docker_28: 28.3.2 -> 28.3.3, docker_25: 25.0.11 -> 25.0.12

[teutat3s]

Closes #429361.

docker_25 changelog / milestone:
moby/moby@v25.0.11...v25.0.12
https://github.com/moby/moby/milestone/203?closed=1

Upstream did not tag a new release for docker/cli, and there are no new
commits in the 25.0 branch:
docker/cli@43987fc...25.0

docker_28 changelog / milestones:
moby/moby@v28.3.2...v28.3.3
docker/cli@v28.3.2...v28.3.3

https://github.com/moby/moby/milestone/206?closed=1
https://github.com/docker/cli/milestone/150?closed=1

Things done

• Built on platform:
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• Tested, as applicable:
  • NixOS tests in nixos/tests.
  • Package tests at passthru.tests.
  • Tests in lib/tests or pkgs/test for functions and "core" functionality.
• Ran nixpkgs-review on this PR. See nixpkgs-review usage.
• Tested basic functionality of all binary files, usually in ./result/bin/.
• Nixpkgs Release Notes
  • Package update: when the change is major or breaking.
• NixOS Release Notes
  • Module addition: when adding a new NixOS module.
  • Module update: when the change is significant.
• Fits CONTRIBUTING.md, pkgs/README.md, maintainers/README.md and other READMEs.

---

Add a 👍 reaction to pull requests you find important.

[sentientmonkey]

@teutat3s would it also be possible to bump contiainerd to v1.7.28 as well in this PR? There are a number of go library updates there including golang.org/x/crypto that fix additional CVEs.

I can also make a new PR as well if it can't go in this one.

[teutat3s]

@sentientmonkey We usually stick to the versions used by upstream, which is still on v1.7.27:
https://github.com/moby/moby/tree/v28.3.3/hack/dockerfile/install/
IMO the correct place to bump this dependency would be in the upstream project.

[nixpkgs-ci]

Successfully created backport PR for release-25.05:

• [Backport release-25.05] docker_28: 28.3.2 -> 28.3.3, docker_25: 25.0.11 -> 25.0.12 #430965