alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,389 Commits 1 Branch 1 Tag
927118f35763c666051e4ff5e0c0def0f676efd8
Commit Graph
4389 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastiaan van Stijn 0ff357e4be vendor: github.com/segmentio/asm v1.2.1 
- LICENSE CHANGE: MIT to MIT-0 (No Attribution)
- replace arm64 macro to please go vet

full diff: https://github.com/segmentio/asm/compare/v1.2.0...v1.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-01 15:31:33 +02:00
CrazyMaxandGitHub 9587b741bc Merge pull request #3912 from thaJeztah/bump_moby 
vendor: github.com/docker/cli v29.6.1
 2026-07-01 15:15:02 +02:00
CrazyMaxandGitHub 490fe96c24 Merge pull request #3920 from thaJeztah/bump_containerd 
vendor: github.com/containerd/containerd/v2 v2.2.5
 2026-07-01 15:14:20 +02:00
Sebastiaan van Stijn d27d845f75 vendor: github.com/docker/cli v29.6.1 
full diff: https://github.com/docker/cli/compare/v29.5.3...v29.6.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-01 14:43:19 +02:00
CrazyMaxandGitHub 5f67f9bcee Merge pull request #3927 from docker/dependabot/github_actions/actions/setup-go-6.5.0 
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0
 2026-06-29 11:37:57 +02:00
CrazyMaxandGitHub acc081ba1f Merge pull request #3922 from docker/dependabot/github_actions/softprops/action-gh-release-3.0.1 
build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1
 2026-06-29 11:37:34 +02:00
CrazyMaxandGitHub 9079f2d091 Merge pull request #3921 from docker/dependabot/github_actions/actions/checkout-7.0.0 
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
 2026-06-29 11:37:14 +02:00
CrazyMaxandGitHub eae76a9b4d Merge pull request #3926 from docker/dependabot/github_actions/crazy-max-dot-github-8c77e18ee6 
build(deps): bump the crazy-max-dot-github group across 1 directory with 5 updates
 2026-06-29 11:36:47 +02:00
MohammadHasan Akbari d3d1828d84 remote: use endpoint address for buildkit client authority 
The remote driver created the buildkit client with an empty address:

    client.New(ctx, "", opts...)

With an empty address the buildkit client falls back to the system
default address (the local unix socket) and derives the gRPC
":authority" pseudo-header from it, which ends up being "localhost".
The actual connection was still correct because the remote driver
provides its own dialer, but the wrong authority broke HTTP/2 reverse
proxies (such as Envoy) that route based on ":authority".

Pass the configured endpoint address to client.New so the authority is
derived from the remote endpoint hostname (e.g.
my-buildkit.example.com:443). The custom dialer is preserved, so the
dial target and TLS/SNI behavior are unchanged.

Fixes #3880

Signed-off-by: MohammadHasan Akbari <jarqvi.jarqvi@gmail.com>
 2026-06-28 15:24:28 +04:00
dependabot[bot]andGitHub 2e96ce7b8b build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-25 18:36:25 +00:00
dependabot[bot]andGitHub 7b7b1ab58f build(deps): bump the crazy-max-dot-github group across 1 directory with 5 updates 
Bumps the crazy-max-dot-github group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [crazy-max/.github/.github/actions/gotest-annotations](https://github.com/crazy-max/.github) | `1.10.0` | `1.10.1` |
| [crazy-max/.github/.github/actions/docker-scout](https://github.com/crazy-max/.github) | `1.10.0` | `1.10.1` |
| [crazy-max/.github/.github/actions/install-k3s](https://github.com/crazy-max/.github) | `1.10.0` | `1.10.1` |
| [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) | `1.10.0` | `1.10.1` |
| [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github) | `1.10.0` | `1.10.1` |



Updates `crazy-max/.github/.github/actions/gotest-annotations` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/716fd1c51a46c5d93a41d44a94b439c9ee802536...46267a6e61cd56aac2fc79943df180152f4c89d6)

Updates `crazy-max/.github/.github/actions/docker-scout` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/716fd1c51a46c5d93a41d44a94b439c9ee802536...46267a6e61cd56aac2fc79943df180152f4c89d6)

Updates `crazy-max/.github/.github/actions/install-k3s` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/716fd1c51a46c5d93a41d44a94b439c9ee802536...46267a6e61cd56aac2fc79943df180152f4c89d6)

Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/716fd1c51a46c5d93a41d44a94b439c9ee802536...46267a6e61cd56aac2fc79943df180152f4c89d6)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/716fd1c51a46c5d93a41d44a94b439c9ee802536...46267a6e61cd56aac2fc79943df180152f4c89d6)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/actions/gotest-annotations
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/actions/docker-scout
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/actions/install-k3s
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-25 18:32:55 +00:00
Sebastiaan van Stijn e1e5963dae vendor: github.com/containerd/containerd/v2 v2.2.5 
- full diff: https://github.com/containerd/containerd/compare/v2.2.4...v2.2.5
- release notes: https://github.com/containerd/containerd/releases/tag/v2.2.5

The fifth patch release for containerd 2.2 contains various fixes
and updates including security patches.

-  CVE-2026-50195 / [GHSA-cvxm-645q-p574] CRI: checkpoint import allows local image tag poisoning
-  CVE-2026-53488 / [GHSA-xhf5-7wjv-pqxp] CRI: image-config LABEL flows to host-root command execution from an image pull
-  CVE-2026-53492 / [GHSA-33vj-92qq-66hc] CRI: CDI annotation smuggling during CRI checkpoint restore
-  CVE-2026-53489 / [GHSA-rgh6-rfwx-v388] CRI: Arbitrary host file read via symlink following in CRI checkpoint restore
-  CVE-2026-47262 / [GHSA-jpcc-p29g-p8mq] containerd image-triggered runtime DoS via unbounded group parsing

[GHSA-cvxm-645q-p574]: https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574
[GHSA-xhf5-7wjv-pqxp]: https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp
[GHSA-33vj-92qq-66hc]: https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc
[GHSA-rgh6-rfwx-v388]: https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388
[GHSA-jpcc-p29g-p8mq]: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-23 09:27:04 +02:00
Tõnis TiigiandGitHub 1d805d2ea2 Merge pull request #3907 from thaJeztah/bump_x_deps 
vendor: update golang.org/x/* dependencies
 2026-06-22 23:38:25 -07:00
Tõnis TiigiandGitHub c31d110db4 Merge pull request #3909 from thaJeztah/bump_engine 
Dockerfile: update to docker v29.6
 2026-06-22 23:37:58 -07:00
dependabot[bot]andGitHub ab5d4f670e build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...718ea10b132b3b2eba29c1007bb80653f286566b)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-22 18:32:32 +00:00
dependabot[bot]andGitHub 1263b0fab6 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-19 18:32:32 +00:00
Sebastiaan van Stijn 962c4d1780 vendor: golang.org/x/tools v0.46.0 
full diff: https://github.com/golang/tools/compare/v0.45.0...v0.46.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:50 +02:00
Sebastiaan van Stijn 04c24b93df vendor: golang.org/x/net v0.56.0 
full diff: https://github.com/golang/net/compare/v0.55.0...v0.56.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:50 +02:00
Sebastiaan van Stijn a271da13ea vendor: golang.org/x/crypto v0.53.0 
full diff: https://github.com/golang/crypto/compare/v0.52.0...v0.53.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:50 +02:00
Sebastiaan van Stijn 7609bf8845 vendor: golang.org/x/text v0.38.0 
full diff: https://github.com/golang/text/compare/v0.37.0...v0.38.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:50 +02:00
Sebastiaan van Stijn d551a606e9 vendor: golang.org/x/sync v0.21.0 
full diff: https://github.com/golang/sync/compare/v0.20.0...v0.21.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:50 +02:00
Sebastiaan van Stijn ad0a622e24 vendor: golang.org/x/mod v0.37.0 
full diff: https://github.com/golang/mod/compare/v0.36.0...v0.37.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:49 +02:00
Sebastiaan van Stijn 8d182fad32 vendor: golang.org/x/term v0.44.0 
full diff: https://github.com/golang/term/compare/v0.43.0...v0.44.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:49 +02:00
Sebastiaan van Stijn d2a2999949 vendor: golang.org/x/sys v0.46.0 
full diff: https://github.com/golang/sys/compare/v0.45.0...v0.46.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-19 17:12:49 +02:00
Tõnis TiigiandGitHub f30ef86d21 Merge pull request #3914 from thaJeztah/policy_no_deprecated 
policy: remove uses of deprecated WithBuiltins
 2026-06-18 18:10:06 -07:00
Sebastiaan van Stijn 7487502115 Dockerfile: update to docker v29.6 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-18 22:55:20 +02:00
s3onghyun c09ecf711e bake: fix duplicated type in bakeEnvFiles lookup param 
Signed-off-by: s3onghyun <s3onghyun.hong@gmail.com>
 2026-06-18 17:51:54 +09:00
Tõnis TiigiandGitHub 209f90c18c Merge pull request #3915 from tonistiigi/update-buildkit-v0.31.0 
vendor: update buildkit to v0.31.0
 2026-06-17 12:39:48 -07:00
Tonis Tiigi af83612e3f vendor: update buildkit to v0.31.0 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-06-17 11:51:42 -07:00
Sebastiaan van Stijn 8b1d06a0ec policy: remove uses of deprecated WithBuiltins 
The WithBuiltins method was deprecated in opa v0.23.0 ([opa@afc8c5e]) in
favor of WithCapabilities, but the deprecation didn't use the standard
format, causing it not being detected as deprecated. OPA v1.1.0 corrected
the deprecation in [opa@622434d].

This patch replaces uses of the deprecated functions.

[opa@afc8c5e]: https://github.com/open-policy-agent/opa/commit/afc8c5e2a22878086067821f24e15d060594227a
[opa@622434d]: https://github.com/open-policy-agent/opa/commit/622434d11386c7b12aee703d7c1eedea34a27c7b

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-16 15:11:37 +02:00
Tõnis TiigiandGitHub 230fb952bb Merge pull request #3908 from thaJeztah/align_otel_exporters 
vendor: go.opentelemetry.io/otel/exporters v1.44.0
 2026-06-15 10:52:11 -07:00
Sebastiaan van Stijn 68fd340247 vendor: go.opentelemetry.io/otel/exporters v1.44.0 
removes the semconv v1.40.0 dependency

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-15 14:13:52 +02:00
Tõnis TiigiandGitHub b4b3437a30 Merge pull request #3898 from crazy-max/compose-go-2.11.0 
vendor: update compose-go to v2.11.0
 2026-06-12 15:40:38 -07:00
CrazyMaxandGitHub 51b977c3ae Merge pull request #3904 from crazy-max/dockerfile-buildkit-0.31.0-rc2 
dockerfile: update buildkit to v0.31.0-rc2
 2026-06-12 15:29:05 +02:00
CrazyMax c1ea48adc6 dockerfile: update buildkit to v0.31.0-rc2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-12 14:54:24 +02:00
CrazyMaxandGitHub 73e56595aa Merge pull request #3903 from crazy-max/buildkit-0.31.0-rc2 
vendor: update buildkit to v0.31.0-rc2
 2026-06-12 14:02:55 +02:00
CrazyMax 268dcf5917 vendor: update buildkit to v0.31.0-rc2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-12 13:46:40 +02:00
CrazyMaxandGitHub d1c298cd85 Merge pull request #3899 from crazy-max/remove-bake-path-shim 
bake: remove stale path evaluation shim
 2026-06-12 10:51:41 +02:00
CrazyMaxandGitHub edb063cb21 Merge pull request #3900 from jirimoravcik/fix/minor-resource-limits-adjustments 
build: improve resource limits output and docs
 2026-06-12 10:03:06 +02:00
CrazyMaxandGitHub 4149c242ab Merge pull request #3902 from crazy-max/github-builder-1.12.0 
ci: update docker/github-builder to v1.12.0
 2026-06-11 18:27:31 +02:00
CrazyMax 548e583d81 ci: update docker/github-builder to v1.12.0 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-11 17:39:34 +02:00
CrazyMaxandGitHub 8e59d65b5a Merge pull request #3896 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0 
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
 2026-06-11 14:53:16 +02:00
Jiří Moravčík 9b37d78c89 build: improve resource limits output and docs 
Signed-off-by: Jiří Moravčík <jiri.moravcik@gmail.com>
 2026-06-11 11:18:35 +02:00
CrazyMax 803403710a vendor: update compose-go to v2.11.0 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-11 11:13:52 +02:00
CrazyMax bdb9077ef6 bake: remove stale path evaluation shim 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-11 00:07:27 +02:00
Tõnis TiigiandGitHub 89b455a9e3 Merge pull request #3897 from tonistiigi/update-buildkit-v0.31.0-rc1 
vendor: update buildkit to v0.31.0-rc1
 2026-06-10 14:58:01 -07:00
Tonis Tiigi b5cf212276 vendor: update buildkit to v0.31.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-06-10 14:19:03 -07:00
Tõnis TiigiandGitHub dd388bf70e Merge pull request #3883 from crazy-max/local-output-delete 
support BuildKit local output delete mode
 2026-06-10 14:14:12 -07:00
Tõnis TiigiandGitHub 4fa5bb2396 Merge pull request #3895 from tonistiigi/exec-proxy-support 
policy: enable proxy network from source policy caps
 2026-06-10 14:09:56 -07:00
dependabot[bot]andGitHub 786a5433c2 build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v6.0.1...fb8b3582c8e4def4969c97caa2f19720cb33a72f)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-10 18:34:30 +00:00