project-copacetic / copacetic

🧵 CLI tool for directly patching container images using reports from vulnerability scanners
https://project-copacetic.github.io/copacetic/
Apache License 2.0
843 stars 57 forks source link

chore: bump github.com/docker/buildx from 0.14.1 to 0.15.0 #665

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 2 weeks ago

Bumps github.com/docker/buildx from 0.14.1 to 0.15.0.

Release notes

Sourced from github.com/docker/buildx's releases.

v0.15.0

Welcome to the 0.15.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

  • Tõnis Tiigi
  • CrazyMax
  • Sebastiaan van Stijn
  • Tim Smith
  • Jonathan A. Sternberg
  • Talon Bowler
  • David Karlsson
  • Akihiro Suda
  • Shaun Thompson
  • Arnold Sobanski
  • Guillaume Lours
  • Justin Chadwell
  • Mitsuru Kariya
  • Sumner Warren
  • jaihwan104

Notable Changes

  • New --call option allows setting evaluation method for a build, replacing the previous experimental --print flag. #2498 #2487 #2513 In addition to default "build", the following methods are implemented by Dockerfile frontend:
    • check - Run validation routines for your build configuration. These are the same validations that would show up as warnings during build. There is also shortcut flag --check for this option.
    • outline - Show configuration that would be used by current build, including all the build-args, secrets, SSH etc that your build would use.
    • targets- Show all available targets and their descriptions.
  • New --prefer-index flag has been added to imagetools create command to control the behavior of creating image out of one single-platform image manifest. #2482
  • Kubernetes driver allows configuring deployment timeout #2492
  • New metrics definitions have been added for build warning types #2482 #2507
  • Prune and Disk usage commands now support negative and prefix filters #2473
  • Building Compose files with Bake now supports passing SSH forwarding configuration #2445
  • Compose compatibility has been updated to v2.1.2 #2502 #2425
  • Fix issue with configuring Kubernetes driver with custom TLS certificates #2454
  • Fix concurrent kubeconfig access when loading nodes #2497

Dependency Changes

  • github.com/Microsoft/go-winio v0.6.1 -> v0.6.2
  • github.com/Microsoft/hcsshim v0.11.4 -> v0.11.5
  • github.com/compose-spec/compose-go/v2 v2.0.2 -> v2.1.2
  • github.com/containerd/containerd v1.7.15 -> v1.7.18
  • github.com/containerd/errdefs v0.1.0 new
  • github.com/containerd/ttrpc v1.2.3 -> v1.2.4
  • github.com/creack/pty v1.1.18 -> v1.1.21

... (truncated)

Commits
  • d3a5318 Merge pull request #2513 from tonistiigi/lint-fallback-1.8.0
  • 0496dae build: update lint fallback image to dockerfile 1.8.0
  • 40fcf99 Merge pull request #2512 from tonistiigi/0611-update-buildkit
  • 85c25f7 vendor: update buildkit to v0.14.0
  • 875e4cd Merge pull request #2510 from crazy-max/ci-ubuntu24.04
  • 24cedc6 ci: switch to ubuntu-24.04 runner
  • 59f52c9 Merge pull request #2507 from daghack/update-lint-metric-regex
  • 1e916ae add length check for lint message regex result
  • d342cb9 vendor golang.org/x/text dependency
  • 9fdc99d Update the lint metrics to match agains the rule URL rather than a prefix on ...
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
ashnamehrotra commented 2 weeks ago

@dependabot rebase