chore(deps): update dependency docker/compose to v5.3.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/compose	uses-with	minor	v5.1.3 → v5.3.1

---

Release Notes

docker/compose (docker/compose)

v5.3.1

Compare Source

What's Changed

🔧 Internal

• Ci: add concurrency group to pr-review-trigger to prevent duplicate reviews by @​derekmisler in #​13890
• Fix grammar in Attestations field comment by @​blackflytech in #​13891
• Ci: remove unused desktop-edge-test workflow by @​thaJeztah in #​13897
• Ci: zizmor workflow by @​crazy-max in #​13901
• Ci: fix docs-upstream workflow by @​crazy-max in #​13912
• CODEOWNERS: add compose-reviewers by @​thaJeztah in #​13913
• Ci: harden GitHub Actions workflows by @​glours in #​13896
• GHA: dependabot: group docker/* actions updates by @​thaJeztah in #​13914

⚙️ Dependencies

• Build(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1 by @​dependabot[bot] in #​13892
• Build(deps): bump github.com/moby/sys/user to v0.4.1 by @​thaJeztah in #​13893
• Build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to 4.0.0-rc.6 by @​dependabot[bot] in #​13876
• Build(deps): bump github.com/docker/cli from 29.6.0+incompatible to 29.6.1+incompatible by @​dependabot[bot] in #​13895
• Build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @​dependabot[bot] in #​13902
• Build(deps): bump the docker-actions group with 3 updates by @​dependabot[bot] in #​13916
• Build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​13908
• Build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 by @​dependabot[bot] in #​13907
• Build(deps): bump test-summary/action from 2.4 to 2.6 by @​dependabot[bot] in #​13903
• Build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24 by @​dependabot[bot] in #​13910
• Build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0 by @​dependabot[bot] in #​13904
• Build(deps): bump github/codeql-action/upload-sarif from 3.36.3 to 4.36.2 by @​dependabot[bot] in #​13917
• Build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @​dependabot[bot] in #​13911

New Contributors

• @​blackflytech made their first contribution in #​13891

Full Changelog: docker/compose@v5.3.0...v5.3.1

v5.3.0

Compare Source

What's Changed

ℹ️ This release introduces native support for init containers.

✨ Improvements

• Pre start init containers by @​glours in #​13862

🐛 Fixes

• Fix(oci): route authorizer token fetches through provided transport by @​glours in #​13873
• Fix(run): scope Running events to project.Services by @​glours in #​13883

🔧 Internal

• Chore: migrate cagent-action to docker-agent-action (v2.0.0) by @​docker-agent in #​13869
• Chore: migrate to docker-agent-action v2.0.1 by @​docker-agent in #​13872
• Fix(reconcile): hash resolved service refs to match executor by @​glours in #​13880
• Fix(compose/port): show private port in portNotFoundError message by @​vmphase in #​13875
• Fix(run): normalize --no-TTY flag to --no-tty by @​nickjj in #​13885

⚙️ Dependencies

• Bump compose-go to version v2.13.0 by @​glours in #​13886

New Contributors

• @​docker-agent made their first contribution in #​13869
• @​vmphase made their first contribution in #​13875
• @​nickjj made their first contribution in #​13885

Full Changelog: docker/compose@v5.2.0...v5.3.0

v5.2.0

Compare Source

What's Changed

ℹ️ This version introduces a new reconciliation algorithm between the observed state and the expected state.

If you experience any issues with a Compose workload that was previously working, please open an issue.

✨ Improvements

• Reconciliation plan by @​ndeloof & @​glours in #​13830
• Add rawsetenv message type for provider plugins by @​rajyan in #​13742

🐛 Fixes

• Fix(build): skip remote URL contexts from bake fs.read allowlist by @​ndeloof in #​13816
• Skip validation when extracting config variables by @​scarab-systems in #​13831
• Fix(progress): probe stderr (not stdout) for TTY auto-detection by @​glours in #​13837
• Fix(publish): honor env_file required: false for missing files by @​Ijtihed in #​13848

🔧 Internal

• Docs: compose logs: add links for since/until flag descriptions by @​thaJeztah in #​13806
• Ci: add Dependabot cooldown (2026060-170456) by @​securityeng-bot[bot] in #​13820
• Docs(CLAUDE.md): note that commits must be signed off (DCO) by @​ndeloof in #​13817
• Refactor: replace Split in loops with more efficient SplitSeq and replace HasPrefix+TrimPrefix with CutPrefix by @​caltechustc in #​13810
• Chore: fix some comments to improve readability by @​solunolab in #​13823
• GHA: update docs-upstream to pin workflows by sha by @​thaJeztah in #​13834
• Docs: compose logs: add more links for flag descriptions by @​thaJeztah in #​13833
• Fix/progress tty line overflow 13595 by @​glours in #​13840
• Fix(publish): bypass Docker Desktop proxy for loopback registries by @​ptrdom in #​13825
• Watch: do not rebuild depends_on services on file change by @​ndeloof in #​13856
• pkg/e2e: fix malformed JWT in fixtures by @​thaJeztah in #​13857
• pkg/e2e: drop unused run param from getEnv by @​glours in #​13867
• Docs: ps --format json outputs JSON Lines, not a JSON array by @​glours in #​13868

⚙️ Dependencies

• Build(deps): bump github.com/docker/cli from 29.5.1+incompatible to 29.5.2+incompatible by @​dependabot[bot] in #​13802
• Update to go 1.26.4 by @​thaJeztah in #​13828
• Chore(deps): github.com/containerd/typeurl/v2 v2.3.0 by @​thaJeztah in #​13829
• Build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by @​dependabot[bot] in #​13838
• Chore(deps): github.com/docker/cli v29.5.3, github.com/docker/buildx v0.34.1, buildkit v0.30.0 by @​thaJeztah in #​13841
• Build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by @​dependabot[bot] in #​13832
• Chore(deps): golang.org/x/crypto v0.53.0 by @​thaJeztah in #​13844
• Build(deps): bump github.com/containerd/containerd/v2 from 2.2.3 to 2.2.4 in the go_modules group across 1 directory by @​dependabot[bot] in #​13804
• Chore(deps): bump github.com/containerd/containerd/v2 to v2.2.5 by @​thaJeztah in #​13855
• Chore(deps): bump github.com/golang-jwt/jwt/v5 to v5.3.1 by @​thaJeztah in #​13847
• Chore(deps): github.com/docker/cli v29.6.0, github.com/docker/buildx v0.35.0, buildkit v0.31.0 by @​thaJeztah in #​13842
• Bump compose-go to version v2.12.1 by @​glours in #​13865

New Contributors

• @​securityeng-bot[bot] made their first contribution in #​13820
• @​caltechustc made their first contribution in #​13810
• @​solunolab made their first contribution in #​13823
• @​scarab-systems made their first contribution in #​13831
• @​ptrdom made their first contribution in #​13825
• @​rajyan made their first contribution in #​13742
• @​Ijtihed made their first contribution in #​13848

Full Changelog: docker/compose@v5.1.4...v5.2.0

v5.1.4

Compare Source

What's Changed

✨ Improvements

• feat: add stop lifecycle hook for external providers by @​glours in #​13779

🐛 Fixes

• fix: route OCI artifact pulls through Docker Desktop HTTP proxy by @​glours in #​13770
• fix: restore stoppingEvent/stoppedEvent helpers for plugin stop hook by @​glours in #​13794
• fix(publish): flag literal inline environment values by @​glours in #​13760

🔧 Internal

• ci: remove unused e2e job from merge workflow by @​glours in #​13740
• chore: update cagent-action to v1.4.4 by @​derekmisler in #​13745
• Change verb tense in Docker Compose reference documentation by @​ryanjbonnell in #​13773
• pkg/compose: go fix by @​thaJeztah in #​13782
• refactor: code deduplication and simplification by @​ndeloof in #​13759
• fix: make e2e tests pass reliably locally with Docker Desktop by @​glours in #​13741
• refactor: drop Desktop beta-settings check; gate hint on LogsTab flag by @​glours in #​13755

⚙️ Dependencies

• build(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 by @​dependabot[bot] in #​13731
• build(deps): bump github.com/docker/cli from 29.4.0+incompatible to 29.4.2+incompatible by @​dependabot[bot] in #​13768
• build(deps): bump github.com/moby/moby/client from 0.4.0 to 0.4.1 by @​dependabot[bot] in #​13752
• build(deps): bump github.com/docker/cli from 29.4.2+incompatible to 29.4.3+incompatible by @​dependabot[bot] in #​13776
• build(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @​dependabot[bot] in #​13775
• build(deps): update to go 1.26.3 by @​thaJeztah in #​13783
• build(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @​dependabot[bot] in #​13791
• build(deps): bump github.com/compose-spec/compose-go/v2 from 2.10.2 to 2.11.0 by @​dependabot[bot] in #​13798
• build(deps): bump github.com/docker/cli from 29.4.3+incompatible to 29.5.1+incompatible by @​dependabot[bot] in #​13796
• build(deps): bump golang.org/x/sys from 0.42.0 to 0.44.0 by @​dependabot[bot] in #​13788

New Contributors

• @​ryanjbonnell made their first contribution in #​13773

Full Changelog: docker/compose@v5.1.3...v5.1.4

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.