buildkit 0.26.0-rc1
Welcome to the v0.26.0-rc1 release of buildkit!
This is a pre-release of buildkit
Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.
Contributors
- Tõnis Tiigi
- CrazyMax
- Akihiro Suda
- Sebastiaan van Stijn
- Jonathan A. Sternberg
- Brian Goff
- Dawei Wei
- Alberto Garcia Hierro
- Damon Holden
- David Karlsson
- Dawei Wei
- Mikhail Dmitrichenko
Notable Changes
- Change how file checksum is calculated when wildcards and include/exclude patterns are involved to better align with how they are calculated in the non-wildcard path. #6238
- LLB Copy operation now allows specifying required paths to be included in the copy. #6229
- Source metadata requests via
ResolveSourceMeta, previously available for image sources, can now be performed for Git sources. This can be used to resolve Git commit and tag checksums and also to access the raw commit and tag objects for further verification. #6283 - Source metadata requests via
ResolveSourceMeta, previously available for image sources, can now be performed for HTTP sources. This can be used to access artifact checksums, last-modified time etc. #6285 #6298 - Source metadata requests via
ResolveSourceMetacan now ask for a signed attestation chain for an image in order to validate it. #6330 - Git sources can now perform verification of GPG or SSH signatures on commits and tags. #6300
- A new type of source policy has been added that supports making policy decisions on the client side via session tunnel. #6276
- Avoid intermediate type wrappers for custom fields in provenance. #6275
contentutilpackage now supports moving referrer objects when usingCopyChainfunction. #6336- Handle duplicate inline cache exporter. #6272
- Fix inline cache used with multiple exporters. #6263
- Fixed race condition between cache and snapshot for the Git source. #6281
- Fixed race condition in HTTP cache key digest computation that could cause duplicate requests and digest mismatch errors. #6292
- Fix fetch by commit for git source when tags change or branch names are updated. #6259
- Fix http connection leak when resolving metadata from http source on non-2xx HTTP status codes. #6313
- Fix regression involving cache export error handling. #6261
- Fix handling of annotated Git tags. The pin of the annotated tag should be the SHA of the tag and not the commit it is pointing to. #6251
- Runc container runtime has been updated to v1.3.3. #6331
Dependency Changes
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0 -> v1.18.2
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.0 -> v1.11.0
- github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 -> v1.11.2
- github.com/AzureAD/microsoft-authentication-library-for-go v1.3.2 -> v1.4.2
- github.com/Microsoft/hcsshim v0.13.0 -> v0.14.0-rc.1
- github.com/ProtonMail/go-crypto v1.3.0 new
- github.com/aws/aws-sdk-go-v2 v1.30.3 -> v1.38.1
- github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 -> v1.7.0
- github.com/aws/aws-sdk-go-v2/config v1.27.27 -> v1.31.3
- github.com/aws/aws-sdk-go-v2/credentials v1.17.27 -> v1.18.7
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 -> v1.18.4
- github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.8 -> v1.17.10
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 -> v1.4.4
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 -> v2.7.4
- github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 -> v1.8.3
- github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 -> v1.4.4
- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 -> v1.13.0
- github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 -> v1.8.4
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 -> v1.13.4
- github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 -> v1.19.4
- github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 -> v1.87.1
- github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 -> v1.28.2
- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 -> v1.34.0
- github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 -> v1.38.0
- github.com/aws/smithy-go v1.20.3 -> v1.22.5
- github.com/cenkalti/backoff/v5 v5.0.3 new
- github.com/cloudflare/circl v1.6.0 new
- github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0
- github.com/containerd/containerd/api v1.9.0 -> v1.10.0-rc.0
- github.com/containerd/containerd/v2 v2.1.4 -> v2.2.0-rc.1
- github.com/containerd/go-cni v1.1.12 -> v1.1.13
- github.com/containerd/nydus-snapshotter v0.15.2 -> v0.15.4
- github.com/containerd/stargz-snapshotter v0.16.3 -> v0.17.0
- github.com/containerd/stargz-snapshotter/estargz v0.16.3 -> v0.17.0
- github.com/containernetworking/plugins v1.7.1 -> v1.8.0
- github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
- github.com/docker/cli v28.4.0 -> v28.5.0
- github.com/fatih/color v1.18.0 new
- github.com/go-logr/logr v1.4.2 -> v1.4.3
- github.com/gofrs/flock v0.12.1 -> v0.13.0
- github.com/golang-jwt/jwt/v5 v5.2.2 -> v5.3.0
- github.com/golang/groupcache 41bb18bfe9da -> 2c02b8208cf8
- github.com/google/pprof 27863c87afa6 -> f64d9cf942d6
- github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 -> v2.27.2
- github.com/hanwen/go-fuse/v2 v2.6.3 -> v2.8.0
- github.com/hashicorp/go-retryablehttp v0.7.7 -> v0.7.8
- github.com/hiddeco/sshsig v0.2.0 new
- github.com/klauspost/compress v1.18.0 -> v1.18.1
- github.com/mattn/go-colorable v0.1.14 new
- github.com/moby/policy-helpers bcaa71c99f14 new
- github.com/moby/sys/capability v0.4.0 new
- github.com/opencontainers/runtime-tools 2e043c6bd626 -> 0ea5ed0382a2
- github.com/prometheus/client_golang v1.22.0 -> v1.23.2
- github.com/prometheus/client_model v0.6.1 -> v0.6.2
- github.com/prometheus/common v0.62.0 -> v0.66.1
- github.com/prometheus/procfs v0.15.1 -> v0.16.1
- github.com/secure-systems-lab/go-securesystemslib v0.6.0 -> v0.9.1
- github.com/stretchr/testify v1.10.0 -> v1.11.1
- go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.61.0
- go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 -> v0.61.0
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 -> v0.61.0
- go.opentelemetry.io/otel v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/metric v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/sdk v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/sdk/metric v1.35.0 -> v1.38.0
- go.opentelemetry.io/otel/trace v1.35.0 -> v1.38.0
- go.opentelemetry.io/proto/otlp v1.5.0 -> v1.7.1
- go.yaml.in/yaml/v2 v2.4.2 new
- golang.org/x/exp 7e4ce0ab07d0 -> df9299821621
- google.golang.org/genproto/googleapis/api 56aae31c358a -> c5933d9347a5
- google.golang.org/genproto/googleapis/rpc 56aae31c358a -> c5933d9347a5
- google.golang.org/grpc v1.72.2 -> v1.76.0
- sigs.k8s.io/yaml v1.4.0 -> v1.6.0
Previous release can be found at v0.25.2