dependabot[bot] and GitHub
23ceeffc69
build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 8.0.0 to 8.1.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/98357b18bf14b5342f975ff684046ec3b2a07725...c0f553fe549906ede9cf27b5156039d195d2ece0 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 8.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-21 18:33:13 +00:00
Tõnis Tiigi and GitHub
79763c61b3
Merge pull request #3616 from thaJeztah/bump_cli
...
vendor: github.com/docker/cli v29.1.5
2026-01-20 10:22:06 -08:00
Sebastiaan van Stijn
0d343eff2d
vendor: github.com/docker/cli v29.1.5
...
no changes in code
full diff: https://github.com/docker/cli/compare/v29.1.4...v29.1.5
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-01-19 13:08:21 +01:00
Tõnis Tiigi and GitHub
9c33ef3ed3
Merge pull request #3612 from tonistiigi/dhi-auth
...
dockerconfig: add fallback for loading DHI and Scout credentials
2026-01-16 14:27:54 -08:00
Tõnis Tiigi and GitHub
9567f7f4d2
Merge pull request #3614 from tonistiigi/policy-json-stub
...
commands: remove policy json-schema stub
2026-01-16 14:27:33 -08:00
Tõnis Tiigi and GitHub
3dabbc568b
Merge pull request #3615 from tonistiigi/vendor-buildkit-v0.27.0-rc2
...
vendor: update buildkit to v0.27.0-rc2
2026-01-16 14:13:10 -08:00
Tonis Tiigi
3fd58dff71
vendor: update buildkit to v0.27.0-rc2
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 13:56:16 -08:00
Tõnis Tiigi and GitHub
819ae5d3e1
Merge pull request #3611 from tonistiigi/policy-update-v0.31-rc2
...
Updates and fixes to policy support
2026-01-16 12:52:06 -08:00
Tonis Tiigi
d0e4db27e0
commands: remove policy json-schema stub
...
Remove stub for now so we don't ship it in a release.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 12:48:46 -08:00
Tonis Tiigi
f764c6f025
dockerconfig: add fallback for loading DHI and Scout credentials
...
These are also Docker managed registries with same users.
Fall back to main hostname if not logged in to exact domain.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 12:45:05 -08:00
Tonis Tiigi
89fdef17e6
policy: fixes for image source handling
...
- Make sure tag is added to image reference as
containerd reference parser refuses to parse otherwise.
- When attestation is asked from non-index, return
nil instead of error. This is for consistency as likely
to fail in BuildKit before that is fixed separately.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 12:12:41 -08:00
Tonis Tiigi
535da79d62
policy: build policy deny messages with error
...
Supported from Buildkit v0.27.0-rc1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 11:48:56 -08:00
Tonis Tiigi
db9c0c2532
policy: update unknown collection
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 11:48:56 -08:00
Tonis Tiigi
86885cd8a2
policy: add docker_github_builder_tag builtin helper
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 11:48:55 -08:00
Tonis Tiigi
1d19f3e2dd
policy: add docker_github_builder builtin helper
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 11:48:55 -08:00
Tonis Tiigi
30260ec935
policy: improve policy logging
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 11:48:55 -08:00
Tonis Tiigi
73f5b1f9c7
policy: update policy progress logic
...
Fix the policy logger being open for the whole build.
In new logic logger is opened on-demand if there are logs,
remains open until timeout and is restarted if new logs
come after.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 11:48:55 -08:00
Tonis Tiigi
20405112c2
policy: allow image source without set platform
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 11:48:55 -08:00
Tonis Tiigi
eaee6675fb
policy: fix exposing signature kind and type
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-16 11:48:53 -08:00
Tõnis Tiigi and GitHub
bc5d652738
Merge pull request #3610 from tonistiigi/bake-var-flag
...
bake: add --var flag for setting variable values
2026-01-16 08:25:12 -08:00
Tõnis Tiigi and GitHub
4682edf8bd
Merge pull request #3609 from tonistiigi/dockerfile-worktree-fix
...
Dockerfile: allow dev builds from git worktree
2026-01-16 08:24:38 -08:00
Tonis Tiigi
c5322ca727
bake: add --var flag for setting variable values
...
This provides alternative way to set values for Bake
variables without adding them the global environment variables.
This can also be used then environment variable access
is disabled with BUILDX_BAKE_DISABLE_VARS_ENV_LOOKUP.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-15 23:17:28 -08:00
Tonis Tiigi
88359c58a0
tests: add TestBakeDisableEnvLookup
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-15 22:46:30 -08:00
Tonis Tiigi
38750e5958
Dockerfile: allow dev builds from git worktree
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
(cherry picked from commit f24db9495537a9658b0defba34c10acd2ad61118)
2026-01-15 17:24:44 -08:00
Tõnis Tiigi and GitHub
8b1f6fd8c0
Merge pull request #3600 from crazy-max/ci-sigstore-darwin
...
ci: don't upload signature bundle for darwin
2026-01-15 16:49:25 -08:00
CrazyMax
f79f69b449
ci: don't upload signature bundle for darwin
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-01-15 12:20:48 +01:00
CrazyMax and GitHub
9e1b08f7ca
Merge pull request #3592 from tonistiigi/opa-source-policy-test-cmd
...
policy: add policy test command
2026-01-15 12:16:00 +01:00
CrazyMax and GitHub
3da7958c8b
Merge pull request #3597 from thaJeztah/bump_logrus
...
vendor: github.com/sirupsen/logrus v1.9.4
2026-01-15 12:14:53 +01:00
Sebastiaan van Stijn
99b8143e28
vendor: github.com/sirupsen/logrus v1.9.4
...
full diff: https://github.com/sirupsen/logrus/compare/dd1b4c2e81af...v1.9.4
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-01-15 11:23:56 +01:00
Tõnis Tiigi and GitHub
b9b24359ba
Merge pull request #3595 from tonistiigi/bake-var-disable
...
bake: allow disabling env lookup for bake
2026-01-14 14:54:17 -08:00
Tonis Tiigi
d27c7f8e9f
bake: allow disabling env lookup for bake
...
Allow bake to be run in a mode where the local environment
variable values can't be captured by bake definition.
In future we will likely also add --var k=v for alternative
way to pass values to variables.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 14:18:26 -08:00
Tõnis Tiigi and GitHub
efaf9daa21
Merge pull request #3594 from tonistiigi/vendor-buildkit-v0.27.0-rc1
...
vendor: update buildkit to v0.27.0-rc1
2026-01-14 13:58:10 -08:00
Tonis Tiigi
d54f398c5d
vendor: update buildkit to v0.27.0-rc1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 13:36:15 -08:00
Tonis Tiigi
c6ecdc08cf
commands: implement policy test command
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 10:31:12 -08:00
Tõnis Tiigi and GitHub
32b6b75478
Merge pull request #3593 from tonistiigi/opa-bake-tests
...
policy: add policy to bake and improve test coverage
2026-01-14 10:07:08 -08:00
Tonis Tiigi
9f1daffb32
policy: implement policy support for bake
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:34:23 -08:00
Tonis Tiigi
6f9a1cfb17
tests: add git based policy tests
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:34:15 -08:00
Tonis Tiigi
6d80e701f6
tests: add tests checking combinations of --policy flag
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:34:09 -08:00
Tonis Tiigi
071ce556a5
tests: add http based policy eval tests
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:34:01 -08:00
Tonis Tiigi
4b4f2aa682
tests: add http policy integration tests
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:33:49 -08:00
Tõnis Tiigi and GitHub
5a5d59f503
Merge pull request #3539 from tonistiigi/opa-source-policy
...
add rego integration to source policies
2026-01-14 09:32:39 -08:00
Tonis Tiigi
e5116c1555
tests: update policy tests matrix to require modern buildkit
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:10:35 -08:00
Tonis Tiigi
30b63522d1
tests: add policy eval integration tests
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:10:35 -08:00
Tonis Tiigi
02719d045c
tests: add image and env based policy build tests
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:10:35 -08:00
Tonis Tiigi
ae86c584b4
tests: add policy flag integration test
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:10:35 -08:00
Tonis Tiigi
be42b48462
policy: implement policy logging via progress printer
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:10:34 -08:00
Tonis Tiigi
5ad09ce3eb
commands: implement policy eval command
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:10:33 -08:00
Tonis Tiigi
d232d4c392
commands: add stubs for policy commands
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:09:10 -08:00
Tonis Tiigi
61843e0031
policy: add strict policy config support
...
Strict policy will fail if remote daemon doesn't support policy
verification.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:09:10 -08:00
Tonis Tiigi
0e1036bef5
policy: add multiple policy support
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:09:10 -08:00