[dependabot]

Bumps the go-deps group with 2 updates in the / directory: github.com/compose-spec/compose-go/v2 and github.com/docker/cli.

Updates github.com/compose-spec/compose-go/v2 from 2.15.0 to 2.16.1

Release notes

Sourced from github.com/compose-spec/compose-go/v2's releases.

v2.16.1

What's Changed

• override: fix two merge regressions introduced in v2.15.0 by @​glours in compose-spec/compose-go#937

Full Changelog: compose-spec/compose-go@v2.16.0...v2.16.1

v2.16.0

⚠️ Breaking change (Go API)

types.ServiceConfig now embeds types.ContainerSpec and types.WorkloadSpec, shared with the new jobs element and pre_start init containers. Field access is unchanged (svc.Image), but struct literals must now set moved fields through the embedded structs, and code walking ServiceConfig with reflection will see these two embedded structs instead of a flat list of fields:

types.ServiceConfig{Name: "web", ContainerSpec: types.ContainerSpec{Image: "nginx"}}

ServiceConfig.PreStart is now a []types.PreStartHook (was []types.ServiceHook), which embeds a full ContainerSpec; Image and PerReplica are no longer fields of ServiceHook.

The order of keys in the YAML and JSON produced for a service also changes (service-level keys first, then container-level, then workload-level ones). The content is the same, but expected files compared as text need to be regenerated.

What's Changed

• loader: detect unsupported compose-file attributes by @​glours in compose-spec/compose-go#927
• fix(transform): honor ignoreParseError in ssh and ulimits parsers by @​glours in compose-spec/compose-go#928
• Jobs by @​ndeloof in compose-spec/compose-go#866
• fix: type=image volume source is always a docker image reference by @​ndeloof in compose-spec/compose-go#929
• fix: an explicit working dir must survive a remote resource loader by @​ndeloof in compose-spec/compose-go#930
• fix: reject non-mapping entries under networks and models by @​glours in compose-spec/compose-go#932
• fix: allow disabled services as build additional contexts by @​Shubham-Padkonde in compose-spec/compose-go#931
• loader: promote x-* extensions adopted by the specification by @​ndeloof in compose-spec/compose-go#935

New Contributors

• @​Shubham-Padkonde made their first contribution in compose-spec/compose-go#931

Full Changelog: compose-spec/compose-go@v2.15.0...v2.16.0

Commits

• 32d8d5d override: share the by-key compaction and reject null ipam config items
• 7ed4d72 override: pin the merge of KEY=VALUE entries that are not interpolated
• be0aa2f override: compact repeated keys and keep empty lists in KEY=VALUE merge
• 398bcb3 override: merge KEY=VALUE lists by key so the last entry wins
• 832c7b5 override: accept a null value when merging a list or mapping attribute
• 6ec8efb lint: fix gocritic, gofumpt and govet issues
• 98fd653 loader: reuse deepClone instead of duplicating it as cloneYaml
• e93a134 loader: merge an extension into the attribute it stands for
• f33989c loader: pin promotion of extensions before extends merges services
• 732bdd9 loader: apply !reset and !override to the attribute an extension stands for
• Additional commits viewable in compare view

Updates github.com/docker/cli from 29.8.0+incompatible to 29.8.2+incompatible

Commits

• 7fc2dff Merge pull request #7325 from docker/dependabot/github_actions/codecov/codeco...
• ca5a266 build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1
• 39f182c Merge pull request #7323 from docker/dependabot/github_actions/docker-actions...
• 0684ae0 Merge pull request #7311 from docker/dependabot/github_actions/codeql-actions...
• b7dc94c build(deps): bump the codeql-actions group across 1 directory with 3 updates
• 12566dd build(deps): bump the docker-actions group with 3 updates
• 4167943 Merge pull request #7320 from docker/dependabot/github_actions/docker-actions...
• 9dcf8af Merge pull request #7322 from thaJeztah/bump_version
• 6fdced8 update version to 29.8.2
• 0a563b1 build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions