alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,341 Commits 1 Branch 1 Tag
cb27fae4301a900321531487bd79bee9a263ea3f
Commit Graph
4341 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]andGitHub 38d4bb2277 build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.35.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/95e58e9a2cdfd71adc6e0353d5c52f41a045d225...e46ed2cbd01164d986452f91f178727624ae40d7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-04 22:57:41 +00:00
Tõnis TiigiandGitHub 269ff5b088 Merge pull request #3829 from crazy-max/update-test-matrix 
ci: update buildkit version matrix
 2026-05-04 09:46:33 -07:00
Tõnis TiigiandGitHub f129f64dc2 Merge pull request #3828 from crazy-max/area-policy-label 
chore: labeler for area/policy
 2026-05-04 09:46:07 -07:00
Hervé Le MeurandHervé Le Meur cfbb132f41 Update Windows CLI plugins path in README 
Clarify the location for Docker CLI plugins on Windows since `C:\ProgramData` isn't checked anymore.

Refs:
- https://docs.docker.com/engine/release-notes/29/#deprecations-1
- https://github.com/docker/cli/pull/6713

Signed-off-by: Hervé Le Meur <lemeurherve.jenkins@gmail.com>
 2026-05-04 18:27:49 +02:00
CrazyMaxandMateusz Gozdek 9de08b24ff tests: cover debug build missing mount result IDs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-05-04 15:49:46 +02:00
Mateusz Gozdek 142cd448de Fix panic in buildx debug when solving fails 
Closes #3822

Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
 2026-05-04 15:49:45 +02:00
CrazyMax d9a4e836f7 ci: update buildkit version matrix 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-05-04 13:19:50 +02:00
CrazyMaxandGitHub 909fc0d892 Merge pull request #3825 from thaJeztah/noregexp 
util/ocilayout: replace regex for matching windows drive-letters
 2026-05-04 12:33:54 +02:00
CrazyMax 3b851d7e24 chore: labeler for area/policy 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-05-04 12:30:41 +02:00
Sebastiaan van Stijn a3512c1cfa util/ocilayout: replace regex for matching windows drive-letters 
follow-up to bf34a4cbed, which changed the
isWindowsDrivePath function to use a regex for matching the trailing slash.

This reverts it back to te previous implementation to avoid a regex, but
adds a check for the colon to be followed by a forward-slash, which is
faster, and avoids the overhead of `regex.MustCompile` during init.

    BenchmarkRegex-11    39056917      32.45 ns/op     0 B/op    0 allocs/op
    BenchmarkManual-11   1000000000     0.2476 ns/op   0 B/op    0 allocs/op

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-05-04 12:07:18 +02:00
Tõnis TiigiandGitHub f1b60d2003 Merge pull request #3820 from crazy-max/ocilayout-fix-winpath-detection 
ocilayout: narrow Windows drive path detection
 2026-04-27 14:15:09 +02:00
CrazyMax bf34a4cbed ocilayout: narrow Windows drive path detection 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-27 10:19:01 +02:00
Tõnis TiigiandGitHub 14ef96b3b5 Merge pull request #3807 from tonistiigi/buildx-default-policy 
policy: add builtin default source policy
 2026-04-24 12:23:25 -07:00
Tõnis TiigiandGitHub c960e4a8b2 Merge pull request #3811 from crazy-max/fix-oci-layout 
build: fix oci-layout named context serialization
 2026-04-24 12:23:10 -07:00
Tõnis TiigiandGitHub f9c1a46250 Merge pull request #3817 from crazy-max/rm-reject-context 
rm: reject context builders before loading nodes
 2026-04-24 09:21:10 -07:00
CrazyMax 2574d4c0d0 rm: reject context builders before loading nodes 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-24 17:27:57 +02:00
CrazyMaxandGitHub 82183e2322 Merge pull request #3814 from docker/dependabot/github_actions/crazy-max-dot-github-6f136b1f9e 
build(deps): bump the crazy-max-dot-github group with 2 updates
 2026-04-23 14:07:02 +02:00
CrazyMax dcf533e756 build: fix oci-layout named context serialization 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-23 12:26:02 +02:00
dependabot[bot]andGitHub 79d2d6234d build(deps): bump the crazy-max-dot-github group with 2 updates 
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-23 10:16:22 +00:00
CrazyMaxandGitHub 034ebc7687 Merge pull request #3816 from docker/dependabot/github_actions/crazy-max/dot-github-1.7.1 
build(deps): bump crazy-max/.github from 1.6.0 to 1.7.1
 2026-04-23 12:15:07 +02:00
dependabot[bot]andGitHub 365515c8fc build(deps): bump crazy-max/.github from 1.6.0 to 1.7.1 
Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from 1.6.0 to 1.7.1.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16)

---
updated-dependencies:
- dependency-name: crazy-max/.github
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-23 09:57:33 +00:00
CrazyMaxandGitHub e732e8a33a Merge pull request #3777 from thaJeztah/no_jsonmessage 
driver/docker-container: remove uses of jsonmessage
 2026-04-22 11:53:22 +02:00
CrazyMax 2d58ee6f98 ocilayout: handle Windows paths in local OCI layout refs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-22 11:38:34 +02:00
Sebastiaan van Stijn 76ba2fac5c driver/docker-container: remove uses of jsonmessage 
This function was always using `io.Discard` for printing the progress,
so we can use the `Wait()` method, which reads the stream, returning
any error (similar to jsonmessage.DisplayJSONMessagesStream), and
closes the stream either if the context is cancelled, or if the
stream ends.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 13:35:39 +02:00
CrazyMaxandGitHub 872d8e5e58 Merge pull request #3806 from thaJeztah/bump_moby 
vendor: github.com/docker/cli v29.4.1
 2026-04-21 13:10:12 +02:00
Sebastiaan van Stijn d45c770d5e vendor: github.com/docker/cli v29.4.1 
full diff: https://github.com/docker/cli/compare/v29.4.0...v29.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn 650f72ca74 vendor: github.com/mattn/go-runewidth v0.0.23 
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.22...v0.0.23

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn a2e6003124 vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2 
- https://github.com/moby/moby/compare/api/v1.54.1...api/v1.54.2
- https://github.com/moby/moby/compare/client/v0.4.0...client/v0.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:16:59 +02:00
Sebastiaan van Stijn 478d9b19a2 vendor: github.com/docker/go-connections v0.7.0 
full diff: https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:16:59 +02:00
CrazyMaxandGitHub 8c1c3e4d7f Merge pull request #3808 from crazy-max/update-k8s 
vendor: k8s v0.35.4
 2026-04-21 12:03:05 +02:00
CrazyMax b7061891c5 vendor: k8s v0.35.4 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-21 11:18:40 +02:00
Tonis Tiigi 0491d7c7b9 policy: add default policy for buildkit-syft-scanner images 
Extends the builtin default policy to verify docker-github-builder
signatures on docker/buildkit-syft-scanner images. Tags `latest` and
1.10+ require a signature from the docker/buildkit-syft-scanner source
repository; older tags pass through unchanged. Factors the shared ref
matching logic into sig_ref_matches for dockerfile and introduces a
syft-scanner variant that uses the plain refs/tags/ prefix.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-04-20 16:46:05 -07:00
Tonis Tiigi 0e50635195 policy: add builtin default source policy 
Embed an opt-in default source policy for Docker-managed frontend images.
Load it ahead of user policies when enabled, and cover behavior with table-
driven policy tests for signed, unsigned, floating, and labs tags.

Makes sure if there is any attack against the docker/dockerfile
releases, or they accidentally point to worng images, these are automatically detected.

In a future release these should become opt-out.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-04-20 16:32:39 -07:00
CrazyMaxandGitHub 0cc24edee5 Merge pull request #3801 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.6.0 
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.5.0 to 1.6.0
 2026-04-20 15:41:15 +02:00
CrazyMaxandGitHub 4c6e2585a4 Merge pull request #3804 from docker/dependabot/github_actions/github/codeql-action-4.35.2 
build(deps): bump github/codeql-action from 4.35.1 to 4.35.2
 2026-04-20 15:40:51 +02:00
dependabot[bot]andGitHub a05c9c122b build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...95e58e9a2cdfd71adc6e0353d5c52f41a045d225)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-17 18:34:17 +00:00
dependabot[bot]andGitHub cf33414b72 build(deps): bump docker/github-builder/.github/workflows/bake.yml 
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/2497a7d1e7d8683af4949c9d6d62012bc16ed59c...7d2a02426d4b989616ba5aaee4e879afd4134b0d)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-16 18:34:30 +00:00
Tõnis TiigiandGitHub 6160c9bcb9 Merge pull request #3726 from crazy-max/buildkit-git-cli 
gitutil: migrate to BuildKit GitCLI API
 2026-04-15 09:52:53 -07:00
CrazyMaxandGitHub adec11dea3 Merge pull request #3799 from crazy-max/fix-zizmor 
ci(zizmor): enable secrets-outside-env
 2026-04-15 16:36:45 +02:00
CrazyMax 8e43476e89 ci(zizmor): enable secrets-outside-env 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-15 16:12:55 +02:00
CrazyMaxandGitHub 6525a8f5da Merge pull request #3798 from crazy-max/fix-labeler-workflow 
ci: scope labeler concurrency to the pull request
 2026-04-15 12:10:45 +02:00
CrazyMaxandGitHub 33b7311705 Merge pull request #3796 from docker/dependabot/github_actions/docker/bake-action-7.1.0 
build(deps): bump docker/bake-action from 7.0.0 to 7.1.0
 2026-04-14 10:31:03 +02:00
CrazyMaxandGitHub 1c56abfeb3 Merge pull request #3797 from docker/dependabot/github_actions/softprops/action-gh-release-2.6.2 
build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0
 2026-04-14 10:30:28 +02:00
CrazyMax ee3fc2e4a0 ci: scope labeler concurrency to the pull request 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-14 09:55:14 +02:00
CrazyMaxandGitHub c062d2dcf1 Merge pull request #3794 from docker/dependabot/github_actions/actions/upload-artifact-7.0.1 
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
 2026-04-14 09:53:07 +02:00
CrazyMaxandGitHub 51d374bd4b Merge pull request #3795 from docker/dependabot/github_actions/peter-evans/create-pull-request-8.1.1 
build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1
 2026-04-14 09:49:06 +02:00
CrazyMaxandGitHub ac8f715ce1 Merge pull request #3789 from crazy-max/bake-hosts-order 
bake: sort extra-hosts before generating build options
 2026-04-14 09:48:18 +02:00
dependabot[bot]andGitHub 306eb5f49d build(deps): bump softprops/action-gh-release from 2.6.1 to 2.6.2 
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.6.1 to 2.6.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/153bb8e04406b158c6c84fc1615b65b24149a1fe...b4309332981a82ec1c5618f44dd2e27cc8bfbfda)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:47 +00:00
dependabot[bot]andGitHub 1a318bc87b build(deps): bump docker/bake-action from 7.0.0 to 7.1.0 
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/82490499d2e5613fcead7e128237ef0b0ea210f7...a66e1c87e2eca0503c343edf1d208c716d54b8a8)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:40 +00:00
dependabot[bot]andGitHub fdceafbf77 build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 8.1.0 to 8.1.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/c0f553fe549906ede9cf27b5156039d195d2ece0...5f6978faf089d4d20b00c7766989d076bb2fc7f1)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:18 +00:00