Tõnis Tiigi and GitHub
9ee371774f
Merge pull request #3748 from crazy-max/remove-releases-json
...
chore: remove left releases.json payload
2026-04-01 18:02:23 -07:00
Tõnis Tiigi and GitHub
7b5d7370f1
Merge pull request #3766 from jsternberg/k8s-driver-statefulset
...
feat: add persistent storage options to k8s driver
2026-04-01 18:01:54 -07:00
Jonathan A. Sternberg
0a0fc905a6
feat: add persistent storage options to k8s driver
...
The k8s driver now supports the `persistent-volume-claim.requests.storage`
option. Setting this option changes the deployment into a statefulset
and creates a persistent volume claim where the buildkit data is stored.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com >
2026-04-01 15:44:51 -05:00
Tõnis Tiigi and GitHub
c05897bae0
Merge pull request #3765 from crazy-max/go-1.26
...
update to go 1.26
2026-03-31 15:44:28 -07:00
Tõnis Tiigi and GitHub
581c232f81
Merge pull request #3746 from crazy-max/buildkit-0.29
...
dockerfile: update buildkit to v0.29.0
2026-03-31 09:42:27 -07:00
CrazyMax
054b450ee8
dockerfile: update buildkit to v0.29.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-31 18:19:33 +02:00
CrazyMax and GitHub
f7897eba02
Merge pull request #3764 from crazy-max/vendor-buildkit-0.29.0
...
vendor: update buildkit to v0.29.0
2026-03-31 16:07:57 +02:00
CrazyMax
7d5c56d60c
dockerfile: update xx to 1.9.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-31 15:06:27 +02:00
CrazyMax
b2afb402ad
update to go 1.26
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-31 15:06:06 +02:00
CrazyMax
fdef3304af
vendor: update buildkit to v0.29.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-31 14:52:21 +02:00
CrazyMax and GitHub
604513dc3e
Merge pull request #3757 from docker/dependabot/github_actions/crazy-max/dot-github-1.3.0
...
build(deps): bump crazy-max/.github from 1.1.0 to 1.3.0
2026-03-31 09:32:45 +02:00
CrazyMax and GitHub
e876aa50ca
Merge pull request #3759 from docker/dependabot/github_actions/github/codeql-action-4.35.1
...
build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
2026-03-31 09:15:10 +02:00
CrazyMax and GitHub
362c669d7e
Merge pull request #3760 from docker/dependabot/github_actions/actions/setup-go-6.4.0
...
build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
2026-03-31 09:14:08 +02:00
dependabot[bot] and GitHub
bddf212bfe
build(deps): bump crazy-max/.github from 1.1.0 to 1.3.0
...
Bumps [crazy-max/.github](https://github.com/crazy-max/.github ) from 1.1.0 to 1.3.0.
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed )
---
updated-dependencies:
- dependency-name: crazy-max/.github
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-31 07:14:07 +00:00
CrazyMax and GitHub
b54112b9e1
Merge pull request #3762 from docker/dependabot/github_actions/codecov/codecov-action-6.0.0
...
build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
2026-03-31 09:13:34 +02:00
CrazyMax and GitHub
90f266acfb
Merge pull request #3763 from docker/dependabot/github_actions/crazy-max-dot-github-763ceb8cae
...
build(deps): bump the crazy-max-dot-github group with 2 updates
2026-03-31 09:13:01 +02:00
dependabot[bot] and GitHub
0ff99e3ff2
build(deps): bump the crazy-max-dot-github group with 2 updates
...
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github ) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ).
Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed )
Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-31 01:49:04 +00:00
Tõnis Tiigi and GitHub
eff492f5d7
Merge pull request #3750 from crazy-max/zizmor-update
...
ci(zizmor): use latest version and enable online audits
2026-03-30 18:48:21 -07:00
Tõnis Tiigi and GitHub
c7dfed7dcc
Merge pull request #3677 from tonistiigi/policy-http-pgp
...
policy: add HTTP source PGP signature verification builtin
2026-03-30 16:26:41 -07:00
dependabot[bot] and GitHub
232dbc70c7
build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.5.3 to 6.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/1af58845a975a7985b0beb0cbe6fbbb71a41dbad...57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 19:52:45 +00:00
dependabot[bot] and GitHub
b53df2b2f2
build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 19:52:20 +00:00
dependabot[bot] and GitHub
ba8917931f
build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.34.1 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/38697555549f1db7851b81482ff19f1fa5c4fedc...c10b8064de6f491fea524254123dbe5e09572f13 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 19:52:14 +00:00
CrazyMax and GitHub
ce058179ed
Merge pull request #3749 from crazy-max/dockerfile-docker-29.3
...
dockerfile: update to docker 29.3
2026-03-27 14:40:43 +01:00
CrazyMax
4451697923
ci(zizmor): use latest version and enable online audits
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-27 13:57:38 +01:00
CrazyMax
6b7140b4fb
dockerfile: update to docker 29.3
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-27 13:51:05 +01:00
Tonis Tiigi
a57372e966
policy: add HTTP PGP signature verification builtin
...
Add verify_http_pgp_signature Rego builtin for HTTP sources using
pgpsign with checksum-request/response flow through policy resolution.
Wire sourcemeta HTTP checksum request/response conversion and add tests.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-26 15:39:46 -07:00
Tõnis Tiigi and GitHub
55e8fa3b8e
Merge pull request #3745 from crazy-max/zizmor-fixes
...
ci: don't pin docs-upstream validation workflow
2026-03-25 16:26:46 -07:00
Tõnis Tiigi and GitHub
70536fc890
Merge pull request #3743 from tonistiigi/update-buildkit-v0.29.0-rc1
...
vendor: update buildkit to v0.29.0-rc1
2026-03-25 16:14:09 -07:00
CrazyMax
f4226cf837
chore: remove left releases.json payload
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-26 00:07:36 +01:00
CrazyMax
4f160d7e03
ci: don't pin docs-upstream validation workflow
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-26 00:05:57 +01:00
Tõnis Tiigi and GitHub
467e3e6d47
Merge pull request #3742 from crazy-max/zizmor
...
ci: zizmor workflow
2026-03-25 16:00:49 -07:00
Tonis Tiigi
eba72a35e4
vendor: update buildkit to v0.29.0-rc1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-25 15:47:08 -07:00
CrazyMax
d3a40b6919
ci: fix zizmor security findings
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 22:25:51 +01:00
Tõnis Tiigi and GitHub
a7d3578248
Merge pull request #3286 from crazy-max/bake-rdc339parse
...
bake: add unixtimestampparse and formattimestamp functions
2026-03-25 14:14:37 -07:00
CrazyMax
66303c9b24
ci: zizmor workflow
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 22:02:40 +01:00
Tõnis Tiigi and GitHub
9504ab6678
Merge pull request #3740 from crazy-max/update-crazy-max-actions
...
ci: bump crazy-max/.github to 1.1.0
2026-03-25 09:34:45 -07:00
CrazyMax
dcc591ea91
ci: bump crazy-max/.github to 1.1.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 12:06:59 +01:00
CrazyMax
92905a8f5a
bake: support unix output in formattimestamp
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 11:59:24 +01:00
CrazyMax
2798e134e9
bake: add formattimestamp and tighten unix timestamp parsing
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 11:46:49 +01:00
CrazyMax
11395747a6
bake: add unixtimestampparse function
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-25 11:46:48 +01:00
Tõnis Tiigi and GitHub
b1c10489eb
Merge pull request #3734 from crazy-max/build-fix-empty-syntax
...
build: reject empty BUILDKIT_SYNTAX overrides
2026-03-24 17:34:54 -07:00
Tõnis Tiigi and GitHub
7ac8168016
Merge pull request #3738 from tonistiigi/policy-eval-upt
...
Updated for policy eval
2026-03-24 17:08:04 -07:00
Tõnis Tiigi and GitHub
be5de2c200
Merge pull request #3736 from jsternberg/dap-general-availability
...
dap: make dap generally available
2026-03-24 17:07:38 -07:00
CrazyMax
7c44ec11ec
build: reject empty BUILDKIT_SYNTAX overrides
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-24 15:35:08 +01:00
CrazyMax and GitHub
f48bd18b4f
Merge pull request #3737 from allexistence/docs-variable-example
...
docs: add example for --list=variables with variable descriptions
2026-03-24 09:34:00 +01:00
Tonis Tiigi
64cd4136d9
policy: support reading policy from stdin via --file -
...
Allow passing policy content through stdin by specifying
"--file -" in the eval command. This enables piping policy
data without requiring a file on disk.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-23 11:13:46 -07:00
Tonis Tiigi
7df7b4205b
policy: align eval file flag
...
Use --file/-f for policy eval and keep hidden --filename as a
backward-compatible alias.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-23 11:04:14 -07:00
Tonis Tiigi
9dcb37f47c
policy: add --platform to eval
...
Allow buildx policy eval to accept an explicit target platform and skip
worker platform discovery when the flag is provided.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-23 11:04:12 -07:00
Jonathan A. Sternberg
a8d359a9ca
dap: make dap generally available
...
Removes the experimental flags and bits for dap and deletes some dead
code that somehow made its way this far without anyone noticing.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com >
2026-03-23 10:43:27 -05:00
Jonathan A. Sternberg and GitHub
dc5f9862a5
Merge pull request #3735 from jsternberg/dap-exit-code
...
dap: pass exit code through exited event
2026-03-23 10:42:57 -05:00