Tonis Tiigi
af83612e3f
vendor: update buildkit to v0.31.0
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-17 11:51:42 -07:00
Sebastiaan van Stijn
8b1d06a0ec
policy: remove uses of deprecated WithBuiltins
...
The WithBuiltins method was deprecated in opa v0.23.0 ([opa@afc8c5e]) in
favor of WithCapabilities, but the deprecation didn't use the standard
format, causing it not being detected as deprecated. OPA v1.1.0 corrected
the deprecation in [opa@622434d].
This patch replaces uses of the deprecated functions.
[opa@afc8c5e]: https://github.com/open-policy-agent/opa/commit/afc8c5e2a22878086067821f24e15d060594227a
[opa@622434d]: https://github.com/open-policy-agent/opa/commit/622434d11386c7b12aee703d7c1eedea34a27c7b
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-16 15:11:37 +02:00
Tõnis Tiigi and GitHub
230fb952bb
Merge pull request #3908 from thaJeztah/align_otel_exporters
...
vendor: go.opentelemetry.io/otel/exporters v1.44.0
2026-06-15 10:52:11 -07:00
Sebastiaan van Stijn
68fd340247
vendor: go.opentelemetry.io/otel/exporters v1.44.0
...
removes the semconv v1.40.0 dependency
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-06-15 14:13:52 +02:00
Tõnis Tiigi and GitHub
b4b3437a30
Merge pull request #3898 from crazy-max/compose-go-2.11.0
...
vendor: update compose-go to v2.11.0
2026-06-12 15:40:38 -07:00
CrazyMax and GitHub
51b977c3ae
Merge pull request #3904 from crazy-max/dockerfile-buildkit-0.31.0-rc2
...
dockerfile: update buildkit to v0.31.0-rc2
2026-06-12 15:29:05 +02:00
CrazyMax
c1ea48adc6
dockerfile: update buildkit to v0.31.0-rc2
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-06-12 14:54:24 +02:00
CrazyMax and GitHub
73e56595aa
Merge pull request #3903 from crazy-max/buildkit-0.31.0-rc2
...
vendor: update buildkit to v0.31.0-rc2
2026-06-12 14:02:55 +02:00
CrazyMax
268dcf5917
vendor: update buildkit to v0.31.0-rc2
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-06-12 13:46:40 +02:00
CrazyMax and GitHub
d1c298cd85
Merge pull request #3899 from crazy-max/remove-bake-path-shim
...
bake: remove stale path evaluation shim
2026-06-12 10:51:41 +02:00
CrazyMax and GitHub
edb063cb21
Merge pull request #3900 from jirimoravcik/fix/minor-resource-limits-adjustments
...
build: improve resource limits output and docs
2026-06-12 10:03:06 +02:00
CrazyMax and GitHub
4149c242ab
Merge pull request #3902 from crazy-max/github-builder-1.12.0
...
ci: update docker/github-builder to v1.12.0
2026-06-11 18:27:31 +02:00
CrazyMax
548e583d81
ci: update docker/github-builder to v1.12.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-06-11 17:39:34 +02:00
CrazyMax and GitHub
8e59d65b5a
Merge pull request #3896 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0
...
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
2026-06-11 14:53:16 +02:00
Jiří Moravčík
9b37d78c89
build: improve resource limits output and docs
...
Signed-off-by: Jiří Moravčík <jiri.moravcik@gmail.com >
2026-06-11 11:18:35 +02:00
CrazyMax
803403710a
vendor: update compose-go to v2.11.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-06-11 11:13:52 +02:00
CrazyMax
bdb9077ef6
bake: remove stale path evaluation shim
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-06-11 00:07:27 +02:00
Tõnis Tiigi and GitHub
89b455a9e3
Merge pull request #3897 from tonistiigi/update-buildkit-v0.31.0-rc1
...
vendor: update buildkit to v0.31.0-rc1
2026-06-10 14:58:01 -07:00
Tonis Tiigi
b5cf212276
vendor: update buildkit to v0.31.0-rc1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-10 14:19:03 -07:00
Tõnis Tiigi and GitHub
dd388bf70e
Merge pull request #3883 from crazy-max/local-output-delete
...
support BuildKit local output delete mode
2026-06-10 14:14:12 -07:00
Tõnis Tiigi and GitHub
4fa5bb2396
Merge pull request #3895 from tonistiigi/exec-proxy-support
...
policy: enable proxy network from source policy caps
2026-06-10 14:09:56 -07:00
dependabot[bot] and GitHub
786a5433c2
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v6.0.1...fb8b3582c8e4def4969c97caa2f19720cb33a72f )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-10 18:34:30 +00:00
Tonis Tiigi
25db0fb050
tests: verify exec traffic is policy-checked in caps proxy test
...
Extend testBuildPolicyCapsProxy so that instead of only checking that
the network proxy was enabled, the build runs a command that makes an
HTTP request to a local test server. The policy denies that URL as an
HTTP source, so the test now verifies that exec traffic actually flows
through the proxy and is subject to source policy, including the deny
message and DENY decision in the build output.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-10 08:58:48 -07:00
CrazyMax
b6e1b7328f
build: gate local delete outputs
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-06-10 16:41:10 +02:00
CrazyMax and CrazyMax
473c6ef306
bake: requires explicit allow for local output delete mode
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-06-10 16:41:09 +02:00
CrazyMax
1916210ddc
vendor: update buildkit to f449174742bf
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-06-10 16:41:09 +02:00
Tonis Tiigi and CrazyMax
4da04e3bf4
policy: enable proxy network from source policy caps
...
Evaluate source policy caps before solve requests so policies can enable
BuildKit proxy networking. Policy can return caps {"exec.proxy": true}
during the caps request to enable proxy network
support for the solve.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-10 15:04:23 +02:00
CrazyMax and GitHub
2fcfce0e71
Merge pull request #3894 from tonistiigi/0609-update-buildkit
...
vendor: update buildkit to 41c29fffe299
2026-06-10 13:33:47 +02:00
Tonis Tiigi
58a5a2cd60
vendor: update buildkit to 41c29fffe299
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-09 19:44:00 -07:00
Tõnis Tiigi and GitHub
76703de985
Merge pull request #3876 from jirimoravcik/feat/per-step-resource-limits
...
build: Add per-step CPU and memory resource limits
2026-06-09 17:49:21 -07:00
CrazyMax and GitHub
3a6e4e5e88
Merge pull request #3887 from crazy-max/codecov-test-results
...
ci: upload test results to codecov
2026-06-09 21:16:29 +02:00
Tõnis Tiigi and GitHub
b0d201a941
Merge pull request #3888 from crazy-max/fix-oci-mediatypes
...
build: handle buildkit defaulting to oci mediatypes
2026-06-09 11:37:05 -07:00
CrazyMax
8191e19d94
build: handle buildkit defaulting to oci mediatypes
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-06-09 19:43:48 +02:00
CrazyMax and GitHub
0b358c7637
Merge pull request #3889 from docker/dependabot/github_actions/crazy-max-dot-github-a6a0ecf511
...
build(deps): bump the crazy-max-dot-github group with 2 updates
2026-06-09 15:55:32 +02:00
CrazyMax and GitHub
bad76e04fa
Merge pull request #3890 from docker/dependabot/github_actions/github/codeql-action-4.36.2
...
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
2026-06-09 15:55:06 +02:00
CrazyMax and GitHub
fa085de627
Merge pull request #3891 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.11.0
...
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.10.0 to 1.11.0
2026-06-09 15:54:41 +02:00
CrazyMax and GitHub
72113d3ee2
Merge pull request #3892 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0
...
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
2026-06-09 15:53:53 +02:00
CrazyMax and GitHub
5e1dead20b
Merge pull request #3893 from docker/dependabot/github_actions/crazy-max/dot-github-1.10.0
...
build(deps): bump crazy-max/.github from 1.8.0 to 1.10.0
2026-06-09 15:53:28 +02:00
dependabot[bot] and GitHub
e0b7911e4f
build(deps): bump crazy-max/.github from 1.8.0 to 1.10.0
...
Bumps [crazy-max/.github](https://github.com/crazy-max/.github ) from 1.8.0 to 1.10.0.
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536 )
---
updated-dependencies:
- dependency-name: crazy-max/.github
dependency-version: 1.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 18:35:03 +00:00
dependabot[bot] and GitHub
91602db282
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/e79a6962e0d4c0c17b229090214935d2e33f8354...fb8b3582c8e4def4969c97caa2f19720cb33a72f )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 18:34:50 +00:00
dependabot[bot] and GitHub
401a77d662
build(deps): bump docker/github-builder/.github/workflows/bake.yml
...
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder ) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/docker/github-builder/releases )
- [Commits](https://github.com/docker/github-builder/compare/17bd7d64200cae4ba58ffc099934e8012ae320f2...70ac3fc303efa83d2b94905e6ab78bb83cbdc2ae )
---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 18:34:34 +00:00
dependabot[bot] and GitHub
044609f48d
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.36.1 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 18:34:22 +00:00
dependabot[bot] and GitHub
5e895183a4
build(deps): bump the crazy-max-dot-github group with 2 updates
...
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github ) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ).
Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536 )
Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536 )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
dependency-version: 1.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-08 18:32:49 +00:00
Jiří Moravčík
80b2293881
build: Add per-step CPU and memory resource limits
...
Port of moby/buildkit#6569 to buildx. Adds --memory, --memory-swap,
--cpu-shares, --cpu-period, --cpu-quota, --cpuset-cpus, and --cpuset-mems
flags to build, plus the equivalent bake target attributes and compose
x-bake fields.
Signed-off-by: Jiří Moravčík <jiri.moravcik@gmail.com >
2026-06-08 15:39:14 +02:00
CrazyMax
b179b777f2
ci: upload test results to codecov
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-06-05 09:24:04 +02:00
CrazyMax and GitHub
4fbc1e5f2c
Merge pull request #3885 from docker/dependabot/github_actions/actions/checkout-6.0.3
...
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
2026-06-04 15:46:37 +02:00
CrazyMax and GitHub
2769ed4e9e
Merge pull request #3886 from tonistiigi/progress-panic-fix
...
build: fix policy resolver cleanup on errors
2026-06-04 10:15:41 +02:00
CrazyMax and GitHub
e868b4d8f8
Merge pull request #3884 from docker/dependabot/github_actions/github/codeql-action-4.36.1
...
build(deps): bump github/codeql-action from 4.36.0 to 4.36.1
2026-06-04 09:53:40 +02:00
Tonis Tiigi
4dd20d3c03
build: fix policy resolver cleanup on errors
...
Keep policy resolver cleanup in a local variable so explicit error returns
cannot clear it before deferred cleanup runs. This prevents remote policy
progress writers from outliving the build printer.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-03 20:56:04 -07:00
Tõnis Tiigi and GitHub
1f6162d9ba
Merge pull request #3879 from smerkviladze/bump-golang-x-net-v0.55.0
...
vendor: update golang.org/x/net dependency to v0.55.0
2026-06-03 20:26:45 -07:00