SAP / jenkins-library

Jenkins shared library for Continuous Delivery pipelines.
https://www.project-piper.io
Apache License 2.0
772 stars 586 forks source link

chore(deps): update module github.com/moby/buildkit to v0.15.1 #4849

Open renovate[bot] opened 4 months ago

renovate[bot] commented 4 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/moby/buildkit v0.11.6 -> v0.15.1 age adoption passing confidence

Release Notes

moby/buildkit (github.com/moby/buildkit) ### [`v0.15.1`](https://togithub.com/moby/buildkit/releases/tag/v0.15.1) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.15.0...v0.15.1) Welcome to the v0.15.1 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - CrazyMax - Tõnis Tiigi ##### Notable Changes - Fix possible panic when importing build record external error [#​5181](https://togithub.com/moby/buildkit/issues/5181) - Fix regression with flock module where read-write mode was not applied anymore [#​5183](https://togithub.com/moby/buildkit/issues/5183) ##### Dependency Changes - **github.com/gofrs/flock** v0.12.0 -> v0.12.1 - **golang.org/x/sys** v0.21.0 -> v0.22.0 Previous release can be found at [v0.15.0](https://togithub.com/moby/buildkit/releases/tag/v0.15.0) ### [`v0.15.0`](https://togithub.com/moby/buildkit/releases/tag/v0.15.0) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.14.1...v0.15.0) Welcome to the v0.15.0 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Tõnis Tiigi - Akihiro Suda - Sebastiaan van Stijn - Talon Bowler - CrazyMax - David Karlsson - Aleksa Sarai - Anthony Nandaa - Erik Sipsma - Jonathan A. Sternberg - Justin Chadwell - Alano Terblanche - Brian Goff - Jesper Noordsij - Moritz "WanzenBug" Wanzenböck - Nobi - Paweł Gronowski - Shaun Thompson - fanjiyun.fjy - retornam ##### Notable Changes - Builtin Dockerfile frontend has been updated to v1.9.0 [changelog](https://togithub.com/moby/buildkit/releases/tag/dockerfile%2F1.9.0) - History API now puts typed error information on a separate blob to reduce the size of the main record [#​5093](https://togithub.com/moby/buildkit/issues/5093) [#​5142](https://togithub.com/moby/buildkit/issues/5142) - History API supports new Finalize call for completing collection of tracing instead of waiting for time based expiration [#​5109](https://togithub.com/moby/buildkit/issues/5109) - Typed errors with source information now contain all description fields from failing vertex [#​5108](https://togithub.com/moby/buildkit/issues/5108) - Windows now supports exporting results that contain certain privileged files [#​4994](https://togithub.com/moby/buildkit/issues/4994) - Improve performance on calculating file-based checksums on certain cases [#​5060](https://togithub.com/moby/buildkit/issues/5060) - TOML config now allows configuring cgroup parent for containerd worker [#​5033](https://togithub.com/moby/buildkit/issues/5033) - Fix issue where files checked out from Git could have incorrect permission bits because of non-standard umask (regression from v0.13+) [#​5096](https://togithub.com/moby/buildkit/issues/5096) - Fix pulling Git commits by SHA if they point to unreferenced tags [#​5072](https://togithub.com/moby/buildkit/issues/5072) - Fix possible issue where result record could leak in cache database and not get released [#​5116](https://togithub.com/moby/buildkit/issues/5116) - Fix possible nil dereference on cancelling build on a specific time [#​5111](https://togithub.com/moby/buildkit/issues/5111) - Fix possible resource leak on cancelling build on a specific time [#​5031](https://togithub.com/moby/buildkit/issues/5031) - Fix possible issue where cancelling build on a specific time could have still kept the container step running [#​5106](https://togithub.com/moby/buildkit/issues/5106) - Fix theoretical telemetry record leak in case of database error [#​5136](https://togithub.com/moby/buildkit/issues/5136) Dockerfile: - Add new validation rules: `SecretsUsedInArgOrEnv`, `InvalidDefaultArgInFrom`, `RedundantTargetPlatform`, `CopyIgnoredFile` (experimental) and `FromPlatformFlagConstDisallowed` [#​5135](https://togithub.com/moby/buildkit/issues/5135) [#​5140](https://togithub.com/moby/buildkit/issues/5140) [#​5105](https://togithub.com/moby/buildkit/issues/5105) [#​5113](https://togithub.com/moby/buildkit/issues/5113) [#​5091](https://togithub.com/moby/buildkit/issues/5091) [#​5094](https://togithub.com/moby/buildkit/issues/5094) [#​5090](https://togithub.com/moby/buildkit/issues/5090) [#​5046](https://togithub.com/moby/buildkit/issues/5046) - Many performance improvements for working with big Dockerfiles [#​5067](https://togithub.com/moby/buildkit/issues/5067) [#​5029](https://togithub.com/moby/buildkit/issues/5029) - Fix possible panic when building Dockerfile without defined stages [#​5150](https://togithub.com/moby/buildkit/issues/5150) - Fix incorrect JSON parsing that could cause some incorrect JSON values to pass without producing an error [#​5107](https://togithub.com/moby/buildkit/issues/5107) - Fix issue where `COPY --link` to `.` destination path could fail (regression from v1.8+) [#​5080](https://togithub.com/moby/buildkit/issues/5080) - Fix validation of `ADD --checksum` when used with a Git URL [#​5085](https://togithub.com/moby/buildkit/issues/5085) ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.11.5 -> v0.11.7 - **github.com/containerd/containerd** v1.7.18 -> v1.7.19 - **github.com/containerd/containerd/api** v1.7.19 ***new*** - **github.com/containerd/go-cni** v1.1.9 -> v1.1.10 - **github.com/containerd/platforms** v0.2.1 ***new*** - **github.com/containerd/ttrpc** v1.2.4 -> v1.2.5 - **github.com/containernetworking/cni** v1.1.2 -> v1.2.2 - **github.com/cpuguy83/go-md2man/v2** v2.0.2 -> v2.0.4 - **github.com/docker/cli** v26.1.4 -> v27.0.3 - **github.com/docker/docker** v26.1.4 -> v27.0.3 - **github.com/docker/docker-credential-helpers** v0.8.0 -> v0.8.2 - **github.com/go-logr/logr** v1.3.0 -> v1.4.1 - **github.com/gofrs/flock** v0.8.1 -> v0.12.0 - **github.com/google/pprof** [`e72429f`](https://togithub.com/moby/buildkit/commit/e72429f035bd) -> [`a892ee0`](https://togithub.com/moby/buildkit/commit/a892ee059fd6) - **github.com/google/uuid** v1.5.0 -> v1.6.0 - **github.com/hashicorp/go-immutable-radix/v2** v2.1.0 ***new*** - **github.com/hashicorp/go-retryablehttp** v0.7.5 -> v0.7.7 - **github.com/hashicorp/golang-lru/v2** v2.0.7 ***new*** - **github.com/klauspost/compress** v1.17.4 -> v1.17.9 - **github.com/opencontainers/runtime-spec** v1.1.0 -> v1.2.0 - **github.com/prometheus/procfs** v0.12.0 -> v0.15.1 - **github.com/stretchr/testify** v1.8.4 -> v1.9.0 - **github.com/tonistiigi/go-actions-cache** [`9794bdb`](https://togithub.com/moby/buildkit/commit/9794bdbb2fb4) -> [`58651d5`](https://togithub.com/moby/buildkit/commit/58651d5e11d6) - **github.com/tonistiigi/go-csvvalue** [`ddb21b7`](https://togithub.com/moby/buildkit/commit/ddb21b71c0b4) ***new*** - **github.com/urfave/cli** v1.22.14 -> v1.22.15 - **kernel.org/pub/linux/libs/security/libcap/cap** v1.2.67 -> v1.2.70 - **kernel.org/pub/linux/libs/security/libcap/psx** v1.2.67 -> v1.2.70 Previous release can be found at [v0.14.1](https://togithub.com/moby/buildkit/releases/tag/v0.14.1) ### [`v0.14.1`](https://togithub.com/moby/buildkit/releases/tag/v0.14.1) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.14.0...v0.14.1) Welcome to the 0.14.1 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Talon Bowler - Akihiro Suda - Tõnis Tiigi - Paweł Gronowski ##### Notable Changes - Builtin Dockerfile frontend has been updated to v1.8.1 [changelog](https://togithub.com/moby/buildkit/releases/tag/dockerfile%2F1.8.1) - Fix possible issue on pushing blobs with `rewrite-timestamp=true` option [#​5040](https://togithub.com/moby/buildkit/issues/5040) - Fix possible concurrency issue on handling HTTPS to HTTP fallbacks for insecure registries [#​5044](https://togithub.com/moby/buildkit/issues/5044) ##### Dependency Changes This release has no dependency changes Previous release can be found at [v0.14.0](https://togithub.com/moby/buildkit/releases/tag/v0.14.0) ### [`v0.14.0`](https://togithub.com/moby/buildkit/releases/tag/v0.14.0) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.13.2...v0.14.0) Welcome to the 0.14.0 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Tõnis Tiigi - CrazyMax - Talon James Bowler - Akihiro Suda - Jonathan A. Sternberg - Justin Chadwell - David Karlsson - Sebastiaan van Stijn - Anthony Nandaa - Erik Sipsma - Aleksa Sarai - Adam Perlin - Shaun Thompson - Paweł Gronowski - Burt Holzman - Derek McGowan - Adrien Delorme - Ahmon Dancy - Billy Owire - Dennis Haney - Felix Fontein - Félix Mattrat - Gabriel Samfira - Höhl, Lukas - Kirill A. Korinsky - Petteri Räty - Salim B - Stephen Day - Swagat Bora - Zhizhen He - cuiyourong - guoguangwu - racequite - yzewei ##### Notable Changes - Default Dockerfile frontend has been updated to v1.8.0 [docs](https://togithub.com/moby/buildkit/releases/tag/dockerfile%2F1.8.0) - New validation rules have been added to verify that Frontend returned build results for expected platforms [#​4908](https://togithub.com/moby/buildkit/issues/4908) - Allow configuring cache of scanned emulator support for better performance [#​4949](https://togithub.com/moby/buildkit/issues/4949) - LLB FileOp now supports configuring the behavior of copy conflicts between incompatible file types [#​4455](https://togithub.com/moby/buildkit/issues/4455) - Github cache backend can now check the existence of previous blobs via REST API batch requests to work around limits exposed by Github on the cache API [#​4788](https://togithub.com/moby/buildkit/issues/4788) - Increase the size limit of LLB definitions, allowing bigger builds [#​4969](https://togithub.com/moby/buildkit/issues/4969) - Mitigate restoring from cache DB corrupt state after crash or abrupt kill [#​4981](https://togithub.com/moby/buildkit/issues/4981) - Release image is now based on Alpine 3.20 [#​4952](https://togithub.com/moby/buildkit/issues/4952) - New configuration options allow controlling what frontends BuildKit is allowed to call [#​4899](https://togithub.com/moby/buildkit/issues/4899) - Improve performance of exporting S3 cache [#​4551](https://togithub.com/moby/buildkit/issues/4551) - Buildctl now respects proxy environment variables when setting up gRPC connection [#​4127](https://togithub.com/moby/buildkit/issues/4127) - Improve LLB generation by maintaining consistent order [#​4706](https://togithub.com/moby/buildkit/issues/4706) - More OpenTelemetry tracepoints have been added to track exporting, attestion and history record creation. [#​4997](https://togithub.com/moby/buildkit/issues/4997) - Fix detection of certain Git URLs [#​4849](https://togithub.com/moby/buildkit/issues/4849) - Fix too low maximum layer limit for non-rootfs overlay mounts [#​4815](https://togithub.com/moby/buildkit/issues/4815) - Fix possible cases where some errors could be missing a stacktrace [#​4982](https://togithub.com/moby/buildkit/issues/4982) - Fix possible incorrect resolution of some symlink paths [#​4896](https://togithub.com/moby/buildkit/issues/4896) - Fix provenance created for history record not containing builder ID [#​4833](https://togithub.com/moby/buildkit/issues/4833) - Fix the fallback mechanism for insecure registries to detect more valid error conditions for retry via HTTP protocol [#​4975](https://togithub.com/moby/buildkit/issues/4975) - Fix an issue that could result in "inconsistent graph state" error during many related parallel builds [#​4887](https://togithub.com/moby/buildkit/issues/4887) - Fix minimal terminal bounds check when custom `BUILDKIT_TTY_LOG_LINES` value is defined [#​4767](https://togithub.com/moby/buildkit/issues/4767) - Fix possible performance issues while walking back cache records during provenance attestation creation [#​4976](https://togithub.com/moby/buildkit/issues/4976) [#​4947](https://togithub.com/moby/buildkit/issues/4947) [#​4944](https://togithub.com/moby/buildkit/issues/4944) - Fix possible goroutine leak from dangling progress stream [#​4902](https://togithub.com/moby/buildkit/issues/4902) - Fix an issue with some filters for disk usage command [#​4877](https://togithub.com/moby/buildkit/issues/4877) - Fix possible "exceeded retry timeout" error [#​5010](https://togithub.com/moby/buildkit/issues/5010) - Fix exporter definitions being missing in history record for certain clients [#​5017](https://togithub.com/moby/buildkit/issues/5017) - Fix possible resource leak in error handling [#​4816](https://togithub.com/moby/buildkit/issues/4816) - Fix missing mediatype in the index of OCI export artifact [#​4814](https://togithub.com/moby/buildkit/issues/4814) [#​4727](https://togithub.com/moby/buildkit/issues/4727) - Fix issue with uncompressed layer digests when exporting cache for workers that don't support compressed layers [#​4796](https://togithub.com/moby/buildkit/issues/4796) - Fix possible FD leak on forwarding SSH [#​4886](https://togithub.com/moby/buildkit/issues/4886) ##### Dependency Changes - **github.com/Microsoft/go-winio** v0.6.1 -> v0.6.2 - **github.com/Microsoft/hcsshim** v0.11.4 -> v0.11.5 - **github.com/containerd/containerd** v1.7.13 -> v1.7.18 - **github.com/containerd/errdefs** v0.1.0 ***new*** - **github.com/containerd/ttrpc** v1.2.2 -> v1.2.4 - **github.com/distribution/reference** v0.5.0 -> v0.6.0 - **github.com/docker/cli** v25.0.3 -> v26.1.4 - **github.com/docker/docker** v25.0.3 -> v26.1.4 - **github.com/golang/protobuf** v1.5.3 -> v1.5.4 - **github.com/opencontainers/image-spec** v1.1.0-rc5 -> v1.1.0 - **github.com/tonistiigi/go-actions-cache** [`a0b64f3`](https://togithub.com/moby/buildkit/commit/a0b64f338598) -> [`9794bdb`](https://togithub.com/moby/buildkit/commit/9794bdbb2fb4) - **github.com/tonistiigi/vt100** [`f9a4f7e`](https://togithub.com/moby/buildkit/commit/f9a4f7ef6531) -> [`90bafcd`](https://togithub.com/moby/buildkit/commit/90bafcd6abab) - **go.etcd.io/bbolt** v1.3.9 -> v1.3.10 Previous release can be found at [v0.13.2](https://togithub.com/moby/buildkit/releases/tag/v0.13.2) ### [`v0.13.2`](https://togithub.com/moby/buildkit/releases/tag/v0.13.2) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.13.1...v0.13.2) buildkit 0.13.2 Welcome to the 0.13.2 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable Changes - Default Dockerfile frontend has been updated to [1.7.1](https://togithub.com/moby/buildkit/releases/tag/dockerfile%2F1.7.1) - Fix regression on copying hardlinks from buildx context with filters [https://github.com/moby/buildkit/pull/4870](https://togithub.com/moby/buildkit/pull/4870) [https://github.com/tonistiigi/fsutil/pull/198](https://togithub.com/tonistiigi/fsutil/pull/198) - Windows buildkitd now correctly handles `--group` flag [#​4875](https://togithub.com/moby/buildkit/issues/4875) - Windows buildkitd default GC is now based on disk size like in Linux [#​4865](https://togithub.com/moby/buildkit/issues/4865) - Fix issues with some path validation for Windows containers [#​4863](https://togithub.com/moby/buildkit/issues/4863) - Fix `rewrite-timestamps` option incompatibility with `COPY --link` [#​4804](https://togithub.com/moby/buildkit/issues/4804) - Fix issue where `rewite-timestamps` rewrites base image layers in some cases [#​4805](https://togithub.com/moby/buildkit/issues/4805) ##### Dependency Changes - **github.com/tonistiigi/fsutil** [`7525a1a`](https://togithub.com/moby/buildkit/commit/7525a1af2bb5) -> [`91a3fc4`](https://togithub.com/moby/buildkit/commit/91a3fc46842c) Previous release can be found at [v0.13.1](https://togithub.com/moby/buildkit/releases/tag/v0.13.1) ### [`v0.13.1`](https://togithub.com/moby/buildkit/releases/tag/v0.13.1) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.13.0...v0.13.1) buildkit 0.13.1 Welcome to the 0.13.1 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable Changes - Fix handling of deleted blobs when importing cache from Github Actions cache backend [#​4771](https://togithub.com/moby/buildkit/issues/4771) - Fix unclean shutdown error on WCOW on Ctrl-C [#​4774](https://togithub.com/moby/buildkit/issues/4774) - Mitigate issue with mounting OpenTelemetry socket in containers in some installations [#​4778](https://togithub.com/moby/buildkit/issues/4778) - Fix parsing `./.git` source path as Git URL. [#​4776](https://togithub.com/moby/buildkit/issues/4776) ##### Dependency Changes This release has no dependency changes Previous release can be found at [v0.13.0](https://togithub.com/moby/buildkit/releases/tag/v0.13.0) ### [`v0.13.0`](https://togithub.com/moby/buildkit/releases/tag/v0.13.0) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.12.5...v0.13.0) buildkit 0.13.0 Welcome to the 0.13.0 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Tõnis Tiigi - CrazyMax - Justin Chadwell - Sebastiaan van Stijn - Akihiro Suda - Jonathan A. Sternberg - Kohei Tokunaga - David Karlsson - Leandro Santiago - Gabriel Adrian Samfira - Chris Goller - Anthony Nandaa - Erik Sipsma - Paweł Gronowski - Jakub Ciolek - Paul "TBBle" Hampson - Brian Goff - Adrien Delorme - Artem Khramov - Nguyễn Đức Chiến - Aaron Lehmann - Dan Duvall - Mark Yen - Milas Bowman - Tristan Stenner - Yan Song - Ahmon Dancy - Alex Couture-Beil - Alex Suraci - Arnaldo Garcia Rincon - Austin Vazquez - Bjorn Neergaard - Brennan Kinney - Bunyamin Dokmetas - Burt Holzman - Dennis Haney - Derek McGowan - Erik McKelvey - Frank Villaro-Dixon - Grégoire Payen de La Garanderie - Guilhem Charles - Ian King'ori - James Carnegie - Kazuyoshi Kato - Reshen - Sascha Hemleb - Tibor Vass - Zhizhen He - fanjiyun.fjy - frankyang - guangwu - liulanzheng - njucjc - omahs - retornam - x893675 - yumemio - yzewei - 蝦米 ##### Notable Changes - Default Dockerfile frontend has been updated to [v1.7.0](https://togithub.com/moby/buildkit/releases/tag/dockerfile%2F1.7.0) - Experimental Windows Containers support is now available with containerd worker. Windows release artifacts now also contain the `buildkitd.exe` binary. [#​3518](https://togithub.com/moby/buildkit/issues/3518) [#​3517](https://togithub.com/moby/buildkit/issues/3517) [#​4494](https://togithub.com/moby/buildkit/issues/4494) [#​4479](https://togithub.com/moby/buildkit/issues/4479) [#​4432](https://togithub.com/moby/buildkit/issues/4432) [#​4387](https://togithub.com/moby/buildkit/issues/4387) [#​4364](https://togithub.com/moby/buildkit/issues/4364) [#​4670](https://togithub.com/moby/buildkit/issues/4670) [#​4692](https://togithub.com/moby/buildkit/issues/4692) [docs](https://togithub.com/moby/buildkit/blob/v0.13.0/docs/windows.md) - Multiple exporters(outputs) can now be specified with a single build request [#​4134](https://togithub.com/moby/buildkit/issues/4134) - New option `rewrite-timestamps` is available when exporting images that with convert files in exported layers according to the epoch time for reproducible builds [#​4057](https://togithub.com/moby/buildkit/issues/4057) [docs](https://togithub.com/moby/buildkit/blob/v0.13.0/docs/build-repro.md#source_date_epoch) - There is a new bridge network mode `--oci-worker-net=bridge` that can be used to set up CNI bridge networking with no external dependencies for better network isolation of build containers. It is expected that v0.14.0 release will enable this network mode by default. [#​4352](https://togithub.com/moby/buildkit/issues/4352) [#​4650](https://togithub.com/moby/buildkit/issues/4650) [#​4539](https://togithub.com/moby/buildkit/issues/4539) - `SOURCE_DATE_EPOCH` in now not applied to the layer records of the base image to keep them immutable [#​4663](https://togithub.com/moby/buildkit/issues/4663) - Github Actions cache backend now supports defining timeout in case the service gets rate-limited [#​4702](https://togithub.com/moby/buildkit/issues/4702) - Gateway API has a new method `ResolveSourceMeta` that will replace the previous `ResolveImageConfig` method. The new method works with all LLB source types, not just images, and correctly handles policy conversions between sources. [#​4563](https://togithub.com/moby/buildkit/issues/4563) [#​4647](https://togithub.com/moby/buildkit/issues/4647) - When using host networking, local host DNS routes can also be used instead of the default [#​4524](https://togithub.com/moby/buildkit/issues/4524) - Changing cache mount's ID property does not invalidate cache for the build step anymore [#​4585](https://togithub.com/moby/buildkit/issues/4585) - Basic metrics support has been added via OpenTelemetry and Prometheus [#​4460](https://togithub.com/moby/buildkit/issues/4460) - Token cache is no longer shared between parallel push requests [#​3592](https://togithub.com/moby/buildkit/issues/3592) - Update insecure registry fallback logic to only fallback with previous host [#​4613](https://togithub.com/moby/buildkit/issues/4613) - Build secrets can now avoid `noexec` mount restrictions if file mode set execution bit [#​4670](https://togithub.com/moby/buildkit/issues/4670) - GRPC socket for OpenTelemetry tracing now defaults to runtime directory path [#​4078](https://togithub.com/moby/buildkit/issues/4078) [#​4619](https://togithub.com/moby/buildkit/issues/4619) - LLB API now has new options to directly control how different mounts for container steps are cached [#​4624](https://togithub.com/moby/buildkit/issues/4624) - Cancellation and timeout errors should now contain better stacktraces on `--debug` mode [#​4587](https://togithub.com/moby/buildkit/issues/4587) [#​4457](https://togithub.com/moby/buildkit/issues/4457) - Edge case of empty multiplatform build result does not generate errors anymore [#​4526](https://togithub.com/moby/buildkit/issues/4526) - Prune command now avoids taking database lock for a long time if deletion takes too much time [#​4413](https://togithub.com/moby/buildkit/issues/4413) - Healthcheck service has been added to Control API [#​4145](https://togithub.com/moby/buildkit/issues/4145) - Buildctl has new `quiet` and `rawjson` progress mode [#​4213](https://togithub.com/moby/buildkit/issues/4213) [#​4113](https://togithub.com/moby/buildkit/issues/4113) - Buildctl has new `--debug-json-cache-metrics` debug option [#​4464](https://togithub.com/moby/buildkit/issues/4464) - Buildctl now supports `--registry-auth-tlscontext` flag for controlling the client authentication requests [#​4420](https://togithub.com/moby/buildkit/issues/4420) [#​4211](https://togithub.com/moby/buildkit/issues/4211) - Buildctl now propagates `SOURCE_DATE_EPOCH` to build arg automatically if it is defined [#​4231](https://togithub.com/moby/buildkit/issues/4231) - LLB client now allows exposing local sources via `FS` interface instead of local path [#​4094](https://togithub.com/moby/buildkit/issues/4094) - Ensure only one platform is pulled on resolving image config, even if multiple match [#​4311](https://togithub.com/moby/buildkit/issues/4311) - Rootless version supports new `--detach-netns` mode [#​4546](https://togithub.com/moby/buildkit/issues/4546) - Update default CNI config path for rootless mode to `~/.config/buildkit/cni.json` [#​4547](https://togithub.com/moby/buildkit/issues/4547) - Ensure correct pinned commit is checked out if tags that have same path components [#​4473](https://togithub.com/moby/buildkit/issues/4473) - Exporting caches for results with no layers is now skipped in OCI structures [#​4336](https://togithub.com/moby/buildkit/issues/4336) - New debugging options have been added to the scheduler component [#​4410](https://togithub.com/moby/buildkit/issues/4410) - Improve error messages on `StatFile` requests [#​4321](https://togithub.com/moby/buildkit/issues/4321) - Daemon logs can now be exported in JSON format [#​4044](https://togithub.com/moby/buildkit/issues/4044) - Qemu emulation for loongarch64 is now detected if available [#​4392](https://togithub.com/moby/buildkit/issues/4392) - Number of log lines per build step on TTY mode can now be configured with `BUILDKIT_TTY_LOG_LINES` [#​4284](https://togithub.com/moby/buildkit/issues/4284) - Empty `OnBuild` value is now omitted from image config [#​4648](https://togithub.com/moby/buildkit/issues/4648) - Fixes for bridge networking on Rootless mode [#​4655](https://togithub.com/moby/buildkit/issues/4655) - Fix possible "missing lease requirement" error on canceling one of parallel exports [#​4529](https://togithub.com/moby/buildkit/issues/4529) - Fix file permissions error if `ADD ` used with User namespace [#​4712](https://togithub.com/moby/buildkit/issues/4712) - Fix possible permission error when using custom frontends with User namespace on certain systems [#​4714](https://togithub.com/moby/buildkit/issues/4714) - Fixes for merging parallel build steps that generate the same cache keys [#​4559](https://togithub.com/moby/buildkit/issues/4559) [#​4285](https://togithub.com/moby/buildkit/issues/4285) - Fix processing result map in LLB API if the evaluate option is set to true [#​4544](https://togithub.com/moby/buildkit/issues/4544) - Fix hardlink issue with whiteout deletes in the merge snapshotter [#​4516](https://togithub.com/moby/buildkit/issues/4516) - Fix issue with caching multiple mounts originating from the same source [#​4270](https://togithub.com/moby/buildkit/issues/4270) [#​4281](https://togithub.com/moby/buildkit/issues/4281) - Fix possible panic condition on deleting history records [#​4451](https://togithub.com/moby/buildkit/issues/4451) - Fix issue where same source image layer chains could end up in the provenance attestation multiple times [#​4433](https://togithub.com/moby/buildkit/issues/4433) - Fix possible pull error caused by previous cache [#​4428](https://togithub.com/moby/buildkit/issues/4428) - Fix possible data race on transfer progress handling [#​4726](https://togithub.com/moby/buildkit/issues/4726) - Fix issues where session messages could grow bigger than maximum message size when transferring SBOM to client [#​4313](https://togithub.com/moby/buildkit/issues/4313) - Fix issue where specific build steps could drop progress messages [#​4347](https://togithub.com/moby/buildkit/issues/4347) - Fix possible wrong usage statitics in merged snapshotters [#​4389](https://togithub.com/moby/buildkit/issues/4389) - Fix possible storage leak for compression variants [#​4353](https://togithub.com/moby/buildkit/issues/4353) - Fix handling of certain SSH Git URLs [#​4326](https://togithub.com/moby/buildkit/issues/4326) - Fix possible missing blob error on mapping files to SBOM packages [#​4210](https://togithub.com/moby/buildkit/issues/4210) - Fix diffing layers when custom Gzip compression level is set [#​4275](https://togithub.com/moby/buildkit/issues/4275) - Fix possible panic with stargz snapshotter [#​4187](https://togithub.com/moby/buildkit/issues/4187) - Fix generation of cache checksums for Merge and Diff operations [#​4192](https://togithub.com/moby/buildkit/issues/4192) - Fix possible negative pull time in progressbar on parallel pulls [#​4183](https://togithub.com/moby/buildkit/issues/4183) - Fix handling of missing files in LLB File remove API [#​4051](https://togithub.com/moby/buildkit/issues/4051) ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`43070de`](https://togithub.com/moby/buildkit/commit/43070de90fa1) -> [`ced1acd`](https://togithub.com/moby/buildkit/commit/ced1acdcaa24) - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://togithub.com/moby/buildkit/commit/5330a85ea652) -> [`8075edf`](https://togithub.com/moby/buildkit/commit/8075edf89bb0) - **github.com/Microsoft/hcsshim** v0.10.0-rc.8 -> v0.11.4 - **github.com/aws/aws-sdk-go-v2** v1.17.6 -> v1.24.1 - **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream** v1.4.10 -> v1.5.4 - **github.com/aws/aws-sdk-go-v2/config** v1.18.16 -> v1.26.6 - **github.com/aws/aws-sdk-go-v2/credentials** v1.13.16 -> v1.16.16 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.12.24 -> v1.14.11 - **github.com/aws/aws-sdk-go-v2/feature/s3/manager** v1.11.56 -> v1.15.15 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.1.30 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.4.24 -> v2.5.10 - **github.com/aws/aws-sdk-go-v2/internal/ini** v1.3.31 -> v1.7.3 - **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.0.22 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.9.11 -> v1.10.4 - **github.com/aws/aws-sdk-go-v2/service/internal/checksum** v1.1.25 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.9.24 -> v1.10.10 - **github.com/aws/aws-sdk-go-v2/service/internal/s3shared** v1.13.24 -> v1.16.10 - **github.com/aws/aws-sdk-go-v2/service/s3** v1.30.6 -> v1.48.1 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.12.5 -> v1.18.7 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.14.5 -> v1.21.7 - **github.com/aws/aws-sdk-go-v2/service/sts** v1.18.6 -> v1.26.7 - **github.com/aws/smithy-go** v1.13.5 -> v1.19.0 - **github.com/cenkalti/backoff/v4** v4.2.0 -> v4.2.1 - **github.com/containerd/console** v1.0.3 -> v1.0.4 - **github.com/containerd/containerd** v1.7.2 -> v1.7.13 - **github.com/containerd/continuity** v0.4.1 -> v0.4.3 - **github.com/containerd/fuse-overlayfs-snapshotter** v1.0.2 -> v1.0.8 - **github.com/containerd/log** v0.1.0 ***new*** - **github.com/containerd/nydus-snapshotter** v0.8.2 -> v0.13.7 - **github.com/containerd/stargz-snapshotter** v0.14.3 -> v0.15.1 - **github.com/containerd/stargz-snapshotter/estargz** v0.14.3 -> v0.15.1 - **github.com/containernetworking/plugins** v1.4.0 ***new*** - **github.com/distribution/reference** v0.5.0 ***new*** - **github.com/docker/cli** v24.0.4 -> v25.0.3 - **github.com/docker/docker** [`8e51b8b`](https://togithub.com/moby/buildkit/commit/8e51b8b59cb8) -> v25.0.3 - **github.com/docker/docker-credential-helpers** v0.7.0 -> v0.8.0 - **github.com/docker/go-connections** v0.4.0 -> v0.5.0 - **github.com/felixge/fgprof** v0.9.3 ***new*** - **github.com/felixge/httpsnoop** v1.0.3 -> v1.0.4 - **github.com/go-logr/logr** v1.2.3 -> v1.3.0 - **github.com/golang-jwt/jwt/v4** v4.4.2 -> v4.5.0 - **github.com/google/go-cmp** v0.5.9 -> v0.6.0 - **github.com/google/pprof** [`e72429f`](https://togithub.com/moby/buildkit/commit/e72429f035bd) ***new*** - **github.com/google/uuid** v1.3.0 -> v1.5.0 - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.11.3 -> v2.16.0 - **github.com/hanwen/go-fuse/v2** v2.2.0 -> v2.4.0 - **github.com/hashicorp/go-retryablehttp** v0.7.2 -> v0.7.5 - **github.com/klauspost/compress** v1.17.2 -> v1.17.4 - **github.com/moby/docker-image-spec** v1.3.1 ***new*** - **github.com/moby/patternmatcher** v0.5.0 -> v0.6.0 - **github.com/moby/sys/mountinfo** v0.6.2 -> v0.7.1 - **github.com/moby/sys/user** v0.1.0 ***new*** - **github.com/moby/term** v0.5.0 ***new*** - **github.com/opencontainers/image-spec** v1.1.0-rc3 -> v1.1.0-rc5 - **github.com/opencontainers/runtime-spec** v1.1.0-rc.2 -> v1.1.0 - **github.com/pkg/profile** v1.5.0 -> v1.7.0 - **github.com/prometheus/client_golang** v1.14.0 -> v1.17.0 - **github.com/prometheus/client_model** v0.3.0 -> v0.5.0 - **github.com/prometheus/common** v0.42.0 -> v0.44.0 - **github.com/prometheus/procfs** v0.9.0 -> v0.12.0 - **github.com/serialx/hashring** [`8b29126`](https://togithub.com/moby/buildkit/commit/8b2912629002) -> [`22c0c7a`](https://togithub.com/moby/buildkit/commit/22c0c7ab6b1b) - **github.com/sirupsen/logrus** v1.9.0 -> v1.9.3 - **github.com/spdx/tools-golang** v0.5.1 -> v0.5.3 - **github.com/stretchr/testify** v1.8.3 -> v1.8.4 - **github.com/tonistiigi/fsutil** [`36ef4d8`](https://togithub.com/moby/buildkit/commit/36ef4d8c0dbb) -> [`7525a1a`](https://togithub.com/moby/buildkit/commit/7525a1af2bb5) - **github.com/tonistiigi/go-actions-cache** [`0bdeb6e`](https://togithub.com/moby/buildkit/commit/0bdeb6e1eac7) -> [`a0b64f3`](https://togithub.com/moby/buildkit/commit/a0b64f338598) - **github.com/urfave/cli** v1.22.12 -> v1.22.14 - **github.com/vbatts/tar-split** v0.11.2 -> v0.11.5 - **github.com/vishvananda/netlink** v1.2.1-beta.2 ***new*** - **github.com/vishvananda/netns** v0.0.4 ***new*** - **go.etcd.io/bbolt** v1.3.7 -> v1.3.9 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/otel** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/jaeger** v1.14.0 -> v1.17.0 - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/prometheus** v0.42.0 ***new*** - **go.opentelemetry.io/otel/metric** v0.37.0 -> v1.21.0 - **go.opentelemetry.io/otel/sdk** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/sdk/metric** v1.21.0 ***new*** - **go.opentelemetry.io/otel/trace** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/proto/otlp** v0.19.0 -> v1.0.0 - **google.golang.org/genproto** [`7f2fa6f`](https://togithub.com/moby/buildkit/commit/7f2fa6fef1f4) -> [`49dd2c1`](https://togithub.com/moby/buildkit/commit/49dd2c1f3d0b) - **google.golang.org/genproto/googleapis/api** [`49dd2c1`](https://togithub.com/moby/buildkit/commit/49dd2c1f3d0b) ***new*** - **google.golang.org/genproto/googleapis/rpc** [`49dd2c1`](https://togithub.com/moby/buildkit/commit/49dd2c1f3d0b) ***new*** - **google.golang.org/grpc** v1.53.0 -> v1.59.0 Previous release can be found at [v0.12.5](https://togithub.com/moby/buildkit/releases/tag/v0.12.5) ### [`v0.12.5`](https://togithub.com/moby/buildkit/releases/tag/v0.12.5) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.12.4...v0.12.5) https://hub.docker.com/r/moby/buildkit ##### Notable changes: ##### This release contains following security fixes: - Runc has been updated to v1.1.12 addressing https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv - Fix possible race condition with accessing subpaths from cache mounts https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv - Fix possible host system access from mount stub cleaner https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8 - Fix interactive containers API validation against entitlements https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g - Fix possible panic when incorrect parameters sent from frontend https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx ### [`v0.12.4`](https://togithub.com/moby/buildkit/releases/tag/v0.12.4) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.12.3...v0.12.4) Welcome to the 0.12.4 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible concurrent map access on remote cache export [#​4346](https://togithub.com/moby/buildkit/issues/4346) - Fix hang on debug server listener [#​4361](https://togithub.com/moby/buildkit/issues/4361) - Fix possible deadlock in History API under high number of parallel builds [#​4362](https://togithub.com/moby/buildkit/issues/4362) - Fix possible panic on handling deleted records in History API [#​4451](https://togithub.com/moby/buildkit/issues/4451) - Fix possible data corruption in zstd library [#​4372](https://togithub.com/moby/buildkit/issues/4372) ### [`v0.12.3`](https://togithub.com/moby/buildkit/releases/tag/v0.12.3) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.12.2...v0.12.3) Welcome to the 0.12.3 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible duplicate source files in provenance attestation for chained builds [#​4190](https://togithub.com/moby/buildkit/issues/4190) - Fix possible negative step time in progressbar for step shared with other build request [#​4183](https://togithub.com/moby/buildkit/issues/4183) - Fix properly closing history and cache DB on shutdown to avoid corruption [#​4185](https://togithub.com/moby/buildkit/issues/4185) [#​4189](https://togithub.com/moby/buildkit/issues/4189) - Fix incorrect error handling for invalid HTTP source URLs [#​4201](https://togithub.com/moby/buildkit/issues/4201) - Fix fallback cases for ambiguous insecure configuration provided for registry used as push target. [#​4299](https://togithub.com/moby/buildkit/issues/4299) - Fix possible data race with parallel image config resolves [#​4157](https://togithub.com/moby/buildkit/issues/4157) - Fix regression in v0.12 for clients waiting on buildkitd to become available [#​4200](https://togithub.com/moby/buildkit/issues/4200) - Fix Cgroup NS handling for hosts supporting only CgroupV1 [#​4308](https://togithub.com/moby/buildkit/issues/4308) ### [`v0.12.2`](https://togithub.com/moby/buildkit/releases/tag/v0.12.2) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.12.1...v0.12.2) Welcome to the 0.12.2 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible discarded network error when exporting result to client [#​4117](https://togithub.com/moby/buildkit/issues/4117) - Avoid unnecessary memory allocations when writing build progress [#​4116](https://togithub.com/moby/buildkit/issues/4116) ### [`v0.12.1`](https://togithub.com/moby/buildkit/releases/tag/v0.12.1) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.12.0...v0.12.1) Welcome to the 0.12.1 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible goroutine leak in resource monitor for failed containers [#​4081](https://togithub.com/moby/buildkit/issues/4081) - Fix possible tracing socket path length error on some configurations [#​3483](https://togithub.com/moby/buildkit/issues/3483) ### [`v0.12.0`](https://togithub.com/moby/buildkit/releases/tag/v0.12.0) [Compare Source](https://togithub.com/moby/buildkit/compare/v0.11.6...v0.12.0) buildkit 0.12.0 Welcome to the 0.12.0 release of buildkit! *This is a pre-release of buildkit* Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Tõnis Tiigi - Justin Chadwell - CrazyMax - Sebastiaan van Stijn - Akihiro Suda - Erik Sipsma - Gabriel Adrian Samfira - Kohei Tokunaga - Alex Couture-Beil - Cory Bennett - Brian Goff - Nick Santos - Wei Zhang - Alex Suraci - Alexis Murzeau - Changwei Ge - David Karlsson - Paweł Gronowski - Aaron Lehmann - Jordan Goasdoue - Seiya Miyata - Ben Longo - Jacob Gillespie - Alan Fregtman - Andy Alt - Bertrand Paquet - Chaerim Yeo - Chris Goller - Cory Snider - Dan Duvall - Gabriel - Gahl Saraf - George - Hugo Santos - Ilya Dmitrichenko - Kang, Matthew - Matias Insaurralde - Matt Kang - Nick Miyake - Pranav Pandit - Sertac Ozercan - Vladislav Ivanov - Yan Song - Yurii Rashkovskii - [@​ggjulio](https://togithub.com/ggjulio) - [@​chengjoey](https://togithub.com/chengjoey) - [@​lomot](https://togithub.com/lomot) ##### Notable Changes - Default Dockerfile frontend has been updated to [1.6.0](https://togithub.com/moby/buildkit/releases/tag/dockerfile%2F1.6.0) - Remote cache export/import to the registry now supports OCI image manifest compatible format when setting `image-manifest=true` [#​3724](https://togithub.com/moby/buildkit/issues/3724) - Local and Tar exporters now support `platform-split=false` option to merge all artifacts for multiple platforms to the same directory. [#​3161](https://togithub.com/moby/buildkit/issues/3161) - Provenance attestation can now capture resource usage information for the system and individual build steps. This information can be written to exported attestation by setting `capture-usage=true` attestation option and is set automatically for History API records. This feature depends on CgroupV2, and some fields require kernel configured with `CONFIG_PSI` enabled. [#​3860](https://togithub.com/moby/buildkit/issues/3860) [#​3999](https://togithub.com/moby/buildkit/issues/3999) - `SOURCE_DATE_EPOCH` value for reproducible builds is now set as the creation timestamp when exporting image to containerd image store [#​3263](https://togithub.com/moby/buildkit/issues/3263) - `buildctl` has new `--wait` flag to block RPCs until the connection becomes available [#​3586](https://togithub.com/moby/buildkit/issues/3586) - WCOW support for certain actions has improved [#​3783](https://togithub.com/moby/buildkit/issues/3783) [#​3782](https://togithub.com/moby/buildkit/issues/3782) [#​3907](https://togithub.com/moby/buildkit/issues/3907) [#​3906](https://togithub.com/moby/buildkit/issues/3906) [#​3545](https://togithub.com/moby/buildkit/issues/3545) [#​3544](https://togithub.com/moby/buildkit/issues/3544) [#​3516](https://togithub.com/moby/buildkit/issues/3516) [#​3908](https://togithub.com/moby/buildkit/issues/3908) - Stargz support is out of experimental [#​3637](https://togithub.com/moby/buildkit/issues/3637) - Creating layer blobs now uses deterministic timestamps for whiteout files when Overlay snapshotter is supported for more reproducible builds [#​3981](https://togithub.com/moby/buildkit/issues/3981) - Source policy support now also applies to image config metadata requests. These requests can return a new source reference defined by the policy that the frontend can use in follow-up LLB requests. [#​3956](https://togithub.com/moby/buildkit/issues/3956) [#​4014](https://togithub.com/moby/buildkit/issues/4014) - Sourcemaps in provenance attestations and errors now allow setting the source language name [#​3620](https://togithub.com/moby/buildkit/issues/3620) - File operations are now always platform-independent for better direct cache reuse [#​3858](https://togithub.com/moby/buildkit/issues/3858) - When exporting an image to Containerd image store, unpack logic now works for multi-platform images by unpacking only the native platform by default [#​3982](https://togithub.com/moby/buildkit/issues/3982) [#​3983](https://togithub.com/moby/buildkit/issues/3983) - Cgroup namespace isolation is enabled for containers on supported systems [#​4003](https://togithub.com/moby/buildkit/issues/4003) - New DockerUI package is provided by frontend authors who want to target `docker buildx` flags without the need to copy code from Dockerfile frontend [#​3606](https://togithub.com/moby/buildkit/issues/3606) - Downloading image layers in the exporter can now work in parallel for different platforms [#​3984](https://togithub.com/moby/buildkit/issues/3984) - Zstd compressed layers are now supported also with Docker-style mediatypes [#​3968](https://togithub.com/moby/buildkit/issues/3968) - Secret environment variables can now be set using the interactive container API [#​3957](https://togithub.com/moby/buildkit/issues/3957) - TOML buildkitd config now supports multiple units for storage limits [#​3773](https://togithub.com/moby/buildkit/issues/3773) - gRPC API now enables reflection [#​3790](https://togithub.com/moby/buildkit/issues/3790) - HTTP sources now have better caching for servers that handle `Accept-Encoding` differently for different HTTP methods [#​3745](https://togithub.com/moby/buildkit/issues/3745) [#​3788](https://togithub.com/moby/buildkit/issues/3788) - New `buildctl` commands `debug histories` and `prune-histories` [#​3498](https://togithub.com/moby/buildkit/issues/3498) - Loading SBOM generator image can now be configured with resolve mode parameter [#​3446](https://togithub.com/moby/buildkit/issues/3446) - Gateway frontend source image can now be set with defining named context [#​3633](https://togithub.com/moby/buildkit/issues/3633) - Performance improvements to scanning local files for context upload [#​3977](https://togithub.com/moby/buildkit/issues/3977) - Interactive container API now supports setting container Hostname [#​3680](https://togithub.com/moby/buildkit/issues/3680) - History API now uses a separate Containerd namespace for its objects, fixing some issues when the same blobs are used by image store [#​3833](https://togithub.com/moby/buildkit/issues/3833) - Make files created by Git source more deterministic [#​3598](https://togithub.com/moby/buildkit/issues/3598) - Git source now handles URLs that define subdir and empty reference [#​3596](https://togithub.com/moby/buildkit/issues/3596) - Remote cache export now supports `registry.insecure` option like the Image exporter [#​3501](https://togithub.com/moby/buildkit/issues/3501) - Azure Blob storage cache export supports setting the account name as parameter [#​3476](https://togithub.com/moby/buildkit/issues/3476) - New client APIs for configuring TLS authentication to use system certificates [#​3760](https://togithub.com/moby/buildkit/issues/3760) - Fixes for copying Unicode filenames with local context [#​3946](https://togithub.com/moby/buildkit/issues/3946) [#​4009](https://togithub.com/moby/buildkit/issues/4009) - Fix the issue where some builds could fail with "missing provenance" error [#​3945](https://togithub.com/moby/buildkit/issues/3945) - Fix lazy loaded layers reuse for cache when running parallel builds [#​3109](https://togithub.com/moby/buildkit/issues/3109) - Fix issue with missing GC label for layers when exporting image to containerd image store [#​3161](https://togithub.com/moby/buildkit/issues/3161) - Fix possible progressbar panic on resizing terminal window [#​3967](https://togithub.com/moby/buildkit/issues/3967) - Fix possible "inconsistent graph state" error when running parallel cached, and no-cache builds [#​3953](https://togithub.com/moby/buildkit/issues/3953) - Fix possible zero build step index numbers on progressbar [#​3942](https://togithub.com/moby/buildkit/issues/3942) [#​3838](https://togithub.com/moby/buildkit/issues/3838) - Fix possible "container does not exist" error [#​3940](https://togithub.com/moby/buildkit/issues/3940) - Fix possible "concurrent map read and write" error [#​3938](https://togithub.com/moby/buildkit/issues/3938) - Fix possible issue where the status stream could be missing for History record [#​3937](https://togithub.com/moby/buildkit/issues/3937) - Fix possible data races [#​4004](https://togithub.com/moby/buildkit/issues/4004) [#​3994](https://togithub.com/moby/buildkit/issues/3994) [#​4010](https://togithub.com/moby/buildkit/issues/4010) - Fix OCI layout URIs in provenance attestation [#​3918](https://togithub.com/moby/buildkit/issues/3918) - Fix regression bug in v0.11.x OpenTelemetry trace delegation from the client [#​3909](https://togithub.com/moby/buildkit/issues/3909) - Fix possible deadlock on network error [#​3857](https://togithub.com/moby/buildkit/issues/3857) - Fix filtering out deleted History API records [#​3827](https://togithub.com/moby/buildkit/issues/3827) [#​3733](https://togithub.com/moby/buildkit/issues/3733) - Fix possible build cache reference leak [#​3851](https://togithub.com/moby/buildkit/issues/3851) [#​3815](https://togithub.com/moby/buildkit/issues/3815) - Fix possible FD leak in SSH forwarding [#​3848](https://togithub.com/moby/buildkit/issues/3848) - Fix possible concurrent map access in Client library [#​3813](https://togithub.com/moby/buildkit/issues/3813) - Fixes for Runc container SIGKILL/exit-code handling [#​3754](https://togithub.com/moby/buildkit/issues/3754) [#​3765](https://togithub.com/moby/buildkit/issues/3765) [#​3658](https://togithub.com/moby/buildkit/issues/3658) [#​3722](https://togithub.com/moby/buildkit/issues/3722) - Fix creating `oci-layout` file when exporting uncompressed OCI layout [#​3729](https://togithub.com/moby/buildkit/issues/3729) ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`43070de`](https://togithub.com/moby/buildkit/commit/43070de90fa1) ***new*** - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://togithub.com/moby/buildkit/commit/5330a85ea652) ***new*** - **github.com/Masterminds/semver/v3** v3.1.0 ***new*** - **github.com/Microsoft/go-winio** v0.5.2 -> v0.6.1 - **github.com/Microsoft/hcsshim** v0.9.6 -> v0.10.0-rc.8 - **github.com/anchore/go-struct-converter** [`c68fdcf`](https://togithub.com/moby/buildkit/commit/c68fdcfa2092) ***new*** - **github.com/aws/aws-sdk-go-v2** v1.16.3 -> v1.17.6 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.14.5 ***new*** - **github.com/aws/smithy-go** v1.11.2 -> v1.13.5 - **github.com/containerd/cgroups** v1.0.4 -> v1.1.0 - **github.com/containerd/containerd** v1.6.14 -> v1.7.2 - **github.com/containerd/continuity** v0.3.0 -> v0.4.1 - **github.com/containerd/fifo** v1.0.0 -> v1.1.0 - **github.com/containerd/go-cni** v1.1.6 -> v1.1.9 - **github.com/containerd/go-runc** v1.0.0 -> v1.1.0 - **github.com/containerd/nydus-snapshotter** v0.3.1 -> v0.8.2 - **github.com/containerd/stargz-snapshotter** v0.13.0 -> v0.14.3 - **github.com/containerd/ttrpc** v1.1.0 -> v1.2.2 - **github.com/containerd/typeurl/v2** v2.1.1 ***new*** - **github.com/containernetworking/cni** v1.1.1 -> v1.1.2 - **github.com/cyphar/filepath-securejoin** v0.2.3 ***new*** - **github.com/docker/cli** v23.0.0-rc.1 -> v24.0.2 - **github.com/docker/distribution** v2.8.1 -> v2.8.2 - **github.com/docker/docker** v23.0.0-rc.1 -> [`98d3da7`](https://togithub.com/moby/buildkit/commit/98d3da79ef9c) - **github.com/felixge/httpsnoop** v1.0.2 -> v1.0.3 - **git

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] commented 1 month ago

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

Details:

Package Change
go 1.21.9 -> 1.22.5
github.com/aws/aws-sdk-go-v2/config v1.19.0 -> v1.26.6
github.com/aws/aws-sdk-go-v2/service/s3 v1.31.0 -> v1.48.1
github.com/docker/cli v24.0.6+incompatible -> v27.0.3+incompatible
github.com/hashicorp/go-retryablehttp v0.7.2 -> v0.7.7
golang.org/x/mod v0.16.0 -> v0.17.0
golang.org/x/text v0.14.0 -> v0.15.0
github.com/Microsoft/hcsshim v0.11.4 -> v0.11.7
github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.23 -> v1.2.10
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.17.3 -> v1.21.7
github.com/distribution/reference v0.5.0 -> v0.6.0
github.com/go-jose/go-jose/v3 v3.0.1 -> v3.0.3
github.com/Microsoft/go-winio v0.6.1 -> v0.6.2
github.com/aws/aws-sdk-go-v2 v1.21.2 -> v1.24.1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.10 -> v1.5.4
github.com/aws/aws-sdk-go-v2/credentials v1.13.43 -> v1.16.16
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.13 -> v1.14.11
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.43 -> v1.2.10
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.37 -> v2.5.10
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.45 -> v1.7.3
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11 -> v1.10.4
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.26 -> v1.2.10
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.37 -> v1.10.10
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.14.0 -> v1.16.10
github.com/aws/aws-sdk-go-v2/service/sso v1.15.2 -> v1.18.7
github.com/aws/aws-sdk-go-v2/service/sts v1.23.2 -> v1.26.7
github.com/aws/smithy-go v1.15.0 -> v1.19.0
github.com/containerd/containerd v1.7.11 -> v1.7.19
github.com/containerd/stargz-snapshotter/estargz v0.14.3 -> v0.15.1
github.com/docker/docker v24.0.7+incompatible -> v27.0.3+incompatible
github.com/docker/docker-credential-helpers v0.8.0 -> v0.8.2
github.com/docker/go-connections v0.4.0 -> v0.5.0
github.com/fatih/color v1.15.0 -> v1.16.0
github.com/hashicorp/go-hclog v1.5.0 -> v1.6.3
github.com/klauspost/compress v1.17.1 -> v1.17.9
github.com/opencontainers/image-spec v1.1.0-rc5 -> v1.1.0
github.com/prometheus/procfs v0.12.0 -> v0.15.1
golang.org/x/crypto v0.22.0 -> v0.23.0
golang.org/x/net v0.21.0 -> v0.25.0
golang.org/x/sync v0.6.0 -> v0.7.0
golang.org/x/sys v0.19.0 -> v0.22.0
golang.org/x/term v0.19.0 -> v0.20.0
sonarcloud[bot] commented 2 hours ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud