Fix CVE-2025-54410: Upgrade docker/docker to v28.0.0 (microsoft#617)

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: dlevy-msft-sql <194277063+dlevy-msft-sql@users.noreply.github.com>

Author: Copilot

go.mod

@@ -8,7 +8,7 @@ require (
 	github.com/alecthomas/chroma/v2 v2.5.0
 	github.com/billgraziano/dpapi v0.4.0
 	github.com/docker/distribution v2.8.2+incompatible
-	github.com/docker/docker v27.3.1+incompatible
+	github.com/docker/docker v28.0.0+incompatible
 	github.com/docker/go-connections v0.4.0
 	github.com/golang-sql/sqlexp v0.1.0
 	github.com/google/uuid v1.6.0

go.sum

@@ -102,8 +102,8 @@ github.com/dlclark/regexp2 v1.4.0 h1:F1rxgk7p4uKjwIQxBs9oAXe5CqrXlCduYEJvrF4u93E
 github.com/dlclark/regexp2 v1.4.0/go.mod h1:2pZnwuY/m+8K6iRw6wQdMtk+rH5tNGR1i55kozfMjCc=
 github.com/docker/distribution v2.8.2+incompatible h1:T3de5rq0dB1j30rp0sA2rER+m322EBzniBPB6ZIzuh8=
 github.com/docker/distribution v2.8.2+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
-github.com/docker/docker v27.3.1+incompatible h1:KttF0XoteNTicmUtBO0L2tP+J7FGRFTjaEF4k6WdhfI=
-github.com/docker/docker v27.3.1+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
+github.com/docker/docker v28.0.0+incompatible h1:Olh0KS820sJ7nPsBKChVhk5pzqcwDR15fumfAd/p9hM=
+github.com/docker/docker v28.0.0+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=
 github.com/docker/go-connections v0.4.0/go.mod h1:Gbd7IOopHjR8Iph03tsViu4nIes5XhDvyHbTtUxmeec=
 github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQV8=

internal/container/controller.go

@@ -12,7 +12,6 @@ import (
 	"strconv"
 	"strings"
 
-	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/container"
 	"github.com/docker/docker/api/types/filters"
 	"github.com/docker/docker/api/types/image"
@@ -202,7 +201,7 @@ func (c Controller) ContainerFiles(id string, filespec string) (files []string)
 	response, err := c.cli.ContainerExecCreate(
 		context.Background(),
 		id,
-		types.ExecConfig{
+		container.ExecOptions{
 			AttachStderr: false,
 			AttachStdout: true,
 			Cmd:          cmd,
@@ -213,7 +212,7 @@ func (c Controller) ContainerFiles(id string, filespec string) (files []string)
 	r, err := c.cli.ContainerExecAttach(
 		context.Background(),
 		response.ID,
-		types.ExecStartCheck{},
+		container.ExecStartOptions{},
 	)
 	checkErr(err)
 	defer r.Close()
@@ -269,7 +268,7 @@ func (c Controller) runCmdInContainer(id string, cmd []string) ([]byte, []byte)
 	response, err := c.cli.ContainerExecCreate(
 		context.Background(),
 		id,
-		types.ExecConfig{
+		container.ExecOptions{
 			AttachStderr: true,
 			AttachStdout: true,
 			Cmd:          cmd,
@@ -280,7 +279,7 @@ func (c Controller) runCmdInContainer(id string, cmd []string) ([]byte, []byte)
 	r, err := c.cli.ContainerExecAttach(
 		context.Background(),
 		response.ID,
-		types.ExecStartCheck{},
+		container.ExecStartOptions{},
 	)
 	checkErr(err)
 	defer r.Close()