Commit Graph
4246 Commits
Author SHA1 Message Date
CrazyMaxandGitHub 4149c242ab Merge pull request #3902 from crazy-max/github-builder-1.12.0
ci: update docker/github-builder to v1.12.0
2026-06-11 18:27:31 +02:00
CrazyMax 548e583d81 ci: update docker/github-builder to v1.12.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-11 17:39:34 +02:00
CrazyMaxandGitHub 8e59d65b5a Merge pull request #3896 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
2026-06-11 14:53:16 +02:00
Tõnis TiigiandGitHub 89b455a9e3 Merge pull request #3897 from tonistiigi/update-buildkit-v0.31.0-rc1
vendor: update buildkit to v0.31.0-rc1
2026-06-10 14:58:01 -07:00
Tonis Tiigi b5cf212276 vendor: update buildkit to v0.31.0-rc1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-10 14:19:03 -07:00
Tõnis TiigiandGitHub dd388bf70e Merge pull request #3883 from crazy-max/local-output-delete
support BuildKit local output delete mode
2026-06-10 14:14:12 -07:00
Tõnis TiigiandGitHub 4fa5bb2396 Merge pull request #3895 from tonistiigi/exec-proxy-support
policy: enable proxy network from source policy caps
2026-06-10 14:09:56 -07:00
dependabot[bot]andGitHub 786a5433c2 build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v6.0.1...fb8b3582c8e4def4969c97caa2f19720cb33a72f)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-10 18:34:30 +00:00
Tonis Tiigi 25db0fb050 tests: verify exec traffic is policy-checked in caps proxy test
Extend testBuildPolicyCapsProxy so that instead of only checking that
the network proxy was enabled, the build runs a command that makes an
HTTP request to a local test server. The policy denies that URL as an
HTTP source, so the test now verifies that exec traffic actually flows
through the proxy and is subject to source policy, including the deny
message and DENY decision in the build output.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-10 08:58:48 -07:00
CrazyMax b6e1b7328f build: gate local delete outputs
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-10 16:41:10 +02:00
CrazyMaxandCrazyMax 473c6ef306 bake: requires explicit allow for local output delete mode
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-10 16:41:09 +02:00
CrazyMax 1916210ddc vendor: update buildkit to f449174742bf
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-10 16:41:09 +02:00
Tonis TiigiandCrazyMax 4da04e3bf4 policy: enable proxy network from source policy caps
Evaluate source policy caps before solve requests so policies can enable
BuildKit proxy networking. Policy can return caps {"exec.proxy": true}
during the caps request to enable proxy network
support for the solve.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-10 15:04:23 +02:00
CrazyMaxandGitHub 2fcfce0e71 Merge pull request #3894 from tonistiigi/0609-update-buildkit
vendor: update buildkit to 41c29fffe299
2026-06-10 13:33:47 +02:00
Tonis Tiigi 58a5a2cd60 vendor: update buildkit to 41c29fffe299
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-09 19:44:00 -07:00
Tõnis TiigiandGitHub 76703de985 Merge pull request #3876 from jirimoravcik/feat/per-step-resource-limits
build: Add per-step CPU and memory resource limits
2026-06-09 17:49:21 -07:00
CrazyMaxandGitHub 3a6e4e5e88 Merge pull request #3887 from crazy-max/codecov-test-results
ci: upload test results to codecov
2026-06-09 21:16:29 +02:00
Tõnis TiigiandGitHub b0d201a941 Merge pull request #3888 from crazy-max/fix-oci-mediatypes
build: handle buildkit defaulting to oci mediatypes
2026-06-09 11:37:05 -07:00
CrazyMax 8191e19d94 build: handle buildkit defaulting to oci mediatypes
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-09 19:43:48 +02:00
CrazyMaxandGitHub 0b358c7637 Merge pull request #3889 from docker/dependabot/github_actions/crazy-max-dot-github-a6a0ecf511
build(deps): bump the crazy-max-dot-github group with 2 updates
2026-06-09 15:55:32 +02:00
CrazyMaxandGitHub bad76e04fa Merge pull request #3890 from docker/dependabot/github_actions/github/codeql-action-4.36.2
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
2026-06-09 15:55:06 +02:00
CrazyMaxandGitHub fa085de627 Merge pull request #3891 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.11.0
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.10.0 to 1.11.0
2026-06-09 15:54:41 +02:00
CrazyMaxandGitHub 72113d3ee2 Merge pull request #3892 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
2026-06-09 15:53:53 +02:00
CrazyMaxandGitHub 5e1dead20b Merge pull request #3893 from docker/dependabot/github_actions/crazy-max/dot-github-1.10.0
build(deps): bump crazy-max/.github from 1.8.0 to 1.10.0
2026-06-09 15:53:28 +02:00
dependabot[bot]andGitHub e0b7911e4f build(deps): bump crazy-max/.github from 1.8.0 to 1.10.0
Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from 1.8.0 to 1.10.0.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536)

---
updated-dependencies:
- dependency-name: crazy-max/.github
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:35:03 +00:00
dependabot[bot]andGitHub 91602db282 build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/e79a6962e0d4c0c17b229090214935d2e33f8354...fb8b3582c8e4def4969c97caa2f19720cb33a72f)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:34:50 +00:00
dependabot[bot]andGitHub 401a77d662 build(deps): bump docker/github-builder/.github/workflows/bake.yml
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/17bd7d64200cae4ba58ffc099934e8012ae320f2...70ac3fc303efa83d2b94905e6ab78bb83cbdc2ae)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:34:34 +00:00
dependabot[bot]andGitHub 044609f48d build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.1 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:34:22 +00:00
dependabot[bot]andGitHub 5e895183a4 build(deps): bump the crazy-max-dot-github group with 2 updates
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:32:49 +00:00
Jiří Moravčík 80b2293881 build: Add per-step CPU and memory resource limits
Port of moby/buildkit#6569 to buildx. Adds --memory, --memory-swap,
--cpu-shares, --cpu-period, --cpu-quota, --cpuset-cpus, and --cpuset-mems
flags to build, plus the equivalent bake target attributes and compose
x-bake fields.

Signed-off-by: Jiří Moravčík <jiri.moravcik@gmail.com>
2026-06-08 15:39:14 +02:00
CrazyMax b179b777f2 ci: upload test results to codecov
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-05 09:24:04 +02:00
CrazyMaxandGitHub 4fbc1e5f2c Merge pull request #3885 from docker/dependabot/github_actions/actions/checkout-6.0.3
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
2026-06-04 15:46:37 +02:00
CrazyMaxandGitHub 2769ed4e9e Merge pull request #3886 from tonistiigi/progress-panic-fix
build: fix policy resolver cleanup on errors
2026-06-04 10:15:41 +02:00
CrazyMaxandGitHub e868b4d8f8 Merge pull request #3884 from docker/dependabot/github_actions/github/codeql-action-4.36.1
build(deps): bump github/codeql-action from 4.36.0 to 4.36.1
2026-06-04 09:53:40 +02:00
Tonis Tiigi 4dd20d3c03 build: fix policy resolver cleanup on errors
Keep policy resolver cleanup in a local variable so explicit error returns
cannot clear it before deferred cleanup runs. This prevents remote policy
progress writers from outliving the build printer.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-03 20:56:04 -07:00
Tõnis TiigiandGitHub 1f6162d9ba Merge pull request #3879 from smerkviladze/bump-golang-x-net-v0.55.0
vendor: update golang.org/x/net dependency to v0.55.0
2026-06-03 20:26:45 -07:00
dependabot[bot]andGitHub 3d0f421015 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-04 02:43:37 +00:00
dependabot[bot]andGitHub 07349e4f36 build(deps): bump github/codeql-action from 4.36.0 to 4.36.1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.0 to 4.36.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...87557b9c84dde89fdd9b10e88954ac2f4248e463)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-04 02:43:25 +00:00
CrazyMaxandGitHub ff92e6e0bd Merge pull request #3881 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.10.0
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.9.0 to 1.10.0
2026-06-03 10:27:00 +02:00
dependabot[bot]andGitHub d90558d476 build(deps): bump docker/github-builder/.github/workflows/bake.yml
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/073833262a23a17675c95c4541ab063b7646756b...17bd7d64200cae4ba58ffc099934e8012ae320f2)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-03 03:22:27 +00:00
Sopho Merkviladze 562b88ee69 bump golang.org/x/net to v0.55.0
Signed-off-by: Sopho Merkviladze <smerkviladze@mirantis.com>
2026-06-02 18:11:04 +04:00
CrazyMaxandGitHub c1b0f3d0f5 Merge pull request #3877 from docker/dependabot/github_actions/docker/setup-qemu-action-4.1.0
build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
2026-05-30 11:59:50 +02:00
Tõnis TiigiandGitHub c72b400a75 Merge pull request #3865 from smerkviladze/bump_x_deps
vendor: update golang.org/x/* dependencies
2026-05-29 16:28:21 -07:00
dependabot[bot]andGitHub b8222283d9 build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dcb4858b16962ea869c3)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-29 21:37:42 +00:00
Sopho Merkviladze 9952c6b807 bump golang.org/x/* dependencies
Signed-off-by: Sopho Merkviladze <smerkviladze@mirantis.com>
2026-05-28 23:22:34 +04:00
Akihiro SudaandGitHub f5fb6314e7 Merge pull request #3858 from areebahmeddd/fix/volume-memory
fix rootless buildkit memory volume path
2026-05-28 09:16:07 +09:00
CrazyMaxandGitHub 709b33d3f1 Merge pull request #3869 from docker/dependabot/github_actions/docker/login-action-4.2.0
build(deps): bump docker/login-action from 4.1.0 to 4.2.0
2026-05-26 16:19:15 +02:00
CrazyMaxandGitHub f4c7581383 Merge pull request #3867 from docker/dependabot/github_actions/github/codeql-action-4.36.0
build(deps): bump github/codeql-action from 4.35.5 to 4.36.0
2026-05-26 16:15:02 +02:00
CrazyMaxandGitHub 769403c9a7 Merge pull request #3866 from docker/dependabot/github_actions/docker/setup-buildx-action-4.1.0
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
2026-05-26 16:14:35 +02:00
CrazyMaxandGitHub 1237a54748 Merge pull request #3864 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.9.0
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.8.0 to 1.9.0
2026-05-26 16:12:48 +02:00