alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,134 Commits 1 Branch 1 Tag
cfbb132f4150350d34c0b9e928887e1b8a8c11e8
Commit Graph
4134 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Hervé Le MeurandHervé Le Meur cfbb132f41 Update Windows CLI plugins path in README 
Clarify the location for Docker CLI plugins on Windows since `C:\ProgramData` isn't checked anymore.

Refs:
- https://docs.docker.com/engine/release-notes/29/#deprecations-1
- https://github.com/docker/cli/pull/6713

Signed-off-by: Hervé Le Meur <lemeurherve.jenkins@gmail.com>
 2026-05-04 18:27:49 +02:00
CrazyMaxandGitHub 909fc0d892 Merge pull request #3825 from thaJeztah/noregexp 
util/ocilayout: replace regex for matching windows drive-letters
 2026-05-04 12:33:54 +02:00
Sebastiaan van Stijn a3512c1cfa util/ocilayout: replace regex for matching windows drive-letters 
follow-up to bf34a4cbed, which changed the
isWindowsDrivePath function to use a regex for matching the trailing slash.

This reverts it back to te previous implementation to avoid a regex, but
adds a check for the colon to be followed by a forward-slash, which is
faster, and avoids the overhead of `regex.MustCompile` during init.

    BenchmarkRegex-11    39056917      32.45 ns/op     0 B/op    0 allocs/op
    BenchmarkManual-11   1000000000     0.2476 ns/op   0 B/op    0 allocs/op

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-05-04 12:07:18 +02:00
Tõnis TiigiandGitHub f1b60d2003 Merge pull request #3820 from crazy-max/ocilayout-fix-winpath-detection 
ocilayout: narrow Windows drive path detection
 2026-04-27 14:15:09 +02:00
CrazyMax bf34a4cbed ocilayout: narrow Windows drive path detection 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-27 10:19:01 +02:00
Tõnis TiigiandGitHub 14ef96b3b5 Merge pull request #3807 from tonistiigi/buildx-default-policy 
policy: add builtin default source policy
 2026-04-24 12:23:25 -07:00
Tõnis TiigiandGitHub c960e4a8b2 Merge pull request #3811 from crazy-max/fix-oci-layout 
build: fix oci-layout named context serialization
 2026-04-24 12:23:10 -07:00
Tõnis TiigiandGitHub f9c1a46250 Merge pull request #3817 from crazy-max/rm-reject-context 
rm: reject context builders before loading nodes
 2026-04-24 09:21:10 -07:00
CrazyMax 2574d4c0d0 rm: reject context builders before loading nodes 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-24 17:27:57 +02:00
CrazyMaxandGitHub 82183e2322 Merge pull request #3814 from docker/dependabot/github_actions/crazy-max-dot-github-6f136b1f9e 
build(deps): bump the crazy-max-dot-github group with 2 updates
 2026-04-23 14:07:02 +02:00
CrazyMax dcf533e756 build: fix oci-layout named context serialization 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-23 12:26:02 +02:00
dependabot[bot]andGitHub 79d2d6234d build(deps): bump the crazy-max-dot-github group with 2 updates 
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...4a17dbaa9ce13920fc5bb8824eb89c16301e5ab2)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-23 10:16:22 +00:00
CrazyMaxandGitHub 034ebc7687 Merge pull request #3816 from docker/dependabot/github_actions/crazy-max/dot-github-1.7.1 
build(deps): bump crazy-max/.github from 1.6.0 to 1.7.1
 2026-04-23 12:15:07 +02:00
dependabot[bot]andGitHub 365515c8fc build(deps): bump crazy-max/.github from 1.6.0 to 1.7.1 
Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from 1.6.0 to 1.7.1.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/d89fe92d808a15e2b2ed5cdb62db7c172c31410d...64a0bfaf6e6bb1c448d6e4c42b11034ee7094f16)

---
updated-dependencies:
- dependency-name: crazy-max/.github
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-23 09:57:33 +00:00
CrazyMaxandGitHub e732e8a33a Merge pull request #3777 from thaJeztah/no_jsonmessage 
driver/docker-container: remove uses of jsonmessage
 2026-04-22 11:53:22 +02:00
CrazyMax 2d58ee6f98 ocilayout: handle Windows paths in local OCI layout refs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-22 11:38:34 +02:00
Sebastiaan van Stijn 76ba2fac5c driver/docker-container: remove uses of jsonmessage 
This function was always using `io.Discard` for printing the progress,
so we can use the `Wait()` method, which reads the stream, returning
any error (similar to jsonmessage.DisplayJSONMessagesStream), and
closes the stream either if the context is cancelled, or if the
stream ends.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 13:35:39 +02:00
CrazyMaxandGitHub 872d8e5e58 Merge pull request #3806 from thaJeztah/bump_moby 
vendor: github.com/docker/cli v29.4.1
 2026-04-21 13:10:12 +02:00
Sebastiaan van Stijn d45c770d5e vendor: github.com/docker/cli v29.4.1 
full diff: https://github.com/docker/cli/compare/v29.4.0...v29.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn 650f72ca74 vendor: github.com/mattn/go-runewidth v0.0.23 
full diff: https://github.com/mattn/go-runewidth/compare/v0.0.22...v0.0.23

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:17:00 +02:00
Sebastiaan van Stijn a2e6003124 vendor: github.com/moby/moby/client v0.4.1, moby/api v1.54.2 
- https://github.com/moby/moby/compare/api/v1.54.1...api/v1.54.2
- https://github.com/moby/moby/compare/client/v0.4.0...client/v0.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:16:59 +02:00
Sebastiaan van Stijn 478d9b19a2 vendor: github.com/docker/go-connections v0.7.0 
full diff: https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-04-21 12:16:59 +02:00
CrazyMaxandGitHub 8c1c3e4d7f Merge pull request #3808 from crazy-max/update-k8s 
vendor: k8s v0.35.4
 2026-04-21 12:03:05 +02:00
CrazyMax b7061891c5 vendor: k8s v0.35.4 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-21 11:18:40 +02:00
Tonis Tiigi 0491d7c7b9 policy: add default policy for buildkit-syft-scanner images 
Extends the builtin default policy to verify docker-github-builder
signatures on docker/buildkit-syft-scanner images. Tags `latest` and
1.10+ require a signature from the docker/buildkit-syft-scanner source
repository; older tags pass through unchanged. Factors the shared ref
matching logic into sig_ref_matches for dockerfile and introduces a
syft-scanner variant that uses the plain refs/tags/ prefix.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-04-20 16:46:05 -07:00
Tonis Tiigi 0e50635195 policy: add builtin default source policy 
Embed an opt-in default source policy for Docker-managed frontend images.
Load it ahead of user policies when enabled, and cover behavior with table-
driven policy tests for signed, unsigned, floating, and labs tags.

Makes sure if there is any attack against the docker/dockerfile
releases, or they accidentally point to worng images, these are automatically detected.

In a future release these should become opt-out.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-04-20 16:32:39 -07:00
CrazyMaxandGitHub 0cc24edee5 Merge pull request #3801 from docker/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.6.0 
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.5.0 to 1.6.0
 2026-04-20 15:41:15 +02:00
CrazyMaxandGitHub 4c6e2585a4 Merge pull request #3804 from docker/dependabot/github_actions/github/codeql-action-4.35.2 
build(deps): bump github/codeql-action from 4.35.1 to 4.35.2
 2026-04-20 15:40:51 +02:00
dependabot[bot]andGitHub a05c9c122b build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...95e58e9a2cdfd71adc6e0353d5c52f41a045d225)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-17 18:34:17 +00:00
dependabot[bot]andGitHub cf33414b72 build(deps): bump docker/github-builder/.github/workflows/bake.yml 
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/2497a7d1e7d8683af4949c9d6d62012bc16ed59c...7d2a02426d4b989616ba5aaee4e879afd4134b0d)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-16 18:34:30 +00:00
Tõnis TiigiandGitHub 6160c9bcb9 Merge pull request #3726 from crazy-max/buildkit-git-cli 
gitutil: migrate to BuildKit GitCLI API
 2026-04-15 09:52:53 -07:00
CrazyMaxandGitHub adec11dea3 Merge pull request #3799 from crazy-max/fix-zizmor 
ci(zizmor): enable secrets-outside-env
 2026-04-15 16:36:45 +02:00
CrazyMax 8e43476e89 ci(zizmor): enable secrets-outside-env 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-15 16:12:55 +02:00
CrazyMaxandGitHub 6525a8f5da Merge pull request #3798 from crazy-max/fix-labeler-workflow 
ci: scope labeler concurrency to the pull request
 2026-04-15 12:10:45 +02:00
CrazyMaxandGitHub 33b7311705 Merge pull request #3796 from docker/dependabot/github_actions/docker/bake-action-7.1.0 
build(deps): bump docker/bake-action from 7.0.0 to 7.1.0
 2026-04-14 10:31:03 +02:00
CrazyMaxandGitHub 1c56abfeb3 Merge pull request #3797 from docker/dependabot/github_actions/softprops/action-gh-release-2.6.2 
build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0
 2026-04-14 10:30:28 +02:00
CrazyMax ee3fc2e4a0 ci: scope labeler concurrency to the pull request 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-14 09:55:14 +02:00
CrazyMaxandGitHub c062d2dcf1 Merge pull request #3794 from docker/dependabot/github_actions/actions/upload-artifact-7.0.1 
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
 2026-04-14 09:53:07 +02:00
CrazyMaxandGitHub 51d374bd4b Merge pull request #3795 from docker/dependabot/github_actions/peter-evans/create-pull-request-8.1.1 
build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1
 2026-04-14 09:49:06 +02:00
CrazyMaxandGitHub ac8f715ce1 Merge pull request #3789 from crazy-max/bake-hosts-order 
bake: sort extra-hosts before generating build options
 2026-04-14 09:48:18 +02:00
dependabot[bot]andGitHub 306eb5f49d build(deps): bump softprops/action-gh-release from 2.6.1 to 2.6.2 
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.6.1 to 2.6.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/153bb8e04406b158c6c84fc1615b65b24149a1fe...b4309332981a82ec1c5618f44dd2e27cc8bfbfda)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:47 +00:00
dependabot[bot]andGitHub 1a318bc87b build(deps): bump docker/bake-action from 7.0.0 to 7.1.0 
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/82490499d2e5613fcead7e128237ef0b0ea210f7...a66e1c87e2eca0503c343edf1d208c716d54b8a8)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:40 +00:00
dependabot[bot]andGitHub fdceafbf77 build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 8.1.0 to 8.1.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/c0f553fe549906ede9cf27b5156039d195d2ece0...5f6978faf089d4d20b00c7766989d076bb2fc7f1)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:18 +00:00
dependabot[bot]andGitHub 61b3803162 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 19:41:12 +00:00
CrazyMax 09f288c71e bake: sort extra-hosts before generating build options 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-09 15:53:24 +02:00
CrazyMax 4f89a2407a gitutil: use BuildKit urlutil.RedactCredentials for remote URLs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-09 15:04:37 +02:00
CrazyMax 720f91fdd4 gitutil: migrate to BuildKit GitCLI API 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-09 14:57:38 +02:00
CrazyMax 3124b3c839 vendor: update buildkit to a243ce438aee 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-04-09 14:40:14 +02:00
CrazyMaxandGitHub 43fe71eaba Merge pull request #3785 from docker/dependabot/github_actions/crazy-max-dot-github-f0991e81fd 
build(deps): bump the crazy-max-dot-github group with 2 updates
 2026-04-09 10:02:56 +02:00
CrazyMaxandGitHub b1b5f8d4d6 Merge pull request #3786 from docker/dependabot/github_actions/crazy-max/dot-github-1.6.0 
build(deps): bump crazy-max/.github from 1.3.0 to 1.6.0
 2026-04-09 10:02:38 +02:00