Commit Graph
4209 Commits
Author SHA1 Message Date
Tõnis TiigiandGitHub 5b40913913 Merge pull request #3832 from crazy-max/bake-policy-flag
bake: global policy evaluation options
2026-05-11 10:58:38 -07:00
Tõnis TiigiandGitHub 6bc1f63995 Merge pull request #3835 from crazy-max/dial-stdin-done-rm
commands: remove redundant stdinDone reset in dial-stdio
2026-05-11 10:53:34 -07:00
Tõnis TiigiandGitHub c0eb5f07b0 Merge pull request #3838 from tonistiigi/policy-progress-test-fix
policy: preserve late progress errors
2026-05-11 10:53:12 -07:00
CrazyMaxandGitHub 46f085352b Merge pull request #3837 from docker/dependabot/github_actions/actions/labeler-6.1.0
build(deps): bump actions/labeler from 6.0.1 to 6.1.0
2026-05-11 16:46:04 +02:00
CrazyMaxandGitHub 536b937b76 Merge pull request #3840 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.8.0
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.6.0 to 1.8.0
2026-05-11 16:44:02 +02:00
dependabot[bot]andGitHub f71547be9b build(deps): bump docker/github-builder/.github/workflows/bake.yml
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.6.0 to 1.8.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/7d2a02426d4b989616ba5aaee4e879afd4134b0d...c2782c55efa56a01b9c30021db8f5ec3993228a3)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-08 18:31:32 +00:00
Sebastiaan van Stijn 5378e2a2dd vendor: github.com/docker/docker-credential-helpers v0.9.7
no code-changes; only updates go version

full diff: https://github.com/docker/docker-credential-helpers/compare/v0.9.6...v0.9.7

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-05-08 14:54:48 +02:00
Tonis Tiigi 0c04ba8d36 policy: preserve late progress errors
Emit a final policy progress completion with the solve error even when the
inactivity window already completed the vertex.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-05-07 12:09:50 -07:00
dependabot[bot]andGitHub c5af7baf05 build(deps): bump actions/labeler from 6.0.1 to 6.1.0
Bumps [actions/labeler](https://github.com/actions/labeler) from 6.0.1 to 6.1.0.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](https://github.com/actions/labeler/compare/634933edcd8ababfe52f92936142cc22ac488b1b...f27b608878404679385c85cfa523b85ccb86e213)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-07 18:35:30 +00:00
CrazyMax da8fa45c1c bake: global policy evaluation options
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-07 11:11:59 +02:00
CrazyMax c29a51f33f commands: remove redundant stdinDone reset in dial-stdio
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-07 10:26:45 +02:00
Tõnis TiigiandGitHub 9392590cfa Merge pull request #3834 from tonistiigi/buildkit-v0.30.0-rc1
vendor: update buildkit to v0.30.0-rc1
2026-05-06 16:05:22 -07:00
Tonis Tiigi a3147eba54 vendor: update buildkit to v0.30.0-rc1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-05-06 15:06:54 -07:00
Tõnis TiigiandGitHub 0439d7fe8e Merge pull request #3790 from crazy-max/dial-stop
commands: stop dial-stdio when the builder connection closes
2026-05-06 12:58:41 -07:00
CrazyMax 4c6d9c0b7f commands: stop dial-stdio when the builder connection closes
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-06 19:10:43 +02:00
CrazyMaxandGitHub 8e6656fa65 Merge pull request #3830 from lemeurherve/patch-1
Update Windows CLI plugins path in README
2026-05-05 09:04:07 +02:00
CrazyMaxandGitHub cb797d4791 Merge pull request #3831 from docker/dependabot/github_actions/github/codeql-action-4.35.3
build(deps): bump github/codeql-action from 4.35.2 to 4.35.3
2026-05-05 09:03:12 +02:00
CrazyMaxandGitHub e935dcf1c7 Merge pull request #3823 from invidian/fix-result-error-handling
Fix panic in buildx debug when solving fails
2026-05-05 09:02:44 +02:00
dependabot[bot]andGitHub 38d4bb2277 build(deps): bump github/codeql-action from 4.35.2 to 4.35.3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.35.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/95e58e9a2cdfd71adc6e0353d5c52f41a045d225...e46ed2cbd01164d986452f91f178727624ae40d7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-04 22:57:41 +00:00
Tõnis TiigiandGitHub 269ff5b088 Merge pull request #3829 from crazy-max/update-test-matrix
ci: update buildkit version matrix
2026-05-04 09:46:33 -07:00
Tõnis TiigiandGitHub f129f64dc2 Merge pull request #3828 from crazy-max/area-policy-label
chore: labeler for area/policy
2026-05-04 09:46:07 -07:00
Hervé Le MeurandHervé Le Meur cfbb132f41 Update Windows CLI plugins path in README
Clarify the location for Docker CLI plugins on Windows since `C:\ProgramData` isn't checked anymore.

Refs:
- https://docs.docker.com/engine/release-notes/29/#deprecations-1
- https://github.com/docker/cli/pull/6713

Signed-off-by: Hervé Le Meur <lemeurherve.jenkins@gmail.com>
2026-05-04 18:27:49 +02:00
CrazyMaxandMateusz Gozdek 9de08b24ff tests: cover debug build missing mount result IDs
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-04 15:49:46 +02:00
Mateusz Gozdek 142cd448de Fix panic in buildx debug when solving fails
Closes #3822

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
2026-05-04 15:49:45 +02:00
CrazyMax d9a4e836f7 ci: update buildkit version matrix
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-04 13:19:50 +02:00
CrazyMaxandGitHub 909fc0d892 Merge pull request #3825 from thaJeztah/noregexp
util/ocilayout: replace regex for matching windows drive-letters
2026-05-04 12:33:54 +02:00
CrazyMax 3b851d7e24 chore: labeler for area/policy
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-05-04 12:30:41 +02:00
Sebastiaan van Stijn a3512c1cfa util/ocilayout: replace regex for matching windows drive-letters
follow-up to bf34a4cbed, which changed the
isWindowsDrivePath function to use a regex for matching the trailing slash.

This reverts it back to te previous implementation to avoid a regex, but
adds a check for the colon to be followed by a forward-slash, which is
faster, and avoids the overhead of `regex.MustCompile` during init.

    BenchmarkRegex-11    39056917      32.45 ns/op     0 B/op    0 allocs/op
    BenchmarkManual-11   1000000000     0.2476 ns/op   0 B/op    0 allocs/op

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-05-04 12:07:18 +02:00
Tõnis TiigiandGitHub f1b60d2003 Merge pull request #3820 from crazy-max/ocilayout-fix-winpath-detection
ocilayout: narrow Windows drive path detection
2026-04-27 14:15:09 +02:00
CrazyMax bf34a4cbed ocilayout: narrow Windows drive path detection
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-27 10:19:01 +02:00
Tõnis TiigiandGitHub 14ef96b3b5 Merge pull request #3807 from tonistiigi/buildx-default-policy
policy: add builtin default source policy
2026-04-24 12:23:25 -07:00
Tõnis TiigiandGitHub c960e4a8b2 Merge pull request #3811 from crazy-max/fix-oci-layout
build: fix oci-layout named context serialization
2026-04-24 12:23:10 -07:00
Tõnis TiigiandGitHub f9c1a46250 Merge pull request #3817 from crazy-max/rm-reject-context
rm: reject context builders before loading nodes
2026-04-24 09:21:10 -07:00
CrazyMax 2574d4c0d0 rm: reject context builders before loading nodes
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-24 17:27:57 +02:00
CrazyMaxandGitHub 82183e2322 Merge pull request #3814 from docker/dependabot/github_actions/crazy-max-dot-github-6f136b1f9e
build(deps): bump the crazy-max-dot-github group with 2 updates
2026-04-23 14:07:02 +02:00
CrazyMax dcf533e756 build: fix oci-layout named context serialization
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-23 12:26:02 +02:00
dependabot[bot]andGitHub 79d2d6234d build(deps): bump the crazy-max-dot-github group with 2 updates
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-23 10:16:22 +00:00
CrazyMaxandGitHub 034ebc7687 Merge pull request #3816 from docker/dependabot/github_actions/crazy-max/dot-github-1.7.1
build(deps): bump crazy-max/.github from 1.6.0 to 1.7.1
2026-04-23 12:15:07 +02:00
dependabot[bot]andGitHub 365515c8fc build(deps): bump crazy-max/.github from 1.6.0 to 1.7.1
Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from 1.6.0 to 1.7.1.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16)

---
updated-dependencies:
- dependency-name: crazy-max/.github
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-23 09:57:33 +00:00
CrazyMaxandGitHub e732e8a33a Merge pull request #3777 from thaJeztah/no_jsonmessage
driver/docker-container: remove uses of jsonmessage
2026-04-22 11:53:22 +02:00
CrazyMax 2d58ee6f98 ocilayout: handle Windows paths in local OCI layout refs
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-22 11:38:34 +02:00
Sebastiaan van Stijn 76ba2fac5c driver/docker-container: remove uses of jsonmessage
This function was always using `io.Discard` for printing the progress,
so we can use the `Wait()` method, which reads the stream, returning
any error (similar to jsonmessage.DisplayJSONMessagesStream), and
closes the stream either if the context is cancelled, or if the
stream ends.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-21 13:35:39 +02:00
CrazyMaxandGitHub 872d8e5e58 Merge pull request #3806 from thaJeztah/bump_moby
vendor: github.com/docker/cli v29.4.1
2026-04-21 13:10:12 +02:00
Sebastiaan van Stijn d45c770d5e vendor: github.com/docker/cli v29.4.1
full diff: https://github.com/docker/cli/compare/v29.4.0...v29.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn 650f72ca74 vendor: github.com/mattn/go-runewidth v0.0.23
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.22...v0.0.23

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn a2e6003124 vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2
- https://github.com/moby/moby/compare/api/v1.54.1...api/v1.54.2
- https://github.com/moby/moby/compare/client/v0.4.0...client/v0.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-21 12:16:59 +02:00
Sebastiaan van Stijn 478d9b19a2 vendor: github.com/docker/go-connections v0.7.0
full diff: https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-21 12:16:59 +02:00
CrazyMaxandGitHub 8c1c3e4d7f Merge pull request #3808 from crazy-max/update-k8s
vendor: k8s v0.35.4
2026-04-21 12:03:05 +02:00
CrazyMax b7061891c5 vendor: k8s v0.35.4
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-21 11:18:40 +02:00
Tonis Tiigi 0491d7c7b9 policy: add default policy for buildkit-syft-scanner images
Extends the builtin default policy to verify docker-github-builder
signatures on docker/buildkit-syft-scanner images. Tags `latest` and
1.10+ require a signature from the docker/buildkit-syft-scanner source
repository; older tags pass through unchanged. Factors the shared ref
matching logic into sig_ref_matches for dockerfile and introduces a
syft-scanner variant that uses the plain refs/tags/ prefix.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-04-20 16:46:05 -07:00