Tonis Tiigi
5a7f7c286f
kubernetes: trim client-go dependency surface
...
Replace the full generated clientset and global Kubernetes scheme
with a small local REST client layer and minimal scheme registration.
This keeps the existing kubeconfig/auth and remote exec behavior while
significantly reducing the linked and vendored Kubernetes dependency set.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-06 16:44:18 -08:00
Tonis Tiigi
6bbd0abf0f
store: increase test timeouts for CI reliability
...
Bump timing thresholds in TestNodeLocking to avoid
flaky failures on slow CI runners (e.g. Windows).
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-06 15:06:06 -08:00
Jonathan A. Sternberg
b521a083ba
dap: detect breakpoints for files when the case differs
...
Case insensitive filesystems can cause breakpoints to not be seen or
verified. This is particularly true on Windows where the drive letter
can also participate in the filepath.
Change the detection logic for a breakpoint to be case insensitive. At
the same time, report the name of the source as part of the breakpoint
so that the editor can be told which casing we're expecting to be used.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com >
2026-03-06 14:01:32 -06:00
dependabot[bot] and GitHub
a00f4d6e08
build(deps): bump docker/bake-action from 6 to 7
...
Bumps [docker/bake-action](https://github.com/docker/bake-action ) from 6 to 7.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-06 18:33:12 +00:00
CrazyMax and GitHub
bb481888f9
Merge pull request #3693 from docker/dependabot/github_actions/docker/setup-qemu-action-4
...
build(deps): bump docker/setup-qemu-action from 3 to 4
2026-03-06 11:57:23 +01:00
CrazyMax and GitHub
ff5a387834
Merge pull request #3684 from thaJeztah/bump_moby
...
vendor: docker/cli v29.3.0, moby/api v1.54.0, moby/client v0.3.0
2026-03-06 11:23:00 +01:00
dependabot[bot] and GitHub
35492177d9
build(deps): bump docker/setup-qemu-action from 3 to 4
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 3 to 4.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-06 10:21:42 +00:00
CrazyMax and GitHub
3ef2ebb13c
Merge pull request #3692 from docker/dependabot/github_actions/docker/login-action-4
...
build(deps): bump docker/login-action from 3 to 4
2026-03-06 11:21:42 +01:00
CrazyMax and GitHub
7e865417cd
Merge pull request #3699 from tonistiigi/dockerfile-compose-v5.1.0
...
Dockerfile: update compose to 5.1.0
2026-03-06 11:21:11 +01:00
CrazyMax and GitHub
6574d1bafa
Merge pull request #3698 from docker/dependabot/github_actions/docker/setup-buildx-action-4
...
build(deps): bump docker/setup-buildx-action from 3 to 4
2026-03-06 11:20:42 +01:00
Tonis Tiigi
5478703490
tests: test updates after compose update
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-05 17:58:56 -08:00
Tonis Tiigi
b6f1f3a9bf
Dockerfile: update compose to 5.1.0
...
Fixes the possible "file already closed" error.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-05 15:41:04 -08:00
dependabot[bot] and GitHub
da51d1df32
build(deps): bump docker/setup-buildx-action from 3 to 4
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 3 to 4.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-05 18:33:24 +00:00
Sebastiaan van Stijn
c06971965f
vendor: docker/cli v29.3.0, moby/api v1.54.0, moby/client v0.3.0
...
This also allows the client to connect with API v1.40 and up (Docker 19.03),
which previously was API v1.43 and up (Docker 25.0 and up).
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-03-05 16:38:27 +01:00
CrazyMax
189633f43c
build: make proxy build-arg override check case-insensitive
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-05 16:16:54 +01:00
Tonis Tiigi
2adc53cfb3
build: parallelize forced reference evaluation
...
Use an errgroup helper to evaluate result refs concurrently during forced
evaluation, and fail fast on the first evaluation error.
This mitigates current case in bake where chained targets with
a multi-platform build could miss secrets and other session properties.
The outline for the issue case:
- Base target is solved but only lazily and not really loaded/tracked
in build graph yet.
- Child targets are loaded, base target waits.
- Evaluate is called for base stage (because it might be missing result
condition), child stage is processed as build result. This happens in
parallel.
- Because `Evaluate()` was called synchronously, it may have not been
called yet for the second platform while the child target already
needs to run `RUN --mount=type=secret`.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-04 18:09:41 -08:00
dependabot[bot] and GitHub
dfd8d6c29c
build(deps): bump docker/login-action from 3 to 4
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 3 to 4.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-04 18:32:58 +00:00
Tõnis Tiigi and GitHub
d315c086c3
Merge pull request #3690 from crazy-max/policy-session
...
build: reuse build session for policy source resolution
2026-03-04 09:58:04 -08:00
CrazyMax
2ed4ece865
build: reuse build session for policy source resolution
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-04 17:21:20 +01:00
Tõnis Tiigi and GitHub
08998a7e90
Merge pull request #3688 from tonistiigi/vendor-buildkit-v0.28.0
...
vendor: update buildkit to v0.28.0
2026-03-03 12:38:47 -08:00
Tonis Tiigi
55bef8178d
vendor: update buildkit to v0.28.0
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-03 12:17:01 -08:00
Tõnis Tiigi and GitHub
75c53e39a5
Merge pull request #3682 from crazy-max/bake-print-subdir
...
bake: preserve git subdir in remote bake context paths
2026-03-03 09:25:28 -08:00
CrazyMax
50fa13d859
bake: preserve git subdir in remote bake context paths
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-03 17:47:07 +01:00
Tõnis Tiigi and GitHub
00cc36c402
Merge pull request #3678 from tonistiigi/bake-subdir-remote-fix
...
bake: fix remote named context subdir handling
2026-03-03 08:39:54 -08:00
Tõnis Tiigi and GitHub
8f02b16216
Merge pull request #3685 from thaJeztah/snappier
...
vendor: github.com/golang/snappy v1.0.0
2026-03-03 08:38:56 -08:00
Sebastiaan van Stijn
f1f38d34ad
vendor: github.com/golang/snappy v1.0.0
...
Ensure arm64 frame sizes are 8 (mod 16)
fixes: "Weird failure when building on Raspbian / Debian 10.11"
full diff: https://github.com/golang/snappy/compare/v0.0.4...v1.0.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-03-03 16:28:00 +01:00
CrazyMax and GitHub
256889070c
Merge pull request #3681 from docker/dependabot/github_actions/crazy-max/ghaction-github-runtime-4
...
build(deps): bump crazy-max/ghaction-github-runtime from 3 to 4
2026-03-03 12:55:28 +01:00
Tõnis Tiigi and GitHub
130755c4bb
Merge pull request #3680 from crazy-max/openbsd-git
...
hack/openbsd: use cdn.openbsd.org for PKG_PATH
2026-03-02 18:27:21 -08:00
dependabot[bot] and GitHub
cc0d1f6331
build(deps): bump crazy-max/ghaction-github-runtime from 3 to 4
...
Bumps [crazy-max/ghaction-github-runtime](https://github.com/crazy-max/ghaction-github-runtime ) from 3 to 4.
- [Release notes](https://github.com/crazy-max/ghaction-github-runtime/releases )
- [Commits](https://github.com/crazy-max/ghaction-github-runtime/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: crazy-max/ghaction-github-runtime
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-02 20:23:09 +00:00
CrazyMax
1c7acc8c46
hack/openbsd: use cdn.openbsd.org for PKG_PATH
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-02 11:22:00 +01:00
CrazyMax and GitHub
e835707400
Merge pull request #3672 from docker/dependabot/github_actions/actions/upload-artifact-7
...
build(deps): bump actions/upload-artifact from 6 to 7
2026-03-02 11:07:43 +01:00
CrazyMax and GitHub
bbadcb4368
Merge pull request #3673 from docker/dependabot/github_actions/actions/download-artifact-8
...
build(deps): bump actions/download-artifact from 7 to 8
2026-03-02 11:07:19 +01:00
Tonis Tiigi
d39a81e456
bake: fix remote named context subdir handling
...
Fix using CopyDirContentsOnly when projecting remote named contexts so
subdir contexts keep the same root semantics as local bake runs.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-27 17:06:32 -08:00
CrazyMax and GitHub
22074cd400
Merge pull request #3676 from crazy-max/buildkit-0.28.0-rc2
...
vendor: update buildkit to v0.28.0-rc2
2026-02-27 17:34:50 +01:00
CrazyMax
7346c1f0dc
vendor: update buildkit to v0.28.0-rc2
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-02-27 16:51:40 +01:00
CrazyMax and GitHub
989b8637c9
Merge pull request #3674 from tonistiigi/policy-fs-refs-fix
...
build: ref-count policy FS lifecycle
2026-02-27 15:52:36 +01:00
CrazyMax and GitHub
e43156d54a
Merge pull request #3662 from tonistiigi/policy-recursive-materials
...
policy: add recursive provenance material resolution
2026-02-27 15:51:51 +01:00
CrazyMax and GitHub
a88af0e2ae
Merge pull request #3675 from tonistiigi/policy-filename-fix
...
build: normalize policy env filename default
2026-02-27 15:33:02 +01:00
Tonis Tiigi
f3a1249560
build: normalize policy env filename default
...
Use cleaned DockerfilePath basename for policy env filename and fall back
to Dockerfile when the path resolves to dot or root.
Previously filename could be reported as "." on default cases.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-26 21:13:03 -08:00
Tonis Tiigi
9ef416b258
build: ref-count policy FS lifecycle
...
Make memoized policy FS ref-counted so repeated get()/close() pairs don't
prematurely close shared handles.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-26 18:48:38 -08:00
Tonis Tiigi
1c4a436a0d
policy: match parent unknown keys in collectUnknowns
...
Allow child refs from partial evaluation to match allowed parent keys on
path boundaries and return canonical unknowns for metadata resolution.
Add tests for parent-child matching and boundary safety cases.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-26 17:12:18 -08:00
Tonis Tiigi
73ea669465
vendor: update buildkit to ecde33610015
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-26 17:06:30 -08:00
dependabot[bot] and GitHub
8a2b64a1a5
build(deps): bump actions/download-artifact from 7 to 8
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-26 18:32:58 +00:00
dependabot[bot] and GitHub
f606596834
build(deps): bump actions/upload-artifact from 6 to 7
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-26 18:32:52 +00:00
Tonis Tiigi
88cba2c367
policy: avoid stale invalid field warnings in eval
...
Track fields reloaded during eval --print resolution loops and filter
final invalid-field warnings against that set.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-26 09:14:31 -08:00
Tonis Tiigi
4880756a0f
policy: simplify recursive material resolution
...
Unify root/material unknown resolution with recursive Input traversal.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-26 09:14:25 -08:00
Tõnis Tiigi and GitHub
f35e45c307
Merge pull request #3667 from tonistiigi/20260224-update-buildkit
...
vendor: update buildkit to v0.28.0-rc1
2026-02-24 14:36:03 -08:00
Tonis Tiigi
dd2a620465
vendor: update buildkit to v0.28.0-rc1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-24 14:19:34 -08:00
CrazyMax and GitHub
8967e9f760
Merge pull request #3666 from crazy-max/docker-29.2
...
dockerfile: update to docker 29.2
2026-02-24 19:17:22 +01:00
CrazyMax
246e1090a0
dockerfile: update to docker 29.2
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-02-24 18:36:40 +01:00