alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,290 Commits 1 Branch 1 Tag
3bcb873b04b1d01c13b3574753e1f93d1e9d27ca
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastiaan van Stijn 3bcb873b04 vendor: github.com/vektah/gqlparser/v2 v2.5.32 
- Add formatter.WithNonIntrospectionBuiltin
- Add a nil check in ArgumentMap
- fix(validator): allow nullable variables for nonnull args with default
- lint and format

full diff: https://github.com/vektah/gqlparser/compare/v2.5.30...v2.5.32

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-01 15:31:34 +02:00
Sebastiaan van Stijn 1adcd07066 vendor: github.com/lestrrat-go/jwx/v3 v3.0.13 
full diff: https://github.com/lestrrat-go/jwx/compare/v3.0.11...v3.0.13

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-01 15:31:34 +02:00
Sebastiaan van Stijn 4b595a3671 vendor: github.com/lestrrat-go/httprc/v3 v3.0.2 
full diff: https://github.com/lestrrat-go/httprc/compare/v3.0.1...v3.0.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-01 15:31:33 +02:00
Sebastiaan van Stijn 3f0b52dc73 vendor: github.com/valyala/fastjson v1.6.7 
- pool.go: add missing Arena.Reset() call inside ArenaPool.Put()
- Treat nil values as null in SetArrayItem
  prevents a potential panic when a nil value is used as an array item

full diff: https://github.com/valyala/fastjson/compare/v1.6.4...v1.6.7

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-01 15:31:33 +02:00
Sebastiaan van Stijn 0ff357e4be vendor: github.com/segmentio/asm v1.2.1 
- LICENSE CHANGE: MIT to MIT-0 (No Attribution)
- replace arm64 macro to please go vet

full diff: https://github.com/segmentio/asm/compare/v1.2.0...v1.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-01 15:31:33 +02:00
Sebastiaan van Stijn d27d845f75 vendor: github.com/docker/cli v29.6.1 
full diff: https://github.com/docker/cli/compare/v29.5.3...v29.6.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-01 14:43:19 +02:00
Sebastiaan van Stijn e1e5963dae vendor: github.com/containerd/containerd/v2 v2.2.5 
- full diff: https://github.com/containerd/containerd/compare/v2.2.4...v2.2.5
- release notes: https://github.com/containerd/containerd/releases/tag/v2.2.5

The fifth patch release for containerd 2.2 contains various fixes
and updates including security patches.

-  CVE-2026-50195 / [GHSA-cvxm-645q-p574] CRI: checkpoint import allows local image tag poisoning
-  CVE-2026-53488 / [GHSA-xhf5-7wjv-pqxp] CRI: image-config LABEL flows to host-root command execution from an image pull
-  CVE-2026-53492 / [GHSA-33vj-92qq-66hc] CRI: CDI annotation smuggling during CRI checkpoint restore
-  CVE-2026-53489 / [GHSA-rgh6-rfwx-v388] CRI: Arbitrary host file read via symlink following in CRI checkpoint restore
-  CVE-2026-47262 / [GHSA-jpcc-p29g-p8mq] containerd image-triggered runtime DoS via unbounded group parsing

[GHSA-cvxm-645q-p574]: https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574
[GHSA-xhf5-7wjv-pqxp]: https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp
[GHSA-33vj-92qq-66hc]: https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc
[GHSA-rgh6-rfwx-v388]: https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388
[GHSA-jpcc-p29g-p8mq]: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-23 09:27:04 +02:00
Sebastiaan van Stijn 962c4d1780 vendor: golang.org/x/tools v0.46.0 
full diff: https://github.com/golang/tools/compare/v0.45.0...v0.46.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:50 +02:00
Sebastiaan van Stijn 04c24b93df vendor: golang.org/x/net v0.56.0 
full diff: https://github.com/golang/net/compare/v0.55.0...v0.56.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:50 +02:00
Sebastiaan van Stijn a271da13ea vendor: golang.org/x/crypto v0.53.0 
full diff: https://github.com/golang/crypto/compare/v0.52.0...v0.53.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:50 +02:00
Sebastiaan van Stijn 7609bf8845 vendor: golang.org/x/text v0.38.0 
full diff: https://github.com/golang/text/compare/v0.37.0...v0.38.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:50 +02:00
Sebastiaan van Stijn d551a606e9 vendor: golang.org/x/sync v0.21.0 
full diff: https://github.com/golang/sync/compare/v0.20.0...v0.21.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:50 +02:00
Sebastiaan van Stijn ad0a622e24 vendor: golang.org/x/mod v0.37.0 
full diff: https://github.com/golang/mod/compare/v0.36.0...v0.37.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:49 +02:00
Sebastiaan van Stijn 8d182fad32 vendor: golang.org/x/term v0.44.0 
full diff: https://github.com/golang/term/compare/v0.43.0...v0.44.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:49 +02:00
Sebastiaan van Stijn d2a2999949 vendor: golang.org/x/sys v0.46.0 
full diff: https://github.com/golang/sys/compare/v0.45.0...v0.46.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:49 +02:00
Sebastiaan van Stijn 7487502115 Dockerfile: update to docker v29.6 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-18 22:55:20 +02:00
Sebastiaan van Stijn 8b1d06a0ec policy: remove uses of deprecated WithBuiltins 
The WithBuiltins method was deprecated in opa v0.23.0 ([opa@afc8c5e]) in
favor of WithCapabilities, but the deprecation didn't use the standard
format, causing it not being detected as deprecated. OPA v1.1.0 corrected
the deprecation in [opa@622434d].

This patch replaces uses of the deprecated functions.

[opa@afc8c5e]: https://github.com/open-policy-agent/opa/commit/afc8c5e2a22878086067821f24e15d060594227a
[opa@622434d]: https://github.com/open-policy-agent/opa/commit/622434d11386c7b12aee703d7c1eedea34a27c7b

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-16 15:11:37 +02:00
Sebastiaan van Stijn 68fd340247 vendor: go.opentelemetry.io/otel/exporters v1.44.0 
removes the semconv v1.40.0 dependency

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-15 14:13:52 +02:00
Sebastiaan van Stijn 6118c5856f Dockerfile: update to docker v29.5 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-05-18 20:53:39 +02:00
Sebastiaan van Stijn 587111d392 vendor: github.com/docker/cli v29.5.1 
full diff: https://github.com/docker/cli/compare/v29.4.3...v29.5.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-05-18 20:49:19 +02:00
Sebastiaan van Stijn 5378e2a2dd vendor: github.com/docker/docker-credential-helpers v0.9.7 
no code-changes; only updates go version

full diff: https://github.com/docker/docker-credential-helpers/compare/v0.9.6...v0.9.7

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-05-08 14:54:48 +02:00
Sebastiaan van Stijn a3512c1cfa util/ocilayout: replace regex for matching windows drive-letters 
follow-up to bf34a4cbed, which changed the
isWindowsDrivePath function to use a regex for matching the trailing slash.

This reverts it back to te previous implementation to avoid a regex, but
adds a check for the colon to be followed by a forward-slash, which is
faster, and avoids the overhead of `regex.MustCompile` during init.

    BenchmarkRegex-11    39056917      32.45 ns/op     0 B/op    0 allocs/op
    BenchmarkManual-11   1000000000     0.2476 ns/op   0 B/op    0 allocs/op

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-05-04 12:07:18 +02:00
Sebastiaan van Stijn 76ba2fac5c driver/docker-container: remove uses of jsonmessage 
This function was always using `io.Discard` for printing the progress,
so we can use the `Wait()` method, which reads the stream, returning
any error (similar to jsonmessage.DisplayJSONMessagesStream), and
closes the stream either if the context is cancelled, or if the
stream ends.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 13:35:39 +02:00
Sebastiaan van Stijn d45c770d5e vendor: github.com/docker/cli v29.4.1 
full diff: https://github.com/docker/cli/compare/v29.4.0...v29.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn 650f72ca74 vendor: github.com/mattn/go-runewidth v0.0.23 
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.22...v0.0.23

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn a2e6003124 vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2 
- https://github.com/moby/moby/compare/api/v1.54.1...api/v1.54.2
- https://github.com/moby/moby/compare/client/v0.4.0...client/v0.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:16:59 +02:00
Sebastiaan van Stijn 478d9b19a2 vendor: github.com/docker/go-connections v0.7.0 
full diff: https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:16:59 +02:00
Sebastiaan van Stijn 0b0843233b vendor: github.com/docker/cli v29.4.0 
full diff: https://github.com/docker/cli/compare/v29.3.1...v29.4.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-07 11:52:07 +02:00
Sebastiaan van Stijn 2da27cedb5 vendor: github.com/mattn/go-runewidth v0.0.22 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn eaac97ea66 vendor: golang.org/x/net v0.52.0 
full diff: https://cs.opensource.google/go/x/net/+/refs/tags/v0.50.0...refs/tags/v0.52.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn df41850e26 vendor: golang.org/x/time v0.15.0 
full diff: https://cs.opensource.google/go/x/time/+/refs/tags/v0.14.0...refs/tags/v0.15.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn db4fa7c158 vendor: golang.org/x/text v0.35.0 
full diff: https://cs.opensource.google/go/x/text/+/refs/tags/v0.34.0...refs/tags/v0.35.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn 2700871d66 vendor: golang.org/x/mod v0.34.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn 3ad8f0891a vendor: golang.org/x/sync v0.20.0 
full diff: https://cs.opensource.google/go/x/sync/+/refs/tags/v0.19.0...refs/tags/v0.20.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn 63b4d001aa vendor: go.opentelemetry.io/otel v1.42.0, otel/contrib v1.67.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-04 01:41:01 +02:00
Sebastiaan van Stijn 3b630c6437 vendor: moby/client v0.4.0, moby/api v1.54.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-03 16:05:48 +02:00
Sebastiaan van Stijn c06971965f vendor: docker/cli v29.3.0, moby/api v1.54.0, moby/client v0.3.0 
This also allows the client to connect with API v1.40 and up (Docker 19.03),
which previously was API v1.43 and up (Docker 25.0 and up).

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-05 16:38:27 +01:00
Sebastiaan van Stijn f1f38d34ad vendor: github.com/golang/snappy v1.0.0 
Ensure arm64 frame sizes are 8 (mod 16)

fixes: "Weird failure when building on Raspbian / Debian 10.11"

full diff: https://github.com/golang/snappy/compare/v0.0.4...v1.0.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-03 16:28:00 +01:00
Sebastiaan van Stijn 76355684bc docs: fix typo 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-08 18:13:50 +01:00
Sebastiaan van Stijn 79b14eaeab vendor: github.com/docker/cli v29.2.1 
full diff: https://github.com/docker/cli/compare/v29.2.0...v29.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 8bd5bd4983 vendor: github.com/docker/cli v29.2.0 
full diff: https://github.com/docker/cli/compare/v29.1.5...v29.2.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 9aa7e1578a vendor: moby/api v1.53.0, moby/client v0.2.2 
full diff:

- api: https://github.com/moby/moby/compare/api/v1.52.0...api/v1.53.0
- client: https://github.com/moby/moby/compare/client/v0.2.1...client/v0.2.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 6b71de00a0 vendor: github.com/go-viper/mapstructure/v2 v2.5.0 
full diff: https://github.com/go-viper/mapstructure/compare/v2.4.0...v2.5.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:55 +01:00
Sebastiaan van Stijn eaf81b65d9 vendor: github.com/klauspost/compress v1.18.3 
no changes in vendored code

- fixes / downstream CVE-2025-61728

full diff: https://github.com/klauspost/compress/compare/v1.18.2...v1.18.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:53 +01:00
Sebastiaan van Stijn 3eee42b002 use consistent alias for stdlib "errors" 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 11:14:27 +01:00
Sebastiaan van Stijn efe1aa593e vendor: golang.org/x/mod v0.32.0 
full diffs:

- https://cs.opensource.google/go/x/tools/+/refs/tags/v0.39.0...refs/tags/v0.41.0
- https://cs.opensource.google/go/x/mod/+/refs/tags/v0.31.0...refs/tags/v0.32.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:05:18 +01:00
Sebastiaan van Stijn 5d44afbda4 vendor: golang.org/x/crypto v0.47.0 
full diffs:

- https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.46.0...refs/tags/v0.47.0
- https://cs.opensource.google/go/x/net/+/refs/tags/v0.48.0...refs/tags/v0.49.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 746c343d18 vendor: golang.org/x/text v0.33.0 
full diff: https://cs.opensource.google/go/x/text/+/refs/tags/v0.32.0...refs/tags/v0.33.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 95a1cb94b3 vendor: golang.org/x/tools v0.40.0 
full diff: https://cs.opensource.google/go/x/tools/+/refs/tags/v0.39.0...refs/tags/v0.40.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 214ebd8434 vendor: golang.org/x/term v0.39.0 
full diff: https://cs.opensource.google/go/x/term/+/refs/tags/v0.38.0...refs/tags/v0.39.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 40d068e12c vendor: golang.org/x/sys v0.40.0 
full diff: https://cs.opensource.google/go/x/sys/+/refs/tags/v0.39.0...refs/tags/v0.40.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 39ee64df71 commands/history: rewrite with stdlib multi-errors 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-26 12:53:33 +01:00
Sebastiaan van Stijn 0d343eff2d vendor: github.com/docker/cli v29.1.5 
no changes in code

full diff: https://github.com/docker/cli/compare/v29.1.4...v29.1.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-19 13:08:21 +01:00
Sebastiaan van Stijn 99b8143e28 vendor: github.com/sirupsen/logrus v1.9.4 
full diff: https://github.com/sirupsen/logrus/compare/dd1b4c2e81af...v1.9.4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-15 11:23:56 +01:00
Sebastiaan van Stijn e419caae8b vendor: github.com/docker/cli v29.1.4 
no changes in vendored files

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-09 10:55:10 +01:00
Sebastiaan van Stijn 7762411537 vendor: github.com/containerd/containerd/v2 v2.2.1 
The pull request that was needed has been released now as part of v2.2.1;
full diff: https://github.com/containerd/containerd/compare/efd86f2b0bc2...v2.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-07 11:33:39 +01:00
Sebastiaan van Stijn 77571f56f2 vendor: github.com/docker/cli v29.1.3 
full diff: https://github.com/docker/cli/compare/v29.1.2...v29.1.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-16 11:08:53 +01:00
Sebastiaan van Stijn 3bc50aece8 vendor: github.com/klauspost/compress v1.18.2 
No changes in vendored code

Fixes a regression in v1.18.1 that resulted in invalid flate/zip/gzip encoding.
The v1.18.1 tag has been retracted.

full diff: https://github.com/klauspost/compress/compare/v1.18.1...v1.18.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-16 11:08:52 +01:00
Sebastiaan van Stijn 9353c2c00e vendor: github.com/morikuni/aec v1.1.0 
full diff: https://github.com/morikuni/aec/compare/v1.0.0...v1.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-11 17:51:11 +01:00
Sebastiaan van Stijn 304ab6d65d vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0 
reduce dependency on the archived go.yaml.in/yaml/v3 package

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-09 16:55:47 +01:00
Sebastiaan van Stijn 5402d35f8d vendor: github.com/docker/cli v29.1.2 
no changes in vendored code

full diff: https://github.com/docker/cli/compare/v29.1.1...v29.1.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-03 09:36:20 +01:00
Sebastiaan van Stijn 5efe75571f vendor: docker/cli v29.1.1, moby/client v0.2.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-02 15:52:11 +01:00
Sebastiaan van Stijn 4f77ae4858 vendor: github.com/moby/buildkit v0.26.2 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-02 15:52:08 +01:00
Sebastiaan van Stijn 88b4d5ae03 driver/kubernetes: change DeploymentOpt.Replicas to int32 
Directly convert to a int32 instead of later conversion so that
we can return an error if the value is out of range.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 22:41:57 +01:00
Sebastiaan van Stijn 72126c6a74 vendor: otel/exporters v1.38.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 22:29:28 +01:00
Sebastiaan van Stijn c7aa39fdeb vendor: otel/contrib v0.63.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 22:29:28 +01:00
Sebastiaan van Stijn 027fa165d0 vendor: golang.org/x/crypto v0.45.0 
full diff: https://github.com/golang/crypto/compare/v0.44.0...v0.45.0

Hello gophers,

We have tagged version v0.45.0 of golang.org/x/crypto in order to address two
security issues.

This version fixes a vulnerability in the golang.org/x/crypto/ssh package and a
vulnerability in the golang.org/x/crypto/ssh/agent package which could cause
programs to consume unbounded memory or panic respectively.

SSH servers parsing GSSAPI authentication requests don't validate the number of
mechanisms specified in the request, allowing an attacker to cause unbounded
memory consumption.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-58181 and Go issue https://go.dev/issue/76363.

SSH Agent servers do not validate the size of messages when processing new
identity requests, which may cause the program to panic if the message is
malformed due to an out of bounds read.

Thanks to Jakub Ciolek for reporting this issue.

This is CVE-2025-47914 and Go issue https://go.dev/issue/76364.

Cheers, Go Security team

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:17:06 +01:00
Sebastiaan van Stijn a2a2819d7d vendor: golang.org/x/net v0.47.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:13:50 +01:00
Sebastiaan van Stijn ae3eed7b80 vendor: golang.org/x/text v0.31.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:12:17 +01:00
Sebastiaan van Stijn 3f5c571f69 golang.org/x/term v0.37.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 19:09:59 +01:00
Sebastiaan van Stijn b20a9ecf67 vendor: golang.org/x/sync v0.18.0 
full diff: https://github.com/golang/sync/compare/v0.17.0...v0.18.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 18:47:50 +01:00
Sebastiaan van Stijn 3858752e0a vendor: golang.org/x/sys v0.38.0 
- cpu: add HPDS, LOR, PAN detection for arm64
- cpu: also use MRS instruction in getmmfr1
- cpu: use MRS instruction to read arm64 system registers
- unix: add consts for ELF handling
- unix: add SetMemPolicy and its mode/flag values
- unix: add SizeofNhmsg and SizeofNexthopGrp
- windows: add iphlpapi routing functions

full diff: https://github.com/golang/sys/compare/v0.37.0...v0.38.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-27 18:45:58 +01:00
Sebastiaan van Stijn 2f462a4945 vendor: github.com/docker/cli v29.0.1 
full diff: https://github.com/docker/cli/compare/v29.0.0...v29.0.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-16 23:20:52 +01:00
Sebastiaan van Stijn b0b2a4e1ef vendor: github.com/docker/docker-credential-helpers v0.9.4 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-16 23:20:44 +01:00
Sebastiaan van Stijn 18dc2e088a vendor: github.com/moby/moby/api v1.52.0, moby/client v0.1.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-11-12 01:30:02 +01:00
Sebastiaan van Stijn 08322e90c5 vendor: github.com/docker/docker, docker/cli v28.5.1 
full diff:

- https://github.com/docker/cli/compare/v28.4.0...v28.5.1
- https://github.com/docker/docker/compare/v28.4.0...v28.5.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-10-08 22:45:12 +02:00
Sebastiaan van Stijn f4fb1715a5 vendor: github.com/moby/buildkit v0.25.1 
full diff: https://github.com/moby/buildkit/compare/v0.25.0...v0.25.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-10-08 22:44:44 +02:00
Sebastiaan van Stijn 1126d853a8 driver/kubernetes/context: don't use ResolveDefaultContext in test 
The ResolveDefaultContext function is only used internally by the CLI,
and has no known external users, except for this test in buildx. It was
exported in [cli@f820766] to allow (unit) testing, but did not document
that it was only exported for this purpose.

This patch rewrites the test to allow deprecating / removing the function
in the CLI.

[cli@f820766]: https://github.com/docker/cli/commit/f820766f6ac57188d96c9ca377f2b4627e90da28

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-10-01 11:31:09 +02:00
Sebastiaan van Stijn d1afe64cd1 vendor: github.com/spf13/cobra v1.10.1 
full diff: https://github.com/spf13/cobra/compare/v1.9.1...v1.10.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-09-19 19:48:35 +02:00
Sebastiaan van Stijn df0b265314 vendor: github.com/spf13/pflag v1.0.10 
full diff: https://github.com/spf13/pflag/compare/v1.0.6...v1.0.10

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-09-19 19:44:24 +02:00
Sebastiaan van Stijn b4d5ec9bc2 Dockerfile: update to docker v28.4.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-09-04 00:24:06 +02:00
Sebastiaan van Stijn a923dbc1d9 vendor: github.com/docker/docker, docker/cli v28.4.0 
full diffs:

- https://github.com/docker/docker/compare/v28.3.3...v28.4.0
- https://github.com/docker/cli/compare/v28.3.3...v28.4.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-09-04 00:11:44 +02:00
Sebastiaan van Stijn 07b99ae7bf commands: verify that DisableFlagsInUseLine is set for all commands 
This replaces the DisableFlagsInUseLine call from the CLI with a test
that verifies the option is set for all commands and subcommands, so
that it doesn't have to be modified at runtime.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-08-28 17:55:50 +02:00
Sebastiaan van Stijn 36b18a4c7a remove some intermediate vars 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-08-06 23:00:24 +02:00
Sebastiaan van Stijn bbd18927d2 vendor: github.com/moby/buildkit 9b91d20367db (master, v0.24-dev) 
full diff: https://github.com/moby/buildkit/compare/9b91d20367db...955c2b2f7d014cf13a0f755d298963f8c0a190b6

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-08-06 16:47:11 +02:00
Sebastiaan van Stijn 4b9a2b07fc vendor: github.com/docker/docker, docker/cli v28.3.3 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-07-29 19:39:20 +02:00
Sebastiaan van Stijn 3f725bf4d8 driver/kubernetes: remove uses of pkg/homedir 
Create a local fork to keep the existing behavior.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-07-21 14:46:45 +02:00
Sebastiaan van Stijn 1205802f63 util/otelutil: change uses of deprecated instrumentation.Library 
While the interface's signature uses the deprecated "Library" type,
and upstream documents it as "needed for backward compatibility";
https://github.com/open-telemetry/opentelemetry-go/blob/0f7f1d0bad21aba18feaadc0171c53705fbda419/sdk/trace/span.go#L62-L65

The Library type is now an alias for Scope, so using the non-deprecated
type still satisfies the interface;
https://github.com/open-telemetry/opentelemetry-go/blob/0f7f1d0bad21aba18feaadc0171c53705fbda419/sdk/instrumentation/library.go#L6-L9

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-07-03 13:40:29 +02:00
Sebastiaan van Stijn fd87647da1 use "#nosec" instead of "nolint:gosec" to be more specific 
The `#nosec` comment allows ignoring a specific rule; this prevents
potentially other "gosec" linting failulres from being silently ignored.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-07-03 13:31:06 +02:00
Sebastiaan van Stijn 5da2ff5990 bake/hclparser/gohcl: fix typo 
Looks like we forked this code, including the typo. As we already modify
the code to add the `//nolint`, we may as well fix the typo itself instead.
https://github.com/hashicorp/hcl/blob/dfa124f3c93ff1764fda03702a7a9aa8c9db48d8/gohcl/decode_test.go#L417-L423

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-07-03 13:27:37 +02:00
Sebastiaan van Stijn 5c3e534a79 vendor: align otel deps to v0.60.0 / v1.35.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-06-25 12:50:03 +02:00
Sebastiaan van Stijn 25a9ad6abd vendor: github.com/docker/cli v28.3.0 
full diff: https://github.com/docker/cli/compare/v28.2.2...v28.3.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-06-25 09:21:46 +02:00
Sebastiaan van Stijn a11757121a vendor: github.com/docker/docker v28.3.0 
full diff: https://github.com/docker/docker/compare/v28.2.2...v28.3.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-06-25 09:17:40 +02:00
Sebastiaan van Stijn 7a05ca4547 Dockerfile: update to docker v28.3.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-06-25 09:06:20 +02:00
Sebastiaan van Stijn 13031cc2ca vendor: github.com/docker/docker, docker/cli v28.2.2 
no changes in vendored file, just version update

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-05-30 17:30:09 +02:00
Sebastiaan van Stijn 46fae59e2e Dockerfile: update to docker v28.2.2 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-05-30 17:24:23 +02:00
Sebastiaan van Stijn 99d82e6cea vendor: github.com/docker/cli v28.2.1 
full diff: https://github.com/docker/cli/compare/v28.1.1...v28.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-05-29 09:36:54 +02:00
Sebastiaan van Stijn bc620fcc71 vendor: github.com/docker/docker v28.2.1 
full diff: https://github.com/docker/docker/compare/v28.1.1...v28.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-05-29 09:34:27 +02:00
Sebastiaan van Stijn ab533b0cb4 vendor: github.com/docker/cli v28.1.1 
no changes in vendored code

diff:  https://github.com/docker/cli/compare/v28.1.0...v28.1.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-22 12:30:00 +02:00
Sebastiaan van Stijn 0855cab1bd vendor: github.com/docker/docker v28.1.1 
diff:  https://github.com/docker/docker/compare/v28.1.0...v28.1.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-22 12:29:21 +02:00