alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,035 Commits 1 Branch 1 Tag
232dbc70c772417d89912ce1a7023865f17da0a4
Commit Graph
499 Commits
Author SHA1 Message Date
Tonis Tiigi eba72a35e4 vendor: update buildkit to v0.29.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-25 15:47:08 -07:00
Tonis Tiigi 7c4703614d vendor: k8s v0.35.2 
Drops the gogo-proto XXX_* methods.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-06 17:32:09 -08:00
Tonis Tiigi 5a7f7c286f kubernetes: trim client-go dependency surface 
Replace the full generated clientset and global Kubernetes scheme
with a small local REST client layer and minimal scheme registration.

This keeps the existing kubeconfig/auth and remote exec behavior while
significantly reducing the linked and vendored Kubernetes dependency set.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-06 16:44:18 -08:00
Sebastiaan van Stijn c06971965f vendor: docker/cli v29.3.0, moby/api v1.54.0, moby/client v0.3.0 
This also allows the client to connect with API v1.40 and up (Docker 19.03),
which previously was API v1.43 and up (Docker 25.0 and up).

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-05 16:38:27 +01:00
Tonis Tiigi 55bef8178d vendor: update buildkit to v0.28.0 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-03 12:17:01 -08:00
Sebastiaan van Stijn f1f38d34ad vendor: github.com/golang/snappy v1.0.0 
Ensure arm64 frame sizes are 8 (mod 16)

fixes: "Weird failure when building on Raspbian / Debian 10.11"

full diff: https://github.com/golang/snappy/compare/v0.0.4...v1.0.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-03 16:28:00 +01:00
CrazyMax 7346c1f0dc vendor: update buildkit to v0.28.0-rc2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-27 16:51:40 +01:00
Tonis Tiigi 73ea669465 vendor: update buildkit to ecde33610015 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 17:06:30 -08:00
Tonis Tiigi dd2a620465 vendor: update buildkit to v0.28.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-24 14:19:34 -08:00
Tonis Tiigi 5c3551beeb policy: add GitHub attestation verification 
Add github_attestation and github_release_attestation policy support.
Fetch GitHub attestation bundles (including bundle_url .json.sn decode)
and verify against input.http.checksum.

Wire source metadata resolver progress through resolver options and add
ResolveState support for policy HTTP attestation fetches.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-20 08:56:40 -08:00
Tonis Tiigi 9d803b0d87 vendor: update buildkit to v0.28-dev-9836771d0c5b 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-10 11:59:30 -08:00
Sebastiaan van Stijn 79b14eaeab vendor: github.com/docker/cli v29.2.1 
full diff: https://github.com/docker/cli/compare/v29.2.0...v29.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 8bd5bd4983 vendor: github.com/docker/cli v29.2.0 
full diff: https://github.com/docker/cli/compare/v29.1.5...v29.2.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 9aa7e1578a vendor: moby/api v1.53.0, moby/client v0.2.2 
full diff:

- api: https://github.com/moby/moby/compare/api/v1.52.0...api/v1.53.0
- client: https://github.com/moby/moby/compare/client/v0.2.1...client/v0.2.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 6b71de00a0 vendor: github.com/go-viper/mapstructure/v2 v2.5.0 
full diff: https://github.com/go-viper/mapstructure/compare/v2.4.0...v2.5.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:55 +01:00
Sebastiaan van Stijn eaf81b65d9 vendor: github.com/klauspost/compress v1.18.3 
no changes in vendored code

- fixes / downstream CVE-2025-61728

full diff: https://github.com/klauspost/compress/compare/v1.18.2...v1.18.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:53 +01:00
CrazyMaxandGitHub c1a52c4060 Merge pull request #3628 from thaJeztah/bump_x_deps 
vendor: update golang.org/x dependencies
 2026-02-04 10:31:22 +01:00
Sebastiaan van Stijn efe1aa593e vendor: golang.org/x/mod v0.32.0 
full diffs:

- https://cs.opensource.google/go/x/tools/+/refs/tags/v0.39.0...refs/tags/v0.41.0
- https://cs.opensource.google/go/x/mod/+/refs/tags/v0.31.0...refs/tags/v0.32.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:05:18 +01:00
Sebastiaan van Stijn 5d44afbda4 vendor: golang.org/x/crypto v0.47.0 
full diffs:

- https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.46.0...refs/tags/v0.47.0
- https://cs.opensource.google/go/x/net/+/refs/tags/v0.48.0...refs/tags/v0.49.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 746c343d18 vendor: golang.org/x/text v0.33.0 
full diff: https://cs.opensource.google/go/x/text/+/refs/tags/v0.32.0...refs/tags/v0.33.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 95a1cb94b3 vendor: golang.org/x/tools v0.40.0 
full diff: https://cs.opensource.google/go/x/tools/+/refs/tags/v0.39.0...refs/tags/v0.40.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 214ebd8434 vendor: golang.org/x/term v0.39.0 
full diff: https://cs.opensource.google/go/x/term/+/refs/tags/v0.38.0...refs/tags/v0.39.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 40d068e12c vendor: golang.org/x/sys v0.40.0 
full diff: https://cs.opensource.google/go/x/sys/+/refs/tags/v0.39.0...refs/tags/v0.40.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 39ee64df71 commands/history: rewrite with stdlib multi-errors 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-26 12:53:33 +01:00
Tonis Tiigi 08e5e8ebf2 vendor: update buildkit to v0.27.0 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-21 14:32:32 -08:00
Sebastiaan van Stijn 0d343eff2d vendor: github.com/docker/cli v29.1.5 
no changes in code

full diff: https://github.com/docker/cli/compare/v29.1.4...v29.1.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-19 13:08:21 +01:00
Tonis Tiigi 3fd58dff71 vendor: update buildkit to v0.27.0-rc2 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-16 13:56:16 -08:00
Sebastiaan van Stijn 99b8143e28 vendor: github.com/sirupsen/logrus v1.9.4 
full diff: https://github.com/sirupsen/logrus/compare/dd1b4c2e81af...v1.9.4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-15 11:23:56 +01:00
Tonis Tiigi d54f398c5d vendor: update buildkit to v0.27.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 13:36:15 -08:00
Tonis Tiigi 87d4189039 policy: image signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi b2697ae933 policy: add git signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 93341aaeee add rego integration to source policies 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:40 -08:00
Tõnis TiigiandGitHub ef0a7b333a Merge pull request #3581 from jsternberg/dap-breakpoint-reason 
dap: fill in breakpoint reason for being unverified
 2026-01-09 17:42:36 -08:00
Sebastiaan van Stijn e419caae8b vendor: github.com/docker/cli v29.1.4 
no changes in vendored files

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-09 10:55:10 +01:00
Jonathan A. Sternberg 8ad75dc485 dap: fill in breakpoint reason for being unverified 
When a breakpoint fails to be verified, it will switch the reason to
"failed". It starts off the reason as "pending".

The `reason` field for a breakpoint was added some time after the last
release of `go-dap` which has only been updated once in the last year so
this uses the `main` branch version which contains the field.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-01-08 15:21:54 -06:00
CrazyMaxandTonis Tiigi c3514fea5d vendor: github.com/moby/buildkit@master ed6dc749ce40b9fdc308676d10343fd00f56c717 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-07 11:45:01 -08:00
Sebastiaan van Stijn 7762411537 vendor: github.com/containerd/containerd/v2 v2.2.1 
The pull request that was needed has been released now as part of v2.2.1;
full diff: https://github.com/containerd/containerd/compare/efd86f2b0bc2...v2.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-07 11:33:39 +01:00
Sebastiaan van Stijn 77571f56f2 vendor: github.com/docker/cli v29.1.3 
full diff: https://github.com/docker/cli/compare/v29.1.2...v29.1.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-16 11:08:53 +01:00
Sebastiaan van Stijn 3bc50aece8 vendor: github.com/klauspost/compress v1.18.2 
No changes in vendored code

Fixes a regression in v1.18.1 that resulted in invalid flate/zip/gzip encoding.
The v1.18.1 tag has been retracted.

full diff: https://github.com/klauspost/compress/compare/v1.18.1...v1.18.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-16 11:08:52 +01:00
Tõnis TiigiandGitHub c003c8617e Merge pull request #3558 from thaJeztah/bump_cli 
vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
 2025-12-12 09:43:24 -08:00
Sebastiaan van Stijn 9353c2c00e vendor: github.com/morikuni/aec v1.1.0 
full diff: https://github.com/morikuni/aec/compare/v1.0.0...v1.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-11 17:51:11 +01:00
Sebastiaan van Stijn 304ab6d65d vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0 
reduce dependency on the archived go.yaml.in/yaml/v3 package

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-09 16:55:47 +01:00
Sebastiaan van Stijn 5402d35f8d vendor: github.com/docker/cli v29.1.2 
no changes in vendored code

full diff: https://github.com/docker/cli/compare/v29.1.1...v29.1.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-03 09:36:20 +01:00
Sebastiaan van Stijn 5efe75571f vendor: docker/cli v29.1.1, moby/client v0.2.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-02 15:52:11 +01:00
Sebastiaan van Stijn 4f77ae4858 vendor: github.com/moby/buildkit v0.26.2 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-02 15:52:08 +01:00
Sebastiaan van Stijn 72126c6a74 vendor: otel/exporters v1.38.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 22:29:28 +01:00
Sebastiaan van Stijn c7aa39fdeb vendor: otel/contrib v0.63.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 22:29:28 +01:00
Sebastiaan van Stijn 027fa165d0 vendor: golang.org/x/crypto v0.45.0 
full diff: https://github.com/golang/crypto/compare/v0.44.0...v0.45.0

Hello gophers,

We have tagged version v0.45.0 of golang.org/x/crypto in order to address two
security issues.

This version fixes a vulnerability in the golang.org/x/crypto/ssh package and a
vulnerability in the golang.org/x/crypto/ssh/agent package which could cause
programs to consume unbounded memory or panic respectively.

SSH servers parsing GSSAPI authentication requests don't validate the number of
mechanisms specified in the request, allowing an attacker to cause unbounded
memory consumption.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-58181 and Go issue https://go.dev/issue/76363.

SSH Agent servers do not validate the size of messages when processing new
identity requests, which may cause the program to panic if the message is
malformed due to an out of bounds read.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-47914 and Go issue https://go.dev/issue/76364.

Cheers, Go Security team

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:17:06 +01:00
Sebastiaan van Stijn a2a2819d7d vendor: golang.org/x/net v0.47.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:13:50 +01:00
Sebastiaan van Stijn ae3eed7b80 vendor: golang.org/x/text v0.31.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:12:17 +01:00