alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,133 Commits 1 Branch 1 Tag
9de08b24ff1c8128fe1af8fc18a637e3a05cc51e
Commit Graph
4133 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
CrazyMaxandMateusz Gozdek 9de08b24ff tests: cover debug build missing mount result IDs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-05-04 15:49:46 +02:00
Mateusz Gozdek 142cd448de Fix panic in buildx debug when solving fails 
Closes #3822

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
 2026-05-04 15:49:45 +02:00
Tõnis TiigiandGitHub f1b60d2003 Merge pull request #3820 from crazy-max/ocilayout-fix-winpath-detection 
ocilayout: narrow Windows drive path detection
 2026-04-27 14:15:09 +02:00
CrazyMax bf34a4cbed ocilayout: narrow Windows drive path detection 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-27 10:19:01 +02:00
Tõnis TiigiandGitHub 14ef96b3b5 Merge pull request #3807 from tonistiigi/buildx-default-policy 
policy: add builtin default source policy
 2026-04-24 12:23:25 -07:00
Tõnis TiigiandGitHub c960e4a8b2 Merge pull request #3811 from crazy-max/fix-oci-layout 
build: fix oci-layout named context serialization
 2026-04-24 12:23:10 -07:00
Tõnis TiigiandGitHub f9c1a46250 Merge pull request #3817 from crazy-max/rm-reject-context 
rm: reject context builders before loading nodes
 2026-04-24 09:21:10 -07:00
CrazyMax 2574d4c0d0 rm: reject context builders before loading nodes 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-24 17:27:57 +02:00
CrazyMaxandGitHub 82183e2322 Merge pull request #3814 from docker/dependabot/github_actions/crazy-max-dot-github-6f136b1f9e 
build(deps): bump the crazy-max-dot-github group with 2 updates
 2026-04-23 14:07:02 +02:00
CrazyMax dcf533e756 build: fix oci-layout named context serialization 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-23 12:26:02 +02:00
dependabot[bot]andGitHub 79d2d6234d build(deps): bump the crazy-max-dot-github group with 2 updates 
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-23 10:16:22 +00:00
CrazyMaxandGitHub 034ebc7687 Merge pull request #3816 from docker/dependabot/github_actions/crazy-max/dot-github-1.7.1 
build(deps): bump crazy-max/.github from 1.6.0 to 1.7.1
 2026-04-23 12:15:07 +02:00
dependabot[bot]andGitHub 365515c8fc build(deps): bump crazy-max/.github from 1.6.0 to 1.7.1 
Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from 1.6.0 to 1.7.1.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16)

---
updated-dependencies:
- dependency-name: crazy-max/.github
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-23 09:57:33 +00:00
CrazyMaxandGitHub e732e8a33a Merge pull request #3777 from thaJeztah/no_jsonmessage 
driver/docker-container: remove uses of jsonmessage
 2026-04-22 11:53:22 +02:00
CrazyMax 2d58ee6f98 ocilayout: handle Windows paths in local OCI layout refs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-22 11:38:34 +02:00
Sebastiaan van Stijn 76ba2fac5c driver/docker-container: remove uses of jsonmessage 
This function was always using `io.Discard` for printing the progress,
so we can use the `Wait()` method, which reads the stream, returning
any error (similar to jsonmessage.DisplayJSONMessagesStream), and
closes the stream either if the context is cancelled, or if the
stream ends.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 13:35:39 +02:00
CrazyMaxandGitHub 872d8e5e58 Merge pull request #3806 from thaJeztah/bump_moby 
vendor: github.com/docker/cli v29.4.1
 2026-04-21 13:10:12 +02:00
Sebastiaan van Stijn d45c770d5e vendor: github.com/docker/cli v29.4.1 
full diff: https://github.com/docker/cli/compare/v29.4.0...v29.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn 650f72ca74 vendor: github.com/mattn/go-runewidth v0.0.23 
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.22...v0.0.23

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn a2e6003124 vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2 
- https://github.com/moby/moby/compare/api/v1.54.1...api/v1.54.2
- https://github.com/moby/moby/compare/client/v0.4.0...client/v0.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:16:59 +02:00
Sebastiaan van Stijn 478d9b19a2 vendor: github.com/docker/go-connections v0.7.0 
full diff: https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:16:59 +02:00
CrazyMaxandGitHub 8c1c3e4d7f Merge pull request #3808 from crazy-max/update-k8s 
vendor: k8s v0.35.4
 2026-04-21 12:03:05 +02:00
CrazyMax b7061891c5 vendor: k8s v0.35.4 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-21 11:18:40 +02:00
Tonis Tiigi 0491d7c7b9 policy: add default policy for buildkit-syft-scanner images 
Extends the builtin default policy to verify docker-github-builder
signatures on docker/buildkit-syft-scanner images. Tags `latest` and
1.10+ require a signature from the docker/buildkit-syft-scanner source
repository; older tags pass through unchanged. Factors the shared ref
matching logic into sig_ref_matches for dockerfile and introduces a
syft-scanner variant that uses the plain refs/tags/ prefix.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-04-20 16:46:05 -07:00
Tonis Tiigi 0e50635195 policy: add builtin default source policy 
Embed an opt-in default source policy for Docker-managed frontend images.
Load it ahead of user policies when enabled, and cover behavior with table-
driven policy tests for signed, unsigned, floating, and labs tags.

Makes sure if there is any attack against the docker/dockerfile
releases, or they accidentally point to worng images, these are automatically detected.

In a future release these should become opt-out.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-04-20 16:32:39 -07:00
CrazyMaxandGitHub 0cc24edee5 Merge pull request #3801 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.6.0 
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.5.0 to 1.6.0
 2026-04-20 15:41:15 +02:00
CrazyMaxandGitHub 4c6e2585a4 Merge pull request #3804 from docker/dependabot/github_actions/github/codeql-action-4.35.2 
build(deps): bump github/codeql-action from 4.35.1 to 4.35.2
 2026-04-20 15:40:51 +02:00
dependabot[bot]andGitHub a05c9c122b build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...95e58e9a2cdfd71adc6e0353d5c52f41a045d225)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-17 18:34:17 +00:00
dependabot[bot]andGitHub cf33414b72 build(deps): bump docker/github-builder/.github/workflows/bake.yml 
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/2497a7d1e7d8683af4949c9d6d62012bc16ed59c...7d2a02426d4b989616ba5aaee4e879afd4134b0d)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-16 18:34:30 +00:00
Tõnis TiigiandGitHub 6160c9bcb9 Merge pull request #3726 from crazy-max/buildkit-git-cli 
gitutil: migrate to BuildKit GitCLI API
 2026-04-15 09:52:53 -07:00
CrazyMaxandGitHub adec11dea3 Merge pull request #3799 from crazy-max/fix-zizmor 
ci(zizmor): enable secrets-outside-env
 2026-04-15 16:36:45 +02:00
CrazyMax 8e43476e89 ci(zizmor): enable secrets-outside-env 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-15 16:12:55 +02:00
CrazyMaxandGitHub 6525a8f5da Merge pull request #3798 from crazy-max/fix-labeler-workflow 
ci: scope labeler concurrency to the pull request
 2026-04-15 12:10:45 +02:00
CrazyMaxandGitHub 33b7311705 Merge pull request #3796 from docker/dependabot/github_actions/docker/bake-action-7.1.0 
build(deps): bump docker/bake-action from 7.0.0 to 7.1.0
 2026-04-14 10:31:03 +02:00
CrazyMaxandGitHub 1c56abfeb3 Merge pull request #3797 from docker/dependabot/github_actions/softprops/action-gh-release-2.6.2 
build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0
 2026-04-14 10:30:28 +02:00
CrazyMax ee3fc2e4a0 ci: scope labeler concurrency to the pull request 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-14 09:55:14 +02:00
CrazyMaxandGitHub c062d2dcf1 Merge pull request #3794 from docker/dependabot/github_actions/actions/upload-artifact-7.0.1 
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
 2026-04-14 09:53:07 +02:00
CrazyMaxandGitHub 51d374bd4b Merge pull request #3795 from docker/dependabot/github_actions/peter-evans/create-pull-request-8.1.1 
build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1
 2026-04-14 09:49:06 +02:00
CrazyMaxandGitHub ac8f715ce1 Merge pull request #3789 from crazy-max/bake-hosts-order 
bake: sort extra-hosts before generating build options
 2026-04-14 09:48:18 +02:00
dependabot[bot]andGitHub 306eb5f49d build(deps): bump softprops/action-gh-release from 2.6.1 to 2.6.2 
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.6.1 to 2.6.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/153bb8e04406b158c6c84fc1615b65b24149a1fe...b4309332981a82ec1c5618f44dd2e27cc8bfbfda)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:47 +00:00
dependabot[bot]andGitHub 1a318bc87b build(deps): bump docker/bake-action from 7.0.0 to 7.1.0 
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/82490499d2e5613fcead7e128237ef0b0ea210f7...a66e1c87e2eca0503c343edf1d208c716d54b8a8)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:40 +00:00
dependabot[bot]andGitHub fdceafbf77 build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 8.1.0 to 8.1.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/c0f553fe549906ede9cf27b5156039d195d2ece0...5f6978faf089d4d20b00c7766989d076bb2fc7f1)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:18 +00:00
dependabot[bot]andGitHub 61b3803162 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:12 +00:00
CrazyMax 09f288c71e bake: sort extra-hosts before generating build options 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-09 15:53:24 +02:00
CrazyMax 4f89a2407a gitutil: use BuildKit urlutil.RedactCredentials for remote URLs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-09 15:04:37 +02:00
CrazyMax 720f91fdd4 gitutil: migrate to BuildKit GitCLI API 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-09 14:57:38 +02:00
CrazyMax 3124b3c839 vendor: update buildkit to a243ce438aee 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-09 14:40:14 +02:00
CrazyMaxandGitHub 43fe71eaba Merge pull request #3785 from docker/dependabot/github_actions/crazy-max-dot-github-f0991e81fd 
build(deps): bump the crazy-max-dot-github group with 2 updates
 2026-04-09 10:02:56 +02:00
CrazyMaxandGitHub b1b5f8d4d6 Merge pull request #3786 from docker/dependabot/github_actions/crazy-max/dot-github-1.6.0 
build(deps): bump crazy-max/.github from 1.3.0 to 1.6.0
 2026-04-09 10:02:38 +02:00
Tõnis TiigiandGitHub a5ea0512e7 Merge pull request #3778 from thaJeztah/bump_cli2 
vendor: github.com/docker/cli v29.4.0
 2026-04-08 14:51:17 -07:00