[pull] main from docker:main

_vendor/modules.txt

@@ -3,6 +3,6 @@
 # github.com/docker/buildx v0.28.0
 # github.com/docker/cli v28.4.0+incompatible
 # github.com/docker/compose/v2 v2.39.4
-# github.com/docker/model-cli v0.1.40
+# github.com/docker/model-cli v0.1.41
 # github.com/docker/mcp-gateway v0.13.1-0.20250730013131-e08a3be84765
 # github.com/docker/scout-cli v1.18.1

content/manuals/ai/model-runner/_index.md

@@ -38,6 +38,7 @@ with AI models locally.
 - Run and interact with AI models directly from the command line or from the Docker Desktop GUI
 - Manage local models and display logs
 - Display prompt and response details
+- Conversational context support for multi-turn interactions
 
 ## Requirements
 

content/manuals/desktop/release-notes.md

@@ -34,6 +34,48 @@ For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoo
 >
 > If you're experiencing malware detection issues on Mac, follow the steps documented in [docker/for-mac#7527](https://github.com/docker/for-mac/issues/7527).
 
+## 4.47.0
+
+{{< release-date date="2025-09-25" >}}
+
+{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.47.0" build_path="/206054/" >}}
+
+### New
+
+- Added dynamic MCP server discovery and support to Docker's MCP catalog.
+- With Enhanced Container Isolation, administrators can now block `docker plugin` and `docker login` commands in containers with Docker socket mounts.
+- Added a new Docker Model Runner command. With `docker model requests` you can fetch requests and responses.
+
+### Upgrades
+
+- [Docker Compose v2.39.4](https://github.com/docker/compose/releases/tag/v2.39.4)
+- [Kubernetes v1.34.1](https://github.com/kubernetes/kubernetes/releases/tag/v1.34.1)
+  - [CNI plugins v1.7.1](https://github.com/containernetworking/plugins/releases/tag/v1.7.1)
+  - [cri-tools v1.33.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.33.0)
+  - [cri-dockerd v0.3.20](https://github.com/Mirantis/cri-dockerd/releases/tag/v0.3.20)
+- Docker Debug `v0.0.44`
+
+### Bug fixes and enhancements
+
+#### For all platforms
+
+- You can now search for MCP servers more easily with filters, sorting, and improved search functionality.
+- Docker Debug no longer hangs when debugging containers that have environment variables set to an empty value.
+- Enhanced Docker Model Runner with rich response rendering in the CLI, conversational context in the Docker Desktop Dashboard, and resumable downloads.
+
+#### For Mac
+
+- Removed the `com.apple.security.cs.allow-dyld-environment-variables` entitlement which allow a signed, arbitrary dynamic library to be loaded with Docker Desktop via the `DYLD_INSERT_LIBRARIES` environment variable.
+- Fixed a regression where config profile sign-in enforcement broke for some customer environments.
+- Fixed a bug that sometimes caused the `docker model package` command to hang when writing to the local content store (without the `--push` flag).
+- Fixed a bug where containers started with the restart policy `unless-stopped` were never restarted. Fixes [docker/for-mac#7744](https://github.com/docker/for-mac/issues/7744).
+
+#### For Windows
+
+- Fixed the Goose MCP client connection on Windows for the Docker MCP Toolkit.
+- Addressed an issue with the "Skipping integration" of a WSL distro option, after a failed integration attempt.
+- Fixed a bug that sometimes caused the `docker model package` command to hang when writing to the local content store (without the `--push` flag).
+
 ## 4.46.0
 
 {{< release-date date="2025-09-11" >}}

content/reference/api/hub/changelog.md

@@ -15,6 +15,14 @@ issues for Docker Service APIs.
 
 ---
 
+## 2025-09-25
+
+### Updates
+
+- Fix [Assign repository group](/reference/api/hub/latest/#tag/repositories/operation/CreateRepositoryGroup) endpoints request/response
+
+---
+
 ## 2025-09-19
 
 ### New

content/reference/api/hub/latest.yaml

@@ -958,28 +958,37 @@ paths:
       summary: Assign a group (Team) to a repository for access
       tags:
         - repositories
+      operationId: CreateRepositoryGroup
       security:
         - bearerAuth: []
-      parameters:
-        - in: query
-          name: group_name
-          required: true
-          schema:
-            type: string
-          description: Name of the group (team) in the organization.
-        - in: query
-          name: permission
-          required: true
-          schema:
-            type: string
-            description: |
-              Access level for the group. Possible values:
-              - `read`
-              - `write`
-              - `admin`
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/RepositoryGroupCreationRequest'
+            example:
+              group_id: 12345
+              permission: "write"
       responses:
         "200":
-          $ref: "#/components/responses/team_repo"
+          description: Repository group permission created successfully
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/RepositoryGroup'
+              example:
+                group_name: "developers"
+                permission: "write"
+                group_id: 12345
+        "400":
+          description: Bad Request - Invalid request parameters
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/error"
+        "401":
+          $ref: "#/components/responses/unauthorized"
         "403":
           $ref: "#/components/responses/forbidden"
         "404":
@@ -2449,6 +2458,43 @@ components:
           description: Whether the repository should be private
           default: false
           example: false
+    RepositoryGroupCreationRequest:
+      type: object
+      required:
+        - group_id
+        - permission
+      properties:
+        group_id:
+          type: integer
+          format: int64
+          description: The ID of the organization group to grant access to
+          example: 12345
+        permission:
+          type: string
+          description: |
+            The permission level to grant to the group:
+            - read: Can view and pull from the repository
+            - write: Can view, pull, and push to the repository
+            - admin: Can view, pull, push, and manage repository settings
+          enum: [ "read", "write", "admin" ]
+          example: "write"
+    RepositoryGroup:
+      type: object
+      properties:
+        group_name:
+          type: string
+          description: The name of the group
+          example: "developers"
+        permission:
+          type: string
+          description: The permission level granted to the group
+          enum: [ "read", "write", "admin" ]
+          example: "write"
+        group_id:
+          type: integer
+          format: int64
+          description: The ID of the group
+          example: 12345
     repository_info:
       type: object
       properties:

go.mod

@@ -24,9 +24,9 @@ require (
 	github.com/docker/go-connections v0.6.0 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/docker/mcp-gateway v0.13.1-0.20250730013131-e08a3be84765 // indirect
-	github.com/docker/model-cli v0.1.40 // indirect
-	github.com/docker/model-distribution v0.0.0-20250822172258-8fe9daa4a4da // indirect
-	github.com/docker/model-runner v0.0.0-20250822173738-5341c9fc2974 // indirect
+	github.com/docker/model-cli v0.1.41 // indirect
+	github.com/docker/model-distribution v0.0.0-20250918153037-7d9fc7b72b57 // indirect
+	github.com/docker/model-runner v0.0.0-20250911130340-38bb0171c947 // indirect
 	github.com/docker/scout-cli v1.18.1 // indirect
 	github.com/elastic/go-sysinfo v1.15.3 // indirect
 	github.com/elastic/go-windows v1.0.2 // indirect
@@ -40,7 +40,7 @@ require (
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/google/go-containerregistry v0.20.6 // indirect
 	github.com/google/uuid v1.6.0 // indirect
-	github.com/gpustack/gguf-parser-go v0.14.1 // indirect
+	github.com/gpustack/gguf-parser-go v0.22.1 // indirect
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 // indirect
 	github.com/henvic/httpretty v0.1.4 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
@@ -112,7 +112,7 @@ replace (
 	github.com/docker/buildx => github.com/docker/buildx v0.28.0
 	github.com/docker/cli => github.com/docker/cli v28.3.3+incompatible
 	github.com/docker/compose/v2 => github.com/docker/compose/v2 v2.39.4
-	github.com/docker/model-cli => github.com/docker/model-cli v0.1.40
+	github.com/docker/model-cli => github.com/docker/model-cli v0.1.41
 	github.com/docker/scout-cli => github.com/docker/scout-cli v1.18.1
 	github.com/moby/buildkit => github.com/moby/buildkit v0.24.0
 	github.com/moby/moby => github.com/moby/moby v28.3.3+incompatible

go.sum

@@ -110,6 +110,8 @@ github.com/docker/model-cli v0.1.39 h1:9W2HEj46QtZ4+WeEtmDlYlJKspcLwaTzzeBQZKGWs
 github.com/docker/model-cli v0.1.39/go.mod h1:vn3xvo4zqZVHbon38lZbaEc12JshwBRzzLbK6w1q8Yg=
 github.com/docker/model-cli v0.1.40 h1:Ar9KLp7B08w3Gz71jFQaOiyZGQ+yr3XBtWTcbm0jgh4=
 github.com/docker/model-cli v0.1.40/go.mod h1:vn3xvo4zqZVHbon38lZbaEc12JshwBRzzLbK6w1q8Yg=
+github.com/docker/model-cli v0.1.41 h1:H1GK9ESxYAFsx2I6xoIwipasGuffQ7vKT9wIFyIVv28=
+github.com/docker/model-cli v0.1.41/go.mod h1:Mam12elFiRQGvxNDgqZVXPsUbfBB67FApk91z3H+jfc=
 github.com/docker/model-cli v1.0.2-0.20250812105011-ebb4723662c6 h1:f4iOd3leasQe8Ak0BIssJvy6URQU1QpdyvvrEMVd/to=
 github.com/docker/model-cli v1.0.2-0.20250812105011-ebb4723662c6/go.mod h1:buRKbEmodiWCC9hApXghZZIWa9kdDpSLzwlx04DmtKs=
 github.com/docker/model-distribution v0.0.0-20250512190053-b3792c042d57 h1:ZqfKknb+0/uJid8XLFwSl/osjE+WuS6o6I3dh3ZqO4U=
@@ -120,6 +122,8 @@ github.com/docker/model-distribution v0.0.0-20250724114133-a11d745e582c h1:w9Mek
 github.com/docker/model-distribution v0.0.0-20250724114133-a11d745e582c/go.mod h1:dThpO9JoG5Px3i+rTluAeZcqLGw8C0qepuEL4gL2o/c=
 github.com/docker/model-distribution v0.0.0-20250822172258-8fe9daa4a4da h1:ml99WBfcLnsy1frXQR4X+5WAC0DoGtwZyGoU/xBsDQM=
 github.com/docker/model-distribution v0.0.0-20250822172258-8fe9daa4a4da/go.mod h1:dThpO9JoG5Px3i+rTluAeZcqLGw8C0qepuEL4gL2o/c=
+github.com/docker/model-distribution v0.0.0-20250918153037-7d9fc7b72b57 h1:WHiPO9UmO5v97T3ksQUA2SbYVkTdUCSFobznegL97kk=
+github.com/docker/model-distribution v0.0.0-20250918153037-7d9fc7b72b57/go.mod h1:bV1RH2e79nTwOW38GoMU9UO8gpZVLH9+cZeEeR4wSeE=
 github.com/docker/model-runner v0.0.0-20250512190413-96af7b750f88 h1:NkiizYL67HsCnnlEU6BQVoeiC1bAAyJFxw02bO7JC4E=
 github.com/docker/model-runner v0.0.0-20250512190413-96af7b750f88/go.mod h1:Nw+rx6RRPNdProEb9/BVJyAQn63px6WWlOv+eEpkV7Q=
 github.com/docker/model-runner v0.0.0-20250627142917-26a0a73fbbc0 h1:yajuhlGe1xhpWW3eMehQi2RrqiBQiGoi6c6OWiPxMaQ=
@@ -128,6 +132,8 @@ github.com/docker/model-runner v0.0.0-20250724122432-ecfa5e7e6807 h1:02vImD8wqUD
 github.com/docker/model-runner v0.0.0-20250724122432-ecfa5e7e6807/go.mod h1:rCzRjRXJ42E8JVIA69E9hErJVV5mnUpWdJ2POsktfRs=
 github.com/docker/model-runner v0.0.0-20250822173738-5341c9fc2974 h1:/uF17tBEtsE6T2Xgg4cgrrqNcQ02gY5Lp98je+2K0nQ=
 github.com/docker/model-runner v0.0.0-20250822173738-5341c9fc2974/go.mod h1:1Q2QRB5vob542x6P5pQXlGTYs5bYPxNG6ePcjTndA0A=
+github.com/docker/model-runner v0.0.0-20250911130340-38bb0171c947 h1:6Dz1SFZONEd8tlKetn2Gu6v5HDJI/YtUFwkqHGwrsV0=
+github.com/docker/model-runner v0.0.0-20250911130340-38bb0171c947/go.mod h1:cl7panafjkSHllYCCGYAzty2aUvbwk55Gi35v06XL80=
 github.com/docker/scout-cli v1.15.0 h1:VhA9niVftEyZ9f5KGwKnrSfQOp2X3uIU3VbE/gTVMTM=
 github.com/docker/scout-cli v1.15.0/go.mod h1:Eo1RyCJsx3ldz/YTY5yGxu9g9mwTYbRUutxQUkow3Fc=
 github.com/docker/scout-cli v1.18.1 h1:snFodhV6xFJryxdUZ0ukPZFZZFnWAGLUuuPZGB3BOK8=
@@ -168,6 +174,8 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/gpustack/gguf-parser-go v0.14.1 h1:tmz2eTnSEFfE52V10FESqo9oAUquZ6JKQFntWC/wrEg=
 github.com/gpustack/gguf-parser-go v0.14.1/go.mod h1:GvHh1Kvvq5ojCOsJ5UpwiJJmIjFw3Qk5cW7R+CZ3IJo=
+github.com/gpustack/gguf-parser-go v0.22.1 h1:FRnEDWqT0Rcplr/R9ctCRSN2+3DhVsf6dnR5/i9JA4E=
+github.com/gpustack/gguf-parser-go v0.22.1/go.mod h1:y4TwTtDqFWTK+xvprOjRUh+dowgU2TKCX37vRKvGiZ0=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 h1:e9Rjr40Z98/clHv5Yg79Is0NtosR5LXRvdr7o/6NwbA=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1/go.mod h1:tIxuGz/9mpox++sgp9fJjHO0+q1X9/UOWd798aAm22M=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo=