alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,344 Commits 1 Branch 1 Tag
febb45afe2cc55a3d943c1b2d8c9994ff707deef
Commit Graph
4344 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
CrazyMaxandGitHub 90f266acfb Merge pull request #3763 from docker/dependabot/github_actions/crazy-max-dot-github-763ceb8cae 
build(deps): bump the crazy-max-dot-github group with 2 updates
 2026-03-31 09:13:01 +02:00
dependabot[bot]andGitHub 0ff99e3ff2 build(deps): bump the crazy-max-dot-github group with 2 updates 
Bumps the crazy-max-dot-github group with 2 updates: [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github).


Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed)

Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/crazy-max/.github/releases)
- [Commits](https://github.com/crazy-max/.github/compare/20ef82212dc54bab5749f5e05576ca6d3c8a5773...bb328ea508cd6a89d0865555ddbeb148e5724aed)

---
updated-dependencies:
- dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
- dependency-name: crazy-max/.github/.github/workflows/zizmor.yml
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crazy-max-dot-github
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-31 01:49:04 +00:00
Tõnis TiigiandGitHub eff492f5d7 Merge pull request #3750 from crazy-max/zizmor-update 
ci(zizmor): use latest version and enable online audits
 2026-03-30 18:48:21 -07:00
Tõnis TiigiandGitHub c7dfed7dcc Merge pull request #3677 from tonistiigi/policy-http-pgp 
policy: add HTTP source PGP signature verification builtin
 2026-03-30 16:26:41 -07:00
dependabot[bot]andGitHub 232dbc70c7 build(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.3 to 6.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/1af58845a975a7985b0beb0cbe6fbbb71a41dbad...57e3a136b779b570ffcdbf80b3bdc90e7fab3de2)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-30 19:52:45 +00:00
dependabot[bot]andGitHub b53df2b2f2 build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-30 19:52:20 +00:00
dependabot[bot]andGitHub ba8917931f build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.34.1 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/38697555549f1db7851b81482ff19f1fa5c4fedc...c10b8064de6f491fea524254123dbe5e09572f13)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-30 19:52:14 +00:00
CrazyMaxandGitHub ce058179ed Merge pull request #3749 from crazy-max/dockerfile-docker-29.3 
dockerfile: update to docker 29.3
 2026-03-27 14:40:43 +01:00
CrazyMax 4451697923 ci(zizmor): use latest version and enable online audits 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-27 13:57:38 +01:00
CrazyMax 6b7140b4fb dockerfile: update to docker 29.3 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-27 13:51:05 +01:00
Tonis Tiigi a57372e966 policy: add HTTP PGP signature verification builtin 
Add verify_http_pgp_signature Rego builtin for HTTP sources using
pgpsign with checksum-request/response flow through policy resolution.
Wire sourcemeta HTTP checksum request/response conversion and add tests.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-26 15:39:46 -07:00
Tõnis TiigiandGitHub 55e8fa3b8e Merge pull request #3745 from crazy-max/zizmor-fixes 
ci: don't pin docs-upstream validation workflow
 2026-03-25 16:26:46 -07:00
Tõnis TiigiandGitHub 70536fc890 Merge pull request #3743 from tonistiigi/update-buildkit-v0.29.0-rc1 
vendor: update buildkit to v0.29.0-rc1
 2026-03-25 16:14:09 -07:00
CrazyMax f4226cf837 chore: remove left releases.json payload 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-26 00:07:36 +01:00
CrazyMax 4f160d7e03 ci: don't pin docs-upstream validation workflow 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-26 00:05:57 +01:00
Tõnis TiigiandGitHub 467e3e6d47 Merge pull request #3742 from crazy-max/zizmor 
ci: zizmor workflow
 2026-03-25 16:00:49 -07:00
Tonis Tiigi eba72a35e4 vendor: update buildkit to v0.29.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-25 15:47:08 -07:00
CrazyMax d3a40b6919 ci: fix zizmor security findings 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-25 22:25:51 +01:00
Tõnis TiigiandGitHub a7d3578248 Merge pull request #3286 from crazy-max/bake-rdc339parse 
bake: add unixtimestampparse and formattimestamp functions
 2026-03-25 14:14:37 -07:00
CrazyMax 66303c9b24 ci: zizmor workflow 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-25 22:02:40 +01:00
Tõnis TiigiandGitHub 9504ab6678 Merge pull request #3740 from crazy-max/update-crazy-max-actions 
ci: bump crazy-max/.github to 1.1.0
 2026-03-25 09:34:45 -07:00
CrazyMax dcc591ea91 ci: bump crazy-max/.github to 1.1.0 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-25 12:06:59 +01:00
CrazyMax 92905a8f5a bake: support unix output in formattimestamp 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-25 11:59:24 +01:00
CrazyMax 2798e134e9 bake: add formattimestamp and tighten unix timestamp parsing 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-25 11:46:49 +01:00
CrazyMax 11395747a6 bake: add unixtimestampparse function 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-25 11:46:48 +01:00
Tõnis TiigiandGitHub b1c10489eb Merge pull request #3734 from crazy-max/build-fix-empty-syntax 
build: reject empty BUILDKIT_SYNTAX overrides
 2026-03-24 17:34:54 -07:00
Tõnis TiigiandGitHub 7ac8168016 Merge pull request #3738 from tonistiigi/policy-eval-upt 
Updated for policy eval
 2026-03-24 17:08:04 -07:00
Tõnis TiigiandGitHub be5de2c200 Merge pull request #3736 from jsternberg/dap-general-availability 
dap: make dap generally available
 2026-03-24 17:07:38 -07:00
CrazyMax 7c44ec11ec build: reject empty BUILDKIT_SYNTAX overrides 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-24 15:35:08 +01:00
CrazyMaxandGitHub f48bd18b4f Merge pull request #3737 from allexistence/docs-variable-example 
docs: add example for --list=variables with variable descriptions
 2026-03-24 09:34:00 +01:00
Tonis Tiigi 64cd4136d9 policy: support reading policy from stdin via --file - 
Allow passing policy content through stdin by specifying
"--file -" in the eval command. This enables piping policy
data without requiring a file on disk.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-23 11:13:46 -07:00
Tonis Tiigi 7df7b4205b policy: align eval file flag 
Use --file/-f for policy eval and keep hidden --filename as a
backward-compatible alias.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-23 11:04:14 -07:00
Tonis Tiigi 9dcb37f47c policy: add --platform to eval 
Allow buildx policy eval to accept an explicit target platform and skip
worker platform discovery when the flag is provided.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-23 11:04:12 -07:00
Jonathan A. Sternberg a8d359a9ca dap: make dap generally available 
Removes the experimental flags and bits for dap and deletes some dead
code that somehow made its way this far without anyone noticing.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-03-23 10:43:27 -05:00
Jonathan A. SternbergandGitHub dc5f9862a5 Merge pull request #3735 from jsternberg/dap-exit-code 
dap: pass exit code through exited event
 2026-03-23 10:42:57 -05:00
rishabh 0dede5c898 docs: add example for --list=variables with variable descriptions 
Signed-off-by: rishabh <rishank69@gmail.com>
 2026-03-23 12:04:02 +08:00
Jonathan A. Sternberg 180cfd9e41 dap: pass exit code through exited event 
Pass the exit code through the exited event back to the client and
ensure that the printed text is printed completely.

Previously, the exited event just had a big todo and the printer would
sometimes fail to send messages to the connected client. This moves the
printer wait to before the debug adapter is closed to ensure that all
messages get sent through the connection to the editor. While there, I
also plumbed in the exit code to exited. It's not necessarily the real
exit code but it will produce a zero on build success and a non-zero
code on build failure so that should be good enough.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-03-20 14:02:21 -05:00
Tõnis TiigiandGitHub ba04f8f7b4 Merge pull request #3687 from jsternberg/dap-filter-inputs 
dap: defer inputs for a step to prevent overeager evaluation
 2026-03-20 10:57:30 -07:00
Jonathan A. Sternberg c79061526f dap: defer inputs for a step to prevent overeager evaluation 
When the debug thread was updated to always solve inputs from the
operation that it was tied to it became a bit overeager to evaluate
them. The intention of the steps is to have a single direct parent and
then potentially multiple "function calls" that can be evaluated with
step into and step out to leave.

With the change, that logic stayed in, but the inputs were always being
evaluated before they were stepped into or over. Now, when we construct
the steps, we also attach a list of inputs that we should defer
evaluation on to ensure we don't execute inputs that haven't been
executed yet.

It will then wrap the reference with a version that causes `Evaluate` to
do nothing. This prevents the overeager evaluation but allows the
reference to be evaluated if we need to read the filesystem.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-03-20 09:26:32 -05:00
Tõnis TiigiandGitHub a0a8f63cd5 Merge pull request #3730 from crazy-max/history-mv-buildname 
history: move BuildName to util/history
 2026-03-19 16:55:45 -07:00
Tõnis TiigiandGitHub 771e0de740 Merge pull request #3732 from tonistiigi/imagetools-manifest-regex 
imagetools: use regex for manifest template matching
 2026-03-18 18:25:27 -07:00
Tõnis TiigiandGitHub 1e54ca2ce7 Merge pull request #3731 from tonistiigi/imagetools-push-parallelization 
imagetools: share ingester across concurrent copies
 2026-03-18 18:25:14 -07:00
CrazyMaxandGitHub de2c485cd9 Merge pull request #3728 from allexistence/docs-clarify-bake-env-override 
docs: clarify Bake environment variable override behavior
 2026-03-18 17:21:54 +01:00
rishabh 8bcf041190 docs: clarify Bake environment variable override behavior 
Signed-off-by: rishabh <rishank69@gmail.com>

docs: address review feedback on bake env lookup

Signed-off-by: rishabh <rishank69@gmail.com>
 2026-03-18 22:51:13 +08:00
Tonis Tiigi 78439e263b imagetools: use regex for manifest template matching 
Allow optional whitespace inside the {{.Manifest}} template
delimiters when detecting whole-manifest format strings.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-17 17:46:01 -07:00
Tonis Tiigi e4f6e373af imagetools: share ingester across concurrent copies 
Reuse a single ingester per target repository when imagetools create
copies multiple manifests in parallel.

This lets the pushing ingester serialize same-digest pushes and avoids
racing duplicate blob uploads against registries to work around bug in
Registry v3.0.0 (and possibly others).

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-03-17 17:18:55 -07:00
CrazyMax b272a37d46 history: move BuildName to util/history 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-03-17 23:49:53 +01:00
Tõnis TiigiandGitHub c461e702bf Merge pull request #3716 from crazy-max/history-fix-finalize 
history: finalize export records on their owning node
 2026-03-17 12:34:14 -07:00
Tõnis TiigiandGitHub 3b8709777a Merge pull request #3701 from jsternberg/dap-fix-can-invoke 
dap: fix the check to determine whether exec will succeed
 2026-03-17 09:36:00 -07:00
Jonathan A. Sternberg b33ef2c9d4 dap: fix the check to determine whether exec will succeed 
This refines the check for determining whether exec will succeed to work
when an error occurs. This check previously relied on the `Ref` being
populated in the result context but this would only happen if we were
paused from a breakpoint or by stepping. An error would not fill in this
field.

The check is now refined to use the new gateway filesystem exec API so
we can create the container and then check even if we don't have a
returned gateway reference. The logic to determine which mount to check
has also been moved.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-03-17 10:31:11 -05:00