alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
3,930 Commits 1 Branch 1 Tag
2ed4ece865bc34ec6241cf47ca376fbbcc0f8780
Commit Graph
3930 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
CrazyMax 2ed4ece865 build: reuse build session for policy source resolution 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-04 17:21:20 +01:00
Tõnis TiigiandGitHub 08998a7e90 Merge pull request #3688 from tonistiigi/vendor-buildkit-v0.28.0 
vendor: update buildkit to v0.28.0
 2026-03-03 12:38:47 -08:00
Tonis Tiigi 55bef8178d vendor: update buildkit to v0.28.0 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-03 12:17:01 -08:00
Tõnis TiigiandGitHub 75c53e39a5 Merge pull request #3682 from crazy-max/bake-print-subdir 
bake: preserve git subdir in remote bake context paths
 2026-03-03 09:25:28 -08:00
CrazyMax 50fa13d859 bake: preserve git subdir in remote bake context paths 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-03 17:47:07 +01:00
Tõnis TiigiandGitHub 00cc36c402 Merge pull request #3678 from tonistiigi/bake-subdir-remote-fix 
bake: fix remote named context subdir handling
 2026-03-03 08:39:54 -08:00
Tõnis TiigiandGitHub 8f02b16216 Merge pull request #3685 from thaJeztah/snappier 
vendor: github.com/golang/snappy v1.0.0
 2026-03-03 08:38:56 -08:00
Sebastiaan van Stijn f1f38d34ad vendor: github.com/golang/snappy v1.0.0 
Ensure arm64 frame sizes are 8 (mod 16)

fixes: "Weird failure when building on Raspbian / Debian 10.11"

full diff: https://github.com/golang/snappy/compare/v0.0.4...v1.0.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-03 16:28:00 +01:00
CrazyMaxandGitHub 256889070c Merge pull request #3681 from docker/dependabot/github_actions/crazy-max/ghaction-github-runtime-4 
build(deps): bump crazy-max/ghaction-github-runtime from 3 to 4
 2026-03-03 12:55:28 +01:00
Tõnis TiigiandGitHub 130755c4bb Merge pull request #3680 from crazy-max/openbsd-git 
hack/openbsd: use cdn.openbsd.org for PKG_PATH
 2026-03-02 18:27:21 -08:00
dependabot[bot]andGitHub cc0d1f6331 build(deps): bump crazy-max/ghaction-github-runtime from 3 to 4 
Bumps [crazy-max/ghaction-github-runtime](https://github.com/crazy-max/ghaction-github-runtime) from 3 to 4.
- [Release notes](https://github.com/crazy-max/ghaction-github-runtime/releases)
- [Commits](https://github.com/crazy-max/ghaction-github-runtime/compare/v3...v4)

---
updated-dependencies:
- dependency-name: crazy-max/ghaction-github-runtime
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-02 20:23:09 +00:00
CrazyMax 1c7acc8c46 hack/openbsd: use cdn.openbsd.org for PKG_PATH 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-02 11:22:00 +01:00
CrazyMaxandGitHub e835707400 Merge pull request #3672 from docker/dependabot/github_actions/actions/upload-artifact-7 
build(deps): bump actions/upload-artifact from 6 to 7
 2026-03-02 11:07:43 +01:00
CrazyMaxandGitHub bbadcb4368 Merge pull request #3673 from docker/dependabot/github_actions/actions/download-artifact-8 
build(deps): bump actions/download-artifact from 7 to 8
 2026-03-02 11:07:19 +01:00
Tonis Tiigi d39a81e456 bake: fix remote named context subdir handling 
Fix using CopyDirContentsOnly when projecting remote named contexts so
subdir contexts keep the same root semantics as local bake runs.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-27 17:06:32 -08:00
CrazyMaxandGitHub 22074cd400 Merge pull request #3676 from crazy-max/buildkit-0.28.0-rc2 
vendor: update buildkit to v0.28.0-rc2
 2026-02-27 17:34:50 +01:00
CrazyMax 7346c1f0dc vendor: update buildkit to v0.28.0-rc2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-27 16:51:40 +01:00
CrazyMaxandGitHub 989b8637c9 Merge pull request #3674 from tonistiigi/policy-fs-refs-fix 
build: ref-count policy FS lifecycle
 2026-02-27 15:52:36 +01:00
CrazyMaxandGitHub e43156d54a Merge pull request #3662 from tonistiigi/policy-recursive-materials 
policy: add recursive provenance material resolution
 2026-02-27 15:51:51 +01:00
CrazyMaxandGitHub a88af0e2ae Merge pull request #3675 from tonistiigi/policy-filename-fix 
build: normalize policy env filename default
 2026-02-27 15:33:02 +01:00
Tonis Tiigi f3a1249560 build: normalize policy env filename default 
Use cleaned DockerfilePath basename for policy env filename and fall back
to Dockerfile when the path resolves to dot or root.

Previously filename could be reported as "." on default cases.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 21:13:03 -08:00
Tonis Tiigi 9ef416b258 build: ref-count policy FS lifecycle 
Make memoized policy FS ref-counted so repeated get()/close() pairs don't
prematurely close shared handles.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 18:48:38 -08:00
Tonis Tiigi 1c4a436a0d policy: match parent unknown keys in collectUnknowns 
Allow child refs from partial evaluation to match allowed parent keys on
path boundaries and return canonical unknowns for metadata resolution.

Add tests for parent-child matching and boundary safety cases.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 17:12:18 -08:00
Tonis Tiigi 73ea669465 vendor: update buildkit to ecde33610015 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 17:06:30 -08:00
dependabot[bot]andGitHub 8a2b64a1a5 build(deps): bump actions/download-artifact from 7 to 8 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-26 18:32:58 +00:00
dependabot[bot]andGitHub f606596834 build(deps): bump actions/upload-artifact from 6 to 7 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-26 18:32:52 +00:00
Tonis Tiigi 88cba2c367 policy: avoid stale invalid field warnings in eval 
Track fields reloaded during eval --print resolution loops and filter
final invalid-field warnings against that set.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 09:14:31 -08:00
Tonis Tiigi 4880756a0f policy: simplify recursive material resolution 
Unify root/material unknown resolution with recursive Input traversal.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 09:14:25 -08:00
Tõnis TiigiandGitHub f35e45c307 Merge pull request #3667 from tonistiigi/20260224-update-buildkit 
vendor: update buildkit to v0.28.0-rc1
 2026-02-24 14:36:03 -08:00
Tonis Tiigi dd2a620465 vendor: update buildkit to v0.28.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-24 14:19:34 -08:00
CrazyMaxandGitHub 8967e9f760 Merge pull request #3666 from crazy-max/docker-29.2 
dockerfile: update to docker 29.2
 2026-02-24 19:17:22 +01:00
CrazyMax 246e1090a0 dockerfile: update to docker 29.2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-24 18:36:40 +01:00
CrazyMaxandGitHub 989bab0739 Merge pull request #3648 from crazy-max/bake-auth-token-domain 
bake: derive git auth host from remote URL
 2026-02-24 18:35:36 +01:00
CrazyMaxandGitHub 7bc8c698b4 Merge pull request #3665 from crazy-max/builder-timeout 
commands: make builder status timeouts configurable across cli flows
 2026-02-24 18:35:17 +01:00
Tõnis TiigiandGitHub 2809ca78d7 Merge pull request #3661 from tonistiigi/policy-remote-fs 
build: resolve policy files for builds from remote context
 2026-02-24 09:21:24 -08:00
CrazyMax 26c7ae6fbf bake: derive git auth host from remote URL 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-24 18:09:52 +01:00
CrazyMax f4cc8638c0 commands: make builder status timeouts configurable across cli flows 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-24 17:54:12 +01:00
Tõnis TiigiandGitHub 9607bbab9a Merge pull request #3451 from AkhilManoj03/3121-improve-file-flag-docs 
Docs: document remote URL support for --file flag in buildx build
 2026-02-24 07:52:20 -08:00
CrazyMaxandGitHub 6248145bef Merge pull request #3663 from dvdksn/update-docs-upstream-workflow 
chore: update target path for cli yaml in docs-release workflow
 2026-02-24 09:11:40 +01:00
David Karlsson 9b096a83f4 chore: update target path for cli yaml in docs-release workflow 
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
 2026-02-24 08:55:25 +01:00
Tonis Tiigi b62fc30524 build: resolve policy files from context state and unified FS 
Support remote context policy files via resolved context state and cwd:// override.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-23 16:22:19 -08:00
Tõnis TiigiandGitHub 5830f90beb Merge pull request #3657 from tonistiigi/policy-artifact-verification 
policy: add artifact attestation and github attestation builtin support
 2026-02-23 09:15:43 -08:00
Akhil ManojandCrazyMax 1f69c574eb Docs: update --file flag to clarify input options 
Expand the buildx build doc to include details on the supported input
options for the --file flag: local file path, remote URL, and stdin. Add
examples for each input type to enhance user understanding.

Signed-off-by: Akhil Manoj <akhil.manoj2003@gmail.com>
Signed-off-by: Akhil Manoj <manoja2@vcu.edu>
 2026-02-23 11:34:38 +01:00
Tõnis TiigiandGitHub 268f1c7e4a Merge pull request #3450 from jsternberg/dap-container-fs-requests 
dap: utilize the container filesystem for the file explorer
 2026-02-22 21:50:28 -08:00
Tõnis TiigiandGitHub 5683e9f04f Merge pull request #3470 from yzewei/tests_fix 
tests: replace aaa/bbb node names with descriptive builder names
 2026-02-22 21:49:34 -08:00
Tõnis TiigiandGitHub 6476f0e7c3 Merge pull request #3660 from crazy-max/ci-bump-runner 
ci: update macos and windows runners to latest
 2026-02-20 10:29:40 -08:00
Tonis Tiigi 10c5f00efa sourcemeta: unblock concurrent resolver open waiters 
Prevent concurrent ResolveSourceMetadata calls from hanging while
waiting for resolver initialization.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-20 08:56:41 -08:00
Tonis Tiigi 5c3551beeb policy: add GitHub attestation verification 
Add github_attestation and github_release_attestation policy support.
Fetch GitHub attestation bundles (including bundle_url .json.sn decode)
and verify against input.http.checksum.

Wire source metadata resolver progress through resolver options and add
ResolveState support for policy HTTP attestation fetches.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-20 08:56:40 -08:00
Tonis Tiigi ac9e4c512c policy: add artifact attestation builtin support 
Add artifact_attestation(http, filename) and wire verifier support for
artifact bundle checks. Add docker_github_builder_bundle helper rule.

Handle runtime unknown http.checksum after eval so metadata resolve is
requested when checksum is missing.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-20 08:56:39 -08:00
Tõnis TiigiandGitHub 7d3b6988c2 Merge pull request #3656 from tonistiigi/policy-error 
policy: mark policy progress vertex on DENY build failures
 2026-02-20 08:56:28 -08:00