Merge pull request #23799 from vvoland/update-docker-2912

engine: 29.1.2

Author: thaJeztah

_vendor/modules.txt

@@ -1,7 +1,7 @@
 # github.com/moby/moby/api v1.52.0
 # github.com/moby/buildkit v0.26.1
 # github.com/docker/buildx v0.30.1
-# github.com/docker/cli v29.1.1+incompatible
+# github.com/docker/cli v29.1.2+incompatible
 # github.com/docker/compose/v2 v2.40.3
 # github.com/docker/model-runner/cmd/cli v0.1.44
 # github.com/docker/mcp-gateway v0.22.0

content/manuals/engine/release-notes/29.md

@@ -22,6 +22,36 @@ For more information about:
 - Deprecated and removed features, see [Deprecated Engine Features](../deprecated.md).
 - Changes to the Engine API, see [Engine API version history](/reference/api/engine/version-history/).
 
+## 29.1.2
+
+{{< release-date date="2025-12-02" >}}
+
+For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
+
+- [docker/cli, 29.1.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A29.1.2)
+- [moby/moby, 29.1.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A29.1.2)
+
+### Security
+
+- Update Go runtime to [1.25.5](https://go.dev/doc/devel/release#go1.25.5). [moby/moby#51648](https://github.com/moby/moby/pull/51648), [docker/cli#6688](https://github.com/docker/cli/pull/6688)
+  - Fixes a potential DoS via excessive resource usage when formatting hostname validation errors [**CVE-2025-61729**](https://nvd.nist.gov/vuln/detail/CVE-2025-61729)
+  - Fixes incorrect enforcement of excluded subdomain constraints for wildcard SANs, which could allow improperly trusted certificates [**CVE-2025-61727**](https://nvd.nist.gov/vuln/detail/CVE-2025-22874)
+
+### Bug fixes and enhancements
+
+- containerd image store: Fix `docker image inspect` failing to return available image data in case where not all distributable blobs are available locally. [moby/moby#51629](https://github.com/moby/moby/pull/51629)
+- dockerd-rootless-setuptool.sh: fix `nsenter: no namespace specified`. [moby/moby#51622](https://github.com/moby/moby/pull/51622)
+- Fix `docker system df` showing `N/A` for shared size and unique size when using graph-drivers as storage. [moby/moby#51631](https://github.com/moby/moby/pull/51631)
+
+### Packaging updates
+
+- Update runc (in static binaries) to [v1.3.4](https://github.com/opencontainers/runc/releases/tag/v1.3.4). [moby/moby#51633](https://github.com/moby/moby/pull/51633)
+
+### Networking
+
+- Fix a bug preventing port mappings in rootless mode when slirp4netns is used. [moby/moby#51616](https://github.com/moby/moby/pull/51616)
+- Prevent a crash when making an API request with `HostConfig.PublishAllPorts` set (`-P`), and no port bindings. [moby/moby#51621](https://github.com/moby/moby/pull/51621)
+
 ## 29.1.1
 
 {{< release-date date="2025-11-28" >}}

content/reference/api/engine/_index.md

@@ -73,21 +73,21 @@ To see the highest version of the API your Docker daemon and client support, use
 ```console
 $ docker version
 Client: Docker Engine - Community
- Version:           29.0.4
+ Version:           29.1.2
  API version:       1.52
- Go version:        go1.25.4
- Git commit:        3247a5a
- Built:             Mon Nov 24 21:59:50 2025
+ Go version:        go1.25.5
+ Git commit:        890dcca
+ Built:             Tue Dec  2 21:56:10 2025
  OS/Arch:           linux/arm64
  Context:           default
 
 Server: Docker Engine - Community
  Engine:
-  Version:          29.0.4
+  Version:          29.1.2
   API version:      1.52 (minimum version 1.44)
-  Go version:       go1.25.4
-  Git commit:       4612690
-  Built:            Mon Nov 24 21:59:50 2025
+  Go version:       go1.25.5
+  Git commit:       de45c2a
+  Built:            Tue Dec  2 21:56:10 2025
   OS/Arch:          linux/arm64
   ...
 ```

go.mod

@@ -4,7 +4,7 @@ go 1.24.9
 
 require (
 	github.com/docker/buildx v0.30.1 // indirect
-	github.com/docker/cli v29.1.1+incompatible // indirect; see "replace" rule at the bottom for actual version
+	github.com/docker/cli v29.1.2+incompatible // indirect; see "replace" rule at the bottom for actual version
 	github.com/docker/compose/v2 v2.40.3 // indirect
 	github.com/docker/mcp-gateway v0.22.0 // indirect
 	github.com/docker/model-runner/cmd/cli v0.1.44 // indirect
@@ -15,7 +15,7 @@ require (
 
 replace (
 	github.com/docker/buildx => github.com/docker/buildx v0.30.1
-	github.com/docker/cli => github.com/docker/cli v29.1.1+incompatible
+	github.com/docker/cli => github.com/docker/cli v29.1.2+incompatible
 	github.com/docker/compose/v2 => github.com/docker/compose/v2 v2.40.3
 	github.com/docker/mcp-gateway => github.com/docker/mcp-gateway v0.22.0
 	github.com/docker/model-runner/cmd/cli => github.com/docker/model-runner/cmd/cli v0.1.44

go.sum

@@ -6,6 +6,8 @@ github.com/docker/cli v29.0.0+incompatible h1:KgsN2RUFMNM8wChxryicn4p46BdQWpXOA1
 github.com/docker/cli v29.0.0+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/cli v29.1.1+incompatible h1:gGQk5qx62yPKRm3bUdKBzmDBSQzp17hlSLbV1F7jjys=
 github.com/docker/cli v29.1.1+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
+github.com/docker/cli v29.1.2+incompatible h1:s4QI7drXpIo78OM+CwuthPsO5kCf8cpNsck5PsLVTH8=
+github.com/docker/cli v29.1.2+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/compose/v2 v2.40.3 h1:XeYkQu1svDtyfZPv5nTwFryQ25ZJMkIlc4pz9HalMPI=
 github.com/docker/compose/v2 v2.40.3/go.mod h1:iNY1tvoHTyN3C3QHCuWAgj3OjR2T6mGkk/qxfbBF/4M=
 github.com/docker/mcp-gateway v0.22.0 h1:l4t+HRNHxR7Jn545KDeXaeiEEhkCDBeWMTyuCaXVH7A=

hugo.yaml

@@ -122,10 +122,10 @@ params:
   # Latest version of the Docker Engine API
   latest_engine_api_version: "1.52"
   # Latest version of Docker Engine
-  docker_ce_version: "29.1.1"
+  docker_ce_version: "29.1.2"
   # Previous version of the Docker Engine
   # (Used to show e.g., "latest" and "latest"-1 in engine install examples
-  docker_ce_version_prev: "29.1.0"
+  docker_ce_version_prev: "29.1.1"
   # Latest Docker Compose version
   compose_version: "v2.40.3"
   # Latest BuildKit version