alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
3,334 Commits 1 Branch 1 Tag
fd87647da156c7a50b23a496bb5f5b0e266ba85e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastiaan van Stijn fd87647da1 use "#nosec" instead of "nolint:gosec" to be more specific 
The `#nosec` comment allows ignoring a specific rule; this prevents
potentially other "gosec" linting failulres from being silently ignored.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-07-03 13:31:06 +02:00
Sebastiaan van Stijn 5da2ff5990 bake/hclparser/gohcl: fix typo 
Looks like we forked this code, including the typo. As we already modify
the code to add the `//nolint`, we may as well fix the typo itself instead.
https://github.com/hashicorp/hcl/blob/dfa124f3c93ff1764fda03702a7a9aa8c9db48d8/gohcl/decode_test.go#L417-L423

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-07-03 13:27:37 +02:00
Sebastiaan van Stijn 13031cc2ca vendor: github.com/docker/docker, docker/cli v28.2.2 
no changes in vendored file, just version update

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-05-30 17:30:09 +02:00
Sebastiaan van Stijn 46fae59e2e Dockerfile: update to docker v28.2.2 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-05-30 17:24:23 +02:00
Sebastiaan van Stijn 99d82e6cea vendor: github.com/docker/cli v28.2.1 
full diff: https://github.com/docker/cli/compare/v28.1.1...v28.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-05-29 09:36:54 +02:00
Sebastiaan van Stijn bc620fcc71 vendor: github.com/docker/docker v28.2.1 
full diff: https://github.com/docker/docker/compare/v28.1.1...v28.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-05-29 09:34:27 +02:00
Sebastiaan van Stijn ab533b0cb4 vendor: github.com/docker/cli v28.1.1 
no changes in vendored code

diff:  https://github.com/docker/cli/compare/v28.1.0...v28.1.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-22 12:30:00 +02:00
Sebastiaan van Stijn 0855cab1bd vendor: github.com/docker/docker v28.1.1 
diff:  https://github.com/docker/docker/compare/v28.1.0...v28.1.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-22 12:29:21 +02:00
Sebastiaan van Stijn 735555ff7b vendor: github.com/containerd/containerd v2.0.5 
full diff: https://github.com/containerd/containerd/compare/v2.0.4...v2.0.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-22 12:28:37 +02:00
Sebastiaan van Stijn 67ccbd06f6 vendor: golang.org/x/oauth2 v0.29.0 
notable changes

- fixes CVE-2025-22868
- oauth2.go: use a more straightforward return value
- oauth2: Deep copy context client in NewClient
- jws: improve fix for CVE-2025-22868

full diff: https://github.com/golang/oauth2/compare/v0.23.0...v0.29.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-22 12:26:36 +02:00
Sebastiaan van StijnandTonis Tiigi 286c018f84 vendor: github.com/docker/cli v28.1.0 
full diff: https://github.com/docker/cli/compare/v28.0.4...v28.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-18 15:54:36 -07:00
Sebastiaan van StijnandTonis Tiigi ac970c03e7 vendor: github.com/docker/docker v28.1.0 
full diff: https://github.com/docker/docker/compare/v28.0.4...v28.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-18 15:54:08 -07:00
Sebastiaan van StijnandTonis Tiigi 5398c33937 vendor: github.com/mattn/go-runewidth v0.0.16 
adds support for Unicode 15.1.0

full diff: https://github.com/mattn/go-runewidth/compare/v0.0.15...v0.0.16

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-18 15:54:06 -07:00
Sebastiaan van Stijn cc6547c51d Dockerfile: update to docker v28.1.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-17 16:17:55 +02:00
Sebastiaan van Stijn 26f2e002c6 vendor: github.com/moby/spdystream v0.5.0 (indirect) 
This is an indirect dependency, but I recalled it fixed some leaking
goroutines, so it may be worth considering updating.

full diff: https://github.com/moby/spdystream/compare/v0.4.0...v0.5.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-17 14:26:25 +02:00
Sebastiaan van Stijn d75c650792 vendor: github.com/moby/go-archive v0.1.0 
full diff: https://github.com/moby/go-archive/compare/21f3f3385ab7...v0.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-16 13:49:57 +02:00
Sebastiaan van Stijn b7b5a3a1cc migrate to use github.com/moby/sys/atomicwriter 
The github.com/docker/docker/pkg/atomicwriter package was moved
to a separate module.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-10 12:13:01 +02:00
Sebastiaan van Stijn fa0c3e3786 migrate to github.com/moby/go-archive module 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-10 09:16:43 +02:00
Sebastiaan van Stijn df6d36af35 Dockerfile: update to registry v3.0.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-08 14:20:58 +02:00
Sebastiaan van Stijn d25e260d2e vendor: github.com/docker/cli v28.0.4 
This removes Notary / Docker Content Trust related (indirect)
dependencies;

Before:

    ls -l bin/build/
    total 131200
    -rwxr-xr-x  1 thajeztah  staff  67039266 Mar 21 09:20 buildx*

    ls -lh bin/build/
    total 131200
    -rwxr-xr-x  1 thajeztah  staff    64M Mar 21 09:20 buildx*

After:

    ls -l bin/build/
    total 127288
    -rwxr-xr-x  1 thajeztah  staff  65168450 Mar 21 09:22 buildx*

    ls -lh bin/build/
    total 127288
    -rwxr-xr-x  1 thajeztah  staff    62M Mar 21 09:22 buildx*

Difference: `67039266 - 65168450 = 1870816` (1.87 MB)

full diff: https://github.com/docker/cli/compare/v28.0.2...v28.0.4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-03-25 18:45:44 +01:00
Sebastiaan van Stijn 86e4e77ac1 vendor: github.com/docker/docker-credential-helpers v0.9.3 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-03-25 18:44:27 +01:00
Sebastiaan van Stijn 534d9fc276 vendor: github.com/docker/docker v28.0.4 
full diff: https://github.com/docker/docker/compare/v28.0.2...v28.0.4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-03-25 18:30:37 +01:00
Sebastiaan van Stijn 824cef1b92 vendor: github.com/spf13/cobra v1.9.1 
full diff: https://github.com/spf13/cobra/compare/v1.8.1...v1.9.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-03-21 20:21:42 +01:00
Sebastiaan van Stijn a8b0fa8965 vendor: github.com/spf13/pflag v1.0.6 
full diff: https://github.com/spf13/pflag/compare/v1.0.5...v1.0.6

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-03-21 20:20:54 +01:00
Sebastiaan van Stijn 391acba718 use cli-plugins metadata package 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-03-19 17:58:27 +01:00
Sebastiaan van Stijn db4b96e62c vendor: github.com/docker/cli v28.0.2 
full diff: https://github.com/docker/cli/compare/v28.0.1...v28.0.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-03-19 17:58:27 +01:00
Sebastiaan van Stijn 882ef0db91 vendor: github.com/docker/docker v28.0.2 
full diff: https://github.com/docker/docker/compare/v28.0.1...v28.0.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-03-19 17:58:27 +01:00
Sebastiaan van Stijn 967fc2a696 vendor: github.com/containerd/containerd/v2 v2.0.4 
full diff: https://github.com/containerd/containerd/compare/v2.0.3...v2.0.4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-03-19 17:58:20 +01:00
Sebastiaan van Stijn f49593ce2c vendor: github.com/docker/docker, docker/cli v28.0.1 
diffs:

- https://github.com/docker/docker/compare/v28.0.0...v28.0.1
- https://github.com/docker/cli/compare/v28.0.0...v28.0.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-28 00:50:48 +01:00
Sebastiaan van Stijn 89917dc696 vendor: docker/docker, docker/cli v28.0.0 
no code changes in vendored code

full diff:

- https://github.com/docker/cli/compare/v28.0.0-rc.3...v28.0.0
- https://github.com/docker/docker/compare/v28.0.0-rc.3...v28.0.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-25 12:37:44 +01:00
Sebastiaan van Stijn b973de2dd3 vendor: github.com/docker/cli v28.0.0-rc.3 
no significant changes, only linting fixes

full diff: https://github.com/docker/cli/compare/v28.0.0-rc.2...v28.0.0-rc.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-19 13:39:40 +01:00
Sebastiaan van Stijn 352ce7e875 vendor: github.com/docker/docker v28.0.0-rc.3 
no code changes in vendor, only updated swagger file

full diff: https://github.com/docker/docker/compare/v28.0.0-rc.2...v28.0.0-rc.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-19 13:37:43 +01:00
Sebastiaan van Stijn 0a4a1babd1 vendor: github.com/docker/cli v28.0.0-rc.2 
full diff: https://github.com/docker/cli/compare/v28.0.0-rc.1...v28.0.0-rc.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-17 16:43:59 +01:00
Sebastiaan van Stijn 461bd9e5d1 vendor: github.com/docker/docker v28.0.0-rc.2 
full diff: https://github.com/docker/docker/compare/v28.0.0-rc.1...v28.0.0-rc.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-17 16:43:51 +01:00
Sebastiaan van StijnandCrazyMax 2dc0350ffe vendor: github.com/docker/cli/v28.0.0-rc.1 
full diff: https://github.com/docker/cli/compare/v27.5.1..v28.0.0-rc.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-13 13:53:45 +01:00
Sebastiaan van StijnandCrazyMax b85fc5c484 vendor: github.com/docker/docker/v28.0.0-rc.1 
full diff: https://github.com/docker/docker/compare/v27.5.1..v28.0.0-rc.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-13 13:53:44 +01:00
Sebastiaan van Stijn 7216086b8c vendor: github.com/docker/cli/v28.0.0-rc.1 
full diff: https://github.com/docker/cli/compare/v27.5.1..v28.0.0-rc.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-10 11:07:38 +01:00
Sebastiaan van Stijn b195b80ddf vendor: github.com/docker/docker/v28.0.0-rc.1 
full diff: https://github.com/docker/docker/compare/v27.5.1..v28.0.0-rc.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-10 11:07:35 +01:00
Sebastiaan van Stijn 70a5e266d1 vendor: github.com/moby/term v0.5.2 
full diff:

- https://github.com/moby/term/compare/v0.5.0...v0.5.2
- https://github.com/Azure/go-ansiterm/compare/d185dfc1b5a1...faa5f7b0171c

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-10 11:06:24 +01:00
Sebastiaan van Stijn 689bea7963 vendor: golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f 
full diff: https://github.com/golang/exp/compare/701f63a606c0...2d47ceb2692f

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-10 11:06:22 +01:00
Sebastiaan van Stijn 5176c38115 vendor: golang.org/x/mod v0.22.0 
full diff: https://github.com/golang/mod/compare/v0.21.0...v0.22.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-10 11:05:52 +01:00
Sebastiaan van Stijn ec440c4574 vendor: golang.org/x/sys v0.29.0 
full diff: https://github.com/golang/sys/compare/v0.28.0...v0.29.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-10 11:05:51 +01:00
Sebastiaan van Stijn f710c93157 vendor: github.com/docker/cli v27.5.1 
no changes in vendored code

full diff: https://github.com/docker/cli/compare/v27.5.0...v27.5.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-09 13:53:05 +01:00
Sebastiaan van Stijn d1a0a1497c vendor: github.com/docker/docker v27.5.1 
no changes in vendored code

full diff: https://github.com/docker/docker/compare/v27.5.0...v27.5.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-09 13:53:05 +01:00
Sebastiaan van Stijn c880ecd513 Dockerfile: update to docker v28.0.0-rc.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-09 13:50:14 +01:00
Sebastiaan van Stijn d693e18c04 use a consistent alias for the docker client package 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-03 11:36:52 +01:00
Sebastiaan van Stijn 3bd54b19aa driver/docker-container: remove uses of dockerclient.IsErrNotFound 
It's a wrapper around errdefs.IsNotFound, which is already used, so we
can skip the wrapper.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-02-01 15:22:33 +01:00
Sebastiaan van Stijn bb4bef2f04 fix: strip path from usage output and shell-completion scripts 
Before this patch, both "usage" and shell-completion scripts would preserve
the path of the invoked command, which was especially problematic for the
completion-scripts, because Cobra's completion depends on Command.Name()
for this (see [1], [2]);

    ./bin/build/buildx --help | head -n 5
    Extended build capabilities with BuildKit

    Usage:
      ./bin/build/buildx
      ./bin/build/buildx [command]

    ./bin/build/buildx completion bash | head -n 3
    # bash completion V2 for ./bin/build/buildx                   -*- shell-script -*-

    __./bin/build/buildx_debug()

This would also be problematic if the path contained a space, for example;

    ln -s $(pwd)/bin/build $(pwd)/bin/Program\ Files

    ./bin/Program\ Files/buildx completion bash | head -n 3
    # bash completion V2 for ./bin/Program                        -*- shell-script -*-

    __./bin/Program_debug()

With this patch, the path is stripped to prevent this issue;

    ./bin/build/buildx --help | head -n 5
    Extended build capabilities with BuildKit

    Usage:
      buildx
      buildx [command]

    ./bin/build/buildx completion bash | head -n 3
    # bash completion V2 for buildx                               -*- shell-script -*-

    __buildx_debug()

    ./bin/Program\ Files/buildx completion bash | head -n 3
    # bash completion V2 for buildx                               -*- shell-script -*-

    __buildx_debug()

It's worth noting that this patch only fixes these basic issues. Other cases
are not yet addressed, and may need fixes in Cobra because (especially for
the completion scripts) it should likely not conflate "Name" with "executable".

For example, command.Name() does not handle situations where the executable
itself has a space in its name:

    ln -s $(pwd)/bin/build/buildx $(pwd)/bin/build/hello\ world

    ./bin/build/hello\ world completion bash | head -n 3
    # bash completion V2 for hello                                -*- shell-script -*-

    __hello_debug()

Other, less problematic, issues to address are case-insensitive filesystems,
where the binary can be invoked with any case;

    ./bin/build/bUiLdX --help | head -n 5
    Extended build capabilities with BuildKit

    Usage:
      bUiLdX
      bUiLdX [command]

    ./bin/build/bUiLdX completion bash | head -n 3
    # bash completion V2 for bUiLdX                               -*- shell-script -*-

    __bUiLdX_debug()

[1]: https://github.com/spf13/cobra/blob/v1.8.1/bash_completionsV2.go#L24-L39
[2]: https://github.com/spf13/cobra/blob/v1.8.1/command.go#L1502-L1510

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-01-25 14:25:43 +01:00
Sebastiaan van Stijn 1ef9e67cbb downgrade go-difflib and go-spew to tagged releases 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-01-15 14:41:48 +01:00
Sebastiaan van Stijn ce46297960 vendor: github.com/docker/cli v27.4.1 
no changes in vendored code

full diff: https://github.com/docker/cli/compare/v27.4.0...v27.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-12-19 17:08:45 +01:00
Sebastiaan van Stijn e8389c8a02 vendor: github.com/docker/docker v27.4.1 
full diff: https://github.com/docker/docker/compare/v27.4.0...v27.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-12-19 17:07:42 +01:00
Sebastiaan van Stijn 804ee66f13 Dockerfile: update to docker v27.4.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-12-19 12:41:05 +01:00
Sebastiaan van Stijn 2d051bde96 vendor: github.com/docker/cli v27.4.0 
full diff: https://github.com/docker/cli/compare/v27.4.0-rc.2...v27.4.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-12-16 22:14:30 +01:00
Sebastiaan van Stijn 63985b591b vendor: github.com/docker/docker v27.4.0 
full diff: https://github.com/docker/docker/compare/v27.4.0-rc.2...v27.4.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-12-16 22:14:30 +01:00
Sebastiaan van Stijn c281e18892 Dockerfile: update to docker v27.4.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-12-10 10:56:06 +01:00
Sebastiaan van Stijn 8647f408ac Dockerfile: update to docker v27.4.0-rc.2 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-11-19 17:31:21 +01:00
Sebastiaan van Stijn 1ce3e6a221 touch-up security policy 
Touch-up the security policy to make the OpenSSF scorecard
slightly happier;
https://securityscorecards.dev/viewer/?uri=github.com/docker/buildx

    Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-10-09 01:22:26 +02:00
Sebastiaan van Stijn b1a13bb740 gha: set default permissions to "contents: read" 
make the OpenSSF scorecard slightly happier;
https://securityscorecards.dev/viewer/?uri=github.com/docker/buildx

    Warn: no topLevel permission defined: .github/workflows/build.yml:1
    Warn: topLevel 'security-events' permission set to 'write': .github/workflows/codeql.yml:13
    Warn: no topLevel permission defined: .github/workflows/docs-release.yml:1
    Warn: no topLevel permission defined: .github/workflows/docs-upstream.yml:1
    Warn: no topLevel permission defined: .github/workflows/e2e.yml:1
    Warn: no topLevel permission defined: .github/workflows/labeler.yml:1
    Warn: no topLevel permission defined: .github/workflows/validate.yml:1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-10-09 01:07:18 +02:00
Sebastiaan van Stijn 771f0139ac Dockerfile: update to docker 27.1.1 
Also adding a DOCKER_CLI_VERSION build-arg, so that we can set versions
independently for (untagged) pre-releases.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-08-05 12:13:15 +02:00
Sebastiaan van Stijn d296d5d46a vendor: google.golang.org/appengine v1.6.8 
full diff: https://github.com/golang/appengine/compare/v1.6.7...v1.6.8

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-07-15 12:47:27 +02:00
Sebastiaan van Stijn 6e433da23f vendor: github.com/gorilla/mux v1.8.1 
full diff: https://github.com/gorilla/mux/compare/v1.8.0...v1.8.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-07-15 12:46:33 +02:00
Sebastiaan van Stijn 92a6799514 dockerfile, gha: update buildkit to 0.13.2, 0.14.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-26 15:52:28 +02:00
Sebastiaan van Stijn 9358f84668 vendor: buildkit, docker/docker and docker/cli v27.0.1 
diffs:

- https://github.com/docker/cli/compare/v26.1.4..v27.0.1
- https://github.com/docker/docker/compare/v26.1.4..v27.0.1
- https://github.com/moby/buildkit/compare/v0.14.1...aaaf86e5470bffbb395f5c15ad4a1c152642ea30

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-26 15:31:47 +02:00
Sebastiaan van Stijn dbdd3601eb vendor: github.com/containerd/ttrpc v1.2.5 
full diff: https://github.com/containerd/ttrpc/compare/v1.2.4...v1.2.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-26 15:30:40 +02:00
Sebastiaan van Stijn a3c8a72b54 vendor: github.com/klauspost/compress v1.17.9 
full diff: https://github.com/klauspost/compress/compare/v1.17.4...v1.17.9

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-26 15:30:40 +02:00
Sebastiaan van Stijn 4c3af9becf vendor: golang.org/x/sys v0.20.0 
full diff: https://github.com/golang/sys/compare/v0.18.0...v0.20.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-26 15:30:37 +02:00
Sebastiaan van Stijn 6efa26c2de vendor: github.com/spf13/cobra v1.8.1 
full diff: https://github.com/spf13/cobra/compare/v1.8.0...v1.8.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-20 15:07:27 +02:00
Sebastiaan van Stijn 5b726afa5e vendor: github.com/stretchr/testify v1.9.0 
full diff: https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-20 15:05:45 +02:00
Sebastiaan van Stijn 3373a27f1f vendor: github.com/docker/docker-credential-helpers v0.8.2 
full diff: https://github.com/docker/docker-credential-helpers/compare/v0.8.0...v0.8.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-17 23:58:24 +02:00
Sebastiaan van Stijn 56698805a9 Dockerfile: update docker engine to 27.0.0-rc.2 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-17 23:55:05 +02:00
Sebastiaan van Stijn 5f822b36d3 Dockerfile: update docker engine to 26.1.4 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-13 19:22:19 +02:00
Sebastiaan van Stijn c116af7b82 remove use of deprecated containerd/containerd/errdefs 
This package has moved to a separate module. Also added linting
rules to prevent accidental reintroduction.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-12 01:12:59 +02:00
Sebastiaan van Stijn 87efbd43b5 vendor: github.com/creack/pty v1.1.21 
full diff: https://github.com/creack/pty/compare/v1.1.18...v1.1.21

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-08 17:47:33 +02:00
Sebastiaan van Stijn 9e5ba66553 vendor: github.com/compose-spec/compose-go/v2 v2.1.2 
Replaces uses of the github.com/mitchellh/mapstructure module, which
was deprecated by the owner and moved to new maintainership at
github.com/go-viper/mapstructure.

The old module is still referenced as indirect dependency (through
docker/cli and theupdateframework/notary), but not used in code, and
should eventually go away.

full diff: https://github.com/compose-spec/compose-go/compare/v2.1.1...v2.1.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-06 12:44:51 +02:00
Sebastiaan van Stijn 38d7d36f0a build: loadInputs: extract resolving digest to a separate function 
This makes the code slightly more idiomatic, but the errors produced will
change slightly to prevent having to path NamedContext as argument.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-05-27 19:31:32 +02:00
Sebastiaan van Stijn b948b07e2d remove uses of github.com/docker/docker/builder/remotecontext package 
This package is part of the classic builder, and was currently only used
for the IsURL utility, which is a very rudimentary check for a string having
a "https://" or "http://" scheme.

This patch copies the code as non-exported functions where they're used to
remove the dependency.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-05-26 11:06:02 +02:00
Sebastiaan van Stijn 17c0a3794b build: loadInputs: remove redundant check for hasDigest 
hasDigest would always be true when reaching this code, because the function
would return with an error when failing to resolve the digest;

    if !hasDigest {
        return nil, errors.Errorf("oci-layout reference %q could not be resolved", v.Path)
    }

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-05-25 16:36:52 +02:00
Sebastiaan van Stijn c0a986b43b build: loadInputs: remove redundant check for hasTag 
hasTag was always true as it was set to "true" when missing, in which case
the default (`:latest`) tag was applied;

    localPath, tag, hasTag := strings.Cut(localPath, ":")
    if !hasTag {
        tag = "latest"
        hasTag = true
    }

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-05-25 16:32:37 +02:00
Sebastiaan van Stijn 946e0a5d74 driver/kubernetes/util: remove k8s.io/apiserver dependency 
Use a simplified local implementation that follow the same semantics,
so that we don't need k8s.io/apiserver as dependency.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-05-14 13:58:56 +02:00
Sebastiaan van Stijn 7f1eaa2a8a vendor: golang.org/x/net v0.23.0 
full diff: https://github.com/golang/net/compare/v0.22.0...v0.23.0

Includes a fix for CVE-2023-45288, which is also addressed in go1.22.2
and go1.21.9;

> http2: close connections when receiving too many headers
>
> Maintaining HPACK state requires that we parse and process
> all HEADERS and CONTINUATION frames on a connection.
> When a request's headers exceed MaxHeaderBytes, we don't
> allocate memory to store the excess headers but we do
> parse them. This permits an attacker to cause an HTTP/2
> endpoint to read arbitrary amounts of data, all associated
> with a request which is going to be rejected.
>
> Set a limit on the amount of excess header frames we
> will process before closing a connection.
>
> Thanks to Bartek Nowotarski for reporting this issue.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-04-10 17:22:06 +02:00
Sebastiaan van Stijn fbddc9ebea vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0 
full diffs changes relevant to vendored code:

- https://github.com/golang/net/compare/v0.20.0...v0.22.0
    - http2: remove suspicious uint32->v conversion in frame code
    - http2: send an error of FLOW_CONTROL_ERROR when exceed the maximum octets
- https://github.com/golang/crypto/compare/v0.18.0...v0.21.0
    - x/crypto/internal/poly1305: improve sum_ppc64le.s

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-04-10 17:14:09 +02:00
Sebastiaan van Stijn d347499112 vendor: golang.org/x/term v0.18.0 
no changes in vendored code

full diff: https://github.com/golang/term/compare/v0.16.0...v0.18.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-04-10 17:02:36 +02:00
Sebastiaan van Stijn b1fb67f44a vendor: golang.org/x/sys v0.18.0 
full diff: https://github.com/golang/sys/compare/v0.16.0...v0.18.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-04-10 17:01:00 +02:00
Sebastiaan van Stijn b4c81a4d27 vendor: github.com/containerd/console v1.0.4 
no diff; same commit, but tagged: https://github.com/containerd/console/compare/8f6c4e4faef5...v1.0.4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-02-05 18:24:02 +01:00
Sebastiaan van Stijn 7b3c4fc714 vendor: github.com/moby/buildkit 6bd81372ad6f (v0.13.0-dev) 
full diff: https://github.com/moby/buildkit/compare/6bd81372ad6f...d6e142600ee58a6ec45f946b25af28f9a70c6dbc

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-02-05 18:10:02 +01:00
Sebastiaan van Stijn 43ed470208 vendor: github.com/aws/aws-sdk-go-v2/config v1.26.6 
vendor github.com/aws/aws-sdk-go-v2/config v1.26.6 and related dependencies.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-02-05 18:08:03 +01:00
Sebastiaan van Stijn 089982153f vendor: github.com/docker/cli v25.0.2 
no changes in vendored code

full diff: https://github.com/docker/cli/compare/v25.0.1...v25.0.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-02-05 18:03:10 +01:00
Sebastiaan van Stijn 7393650008 vendor: github.com/docker/docker v25.0.2 
no changes in vendored code

full diff: https://github.com/docker/docker/compare/v25.0.1...v25.0.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-02-05 18:01:55 +01:00
Sebastiaan van Stijn 13467c1f5d vendor: github.com/spf13/cobra v1.8.0 
- release notes: https://github.com/spf13/cobra/releases/tag/v1.8.0
- full diff: https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0

Release notes highlights:

Features

- Support usage as plugin for tools like kubectl - this means that programs
  that utilize a "plugin-like" structure have much better support and usage
  (like for completions, command paths, etc.)
- Move documentation sources to site/content
- Add 'one required flag' group - this includes a new MarkFlagsOneRequired API
  for flags which can be used to mark a flag group as required and cause command
  failure if at least one is not used when invoked.
- Customizable error message prefix - This adds the SetErrPrefix and ErrPrefix
  APIs on the Command struct to allow for setting a custom prefix for errors
- feat: add getters for flag completions
- Feature: allow running persistent run hooks of all parents
- Improve API to get flag completion function

Bug fixes

- Fix typo in fish completions
- Fix grammar: 'allows to'
- powershell: escape variable with curly brackets
- Don't complete --help flag when flag parsing disabled
- Replace all non-alphanumerics in active help env var program prefix

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-26 16:11:21 +01:00
Sebastiaan van StijnandCrazyMax dbaad32f49 vendor: github.com/moby/buildkit 6bd81372ad6f (master) 
- tests: implement NetNSDetached method

full diff: https://github.com/moby/buildkit/compare/6e200afad512...6bd81372ad6f27a8f3bf530e8cd91ea811f1f993

Co-authored-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-26 13:05:26 +01:00
Sebastiaan van Stijn 528e3ba259 vendor: github.com/docker/cli v25.0.1 
- cli-plugins: move socket code into common package
- cli-plugins: don't use abstract sockets on macOS
    - fixes CLI leaving behind plugin socket mount-points
- socket: return from loop after EOF

full diff: https://github.com/docker/cli/compare/v25.0.0-rc.1...v25.0.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-26 13:02:24 +01:00
Sebastiaan van Stijn 1ff261d38e vendor: github.com/docker/docker v25.0.1 
- pkg/system: return even richer xattr errors

full diff: https://github.com/moby/moby/compare/v25.0.0-rc.1...v25.0.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-26 12:56:23 +01:00
Sebastiaan van Stijn bef5d567b0 vendor: github.com/moby/sys/mountinfo v0.7.1 
full diff: https://github.com/moby/sys/compare/mountinfo/v0.6.2...mountinfo/v0.7.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-26 12:54:40 +01:00
Sebastiaan van Stijn da95d9f0ca vendor: golang.org/x/tools v0.14.0, golang.org/x/mod v0.13.0, golang.org/x/sync v0.4.0 
full diff:

- https://github.com/golang/tools/compare/v0.10.0...v0.14.0
- https://github.com/golang/mod/compare/v0.11.0...v0.13.0
- https://github.com/golang/sync/compare/v0.3.0...v0.4.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-26 12:54:40 +01:00
Sebastiaan van Stijn 7206e2d179 vendor: golang.org/x/sys v0.16.0 
full diff: https://github.com/golang/sys/compare/v0.15.0...v0.16.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-26 12:54:40 +01:00
Sebastiaan van Stijn 736094794c vendor: github.com/google/uuid v1.5.0 
full diff: https://github.com/google/uuid/compare/v1.3.1...v1.5.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-26 12:54:40 +01:00
Sebastiaan van Stijn a399a97949 vendor: github.com/google/go-cmp v0.6.0 
full diff: https://github.com/google/go-cmp/compare/v0.5.9...v0.6.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-26 12:54:39 +01:00
Sebastiaan van Stijn 62a416fe12 vendor: github.com/containerd/containerd v1.7.12 
full diff: https://github.com/containerd/containerd/compare/v1.7.11...v1.7.12

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-26 12:54:37 +01:00
Sebastiaan van Stijn 2478f300aa Dockerfile: update to Docker Engine v25.0.1 
Update DOCKER_VERSION to the current release, so that tests run
against that version.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-24 11:01:43 +01:00
Sebastiaan van Stijn 8bea1cb417 Dockerfile: update to BuildKit v0.12.4 
Update BUILDKIT_VERSION to the current release, so that tests run
against that version.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-01-24 09:35:18 +01:00