chore(deps): bump github.com/docker/docker from 28.0.0+incompatible to 28.0.1+incompatible (#192)

Bumps [github.com/docker/docker](https://github.com/docker/docker) from
28.0.0+incompatible to 28.0.1+incompatible.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/docker/releases">github.com/docker/docker's
releases</a>.</em></p>
<blockquote>
<h2>v28.0.1</h2>
<h1>28.0.1</h1>
<p>For a full list of pull requests and changes in this release, refer
to the relevant GitHub milestones:</p>
<ul>
<li><a
href="https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.0.1">docker/cli,
28.0.1 milestone</a></li>
<li><a
href="https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.0.1">moby/moby,
28.0.1 milestone</a></li>
</ul>
<h2>Networking</h2>
<ul>
<li>Remove dependency on kernel modules <code>ip_set</code>,
<code>ip_set_hash_net</code> and <code>netfilter_xt_set</code>.
<ul>
<li>The dependency was introduced in release 28.0.0 but proved too
disruptive. The iptables rules using these modules have been replaced.
<a
href="https://github.com/moby/moby/pull/49530">moby/moby#49530</a></li>
</ul>
</li>
<li>Allow daemon startup on a host with IPv6 disabled without requiring
<code>--ip6tables=false</code>. <a
href="https://github.com/moby/moby/pull/49525">moby/moby#49525</a></li>
<li>Fix a bug that was causing containers with
<code>--restart=always</code> and a published port already in use to
restart in a tight loop. <a
href="https://github.com/moby/moby/pull/49507">moby/moby#49507</a></li>
<li>Fix an issue with Swarm ingress, caused by incorrect ordering of
iptables rules. <a
href="https://github.com/moby/moby/pull/49538">moby/moby#49538</a></li>
<li>Fix creation of a swarm-scoped network from a
<code>--config-only</code> network. <a
href="https://github.com/moby/moby/pull/49521">moby/moby#49521</a></li>
<li>Fix <code>docker network inspect</code> reporting an IPv6 gateway
with CIDR suffix for a newly created network with no specific IPAM
config, until a daemon restart. <a
href="https://github.com/moby/moby/pull/49520">moby/moby#49520</a></li>
<li>Improve the error reported when kernel modules <code>ip_set</code>,
<code>ip_set_hash_net</code> and <code>netilter_xt_set</code> are not
available. <a
href="https://github.com/moby/moby/pull/49524">moby/moby#49524</a></li>
<li>Move most of Docker's iptables rules out of the filter-FORWARD
chain, so that other applications are free to append rules that must
follow Docker's rules. <a
href="https://github.com/moby/moby/pull/49518">moby/moby#49518</a></li>
<li>Update <code>--help</code> output and man page lo state which
options only apply to the default bridge network. <a
href="https://github.com/moby/moby/pull/49522">moby/moby#49522</a></li>
</ul>
<h2>Bug fixes and enhancements</h2>
<ul>
<li>Fix <code>docker context create</code> always returning an error
when using the <code>&quot;skip-tls-verify&quot;</code> option. <a
href="https://github.com/docker/cli/pull/5850">docker/cli#5850</a></li>
<li>Fix shell completion suggesting IDs instead of names for services
and nodes. <a
href="https://github.com/docker/cli/pull/5848">docker/cli#5848</a></li>
<li>Fix unintentionally printing exit status to standard error output
when <code>docker exec/run</code> returns a non-zero status. <a
href="https://github.com/docker/cli/pull/5854">docker/cli#5854</a></li>
<li>Fix regression <code>protocol &quot;tcp&quot; is not supported by
the RootlessKit port driver &quot;slirp4netns&quot;</code>. <a
href="https://github.com/moby/moby/pull/49514">moby/moby#49514</a></li>
<li>containerd image store: Fix <code>docker inspect</code> not being
able to show multi-platform images with missing layers for all
platforms. <a
href="https://github.com/moby/moby/pull/49533">moby/moby#49533</a></li>
<li>containerd image store: Fix <code>docker images --tree</code>
reporting wrong content size. <a
href="https://github.com/moby/moby/pull/49535">moby/moby#49535</a></li>
<li>Fix compilation on i386 <a
href="https://github.com/moby/moby/pull/49526">moby/moby#49526</a></li>
</ul>
<h2>Packaging updates</h2>
<ul>
<li>Update <code>github.com/go-jose/go-jose/v4</code> to v4.0.5 to
address. <a
href="https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78">GHSA-c6gw-w398-hv78</a>
/ <a
href="https://www.cve.org/CVERecord?id=CVE-2025-27144">CVE-2025-27144</a>
<a
href="https://github.com/docker/cli/pull/5867">docker/cli#5867</a></li>
<li>Update Buildx to <a
href="https://github.com/docker/buildx/releases/tag/v0.21.1">v0.21.1</a>.
<a
href="https://github.com/docker/docker-ce-packaging/pull/1167">docker/docker-ce-packaging#1167</a></li>
<li>Update Compose to <a
href="https://github.com/docker/compose/releases/tag/v2.33.1">v2.33.1</a>.
<a
href="https://github.com/docker/docker-ce-packaging/pull/1168">docker/docker-ce-packaging#1168</a></li>
</ul>
<h2>API</h2>
<ul>
<li>containerd image store: Fix <code>GET
/images/json?manifests=1</code> not filling <code>Manifests</code> for
index-only images. <a
href="https://github.com/moby/moby/pull/49533">moby/moby#49533</a></li>
<li>containerd image store: Fix <code>GET /images/json and
/images/&lt;name&gt;/json</code> <code>Size.Content</code> field
including the size of content that's not available locally. <a
href="https://github.com/moby/moby/pull/49535">moby/moby#49535</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/moby/moby/commit/bbd0a17ccc67e48d4a69393287b7fcc4f0578683"><code>bbd0a17</code></a>
Merge pull request <a
href="https://github.com/docker/docker/issues/49538">#49538</a>
from robmry/docker_ingress</li>
<li><a
href="https://github.com/moby/moby/commit/8ae4858af49bab0bfa7de29f1144359a5ef652c9"><code>8ae4858</code></a>
Merge pull request <a
href="https://github.com/docker/docker/issues/49545">#49545</a>
from robmry/revert_check-config_ipset</li>
<li><a
href="https://github.com/moby/moby/commit/18143632f7e496b3d70b8ba492035bba68148512"><code>1814363</code></a>
Revert &quot;contrib/check-config: add ipset related flags&quot;</li>
<li><a
href="https://github.com/moby/moby/commit/558da63444c8de0092c97b6def6214d1a0161493"><code>558da63</code></a>
Jump to DOCKER-INGRESS from DOCKER-FORWARD</li>
<li><a
href="https://github.com/moby/moby/commit/f92fdfecbf2204cc9684238228d0ea9172312001"><code>f92fdfe</code></a>
Merge pull request <a
href="https://github.com/docker/docker/issues/49530">#49530</a>
from robmry/disable_ip_set</li>
<li><a
href="https://github.com/moby/moby/commit/88bc9a3d0f4fdb5a6be1e9d4fc2d1f212d03a021"><code>88bc9a3</code></a>
Merge pull request <a
href="https://github.com/docker/docker/issues/49535">#49535</a>
from vvoland/c8d-fixcontentsize</li>
<li><a
href="https://github.com/moby/moby/commit/76417bf7630e943a84406c99e87cd09ab53f1923"><code>76417bf</code></a>
Don't use ipset</li>
<li><a
href="https://github.com/moby/moby/commit/c35159ed7dde6ea37b9ccf27ffe0e6495bb47161"><code>c35159e</code></a>
c8d/manifests: Fix Content size including missing content</li>
<li><a
href="https://github.com/moby/moby/commit/05104991bce6ad914153618952c0e201b2fbb903"><code>0510499</code></a>
Merge pull request <a
href="https://github.com/docker/docker/issues/49533">#49533</a>
from vvoland/c8d-inspectlist-indeximg</li>
<li><a
href="https://github.com/moby/moby/commit/0274c630c9085a49993711bc26a58952a8de8c42"><code>0274c63</code></a>
Merge pull request <a
href="https://github.com/docker/docker/issues/49518">#49518</a>
from robmry/docker_forward_chain</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/docker/compare/v28.0.0...v28.0.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/docker&package-manager=go_modules&previous-version=28.0.0+incompatible&new-version=28.0.1+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -5,7 +5,7 @@ go 1.22.8
 require (
 	cdr.dev/slog v1.6.2-0.20241112041820-0ec81e6e67bb
 	github.com/coder/coder/v2 v2.19.0
-	github.com/docker/docker v28.0.0+incompatible
+	github.com/docker/docker v28.0.1+incompatible
 	github.com/docker/go-connections v0.5.0
 	github.com/google/uuid v1.6.0
 	github.com/hashicorp/terraform-plugin-docs v0.21.0

go.sum

@@ -120,8 +120,8 @@ github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13 h1:fAjc9m62+UWV/WA
 github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13/go.mod h1:SqUrOPUnsFjfmXRMNPybcSiG0BgUW2AuFH8PAnS2iTw=
 github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk=
 github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
-github.com/docker/docker v28.0.0+incompatible h1:Olh0KS820sJ7nPsBKChVhk5pzqcwDR15fumfAd/p9hM=
-github.com/docker/docker v28.0.0+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
+github.com/docker/docker v28.0.1+incompatible h1:FCHjSRdXhNRFjlHMTv4jUNlIBbTeRjrWfeFuJp7jpo0=
+github.com/docker/docker v28.0.1+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/go-connections v0.5.0 h1:USnMq7hx7gwdVZq1L49hLXaFtUdTADjXGp+uj1Br63c=
 github.com/docker/go-connections v0.5.0/go.mod h1:ov60Kzw0kKElRwhNs9UlUHAE/F9Fe6GLaXnqyDdmEXc=
 github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=