Commit Graph
3712 Commits
Author SHA1 Message Date
Tõnis TiigiandGitHub 191d050d81 Merge pull request #3578 from crazy-max/buildkit-0.26.3
dockerfile: update buildkit to v0.26.3
2026-01-05 18:09:43 -08:00
CrazyMax 0c941467b2 dockerfile: update buildkit to v0.26.3
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-01-05 15:05:48 +01:00
Tõnis TiigiandGitHub 2bcb098cbb Merge pull request #3566 from jsternberg/dap-build-integration-tests
tests: add integration tests for `dap build`
2025-12-17 09:41:34 -08:00
Jonathan A. Sternberg fdfba3014d tests: add integration tests for dap build
This adds integration tests for the `dap build` command to test various
behavior associated with the command. We start the build and the
integration test acts as a dap client to send requests and check that
the output is what we expect.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2025-12-17 10:56:30 -06:00
CrazyMaxandGitHub e794584a3f Merge pull request #3561 from docker/dependabot/github_actions/peter-evans/create-pull-request-8.0.0
build(deps): bump peter-evans/create-pull-request from 7.0.9 to 8.0.0
2025-12-16 17:18:08 +01:00
CrazyMaxandGitHub 29076c3f98 Merge pull request #3573 from docker/dependabot/github_actions/actions/download-artifact-7
build(deps): bump actions/download-artifact from 6 to 7
2025-12-16 17:11:52 +01:00
CrazyMaxandGitHub b6d76b0a16 Merge pull request #3572 from docker/dependabot/github_actions/actions/upload-artifact-6
build(deps): bump actions/upload-artifact from 5 to 6
2025-12-16 17:11:34 +01:00
dependabot[bot]andGitHub a02f395415 build(deps): bump actions/download-artifact from 6 to 7
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 18:06:32 +00:00
dependabot[bot]andGitHub 77fad74d4a build(deps): bump actions/upload-artifact from 5 to 6
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 18:06:27 +00:00
CrazyMaxandGitHub 150cc839f2 Merge pull request #3570 from docker/dependabot/github_actions/actions/cache-5
build(deps): bump actions/cache from 4 to 5
2025-12-15 15:49:36 +01:00
Tõnis TiigiandGitHub 590adceb63 Merge pull request #3554 from hsw/fix-debug-standalone
commands: fix debug flag in standalone mode
2025-12-12 16:07:35 -08:00
Tõnis TiigiandGitHub 73d46672e1 Merge pull request #3534 from cpuguy83/dap_bp_overlaps
dap: Fix breakpoint overlap check
2025-12-12 16:06:47 -08:00
dependabot[bot]andGitHub 8dcf7f3663 build(deps): bump actions/cache from 4 to 5
Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-12 18:03:39 +00:00
Tõnis TiigiandGitHub c003c8617e Merge pull request #3558 from thaJeztah/bump_cli
vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
2025-12-12 09:43:24 -08:00
Tõnis TiigiandGitHub d56379477e Merge pull request #3563 from thaJeztah/bump_aec
vendor: github.com/morikuni/aec v1.1.0
2025-12-11 09:38:55 -08:00
Sebastiaan van Stijn 9353c2c00e vendor: github.com/morikuni/aec v1.1.0
full diff: https://github.com/morikuni/aec/compare/v1.0.0...v1.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-11 17:51:11 +01:00
dependabot[bot]andGitHub 23f1b52ec5 build(deps): bump peter-evans/create-pull-request from 7.0.9 to 8.0.0
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 7.0.9 to 8.0.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/84ae59a2cdc2258d6fa0732dd66352dddae2a412...98357b18bf14b5342f975ff684046ec3b2a07725)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-10 18:03:28 +00:00
Sebastiaan van Stijn 304ab6d65d vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
reduce dependency on the archived go.yaml.in/yaml/v3 package

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-09 16:55:47 +01:00
Sergei Khomenkov cecd8e9570 commands: fix debug flag in standalone mode
The -D/--debug flag was not enabling debug logging in standalone mode.

Root cause: debug.Enable() was called before dockerCli.Initialize(),
but Initialize() calls SetLogLevel("") which resets logrus level to
Info, and since options.Debug was false, it wasn't re-enabled.

Fix: Pass opt.debug to options.Debug before Initialize() so it
properly enables debug level after SetLogLevel().

Signed-off-by: Sergei Khomenkov <sergey@homenkow.ru>
2025-12-07 13:52:15 +02:00
CrazyMaxandGitHub 22e7bf6455 Merge pull request #3552 from jsternberg/remove-unneeded-excludes
chore: remove unneeded excludes
2025-12-05 09:22:52 +01:00
Justin ChadwellandGitHub acc77888aa Merge pull request #3551 from jedevc/split-node-resolver 2025-12-05 08:14:23 +00:00
Jonathan A. Sternberg 17952c617d chore: remove unneeded excludes
The upstream PR that used the pseudo-versions was merged so this no
longer causes an upgrade of those dependencies to pseudo-versions so the
exclude is no longer needed.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2025-12-04 10:46:27 -06:00
Justin Chadwell 3e413a05df build: split out node resolver
Signed-off-by: Justin Chadwell <me@jedevc.com>
2025-12-04 09:48:36 +00:00
Akihiro SudaandGitHub 4eb80cafb9 Merge pull request #3550 from thaJeztah/bump_cli
vendor: github.com/docker/cli v29.1.2
2025-12-04 02:00:11 +09:00
Sebastiaan van Stijn 5402d35f8d vendor: github.com/docker/cli v29.1.2
no changes in vendored code

full diff: https://github.com/docker/cli/compare/v29.1.1...v29.1.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-03 09:36:20 +01:00
Tõnis TiigiandGitHub f72bd30200 Merge pull request #3548 from crazy-max/bake-contexts-override
docs: named contexts override with bake
2025-12-02 16:33:31 -08:00
Tõnis TiigiandGitHub a4a02b07e8 Merge pull request #3545 from thaJeztah/bump_moby
vendor: docker/cli v29.1.1, moby/client v0.2.1
2025-12-02 16:33:04 -08:00
Sebastiaan van Stijn 5efe75571f vendor: docker/cli v29.1.1, moby/client v0.2.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-02 15:52:11 +01:00
Sebastiaan van Stijn 4f77ae4858 vendor: github.com/moby/buildkit v0.26.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-02 15:52:08 +01:00
CrazyMaxandGitHub 6acb14ebf6 Merge pull request #3547 from thaJeztah/bump_otels
vendor: otel/contrib v0.63.0, otel/exporters v1.38.0
2025-12-02 15:32:37 +01:00
CrazyMaxandGitHub 3bc343ea41 Merge pull request #3549 from docker/dependabot/github_actions/softprops/action-gh-release-2.5.0
build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0
2025-12-02 15:30:20 +01:00
dependabot[bot]andGitHub 7f250c2db1 build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.4.2 to 2.5.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/5be0e66d93ac7ed76da52eca8bb058f665c3a5fe...a06a81a03ee405af7f2048a818ed3f03bbf83c7b)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-01 20:49:29 +00:00
CrazyMax 9173ef69ec docs: named contexts override with bake
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2025-11-28 15:05:47 +01:00
Akihiro SudaandGitHub c6ec16cbc0 Merge pull request #3546 from thaJeztah/int_convert
driver/kubernetes: change DeploymentOpt.Replicas to int32
2025-11-28 09:36:04 +09:00
Sebastiaan van Stijn 88b4d5ae03 driver/kubernetes: change DeploymentOpt.Replicas to int32
Directly convert to a int32 instead of later conversion so that
we can return an error if the value is out of range.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 22:41:57 +01:00
Sebastiaan van Stijn 72126c6a74 vendor: otel/exporters v1.38.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 22:29:28 +01:00
Sebastiaan van Stijn c7aa39fdeb vendor: otel/contrib v0.63.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 22:29:28 +01:00
CrazyMaxandGitHub 50236f7452 Merge pull request #3544 from thaJeztah/bump_x_deps
vendor: update various golang.org/x/xxx dependencies
2025-11-27 21:51:26 +01:00
Sebastiaan van Stijn 027fa165d0 vendor: golang.org/x/crypto v0.45.0
full diff: https://github.com/golang/crypto/compare/v0.44.0...v0.45.0

Hello gophers,

We have tagged version v0.45.0 of golang.org/x/crypto in order to address two
security issues.

This version fixes a vulnerability in the golang.org/x/crypto/ssh package and a
vulnerability in the golang.org/x/crypto/ssh/agent package which could cause
programs to consume unbounded memory or panic respectively.

SSH servers parsing GSSAPI authentication requests don't validate the number of
mechanisms specified in the request, allowing an attacker to cause unbounded
memory consumption.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-58181 and Go issue https://go.dev/issue/76363.

SSH Agent servers do not validate the size of messages when processing new
identity requests, which may cause the program to panic if the message is
malformed due to an out of bounds read.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-47914 and Go issue https://go.dev/issue/76364.

Cheers, Go Security team

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 19:17:06 +01:00
Sebastiaan van Stijn a2a2819d7d vendor: golang.org/x/net v0.47.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 19:13:50 +01:00
Sebastiaan van Stijn ae3eed7b80 vendor: golang.org/x/text v0.31.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 19:12:17 +01:00
Sebastiaan van Stijn 3f5c571f69 golang.org/x/term v0.37.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 19:09:59 +01:00
Sebastiaan van Stijn b20a9ecf67 vendor: golang.org/x/sync v0.18.0
full diff: https://github.com/golang/sync/compare/v0.17.0...v0.18.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 18:47:50 +01:00
Sebastiaan van Stijn 3858752e0a vendor: golang.org/x/sys v0.38.0
- cpu: add HPDS, LOR, PAN detection for arm64
- cpu: also use MRS instruction in getmmfr1
- cpu: use MRS instruction to read arm64 system registers
- unix: add consts for ELF handling
- unix: add SetMemPolicy and its mode/flag values
- unix: add SizeofNhmsg and SizeofNexthopGrp
- windows: add iphlpapi routing functions

full diff: https://github.com/golang/sys/compare/v0.37.0...v0.38.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-27 18:45:58 +01:00
CrazyMaxandGitHub f1a0fc5d63 Merge pull request #3535 from docker/dependabot/github_actions/peter-evans/create-pull-request-7.0.9
build(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9
2025-11-25 18:37:22 +01:00
dependabot[bot]andGitHub b1c71b29c4 build(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 7.0.8 to 7.0.9.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/271a8d0340265f705b14b6d32b9829c1cb33d45e...84ae59a2cdc2258d6fa0732dd66352dddae2a412)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-25 17:16:34 +00:00
Tõnis TiigiandGitHub e084a7f6b6 Merge pull request #3536 from crazy-max/fix-provnance-metadata
fix empty provenance metadata for multi-platform builds
2025-11-25 09:10:36 -08:00
CrazyMax 1b9791f6fe fix empty provenance metadata for multi-platform builds
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2025-11-25 17:39:46 +01:00
Tõnis TiigiandGitHub 1aa6b6cad9 Merge pull request #3538 from crazy-max/update-freebsd-box
ci: switch to bento/freebsd-14 vagrant box
2025-11-25 08:14:15 -08:00
CrazyMax 2625451e61 ci: switch to bento/freebsd-14 vagrant box
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2025-11-25 11:36:20 +01:00