dilim/buildkit
1
0
Fork 0
mirror of https://github.com/moby/buildkit.git synced 2026-08-09 01:01:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,385 Commits 31 Branches 330 Tags
v0.32
Commit Graph

9385 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
CrazyMax
991535e097 Merge pull request #7016 from crazy-max/v0.32_backport_7015 
[v0.32 backport] exporter: revert attestation manifest push order
v0.32.2 		2026-08-04 14:27:40 +02:00
CrazyMax
b4e609fb7c exporter: revert attestation manifest push order 
This reverts the change from #7012.

Referrer manifests may be pushed before their subject, and the OCI distribution spec requires registries to initially accept a manifest whose subject does not exist yet. Keep BuildKit's default push order aligned with that behavior instead of working around registries that reject this flow.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
(cherry picked from commit 409c8da50f)
 2026-08-04 12:00:06 +02:00
CrazyMax
f1697c4f6e Merge pull request #7013 from crazy-max/v0.32-backport-7012 
[v0.32 backport] exporter: fix attestation manifest push order
v0.32.1 		2026-08-03 12:15:28 +02:00
CrazyMax
c300afc325 exporter: fix attestation manifest push order 
OCI artifact attestations carry a subject reference to the image manifest.
Push manifests in an order that keeps child manifests before parent indexes
while also pushing any in-stack subject manifest before the attestation
that references it.

Add an integration test variant with a strict registry proxy to cover
registries that reject manifests whose subject doesn't already exist.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
(cherry picked from commit 067b18bd03)
 2026-08-03 11:41:44 +02:00
CrazyMax
68bcd7dbd5 Merge pull request #7006 from crazy-max/v0.32-pick-0.32.1 
[v0.32] picks for v0.32.1
 2026-07-31 20:08:34 +02:00
CrazyMax
640eb23333 dockerfile: test ADD hardlinks through absolute symlinks 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
(cherry picked from commit 22ea4efb43)
 2026-07-31 16:15:25 +02:00
CrazyMax
c7dc8c842f dockerfile: regression test for ADD archives through absolute symlinks 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
(cherry picked from commit 0f87fc84e7)
 2026-07-31 16:15:24 +02:00
CrazyMax
f3b57e4bae dockerfile: regression test for ADD archives with implied parents 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
(cherry picked from commit ec7e7bff5f)
 2026-07-31 16:15:24 +02:00
CrazyMax
5f3d92cc9b Revert "vendor: github.com/moby/go-archive v0.2.1" 
This reverts commit 53b2d03bb3.

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
(cherry picked from commit 9a09dbd6fc)
 2026-07-31 16:15:24 +02:00
CrazyMax
f5d08d5a04 Merge pull request #6992 from crazy-max/fix-export-finalize-test 
test: require image exporter for session finalize
dockerfile/1.26.0-labs dockerfile/1.26.0 v0.32.0 		2026-07-27 18:59:31 +02:00
CrazyMax
b1eea810dc test: require image exporter for session finalize 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-27 18:41:37 +02:00
CrazyMax
a49858295d Merge pull request #6990 from crazy-max/fix-windows-local-export-invalid-test 
test: avoid local exporter invalid mode integration hang
dockerfile/1.26.0-rc2-labs dockerfile/1.26.0-rc2 v0.32.0-rc2 		2026-07-27 16:51:11 +02:00
CrazyMax
cc977b306b test: avoid local exporter invalid mode integration hang 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-27 15:56:11 +02:00
CrazyMax
7a9ce8f99a Merge pull request #6983 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.3 
build(deps): bump github/codeql-action/upload-sarif from 4.37.2 to 4.37.3
 2026-07-27 15:31:27 +02:00
CrazyMax
2b8e155d66 Merge pull request #6988 from moby/dependabot/github_actions/docker/login-action-4.5.1 
build(deps): bump docker/login-action from 4.4.0 to 4.5.1
 2026-07-27 15:30:13 +02:00
dependabot[bot]
dc7e2b1054 build(deps): bump docker/login-action from 4.4.0 to 4.5.1 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.4.0 to 4.5.1.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](af1e73f918...abd2ef45e7)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-27 00:25:17 +00:00
CrazyMax
7281141cf5 Merge pull request #6982 from thaJeztah/bump_go_archive_0.2.1 
vendor: github.com/moby/go-archive v0.2.1
 2026-07-24 18:04:51 +02:00
dependabot[bot]
f1ee6114b2 build(deps): bump github/codeql-action/upload-sarif 
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.2 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](e0647621c2...e4fba868fa)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-24 00:25:17 +00:00
Sebastiaan van Stijn
53b2d03bb3 vendor: github.com/moby/go-archive v0.2.1 
full diff: https://github.com/moby/go-archive/compare/v0.2.0...v0.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-07-23 22:44:56 +02:00
CrazyMax
720ec135a4 Merge pull request #6979 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.2 
build(deps): bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.2
 2026-07-23 19:32:16 +02:00
CrazyMax
75593809cf Merge pull request #6978 from fiam/alberto/session-export-finalization 
exporter: add session export finalization
 2026-07-23 19:31:53 +02:00
Alberto Garcia Hierro
30a3c27393 exporter: add session export finalization 
Add a FinalizeExport RPC to pass the combined exporter response back to
the session provider after all exports complete. This lets clients run
completion work while the build's gateway references remain available.

Keep the callback optional for compatibility with existing session
exporters. Ignore unsupported finalization, propagate callback failures,
and support providers that only register a finalization callback.

Signed-off-by: Alberto Garcia Hierro <alberto.hierro@docker.com>
 2026-07-23 16:46:24 +01:00
CrazyMax
a69cc382ee Merge pull request #6980 from tonistiigi/dockerfile-1.26 
dockerfile: update version to 1.26
 2026-07-23 10:36:55 +02:00
Tonis Tiigi
11c5837cf4 dockerfile: update version to 1.26 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
dockerfile/1.26.0-rc1-labs dockerfile/1.26.0-rc1 		2026-07-22 17:40:19 -07:00
dependabot[bot]
055bb02512 build(deps): bump github/codeql-action/upload-sarif 
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](7188fc3636...e0647621c2)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-23 00:24:58 +00:00
Tõnis Tiigi
b8a2467139 Merge pull request #6966 from nomad3/fix/otel-ignore-error 
detect: read OTEL_IGNORE_ERROR from environment
v0.32.0-rc1 		2026-07-22 10:24:42 -07:00
Tõnis Tiigi
f245789f41 Merge pull request #6913 from crazy-max/cache-oci-mediatypes 
cache/remotecache: normalize object cache layer media types
 2026-07-22 09:58:28 -07:00
Tõnis Tiigi
36d75d2267 Merge pull request #6933 from thaJeztah/zstd_mapping 
util/compression: use zstd.EncoderLevelFromZstd to map compression levels
 2026-07-22 07:35:32 -07:00
CrazyMax
8bdeb031c7 Merge pull request #6976 from moby/dependabot/go_modules/google.golang.org/grpc-1.82.1 
build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1
 2026-07-22 14:39:44 +02:00
CrazyMax
f4bd35bcf7 Merge pull request #6970 from crazy-max/fix-s3-cache-aws-chunked 
cache/s3: only request required upload checksums
 2026-07-22 13:58:17 +02:00
CrazyMax
e89fccf347 cache/s3: only request required upload checksums 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-22 13:23:28 +02:00
CrazyMax
331be808bd vendor: update github.com/aws/aws-sdk-go-v2 modules to latest 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-07-22 13:23:28 +02:00
CrazyMax
c51cc1b63b Merge pull request #6909 from tonistiigi/source-policy-normalize 
sourcepolicy: normalize parsed source identifiers
 2026-07-22 13:09:35 +02:00
Tonis Tiigi
93999f4071 sourcepolicy: normalize parsed source identifiers 
Render parsed source identifiers back to their canonical SourceOp form before
source policy evaluation. This lets Git subdir cleanup use the existing source
parser and avoids policy-specific Git parsing.

Add String methods for source identifiers and cover them with unit tests, plus
a client integration regression for canonical Git subdir policy matching.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-07-22 11:36:47 +02:00
dependabot[bot]
8e2f50b88a build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.0 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.82.0...v1.82.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-22 09:30:14 +00:00
CrazyMax
8bf5dae630 Merge pull request #6971 from moby/dependabot/github_actions/actions/checkout-7.0.1 
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
 2026-07-22 11:29:38 +02:00
CrazyMax
90c515283f Merge pull request #6974 from moby/dependabot/github_actions/actions/labeler-7.0.0 
build(deps): bump actions/labeler from 6.2.0 to 7.0.0
 2026-07-22 11:29:08 +02:00
CrazyMax
9fcd1ca6c4 Merge pull request #6975 from tonistiigi/v0.32-deps-updates 
Dependency updates for v0.32
 2026-07-22 11:28:37 +02:00
Tonis Tiigi
a67cf907e4 vendor: update moby/policy-helpers to 856be88baec4 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-07-21 22:25:01 -07:00
Tonis Tiigi
ab3f5ff304 Align ttrpc v1.2.9 and sys/mount v0.3.5 with Moby versions 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-07-21 22:25:01 -07:00
Tonis Tiigi
eba35204e2 Update bbolt to v1.5.0 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-07-21 22:25:01 -07:00
Tonis Tiigi
bc4b25a3e4 Update ProtonMail go-crypto to v1.4.1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-07-21 22:25:01 -07:00
Tonis Tiigi
cdb7d70861 Update patch dependencies 
Bump patch-level dependencies while leaving
packageurl-go unchanged. This updates AWS config/credentials,
smithy-go, klauspost/compress, and sigstore-go, with required
companion bumps from their module constraints.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-07-21 22:24:51 -07:00
Tonis Tiigi
96879c682d Update critical containerd and Docker deps 
Bump containerd/containerd/api, containerd/containerd/v2, and
docker/cli to current critical direct versions. Regenerate vendor and
accept required transitive/go directive updates from containerd.

Adjust resource pointer helpers for Go 1.26 gopls modernize lint.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-07-21 17:29:37 -07:00
dependabot[bot]
df7a9f3db4 build(deps): bump actions/labeler from 6.2.0 to 7.0.0 
Bumps [actions/labeler](https://github.com/actions/labeler) from 6.2.0 to 7.0.0.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](b8dd2d9be0...bf12e9b00b)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-22 00:23:34 +00:00
Tõnis Tiigi
4f4f9d52fc Merge pull request #6955 from tonistiigi/6954-carry 
solver: advertise committed cache keys after exec
 2026-07-21 08:57:16 -07:00
dependabot[bot]
bc313d0f95 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](9c091bb21b...3d3c42e5aa)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-21 00:25:18 +00:00
CrazyMax
15a978622a Merge pull request #6968 from moby/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.1 
build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1
 2026-07-20 12:10:14 +02:00
dependabot[bot]
73d7a2192f build(deps): bump github/codeql-action/upload-sarif 
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.0 to 4.37.1.
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](99df26d4f1...7188fc3636)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-20 00:27:14 +00:00
Tõnis Tiigi
b25689e2af Merge pull request #6937 from devendrakushwah80/docs/workdir-tilde-note 
docs: clarify WORKDIR tilde path behavior
 2026-07-19 10:17:18 -07:00