Skip to content

Conversation

@github-actions
Copy link
Contributor

@github-actions github-actions bot commented Nov 9, 2025

deps(codespaces): bump devcontainer dependencies

[.devcontainer/devcontainer.json] Bump GitHub CLI version

1 file(s) updated with "${1}2.83.0${3}": * .devcontainer/devcontainer.json

v2.83.0
## What's Changed


### ✨ Features
* Add `isImmutable` to `release list` JSON output by @babakks in https://github.com/cli/cli/pull/12064
* `gh agent-task create`: support `--custom-agent`/`-a` flag by @BagToad in https://github.com/cli/cli/pull/12068
* 💡 (gh repo delete) Add warning when `--yes` is ignored without a repository, Closes: #12033 by @Shion1305 in https://github.com/cli/cli/pull/12039
* feat: implement gh `pr revert` by @lucasmelin in https://github.com/cli/cli/pull/8826


### 🐛 Fixes
* fix(gist): add support for editing & viewing large files  by @luxass in https://github.com/cli/cli/pull/11761
* Fix gh attestation verify to work when Public Good Instance of Sigstore is unavailable by @Copilot in https://github.com/cli/cli/pull/11989


### 📚 Docs & Chores
* chore: add basic linters by @babakks in https://github.com/cli/cli/pull/12084
* CI: Update lint govulncheck to use source mode by @BagToad in https://github.com/cli/cli/pull/12089
* chore: add `workflow_dispatch` to govulncheck triggers by @babakks in https://github.com/cli/cli/pull/12085
* Exclude `third-party` from Golangci-lint formatting paths by @babakks in https://github.com/cli/cli/pull/12058
* Apply `go fix` to remove deprecated `// +build` tags by @babakks in https://github.com/cli/cli/pull/12056
* Bump Golangci-lint to `v2.6.0` by @babakks in https://github.com/cli/cli/pull/12049
* Mention `pr checks` in `run list` docs by @babakks in https://github.com/cli/cli/pull/12050
* Fix typo in comment for `gh issue develop` branch checkout command by @jonzfisher in https://github.com/cli/cli/pull/12042
* Use "release" sentinel value for release attestation verification by @Copilot in https://github.com/cli/cli/pull/11991
* Improve docstring for release-create by @bdehamer in https://github.com/cli/cli/pull/11945
* Improve `api` command docs around `--input` and `--field` by @babakks in https://github.com/cli/cli/pull/12062
* Fix `--interval` flags docs in `gh pr checks` by @2003Aditya in https://github.com/cli/cli/pull/12053


### :dependabot: Dependencies
* Bump Go to 1.25.3 by @github-actions[bot] in https://github.com/cli/cli/pull/11926
* chore(deps): bump github.com/cli/go-gh/v2 from 2.12.2 to 2.13.0 by @dependabot[bot] in https://github.com/cli/cli/pull/12095
* Update Go toolchain version to 1.24.9 by @BagToad in https://github.com/cli/cli/pull/12054
* chore(deps): bump golang.org/x/text from 0.29.0 to 0.30.0 by @dependabot[bot] in https://github.com/cli/cli/pull/11973
* chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @dependabot[bot] in https://github.com/cli/cli/pull/11974
* chore(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in https://github.com/cli/cli/pull/12031
* chore(deps): bump actions/download-artifact from 5 to 6 by @dependabot[bot] in https://github.com/cli/cli/pull/12032
* chore(deps): bump github.com/rivo/tview from 0.0.0-20250625164341-a4a78f1e05cb to 0.42.0 by @dependabot[bot] in https://github.com/cli/cli/pull/12000
* chore(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 by @dependabot[bot] in https://github.com/cli/cli/pull/11509
* chore(deps): bump mislav/bump-homebrew-formula-action from 3.4 to 3.6 by @dependabot[bot] in https://github.com/cli/cli/pull/11750


## New Contributors
* @lucasmelin made their first contribution in https://github.com/cli/cli/pull/8826
* @jonzfisher made their first contribution in https://github.com/cli/cli/pull/12042
* @2003Aditya made their first contribution in https://github.com/cli/cli/pull/12053

**Full Changelog**: https://github.com/cli/cli/compare/v2.82.1...v2.83.0
[.devcontainer/devcontainer.json] Bump Docker version

1 file(s) updated with "${1}28.5${3}": * .devcontainer/devcontainer.json

v28.5.2
## 28.5.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

- [docker/cli, 28.5.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.2)
- [moby/moby, 28.5.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.2)

> [!CAUTION]
> This release contains fixes for three high-severity security vulnerabilities in runc:
> - [CVE-2025-31133](https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2)
> - [CVE-2025-52565](https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r)
> - [CVE-2025-52881](https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm)
>
> All three vulnerabilities ultimately allow (through different methods) for full container breakouts by bypassing runc's restrictions for writing to arbitrary `/proc` files.

### Packaging updates
- Update runc to [v1.3.3](https://github.com/opencontainers/runc/releases/tag/v1.3.3). [moby/moby#51394](https://github.com/moby/moby/pull/51394)

### Bug fixes and enhancements

- dockerd-rootless.sh: if slirp4netns is not installed, try using pasta (passt). [moby/moby#51162](https://github.com/moby/moby/pull/51162)
- Update Go runtime to [1.24.9](https://go.dev/doc/devel/release#go1.24.9). [moby/moby#51387](https://github.com/moby/moby/pull/51387), [docker/cli#6613](https://github.com/docker/cli/pull/6613)

### Deprecations

- Go-SDK: cli/command/image/build: deprecate `DefaultDockerfileName`, `DetectArchiveReader`, `WriteTempDockerfile`, `ResolveAndValidateContextPath`. These utilities were only used internally and will be removed in the next release. [docker/cli#6610](https://github.com/docker/cli/pull/6610)
- Go-SDK: cli/command/image/build: deprecate IsArchive utility. [docker/cli#6560](https://github.com/docker/cli/pull/6560)
- Go-SDK: opts: deprecate `ValidateMACAddress`. [docker/cli#6560](https://github.com/docker/cli/pull/6560)
- Go-SDK: opts: deprecate ListOpts.Delete(). [docker/cli#6560](https://github.com/docker/cli/pull/6560)
GitHub Action workflow link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

@github-actions github-actions bot added the dependencies Pull requests that update a dependency file label Nov 9, 2025
@gounthar gounthar merged commit 5ff7a70 into main Nov 10, 2025
@gounthar gounthar deleted the updatecli_main_f2ff05c9683a6a713a53753e4f79070265822d712880f98b6f9e18155e2ab792 branch November 10, 2025 08:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants