alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
3,953 Commits 1 Branch 1 Tag
3e4bd229ab9a2e7f5f942feb79cb1cda01a30bed
Commit Graph
3953 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jonathan A. Sternberg 3e4bd229ab dap: skip the load build context step when it doesn't have an associated source line 
Skip the load build context step when it doesn't have an associated
source line. This caused an extra branch to be created in an otherwise
pretty straightforward dockerfile where stepping in on a copy
instruction that used the context would stay on the same line because it
"stepped into" the context loading rather than being treated the same as
step next.

This resulted in some bad and confusing ergonomics with the cursor
position that were a bit confusing and unexpected.

There might be more areas to try and prune but the most common one, a
single branch instruction that doesn't have a location, now gets skipped
which is the exact thing that was generated for loading the context.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-03-10 12:35:13 -05:00
Tõnis TiigiandGitHub a5f49f0c17 Merge pull request #3696 from tonistiigi/bake-linked-target-fix 
build: parallelize forced reference evaluation
 2026-03-09 16:44:38 -07:00
CrazyMaxandGitHub c423bc738b Merge pull request #3706 from tonistiigi/windows-test-timings-bump 
store: increase test timeouts for CI reliability
 2026-03-09 11:51:07 +01:00
CrazyMaxandGitHub 2fcd416c24 Merge pull request #3705 from docker/dependabot/github_actions/docker/bake-action-7 
build(deps): bump docker/bake-action from 6 to 7
 2026-03-09 11:50:40 +01:00
Akihiro SudaandGitHub 9e632b4596 Merge pull request #3707 from tonistiigi/k8s-trim 
kubernetes: trim client-go dependency surface
 2026-03-09 04:13:38 +09:00
Tonis Tiigi 7c4703614d vendor: k8s v0.35.2 
Drops the gogo-proto XXX_* methods.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-06 17:32:09 -08:00
Tonis Tiigi 6124ad9da4 kubernetes: lazily initialize kubeclient scheme 
Use sync.OnceValue to initialize the kubeclient scheme, codec factory,
and parameter codec as a single lazy-loaded bundle.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-06 16:55:48 -08:00
Tonis Tiigi 5a7f7c286f kubernetes: trim client-go dependency surface 
Replace the full generated clientset and global Kubernetes scheme
with a small local REST client layer and minimal scheme registration.

This keeps the existing kubeconfig/auth and remote exec behavior while
significantly reducing the linked and vendored Kubernetes dependency set.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-06 16:44:18 -08:00
Tonis Tiigi 6bbd0abf0f store: increase test timeouts for CI reliability 
Bump timing thresholds in TestNodeLocking to avoid
flaky failures on slow CI runners (e.g. Windows).

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-06 15:06:06 -08:00
dependabot[bot]andGitHub a00f4d6e08 build(deps): bump docker/bake-action from 6 to 7 
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 6 to 7.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/v6...v7)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-06 18:33:12 +00:00
CrazyMaxandGitHub bb481888f9 Merge pull request #3693 from docker/dependabot/github_actions/docker/setup-qemu-action-4 
build(deps): bump docker/setup-qemu-action from 3 to 4
 2026-03-06 11:57:23 +01:00
CrazyMaxandGitHub ff5a387834 Merge pull request #3684 from thaJeztah/bump_moby 
vendor: docker/cli v29.3.0, moby/api v1.54.0, moby/client v0.3.0
 2026-03-06 11:23:00 +01:00
dependabot[bot]andGitHub 35492177d9 build(deps): bump docker/setup-qemu-action from 3 to 4 
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3 to 4.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-06 10:21:42 +00:00
CrazyMaxandGitHub 3ef2ebb13c Merge pull request #3692 from docker/dependabot/github_actions/docker/login-action-4 
build(deps): bump docker/login-action from 3 to 4
 2026-03-06 11:21:42 +01:00
CrazyMaxandGitHub 7e865417cd Merge pull request #3699 from tonistiigi/dockerfile-compose-v5.1.0 
Dockerfile: update compose to 5.1.0
 2026-03-06 11:21:11 +01:00
CrazyMaxandGitHub 6574d1bafa Merge pull request #3698 from docker/dependabot/github_actions/docker/setup-buildx-action-4 
build(deps): bump docker/setup-buildx-action from 3 to 4
 2026-03-06 11:20:42 +01:00
Tonis Tiigi 5478703490 tests: test updates after compose update 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-05 17:58:56 -08:00
Tonis Tiigi b6f1f3a9bf Dockerfile: update compose to 5.1.0 
Fixes the possible "file already closed" error.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-05 15:41:04 -08:00
dependabot[bot]andGitHub da51d1df32 build(deps): bump docker/setup-buildx-action from 3 to 4 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-05 18:33:24 +00:00
Sebastiaan van Stijn c06971965f vendor: docker/cli v29.3.0, moby/api v1.54.0, moby/client v0.3.0 
This also allows the client to connect with API v1.40 and up (Docker 19.03),
which previously was API v1.43 and up (Docker 25.0 and up).

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-05 16:38:27 +01:00
Tonis Tiigi 2adc53cfb3 build: parallelize forced reference evaluation 
Use an errgroup helper to evaluate result refs concurrently during forced
evaluation, and fail fast on the first evaluation error.

This mitigates current case in bake where chained targets with
a multi-platform build could miss secrets and other session properties.

The outline for the issue case:
- Base target is solved but only lazily and not really loaded/tracked
in build graph yet.
- Child targets are loaded, base target waits.
- Evaluate is called for base stage (because it might be missing result
condition), child stage is processed as build result. This happens in
parallel.
- Because `Evaluate()` was called synchronously, it may have not been
 called yet for the second platform while the child target already
 needs to run `RUN --mount=type=secret`.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-04 18:09:41 -08:00
dependabot[bot]andGitHub dfd8d6c29c build(deps): bump docker/login-action from 3 to 4 
Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-04 18:32:58 +00:00
Tõnis TiigiandGitHub d315c086c3 Merge pull request #3690 from crazy-max/policy-session 
build: reuse build session for policy source resolution
 2026-03-04 09:58:04 -08:00
CrazyMax 2ed4ece865 build: reuse build session for policy source resolution 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-04 17:21:20 +01:00
Tõnis TiigiandGitHub 08998a7e90 Merge pull request #3688 from tonistiigi/vendor-buildkit-v0.28.0 
vendor: update buildkit to v0.28.0
 2026-03-03 12:38:47 -08:00
Tonis Tiigi 55bef8178d vendor: update buildkit to v0.28.0 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-03 12:17:01 -08:00
Tõnis TiigiandGitHub 75c53e39a5 Merge pull request #3682 from crazy-max/bake-print-subdir 
bake: preserve git subdir in remote bake context paths
 2026-03-03 09:25:28 -08:00
CrazyMax 50fa13d859 bake: preserve git subdir in remote bake context paths 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-03 17:47:07 +01:00
Tõnis TiigiandGitHub 00cc36c402 Merge pull request #3678 from tonistiigi/bake-subdir-remote-fix 
bake: fix remote named context subdir handling
 2026-03-03 08:39:54 -08:00
Tõnis TiigiandGitHub 8f02b16216 Merge pull request #3685 from thaJeztah/snappier 
vendor: github.com/golang/snappy v1.0.0
 2026-03-03 08:38:56 -08:00
Sebastiaan van Stijn f1f38d34ad vendor: github.com/golang/snappy v1.0.0 
Ensure arm64 frame sizes are 8 (mod 16)

fixes: "Weird failure when building on Raspbian / Debian 10.11"

full diff: https://github.com/golang/snappy/compare/v0.0.4...v1.0.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-03 16:28:00 +01:00
CrazyMaxandGitHub 256889070c Merge pull request #3681 from docker/dependabot/github_actions/crazy-max/ghaction-github-runtime-4 
build(deps): bump crazy-max/ghaction-github-runtime from 3 to 4
 2026-03-03 12:55:28 +01:00
Tõnis TiigiandGitHub 130755c4bb Merge pull request #3680 from crazy-max/openbsd-git 
hack/openbsd: use cdn.openbsd.org for PKG_PATH
 2026-03-02 18:27:21 -08:00
dependabot[bot]andGitHub cc0d1f6331 build(deps): bump crazy-max/ghaction-github-runtime from 3 to 4 
Bumps [crazy-max/ghaction-github-runtime](https://github.com/crazy-max/ghaction-github-runtime) from 3 to 4.
- [Release notes](https://github.com/crazy-max/ghaction-github-runtime/releases)
- [Commits](https://github.com/crazy-max/ghaction-github-runtime/compare/v3...v4)

---
updated-dependencies:
- dependency-name: crazy-max/ghaction-github-runtime
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-02 20:23:09 +00:00
CrazyMax 1c7acc8c46 hack/openbsd: use cdn.openbsd.org for PKG_PATH 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-02 11:22:00 +01:00
CrazyMaxandGitHub e835707400 Merge pull request #3672 from docker/dependabot/github_actions/actions/upload-artifact-7 
build(deps): bump actions/upload-artifact from 6 to 7
 2026-03-02 11:07:43 +01:00
CrazyMaxandGitHub bbadcb4368 Merge pull request #3673 from docker/dependabot/github_actions/actions/download-artifact-8 
build(deps): bump actions/download-artifact from 7 to 8
 2026-03-02 11:07:19 +01:00
Tonis Tiigi d39a81e456 bake: fix remote named context subdir handling 
Fix using CopyDirContentsOnly when projecting remote named contexts so
subdir contexts keep the same root semantics as local bake runs.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-27 17:06:32 -08:00
CrazyMaxandGitHub 22074cd400 Merge pull request #3676 from crazy-max/buildkit-0.28.0-rc2 
vendor: update buildkit to v0.28.0-rc2
 2026-02-27 17:34:50 +01:00
CrazyMax 7346c1f0dc vendor: update buildkit to v0.28.0-rc2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-27 16:51:40 +01:00
CrazyMaxandGitHub 989b8637c9 Merge pull request #3674 from tonistiigi/policy-fs-refs-fix 
build: ref-count policy FS lifecycle
 2026-02-27 15:52:36 +01:00
CrazyMaxandGitHub e43156d54a Merge pull request #3662 from tonistiigi/policy-recursive-materials 
policy: add recursive provenance material resolution
 2026-02-27 15:51:51 +01:00
CrazyMaxandGitHub a88af0e2ae Merge pull request #3675 from tonistiigi/policy-filename-fix 
build: normalize policy env filename default
 2026-02-27 15:33:02 +01:00
Tonis Tiigi f3a1249560 build: normalize policy env filename default 
Use cleaned DockerfilePath basename for policy env filename and fall back
to Dockerfile when the path resolves to dot or root.

Previously filename could be reported as "." on default cases.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 21:13:03 -08:00
Tonis Tiigi 9ef416b258 build: ref-count policy FS lifecycle 
Make memoized policy FS ref-counted so repeated get()/close() pairs don't
prematurely close shared handles.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 18:48:38 -08:00
Tonis Tiigi 1c4a436a0d policy: match parent unknown keys in collectUnknowns 
Allow child refs from partial evaluation to match allowed parent keys on
path boundaries and return canonical unknowns for metadata resolution.

Add tests for parent-child matching and boundary safety cases.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 17:12:18 -08:00
Tonis Tiigi 73ea669465 vendor: update buildkit to ecde33610015 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 17:06:30 -08:00
dependabot[bot]andGitHub 8a2b64a1a5 build(deps): bump actions/download-artifact from 7 to 8 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-26 18:32:58 +00:00
dependabot[bot]andGitHub f606596834 build(deps): bump actions/upload-artifact from 6 to 7 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-26 18:32:52 +00:00
Tonis Tiigi 88cba2c367 policy: avoid stale invalid field warnings in eval 
Track fields reloaded during eval --print resolution loops and filter
final invalid-field warnings against that set.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 09:14:31 -08:00