# To dos
~- Evaluate _index pages and standardize across account + admins
category~
~- Edit weights of topics~
- Notify TSEs, other stakeholders
- TW sign off
## Summary
This PR restructures the Platform documentation into a clearer Accounts,
Security, and Subscription and billing information architecture, with
aliases so existing URLs keep working.
Work from these PRs was merged into this feature branch:
- #25957 (Security IA)
- #25960 (Accounts and Admin)
- #25981 (Subscription and billing)
### Accounts
- Moves organization, company, and admin content under Accounts.
- Splits individual-account docs into their own subsection.
- Removes the standalone Admin section; those pages now live under
Accounts.
### Security
- Publishes Security at `/security/`, matching other Platform sections.
- Groups authentication (SSO, 2FA, OIDC), access tokens, provisioning,
and roles under Security.
- Leaves Enterprise Hardened Desktop and related enterprise security
docs under Enterprise.
- Restores shipped Hardened Desktop and security FAQ URLs so they match
`main`.
### Subscription and billing
- Merges Subscription and Billing into a single Subscription and billing
section.
- Drops the extra subcategory wrappers and nests billing tasks under
Manage.
- Shortens the billing details sidebar label.
### FAQs
- Consolidates Platform FAQs onto four pages: Accounts, Security,
Subscription and billing, and Platform.
- Folds leftover general, container, and network/VM security FAQs into
Platform FAQs.
- Folds SSO enforcement FAQs into the SSO FAQ.
- Templates FAQ pages with H2 topics and H3 questions, and limits the
table of contents to H2.
### Navigation and follow-ups
- Renames the manuals sidebar group from Platform to Accounts and admin,
and updates the manuals landing heading and copy to match.
- Fixes the MSI install Settings Management link after the security path
move.
- Updates CODEOWNERS, the labeler, and in-repo links to the new paths.
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
Signed-off-by: aevesdocker <allie.sadler@docker.com>
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
Signed-off-by: aevesdocker <allie.sadler@docker.com>
## Summary
Fix misleading descriptions, stale tense, and contradictory statements
across admin, security, SSO, MCP profiles, and subscription scaling
documentation.
Closes#24893Closes#24894Closes#25024Closes#25058Closes#25261Closes#25300
Generated by Cursor (Claude)
Made with [Cursor](https://cursor.com)
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
## Summary
Adds Security subsections to Docker Desktop 4.68.0 and 4.71.0 release
notes and corresponding entries in the security announcements page for
two Docker Model Runner container-to-host code execution issues that
have already shipped fixes.
- **CVE-2026-5817** — Docker Model Runner vllm-metal trust_remote_code
RCE (fixed in DD 4.68.0, April 7)
- **CVE-2026-5843** — Docker Model Runner MLX-LM model_file importlib
RCE (fixed in DD 4.71.0, April 27)
Mirrors the style of #24565 and #24207. Both fixed releases are already
live, so this back-fills the Security sections required to reference
from the corresponding CVE records.
## Test plan
- [ ] Verify Security subsection renders under DD 4.71.0 with link to
CVE-2026-5843
- [ ] Verify Security subsection renders under DD 4.68.0 with link to
CVE-2026-5817
- [ ] Verify two new entries appear at top of security-announcements.md
- [ ] Confirm CVE.org links resolve (currently will show RESERVED until
CVE records are published)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Replaces @material-symbols/svg-400 (5.5 MB) with heroicons (488 KB) — an
11x reduction in icon asset size. Heroicons uses a single consistent
distribution format (24px solid SVGs, fill="currentColor") eliminating
the need for the separate utils/svg.html partial, the icon-svg-stroke CSS
utility, and the dual-path resolution logic in icon.html.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
PR to capture work:
- Update / simplify titles to match docs
- Create subcategories within org/company
- Wrestle with redirect nightmare part 2
Filing a follow up PR to create parallel structure in the `Company`
subcategory. This PR's scope is for `Organization` only.
Remove "on the roadmap" and "currently" from the extension security
vetting FAQ entry, keeping a timeless factual statement per STYLE.md
conventions.
Fixes#24490
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
As per title, add security note. Once approved, the CVE details will be
published.
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
---------
Co-authored-by: Allie Sadler <102604716+aevesdocker@users.noreply.github.com>
Update security notes to reference CVE-2025-13743
https://www.cve.org/CVERecord?id=CVE-2025-13743
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
## Description
Noticed that the date for the 4.44.3 Desktop release was incorrect and
corrected it.
Signed-off-by: Chris Crone <christopher.crone@docker.com>
Do not merge, we need to configure some behavior rules in CloudFront
## Description
Adds an RSS feed subscription option to the security announcements page.
We can reuse this shortcode for other release notes or announcements
pages if we want!
## Related issues or tickets
https://docker.atlassian.net/browse/ENGDOCS-2939
## Reviews
- [ ] Editorial review
- relates to https://github.com/docker/docs/pull/23230
- fixes https://github.com/docker/docs/issues/23298
The old page was removed in f77ddf3728,
but didn't add a redirect.
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
<!--Delete sections as needed -->
## Description
Final freshness updates for Security and Subscription pages. Apologies
ahead of time, it is a lot of file updates :')
Updates include:
- Major overhaul of ECI content (this could use the most review)
- Fine tuning of the rest of the docs in these sections (includes
consistency with headings/formatting, page structure, fixing passive
voice, simplifying)
- Deleted all content shortcodes 🥳
_Vale errors can mostly be ignored unless you see something glaringly
wrong. I addressed all the typo/spelling ones, and added some terms to
accept.txt_
## Related issues or tickets
https://docker.atlassian.net/browse/ENGDOCS-2918
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
---------
Co-authored-by: Craig Osterhout <103533812+craig-osterhout@users.noreply.github.com>
Exclude extra release notes from Spelling/Term checks.
Exclude `<a>` from checks.
Add new terms and fix some double space errors.
- Before: 2691
- After: 967
<!--Delete sections as needed -->
## Description
As per https://docker.atlassian.net/browse/ENGDOCS-2836
Next up:
- tidy up/ split the security FAQs
- move the 'for developers' content up one level
- beef up the Deploy DD page
- AOB
(didn't want to include in this PR as it's already too long)
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
## Description
- Moved domain audit under "domain management" since the UI has changed,
it will no longer be deprecated, and it makes sense in the context of
other domain management features
## Related issues or tickets
https://docker.atlassian.net/browse/ENGDOCS-2830
## Reviews
- [ ] Editorial review
---------
Co-authored-by: Craig Osterhout <103533812+craig-osterhout@users.noreply.github.com>
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
## Description
- The Admin Console has a new navigation, starting w/ Docker Home >
Admin Console > expanded side nav
- Updates UI steps across docs site for Admin Console updates
- Also removes Domain audit docs, this section of the Admin Console/Hub
has been deprecated and replaced with Domain management
## Related issues or tickets
https://docker.atlassian.net/browse/ENGDOCS-2746
## Reviews
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
Relates to this code changes in
https://github.com/docker/pinata/pull/34220 and
https://github.com/docker/pinata/pull/34955. This PR updates the docs to
reflect the new behaviour.
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [X] Technical review
- [X] Editorial review
- [ ] Product review
