stacklok / toolhive / 26908925086

Build # 26908925086

Build Type

push

github

Committed by web-flow

Commit Message

Bump testcontainers-go to v0.42.0 to drop docker/docker (#5449)

Drop deprecated docker/docker dependency

A vulnerability scan flagged github.com/docker/docker
v28.5.2+incompatible in the operator and proxy-runner images. That
module is deprecated as of Docker v29 (moby split it into
github.com/moby/moby/{client,api}), and the docker-v29.x tags cannot be
consumed via `go get`, so there is no newer module version to update
to. ToolHive's production code already imports moby/moby/{client,api};
docker/docker lingered only as a test-only indirect dependency of
testcontainers-go.

testcontainers-go v0.42.0 migrated off docker/docker onto
moby/moby/{client,api}. Bumping from v0.40.0 and running `go mod tidy`
removes docker/docker (and the now-orphaned morikuni/aec) from the
module graph entirely, clearing the finding at its source. No source
changes are required; the authserver/storage integration tests pass.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Coverage Stats

66390 of 100832 relevant lines covered (65.84%)

63.29 hits per line

Source File

Press 'n' to go to next uncovered line, 'b' for previous

Source Not Available