Release v0.27.0 · moby/buildkit (original) (raw)

buildkit 0.27.0

Welcome to the v0.27.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Sebastiaan van Stijn
• Justin Chadwell
• Jonathan A. Sternberg
• David Karlsson
• Dawei Wei
• Natnael Gebremariam
• Aleksandr Karpinskii
• Amr Mahdi
• Brian Goff
• Joyal George K J
• Matt Coster
• Roberto Villarreal
• Rodolfo Carvalho
• Silvin Lubecki
• Tiger Kaovilai

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.21.0
• This is a first version of BuildKit with signed release images and artifacts built using Docker Github Builder
• Allow convert decisions from Session Source Policy implementations #6427
• Github Cache backend now support optional signed cache that is cryptographically verified on import #6397
• Provide a gateway interface for reading container filesystems during builds #6262
• Push registry remote cache blobs in parallel for faster uploads #6455
• Cache attestation chain pull-through responses for better performance #6435
• Allow custom AuthConfig providers in client #6408
• Surface policy deny messages in build errors #6458
• Fix Git 2.52 support for matching some error conditions #6452
• Expose the build reference in exporter buildinfo #6424
• Improve expired keys handling in Git signature verification #6412
• Cache gateway forwarder mounts and deduplicate snapshot responses #6387
• Remove development gateway frontend options in favor of build-contexts #6350
• Prevent status stream from closing too early by using an inactivity timeout #6396
• Recover from history.db corruption #6371
• Fix xattr copy failures on SELinux systems #6015
• Fix error return when requesting attestation from non-index image #6473
• Fix possible "digest not found" error when fetching attestation chain due to missing lease #6464
• Fix Windows copy operations around protected files #6369
• Fix possible race condition in gateway bridge forwarder #6355
• Fix concurrency in source policy evaluation to prevent parallel panics #6448

Dependency Changes

• cyphar.com/go-pathrs v0.2.1 new
• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.2 -> v1.20.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.11.0 -> v1.13.1
• github.com/AzureAD/microsoft-authentication-library-for-go v1.4.2 -> v1.6.0
• github.com/asaskevich/govalidator a9d515a09cc2 new
• github.com/aws/aws-sdk-go-v2 v1.38.1 -> v1.39.6
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.0 -> v1.7.2
• github.com/aws/aws-sdk-go-v2/config v1.31.3 -> v1.31.20
• github.com/aws/aws-sdk-go-v2/credentials v1.18.7 -> v1.18.24
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.4 -> v1.18.13
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.4 -> v1.4.13
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.4 -> v2.7.13
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 -> v1.8.4
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.4 -> v1.4.12
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.0 -> v1.13.3
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.8.4 -> v1.9.3
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.4 -> v1.13.13
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.4 -> v1.19.12
• github.com/aws/aws-sdk-go-v2/service/s3 v1.87.1 -> v1.89.1
• github.com/aws/aws-sdk-go-v2/service/sso v1.28.2 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.34.0 -> v1.35.7
• github.com/aws/aws-sdk-go-v2/service/sts v1.38.0 -> v1.40.2
• github.com/aws/smithy-go v1.22.5 -> v1.23.2
• github.com/blang/semver v3.5.1 new
• github.com/cloudflare/circl v1.6.0 -> v1.6.1
• github.com/containerd/cgroups/v3 v3.1.0 -> v3.1.2
• github.com/containerd/containerd/v2 v2.2.0 -> v2.2.1
• github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.6 -> v2.1.7
• github.com/containerd/nydus-snapshotter v0.15.4 -> v0.15.10
• github.com/cyberphone/json-canonicalization 19d51d7fe467 new
• github.com/cyphar/filepath-securejoin v0.6.0 new
• github.com/digitorus/pkcs7 3a137a874352 new
• github.com/digitorus/timestamp 220c5c2851b7 new
• github.com/docker/cli v28.5.0 -> v29.1.4
• github.com/docker/docker-credential-helpers v0.9.3 -> v0.9.5
• github.com/go-openapi/analysis v0.24.1 new
• github.com/go-openapi/errors v0.22.4 new
• github.com/go-openapi/jsonpointer v0.22.1 new
• github.com/go-openapi/jsonreference v0.21.3 new
• github.com/go-openapi/loads v0.23.2 new
• github.com/go-openapi/runtime v0.29.2 new
• github.com/go-openapi/spec v0.22.1 new
• github.com/go-openapi/strfmt v0.25.0 new
• github.com/go-openapi/swag v0.25.3 new
• github.com/go-openapi/swag/cmdutils v0.25.3 new
• github.com/go-openapi/swag/conv v0.25.3 new
• github.com/go-openapi/swag/fileutils v0.25.3 new
• github.com/go-openapi/swag/jsonname v0.25.3 new
• github.com/go-openapi/swag/jsonutils v0.25.3 new
• github.com/go-openapi/swag/loading v0.25.3 new
• github.com/go-openapi/swag/mangling v0.25.3 new
• github.com/go-openapi/swag/netutils v0.25.3 new
• github.com/go-openapi/swag/stringutils v0.25.3 new
• github.com/go-openapi/swag/typeutils v0.25.3 new
• github.com/go-openapi/swag/yamlutils v0.25.3 new
• github.com/go-openapi/validate v0.25.1 new
• github.com/go-viper/mapstructure/v2 v2.4.0 new
• github.com/google/certificate-transparency-go v1.3.2 new
• github.com/google/go-containerregistry v0.20.6 new
• github.com/grafana/regexp a468a5bfb3bc new
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 -> v2.27.3
• github.com/in-toto/attestation v1.1.2 new
• github.com/klauspost/compress v1.18.1 -> v1.18.2
• github.com/moby/go-archive v0.1.0 -> v0.2.0
• github.com/moby/policy-helpers bcaa71c99f14 -> 9fcc1a9ec5c9
• github.com/oklog/ulid v1.3.1 new
• github.com/opencontainers/runtime-spec v1.2.1 -> v1.3.0
• github.com/opencontainers/runtime-tools 0ea5ed0382a2 -> edf4cb3d2116
• github.com/opencontainers/selinux v1.12.0 -> v1.13.1
• github.com/prometheus/otlptranslator v0.0.2 new
• github.com/prometheus/procfs v0.16.1 -> v0.17.0
• github.com/sigstore/protobuf-specs v0.5.0 new
• github.com/sigstore/rekor v1.4.3 new
• github.com/sigstore/rekor-tiles/v2 v2.0.1 new
• github.com/sigstore/sigstore v1.10.0 new
• github.com/sigstore/sigstore-go b5fe07a5a7d7 new
• github.com/sigstore/timestamp-authority/v2 v2.0.2 new
• github.com/sirupsen/logrus v1.9.3 -> v1.9.4
• github.com/spdx/tools-golang v0.5.5 -> v0.5.7
• github.com/theupdateframework/go-tuf/v2 v2.3.0 new
• github.com/tonistiigi/fsutil 586307ad452f -> a2aa163d723f
• github.com/tonistiigi/go-actions-cache 378c5ed1ddd9 -> 54bc28c26fd2
• github.com/transparency-dev/formats 404c0d5b696c new
• github.com/transparency-dev/merkle v0.0.2 new
• go.mongodb.org/mongo-driver v1.17.6 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 -> v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.61.0 -> v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 -> v0.63.0
• go.opentelemetry.io/otel/exporters/prometheus v0.42.0 -> v0.60.0
• go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
• go.yaml.in/yaml/v3 v3.0.4 new
• golang.org/x/term v0.38.0 new
• google.golang.org/genproto/googleapis/api c5933d9347a5 -> f26f9409b101
• google.golang.org/genproto/googleapis/rpc c5933d9347a5 -> f26f9409b101
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.76 -> v1.2.77
• kernel.org/pub/linux/libs/security/libcap/psx v1.2.76 -> v1.2.77
• tags.cncf.io/container-device-interface v1.0.1 -> v1.1.0
• tags.cncf.io/container-device-interface/specs-go v1.0.0 -> v1.1.0

Previous release can be found at v0.26.3