Bump the "docker-weekly" group with 1 update across multiple ecosystems

[dependabot]

Bumps the docker-weekly group with 1 update: docker.

Updates docker from 29.6.2-dind to 29.7.1-dind

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Security Report — codefresh/dind

Note

Compared security scans:

Current image:
quay.io/codefresh/dev/dind:dependabotdocker_weekly-b3cac7d864@sha256:91a6f2f6e25f29dfb6e79ff70f346abf740cba5d98847d20360f13f6b0eea96a

Baseline:
quay.io/codefresh/dind:master@sha256:385f0c52371079a55302e65fdc7e790e7a58994a65a4e59805be013cf17a836e

Fixed CVEs: 11

🟣 Critical: 1

• CVE-2026-33186 in google.golang.org/grpc@v1.78.0 at /usr/local/bin/containerd

🔴 High: 6

• CVE-2026-53492 in github.com/containerd/containerd/v2@v2.2.4 at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2026-53488 in github.com/containerd/containerd/v2@v2.2.4 at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2026-39822 in os@1.26.4 at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2026-39883 in go.opentelemetry.io/otel/sdk/resource@v1.38.0 at /usr/local/bin/containerd
• CVE-2026-24051 in go.opentelemetry.io/otel/sdk@v1.38.0 at /usr/local/bin/containerd
• CVE-2026-53489 in github.com/containerd/containerd/v2@v2.2.4 at /usr/local/libexec/docker/cli-plugins/docker-buildx

🟠 Medium: 4

• CVE-2026-50195 in github.com/containerd/containerd/v2@v2.2.4 at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2026-47262 in github.com/containerd/containerd/v2@v2.2.4 at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2026-42505 in crypto/tls@1.26.4 at /usr/local/libexec/docker/cli-plugins/docker-buildx
• CVE-2026-39882 in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.35.0 at /usr/local/bin/containerd

Fixed issues: 7

• Fixes CFS-13349
• Fixes CFS-13344
• Fixes CFS-13335
• Fixes CFS-13334
• Fixes CFS-13332
• Fixes CFS-13317
• Fixes CFS-13313