add emojis
    2ebd137abc github/issues: Add links for Docker Desktop and Sandboxes
    f5b6055bd1 cli/command/registry: add unit test for --password-stdin
    b82e30e58d cli/command/registry: remove uses of "gotest.tools/v3/fs"
    c4fd2406e0 e2e: use docker v29.x dind as default
    fddfe63ef9 modernize: fmtappendf
    6d4b3b5f66 modernize: slicescontains
    835d510b78 modernize: stringsseq
    dd73e2df77 modernize: reflecttypefor
    7f5bb1e99c modernize: testingcontext
    2875e48024 modernize: stringscut
    4c7d40cf77 modernize: mapsloop
    85ebca52fd modernize: minmax
    e8dc2fce32 modernize: rangeint
    e4f6019e62 vendor: golang.org/x/net v0.50.0
    464e14c68e vendor: golang.org/x/term v0.40.0
    1e31c2825e vendor: golang.org/x/text v0.34.0
    355f7bb602 vendor: golang.org/x/sys v0.41.0
    a934c75de7 Dockerfile: update golangci-lint to v2.9.0
    ab06aebd4b internal/volumespec: fix prealloc linting
    9a0c78fdc0 cli-plugins/manager: fix prealloc linting
    2e544d6308 cli/command: fix prealloc linting
    12a0b0b7b9 cli/compose: fix prealloc linting
    99cef6f700 opts: fix prealloc linting
    8a8a3e1309 opts/swarmopts: fix prealloc linting
    9d2816c8a5 remove outdated "nolint" comments
    eaba9ecf18 cli/connhelper/ssh: remove outdated "nolint" comment
    1f6b319d60 Dockerfile: update alpine to 3.23
    b598f8f0b8 docs: fix docker volume prune example

Signed-off-by: Zhixiong Chi <[email protected]>
---
 recipes-containers/docker/docker-moby_git.bb | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/recipes-containers/docker/docker-moby_git.bb b/recipes-containers/docker/docker-moby_git.bb
index 56d94675..ffd77fc0 100644
--- a/recipes-containers/docker/docker-moby_git.bb
+++ b/recipes-containers/docker/docker-moby_git.bb
@@ -44,8 +44,8 @@ DESCRIPTION = "Linux container runtime \
 # so we get that tag, and make it our SRCREVS:
 #
 
-SRCREV_moby = "1da6517e1a4381297e56862f6f373f265c28d102"
-SRCREV_cli = "df016a3a9538efb6d7d6e7c3baf291dbbe28eee0"
+SRCREV_moby = "56be73107b381194c27938965bca74c4e2bb475b"
+SRCREV_cli = "055a478ea9010a19d0d4674c0d0e87ade37a4223"
 SRCREV_FORMAT = "moby"
 SRC_URI = "\
 	git://github.com/moby/moby.git;nobranch=1;name=moby;protocol=https;destsuffix=${GO_SRCURI_DESTSUFFIX} \
@@ -64,7 +64,7 @@ require docker.inc
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=4859e97a9c7780e77972d989f0823f28"
 
-DOCKER_VERSION = "v29.3.0"
+DOCKER_VERSION = "v29.4.3"
 PV = "${DOCKER_VERSION}+git${SRCREV_moby}"
 
 CVE_PRODUCT = "docker mobyproject:moby"
-- 
2.53.0