buildx 0.32.0-rc1
Welcome to the v0.32.0-rc1 release of buildx!
This is a pre-release of buildx
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
Contributors
- Tõnis Tiigi
- CrazyMax
- Sebastiaan van Stijn
- Jonathan A. Sternberg
- Akhil Manoj
- David Karlsson
- yzewei
Notable Changes
- Imagetools now supports
--metadata-fileflag to capture properties like descriptor/digest values for the new image. #3638 - Imagetools auth libraries have now been combined with the ones used in
buildcommands, enabling previously missing support for scoped credentials and automatic fallbacks for Docker Hardened Image registries. #3627 - Many commands now support
--timeoutflag to configure the timeout for waiting for responses from remote builders. #3648 - Rego Policy support now supports validating builds from remote sources (Git, HTTP) #3661
- Rego Policies now include new builtins for validating signed Sigstore bundle attestations of HTTP source artifacts. Attestations can also be automatically fetched from Github API #3657
- Rego policies can now use
input.image.provenanceto write rules validating specific provenance attestation fields. Requires BuildKit v0.28+ #3652 - Builds failing due to policy violations now have better error messages with the failing step clearly marked and the last policy logs shown with the error. #3656
- Fix possible passing of incorrect Git auth token for Bake builds when multiple remotes with different hosts exist. #3648
- Named contexts used in different projects now get unique "shared keys" (previously based on context name) to avoid overwriting destinations of other projects, with reduced performance. This feature requires Dockerfile 1.22+ #3618
- Bake builds now capture the original URL information of named contexts sent as inputs in request metadata #3462
- Additional metrics associated with DAP debugger have been added #3633
- DAP file explorer now gets a more accurate state of the file system via updated BuildKit API #3450
- DAP file explorer source names have been improved #3631
- Improve the output of
-qused with--call#3655
Dependency Changes
- github.com/aws/aws-sdk-go-v2 v1.39.6 -> v1.41.1
- github.com/aws/aws-sdk-go-v2/config v1.31.20 -> v1.32.7
- github.com/aws/aws-sdk-go-v2/credentials v1.18.24 -> v1.19.7
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.13 -> v1.18.17
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.13 -> v1.4.17
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.13 -> v2.7.17
- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.3 -> v1.13.4
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.13 -> v1.13.17
- github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 new
- github.com/aws/aws-sdk-go-v2/service/sso v1.30.3 -> v1.30.9
- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.7 -> v1.35.13
- github.com/aws/aws-sdk-go-v2/service/sts v1.40.2 -> v1.41.6
- github.com/aws/smithy-go v1.23.2 -> v1.24.0
- github.com/docker/cli v29.1.5 -> v29.2.1
- github.com/go-openapi/errors v0.22.4 -> v0.22.6
- github.com/go-openapi/jsonpointer v0.22.1 -> v0.22.4
- github.com/go-openapi/jsonreference v0.21.3 -> v0.21.4
- github.com/go-openapi/spec v0.22.1 -> v0.22.3
- github.com/go-openapi/swag v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/cmdutils v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/conv v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/fileutils v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/jsonname v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/jsonutils v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/loading v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/mangling v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/netutils v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/stringutils v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/typeutils v0.25.3 -> v0.25.4
- github.com/go-openapi/swag/yamlutils v0.25.3 -> v0.25.4
- github.com/go-viper/mapstructure/v2 v2.4.0 -> v2.5.0
- github.com/golang/snappy v0.0.4 new
- github.com/google/go-containerregistry v0.20.6 -> v0.20.7
- github.com/in-toto/in-toto-golang v0.9.0 -> v0.10.0
- github.com/klauspost/compress v1.18.2 -> v1.18.4
- github.com/moby/buildkit v0.27.0 -> v0.28.0-rc1
- github.com/moby/moby/api v1.52.0 -> v1.53.0
- github.com/moby/moby/client v0.2.1 -> v0.2.2
- github.com/moby/policy-helpers 9fcc1a9ec5c9 -> 824747bfdd3c
- github.com/pelletier/go-toml/v2 v2.2.4 new
- github.com/secure-systems-lab/go-securesystemslib v0.9.1 -> v0.10.0
- github.com/sigstore/rekor v1.4.3 -> v1.5.0
- github.com/sigstore/sigstore v1.10.0 -> v1.10.4
- github.com/sigstore/sigstore-go b5fe07a5a7d7 -> v1.1.4
- github.com/sigstore/timestamp-authority/v2 v2.0.2 -> v2.0.3
- github.com/theupdateframework/go-tuf/v2 v2.3.0 -> v2.4.1
- google.golang.org/genproto/googleapis/api f26f9409b101 -> ff82c1b0f217
- google.golang.org/genproto/googleapis/rpc f26f9409b101 -> 0a764e51fe1b
- google.golang.org/grpc v1.76.0 -> v1.78.0
Previous release can be found at v0.31.1