Skip to content

LTS: Bump docker from 28.2.2 to 28.5.2#17821

Merged
bboreham merged 1 commit intoprometheus:release-3.5from
garyclee:bump-docker
Jan 20, 2026
Merged

LTS: Bump docker from 28.2.2 to 28.5.2#17821
bboreham merged 1 commit intoprometheus:release-3.5from
garyclee:bump-docker

Conversation

@garyclee
Copy link

@garyclee garyclee commented Jan 8, 2026

Which issue(s) does the PR fix:

Removes FP detection of CVE-2025-54388

Does this PR introduce a user-facing change?

No

Signed-off-by: Gary Lee <gary.lee.ext@ericsson.com>
@garyclee garyclee changed the title Bump docker from 28.2.2 to 28.5.2 LTS: Bump docker from 28.2.2 to 28.5.2 Jan 8, 2026
@bboreham
Copy link
Member

bboreham commented Jan 9, 2026

Can you confirm you tested this?

(The fuzzing error is noted at #17797 (comment))

@garyclee
Copy link
Author

garyclee commented Jan 9, 2026

Can you confirm you tested this?

(The fuzzing error is noted at #17797 (comment))

Yes, I saw it failed in your PR with the same error, so I ignored it.

I ran:

export GO_ONLY=1
make test

Also built prometheus, configured it with a scrape_config like:

scrape_configs:
  - job_name: podman-rootless
    docker_sd_configs:
      - host: unix:///run/user/XXX/podman/podman.sock
        refresh_interval: 5s

and made sure it discovered a target via Podman's Docker API.

Copy link
Member

@bboreham bboreham left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@bboreham bboreham merged commit d1916a6 into prometheus:release-3.5 Jan 20, 2026
31 of 32 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants