alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,389 Commits 1 Branch 1 Tag
927118f35763c666051e4ff5e0c0def0f676efd8
Commit Graph
4389 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tonis Tiigi 25db0fb050 tests: verify exec traffic is policy-checked in caps proxy test 
Extend testBuildPolicyCapsProxy so that instead of only checking that
the network proxy was enabled, the build runs a command that makes an
HTTP request to a local test server. The policy denies that URL as an
HTTP source, so the test now verifies that exec traffic actually flows
through the proxy and is subject to source policy, including the deny
message and DENY decision in the build output.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-06-10 08:58:48 -07:00
CrazyMax b6e1b7328f build: gate local delete outputs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-10 16:41:10 +02:00
CrazyMaxandCrazyMax 473c6ef306 bake: requires explicit allow for local output delete mode 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-10 16:41:09 +02:00
CrazyMax 1916210ddc vendor: update buildkit to f449174742bf 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-10 16:41:09 +02:00
Tonis TiigiandCrazyMax 4da04e3bf4 policy: enable proxy network from source policy caps 
Evaluate source policy caps before solve requests so policies can enable
BuildKit proxy networking. Policy can return caps {"exec.proxy": true}
during the caps request to enable proxy network
support for the solve.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-06-10 15:04:23 +02:00
CrazyMaxandGitHub 2fcfce0e71 Merge pull request #3894 from tonistiigi/0609-update-buildkit 
vendor: update buildkit to 41c29fffe299
 2026-06-10 13:33:47 +02:00
Tonis Tiigi 58a5a2cd60 vendor: update buildkit to 41c29fffe299 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-06-09 19:44:00 -07:00
Tõnis TiigiandGitHub 76703de985 Merge pull request #3876 from jirimoravcik/feat/per-step-resource-limits 
build: Add per-step CPU and memory resource limits
 2026-06-09 17:49:21 -07:00
CrazyMaxandGitHub 3a6e4e5e88 Merge pull request #3887 from crazy-max/codecov-test-results 
ci: upload test results to codecov
 2026-06-09 21:16:29 +02:00
Tõnis TiigiandGitHub b0d201a941 Merge pull request #3888 from crazy-max/fix-oci-mediatypes 
build: handle buildkit defaulting to oci mediatypes
 2026-06-09 11:37:05 -07:00
CrazyMax 8191e19d94 build: handle buildkit defaulting to oci mediatypes 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-09 19:43:48 +02:00
CrazyMaxandGitHub 0b358c7637 Merge pull request #3889 from docker/dependabot/github_actions/crazy-max-dot-github-a6a0ecf511 
build(deps): bump the crazy-max-dot-github group with 2 updates
 2026-06-09 15:55:32 +02:00
CrazyMaxandGitHub bad76e04fa Merge pull request #3890 from docker/dependabot/github_actions/github/codeql-action-4.36.2 
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
 2026-06-09 15:55:06 +02:00
CrazyMaxandGitHub fa085de627 Merge pull request #3891 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.11.0 
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.10.0 to 1.11.0
 2026-06-09 15:54:41 +02:00
CrazyMaxandGitHub 72113d3ee2 Merge pull request #3892 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0 
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
 2026-06-09 15:53:53 +02:00
CrazyMaxandGitHub 5e1dead20b Merge pull request #3893 from docker/dependabot/github_actions/crazy-max/dot-github-1.10.0 
build(deps): bump crazy-max/.github from 1.8.0 to 1.10.0
 2026-06-09 15:53:28 +02:00
dependabot[bot]andGitHub e0b7911e4f build(deps): bump crazy-max/.github from 1.8.0 to 1.10.0 
Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from 1.8.0 to 1.10.0.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536)

---
updated-dependencies:
- dependency-name: crazy-max/.github
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 18:35:03 +00:00
dependabot[bot]andGitHub 91602db282 build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/e79a6962e0d4c0c17b229090214935d2e33f8354...fb8b3582c8e4def4969c97caa2f19720cb33a72f)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 18:34:50 +00:00
dependabot[bot]andGitHub 401a77d662 build(deps): bump docker/github-builder/.github/workflows/bake.yml 
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/17bd7d64200cae4ba58ffc099934e8012ae320f2...70ac3fc303efa83d2b94905e6ab78bb83cbdc2ae)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 18:34:34 +00:00
dependabot[bot]andGitHub 044609f48d build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.1 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 18:34:22 +00:00
dependabot[bot]andGitHub 5e895183a4 build(deps): bump the crazy-max-dot-github group with 2 updates 
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 18:32:49 +00:00
Jiří Moravčík 80b2293881 build: Add per-step CPU and memory resource limits 
Port of moby/buildkit#6569 to buildx. Adds --memory, --memory-swap,
--cpu-shares, --cpu-period, --cpu-quota, --cpuset-cpus, and --cpuset-mems
flags to build, plus the equivalent bake target attributes and compose
x-bake fields.

Signed-off-by: Jiří Moravčík <jiri.moravcik@gmail.com>
 2026-06-08 15:39:14 +02:00
CrazyMax b179b777f2 ci: upload test results to codecov 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-05 09:24:04 +02:00
CrazyMaxandGitHub 4fbc1e5f2c Merge pull request #3885 from docker/dependabot/github_actions/actions/checkout-6.0.3 
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
 2026-06-04 15:46:37 +02:00
CrazyMaxandGitHub 2769ed4e9e Merge pull request #3886 from tonistiigi/progress-panic-fix 
build: fix policy resolver cleanup on errors
 2026-06-04 10:15:41 +02:00
CrazyMaxandGitHub e868b4d8f8 Merge pull request #3884 from docker/dependabot/github_actions/github/codeql-action-4.36.1 
build(deps): bump github/codeql-action from 4.36.0 to 4.36.1
 2026-06-04 09:53:40 +02:00
Tonis Tiigi 4dd20d3c03 build: fix policy resolver cleanup on errors 
Keep policy resolver cleanup in a local variable so explicit error returns
cannot clear it before deferred cleanup runs. This prevents remote policy
progress writers from outliving the build printer.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-06-03 20:56:04 -07:00
Tõnis TiigiandGitHub 1f6162d9ba Merge pull request #3879 from smerkviladze/bump-golang-x-net-v0.55.0 
vendor: update golang.org/x/net dependency to v0.55.0
 2026-06-03 20:26:45 -07:00
dependabot[bot]andGitHub 3d0f421015 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-04 02:43:37 +00:00
dependabot[bot]andGitHub 07349e4f36 build(deps): bump github/codeql-action from 4.36.0 to 4.36.1 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.0 to 4.36.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...87557b9c84dde89fdd9b10e88954ac2f4248e463)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-04 02:43:25 +00:00
Matt Van Horn aabd19eb6b docs: document inline --set override syntax for ssh and composable attributes 
Signed-off-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
 2026-06-03 01:56:58 -07:00
CrazyMaxandGitHub ff92e6e0bd Merge pull request #3881 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.10.0 
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.9.0 to 1.10.0
 2026-06-03 10:27:00 +02:00
dependabot[bot]andGitHub d90558d476 build(deps): bump docker/github-builder/.github/workflows/bake.yml 
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/073833262a23a17675c95c4541ab063b7646756b...17bd7d64200cae4ba58ffc099934e8012ae320f2)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-03 03:22:27 +00:00
Sopho Merkviladze 562b88ee69 bump golang.org/x/net to v0.55.0 
Signed-off-by: Sopho Merkviladze <smerkviladze@mirantis.com>
 2026-06-02 18:11:04 +04:00
CrazyMaxandGitHub c1b0f3d0f5 Merge pull request #3877 from docker/dependabot/github_actions/docker/setup-qemu-action-4.1.0 
build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
 2026-05-30 11:59:50 +02:00
Tõnis TiigiandGitHub c72b400a75 Merge pull request #3865 from smerkviladze/bump_x_deps 
vendor: update golang.org/x/* dependencies
 2026-05-29 16:28:21 -07:00
dependabot[bot]andGitHub b8222283d9 build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dcb4858b16962ea869c3)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-29 21:37:42 +00:00
Sopho Merkviladze 9952c6b807 bump golang.org/x/* dependencies 
Signed-off-by: Sopho Merkviladze <smerkviladze@mirantis.com>
 2026-05-28 23:22:34 +04:00
Akihiro SudaandGitHub f5fb6314e7 Merge pull request #3858 from areebahmeddd/fix/volume-memory 
fix rootless buildkit memory volume path
 2026-05-28 09:16:07 +09:00
CrazyMaxandGitHub 709b33d3f1 Merge pull request #3869 from docker/dependabot/github_actions/docker/login-action-4.2.0 
build(deps): bump docker/login-action from 4.1.0 to 4.2.0
 2026-05-26 16:19:15 +02:00
CrazyMaxandGitHub f4c7581383 Merge pull request #3867 from docker/dependabot/github_actions/github/codeql-action-4.36.0 
build(deps): bump github/codeql-action from 4.35.5 to 4.36.0
 2026-05-26 16:15:02 +02:00
CrazyMaxandGitHub 769403c9a7 Merge pull request #3866 from docker/dependabot/github_actions/docker/setup-buildx-action-4.1.0 
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
 2026-05-26 16:14:35 +02:00
CrazyMaxandGitHub 1237a54748 Merge pull request #3864 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.9.0 
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.8.0 to 1.9.0
 2026-05-26 16:12:48 +02:00
dependabot[bot]andGitHub ae32b93444 build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.5 to 4.36.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9e0d7b8d25671d64c341c19c0152d693099fb5ba...7211b7c8077ea37d8641b6271f6a365a22a5fbfa)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-26 13:42:36 +00:00
CrazyMaxandGitHub 8c343dbba3 Merge pull request #3863 from docker/dependabot/go_modules/go_modules-fcafd93c54 
build(deps): bump github.com/containerd/containerd/v2 from 2.2.3 to 2.2.4 in the go_modules group across 1 directory
 2026-05-26 15:41:28 +02:00
dependabot[bot]andGitHub 75bc49ecaa build(deps): bump docker/login-action from 4.1.0 to 4.2.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-26 13:41:18 +00:00
dependabot[bot]andGitHub 62eb20f971 build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-26 13:41:14 +00:00
dependabot[bot]andGitHub 37274ca75a build(deps): bump docker/github-builder/.github/workflows/bake.yml 
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/c2782c55efa56a01b9c30021db8f5ec3993228a3...073833262a23a17675c95c4541ab063b7646756b)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-26 13:41:13 +00:00
CrazyMaxandGitHub ddddcce4ab Merge pull request #3868 from docker/dependabot/github_actions/docker/bake-action-7.2.0 
build(deps): bump docker/bake-action from 7.1.0 to 7.2.0
 2026-05-26 15:39:34 +02:00
dependabot[bot]andGitHub 410d40d12b build(deps): bump docker/bake-action from 7.1.0 to 7.2.0 
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/a66e1c87e2eca0503c343edf1d208c716d54b8a8...6614cfa25eff9a0b2b2697efb0b6159e7680d584)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-26 00:17:29 +00:00