alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,318 Commits 1 Branch 1 Tag
ade3d756077adae8cbd97cd8cef8147db184578c
Commit Graph
616 Commits
Author SHA1 Message Date
Sebastiaan van Stijn 3b630c6437 vendor: moby/client v0.4.0, moby/api v1.54.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-03 16:05:48 +02:00
Guillaume Lours 8a01076b67 bump compose-go to version v2.10.2 
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
 2026-04-03 12:15:27 +02:00
CrazyMax fdef3304af vendor: update buildkit to v0.29.0 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-31 14:52:21 +02:00
Tonis Tiigi a57372e966 policy: add HTTP PGP signature verification builtin 
Add verify_http_pgp_signature Rego builtin for HTTP sources using
pgpsign with checksum-request/response flow through policy resolution.
Wire sourcemeta HTTP checksum request/response conversion and add tests.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-26 15:39:46 -07:00
Tonis Tiigi eba72a35e4 vendor: update buildkit to v0.29.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-25 15:47:08 -07:00
Tonis Tiigi 7c4703614d vendor: k8s v0.35.2 
Drops the gogo-proto XXX_* methods.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-06 17:32:09 -08:00
Tonis Tiigi 5a7f7c286f kubernetes: trim client-go dependency surface 
Replace the full generated clientset and global Kubernetes scheme
with a small local REST client layer and minimal scheme registration.

This keeps the existing kubeconfig/auth and remote exec behavior while
significantly reducing the linked and vendored Kubernetes dependency set.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-06 16:44:18 -08:00
Sebastiaan van Stijn c06971965f vendor: docker/cli v29.3.0, moby/api v1.54.0, moby/client v0.3.0 
This also allows the client to connect with API v1.40 and up (Docker 19.03),
which previously was API v1.43 and up (Docker 25.0 and up).

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-05 16:38:27 +01:00
Tonis Tiigi 55bef8178d vendor: update buildkit to v0.28.0 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-03 12:17:01 -08:00
Sebastiaan van Stijn f1f38d34ad vendor: github.com/golang/snappy v1.0.0 
Ensure arm64 frame sizes are 8 (mod 16)

fixes: "Weird failure when building on Raspbian / Debian 10.11"

full diff: https://github.com/golang/snappy/compare/v0.0.4...v1.0.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-03-03 16:28:00 +01:00
CrazyMax 7346c1f0dc vendor: update buildkit to v0.28.0-rc2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-02-27 16:51:40 +01:00
Tonis Tiigi 73ea669465 vendor: update buildkit to ecde33610015 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 17:06:30 -08:00
Tonis Tiigi 4880756a0f policy: simplify recursive material resolution 
Unify root/material unknown resolution with recursive Input traversal.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-26 09:14:25 -08:00
Tonis Tiigi dd2a620465 vendor: update buildkit to v0.28.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-24 14:19:34 -08:00
Tonis Tiigi 5c3551beeb policy: add GitHub attestation verification 
Add github_attestation and github_release_attestation policy support.
Fetch GitHub attestation bundles (including bundle_url .json.sn decode)
and verify against input.http.checksum.

Wire source metadata resolver progress through resolver options and add
ResolveState support for policy HTTP attestation fetches.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-20 08:56:40 -08:00
Tonis Tiigi 9d803b0d87 vendor: update buildkit to v0.28-dev-9836771d0c5b 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-10 11:59:30 -08:00
Tonis Tiigi 6d2e4952b5 policy: add mock signature unit test 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-02-09 18:27:29 -08:00
Sebastiaan van Stijn 79b14eaeab vendor: github.com/docker/cli v29.2.1 
full diff: https://github.com/docker/cli/compare/v29.2.0...v29.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 8bd5bd4983 vendor: github.com/docker/cli v29.2.0 
full diff: https://github.com/docker/cli/compare/v29.1.5...v29.2.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 9aa7e1578a vendor: moby/api v1.53.0, moby/client v0.2.2 
full diff:

- api: https://github.com/moby/moby/compare/api/v1.52.0...api/v1.53.0
- client: https://github.com/moby/moby/compare/client/v0.2.1...client/v0.2.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:56 +01:00
Sebastiaan van Stijn 6b71de00a0 vendor: github.com/go-viper/mapstructure/v2 v2.5.0 
full diff: https://github.com/go-viper/mapstructure/compare/v2.4.0...v2.5.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:55 +01:00
Sebastiaan van Stijn eaf81b65d9 vendor: github.com/klauspost/compress v1.18.3 
no changes in vendored code

- fixes / downstream CVE-2025-61728

full diff: https://github.com/klauspost/compress/compare/v1.18.2...v1.18.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-02-04 11:03:53 +01:00
CrazyMaxandGitHub c1a52c4060 Merge pull request #3628 from thaJeztah/bump_x_deps 
vendor: update golang.org/x dependencies
 2026-02-04 10:31:22 +01:00
Sebastiaan van Stijn efe1aa593e vendor: golang.org/x/mod v0.32.0 
full diffs:

- https://cs.opensource.google/go/x/tools/+/refs/tags/v0.39.0...refs/tags/v0.41.0
- https://cs.opensource.google/go/x/mod/+/refs/tags/v0.31.0...refs/tags/v0.32.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:05:18 +01:00
Sebastiaan van Stijn 5d44afbda4 vendor: golang.org/x/crypto v0.47.0 
full diffs:

- https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.46.0...refs/tags/v0.47.0
- https://cs.opensource.google/go/x/net/+/refs/tags/v0.48.0...refs/tags/v0.49.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 746c343d18 vendor: golang.org/x/text v0.33.0 
full diff: https://cs.opensource.google/go/x/text/+/refs/tags/v0.32.0...refs/tags/v0.33.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 95a1cb94b3 vendor: golang.org/x/tools v0.40.0 
full diff: https://cs.opensource.google/go/x/tools/+/refs/tags/v0.39.0...refs/tags/v0.40.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 214ebd8434 vendor: golang.org/x/term v0.39.0 
full diff: https://cs.opensource.google/go/x/term/+/refs/tags/v0.38.0...refs/tags/v0.39.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 40d068e12c vendor: golang.org/x/sys v0.40.0 
full diff: https://cs.opensource.google/go/x/sys/+/refs/tags/v0.39.0...refs/tags/v0.40.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 39ee64df71 commands/history: rewrite with stdlib multi-errors 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-26 12:53:33 +01:00
Tonis Tiigi 08e5e8ebf2 vendor: update buildkit to v0.27.0 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-21 14:32:32 -08:00
Sebastiaan van Stijn 0d343eff2d vendor: github.com/docker/cli v29.1.5 
no changes in code

full diff: https://github.com/docker/cli/compare/v29.1.4...v29.1.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-19 13:08:21 +01:00
Tonis Tiigi 3fd58dff71 vendor: update buildkit to v0.27.0-rc2 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-16 13:56:16 -08:00
Sebastiaan van Stijn 99b8143e28 vendor: github.com/sirupsen/logrus v1.9.4 
full diff: https://github.com/sirupsen/logrus/compare/dd1b4c2e81af...v1.9.4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-15 11:23:56 +01:00
Tonis Tiigi d54f398c5d vendor: update buildkit to v0.27.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 13:36:15 -08:00
Tonis Tiigi 87d4189039 policy: image signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi b2697ae933 policy: add git signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 93341aaeee add rego integration to source policies 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:40 -08:00
CrazyMaxandGitHub 2406c8cc80 Merge pull request #3584 from tonistiigi/go1.25-lint 
update linters for go1.25 base version
 2026-01-11 00:12:22 +01:00
Tonis Tiigi c5154b3169 update linters for go1.25 base version 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-09 18:54:15 -08:00
Tõnis TiigiandGitHub ef0a7b333a Merge pull request #3581 from jsternberg/dap-breakpoint-reason 
dap: fill in breakpoint reason for being unverified
 2026-01-09 17:42:36 -08:00
Sebastiaan van Stijn e419caae8b vendor: github.com/docker/cli v29.1.4 
no changes in vendored files

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-09 10:55:10 +01:00
Jonathan A. Sternberg 8ad75dc485 dap: fill in breakpoint reason for being unverified 
When a breakpoint fails to be verified, it will switch the reason to
"failed". It starts off the reason as "pending".

The `reason` field for a breakpoint was added some time after the last
release of `go-dap` which has only been updated once in the last year so
this uses the `main` branch version which contains the field.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-01-08 15:21:54 -06:00
CrazyMaxandTonis Tiigi c3514fea5d vendor: github.com/moby/buildkit@master ed6dc749ce40b9fdc308676d10343fd00f56c717 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-07 11:45:01 -08:00
Sebastiaan van Stijn 7762411537 vendor: github.com/containerd/containerd/v2 v2.2.1 
The pull request that was needed has been released now as part of v2.2.1;
full diff: https://github.com/containerd/containerd/compare/efd86f2b0bc2...v2.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-07 11:33:39 +01:00
Sebastiaan van Stijn 77571f56f2 vendor: github.com/docker/cli v29.1.3 
full diff: https://github.com/docker/cli/compare/v29.1.2...v29.1.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-16 11:08:53 +01:00
Sebastiaan van Stijn 3bc50aece8 vendor: github.com/klauspost/compress v1.18.2 
No changes in vendored code

Fixes a regression in v1.18.1 that resulted in invalid flate/zip/gzip encoding.
The v1.18.1 tag has been retracted.

full diff: https://github.com/klauspost/compress/compare/v1.18.1...v1.18.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-16 11:08:52 +01:00
Tõnis TiigiandGitHub c003c8617e Merge pull request #3558 from thaJeztah/bump_cli 
vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0
 2025-12-12 09:43:24 -08:00
Sebastiaan van Stijn 9353c2c00e vendor: github.com/morikuni/aec v1.1.0 
full diff: https://github.com/morikuni/aec/compare/v1.0.0...v1.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-11 17:51:11 +01:00
Sebastiaan van Stijn 304ab6d65d vendor: github.com/spf13/cobra v1.10.2, github.com/docker/cli-docs-tool v0.11.0 
reduce dependency on the archived go.yaml.in/yaml/v3 package

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-09 16:55:47 +01:00