Commit Graph
4156 Commits
Author SHA1 Message Date
Tõnis TiigiandGitHub c05897bae0 Merge pull request #3765 from crazy-max/go-1.26
update to go 1.26
2026-03-31 15:44:28 -07:00
Tõnis TiigiandGitHub 581c232f81 Merge pull request #3746 from crazy-max/buildkit-0.29
dockerfile: update buildkit to v0.29.0
2026-03-31 09:42:27 -07:00
CrazyMax 054b450ee8 dockerfile: update buildkit to v0.29.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-31 18:19:33 +02:00
CrazyMaxandGitHub f7897eba02 Merge pull request #3764 from crazy-max/vendor-buildkit-0.29.0
vendor: update buildkit to v0.29.0
2026-03-31 16:07:57 +02:00
CrazyMax 7d5c56d60c dockerfile: update xx to 1.9.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-31 15:06:27 +02:00
CrazyMax b2afb402ad update to go 1.26
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-31 15:06:06 +02:00
CrazyMax fdef3304af vendor: update buildkit to v0.29.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-31 14:52:21 +02:00
CrazyMaxandGitHub 604513dc3e Merge pull request #3757 from docker/dependabot/github_actions/crazy-max/dot-github-1.3.0
build(deps): bump crazy-max/.github from 1.1.0 to 1.3.0
2026-03-31 09:32:45 +02:00
CrazyMaxandGitHub e876aa50ca Merge pull request #3759 from docker/dependabot/github_actions/github/codeql-action-4.35.1
build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
2026-03-31 09:15:10 +02:00
CrazyMaxandGitHub 362c669d7e Merge pull request #3760 from docker/dependabot/github_actions/actions/setup-go-6.4.0
build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
2026-03-31 09:14:08 +02:00
dependabot[bot]andGitHub bddf212bfe build(deps): bump crazy-max/.github from 1.1.0 to 1.3.0
Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from 1.1.0 to 1.3.0.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed)

---
updated-dependencies:
- dependency-name: crazy-max/.github
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-31 07:14:07 +00:00
CrazyMaxandGitHub b54112b9e1 Merge pull request #3762 from docker/dependabot/github_actions/codecov/codecov-action-6.0.0
build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
2026-03-31 09:13:34 +02:00
CrazyMaxandGitHub 90f266acfb Merge pull request #3763 from docker/dependabot/github_actions/crazy-max-dot-github-763ceb8cae
build(deps): bump the crazy-max-dot-github group with 2 updates
2026-03-31 09:13:01 +02:00
dependabot[bot]andGitHub 0ff99e3ff2 build(deps): bump the crazy-max-dot-github group with 2 updates
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-31 01:49:04 +00:00
Tõnis TiigiandGitHub eff492f5d7 Merge pull request #3750 from crazy-max/zizmor-update
ci(zizmor): use latest version and enable online audits
2026-03-30 18:48:21 -07:00
Tõnis TiigiandGitHub c7dfed7dcc Merge pull request #3677 from tonistiigi/policy-http-pgp
policy: add HTTP source PGP signature verification builtin
2026-03-30 16:26:41 -07:00
dependabot[bot]andGitHub 232dbc70c7 build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.3 to 6.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/1af58845a975a7985b0beb0cbe6fbbb71a41dbad...57e3a136b779b570ffcdbf80b3bdc90e7fab3de2)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-30 19:52:45 +00:00
dependabot[bot]andGitHub b53df2b2f2 build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-30 19:52:20 +00:00
dependabot[bot]andGitHub ba8917931f build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.34.1 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/38697555549f1db7851b81482ff19f1fa5c4fedc...c10b8064de6f491fea524254123dbe5e09572f13)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-30 19:52:14 +00:00
CrazyMaxandGitHub ce058179ed Merge pull request #3749 from crazy-max/dockerfile-docker-29.3
dockerfile: update to docker 29.3
2026-03-27 14:40:43 +01:00
CrazyMax 4451697923 ci(zizmor): use latest version and enable online audits
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-27 13:57:38 +01:00
CrazyMax 6b7140b4fb dockerfile: update to docker 29.3
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-27 13:51:05 +01:00
Tonis Tiigi a57372e966 policy: add HTTP PGP signature verification builtin
Add verify_http_pgp_signature Rego builtin for HTTP sources using
pgpsign with checksum-request/response flow through policy resolution.
Wire sourcemeta HTTP checksum request/response conversion and add tests.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-03-26 15:39:46 -07:00
Tõnis TiigiandGitHub 55e8fa3b8e Merge pull request #3745 from crazy-max/zizmor-fixes
ci: don't pin docs-upstream validation workflow
2026-03-25 16:26:46 -07:00
Tõnis TiigiandGitHub 70536fc890 Merge pull request #3743 from tonistiigi/update-buildkit-v0.29.0-rc1
vendor: update buildkit to v0.29.0-rc1
2026-03-25 16:14:09 -07:00
CrazyMax f4226cf837 chore: remove left releases.json payload
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-26 00:07:36 +01:00
CrazyMax 4f160d7e03 ci: don't pin docs-upstream validation workflow
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-26 00:05:57 +01:00
Tõnis TiigiandGitHub 467e3e6d47 Merge pull request #3742 from crazy-max/zizmor
ci: zizmor workflow
2026-03-25 16:00:49 -07:00
Tonis Tiigi eba72a35e4 vendor: update buildkit to v0.29.0-rc1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-03-25 15:47:08 -07:00
CrazyMax d3a40b6919 ci: fix zizmor security findings
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-25 22:25:51 +01:00
Tõnis TiigiandGitHub a7d3578248 Merge pull request #3286 from crazy-max/bake-rdc339parse
bake: add unixtimestampparse and formattimestamp functions
2026-03-25 14:14:37 -07:00
CrazyMax 66303c9b24 ci: zizmor workflow
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-25 22:02:40 +01:00
Tõnis TiigiandGitHub 9504ab6678 Merge pull request #3740 from crazy-max/update-crazy-max-actions
ci: bump crazy-max/.github to 1.1.0
2026-03-25 09:34:45 -07:00
CrazyMax dcc591ea91 ci: bump crazy-max/.github to 1.1.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-25 12:06:59 +01:00
CrazyMax 92905a8f5a bake: support unix output in formattimestamp
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-25 11:59:24 +01:00
CrazyMax 2798e134e9 bake: add formattimestamp and tighten unix timestamp parsing
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-25 11:46:49 +01:00
CrazyMax 11395747a6 bake: add unixtimestampparse function
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-25 11:46:48 +01:00
Tõnis TiigiandGitHub b1c10489eb Merge pull request #3734 from crazy-max/build-fix-empty-syntax
build: reject empty BUILDKIT_SYNTAX overrides
2026-03-24 17:34:54 -07:00
Tõnis TiigiandGitHub 7ac8168016 Merge pull request #3738 from tonistiigi/policy-eval-upt
Updated for policy eval
2026-03-24 17:08:04 -07:00
Tõnis TiigiandGitHub be5de2c200 Merge pull request #3736 from jsternberg/dap-general-availability
dap: make dap generally available
2026-03-24 17:07:38 -07:00
CrazyMax 7c44ec11ec build: reject empty BUILDKIT_SYNTAX overrides
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-24 15:35:08 +01:00
CrazyMaxandGitHub f48bd18b4f Merge pull request #3737 from allexistence/docs-variable-example
docs: add example for --list=variables with variable descriptions
2026-03-24 09:34:00 +01:00
Tonis Tiigi 64cd4136d9 policy: support reading policy from stdin via --file -
Allow passing policy content through stdin by specifying
"--file -" in the eval command. This enables piping policy
data without requiring a file on disk.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-03-23 11:13:46 -07:00
Tonis Tiigi 7df7b4205b policy: align eval file flag
Use --file/-f for policy eval and keep hidden --filename as a
backward-compatible alias.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-03-23 11:04:14 -07:00
Tonis Tiigi 9dcb37f47c policy: add --platform to eval
Allow buildx policy eval to accept an explicit target platform and skip
worker platform discovery when the flag is provided.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-03-23 11:04:12 -07:00
Jonathan A. Sternberg a8d359a9ca dap: make dap generally available
Removes the experimental flags and bits for dap and deletes some dead
code that somehow made its way this far without anyone noticing.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2026-03-23 10:43:27 -05:00
Jonathan A. SternbergandGitHub dc5f9862a5 Merge pull request #3735 from jsternberg/dap-exit-code
dap: pass exit code through exited event
2026-03-23 10:42:57 -05:00
rishabh 0dede5c898 docs: add example for --list=variables with variable descriptions
Signed-off-by: rishabh <rishank69@gmail.com>
2026-03-23 12:04:02 +08:00
Jonathan A. Sternberg 180cfd9e41 dap: pass exit code through exited event
Pass the exit code through the exited event back to the client and
ensure that the printed text is printed completely.

Previously, the exited event just had a big todo and the printer would
sometimes fail to send messages to the connected client. This moves the
printer wait to before the debug adapter is closed to ensure that all
messages get sent through the connection to the editor. While there, I
also plumbed in the exit code to exited. It's not necessarily the real
exit code but it will produce a zero on build success and a non-zero
code on build failure so that should be good enough.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2026-03-20 14:02:21 -05:00
Tõnis TiigiandGitHub ba04f8f7b4 Merge pull request #3687 from jsternberg/dap-filter-inputs
dap: defer inputs for a step to prevent overeager evaluation
2026-03-20 10:57:30 -07:00