chore(deps): update dependency docker-compose to v2.40.3

[renovate]

This PR contains the following updates:

Package	Update	Change
docker-compose	minor	2.39.4 -> 2.40.3
docker/compose	minor	v2.39.4 -> v2.40.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

docker/compose (docker-compose)

v2.40.3

Compare Source

What's Changed

🐛 Fixes

• Fix OCI compose override support by @​ndeloof #​13311
• Fix help output for "exec --no-tty" option by @​tonyo #​13314
• Prompt default implementation to prevent a panic by @​ndeloof #​13317
• Run hooks on restart by @​ndeloof #​13321
• Fix(run): Ensure images exist only for the target service in run command by @​idsulik #​13325
• Fix(git): Fix path traversal vulnerability in git remote loader by @​idsulik #​13331

🔧 Internal

• Test to check writeComposeFile detects invalid OCI artifact by @​ndeloof #​13309
• Code Cleanup by @​ndeloof #​13315

⚙️ Dependencies

• Bump compose-go to version v2.9.1 by @​glours #​13332

Full Changelog: docker/compose@v2.40.2...v2.40.3

v2.40.2

Compare Source

What's Changed

🐛 Fixes

• Compose can't create a tar with adequate uid:gid ownership by @​ndeloof in #​13299
• Test digest or canonical reference, not only tag, when checking if an image is already present by @​glours in #​13302

🔧 Internal

• Fail build if minimal required version of buildx isn't installed by @​ndeloof in #​13295
• remove unused code to only rely on api.Service by @​ndeloof in #​13300
• Introduce WithPrompt to configure compose backend to use a plugable UI component for user interaction by @​ndeloof in #​13308

Full Changelog: docker/compose@v2.40.1...v2.40.2

v2.40.1

Compare Source

What's Changed

🐛 Fixes

• Write error to watcher error channel if Start() fails by @​Trolldemorted in #​13263
• Fix: set PWD only if not set by @​kianelbo in #​13268
• bake only interpolates ${*} by @​ndeloof in #​13270
• Fix: make "publish" push all compose files addressed in "extends" statements when using "profiles". by @​ogoulpeau-ledger in #​13277
• Support Ctrl+Z to run compose in background by @​ndeloof in #​13289
• Fix race-condition bug in publish command by @​paul-kinexon in #​13291
• Set secret/config uid:gid to match container's USER by @​ndeloof in #​13288
• Fix failure to delegate build with bake by @​ndeloof in #​13275
• Make CTRL+Z a no-op operation on Windows by @​glours in #​13293

🔧 Internal

• pkg/compose: align classic builder implementation with docker/cli by @​thaJeztah in #​13278
• pkg/compose: build with bake: drop support for buildx v0.16 and lower by @​thaJeztah in #​13280
• Use fixed version of compose bridge transformer images by @​glours in #​13284

⚙️ Dependencies

• Build(deps): bump github.com/docker/docker from 28.5.0+incompatible to 28.5.1+incompatible by @​dependabot[bot] in #​13274
• Build(deps): bump github.com/docker/cli from 28.5.0+incompatible to 28.5.1+incompatible by @​dependabot[bot] in #​13273
• Build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by @​dependabot[bot] in #​13272
• Build(deps): bump docker/buildx v0.29.1, moby/buildkit v0.25.1 by @​thaJeztah in #​13279
• Bump golang to version 1.24.9 by @​glours in #​13285

New Contributors

• @​Trolldemorted made their first contribution in #​13263
• @​ogoulpeau-ledger made their first contribution in #​13277
• @​paul-kinexon made their first contribution in #​13291

Full Changelog: docker/compose@v2.40.0...v2.40.1

v2.40.0

Compare Source

What's Changed

✨ Improvements

• publish Compose application as compose.yaml + images by @​ndeloof in #​13257

🐛 Fixes

• resolve secrets based on env var before executing bake by @​ndeloof in #​13237
• pass bake secrets by env by @​ndeloof in #​13249
• escape $ in bake.json as interpolation already has been managed by cpmpose by @​ndeloof in #​13259

🔧 Internal

• pkg/compose: remove uses of deprecated mitchellh/mapstructure module by @​thaJeztah in #​13239
• pkg/watch: remove unused IsWindowsShortReadError by @​thaJeztah in #​13052
• pkg/compose: build: remove permissions warning on Windows by @​thaJeztah in #​13236
• pluginMain: remove uses of DockerCLI.Apply by @​thaJeztah in #​13240
• use containerd registry client by @​ndeloof in #​13245
• provider services: use '--project-name=' notation by @​glours in #​13250
• gha: update test-matrix: remove docker 26.x by @​thaJeztah in #​13254
• pkg/compose: explicitly map AuthConfig fields instead of a direct cast by @​thaJeztah in #​13253
• cmd/compose: fix minor linting issues by @​thaJeztah in #​13252
• use containerd client for OCI operations by @​ndeloof in #​13251

⚙️ Dependencies

• build(deps): bump github.com/docker/docker, docker/cli v28.5.0-rc.1 by @​thaJeztah in #​13241
• build(deps): bump github.com/docker/docker from 28.5.0-rc.1+incompatible to 28.5.0+incompatible by @​dependabot[bot] in #​13260
• build(deps): bump github.com/docker/cli from 28.5.0-rc.1+incompatible to 28.5.0+incompatible by @​dependabot[bot] in #​13261

Full Changelog: docker/compose@v2.39.4...v2.40.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.