chore(deps): update dependency docker to v28.1.0

[renovate]

This PR contains the following updates:

Package	Update	Change
docker	minor	v28.0.4 -> v28.1.0

---

Release Notes

moby/moby (docker)

v28.1.0

Compare Source

28.1.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 28.1.0 milestone
• moby/moby, 28.1.0 milestone
• Changes to the Engine API, see API version history.

New

• Add docker bake sub-command as alias for docker buildx bake. docker/cli#5947
• Experimental: add a new --use-api-socket flag on docker run and docker create to enable access to Docker socket from inside a container and to share credentials from the host with the container. docker/cli#5858
• docker image inspect now supports a --platform flag to inspect a specific platform of a multi-platform image. docker/cli#5934

Bug fixes and enhancements

• Add CLI shell-completion for context names. docker/cli#6016
• Fix docker images --tree not including non-container images content size in the total image content size. docker/cli#6000
• Fix docker load not preserving replaced images. moby/moby#49650
• Fix docker login hints when logging in to a custom registry. docker/cli#6015
• Fix docker stats not working properly on machines with high CPU core count. moby/moby#49734
• Fix a regression causing docker pull/push to fail when interacting with a private repository. docker/cli#5964
• Fix an issue preventing rootless Docker setup on a host with no ip_tables kernel module. moby/moby#49727
• Fix an issue that could lead to unwanted iptables rules being restored and never deleted following a firewalld reload. moby/moby#49728
• Improve CLI completion of docker service scale. docker/cli#5968
• docker images --tree now hides both untagged and dangling images by default. docker/cli#5924
• docker system info will provide an exit code if a connection cannot be established to the Docker daemon. docker/cli#5918
• containerd image store: Fix image tag event not being emitted when building with BuildKit. moby/moby#49678
• containerd image store: Improve docker push/pull handling of remote registry errors. moby/moby#49770
• containerd image store: Show pull progress for non-layer image blobs. moby/moby#49746

Packaging updates

• Add Debian "Trixie" packages. docker/docker-ce-packaging#1181
• Add Fedora 42 packages. docker/containerd-packaging#418, docker/docker-ce-packaging#1169
• Add Ubuntu 25.04 "Plucky Puffin" packages. docker/containerd-packaging#419, docker/docker-ce-packaging#1177
• Update BuildKit to v0.21.0. moby/moby#49809
• Update Compose to v2.35.0. docker/docker-ce-packaging#1183
• Update Go runtime to 1.23.8. docker/cli#5986, docker/docker-ce-packaging#1180, moby/moby#49737

Networking

• Fix a bug causing host port-mappings on Swarm containers to be duplicated on docker ps and docker inspect. moby/moby#49724
• Fix an issue that caused container network attachment to fail with error "Bridge port not forwarding". moby/moby#49705
• Fix an issue with removal of a --link from a container in the default bridge network. moby/moby#49778
• Improve how network-endpoint relationships are tracked to reduce the chance of the "has active endpoints" error to be wrongfully returned. moby/moby#49736
• Improve the "has active endpoints" error message by including the name of endpoints still connected to the network being deleted. moby/moby#49773

API

• Update API version to v1.49. moby/moby#49718
• GET /image/{name}/json now supports a platform parameter allowing to specify which platform variant of a multi-platform image to inspect. moby/moby#49586
• GET /info now returns a FirewallBackend containing information about the daemon's firewalling configuration. moby/moby#49761

Go SDK

• Update minimum required Go version to go1.23. docker/cli#5868
• cli/command/context: remove temporary ContextType field from JSON output. docker/cli#5981
• client: Keep image references in canonical format where possible. moby/moby#49609

Deprecations

• API: Deprecated AllowNondistributableArtifactsCIDRs and AllowNondistributableArtifactsHostnames fields in the RegistryConfig struct in the GET /info response are omitted in API v1.49. moby/moby#49749
• API: Deprecated: The ContainerdCommit.Expected, RuncCommit.Expected, and InitCommit.Expected fields in the GET /info endpoint were deprecated in API v1.48, and are now omitted in API v1.49. moby/moby#48556
• Go-SDK: cli/command/image: Deprecate RunPull: this function was only used internally and will be removed in the next release. docker/cli#5975
• Go-SDK: cli/config/configfile: deprecate ConfigFile.Experimental field. Experimental CLI features are always enabled since version v20.10 and this field is no longer used. Use ConfigFile.Features instead for optional features. This field will be removed in a future release. docker/cli#5977
• Go-SDK: deprecate pkg/archive, which was migrated to github.com/moby/go-archive. moby/moby#49743
• Go-SDK: deprecate pkg/atomicwriter, which was migrated to github.com/moby/sys/atomicwriter. moby/moby#49748
• Go-SDK: opts: remove deprecated PortOpt, ConfigOpt, SecretOpt aliases. docker/cli#5953
• Go-SDK: registry: deprecate APIEndpoint.Official field. moby/moby#49706

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.