Martin Zihlmann
3dc21dd665
make cache tests more strict - fail on layer digest diff
2025-05-26 13:59:06 +01:00
mzihlmann
e4a5153d8b
Merge pull request #11 from mzihlmann/release-v1.24.0-2
...
add changelog
2025-05-25 20:52:30 +01:00
Martin Zihlmann
eba8a61a47
add changelog
2025-05-25 20:50:52 +01:00
mzihlmann
985c371d89
Merge pull request #10 from mzihlmann/fix-broken-links
...
add integration test
2025-05-25 20:40:32 +01:00
Martin Zihlmann
abce7eaf4e
add integration test
2025-05-25 20:27:06 +01:00
mzihlmann
1185dfab2c
Merge pull request #8 from mzihlmann/add-labels-on-last-image
...
drop whitespace diff
2025-05-25 12:44:21 +01:00
mzihlmann
0fb88e98d6
Merge pull request #7 from mzihlmann/test-workflows
...
drop image signing
2025-05-25 12:43:58 +01:00
Martin Zihlmann
4f4acef03c
drop image signing
2025-05-25 12:43:13 +01:00
Martin Zihlmann
7a6d0f67db
drop whitespace diff
2025-05-25 11:12:36 +01:00
mzihlmann
9a8d6734ae
Merge pull request #5 from mzihlmann/test-workflows
...
fix CI
2025-05-25 11:10:08 +01:00
mzihlmann
6f15090e58
Merge pull request #6 from mzihlmann/add-labels-on-last-image
...
fix: preserve labels from base images
2025-05-25 10:50:48 +01:00
Martin Zihlmann
8b49940016
fix: preserve labels from base images
2025-05-25 10:48:16 +01:00
Martin Zihlmann
2da25aa579
redirect image push
2025-05-24 22:43:45 +01:00
mzihlmann
b34d005c0e
Merge pull request #4 from mzihlmann/add-labels-on-last-image
...
fix: intermediate images should not be labelled
2025-05-24 21:05:23 +01:00
mzihlmann
403e688fae
Merge pull request #3 from mzihlmann/fix-broken-links
...
fix: cache extract fails on invalid symlinks
2025-05-24 21:04:51 +01:00
mzihlmann
4b93823e20
Merge pull request #2 from mzihlmann/ignore-labels
...
fix: ignore labels on base image for cache
2025-05-24 21:04:09 +01:00
mzihlmann
604a9ed47e
Merge pull request #1 from mzihlmann/ignore-timestamp
...
fix: sourceImage's CreatedAt timestamp should not be included in cach…
2025-05-24 21:02:49 +01:00
JeromeJu
1d2bff5959
chore(release): release v1.24.0 ( #3487 )
2025-05-22 22:13:03 -04:00
Michael Plump
3e56c7fd0f
chore: upgrade all the dependencies to their latest versions ( #3454 )
...
* chore: go get -u ./...
* chore: go mod tidy
* chore: go mod vendor
* chore: fix compilation for buildkit >= 0.15.0
* chore: upgrade to Go 1.24
* chore: upgrade the Debian container used in an integration test
2025-05-21 09:31:10 -04:00
JeromeJu
e716ced006
fix: --body-file flag for gh issue create ( #3465 )
2025-04-29 12:46:16 -04:00
dependabot[bot]
950a29bf8d
chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.2 ( #3446 )
...
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt ) from 4.5.0 to 4.5.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md )
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.2 )
---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
dependency-version: 4.5.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-29 09:45:12 -04:00
dependabot[bot]
2c3fb7bec9
chore(deps): bump github.com/containerd/containerd from 1.7.20 to 1.7.27 ( #3447 )
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.7.20 to 1.7.27.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.20...v1.7.27 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-version: 1.7.27
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-29 06:12:20 -04:00
dependabot[bot]
c204380297
chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager ( #3459 )
...
Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2 ) from 1.17.8 to 1.17.73.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.17.8...feature/s3/manager/v1.17.73 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
dependency-version: 1.17.73
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-28 09:24:23 -04:00
Thomas L. Kjeldsen
18f3c35964
fix: upgrade the ca-certificates source to Debian 12 ( #3450 )
2025-04-28 09:09:34 -04:00
dependabot[bot]
82ed653145
chore(deps): bump docker/build-push-action from 6.3.0 to 6.16.0 ( #3464 )
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.3.0 to 6.16.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](1a162644f9...14487ce63c )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 6.16.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-28 07:56:53 -04:00
dependabot[bot]
0f6e5d11bf
chore(deps): bump sigstore/cosign-installer from 3.5.0 to 3.8.2 ( #3462 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.5.0 to 3.8.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](59acb6260d...3454372f43 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 3.8.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-28 07:55:54 -04:00
dependabot[bot]
4806d801be
chore(deps): bump google-github-actions/auth from 2.1.3 to 2.1.10 ( #3463 )
...
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth ) from 2.1.3 to 2.1.10.
- [Release notes](https://github.com/google-github-actions/auth/releases )
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md )
- [Commits](71fee32a0b...ba79af0395 )
---
updated-dependencies:
- dependency-name: google-github-actions/auth
dependency-version: 2.1.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-28 07:44:44 -04:00
JeromeJu
3cf227e8af
fix: address outdated dependencies for go-git CVE upgrade ( #3440 )
2025-04-11 13:24:05 -04:00
Martin Zihlmann
3cd564a735
fix: cache extract fails on invalid symlinks
2025-03-22 23:07:08 +00:00
Martin Zihlmann
79ce1d458b
fix: intermediate images should not be labelled
2025-02-16 14:08:40 +00:00
Aswin A
16c43bb973
fix: This PR adresses CVE-2025-21613 by upgrading go-git to v5.13.1 ( #3380 )
...
This PR adresses CVE-2025-21613 by upgrading go-git to v5.13.1
Signed-off-by: Aswin A <aswin6303@gmail.com>
2025-02-10 12:41:58 -05:00
Martin Zihlmann
e507b78ae6
fix: ignore labels on base image for cache
2024-10-13 04:54:48 +01:00
Martin Zihlmann
8106b5594f
fix: sourceImage's CreatedAt timestamp should not be included in cache key
2024-10-10 12:46:44 +01:00
Aaron Prindle
e328007bc1
chore: remove aaron-prindle@ from maintainers ( #3290 )
2024-08-14 10:41:12 -07:00
dependabot[bot]
45a6d2db9f
chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager ( #3258 )
...
Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2 ) from 1.17.7 to 1.17.8.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/v1.17.8/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.17.7...v1.17.8 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 10:35:36 -07:00
dependabot[bot]
7a3b8c5970
chore(deps): bump github.com/containerd/containerd from 1.7.19 to 1.7.20 ( #3257 )
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.7.19 to 1.7.20.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.19...v1.7.20 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 10:35:16 -07:00
dependabot[bot]
e5823bbb9c
chore(deps): bump github.com/moby/sys/signal from 0.7.0 to 0.7.1 ( #3256 )
...
Bumps [github.com/moby/sys/signal](https://github.com/moby/sys ) from 0.7.0 to 0.7.1.
- [Release notes](https://github.com/moby/sys/releases )
- [Commits](https://github.com/moby/sys/compare/signal/v0.7.0...signal/v0.7.1 )
---
updated-dependencies:
- dependency-name: github.com/moby/sys/signal
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 10:34:58 -07:00
dependabot[bot]
6e88fbdc9f
chore(deps): bump google.golang.org/api from 0.187.0 to 0.188.0 ( #3255 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.187.0 to 0.188.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.187.0...v0.188.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 10:34:43 -07:00
dependabot[bot]
8b8cc382a3
chore(deps): bump actions/setup-go from 5.0.1 to 5.0.2 ( #3247 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.0.1 to 5.0.2.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](cdcb360436...0a12ed9d6a )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:29:41 -07:00
dependabot[bot]
9bbd8aa7db
chore(deps): bump AdityaGarg8/remove-unwanted-software from 3 to 4 ( #3248 )
...
Bumps [AdityaGarg8/remove-unwanted-software](https://github.com/adityagarg8/remove-unwanted-software ) from 3 to 4.
- [Release notes](https://github.com/adityagarg8/remove-unwanted-software/releases )
- [Commits](https://github.com/adityagarg8/remove-unwanted-software/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: AdityaGarg8/remove-unwanted-software
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:29:25 -07:00
dependabot[bot]
53e4532ce4
chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager ( #3250 )
...
Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2 ) from 1.17.5 to 1.17.7.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/v1.17.7/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.17.5...v1.17.7 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:29:08 -07:00
dependabot[bot]
c0830f6cd2
chore(deps): bump github.com/containerd/containerd from 1.7.18 to 1.7.19 ( #3251 )
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.7.18 to 1.7.19.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.18...v1.7.19 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:28:48 -07:00
dependabot[bot]
725c6dacdc
chore(deps): bump github.com/minio/highwayhash from 1.0.2 to 1.0.3 ( #3252 )
...
Bumps [github.com/minio/highwayhash](https://github.com/minio/highwayhash ) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/minio/highwayhash/releases )
- [Commits](https://github.com/minio/highwayhash/compare/v1.0.2...v1.0.3 )
---
updated-dependencies:
- dependency-name: github.com/minio/highwayhash
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:28:31 -07:00
dependabot[bot]
7825b6bf4f
chore(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 ( #3253 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.26.0 to 0.27.0.
- [Commits](https://github.com/golang/net/compare/v0.26.0...v0.27.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:28:18 -07:00
Mick van Gelderen
e1089414cb
fix: prevent panic when image name and stage alias are the same ( #3245 )
2024-07-10 09:34:45 -07:00
dependabot[bot]
3aa02e0d47
chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 ( #3244 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.64.0 to 1.64.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.64.0...v1.64.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-10 08:45:12 -07:00
Aaron Prindle
1ae9a8416c
chore(release): release v1.23.2 ( #3243 )
2024-07-09 15:42:43 -07:00
Aaron Prindle
5283199713
deps: bump github.com/moby/buildkit and github.com/docker/docker ( #3242 )
2024-07-08 13:02:39 -04:00
dependabot[bot]
38f1ad8372
chore(deps): bump docker/build-push-action from 6.1.0 to 6.3.0 ( #3236 )
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.1.0 to 6.3.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](31159d49c0...1a162644f9 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-08 07:06:07 -07:00
dependabot[bot]
1769774a1a
chore(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 ( #3235 )
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](68827325e0...5927c834f5 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-07 19:37:15 -07:00