Commit Graph

2282 Commits

Author SHA1 Message Date
Martin Zihlmann 3dc21dd665
make cache tests more strict - fail on layer digest diff 2025-05-26 13:59:06 +01:00
mzihlmann e4a5153d8b
Merge pull request #11 from mzihlmann/release-v1.24.0-2
add changelog
2025-05-25 20:52:30 +01:00
Martin Zihlmann eba8a61a47
add changelog 2025-05-25 20:50:52 +01:00
mzihlmann 985c371d89
Merge pull request #10 from mzihlmann/fix-broken-links
add integration test
2025-05-25 20:40:32 +01:00
Martin Zihlmann abce7eaf4e
add integration test 2025-05-25 20:27:06 +01:00
mzihlmann 1185dfab2c
Merge pull request #8 from mzihlmann/add-labels-on-last-image
drop whitespace diff
2025-05-25 12:44:21 +01:00
mzihlmann 0fb88e98d6
Merge pull request #7 from mzihlmann/test-workflows
drop image signing
2025-05-25 12:43:58 +01:00
Martin Zihlmann 4f4acef03c
drop image signing 2025-05-25 12:43:13 +01:00
Martin Zihlmann 7a6d0f67db
drop whitespace diff 2025-05-25 11:12:36 +01:00
mzihlmann 9a8d6734ae
Merge pull request #5 from mzihlmann/test-workflows
fix CI
2025-05-25 11:10:08 +01:00
mzihlmann 6f15090e58
Merge pull request #6 from mzihlmann/add-labels-on-last-image
fix: preserve labels from base images
2025-05-25 10:50:48 +01:00
Martin Zihlmann 8b49940016
fix: preserve labels from base images 2025-05-25 10:48:16 +01:00
Martin Zihlmann 2da25aa579
redirect image push 2025-05-24 22:43:45 +01:00
mzihlmann b34d005c0e
Merge pull request #4 from mzihlmann/add-labels-on-last-image
fix: intermediate images should not be labelled
2025-05-24 21:05:23 +01:00
mzihlmann 403e688fae
Merge pull request #3 from mzihlmann/fix-broken-links
fix: cache extract fails on invalid symlinks
2025-05-24 21:04:51 +01:00
mzihlmann 4b93823e20
Merge pull request #2 from mzihlmann/ignore-labels
fix: ignore labels on base image for cache
2025-05-24 21:04:09 +01:00
mzihlmann 604a9ed47e
Merge pull request #1 from mzihlmann/ignore-timestamp
fix: sourceImage's CreatedAt timestamp should not be included in cach…
2025-05-24 21:02:49 +01:00
JeromeJu 1d2bff5959
chore(release): release v1.24.0 (#3487) 2025-05-22 22:13:03 -04:00
Michael Plump 3e56c7fd0f
chore: upgrade all the dependencies to their latest versions (#3454)
* chore: go get -u ./...

* chore: go mod tidy

* chore: go mod vendor

* chore: fix compilation for buildkit >= 0.15.0

* chore: upgrade to Go 1.24

* chore: upgrade the Debian container used in an integration test
2025-05-21 09:31:10 -04:00
JeromeJu e716ced006
fix: --body-file flag for gh issue create (#3465) 2025-04-29 12:46:16 -04:00
dependabot[bot] 950a29bf8d
chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.2 (#3446)
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.0 to 4.5.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-29 09:45:12 -04:00
dependabot[bot] 2c3fb7bec9
chore(deps): bump github.com/containerd/containerd from 1.7.20 to 1.7.27 (#3447)
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.20 to 1.7.27.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.20...v1.7.27)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-version: 1.7.27
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-29 06:12:20 -04:00
dependabot[bot] c204380297
chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (#3459)
Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) from 1.17.8 to 1.17.73.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.17.8...feature/s3/manager/v1.17.73)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-version: 1.17.73
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-28 09:24:23 -04:00
Thomas L. Kjeldsen 18f3c35964
fix: upgrade the ca-certificates source to Debian 12 (#3450) 2025-04-28 09:09:34 -04:00
dependabot[bot] 82ed653145
chore(deps): bump docker/build-push-action from 6.3.0 to 6.16.0 (#3464)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.3.0 to 6.16.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](1a162644f9...14487ce63c)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 6.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-28 07:56:53 -04:00
dependabot[bot] 0f6e5d11bf
chore(deps): bump sigstore/cosign-installer from 3.5.0 to 3.8.2 (#3462)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.5.0 to 3.8.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](59acb6260d...3454372f43)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-28 07:55:54 -04:00
dependabot[bot] 4806d801be
chore(deps): bump google-github-actions/auth from 2.1.3 to 2.1.10 (#3463)
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth) from 2.1.3 to 2.1.10.
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](71fee32a0b...ba79af0395)

---
updated-dependencies:
- dependency-name: google-github-actions/auth
  dependency-version: 2.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-28 07:44:44 -04:00
JeromeJu 3cf227e8af
fix: address outdated dependencies for go-git CVE upgrade (#3440) 2025-04-11 13:24:05 -04:00
Martin Zihlmann 3cd564a735
fix: cache extract fails on invalid symlinks 2025-03-22 23:07:08 +00:00
Martin Zihlmann 79ce1d458b
fix: intermediate images should not be labelled 2025-02-16 14:08:40 +00:00
Aswin A 16c43bb973
fix: This PR adresses CVE-2025-21613 by upgrading go-git to v5.13.1 (#3380)
This PR adresses CVE-2025-21613 by upgrading go-git to v5.13.1

Signed-off-by: Aswin A <aswin6303@gmail.com>
2025-02-10 12:41:58 -05:00
Martin Zihlmann e507b78ae6
fix: ignore labels on base image for cache 2024-10-13 04:54:48 +01:00
Martin Zihlmann 8106b5594f
fix: sourceImage's CreatedAt timestamp should not be included in cache key 2024-10-10 12:46:44 +01:00
Aaron Prindle e328007bc1
chore: remove aaron-prindle@ from maintainers (#3290) 2024-08-14 10:41:12 -07:00
dependabot[bot] 45a6d2db9f
chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (#3258)
Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) from 1.17.7 to 1.17.8.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/v1.17.8/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.17.7...v1.17.8)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 10:35:36 -07:00
dependabot[bot] 7a3b8c5970
chore(deps): bump github.com/containerd/containerd from 1.7.19 to 1.7.20 (#3257)
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.19 to 1.7.20.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.19...v1.7.20)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 10:35:16 -07:00
dependabot[bot] e5823bbb9c
chore(deps): bump github.com/moby/sys/signal from 0.7.0 to 0.7.1 (#3256)
Bumps [github.com/moby/sys/signal](https://github.com/moby/sys) from 0.7.0 to 0.7.1.
- [Release notes](https://github.com/moby/sys/releases)
- [Commits](https://github.com/moby/sys/compare/signal/v0.7.0...signal/v0.7.1)

---
updated-dependencies:
- dependency-name: github.com/moby/sys/signal
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 10:34:58 -07:00
dependabot[bot] 6e88fbdc9f
chore(deps): bump google.golang.org/api from 0.187.0 to 0.188.0 (#3255)
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.187.0 to 0.188.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.187.0...v0.188.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 10:34:43 -07:00
dependabot[bot] 8b8cc382a3
chore(deps): bump actions/setup-go from 5.0.1 to 5.0.2 (#3247)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.1 to 5.0.2.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](cdcb360436...0a12ed9d6a)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:29:41 -07:00
dependabot[bot] 9bbd8aa7db
chore(deps): bump AdityaGarg8/remove-unwanted-software from 3 to 4 (#3248)
Bumps [AdityaGarg8/remove-unwanted-software](https://github.com/adityagarg8/remove-unwanted-software) from 3 to 4.
- [Release notes](https://github.com/adityagarg8/remove-unwanted-software/releases)
- [Commits](https://github.com/adityagarg8/remove-unwanted-software/compare/v3...v4)

---
updated-dependencies:
- dependency-name: AdityaGarg8/remove-unwanted-software
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:29:25 -07:00
dependabot[bot] 53e4532ce4
chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (#3250)
Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) from 1.17.5 to 1.17.7.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/v1.17.7/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.17.5...v1.17.7)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:29:08 -07:00
dependabot[bot] c0830f6cd2
chore(deps): bump github.com/containerd/containerd from 1.7.18 to 1.7.19 (#3251)
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.18 to 1.7.19.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.18...v1.7.19)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:28:48 -07:00
dependabot[bot] 725c6dacdc
chore(deps): bump github.com/minio/highwayhash from 1.0.2 to 1.0.3 (#3252)
Bumps [github.com/minio/highwayhash](https://github.com/minio/highwayhash) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/minio/highwayhash/releases)
- [Commits](https://github.com/minio/highwayhash/compare/v1.0.2...v1.0.3)

---
updated-dependencies:
- dependency-name: github.com/minio/highwayhash
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:28:31 -07:00
dependabot[bot] 7825b6bf4f
chore(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 (#3253)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.26.0 to 0.27.0.
- [Commits](https://github.com/golang/net/compare/v0.26.0...v0.27.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-15 09:28:18 -07:00
Mick van Gelderen e1089414cb
fix: prevent panic when image name and stage alias are the same (#3245) 2024-07-10 09:34:45 -07:00
dependabot[bot] 3aa02e0d47
chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#3244)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.64.0 to 1.64.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.64.0...v1.64.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-10 08:45:12 -07:00
Aaron Prindle 1ae9a8416c
chore(release): release v1.23.2 (#3243) 2024-07-09 15:42:43 -07:00
Aaron Prindle 5283199713
deps: bump github.com/moby/buildkit and github.com/docker/docker (#3242) 2024-07-08 13:02:39 -04:00
dependabot[bot] 38f1ad8372
chore(deps): bump docker/build-push-action from 6.1.0 to 6.3.0 (#3236)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.1.0 to 6.3.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](31159d49c0...1a162644f9)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-08 07:06:07 -07:00
dependabot[bot] 1769774a1a
chore(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 (#3235)
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](68827325e0...5927c834f5)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-07 19:37:15 -07:00