dilim/buildkit
1
0
Fork 0
mirror of https://github.com/moby/buildkit.git synced 2026-08-09 09:11:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,400 Commits 31 Branches 330 Tags
dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.16.0
Commit Graph

9400 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]
ca90f31884 build(deps): bump docker/github-builder/.github/workflows/bake.yml 
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.15.0 to 1.16.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](https://github.com/docker/github-builder/compare/v1.15.0...a492c6d04fd3315f67230809b44d60cc0acd50b3)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-07 00:23:27 +00:00
CrazyMax
8f96667173 Merge pull request #7020 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.6 
build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.6
 2026-08-06 14:57:14 +02:00
CrazyMax
795e6a972d Merge pull request #7021 from crazy-max/buildkit-images-oidc 
ci: use Docker Hub OIDC for buildkit images
 2026-08-06 12:06:57 +02:00
CrazyMax
0807bfdc5b ci: use Docker Hub OIDC for buildkit images 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-08-06 11:24:10 +02:00
dependabot[bot]
c15905aa21 build(deps): bump github/codeql-action/upload-sarif 
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.4 to 4.37.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f205ea1c33...5595ccaf91)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-06 00:24:26 +00:00
CrazyMax
5ad82bef21 Merge pull request #7019 from crazy-max/dockerfile-upstream-oidc 
ci: use Docker Hub OIDC for dockerfile-upstream image
 2026-08-05 18:43:25 +02:00
CrazyMax
3c2e2d1743 ci: use Docker Hub OIDC for dockerfile-upstream image 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-08-05 17:56:46 +02:00
CrazyMax
e19f177d12 Merge pull request #7004 from moby/dependabot/github_actions/docker/login-action-4.6.0 
build(deps): bump docker/login-action from 4.5.2 to 4.6.0
 2026-08-04 14:49:51 +02:00
CrazyMax
62f82556d6 Merge pull request #7015 from crazy-max/revert-attestation-subject-push-order 
exporter: revert attestation manifest push order
 2026-08-04 12:47:30 +02:00
CrazyMax
409c8da50f exporter: revert attestation manifest push order 
This reverts the change from #7012.

Referrer manifests may be pushed before their subject, and the OCI distribution spec requires registries to initially accept a manifest whose subject does not exist yet. Keep BuildKit's default push order aligned with that behavior instead of working around registries that reject this flow.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-08-04 00:03:02 +02:00
CrazyMax
ad8b7a721b Merge pull request #7012 from crazy-max/fix-attestation-subject-push-order 
exporter: fix attestation manifest push order
 2026-08-03 12:15:03 +02:00
CrazyMax
067b18bd03 exporter: fix attestation manifest push order 
OCI artifact attestations carry a subject reference to the image manifest.
Push manifests in an order that keeps child manifests before parent indexes
while also pushing any in-stack subject manifest before the attestation
that references it.

Add an integration test variant with a strict registry proxy to cover
registries that reject manifests whose subject doesn't already exist.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-08-03 11:39:07 +02:00
CrazyMax
81ce7d40b7 Merge pull request #7011 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.4 
build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4
 2026-08-03 11:17:14 +02:00
dependabot[bot]
0822974aaa build(deps): bump github/codeql-action/upload-sarif 
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.3 to 4.37.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](e4fba868fa...f205ea1c33)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-03 00:25:52 +00:00
CrazyMax
275d6864ff Merge pull request #7005 from crazy-max/revert-go-archive-0.2.1-add-test 
vendor: revert github.com/moby/go-archive v0.2.1
 2026-07-31 16:14:08 +02:00
CrazyMax
22ea4efb43 dockerfile: test ADD hardlinks through absolute symlinks 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-31 14:46:48 +02:00
CrazyMax
0f87fc84e7 dockerfile: regression test for ADD archives through absolute symlinks 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-31 12:10:42 +02:00
CrazyMax
ec7e7bff5f dockerfile: regression test for ADD archives with implied parents 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-31 12:10:42 +02:00
CrazyMax
9a09dbd6fc Revert "vendor: github.com/moby/go-archive v0.2.1" 
This reverts commit 53b2d03bb3.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-31 11:54:03 +02:00
dependabot[bot]
bac2261326 build(deps): bump docker/login-action from 4.5.2 to 4.6.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.2 to 4.6.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](371161bbe7...dbcb813823)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-31 00:23:51 +00:00
CrazyMax
df0761886a Merge pull request #6993 from moby/dependabot/github_actions/docker/github-builder/dot-github/workflows/bake.yml-1.15.0 
build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.14.0 to 1.15.0
 2026-07-30 10:11:05 +02:00
CrazyMax
6b0551cce0 Merge pull request #6997 from moby/dependabot/github_actions/docker/login-action-4.5.2 
build(deps): bump docker/login-action from 4.5.1 to 4.5.2
 2026-07-30 10:10:39 +02:00
dependabot[bot]
f5e13f9171 build(deps): bump docker/login-action from 4.5.1 to 4.5.2 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.1 to 4.5.2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](abd2ef45e7...371161bbe7)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-29 00:24:39 +00:00
dependabot[bot]
38d29ee428 build(deps): bump docker/github-builder/.github/workflows/bake.yml 
Bumps [docker/github-builder/.github/workflows/bake.yml](https://github.com/docker/github-builder) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/docker/github-builder/releases)
- [Commits](3415a188ca...27ade872c1)

---
updated-dependencies:
- dependency-name: docker/github-builder/.github/workflows/bake.yml
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-28 00:25:25 +00:00
CrazyMax
f5d08d5a04 Merge pull request #6992 from crazy-max/fix-export-finalize-test 
test: require image exporter for session finalize
dockerfile/1.26.0-labs dockerfile/1.26.0 v0.32.0 		2026-07-27 18:59:31 +02:00
CrazyMax
b1eea810dc test: require image exporter for session finalize 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-27 18:41:37 +02:00
CrazyMax
a49858295d Merge pull request #6990 from crazy-max/fix-windows-local-export-invalid-test 
test: avoid local exporter invalid mode integration hang
dockerfile/1.26.0-rc2-labs dockerfile/1.26.0-rc2 v0.32.0-rc2 		2026-07-27 16:51:11 +02:00
CrazyMax
cc977b306b test: avoid local exporter invalid mode integration hang 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-27 15:56:11 +02:00
CrazyMax
7a9ce8f99a Merge pull request #6983 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.3 
build(deps): bump github/codeql-action/upload-sarif from 4.37.2 to 4.37.3
 2026-07-27 15:31:27 +02:00
CrazyMax
2b8e155d66 Merge pull request #6988 from moby/dependabot/github_actions/docker/login-action-4.5.1 
build(deps): bump docker/login-action from 4.4.0 to 4.5.1
 2026-07-27 15:30:13 +02:00
dependabot[bot]
dc7e2b1054 build(deps): bump docker/login-action from 4.4.0 to 4.5.1 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.4.0 to 4.5.1.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](af1e73f918...abd2ef45e7)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-27 00:25:17 +00:00
CrazyMax
7281141cf5 Merge pull request #6982 from thaJeztah/bump_go_archive_0.2.1 
vendor: github.com/moby/go-archive v0.2.1
 2026-07-24 18:04:51 +02:00
dependabot[bot]
f1ee6114b2 build(deps): bump github/codeql-action/upload-sarif 
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.2 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](e0647621c2...e4fba868fa)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-24 00:25:17 +00:00
Sebastiaan van Stijn
53b2d03bb3 vendor: github.com/moby/go-archive v0.2.1 
full diff: https://github.com/moby/go-archive/compare/v0.2.0...v0.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-23 22:44:56 +02:00
CrazyMax
720ec135a4 Merge pull request #6979 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.2 
build(deps): bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.2
 2026-07-23 19:32:16 +02:00
CrazyMax
75593809cf Merge pull request #6978 from fiam/alberto/session-export-finalization 
exporter: add session export finalization
 2026-07-23 19:31:53 +02:00
Alberto Garcia Hierro
30a3c27393 exporter: add session export finalization 
Add a FinalizeExport RPC to pass the combined exporter response back to
the session provider after all exports complete. This lets clients run
completion work while the build's gateway references remain available.

Keep the callback optional for compatibility with existing session
exporters. Ignore unsupported finalization, propagate callback failures,
and support providers that only register a finalization callback.

Signed-off-by: Alberto Garcia Hierro <alberto.hierro@docker.com>
 2026-07-23 16:46:24 +01:00
CrazyMax
a69cc382ee Merge pull request #6980 from tonistiigi/dockerfile-1.26 
dockerfile: update version to 1.26
 2026-07-23 10:36:55 +02:00
Tonis Tiigi
11c5837cf4 dockerfile: update version to 1.26 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
dockerfile/1.26.0-rc1-labs dockerfile/1.26.0-rc1 		2026-07-22 17:40:19 -07:00
dependabot[bot]
055bb02512 build(deps): bump github/codeql-action/upload-sarif 
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](7188fc3636...e0647621c2)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-23 00:24:58 +00:00
Tõnis Tiigi
b8a2467139 Merge pull request #6966 from nomad3/fix/otel-ignore-error 
detect: read OTEL_IGNORE_ERROR from environment
v0.32.0-rc1 		2026-07-22 10:24:42 -07:00
Tõnis Tiigi
f245789f41 Merge pull request #6913 from crazy-max/cache-oci-mediatypes 
cache/remotecache: normalize object cache layer media types
 2026-07-22 09:58:28 -07:00
Tõnis Tiigi
36d75d2267 Merge pull request #6933 from thaJeztah/zstd_mapping 
util/compression: use zstd.EncoderLevelFromZstd to map compression levels
 2026-07-22 07:35:32 -07:00
CrazyMax
8bdeb031c7 Merge pull request #6976 from moby/dependabot/go_modules/google.golang.org/grpc-1.82.1 
build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1
 2026-07-22 14:39:44 +02:00
CrazyMax
f4bd35bcf7 Merge pull request #6970 from crazy-max/fix-s3-cache-aws-chunked 
cache/s3: only request required upload checksums
 2026-07-22 13:58:17 +02:00
CrazyMax
e89fccf347 cache/s3: only request required upload checksums 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-22 13:23:28 +02:00
CrazyMax
331be808bd vendor: update github.com/aws/aws-sdk-go-v2 modules to latest 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-22 13:23:28 +02:00
CrazyMax
c51cc1b63b Merge pull request #6909 from tonistiigi/source-policy-normalize 
sourcepolicy: normalize parsed source identifiers
 2026-07-22 13:09:35 +02:00
Tonis Tiigi
93999f4071 sourcepolicy: normalize parsed source identifiers 
Render parsed source identifiers back to their canonical SourceOp form before
source policy evaluation. This lets Git subdir cleanup use the existing source
parser and avoids policy-specific Git parsing.

Add String methods for source identifiers and cover them with unit tests, plus
a client integration regression for canonical Git subdir policy matching.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-07-22 11:36:47 +02:00
dependabot[bot]
8e2f50b88a build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.0 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.82.0...v1.82.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-22 09:30:14 +00:00