alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,307 Commits 1 Branch 1 Tag
a21f0a4ffbab4343535e7dc09aee05de1fbba5e7
Commit Graph
453 Commits
Author SHA1 Message Date
Guillaume Lours 0492548633 bump compose-go to version v2.13.0 
Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
 2026-07-02 11:46:15 +02:00
CrazyMaxandGitHub 9587b741bc Merge pull request #3912 from thaJeztah/bump_moby 
vendor: github.com/docker/cli v29.6.1
 2026-07-01 15:15:02 +02:00
Sebastiaan van Stijn d27d845f75 vendor: github.com/docker/cli v29.6.1 
full diff: https://github.com/docker/cli/compare/v29.5.3...v29.6.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-01 14:43:19 +02:00
Sebastiaan van Stijn e1e5963dae vendor: github.com/containerd/containerd/v2 v2.2.5 
- full diff: https://github.com/containerd/containerd/compare/v2.2.4...v2.2.5
- release notes: https://github.com/containerd/containerd/releases/tag/v2.2.5

The fifth patch release for containerd 2.2 contains various fixes
and updates including security patches.

-  CVE-2026-50195 / [GHSA-cvxm-645q-p574] CRI: checkpoint import allows local image tag poisoning
-  CVE-2026-53488 / [GHSA-xhf5-7wjv-pqxp] CRI: image-config LABEL flows to host-root command execution from an image pull
-  CVE-2026-53492 / [GHSA-33vj-92qq-66hc] CRI: CDI annotation smuggling during CRI checkpoint restore
-  CVE-2026-53489 / [GHSA-rgh6-rfwx-v388] CRI: Arbitrary host file read via symlink following in CRI checkpoint restore
-  CVE-2026-47262 / [GHSA-jpcc-p29g-p8mq] containerd image-triggered runtime DoS via unbounded group parsing

[GHSA-cvxm-645q-p574]: https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574
[GHSA-xhf5-7wjv-pqxp]: https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp
[GHSA-33vj-92qq-66hc]: https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc
[GHSA-rgh6-rfwx-v388]: https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388
[GHSA-jpcc-p29g-p8mq]: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-23 09:27:04 +02:00
Tõnis TiigiandGitHub b4b3437a30 Merge pull request #3898 from crazy-max/compose-go-2.11.0 
vendor: update compose-go to v2.11.0
 2026-06-12 15:40:38 -07:00
CrazyMax 268dcf5917 vendor: update buildkit to v0.31.0-rc2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-12 13:46:40 +02:00
CrazyMax 803403710a vendor: update compose-go to v2.11.0 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-11 11:13:52 +02:00
Tonis Tiigi b5cf212276 vendor: update buildkit to v0.31.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-06-10 14:19:03 -07:00
CrazyMax 1916210ddc vendor: update buildkit to f449174742bf 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-06-10 16:41:09 +02:00
Tonis Tiigi 58a5a2cd60 vendor: update buildkit to 41c29fffe299 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-06-09 19:44:00 -07:00
dependabot[bot]andGitHub cb2b59576e build(deps): bump github.com/containerd/containerd/v2 
Bumps the go_modules group with 1 update in the / directory: [github.com/containerd/containerd/v2](https://github.com/containerd/containerd).


Updates `github.com/containerd/containerd/v2` from 2.2.3 to 2.2.4
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v2.2.3...v2.2.4)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.2.4
  dependency-type: direct:production
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-21 22:02:05 +00:00
Sebastiaan van Stijn 587111d392 vendor: github.com/docker/cli v29.5.1 
full diff: https://github.com/docker/cli/compare/v29.4.3...v29.5.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-05-18 20:49:19 +02:00
CrazyMax 9372cc4b5f vendor: update buildkit to v0.30.0 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-05-13 15:11:06 +02:00
Tonis Tiigi cb6566122b vendor: update buildkit to v0.30.0-rc2 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-05-11 13:15:00 -07:00
Tonis Tiigi a3147eba54 vendor: update buildkit to v0.30.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-05-06 15:06:54 -07:00
Sebastiaan van Stijn 76ba2fac5c driver/docker-container: remove uses of jsonmessage 
This function was always using `io.Discard` for printing the progress,
so we can use the `Wait()` method, which reads the stream, returning
any error (similar to jsonmessage.DisplayJSONMessagesStream), and
closes the stream either if the context is cancelled, or if the
stream ends.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 13:35:39 +02:00
Sebastiaan van Stijn d45c770d5e vendor: github.com/docker/cli v29.4.1 
full diff: https://github.com/docker/cli/compare/v29.4.0...v29.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn 650f72ca74 vendor: github.com/mattn/go-runewidth v0.0.23 
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.22...v0.0.23

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn a2e6003124 vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2 
- https://github.com/moby/moby/compare/api/v1.54.1...api/v1.54.2
- https://github.com/moby/moby/compare/client/v0.4.0...client/v0.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:16:59 +02:00
Sebastiaan van Stijn 478d9b19a2 vendor: github.com/docker/go-connections v0.7.0 
full diff: https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:16:59 +02:00
CrazyMax b7061891c5 vendor: k8s v0.35.4 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-21 11:18:40 +02:00
CrazyMax 4f89a2407a gitutil: use BuildKit urlutil.RedactCredentials for remote URLs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-09 15:04:37 +02:00
CrazyMax 3124b3c839 vendor: update buildkit to a243ce438aee 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-09 14:40:14 +02:00
Sebastiaan van Stijn 0b0843233b vendor: github.com/docker/cli v29.4.0 
full diff: https://github.com/docker/cli/compare/v29.3.1...v29.4.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-07 11:52:07 +02:00
Sebastiaan van Stijn 2da27cedb5 vendor: github.com/mattn/go-runewidth v0.0.22 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn 63b4d001aa vendor: go.opentelemetry.io/otel v1.42.0, otel/contrib v1.67.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-04 01:41:01 +02:00
Tõnis TiigiandGitHub b180175396 Merge pull request #3779 from thaJeztah/bump_moby 
vendor: moby/client v0.4.0, moby/api v1.54.1
 2026-04-03 11:36:47 -07:00
Jonathan A. Sternberg d781c83cec commands: micro optimization for source date epoch 
Avoids the call to `os.Getenv` when it is unnecessary because it would
be overwritten anyway.

Removes the comments about moving environment variable parsing to a
method for use by library consumers. That method exists in containerd
and this set of code doesn't actually perform any parsing since the
parsing of this time is done within buildkit and not on the client.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-04-03 10:02:50 -05:00
Sebastiaan van Stijn 3b630c6437 vendor: moby/client v0.4.0, moby/api v1.54.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-03 16:05:48 +02:00
Guillaume Lours 8a01076b67 bump compose-go to version v2.10.2 
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
 2026-04-03 12:15:27 +02:00
Tonis Tiigi eba72a35e4 vendor: update buildkit to v0.29.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-25 15:47:08 -07:00
Tonis Tiigi 7c4703614d vendor: k8s v0.35.2 
Drops the gogo-proto XXX_* methods.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-06 17:32:09 -08:00
Tonis Tiigi 5a7f7c286f kubernetes: trim client-go dependency surface 
Replace the full generated clientset and global Kubernetes scheme
with a small local REST client layer and minimal scheme registration.

This keeps the existing kubeconfig/auth and remote exec behavior while
significantly reducing the linked and vendored Kubernetes dependency set.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-06 16:44:18 -08:00
Sebastiaan van Stijn c06971965f vendor: docker/cli v29.3.0, moby/api v1.54.0, moby/client v0.3.0 
This also allows the client to connect with API v1.40 and up (Docker 19.03),
which previously was API v1.43 and up (Docker 25.0 and up).

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-05 16:38:27 +01:00
Tonis Tiigi 55bef8178d vendor: update buildkit to v0.28.0 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-03 12:17:01 -08:00
Sebastiaan van Stijn f1f38d34ad vendor: github.com/golang/snappy v1.0.0 
Ensure arm64 frame sizes are 8 (mod 16)

fixes: "Weird failure when building on Raspbian / Debian 10.11"

full diff: https://github.com/golang/snappy/compare/v0.0.4...v1.0.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-03 16:28:00 +01:00
Tonis Tiigi 73ea669465 vendor: update buildkit to ecde33610015 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 17:06:30 -08:00
Tonis Tiigi 4880756a0f policy: simplify recursive material resolution 
Unify root/material unknown resolution with recursive Input traversal.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 09:14:25 -08:00
Tonis Tiigi dd2a620465 vendor: update buildkit to v0.28.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-24 14:19:34 -08:00
Tonis Tiigi 5c3551beeb policy: add GitHub attestation verification 
Add github_attestation and github_release_attestation policy support.
Fetch GitHub attestation bundles (including bundle_url .json.sn decode)
and verify against input.http.checksum.

Wire source metadata resolver progress through resolver options and add
ResolveState support for policy HTTP attestation fetches.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-20 08:56:40 -08:00
Tonis Tiigi 9d803b0d87 vendor: update buildkit to v0.28-dev-9836771d0c5b 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-10 11:59:30 -08:00
Sebastiaan van Stijn 79b14eaeab vendor: github.com/docker/cli v29.2.1 
full diff: https://github.com/docker/cli/compare/v29.2.0...v29.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 8bd5bd4983 vendor: github.com/docker/cli v29.2.0 
full diff: https://github.com/docker/cli/compare/v29.1.5...v29.2.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 9aa7e1578a vendor: moby/api v1.53.0, moby/client v0.2.2 
full diff:

- api: https://github.com/moby/moby/compare/api/v1.52.0...api/v1.53.0
- client: https://github.com/moby/moby/compare/client/v0.2.1...client/v0.2.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 6b71de00a0 vendor: github.com/go-viper/mapstructure/v2 v2.5.0 
full diff: https://github.com/go-viper/mapstructure/compare/v2.4.0...v2.5.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:55 +01:00
Sebastiaan van Stijn 39ee64df71 commands/history: rewrite with stdlib multi-errors 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-26 12:53:33 +01:00
Sebastiaan van Stijn 99b8143e28 vendor: github.com/sirupsen/logrus v1.9.4 
full diff: https://github.com/sirupsen/logrus/compare/dd1b4c2e81af...v1.9.4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-15 11:23:56 +01:00
Tonis Tiigi d54f398c5d vendor: update buildkit to v0.27.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 13:36:15 -08:00
Tonis Tiigi 4b4f2aa682 tests: add http policy integration tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:33:49 -08:00
Tonis Tiigi 87d4189039 policy: image signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00