alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
3,703 Commits 1 Branch 1 Tag
3bc50aece8adec012f3dca48011a89e38f07e93e
Commit Graph
3703 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastiaan van Stijn 3bc50aece8 vendor: github.com/klauspost/compress v1.18.2 
No changes in vendored code

Fixes a regression in v1.18.1 that resulted in invalid flate/zip/gzip encoding.
The v1.18.1 tag has been retracted.

full diff: https://github.com/klauspost/compress/compare/v1.18.1...v1.18.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-16 11:08:52 +01:00
CrazyMaxandGitHub 150cc839f2 Merge pull request #3570 from docker/dependabot/github_actions/actions/cache-5 
build(deps): bump actions/cache from 4 to 5
 2025-12-15 15:49:36 +01:00
Tõnis TiigiandGitHub 590adceb63 Merge pull request #3554 from hsw/fix-debug-standalone 
commands: fix debug flag in standalone mode
 2025-12-12 16:07:35 -08:00
Tõnis TiigiandGitHub 73d46672e1 Merge pull request #3534 from cpuguy83/dap_bp_overlaps 
dap: Fix breakpoint overlap check
 2025-12-12 16:06:47 -08:00
dependabot[bot]andGitHub 8dcf7f3663 build(deps): bump actions/cache from 4 to 5 
Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-12 18:03:39 +00:00
Tõnis TiigiandGitHub c003c8617e Merge pull request #3558 from thaJeztah/bump_cli 
vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
 2025-12-12 09:43:24 -08:00
Tõnis TiigiandGitHub d56379477e Merge pull request #3563 from thaJeztah/bump_aec 
vendor: github.com/morikuni/aec v1.1.0
 2025-12-11 09:38:55 -08:00
Sebastiaan van Stijn 9353c2c00e vendor: github.com/morikuni/aec v1.1.0 
full diff: https://github.com/morikuni/aec/compare/v1.0.0...v1.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-11 17:51:11 +01:00
Sebastiaan van Stijn 304ab6d65d vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0 
reduce dependency on the archived go.yaml.in/yaml/v3 package

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-09 16:55:47 +01:00
Sergei Khomenkov cecd8e9570 commands: fix debug flag in standalone mode 
The -D/--debug flag was not enabling debug logging in standalone mode.

Root cause: debug.Enable() was called before dockerCli.Initialize(),
but Initialize() calls SetLogLevel("") which resets logrus level to
Info, and since options.Debug was false, it wasn't re-enabled.

Fix: Pass opt.debug to options.Debug before Initialize() so it
properly enables debug level after SetLogLevel().

Signed-off-by: Sergei Khomenkov <sergey@homenkow.ru>
 2025-12-07 13:52:15 +02:00
CrazyMaxandGitHub 22e7bf6455 Merge pull request #3552 from jsternberg/remove-unneeded-excludes 
chore: remove unneeded excludes
 2025-12-05 09:22:52 +01:00
Justin ChadwellandGitHub acc77888aa Merge pull request #3551 from jedevc/split-node-resolver 2025-12-05 08:14:23 +00:00
Jonathan A. Sternberg 17952c617d chore: remove unneeded excludes 
The upstream PR that used the pseudo-versions was merged so this no
longer causes an upgrade of those dependencies to pseudo-versions so the
exclude is no longer needed.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2025-12-04 10:46:27 -06:00
Justin Chadwell 3e413a05df build: split out node resolver 
Signed-off-by: Justin Chadwell <me@jedevc.com>
 2025-12-04 09:48:36 +00:00
Akihiro SudaandGitHub 4eb80cafb9 Merge pull request #3550 from thaJeztah/bump_cli 
vendor: github.com/docker/cli v29.1.2
 2025-12-04 02:00:11 +09:00
Sebastiaan van Stijn 5402d35f8d vendor: github.com/docker/cli v29.1.2 
no changes in vendored code

full diff: https://github.com/docker/cli/compare/v29.1.1...v29.1.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-03 09:36:20 +01:00
Tõnis TiigiandGitHub f72bd30200 Merge pull request #3548 from crazy-max/bake-contexts-override 
docs: named contexts override with bake
 2025-12-02 16:33:31 -08:00
Tõnis TiigiandGitHub a4a02b07e8 Merge pull request #3545 from thaJeztah/bump_moby 
vendor: docker/cli v29.1.1, moby/client v0.2.1
 2025-12-02 16:33:04 -08:00
Sebastiaan van Stijn 5efe75571f vendor: docker/cli v29.1.1, moby/client v0.2.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-02 15:52:11 +01:00
Sebastiaan van Stijn 4f77ae4858 vendor: github.com/moby/buildkit v0.26.2 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-02 15:52:08 +01:00
CrazyMaxandGitHub 6acb14ebf6 Merge pull request #3547 from thaJeztah/bump_otels 
vendor: otel/contrib v0.63.0, otel/exporters v1.38.0
 2025-12-02 15:32:37 +01:00
CrazyMaxandGitHub 3bc343ea41 Merge pull request #3549 from docker/dependabot/github_actions/softprops/action-gh-release-2.5.0 
build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0
 2025-12-02 15:30:20 +01:00
dependabot[bot]andGitHub 7f250c2db1 build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0 
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.4.2 to 2.5.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/5be0e66d93ac7ed76da52eca8bb058f665c3a5fe...a06a81a03ee405af7f2048a818ed3f03bbf83c7b)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-01 20:49:29 +00:00
CrazyMax 9173ef69ec docs: named contexts override with bake 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-28 15:05:47 +01:00
Akihiro SudaandGitHub c6ec16cbc0 Merge pull request #3546 from thaJeztah/int_convert 
driver/kubernetes: change DeploymentOpt.Replicas to int32
 2025-11-28 09:36:04 +09:00
Sebastiaan van Stijn 88b4d5ae03 driver/kubernetes: change DeploymentOpt.Replicas to int32 
Directly convert to a int32 instead of later conversion so that
we can return an error if the value is out of range.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 22:41:57 +01:00
Sebastiaan van Stijn 72126c6a74 vendor: otel/exporters v1.38.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 22:29:28 +01:00
Sebastiaan van Stijn c7aa39fdeb vendor: otel/contrib v0.63.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 22:29:28 +01:00
CrazyMaxandGitHub 50236f7452 Merge pull request #3544 from thaJeztah/bump_x_deps 
vendor: update various golang.org/x/xxx dependencies
 2025-11-27 21:51:26 +01:00
Sebastiaan van Stijn 027fa165d0 vendor: golang.org/x/crypto v0.45.0 
full diff: https://github.com/golang/crypto/compare/v0.44.0...v0.45.0

Hello gophers,

We have tagged version v0.45.0 of golang.org/x/crypto in order to address two
security issues.

This version fixes a vulnerability in the golang.org/x/crypto/ssh package and a
vulnerability in the golang.org/x/crypto/ssh/agent package which could cause
programs to consume unbounded memory or panic respectively.

SSH servers parsing GSSAPI authentication requests don't validate the number of
mechanisms specified in the request, allowing an attacker to cause unbounded
memory consumption.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-58181 and Go issue https://go.dev/issue/76363.

SSH Agent servers do not validate the size of messages when processing new
identity requests, which may cause the program to panic if the message is
malformed due to an out of bounds read.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-47914 and Go issue https://go.dev/issue/76364.

Cheers, Go Security team

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:17:06 +01:00
Sebastiaan van Stijn a2a2819d7d vendor: golang.org/x/net v0.47.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:13:50 +01:00
Sebastiaan van Stijn ae3eed7b80 vendor: golang.org/x/text v0.31.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:12:17 +01:00
Sebastiaan van Stijn 3f5c571f69 golang.org/x/term v0.37.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:09:59 +01:00
Sebastiaan van Stijn b20a9ecf67 vendor: golang.org/x/sync v0.18.0 
full diff: https://github.com/golang/sync/compare/v0.17.0...v0.18.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 18:47:50 +01:00
Sebastiaan van Stijn 3858752e0a vendor: golang.org/x/sys v0.38.0 
- cpu: add HPDS, LOR, PAN detection for arm64
- cpu: also use MRS instruction in getmmfr1
- cpu: use MRS instruction to read arm64 system registers
- unix: add consts for ELF handling
- unix: add SetMemPolicy and its mode/flag values
- unix: add SizeofNhmsg and SizeofNexthopGrp
- windows: add iphlpapi routing functions

full diff: https://github.com/golang/sys/compare/v0.37.0...v0.38.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 18:45:58 +01:00
CrazyMaxandGitHub f1a0fc5d63 Merge pull request #3535 from docker/dependabot/github_actions/peter-evans/create-pull-request-7.0.9 
build(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9
 2025-11-25 18:37:22 +01:00
dependabot[bot]andGitHub b1c71b29c4 build(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 7.0.8 to 7.0.9.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/271a8d0340265f705b14b6d32b9829c1cb33d45e...84ae59a2cdc2258d6fa0732dd66352dddae2a412)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-25 17:16:34 +00:00
Tõnis TiigiandGitHub e084a7f6b6 Merge pull request #3536 from crazy-max/fix-provnance-metadata 
fix empty provenance metadata for multi-platform builds
 2025-11-25 09:10:36 -08:00
CrazyMax 1b9791f6fe fix empty provenance metadata for multi-platform builds 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-25 17:39:46 +01:00
Tõnis TiigiandGitHub 1aa6b6cad9 Merge pull request #3538 from crazy-max/update-freebsd-box 
ci: switch to bento/freebsd-14 vagrant box
 2025-11-25 08:14:15 -08:00
CrazyMax 2625451e61 ci: switch to bento/freebsd-14 vagrant box 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-25 11:36:20 +01:00
CrazyMaxandGitHub 5fd9e1a88c Merge pull request #3533 from docker/dependabot/github_actions/actions/checkout-6 
build(deps): bump actions/checkout from 5 to 6
 2025-11-25 11:21:49 +01:00
Brian Goff 8d822ebf71 dap: Fix breakpoint overlap check 
The old logic wasn't quite right, and a little hard to follow.
Before this, because breakpoints sent from setBreakpoints don't have an
end line or column they are just a single point the comparison would
fail the check due to the column check.

E.g. if I have a breakpoint on line 30.
The content lines range from 29-31.
Now lets say the end column is at postion 10, but my breakpoint is at
L30 column 11 (still within range).
The overlap check would fail because 11 > 10 but these shouldn't be
compared at all in this case.

Signed-off-by: Brian Goff <cpuguy83@gmail.com>
 2025-11-24 17:03:26 -08:00
dependabot[bot]andGitHub 168ceb2395 build(deps): bump actions/checkout from 5 to 6 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-20 18:03:39 +00:00
CrazyMaxandGitHub 4826295631 Merge pull request #3532 from crazy-max/buildkit-0.26.2 
dockerfile: update buildkit to v0.26.2
 2025-11-20 16:27:26 +01:00
CrazyMax 686591444d dockerfile: update buildkit to v0.26.2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-20 15:00:38 +01:00
Tõnis TiigiandGitHub 3c9cd19e54 Merge pull request #3529 from tonistiigi/vendor-v0.26.1 
vendor: update buildkit to v0.26.1
 2025-11-17 16:30:12 +00:00
CrazyMaxandGitHub 05ada34368 Merge pull request #3527 from dvdksn/docs-fix-stdlib-anchors 
docs: remove unnecessary custom anchors and heading in bake stdlib
 2025-11-17 17:10:05 +01:00
Tonis Tiigi 42a2be1c4b vendor: update buildkit to v0.26.1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2025-11-17 16:07:17 +00:00
Tõnis TiigiandGitHub dd0cd08119 Merge pull request #3524 from crazy-max/containerd-update 
vendor: update containerd to efd86f2b0bc2 (release/2.2)
 2025-11-17 16:02:42 +00:00