Commit Graph
4073 Commits
Author SHA1 Message Date
Sebastiaan van Stijn eaac97ea66 vendor: golang.org/x/net v0.52.0
full diff: https://cs.opensource.google/go/x/net/+/refs/tags/v0.50.0...refs/tags/v0.52.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn df41850e26 vendor: golang.org/x/time v0.15.0
full diff: https://cs.opensource.google/go/x/time/+/refs/tags/v0.14.0...refs/tags/v0.15.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn db4fa7c158 vendor: golang.org/x/text v0.35.0
full diff: https://cs.opensource.google/go/x/text/+/refs/tags/v0.34.0...refs/tags/v0.35.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn 2700871d66 vendor: golang.org/x/mod v0.34.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn 3ad8f0891a vendor: golang.org/x/sync v0.20.0
full diff: https://cs.opensource.google/go/x/sync/+/refs/tags/v0.19.0...refs/tags/v0.20.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-04 01:41:02 +02:00
Sebastiaan van Stijn 63b4d001aa vendor: go.opentelemetry.io/otel v1.42.0, otel/contrib v1.67.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-04 01:41:01 +02:00
Tõnis TiigiandGitHub b180175396 Merge pull request #3779 from thaJeztah/bump_moby
vendor: moby/client v0.4.0, moby/api v1.54.1
2026-04-03 11:36:47 -07:00
Jonathan A. SternbergandGitHub 530dc0bdae Merge pull request #3770 from jsternberg/containerd-source-date-epoch
commands: micro optimization for source date epoch
2026-04-03 11:06:29 -05:00
Jonathan A. Sternberg d781c83cec commands: micro optimization for source date epoch
Avoids the call to `os.Getenv` when it is unnecessary because it would
be overwritten anyway.

Removes the comments about moving environment variable parsing to a
method for use by library consumers. That method exists in containerd
and this set of code doesn't actually perform any parsing since the
parsing of this time is done within buildkit and not on the client.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2026-04-03 10:02:50 -05:00
Sebastiaan van Stijn 3b630c6437 vendor: moby/client v0.4.0, moby/api v1.54.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-03 16:05:48 +02:00
CrazyMaxandGitHub 6bde7f2320 Merge pull request #3775 from glours/bump-compose-go-v2.10.2
bump compose-go to version v2.10.2
2026-04-03 15:20:22 +02:00
Guillaume Lours 8a01076b67 bump compose-go to version v2.10.2
Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>
2026-04-03 12:15:27 +02:00
CrazyMaxandGitHub 182f1f4107 Merge pull request #3769 from tonistiigi/pgp-test-flaky-fix
policy: fix flaky HTTP PGP test
2026-04-02 09:50:19 +02:00
Tonis Tiigi 7949ce5003 policy: fix flaky HTTP PGP test
Ensure the negative checksum case always mutates the digest instead of
sometimes reproducing the original value when it already starts with 0.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-04-01 21:58:30 -07:00
Tõnis TiigiandGitHub 9ee371774f Merge pull request #3748 from crazy-max/remove-releases-json
chore: remove left releases.json payload
2026-04-01 18:02:23 -07:00
Tõnis TiigiandGitHub 7b5d7370f1 Merge pull request #3766 from jsternberg/k8s-driver-statefulset
feat: add persistent storage options to k8s driver
2026-04-01 18:01:54 -07:00
Jonathan A. Sternberg 0a0fc905a6 feat: add persistent storage options to k8s driver
The k8s driver now supports the `persistent-volume-claim.requests.storage`
option. Setting this option changes the deployment into a statefulset
and creates a persistent volume claim where the buildkit data is stored.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2026-04-01 15:44:51 -05:00
Tõnis TiigiandGitHub c05897bae0 Merge pull request #3765 from crazy-max/go-1.26
update to go 1.26
2026-03-31 15:44:28 -07:00
Tõnis TiigiandGitHub 581c232f81 Merge pull request #3746 from crazy-max/buildkit-0.29
dockerfile: update buildkit to v0.29.0
2026-03-31 09:42:27 -07:00
CrazyMax 054b450ee8 dockerfile: update buildkit to v0.29.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-31 18:19:33 +02:00
CrazyMaxandGitHub f7897eba02 Merge pull request #3764 from crazy-max/vendor-buildkit-0.29.0
vendor: update buildkit to v0.29.0
2026-03-31 16:07:57 +02:00
CrazyMax 7d5c56d60c dockerfile: update xx to 1.9.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-31 15:06:27 +02:00
CrazyMax b2afb402ad update to go 1.26
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-31 15:06:06 +02:00
CrazyMax fdef3304af vendor: update buildkit to v0.29.0
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-31 14:52:21 +02:00
CrazyMaxandGitHub 604513dc3e Merge pull request #3757 from docker/dependabot/github_actions/crazy-max/dot-github-1.3.0
build(deps): bump crazy-max/.github from 1.1.0 to 1.3.0
2026-03-31 09:32:45 +02:00
CrazyMaxandGitHub e876aa50ca Merge pull request #3759 from docker/dependabot/github_actions/github/codeql-action-4.35.1
build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
2026-03-31 09:15:10 +02:00
CrazyMaxandGitHub 362c669d7e Merge pull request #3760 from docker/dependabot/github_actions/actions/setup-go-6.4.0
build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
2026-03-31 09:14:08 +02:00
dependabot[bot]andGitHub bddf212bfe build(deps): bump crazy-max/.github from 1.1.0 to 1.3.0
Bumps [crazy-max/.github](https://github.com/crazy-max/.github) from 1.1.0 to 1.3.0.
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed)

---
updated-dependencies:
- dependency-name: crazy-max/.github
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-31 07:14:07 +00:00
CrazyMaxandGitHub b54112b9e1 Merge pull request #3762 from docker/dependabot/github_actions/codecov/codecov-action-6.0.0
build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
2026-03-31 09:13:34 +02:00
CrazyMaxandGitHub 90f266acfb Merge pull request #3763 from docker/dependabot/github_actions/crazy-max-dot-github-763ceb8cae
build(deps): bump the crazy-max-dot-github group with 2 updates
2026-03-31 09:13:01 +02:00
dependabot[bot]andGitHub 0ff99e3ff2 build(deps): bump the crazy-max-dot-github group with 2 updates
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-31 01:49:04 +00:00
Tõnis TiigiandGitHub eff492f5d7 Merge pull request #3750 from crazy-max/zizmor-update
ci(zizmor): use latest version and enable online audits
2026-03-30 18:48:21 -07:00
Tõnis TiigiandGitHub c7dfed7dcc Merge pull request #3677 from tonistiigi/policy-http-pgp
policy: add HTTP source PGP signature verification builtin
2026-03-30 16:26:41 -07:00
dependabot[bot]andGitHub 232dbc70c7 build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.3 to 6.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/1af58845a975a7985b0beb0cbe6fbbb71a41dbad...57e3a136b779b570ffcdbf80b3bdc90e7fab3de2)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-30 19:52:45 +00:00
dependabot[bot]andGitHub b53df2b2f2 build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-30 19:52:20 +00:00
dependabot[bot]andGitHub ba8917931f build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.34.1 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/38697555549f1db7851b81482ff19f1fa5c4fedc...c10b8064de6f491fea524254123dbe5e09572f13)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-30 19:52:14 +00:00
CrazyMaxandGitHub ce058179ed Merge pull request #3749 from crazy-max/dockerfile-docker-29.3
dockerfile: update to docker 29.3
2026-03-27 14:40:43 +01:00
CrazyMax 4451697923 ci(zizmor): use latest version and enable online audits
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-27 13:57:38 +01:00
CrazyMax 6b7140b4fb dockerfile: update to docker 29.3
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-27 13:51:05 +01:00
Tonis Tiigi a57372e966 policy: add HTTP PGP signature verification builtin
Add verify_http_pgp_signature Rego builtin for HTTP sources using
pgpsign with checksum-request/response flow through policy resolution.
Wire sourcemeta HTTP checksum request/response conversion and add tests.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-03-26 15:39:46 -07:00
Tõnis TiigiandGitHub 55e8fa3b8e Merge pull request #3745 from crazy-max/zizmor-fixes
ci: don't pin docs-upstream validation workflow
2026-03-25 16:26:46 -07:00
Tõnis TiigiandGitHub 70536fc890 Merge pull request #3743 from tonistiigi/update-buildkit-v0.29.0-rc1
vendor: update buildkit to v0.29.0-rc1
2026-03-25 16:14:09 -07:00
CrazyMax f4226cf837 chore: remove left releases.json payload
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-26 00:07:36 +01:00
CrazyMax 4f160d7e03 ci: don't pin docs-upstream validation workflow
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-26 00:05:57 +01:00
Tõnis TiigiandGitHub 467e3e6d47 Merge pull request #3742 from crazy-max/zizmor
ci: zizmor workflow
2026-03-25 16:00:49 -07:00
Tonis Tiigi eba72a35e4 vendor: update buildkit to v0.29.0-rc1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-03-25 15:47:08 -07:00
CrazyMax d3a40b6919 ci: fix zizmor security findings
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-25 22:25:51 +01:00
Tõnis TiigiandGitHub a7d3578248 Merge pull request #3286 from crazy-max/bake-rdc339parse
bake: add unixtimestampparse and formattimestamp functions
2026-03-25 14:14:37 -07:00
CrazyMax 66303c9b24 ci: zizmor workflow
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-03-25 22:02:40 +01:00
Tõnis TiigiandGitHub 9504ab6678 Merge pull request #3740 from crazy-max/update-crazy-max-actions
ci: bump crazy-max/.github to 1.1.0
2026-03-25 09:34:45 -07:00