mopy
mopy copied to clipboard
Update module github.com/moby/buildkit to v0.26.0
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| github.com/moby/buildkit | v0.14.1 -> v0.26.0 |
Release Notes
moby/buildkit (github.com/moby/buildkit)
v0.26.0
buildkit 0.26.0
Welcome to the v0.26.0 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- TΓ΅nis Tiigi
- CrazyMax
- Akihiro Suda
- Sebastiaan van Stijn
- Jonathan A. Sternberg
- Brian Goff
- Dawei Wei
- Alberto Garcia Hierro
- Damon Holden
- David Karlsson
- Justin Chadwell
- Mikhail Dmitrichenko
- bpascard
Notable Changes
- Change how file checksum is calculated when wildcards and include/exclude patterns are involved to better align with how they are calculated in the non-wildcard path. #β6238
- LLB Copy operation now allows specifying required paths to be included in the copy. #β6229
- Fixed race condition between cache and snapshot for the Git source. #β6281
- Fixed race condition in HTTP cache key digest computation that could cause duplicate requests and digest mismatch errors. #β6292
- Runc container runtime has been updated to v1.3.3. #β6331
- Source metadata requests via
ResolveSourceMeta, previously available for image sources, can now be performed for Git sources. This can be used to resolve Git commit and tag checksums and also to access the raw commit and tag objects for further verification. #β6283 - Source metadata requests via
ResolveSourceMeta, previously available for image sources, can now be performed for HTTP sources. This can be used to access artifact checksums, last-modified time etc. #β6285 - Git sources can now perform verification of GPG or SSH signatures on commits and tags. Enable git signature checks via source policy. #β6300 #β6344
contentutilpackage now supports moving referrer objects when usingCopyChainfunction. #β6336- Fix fetch by commit for git source when tags change or branch names are updated. #β6259
- Fix http connection leak when resolving metadata from http source on non-2xx HTTP status codes. #β6313
- A new type of source policies has been added that supports making policy decisions on the client side via session tunnel. #β6276
- Add buildkit capability for detecting if source policy decisions can be made via session tunnel. #β6345
- Avoid intermediate type wrappers for custom fields in provenance. #β6275
- Add raw commit/tag object access when resolving git source metadata. #β6298
- Move image source resolver away from the
ResolveImageConfigtype toResolveSourceMetadata. #β6330 # probably not needed for changelog - Fix inline cache used with multiple exporters. #β6263
- Fix handling multiple inline cache exporters configured for single build. #β6272
- Fix handling of annotated Git tags. The pin of the annotated tag should be the SHA of the tag and not the commit it is pointing to. #β6251
- Fix source policy attributes validation when multiple rules use the same identifier. #β6342
Dependency Changes
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0 -> v1.18.2
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.0 -> v1.11.0
- github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 -> v1.11.2
- github.com/AzureAD/microsoft-authentication-library-for-go v1.3.2 -> v1.4.2
- github.com/Microsoft/hcsshim v0.13.0 -> v0.14.0-rc.1
- github.com/ProtonMail/go-crypto v1.3.0 new
- github.com/aws/aws-sdk-go-v2 v1.30.3 -> v1.38.1
- github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 -> v1.7.0
- github.com/aws/aws-sdk-go-v2/config v1.27.27 -> v1.31.3
- github.com/aws/aws-sdk-go-v2/credentials v1.17.27 -> v1.18.7
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 -> v1.18.4
- github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.8 -> v1.17.10
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 -> v1.4.4
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 -> v2.7.4
- github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 -> v1.8.3
- github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 -> v1.4.4
- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 -> v1.13.0
- github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 -> v1.8.4
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 -> v1.13.4
- github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 -> v1.19.4
- github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 -> v1.87.1
- github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 -> v1.28.2
- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 -> v1.34.0
- github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 -> v1.38.0
- github.com/aws/smithy-go v1.20.3 -> v1.22.5
- github.com/cenkalti/backoff/v5 v5.0.3 new
- github.com/cloudflare/circl v1.6.0 new
- github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0
- github.com/containerd/containerd/api v1.9.0 -> v1.10.0
- github.com/containerd/containerd/v2 v2.1.4 -> v2.2.0
- github.com/containerd/go-cni v1.1.12 -> v1.1.13
- github.com/containerd/nydus-snapshotter v0.15.2 -> v0.15.4
- github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
- github.com/containerd/stargz-snapshotter v0.16.3 -> v0.17.0
- github.com/containerd/stargz-snapshotter/estargz v0.16.3 -> v0.17.0
- github.com/containernetworking/plugins v1.7.1 -> v1.8.0
- github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
- github.com/docker/cli v28.4.0 -> v28.5.0
- github.com/fatih/color v1.18.0 new
- github.com/go-logr/logr v1.4.2 -> v1.4.3
- github.com/gofrs/flock v0.12.1 -> v0.13.0
- github.com/golang-jwt/jwt/v5 v5.2.2 -> v5.3.0
- github.com/golang/groupcache
41bb18b->2c02b82 - github.com/google/pprof
27863c8->f64d9cf - github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 -> v2.27.2
- github.com/hanwen/go-fuse/v2 v2.6.3 -> v2.8.0
- github.com/hashicorp/go-retryablehttp v0.7.7 -> v0.7.8
- github.com/hiddeco/sshsig v0.2.0 new
- github.com/klauspost/compress v1.18.0 -> v1.18.1
- github.com/mattn/go-colorable v0.1.14 new
- github.com/moby/policy-helpers
bcaa71cnew - github.com/moby/sys/capability v0.4.0 new
- github.com/opencontainers/runtime-tools
2e043c6->0ea5ed0 - github.com/prometheus/client_golang v1.22.0 -> v1.23.2
- github.com/prometheus/client_model v0.6.1 -> v0.6.2
- github.com/prometheus/common v0.62.0 -> v0.66.1
- github.com/prometheus/procfs v0.15.1 -> v0.16.1
- github.com/secure-systems-lab/go-securesystemslib v0.6.0 -> v0.9.1
- github.com/stretchr/testify v1.10.0 -> v1.11.1
- github.com/vbatts/tar-split v0.12.1 -> v0.12.2
- go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.61.0
- go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 -> v0.61.0
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 -> v0.61.0
- go.opentelemetry.io/otel v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/metric v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/sdk v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/sdk/metric v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/trace v1.35.0 -> v1.38.0
- go.opentelemetry.io/proto/otlp v1.5.0 -> v1.7.1
- go.yaml.in/yaml/v2 v2.4.2 new
- golang.org/x/crypto v0.37.0 -> v0.42.0
- golang.org/x/exp
7e4ce0a->df92998 - golang.org/x/mod v0.24.0 -> v0.29.0
- golang.org/x/net v0.39.0 -> v0.44.0
- golang.org/x/sync v0.16.0 -> v0.17.0
- golang.org/x/sys v0.33.0 -> v0.37.0
- golang.org/x/text v0.24.0 -> v0.29.0
- golang.org/x/time v0.11.0 -> v0.14.0
- google.golang.org/genproto/googleapis/api
56aae31->c5933d9 - google.golang.org/genproto/googleapis/rpc
56aae31->c5933d9 - google.golang.org/grpc v1.72.2 -> v1.76.0
- google.golang.org/protobuf v1.36.9 -> v1.36.10
- sigs.k8s.io/yaml v1.4.0 -> v1.6.0
Previous release can be found at v0.25.2
v0.25.2
Welcome to the v0.25.2 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- CrazyMax
- TΓ΅nis Tiigi
Notable Changes
- Update Runc to v1.3.3 #β6332
Dependency Changes
This release has no dependency changes
Previous release can be found at v0.25.1
v0.25.1
buildkit 0.25.1
Welcome to the v0.25.1 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- TΓ΅nis Tiigi
- CrazyMax
Notable Changes
- Fix possible cache export failure when previously exported cache blob has been deleted #β6261
- Fix possible cache corruption or error when using inline cache with multiple exporters #β6263
- Fix intermediate wrapper for custom provenance attestation fields #β6275
Dependency Changes
This release has no dependency changes
Previous release can be found at v0.25.0
v0.25.0
buildkit 0.25.0
Welcome to the v0.25.0 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- TΓ΅nis Tiigi
- CrazyMax
- Jonathan A. Sternberg
- Akihiro Suda
- Brian Goff
- greggu
- Sebastiaan van Stijn
- SΓΈren Hansen
- Vigilans
- Sam Oluwalana
- Shivam
- Tianon Gravi
- nikelborm
Notable Changes
- Git sources now support working with SHA-256 based code repositories. #β6194
- New
Checksumhas been added tollb.Imageto specify verification digest of the image. Unlike the existing digest in the image reference, where digest overrides the tag if both are set, in this mode, the image is resolved by the tag and only verified by checksum. #β6234 - The remote cache exporter (also used in provenance creation) has been completely rewritten to solve various concurrency and loop issues. There should be no user-visible changes in the cache format itself. #β6129
- BuildKit daemon now supports a way to add custom fields to the provenance attestation to specify the environment BuildKit is running in. Additional field are picked up from config files in
/etc/buildkitd/provenance.ddirectory. #β6210 - Containerd executor on Windows now supports
HyperVIsolationoption. #β6224 - Included runc container runtime has been updated to v1.3.1 #β6236
- CNI plugins have been updated to v1.8.0 #β6185
- Qemu emulation binaries have been updated to v10.0.4. #β6215
- Fix possible infinite loop when exporting cache #β6186
- Fix issue where some errors could lose their source or stack information when wrapped with
errors.Join. #β6226 - Multiple fixes to how the builds from Git context are recorded in provenance. #β6213
- Fix issue where build arguments could be missing in the history record's provenance attestation. #β6221
- Fix issue where
materials=falsecould be incorrectly set in provenance attestation for a build that used frontend inputs. #β6203 - Fix not setting the platform in the subject descriptor of the OCI artifact-style attestation manifest. This confused some registries. #β6191
- Fix some improper formatting in error messages. #β6192
- Fix issue with checking out annotated tags by full reference. #β6244
Dependency Changes
- github.com/docker/cli v28.3.3 -> v28.4.0
- google.golang.org/protobuf v1.36.6 -> v1.36.9
Previous release can be found at v0.24.0
v0.24.0
Welcome to the v0.24.0 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- TΓ΅nis Tiigi
- CrazyMax
- Sebastiaan van Stijn
- Akihiro Suda
- AndrΓ©s Delfino
- Alberto Contreras
- Alberto Garcia Hierro
- Anthony Nandaa
- Baptiste Girard-Carrabin
- Derek McGowan
- Justin Chadwell
- Kohei Tokunaga
- Michael Dwan
Notable Changes
- Built-in Dockerfile frontend has been updated to v1.18.0
- LLB Git operation now allows controlling if submodules should be initialized (default) or skipped. #β6173
- Max-parallelism control can now also be set with
--max-parallelismdaemon flag. #β6105 - Improve errors when using build arguments in
COPY --fromflag value. #β6153 - Debug server now supports new endpoints for inspecting the cache key database and remote cache manifests. In order to debug plaintexts of the cache keys
--save-cache-debugneeds to be enabled in the daemon. #β6076 #β6061 #β6133 - Base Alpine version has been updated to 3.22. #β6048
- Client now allows configuring exporter content store. #β6045
- Release binary artifacts now use Git commit time as timestamp. #β6037
- Fix incorrect empty checkout when accessing Git source with subdir pointing to a submodule. #β6170
- Fix allowing device entitlement for buildkitd daemon with startup flags. #β6080
- Fix possible panic from BoltDB when copying lots of files between build steps. #β6159 #β6136 #β6165
- Fix possible deadlocks from the error handler in the sync package. #β6158
- Fix issue with exporting cache with different compression formats for images with lots of layers. #β6092 #β6088
- Fix displaying error details on unexpected response status code. #β6067
- Fix incorrect empty checkout when accessing Git source with subdir pointing to a submodule. #β6170
Dependency Changes
- github.com/containerd/containerd/v2 v2.1.3 -> v2.1.4
- github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7
- github.com/docker/cli v28.2.2 -> v28.3.3
- github.com/docker/docker v28.2.2 -> v28.3.3
- github.com/moby/profiles/seccomp v0.1.0 new
- github.com/urfave/cli v1.22.16 -> v1.22.17
- go.etcd.io/bbolt v1.4.0 -> v1.4.3
- go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.56.0 -> v0.60.0
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.31.0 -> v1.35.0
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0 -> v1.35.0
- golang.org/x/sync v0.14.0 -> v0.16.0
Previous release can be found at v0.23.2
v0.23.2
Welcome to the v0.23.2 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- CrazyMax
- TΓ΅nis Tiigi
Notable Changes
- Fix attestation filename in local exporter. #β6051
- Fix expired cache URLs in GitHub Actions cache exporter. #β6053
Dependency Changes
Previous release can be found at v0.23.1
v0.23.1
Welcome to the v0.23.1 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- Derek McGowan
Notable Changes
- Fix a possible issue where pulling images from some registries that don't handle the Range header correctly(Artifactory) would fail. #β6040
Dependency Changes
- github.com/containerd/containerd/v2 v2.1.1 -> v2.1.3
Previous release can be found at v0.23.0
v0.23.0
Welcome to the v0.23.0 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- TΓ΅nis Tiigi
- CrazyMax
- Akihiro Suda
- Anthony Nandaa
- Austin Vazquez
- Brian Goff
- Dan Duvall
- Jonathan A. Sternberg
- Nicolas Schweitzer
- Roberto Villarreal
- Sebastiaan van Stijn
- zfrank
Notable Changes
- Add opt-in support for SLSA provenance v1. This is expected to become the default in a future release. #β6005 docs
- Allow duration based filters on diskusage requests. #β5455
- Allow authorization secrets to be set per hostname with
HTTP_AUTH_HEADER_<host>orHTTP_AUTH_TOKEN_<host>. #β6023 - Add support for raw mode in the SSH agent provider. #β6003
- Improve URL joining to prevent malformed GitHub Cache service URLs. #β6026 tonistiigi/go-actions-cache#38
- Update Runc v1.3.0. #β5977
- Fix possible "unknown file mode" error when transferring files on Windows (previous fix did not work). #β6025
- Fix race condition when enabling and disabling privileges in WCOW. #β5959
- Fix unnecessary registry requests for local image lookups if reference contains a digest. #β6029
- Fix privileges error for local exporter in WCOW. #β6007
- Fix OCI export of multi-platform scratch result. #β5996
- Fix handle not found error during cache export. #β5999
- Fix
type=local,platform-split=truefor single platform build to work the same as it would with a multi-platform build. #β6007 - Fix some data races shown on the race detector. #β6006
Dependency Changes
- github.com/Microsoft/hcsshim v0.12.9 -> v0.13.0
- github.com/containerd/accelerated-container-image v1.2.3 -> v1.3.0
- github.com/containerd/console v1.0.4 -> v1.0.5
- github.com/containerd/containerd/api v1.8.0 -> v1.9.0
- github.com/containerd/containerd/v2 v2.0.5 -> v2.1.1
- github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.1 -> v2.1.6
- github.com/containerd/nydus-snapshotter v0.15.0 -> v0.15.2
- github.com/containernetworking/cni v1.2.3 -> v1.3.0
- github.com/containernetworking/plugins v1.5.1 -> v1.7.1
- github.com/docker/cli v28.1.1 -> v28.2.2
- github.com/docker/docker v28.1.1 -> v28.2.2
- github.com/fsnotify/fsnotify v1.7.0 -> v1.9.0
- github.com/google/pprof
a892ee0->27863c8 - github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 -> v2.26.1
- github.com/in-toto/in-toto-golang v0.5.0 -> v0.9.0
- github.com/opencontainers/runtime-spec v1.2.0 -> v1.2.1
- github.com/opencontainers/selinux v1.11.1 -> v1.12.0
- github.com/prometheus/client_golang v1.20.5 -> v1.22.0
- github.com/prometheus/common v0.55.0 -> v0.62.0
- github.com/secure-systems-lab/go-securesystemslib v0.4.0 -> v0.6.0
- github.com/spdx/tools-golang v0.5.3 -> v0.5.5
- github.com/tonistiigi/fsutil
3f76f81->586307a - github.com/tonistiigi/go-actions-cache
3e9a664->388a2ec - github.com/tonistiigi/go-csvvalue
ddb21b7->030d3b2 - github.com/vishvananda/netlink
084abd9-> v1.3.1 - go.etcd.io/bbolt v1.3.11 -> v1.4.0
- go.opentelemetry.io/auto/sdk v1.1.0 new
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 -> v0.60.0
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 -> v0.60.0
- go.opentelemetry.io/otel v1.31.0 -> v1.35.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0 -> v1.35.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0 -> v1.35.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 -> v1.35.0
- go.opentelemetry.io/otel/metric v1.31.0 -> v1.35.0
- go.opentelemetry.io/otel/sdk v1.31.0 -> v1.35.0
- go.opentelemetry.io/otel/sdk/metric v1.31.0 -> v1.35.0
- go.opentelemetry.io/otel/trace v1.31.0 -> v1.35.0
- go.opentelemetry.io/proto/otlp v1.3.1 -> v1.5.0
- golang.org/x/sync v0.13.0 -> v0.14.0
- golang.org/x/sys v0.32.0 -> v0.33.0
- google.golang.org/genproto/googleapis/api
324edc3->56aae31 - google.golang.org/genproto/googleapis/rpc
324edc3->56aae31 - google.golang.org/grpc v1.69.4 -> v1.72.2
- google.golang.org/protobuf v1.35.2 -> v1.36.6
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.73 -> v1.2.76
- kernel.org/pub/linux/libs/security/libcap/psx v1.2.73 -> v1.2.76
Previous release can be found at v0.22.0
v0.22.0
Welcome to the v0.22.0 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- TΓ΅nis Tiigi
- CrazyMax
- Akihiro Suda
- Sebastiaan van Stijn
- Alberto Garcia Hierro
- Anthony Nandaa
- Jonathan A. Sternberg
- Bertrand Paquet
- Gleb Nebolyubov
- Justin Chadwell
- liulanzheng
Notable Changes
- Add checksum support to Git source. #β5975
- Allow duration based filters on diskusage requests. #β5455
- Ignore Apple extended file attributes during copy. #β5937 tonistiigi/fsutil#235
- Support for building overlaybd images. #β3867 docs
- Improve error message for registry and local cache export when using
image-manifestandoci-mediatypesoptions. #β5966 - Fix supported platforms reported by the worker. #β5968
- Fix CDI device request by class annotation. #β5969
- Fix panic when using a tiny terminal. #β5967
- CNI plugins have been updated to v1.7.1. #β5533
Dependency Changes
- github.com/containerd/accelerated-container-image v1.2.3 new
- github.com/containerd/containerd/v2 v2.0.4 -> v2.0.5
- github.com/docker/cli v28.0.4 -> v28.1.1
- github.com/docker/docker v28.0.4 -> v28.1.1
- github.com/moby/go-archive
21f3f33-> v0.1.0 - github.com/moby/sys/atomicwriter v0.1.0 new
- github.com/tonistiigi/fsutil
5b74a7a->3f76f81 - github.com/vbatts/tar-split v0.11.6 -> v0.12.1
Previous release can be found at v0.21.1
v0.21.1
Welcome to the v0.21.1 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- TΓ΅nis Tiigi
- Akihiro Suda
- Gleb Nebolyubov
Notable Changes
- Builtin Dockerfile frontend has been updated to v1.15.1.
- Fix
buildctl --tlsdirfor non-cert-manager.io tls certificate naming. #β5950 - Fix panic when null cache options were sent using solve grpc API. #β5925
Dependency Changes
This release has no dependency changes
Previous release can be found at v0.21.0
v0.21.0
Welcome to the v0.21.0 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- TΓ΅nis Tiigi
- CrazyMax
- Akihiro Suda
- Jonathan A. Sternberg
- Anthony Nandaa
- Sebastiaan van Stijn
- Dan Duvall
- Austin Vazquez
- Billy Owire
- Derek McGowan
- Gleb Nebolyubov
- Michael Korn
Notable Changes
- Builtin Dockerfile frontend has been updated to v1.15.0. changelog
- Runc container runtime has been updated to v1.2.6. #β5845
- The cache manifest created by
--cache-tonow defaults to OCI artifact manifest (instead of OCI image index). For old behavior, setimage-manifest=false. #β5864 - The cache timeout for registry credentials has been reduced from 10 min to 5 min. #β5859
- Buildctl
--tlsdiroption now allows filenames compatible withcert-manager.io. #β5886 - Update free-space filter GC/prune filter to not remove all data when no max-space value is set. #β5827
- Mitigate GitHub Actions cache v2 flakiness. #β5805
- Add autoallow and entitlements support to CDI devices. #β5742
- Support authentication in LLB for Git and HTTP. #β5733
- Support for adding additional request header fields for HTTP sources. #β5732
- OpenTelemetry traces now contain spans for layer extraction. #β5831
- containerd image exporter creates dangling images by default. #β5858
- Add support for bind and cache mounts for WCOW. #β5708
- Add session exporter capability. #β5907 #β5908
- Add metadata-only transfer option for local source. #β5897
- Fix X mode to be Linux-compatible for file operations using chmod. #β5850
- Fix
--chmodwhen applied to parent directories. #β5788 - Fix missing user-agent when buildkit requests layers from the registry. #β5834
- Fix missing user-agent for GitHub Actions importer. #β5759 #β5760
- Fix reading secrets from any session on parallel build requests. #β5833
- Fix race condition causing "file used by another process" errors with WCOW. #β5885
Dependency Changes
- github.com/docker/cli v27.5.1 -> v28.0.4
- github.com/docker/docker v27.5.1 -> v28.0.4
- github.com/docker/docker-credential-helpers v0.8.2 -> v0.9.3
- github.com/golang-jwt/jwt/v5 v5.2.1 -> v5.2.2
- github.com/google/go-cmp v0.6.0 -> v0.7.0
- github.com/klauspost/compress v1.17.11 -> v1.18.0
- github.com/moby/go-archive
21f3f33new - github.com/moby/sys/user v0.3.0 -> v0.4.0
- github.com/opencontainers/image-spec v1.1.0 -> v1.1.1
- github.com/tonistiigi/dchapes-mode
ca0759f->73d941a - github.com/tonistiigi/fsutil
b14e27f->5b74a7a - golang.org/x/crypto v0.31.0 -> v0.37.0
- golang.org/x/exp
2d47ceb->7e4ce0a - golang.org/x/mod v0.22.0 -> v0.24.0
- golang.org/x/net v0.33.0 -> v0.39.0
- golang.org/x/sync v0.10.0 -> v0.13.0
- golang.org/x/sys v0.29.0 -> v0.32.0
- golang.org/x/text v0.21.0 -> v0.24.0
- golang.org/x/time v0.6.0 -> v0.11.0
- tags.cncf.io/container-device-interface v0.8.1 -> v1.0.1
- tags.cncf.io/container-device-interface/specs-go v0.8.0 -> v1.0.0
Previous release can be found at v0.20.2
v0.20.2
buildkit 0.20.2
Welcome to the v0.20.2 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- Akihiro Suda
- Derek McGowan
- Jonathan A. Sternberg
Changes
- Fix possible UID overflow when setting user for container #β5844 https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg
- update RootlessKit to v2.3.4 #β5825
Dependency Changes
- github.com/containerd/containerd/v2 v2.0.3 -> v2.0.4
Previous release can be found at v0.20.1
v0.20.1
Welcome to the v0.20.1 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- TΓ΅nis Tiigi
- Akihiro Suda
- CrazyMax
Notable Changes
- Builtin Dockerfile frontend has been updated to v1.14.1
- Fix panic during CDI manager initialization. #β5769 cncf-tags/container-device-interface#254
- Fix gRPC message size when writing SBOMs. #β5798 containerd/containerd#11457
- Fix possible panic with libc-bin emulation in QEMU v9.2.0. #β5808
- Update azblob client retries for GitHub Actions cache backend. #β5797 tonistiigi/go-actions-cache#33
Dependency Changes
- github.com/containerd/containerd/v2 v2.0.2 -> v2.0.3
- github.com/tonistiigi/go-actions-cache
1a5174a->3e9a664 - tags.cncf.io/container-device-interface v0.8.0 -> v0.8.1
Previous release can be found at v0.20.0
v0.20.0
Welcome to the v0.20.0 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- CrazyMax
- TΓ΅nis Tiigi
- Sebastiaan van Stijn
- Jonathan A. Sternberg
- Akihiro Suda
- Anthony Nandaa
- Shaun Thompson
- Austin Vazquez
- Bertrand Paquet
- Brian Goff
- Pranav Pandit
Notable Changes
- Builtin Dockerfile frontend has been updated to v1.14.0
- Github Actions cache backend has been updated to support v2 API. Github is expected to stop supporting V1 API from March 1st 2025. #β5720 #β5750 #β5754
- Support for CDI (Container Device Interface) devices has been added allowing builds to use GPUs and other defined devices. Build steps can now request devices to be injected into the container, if they are permitted to do so. In Dockerfile, devices are currently available in the
labschannel. #β4056 #β5722 #β5726 #β5729 #β5742 - History record APIs now support server-side filters and limiting amount of records returned. #β5705
- Update Runc to v1.2.5. #β5741
- Embedded binfmt emulators in the release image have been updated to QEMU v9.2.0 #β5695 #β5736
- Fix possible errors from credentials expiration for long builds. #β5684
- Fix possible crash from S3 remote cache backend. #β5597
- Fix possible record leak in Bolt database. #β5692
- Fix invalid warning messages when running subrequests (e.g. check, outline) for a specific platform. #β5730
Dependency Changes
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.11.1 -> v1.16.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.6.0 -> v1.8.0
- github.com/Azure/azure-sdk-for-go/sdk/internal v1.8.0 -> v1.10.0
- github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v0.4.1 -> v1.5.0
- github.com/AzureAD/microsoft-authentication-library-for-go v1.2.2 -> v1.3.2
- github.com/containerd/cgroups/v3 v3.0.3 -> v3.0.5
- github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.0 -> v2.1.1
- github.com/containerd/go-cni v1.1.11 -> v1.1.12
- github.com/docker/cli v27.5.0 -> v27.5.1
- github.com/docker/docker v27.5.0 -> v27.5.1
- github.com/moby/term v0.5.0 -> v0.5.2
- github.com/package-url/packageurl-go
8907843-> v0.1.1 - github.com/petermattis/goid
4fcff4anew - github.com/sasha-s/go-deadlock v0.3.5 new
- github.com/tonistiigi/go-actions-cache
017636a->1a5174a - github.com/vishvananda/netns v0.0.4 -> v0.0.5
- golang.org/x/exp
701f63a->2d47ceb - golang.org/x/mod v0.21.0 -> v0.22.0
- golang.org/x/sys v0.28.0 -> v0.29.0
- google.golang.org/genproto/googleapis/api
5fefd90->324edc3 - google.golang.org/grpc v1.68.1 -> v1.69.4
Previous release can be found at v0.19.0
v0.19.0
Welcome to the v0.19.0 release of buildkit!
Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.
Contributors
- TΓ΅nis Tiigi
- CrazyMax
- Sebastiaan van Stijn
- Akihiro Suda
- Jonathan A. Sternberg
- Anthony Nandaa
- Brian Goff
- David Karlsson
- Marat Radchenko
- Shaun Thompson
- Alberto Garcia Hierro
- Daniel Githinji
- Peter Engelbert
- Steeve Chailloux
- lvyaoting
Notable Changes
- Builtin Dockerfile frontend has been updated to v1.13.0
- Attestations embedded into build results can now be generated in OCI artifact format with
oci-artifact=trueoption #β5573 - Platform specifiers that set Windows OSVersion are now supported #β5614
- Add powershell.exe dir to default PATH for WCOW #β5446
- Allow unix address for debug address for buildkitd #β5568
- Requests that pull in Git sources now inherit proxy environment variables from buildkitd #β5613
- Update Runc to v1.2.4 #β5639
- Update RootlessKit to v2.3.2 #β5674
- Fix possible "unknown file mode" error when transferring files on Windows #β5636 #β5657
- Fix possible panic from data race in history record serialization #β5666
- Fix error message for invalid includepatterns #β5649
- Fix invalid index.json annotations on
tar=falseexport #β5589 - Fix possible panic when walking provenance due to race condition #β5606
Dependency Changes
- github.com/AdaLogics/go-fuzz-headers
ced1acd->e8a1dd7 - github.com/AdamKorcz/go-118-fuzz-build
8075edf->2b5cbb2 - github.com/Microsoft/hcsshim v0.12.8 -> v0.12.9
- github.com/aws/aws-sdk-go-v2 v1.24.1 -> v1.30.3
- github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.5.4 -> v1.6.3
- github.com/aws/aws-sdk-go-v2/config v1.26.6 -> v1.27.27
- github.com/aws/aws-sdk-go-v2/credentials v1.16.16 -> v1.17.27
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.11 -> v1.16.11
- github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.15.15 -> v1.17.8
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.10 -> v1.3.15
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.10 -> v2.6.15
- github.com/aws/aws-sdk-go-v2/internal/ini v1.7.3 -> v1.8.0
- github.com/aws/aws-sdk-go-v2/internal/v4a v1.2.10 -> v1.3.15
- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 -> v1.11.3
- github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.2.10 -> v1.3.17
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.10 -> v1.11.17
- github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.16.10 -> v1.17.15
- github.com/aws/aws-sdk-go-v2/service/s3 v1.48.1 -> v1.58.2
- github.com/aws/aws-sdk-go-v2/service/sso
Configuration
π Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
π¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.
β» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
π Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
βΉ Artifact update notice
File name: go.mod
In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):
- 29 additional dependencies were updated
- The
godirective was updated for compatibility reasons
Details:
| Package | Change |
|---|---|
go |
1.21 -> 1.24.3 |
github.com/opencontainers/image-spec |
v1.1.0 -> v1.1.1 |
golang.org/x/exp |
v0.0.0-20240613232115-7f521ea00fb8 -> v0.0.0-20250911091902-df9299821621 |
golang.org/x/sync |
v0.7.0 -> v0.17.0 |
github.com/AdaLogics/go-fuzz-headers |
v0.0.0-20230811130428-ced1acdcaa24 -> v0.0.0-20240806141605-e8a1dd7889d6 |
github.com/Microsoft/hcsshim |
v0.11.5 -> v0.14.0-rc.1 |
github.com/containerd/continuity |
v0.4.3 -> v0.4.5 |
github.com/containerd/errdefs |
v0.1.0 -> v1.0.0 |
github.com/containerd/ttrpc |
v1.2.4 -> v1.2.7 |
github.com/containerd/typeurl/v2 |
v2.1.1 -> v2.2.3 |
github.com/docker/distribution |
v2.8.1+incompatible -> v2.8.2+incompatible |
github.com/go-logr/logr |
v1.3.0 -> v1.4.3 |
github.com/in-toto/in-toto-golang |
v0.5.0 -> v0.9.0 |
github.com/klauspost/compress |
v1.17.4 -> v1.18.1 |
github.com/moby/sys/signal |
v0.7.0 -> v0.7.1 |
github.com/secure-systems-lab/go-securesystemslib |
v0.4.0 -> v0.9.1 |
github.com/tonistiigi/fsutil |
v0.0.0-20240424095704-91a3fc46842c -> v0.0.0-20250605211040-586307ad452f |
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc |
v0.46.1 -> v0.61.0 |
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace |
v0.46.1 -> v0.61.0 |
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp |
v0.46.1 -> v0.61.0 |
go.opentelemetry.io/otel |
v1.21.0 -> v1.38.0 |
go.opentelemetry.io/otel/metric |
v1.21.0 -> v1.38.0 |
go.opentelemetry.io/otel/sdk |
v1.21.0 -> v1.38.0 |
go.opentelemetry.io/otel/trace |
v1.21.0 -> v1.38.0 |
golang.org/x/crypto |
v0.24.0 -> v0.42.0 |
golang.org/x/mod |
v0.18.0 -> v0.29.0 |
golang.org/x/net |
v0.26.0 -> v0.44.0 |
google.golang.org/genproto/googleapis/rpc |
v0.0.0-20231016165738-49dd2c1f3d0b -> v0.0.0-20250825161204-c5933d9347a5 |
google.golang.org/grpc |
v1.59.0 -> v1.76.0 |
google.golang.org/protobuf |
v1.33.0 -> v1.36.10 |