chore(deps): update dependency docker/buildx to v0.10.4
This MR contains the following updates:
Package | Update | Change |
---|---|---|
docker/buildx | minor |
0.9.1 -> 0.10.4
|
MR created with the help of gitlab-org/frontend/renovate-gitlab-bot
Release Notes
docker/buildx
v0.10.4
Welcome to the 0.10.4 release of buildx!
Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.
Note
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using
--provenance=false
.
Notable changes
- Add
BUILDX_NO_DEFAULT_ATTESTATIONS
as alternative to--provenance false
#1645 - Disable dirty Git checkout detection by default for performance. Can be enabled with
BUILDX_GIT_CHECK_DIRTY
opt-in #1650 - Strip credentials from VCS hint URL before sending to BuildKit #1664
v0.10.3
Welcome to the 0.10.3 release of buildx!
Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.
Note
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using
--provenance=false
.
Notable changes
- Fix reachable commit and warnings on collecting Git provenance info #1592 #1634
- Fix a regression where docker context was not being validated #1596
- Fix function resolution with JSON bake definition #1605
- Fix case where original HCL bake diagnostic is discarded #1607
- Fix labels not correctly set with bake and compose file #1631
v0.10.2
Welcome to the 0.10.2 release of buildx!
Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.
Note
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using
--provenance=false
.
Notable changes
- Fix preferred platforms order not taken into account in multi-node builds #1561
- Fix possible panic on handling
SOURCE_DATE_EPOCH
environment variable #1564 - Fix possible push error on multi-node manifest merge since BuildKit v0.11 on some registries #1566
- Improve warnings on collecting Git provenance info #1568
v0.10.1
Welcome to the 0.10.1 release of buildx!
Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.
Note
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using
--provenance=false
.
Notable changes
- Fix sending the correct origin URL as
vsc:source
metadata #1548 - Fix possible panic from data-race #1504
- Fix regression with
rm --all-inactive
#1547 - Improve attestation access in
imagetools inspect
by lazily loading data #1546 - Correctly mark capabilities request as internal #1538
- Detect invalid attestation configuration #1545
- Update containerd patches to fix possible push regression affecting
imagetools
commands #1559
Dependency Changes
-
github.com/containerd/containerd v1.6.14 ->
1709cfe
- github.com/moby/buildkit v0.11.0 -> v0.11.2
Previous release can be found at v0.10.0
v0.10.0
Welcome to the 0.10.0 release of buildx!
Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.
Note
Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using
--provenance=false
.
Notable changes
-
Build command supports new flags
--attest
and shorthands--sbom
and--provenance
for adding attestations for your current build.--attest type=sbom
or--sbom=true
will generate SBOM (Software Bill of Materials) attestation for your build result in SPDX format.--attest type=provenance
or--provenance=true
will generate SLSA provenance attestation for your build result with information about how the build was performed. When creating OCI images a minimal provenance attestation is included with the image by default. This feature requires BuildKit v0.11.0+. Read more about advanced SBOM options from BuildKit docs. #1412 #1475 -
When building with BuildKit that supports provenance attestations Buildx will automatically share the version control information of your build context so it can be shown in provenance for later debugging. Previously this only happened when building from a Git URL directly. To opt-out of this behavior you can set
BUILDX_GIT_INFO=0
. Optionally you can also automatically define labels with VCS info by settingBUILDX_GIT_LABELS=1
. #1462 #1297 #1341 #1468 #1477 -
Named contexts with
--build-context
now supportoci-layout://
protocol for initializing the context with a value of a local OCI layout directory. E.g.--build-context stagename=oci-layout://path/to/dir
. This feature requires BuildKit v0.11.0+ and Dockerfile 1.5.0+. #1456 -
Bake now supports resource interpolation where you can reuse the values from other target definitions. #1434
-
Buildx will now automatically forward
SOURCE_DATE_EPOCH
build-arg if one is defined in your environment. This feature is meant to be used with updated reproducible builds support in BuildKit v0.11.0+ #1482 -
Buildx will now remember the last activity for a builder for better organization of builder instances. #1439
-
Bake now supports null values for build arguments and label to use the defaults set in Dockerfile #1449
-
Imagetools inspect commands now supports showind SBOM and Provenance data #1444 #1498
-
Increase performance of
buildx ls
and inspect flows #1430 #1454 #1455 #1345 -
Adding extra hosts with Docker driver now supports Docker specific "host-gateway" special value #1446
-
OCI exporter now supports
tar=false
option for exporting OCI format directly in a directory #1420 -
Compose support has been updated to 1.6.0 #1387
-
--invoke
can now load default launch environment from the image metadata #1324 -
Fix container driver behavior in regards to UserNS #1368
-
Fix possible panic in Bake when using wrong variable value type #1442
-
Fix sending empty
--add-host
value to BuildKit by default #1457 -
Fix handling progress prefixes with progress groups #1305
-
Fix recursively resolving groups in Bake #1313
-
Fix possible wrong indentation on multi-node builder manifests #1396
-
Fix possible panic from missing OpenTelemetry configuration #1383
-
Fix
--progress=tty
behavior when TTY is not available #1371 -
Fix connection error conditions in
prune
anddu
commands #1307
Contributors
- CrazyMax
- Justin Chadwell
- Tõnis Tiigi
- David Karlsson
- Sebastiaan van Stijn
- Akihiro Suda
- David Gageot
- Felix de Souza
- Christian Dupuis
- Mark Hildreth
- Nick Sieger
- accetto
- zhyon404
Dependency Changes
- cloud.google.com/go/compute v1.12.1 new
- cloud.google.com/go/compute/metadata v0.2.1 new
- github.com/aws/aws-sdk-go-v2 v1.16.3 new
- github.com/aws/aws-sdk-go-v2/config v1.15.5 new
- github.com/aws/aws-sdk-go-v2/credentials v1.12.0 new
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.4 new
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.10 new
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.4 new
- github.com/aws/aws-sdk-go-v2/internal/ini v1.3.11 new
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.4 new
- github.com/aws/aws-sdk-go-v2/service/sso v1.11.4 new
- github.com/aws/aws-sdk-go-v2/service/sts v1.16.4 new
- github.com/aws/smithy-go v1.11.2 new
- github.com/compose-spec/compose-go v1.4.0 -> v1.6.0
- github.com/containerd/containerd v1.6.6 -> v1.6.14
-
github.com/docker/cli
418ca3b
-> v23.0.0-rc.1 - github.com/docker/cli-docs-tool v0.5.0 -> v0.5.1
-
github.com/docker/docker
a60b458
-> v23.0.0-rc.1 - github.com/docker/docker-credential-helpers v0.6.4 -> v0.7.0
- github.com/docker/go-units v0.4.0 -> v0.5.0
- github.com/go-logr/logr v1.2.2 -> v1.2.3
- github.com/gofrs/flock v0.7.3 -> v0.8.1
- github.com/google/go-cmp v0.5.8 -> v0.5.9
- github.com/inconshreveable/mousetrap v1.0.0 -> v1.0.1
- github.com/klauspost/compress v1.15.7 -> v1.15.12
-
github.com/moby/buildkit
55ba9d1
-> v0.11.0 - github.com/moby/patternmatcher v0.5.0 new
- github.com/moby/sys/mountinfo v0.6.2 new
- github.com/moby/sys/sequential v0.5.0 new
-
github.com/moby/term
3f7ff69
->abb1982
-
github.com/opencontainers/image-spec
c5a74bc
->02efb9a
- github.com/pelletier/go-toml v1.9.4 -> v1.9.5
- github.com/prometheus/client_golang v1.12.2 -> v1.14.0
- github.com/prometheus/client_model v0.2.0 -> v0.3.0
- github.com/prometheus/common v0.32.1 -> v0.37.0
- github.com/prometheus/procfs v0.7.3 -> v0.8.0
- github.com/spf13/cobra v1.5.0 -> v1.6.1
- github.com/spf13/viper v1.14.0 new
- github.com/stretchr/testify v1.8.0 -> v1.8.1
-
github.com/tonistiigi/fsutil
0dbf3a8
->fb43384
-
golang.org/x/crypto
3147a52
-> v0.2.0 -
golang.org/x/net
cd36cc0
-> v0.4.0 -
golang.org/x/oauth2
2bc19b1
->6fdb5e3
-
golang.org/x/sync
886fb93
-> v0.1.0 -
golang.org/x/sys
c0bba94
-> v0.3.0 -
golang.org/x/term
03fcf44
-> v0.3.0 -
golang.org/x/time
90d013b
-> v0.1.0 -
google.golang.org/genproto
1973136
->1bc688f
- google.golang.org/grpc v1.47.0 -> v1.50.1
Previous release can be found at v0.9.1
Configuration
-
If you want to rebase/retry this MR, click this checkbox.
This MR has been generated by Renovate Bot.