Tõnis Tiigi and GitHub
581c232f81
Merge pull request #3746 from crazy-max/buildkit-0.29
...
dockerfile: update buildkit to v0.29.0
2026-03-31 09:42:27 -07:00
CrazyMax
054b450ee8
dockerfile: update buildkit to v0.29.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-31 18:19:33 +02:00
CrazyMax and GitHub
f7897eba02
Merge pull request #3764 from crazy-max/vendor-buildkit-0.29.0
...
vendor: update buildkit to v0.29.0
2026-03-31 16:07:57 +02:00
CrazyMax
fdef3304af
vendor: update buildkit to v0.29.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-31 14:52:21 +02:00
CrazyMax and GitHub
604513dc3e
Merge pull request #3757 from docker/dependabot/github_actions/crazy-max/dot-github-1.3.0
...
build(deps): bump crazy-max/.github from 1.1.0 to 1.3.0
2026-03-31 09:32:45 +02:00
CrazyMax and GitHub
e876aa50ca
Merge pull request #3759 from docker/dependabot/github_actions/github/codeql-action-4.35.1
...
build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
2026-03-31 09:15:10 +02:00
CrazyMax and GitHub
362c669d7e
Merge pull request #3760 from docker/dependabot/github_actions/actions/setup-go-6.4.0
...
build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
2026-03-31 09:14:08 +02:00
dependabot[bot] and GitHub
bddf212bfe
build(deps): bump crazy-max/.github from 1.1.0 to 1.3.0
...
Bumps [crazy-max/.github](https://github.com/crazy-max/.github ) from 1.1.0 to 1.3.0.
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed )
---
updated-dependencies:
- dependency-name: crazy-max/.github
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-31 07:14:07 +00:00
CrazyMax and GitHub
b54112b9e1
Merge pull request #3762 from docker/dependabot/github_actions/codecov/codecov-action-6.0.0
...
build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
2026-03-31 09:13:34 +02:00
CrazyMax and GitHub
90f266acfb
Merge pull request #3763 from docker/dependabot/github_actions/crazy-max-dot-github-763ceb8cae
...
build(deps): bump the crazy-max-dot-github group with 2 updates
2026-03-31 09:13:01 +02:00
dependabot[bot] and GitHub
0ff99e3ff2
build(deps): bump the crazy-max-dot-github group with 2 updates
...
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github ) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ).
Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed )
Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-31 01:49:04 +00:00
Tõnis Tiigi and GitHub
eff492f5d7
Merge pull request #3750 from crazy-max/zizmor-update
...
ci(zizmor): use latest version and enable online audits
2026-03-30 18:48:21 -07:00
Tõnis Tiigi and GitHub
c7dfed7dcc
Merge pull request #3677 from tonistiigi/policy-http-pgp
...
policy: add HTTP source PGP signature verification builtin
2026-03-30 16:26:41 -07:00
dependabot[bot] and GitHub
232dbc70c7
build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.5.3 to 6.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/1af58845a975a7985b0beb0cbe6fbbb71a41dbad...57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 19:52:45 +00:00
dependabot[bot] and GitHub
b53df2b2f2
build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 19:52:20 +00:00
dependabot[bot] and GitHub
ba8917931f
build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.34.1 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/38697555549f1db7851b81482ff19f1fa5c4fedc...c10b8064de6f491fea524254123dbe5e09572f13 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 19:52:14 +00:00
CrazyMax and GitHub
ce058179ed
Merge pull request #3749 from crazy-max/dockerfile-docker-29.3
...
dockerfile: update to docker 29.3
2026-03-27 14:40:43 +01:00
CrazyMax
4451697923
ci(zizmor): use latest version and enable online audits
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-27 13:57:38 +01:00
CrazyMax
6b7140b4fb
dockerfile: update to docker 29.3
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-27 13:51:05 +01:00
Tonis Tiigi
a57372e966
policy: add HTTP PGP signature verification builtin
...
Add verify_http_pgp_signature Rego builtin for HTTP sources using
pgpsign with checksum-request/response flow through policy resolution.
Wire sourcemeta HTTP checksum request/response conversion and add tests.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-26 15:39:46 -07:00
Tõnis Tiigi and GitHub
55e8fa3b8e
Merge pull request #3745 from crazy-max/zizmor-fixes
...
ci: don't pin docs-upstream validation workflow
2026-03-25 16:26:46 -07:00
Tõnis Tiigi and GitHub
70536fc890
Merge pull request #3743 from tonistiigi/update-buildkit-v0.29.0-rc1
...
vendor: update buildkit to v0.29.0-rc1
2026-03-25 16:14:09 -07:00
CrazyMax
4f160d7e03
ci: don't pin docs-upstream validation workflow
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-26 00:05:57 +01:00
Tõnis Tiigi and GitHub
467e3e6d47
Merge pull request #3742 from crazy-max/zizmor
...
ci: zizmor workflow
2026-03-25 16:00:49 -07:00
Tonis Tiigi
eba72a35e4
vendor: update buildkit to v0.29.0-rc1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-25 15:47:08 -07:00
CrazyMax
d3a40b6919
ci: fix zizmor security findings
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 22:25:51 +01:00
Tõnis Tiigi and GitHub
a7d3578248
Merge pull request #3286 from crazy-max/bake-rdc339parse
...
bake: add unixtimestampparse and formattimestamp functions
2026-03-25 14:14:37 -07:00
CrazyMax
66303c9b24
ci: zizmor workflow
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 22:02:40 +01:00
Tõnis Tiigi and GitHub
9504ab6678
Merge pull request #3740 from crazy-max/update-crazy-max-actions
...
ci: bump crazy-max/.github to 1.1.0
2026-03-25 09:34:45 -07:00
CrazyMax
dcc591ea91
ci: bump crazy-max/.github to 1.1.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 12:06:59 +01:00
CrazyMax
92905a8f5a
bake: support unix output in formattimestamp
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 11:59:24 +01:00
CrazyMax
2798e134e9
bake: add formattimestamp and tighten unix timestamp parsing
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 11:46:49 +01:00
CrazyMax
11395747a6
bake: add unixtimestampparse function
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 11:46:48 +01:00
Tõnis Tiigi and GitHub
b1c10489eb
Merge pull request #3734 from crazy-max/build-fix-empty-syntax
...
build: reject empty BUILDKIT_SYNTAX overrides
2026-03-24 17:34:54 -07:00
Tõnis Tiigi and GitHub
7ac8168016
Merge pull request #3738 from tonistiigi/policy-eval-upt
...
Updated for policy eval
2026-03-24 17:08:04 -07:00
Tõnis Tiigi and GitHub
be5de2c200
Merge pull request #3736 from jsternberg/dap-general-availability
...
dap: make dap generally available
2026-03-24 17:07:38 -07:00
CrazyMax
7c44ec11ec
build: reject empty BUILDKIT_SYNTAX overrides
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-24 15:35:08 +01:00
CrazyMax and GitHub
f48bd18b4f
Merge pull request #3737 from allexistence/docs-variable-example
...
docs: add example for --list=variables with variable descriptions
2026-03-24 09:34:00 +01:00
Tonis Tiigi
64cd4136d9
policy: support reading policy from stdin via --file -
...
Allow passing policy content through stdin by specifying
"--file -" in the eval command. This enables piping policy
data without requiring a file on disk.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-23 11:13:46 -07:00
Tonis Tiigi
7df7b4205b
policy: align eval file flag
...
Use --file/-f for policy eval and keep hidden --filename as a
backward-compatible alias.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-23 11:04:14 -07:00
Tonis Tiigi
9dcb37f47c
policy: add --platform to eval
...
Allow buildx policy eval to accept an explicit target platform and skip
worker platform discovery when the flag is provided.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-23 11:04:12 -07:00
Jonathan A. Sternberg
a8d359a9ca
dap: make dap generally available
...
Removes the experimental flags and bits for dap and deletes some dead
code that somehow made its way this far without anyone noticing.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com >
2026-03-23 10:43:27 -05:00
Jonathan A. Sternberg and GitHub
dc5f9862a5
Merge pull request #3735 from jsternberg/dap-exit-code
...
dap: pass exit code through exited event
2026-03-23 10:42:57 -05:00
rishabh
0dede5c898
docs: add example for --list=variables with variable descriptions
...
Signed-off-by: rishabh <rishank69@gmail.com >
2026-03-23 12:04:02 +08:00
Jonathan A. Sternberg
180cfd9e41
dap: pass exit code through exited event
...
Pass the exit code through the exited event back to the client and
ensure that the printed text is printed completely.
Previously, the exited event just had a big todo and the printer would
sometimes fail to send messages to the connected client. This moves the
printer wait to before the debug adapter is closed to ensure that all
messages get sent through the connection to the editor. While there, I
also plumbed in the exit code to exited. It's not necessarily the real
exit code but it will produce a zero on build success and a non-zero
code on build failure so that should be good enough.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com >
2026-03-20 14:02:21 -05:00
Tõnis Tiigi and GitHub
ba04f8f7b4
Merge pull request #3687 from jsternberg/dap-filter-inputs
...
dap: defer inputs for a step to prevent overeager evaluation
2026-03-20 10:57:30 -07:00
Jonathan A. Sternberg
c79061526f
dap: defer inputs for a step to prevent overeager evaluation
...
When the debug thread was updated to always solve inputs from the
operation that it was tied to it became a bit overeager to evaluate
them. The intention of the steps is to have a single direct parent and
then potentially multiple "function calls" that can be evaluated with
step into and step out to leave.
With the change, that logic stayed in, but the inputs were always being
evaluated before they were stepped into or over. Now, when we construct
the steps, we also attach a list of inputs that we should defer
evaluation on to ensure we don't execute inputs that haven't been
executed yet.
It will then wrap the reference with a version that causes `Evaluate` to
do nothing. This prevents the overeager evaluation but allows the
reference to be evaluated if we need to read the filesystem.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com >
2026-03-20 09:26:32 -05:00
Tõnis Tiigi and GitHub
a0a8f63cd5
Merge pull request #3730 from crazy-max/history-mv-buildname
...
history: move BuildName to util/history
2026-03-19 16:55:45 -07:00
Tõnis Tiigi and GitHub
771e0de740
Merge pull request #3732 from tonistiigi/imagetools-manifest-regex
...
imagetools: use regex for manifest template matching
2026-03-18 18:25:27 -07:00
Tõnis Tiigi and GitHub
1e54ca2ce7
Merge pull request #3731 from tonistiigi/imagetools-push-parallelization
...
imagetools: share ingester across concurrent copies
2026-03-18 18:25:14 -07:00