fix(deps): update module github.com/docker/cli to v29 [security]

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/docker/cli](https://redirect.github.com/docker/cli) | `v28.3.1+incompatible` → `v29.2.0+incompatible` |  |  | ### GitHub Vulnerability Alerts #### [CVE-2025-15558](https://redirect.github.com/docker/cli/security/advisories/GHSA-p436-gjf2-799p) This issue affects Docker CLI through 29.1.5 ### Impact Docker CLI for Windows searches for plugin binaries in `C:\ProgramData\Docker\cli-plugins`, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that are executed when a victim user opens Docker Desktop or invokes Docker CLI plugin features, and allow privilege-escalation if the `docker` CLI is executed as a privileged user. This issue affects Docker CLI through v29.1.5 (fixed in v29.2.0). It impacts Windows binaries acting as a CLI plugin manager via the [`github.com/docker/cli/cli-plugins/manager`](https://pkg.go.dev/github.com/docker/cli@v29.1.5+incompatible/cli-plugins/manager) package, which is consumed by downstream projects such as Docker Compose. Docker Compose became affected starting in v2.31.0, when it incorporated the relevant CLI plugin manager code (see [https://github.com/docker/compose/pull/12300](https://redirect.github.com/docker/compose/pull/12300)), and is fixed in v5.1.0. This issue does not impact non-Windows binaries or projects that do not use the plugin manager code. ### Patches Fixed version starts with 29.2.0 This issue was fixed in https://github.com/docker/cli/commit/13759330b1f7e7cb0d67047ea42c5482548ba7fa ([https://github.com/docker/cli/pull/6713](https://redirect.github.com/docker/cli/pull/6713)), which removed `%PROGRAMDATA%\Docker\cli-plugins` from the list of paths used for plugin-discovery on Windows. ### Workarounds None ### Resources - Pull request: "cli-plugins/manager: remove legacy system-wide cli-plugin path" ([https://github.com/docker/cli/pull/6713](https://redirect.github.com/docker/cli/pull/6713)) - Patch: https://github.com/docker/cli/commit/13759330b1f7e7cb0d67047ea42c5482548ba7fa.patch ### Credits Nitesh Surana (niteshsurana.com) of Trend Research of TrendAI --- ### Release Notes <details> <summary>docker/cli (github.com/docker/cli)</summary> ### [`v29.2.0+incompatible`](https://redirect.github.com/docker/cli/compare/v29.1.5...v29.2.0) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.1.5...v29.2.0) ### [`v29.1.5+incompatible`](https://redirect.github.com/docker/cli/compare/v29.1.4...v29.1.5) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.1.4...v29.1.5) ### [`v29.1.4+incompatible`](https://redirect.github.com/docker/cli/compare/v29.1.3...v29.1.4) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.1.3...v29.1.4) ### [`v29.1.3+incompatible`](https://redirect.github.com/docker/cli/compare/v29.1.2...v29.1.3) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.1.2...v29.1.3) ### [`v29.1.2+incompatible`](https://redirect.github.com/docker/cli/compare/v29.1.1...v29.1.2) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.1.1...v29.1.2) ### [`v29.1.1+incompatible`](https://redirect.github.com/docker/cli/compare/v29.1.0...v29.1.1) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.1.0...v29.1.1) ### [`v29.1.0+incompatible`](https://redirect.github.com/docker/cli/compare/v29.0.4...v29.1.0) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.0.4...v29.1.0) ### [`v29.0.4+incompatible`](https://redirect.github.com/docker/cli/compare/v29.0.3...v29.0.4) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.0.3...v29.0.4) ### [`v29.0.3+incompatible`](https://redirect.github.com/docker/cli/compare/v29.0.2...v29.0.3) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.0.2...v29.0.3) ### [`v29.0.2+incompatible`](https://redirect.github.com/docker/cli/compare/v29.0.1...v29.0.2) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.0.1...v29.0.2) ### [`v29.0.1+incompatible`](https://redirect.github.com/docker/cli/compare/v29.0.0...v29.0.1) [Compare Source](https://redirect.github.com/docker/cli/compare/v29.0.0...v29.0.1) ### [`v29.0.0+incompatible`](https://redirect.github.com/docker/cli/compare/v28.5.2...v29.0.0) [Compare Source](https://redirect.github.com/docker/cli/compare/v28.5.2...v29.0.0) ### [`v28.5.2+incompatible`](https://redirect.github.com/docker/cli/compare/v28.5.1...v28.5.2) [Compare Source](https://redirect.github.com/docker/cli/compare/v28.5.1...v28.5.2) ### [`v28.5.1+incompatible`](https://redirect.github.com/docker/cli/compare/v28.5.0...v28.5.1) [Compare Source](https://redirect.github.com/docker/cli/compare/v28.5.0...v28.5.1) ### [`v28.5.0+incompatible`](https://redirect.github.com/docker/cli/compare/v28.4.0...v28.5.0) [Compare Source](https://redirect.github.com/docker/cli/compare/v28.4.0...v28.5.0) ### [`v28.4.0+incompatible`](https://redirect.github.com/docker/cli/compare/v28.3.3...v28.4.0) [Compare Source](https://redirect.github.com/docker/cli/compare/v28.3.3...v28.4.0) ### [`v28.3.3+incompatible`](https://redirect.github.com/docker/cli/compare/v28.3.2...v28.3.3) [Compare Source](https://redirect.github.com/docker/cli/compare/v28.3.2...v28.3.3) ### [`v28.3.2+incompatible`](https://redirect.github.com/docker/cli/compare/v28.3.1...v28.3.2) [Compare Source](https://redirect.github.com/docker/cli/compare/v28.3.1...v28.3.2) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/k3d-io/k3d). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40OC4xIiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->