Sebastiaan van Stijn
0b0843233b
vendor: github.com/docker/cli v29.4.0
...
full diff: https://github.com/docker/cli/compare/v29.3.1...v29.4.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-07 11:52:07 +02:00
dependabot[bot] and GitHub
e246d3ec7e
build(deps): bump docker/github-builder/.github/workflows/bake.yml
...
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder ) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/docker/github-builder/releases )
- [Commits](https://github.com/docker/github-builder/compare/70313223e2665c3211b454b3fea6534624e78d64...2497a7d1e7d8683af4949c9d6d62012bc16ed59c )
---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
dependency-version: 1.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-06 18:33:52 +00:00
dependabot[bot] and GitHub
abe28f0203
build(deps): bump docker/login-action from 4.0.0 to 4.1.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-06 18:33:24 +00:00
Sebastiaan van Stijn
2da27cedb5
vendor: github.com/mattn/go-runewidth v0.0.22
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn
eaac97ea66
vendor: golang.org/x/net v0.52.0
...
full diff: https://cs.opensource.google/go/x/net/+/refs/tags/v0.50.0...refs/tags/v0.52.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn
df41850e26
vendor: golang.org/x/time v0.15.0
...
full diff: https://cs.opensource.google/go/x/time/+/refs/tags/v0.14.0...refs/tags/v0.15.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn
db4fa7c158
vendor: golang.org/x/text v0.35.0
...
full diff: https://cs.opensource.google/go/x/text/+/refs/tags/v0.34.0...refs/tags/v0.35.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn
2700871d66
vendor: golang.org/x/mod v0.34.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn
3ad8f0891a
vendor: golang.org/x/sync v0.20.0
...
full diff: https://cs.opensource.google/go/x/sync/+/refs/tags/v0.19.0...refs/tags/v0.20.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn
63b4d001aa
vendor: go.opentelemetry.io/otel v1.42.0, otel/contrib v1.67.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-04 01:41:01 +02:00
Tõnis Tiigi and GitHub
b180175396
Merge pull request #3779 from thaJeztah/bump_moby
...
vendor: moby/client v0.4.0, moby/api v1.54.1
2026-04-03 11:36:47 -07:00
Jonathan A. Sternberg and GitHub
530dc0bdae
Merge pull request #3770 from jsternberg/containerd-source-date-epoch
...
commands: micro optimization for source date epoch
2026-04-03 11:06:29 -05:00
Jonathan A. Sternberg
d781c83cec
commands: micro optimization for source date epoch
...
Avoids the call to `os.Getenv` when it is unnecessary because it would
be overwritten anyway.
Removes the comments about moving environment variable parsing to a
method for use by library consumers. That method exists in containerd
and this set of code doesn't actually perform any parsing since the
parsing of this time is done within buildkit and not on the client.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com >
2026-04-03 10:02:50 -05:00
Sebastiaan van Stijn
3b630c6437
vendor: moby/client v0.4.0, moby/api v1.54.1
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2026-04-03 16:05:48 +02:00
CrazyMax and GitHub
6bde7f2320
Merge pull request #3775 from glours/bump-compose-go-v2.10.2
...
bump compose-go to version v2.10.2
2026-04-03 15:20:22 +02:00
Guillaume Lours
8a01076b67
bump compose-go to version v2.10.2
...
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com >
2026-04-03 12:15:27 +02:00
CrazyMax and GitHub
182f1f4107
Merge pull request #3769 from tonistiigi/pgp-test-flaky-fix
...
policy: fix flaky HTTP PGP test
2026-04-02 09:50:19 +02:00
Tonis Tiigi
7949ce5003
policy: fix flaky HTTP PGP test
...
Ensure the negative checksum case always mutates the digest instead of
sometimes reproducing the original value when it already starts with 0.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-04-01 21:58:30 -07:00
Tõnis Tiigi and GitHub
9ee371774f
Merge pull request #3748 from crazy-max/remove-releases-json
...
chore: remove left releases.json payload
2026-04-01 18:02:23 -07:00
Tõnis Tiigi and GitHub
7b5d7370f1
Merge pull request #3766 from jsternberg/k8s-driver-statefulset
...
feat: add persistent storage options to k8s driver
2026-04-01 18:01:54 -07:00
Jonathan A. Sternberg
0a0fc905a6
feat: add persistent storage options to k8s driver
...
The k8s driver now supports the `persistent-volume-claim.requests.storage`
option. Setting this option changes the deployment into a statefulset
and creates a persistent volume claim where the buildkit data is stored.
Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com >
2026-04-01 15:44:51 -05:00
Tõnis Tiigi and GitHub
c05897bae0
Merge pull request #3765 from crazy-max/go-1.26
...
update to go 1.26
2026-03-31 15:44:28 -07:00
Tõnis Tiigi and GitHub
581c232f81
Merge pull request #3746 from crazy-max/buildkit-0.29
...
dockerfile: update buildkit to v0.29.0
2026-03-31 09:42:27 -07:00
CrazyMax
054b450ee8
dockerfile: update buildkit to v0.29.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-31 18:19:33 +02:00
CrazyMax and GitHub
f7897eba02
Merge pull request #3764 from crazy-max/vendor-buildkit-0.29.0
...
vendor: update buildkit to v0.29.0
2026-03-31 16:07:57 +02:00
CrazyMax
7d5c56d60c
dockerfile: update xx to 1.9.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-31 15:06:27 +02:00
CrazyMax
b2afb402ad
update to go 1.26
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-31 15:06:06 +02:00
CrazyMax
fdef3304af
vendor: update buildkit to v0.29.0
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-31 14:52:21 +02:00
CrazyMax and GitHub
604513dc3e
Merge pull request #3757 from docker/dependabot/github_actions/crazy-max/dot-github-1.3.0
...
build(deps): bump crazy-max/.github from 1.1.0 to 1.3.0
2026-03-31 09:32:45 +02:00
CrazyMax and GitHub
e876aa50ca
Merge pull request #3759 from docker/dependabot/github_actions/github/codeql-action-4.35.1
...
build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
2026-03-31 09:15:10 +02:00
CrazyMax and GitHub
362c669d7e
Merge pull request #3760 from docker/dependabot/github_actions/actions/setup-go-6.4.0
...
build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
2026-03-31 09:14:08 +02:00
dependabot[bot] and GitHub
bddf212bfe
build(deps): bump crazy-max/.github from 1.1.0 to 1.3.0
...
Bumps [crazy-max/.github](https://github.com/crazy-max/.github ) from 1.1.0 to 1.3.0.
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed )
---
updated-dependencies:
- dependency-name: crazy-max/.github
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-31 07:14:07 +00:00
CrazyMax and GitHub
b54112b9e1
Merge pull request #3762 from docker/dependabot/github_actions/codecov/codecov-action-6.0.0
...
build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
2026-03-31 09:13:34 +02:00
CrazyMax and GitHub
90f266acfb
Merge pull request #3763 from docker/dependabot/github_actions/crazy-max-dot-github-763ceb8cae
...
build(deps): bump the crazy-max-dot-github group with 2 updates
2026-03-31 09:13:01 +02:00
dependabot[bot] and GitHub
0ff99e3ff2
build(deps): bump the crazy-max-dot-github group with 2 updates
...
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github ) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github ).
Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed )
Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases )
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed )
---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: crazy-max-dot-github
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-31 01:49:04 +00:00
Tõnis Tiigi and GitHub
eff492f5d7
Merge pull request #3750 from crazy-max/zizmor-update
...
ci(zizmor): use latest version and enable online audits
2026-03-30 18:48:21 -07:00
Tõnis Tiigi and GitHub
c7dfed7dcc
Merge pull request #3677 from tonistiigi/policy-http-pgp
...
policy: add HTTP source PGP signature verification builtin
2026-03-30 16:26:41 -07:00
dependabot[bot] and GitHub
232dbc70c7
build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.5.3 to 6.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/1af58845a975a7985b0beb0cbe6fbbb71a41dbad...57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 19:52:45 +00:00
dependabot[bot] and GitHub
b53df2b2f2
build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 19:52:20 +00:00
dependabot[bot] and GitHub
ba8917931f
build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.34.1 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/38697555549f1db7851b81482ff19f1fa5c4fedc...c10b8064de6f491fea524254123dbe5e09572f13 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 19:52:14 +00:00
CrazyMax and GitHub
ce058179ed
Merge pull request #3749 from crazy-max/dockerfile-docker-29.3
...
dockerfile: update to docker 29.3
2026-03-27 14:40:43 +01:00
CrazyMax
4451697923
ci(zizmor): use latest version and enable online audits
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-27 13:57:38 +01:00
CrazyMax
6b7140b4fb
dockerfile: update to docker 29.3
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-27 13:51:05 +01:00
Tonis Tiigi
a57372e966
policy: add HTTP PGP signature verification builtin
...
Add verify_http_pgp_signature Rego builtin for HTTP sources using
pgpsign with checksum-request/response flow through policy resolution.
Wire sourcemeta HTTP checksum request/response conversion and add tests.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-26 15:39:46 -07:00
Tõnis Tiigi and GitHub
55e8fa3b8e
Merge pull request #3745 from crazy-max/zizmor-fixes
...
ci: don't pin docs-upstream validation workflow
2026-03-25 16:26:46 -07:00
Tõnis Tiigi and GitHub
70536fc890
Merge pull request #3743 from tonistiigi/update-buildkit-v0.29.0-rc1
...
vendor: update buildkit to v0.29.0-rc1
2026-03-25 16:14:09 -07:00
CrazyMax
f4226cf837
chore: remove left releases.json payload
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-26 00:07:36 +01:00
CrazyMax
4f160d7e03
ci: don't pin docs-upstream validation workflow
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-26 00:05:57 +01:00
Tõnis Tiigi and GitHub
467e3e6d47
Merge pull request #3742 from crazy-max/zizmor
...
ci: zizmor workflow
2026-03-25 16:00:49 -07:00
Tonis Tiigi
eba72a35e4
vendor: update buildkit to v0.29.0-rc1
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-03-25 15:47:08 -07:00