Commit Graph
4261 Commits
Author SHA1 Message Date
s3onghyun c09ecf711e bake: fix duplicated type in bakeEnvFiles lookup param
Signed-off-by: s3onghyun <s3onghyun.hong@gmail.com>
2026-06-18 17:51:54 +09:00
Tõnis TiigiandGitHub 209f90c18c Merge pull request #3915 from tonistiigi/update-buildkit-v0.31.0
vendor: update buildkit to v0.31.0
2026-06-17 12:39:48 -07:00
Tonis Tiigi af83612e3f vendor: update buildkit to v0.31.0
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-17 11:51:42 -07:00
Tõnis TiigiandGitHub 230fb952bb Merge pull request #3908 from thaJeztah/align_otel_exporters
vendor: go.opentelemetry.io/otel/exporters v1.44.0
2026-06-15 10:52:11 -07:00
Sebastiaan van Stijn 68fd340247 vendor: go.opentelemetry.io/otel/exporters v1.44.0
removes the semconv v1.40.0 dependency

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-06-15 14:13:52 +02:00
Tõnis TiigiandGitHub b4b3437a30 Merge pull request #3898 from crazy-max/compose-go-2.11.0
vendor: update compose-go to v2.11.0
2026-06-12 15:40:38 -07:00
CrazyMaxandGitHub 51b977c3ae Merge pull request #3904 from crazy-max/dockerfile-buildkit-0.31.0-rc2
dockerfile: update buildkit to v0.31.0-rc2
2026-06-12 15:29:05 +02:00
CrazyMax c1ea48adc6 dockerfile: update buildkit to v0.31.0-rc2
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-12 14:54:24 +02:00
CrazyMaxandGitHub 73e56595aa Merge pull request #3903 from crazy-max/buildkit-0.31.0-rc2
vendor: update buildkit to v0.31.0-rc2
2026-06-12 14:02:55 +02:00
CrazyMax 268dcf5917 vendor: update buildkit to v0.31.0-rc2
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-12 13:46:40 +02:00
CrazyMaxandGitHub d1c298cd85 Merge pull request #3899 from crazy-max/remove-bake-path-shim
bake: remove stale path evaluation shim
2026-06-12 10:51:41 +02:00
CrazyMaxandGitHub edb063cb21 Merge pull request #3900 from jirimoravcik/fix/minor-resource-limits-adjustments
build: improve resource limits output and docs
2026-06-12 10:03:06 +02:00
CrazyMaxandGitHub 4149c242ab Merge pull request #3902 from crazy-max/github-builder-1.12.0
ci: update docker/github-builder to v1.12.0
2026-06-11 18:27:31 +02:00
CrazyMax 548e583d81 ci: update docker/github-builder to v1.12.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-11 17:39:34 +02:00
CrazyMaxandGitHub 8e59d65b5a Merge pull request #3896 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
2026-06-11 14:53:16 +02:00
Jiří Moravčík 9b37d78c89 build: improve resource limits output and docs
Signed-off-by: Jiří Moravčík <jiri.moravcik@gmail.com>
2026-06-11 11:18:35 +02:00
CrazyMax 803403710a vendor: update compose-go to v2.11.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-11 11:13:52 +02:00
CrazyMax bdb9077ef6 bake: remove stale path evaluation shim
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-11 00:07:27 +02:00
Tõnis TiigiandGitHub 89b455a9e3 Merge pull request #3897 from tonistiigi/update-buildkit-v0.31.0-rc1
vendor: update buildkit to v0.31.0-rc1
2026-06-10 14:58:01 -07:00
Tonis Tiigi b5cf212276 vendor: update buildkit to v0.31.0-rc1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-10 14:19:03 -07:00
Tõnis TiigiandGitHub dd388bf70e Merge pull request #3883 from crazy-max/local-output-delete
support BuildKit local output delete mode
2026-06-10 14:14:12 -07:00
Tõnis TiigiandGitHub 4fa5bb2396 Merge pull request #3895 from tonistiigi/exec-proxy-support
policy: enable proxy network from source policy caps
2026-06-10 14:09:56 -07:00
dependabot[bot]andGitHub 786a5433c2 build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v6.0.1...fb8b3582c8e4def4969c97caa2f19720cb33a72f)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-10 18:34:30 +00:00
Tonis Tiigi 25db0fb050 tests: verify exec traffic is policy-checked in caps proxy test
Extend testBuildPolicyCapsProxy so that instead of only checking that
the network proxy was enabled, the build runs a command that makes an
HTTP request to a local test server. The policy denies that URL as an
HTTP source, so the test now verifies that exec traffic actually flows
through the proxy and is subject to source policy, including the deny
message and DENY decision in the build output.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-10 08:58:48 -07:00
CrazyMax b6e1b7328f build: gate local delete outputs
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-10 16:41:10 +02:00
CrazyMaxandCrazyMax 473c6ef306 bake: requires explicit allow for local output delete mode
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-10 16:41:09 +02:00
CrazyMax 1916210ddc vendor: update buildkit to f449174742bf
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-10 16:41:09 +02:00
Tonis TiigiandCrazyMax 4da04e3bf4 policy: enable proxy network from source policy caps
Evaluate source policy caps before solve requests so policies can enable
BuildKit proxy networking. Policy can return caps {"exec.proxy": true}
during the caps request to enable proxy network
support for the solve.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-10 15:04:23 +02:00
CrazyMaxandGitHub 2fcfce0e71 Merge pull request #3894 from tonistiigi/0609-update-buildkit
vendor: update buildkit to 41c29fffe299
2026-06-10 13:33:47 +02:00
Tonis Tiigi 58a5a2cd60 vendor: update buildkit to 41c29fffe299
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-09 19:44:00 -07:00
Tõnis TiigiandGitHub 76703de985 Merge pull request #3876 from jirimoravcik/feat/per-step-resource-limits
build: Add per-step CPU and memory resource limits
2026-06-09 17:49:21 -07:00
CrazyMaxandGitHub 3a6e4e5e88 Merge pull request #3887 from crazy-max/codecov-test-results
ci: upload test results to codecov
2026-06-09 21:16:29 +02:00
Tõnis TiigiandGitHub b0d201a941 Merge pull request #3888 from crazy-max/fix-oci-mediatypes
build: handle buildkit defaulting to oci mediatypes
2026-06-09 11:37:05 -07:00
CrazyMax 8191e19d94 build: handle buildkit defaulting to oci mediatypes
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-09 19:43:48 +02:00
CrazyMaxandGitHub 0b358c7637 Merge pull request #3889 from docker/dependabot/github_actions/crazy-max-dot-github-a6a0ecf511
build(deps): bump the crazy-max-dot-github group with 2 updates
2026-06-09 15:55:32 +02:00
CrazyMaxandGitHub bad76e04fa Merge pull request #3890 from docker/dependabot/github_actions/github/codeql-action-4.36.2
build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
2026-06-09 15:55:06 +02:00
CrazyMaxandGitHub fa085de627 Merge pull request #3891 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.11.0
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.10.0 to 1.11.0
2026-06-09 15:54:41 +02:00
CrazyMaxandGitHub 72113d3ee2 Merge pull request #3892 from docker/dependabot/github_actions/codecov/codecov-action-7.0.0
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
2026-06-09 15:53:53 +02:00
CrazyMaxandGitHub 5e1dead20b Merge pull request #3893 from docker/dependabot/github_actions/crazy-max/dot-github-1.10.0
build(deps): bump crazy-max/.github from 1.8.0 to 1.10.0
2026-06-09 15:53:28 +02:00
dependabot[bot]andGitHub e0b7911e4f build(deps): bump crazy-max/.github from 1.8.0 to 1.10.0
Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from 1.8.0 to 1.10.0.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536)

---
updated-dependencies:
- dependency-name: crazy-max/.github
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:35:03 +00:00
dependabot[bot]andGitHub 91602db282 build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/e79a6962e0d4c0c17b229090214935d2e33f8354...fb8b3582c8e4def4969c97caa2f19720cb33a72f)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:34:50 +00:00
dependabot[bot]andGitHub 401a77d662 build(deps): bump docker/github-builder/.github/workflows/bake.yml
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/17bd7d64200cae4ba58ffc099934e8012ae320f2...70ac3fc303efa83d2b94905e6ab78bb83cbdc2ae)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:34:34 +00:00
dependabot[bot]andGitHub 044609f48d build(deps): bump github/codeql-action from 4.36.1 to 4.36.2
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.1 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:34:22 +00:00
dependabot[bot]andGitHub 5e895183a4 build(deps): bump the crazy-max-dot-github group with 2 updates
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/9ba6e6f9450baf3b1237f8035c1fdc45932510bd...716fd1c51a46c5d93a41d44a94b439c9ee802536)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 18:32:49 +00:00
Jiří Moravčík 80b2293881 build: Add per-step CPU and memory resource limits
Port of moby/buildkit#6569 to buildx. Adds --memory, --memory-swap,
--cpu-shares, --cpu-period, --cpu-quota, --cpuset-cpus, and --cpuset-mems
flags to build, plus the equivalent bake target attributes and compose
x-bake fields.

Signed-off-by: Jiří Moravčík <jiri.moravcik@gmail.com>
2026-06-08 15:39:14 +02:00
CrazyMax b179b777f2 ci: upload test results to codecov
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-05 09:24:04 +02:00
CrazyMaxandGitHub 4fbc1e5f2c Merge pull request #3885 from docker/dependabot/github_actions/actions/checkout-6.0.3
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
2026-06-04 15:46:37 +02:00
CrazyMaxandGitHub 2769ed4e9e Merge pull request #3886 from tonistiigi/progress-panic-fix
build: fix policy resolver cleanup on errors
2026-06-04 10:15:41 +02:00
CrazyMaxandGitHub e868b4d8f8 Merge pull request #3884 from docker/dependabot/github_actions/github/codeql-action-4.36.1
build(deps): bump github/codeql-action from 4.36.0 to 4.36.1
2026-06-04 09:53:40 +02:00
Tonis Tiigi 4dd20d3c03 build: fix policy resolver cleanup on errors
Keep policy resolver cleanup in a local variable so explicit error returns
cannot clear it before deferred cleanup runs. This prevents remote policy
progress writers from outliving the build printer.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-06-03 20:56:04 -07:00