Merge branch 'update-dependencies-2025-11-28' into 'master'

fix: update dependencies to address critical CVE vulnerabilities

See merge request postgres-ai/database-lab!1066

Author: agneum

CLAUDE.md

@@ -10,7 +10,7 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## Build/Test/Lint Commands
 - Build all components: `cd engine && make build`
-- Lint code: `cd engine && make lint`
+- Lint code: `cd engine && make run-lint`
 - Run unit tests: `cd engine && make test`
 - Run integration tests: `cd engine && make test-ci-integration`
 - Run a specific test: `cd engine && GO111MODULE=on go test -v ./path/to/package -run TestName`

engine/.golangci.yml

@@ -63,6 +63,8 @@ linters-settings:
       - performance
     disabled-tags:
       - experimental
+  staticcheck:
+    checks: [ "all", "-SA1019" ] # TODO: fix deprecation warnings for old Docker API types in a separate MR
 
 linters:
   enable:

engine/Dockerfile.ci-checker

@@ -1,4 +1,4 @@
-FROM docker:20.10.24
+FROM docker:27.1.1
 
 # Install dependencies.
 RUN apk update && apk add --no-cache bash

engine/Dockerfile.dblab-cli

@@ -1,4 +1,4 @@
-FROM docker:20.10.24
+FROM docker:27.1.1
 
 # Install dependencies.
 RUN apk update && apk add --no-cache bash jq tzdata

engine/Dockerfile.dblab-server

@@ -1,6 +1,6 @@
 # See Guides to learn how to start a container: https://postgres.ai/docs/how-to-guides/administration/engine-manage
 
-FROM docker:20.10.24
+FROM docker:27.1.1
 
 # Install dependencies
 RUN apk update \

engine/Dockerfile.dblab-server-debug

@@ -12,7 +12,7 @@ RUN go install github.com/go-delve/delve/cmd/dlv@latest
 # RUN GO111MODULE=on CGO_ENABLED=0 go build -gcflags="all=-N -l" -o /dblab-server-debug ./cmd/database-lab/main.go
 
 # Final stage
-FROM docker:20.10.12
+FROM docker:27.1.1
 
 # Install dependencies
 RUN apk update \

engine/Dockerfile.dblab-server-zfs08

@@ -1,6 +1,6 @@
 # See Guides to learn how to start a container: https://postgres.ai/docs/how-to-guides/administration/engine-manage
 
-FROM docker:20.10.24
+FROM docker:27.1.1
 
 # Install dependencies.
 RUN apk update && apk add zfs=0.8.4-r0 --no-cache --repository=https://dl-cdn.alpinelinux.org/alpine/v3.12/main \

engine/cmd/cli/templates/help.go

@@ -5,7 +5,7 @@
 // Package templates contains custom template output.
 package templates
 
-//nolint
+// nolint
 const CustomAppHelpTemplate = `NAME:
    Database Lab CLI {{if .Version}}{{if not .HideVersion}}{{.Version}}{{end}}{{end}}
 
@@ -35,7 +35,7 @@ CONTACT US: https://postgres.ai, team@postgres.ai
 
 `
 
-//nolint
+// nolint
 const CustomCommandHelpTemplate = `USAGE:
    {{if .UsageText}}{{.UsageText}}{{else}}{{.HelpName}}{{if .VisibleFlags}} [command options]{{end}} {{if .ArgsUsage}}{{.ArgsUsage}}{{else}}[arguments...]{{end}}{{end}}{{if .Category}}
 
@@ -50,7 +50,7 @@ OPTIONS:
    {{end}}{{end}}
 `
 
-//nolint
+// nolint
 const CustomSubcommandHelpTemplate = `USAGE:
    {{if .UsageText}}{{.UsageText}}{{else}}{{.HelpName}} command{{if .VisibleFlags}} [command options]{{end}} {{if .ArgsUsage}}{{.ArgsUsage}}{{else}}[arguments...]{{end}}{{end}}
 

engine/cmd/database-lab/main.go

@@ -18,7 +18,7 @@ import (
 	"syscall"
 	"time"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/network"
 	"github.com/docker/docker/client"
 	"github.com/pkg/errors"
 
@@ -62,7 +62,7 @@ func main() {
 
 	config.ApplyGlobals(cfg)
 
-	docker, err := client.NewClientWithOpts(client.FromEnv)
+	docker, err := client.NewClientWithOpts(client.FromEnv, client.WithAPIVersionNegotiation())
 	if err != nil {
 		log.Fatal("Failed to create a Docker client:", err)
 	}
@@ -273,7 +273,7 @@ func main() {
 func getNetworkGateway(docker *client.Client, internalNetworkID string) string {
 	gateway := ""
 
-	networkResource, err := docker.NetworkInspect(context.Background(), internalNetworkID, types.NetworkInspectOptions{})
+	networkResource, err := docker.NetworkInspect(context.Background(), internalNetworkID, network.InspectOptions{})
 	if err != nil {
 		log.Err(err.Error())
 		return gateway

engine/cmd/runci/main.go

@@ -7,7 +7,6 @@ import (
 	"os"
 	"strings"
 
-	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/network"
 	"github.com/docker/docker/client"
 	"github.com/pkg/errors"
@@ -22,7 +21,7 @@ import (
 )
 
 func main() {
-	dockerCLI, err := client.NewClientWithOpts(client.FromEnv)
+	dockerCLI, err := client.NewClientWithOpts(client.FromEnv, client.WithAPIVersionNegotiation())
 	if err != nil {
 		log.Fatal("Failed to create a Docker client:", err)
 	}
@@ -129,7 +128,7 @@ func discoverNetwork(ctx context.Context, cfg *runci.Config, dockerCLI *client.C
 
 	for networkLabel, endpointSettings := range inspection.NetworkSettings.Networks {
 		if strings.HasPrefix(networkLabel, networks.NetworkPrefix) {
-			networkResource, err := dockerCLI.NetworkInspect(ctx, endpointSettings.NetworkID, types.NetworkInspectOptions{})
+			networkResource, err := dockerCLI.NetworkInspect(ctx, endpointSettings.NetworkID, network.InspectOptions{})
 			if err != nil {
 				log.Err(err)
 				continue