Skip to content

vendor: github.com/docker/go-connections main (v0.8.0-dev)#7121

Draft
thaJeztah wants to merge 1 commit into
docker:masterfrom
thaJeztah:bump_go_connections
Draft

vendor: github.com/docker/go-connections main (v0.8.0-dev)#7121
thaJeztah wants to merge 1 commit into
docker:masterfrom
thaJeztah:bump_go_connections

Conversation

@thaJeztah

Copy link
Copy Markdown
Member
  • sockets: set socket permissions without overriding umask
  • sockets: improve abstract Unix socket handling
  • sockets: InmemSocket: add DialContext
  • sockets: remove double error decoration
  • sockets: test-enhancements and improve coverage

full diff: docker/go-connections@v0.7.0...754f906

- What I did

- How I did it

- How to verify it

- Human readable description for the release notes

- A picture of a cute animal (not mandatory but encouraged)

- sockets: set socket permissions without overriding umask
- sockets: improve abstract Unix socket handling
- sockets: InmemSocket: add DialContext
- sockets: remove double error decoration
- sockets: test-enhancements and improve coverage

full diff: docker/go-connections@v0.7.0...754f906

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@docker-agent docker-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

The vendored update to github.com/docker/go-connections (v0.7.0 → v0.8.0-dev) looks clean. The changes reviewed:

  • inmem_socket.go: DialContext is correctly implemented with proper context-cancellation handling and cleanup — both ends of the pipe are closed on timeout/cancellation, with no goroutine or connection leaks.
  • unix_socket_unix.go: The new manual socket lifecycle (socket→bind→chmod→listen) is a genuine security improvement over the previous umask-manipulation approach. listen(2) is now only called after permissions are set, so clients can never connect to an under-permissioned socket.
  • unix_socket.go: Abstract socket path handling is correct; ErrUnsupported is properly returned for unsupported options.
  • unix_socket_windows.go: Windows listenUnix now correctly accepts and applies opts, matching unix behaviour.

No bugs found.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants