murdoc/opencode-sandbox
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases 14 Packages 1 Wiki Activity Actions

chore(deps): update dependency docker/buildx to v0.36.0 #185

Merged
murdoc merged 1 commit from renovate-docker-buildx-0-x into main 2026-07-31 07:20:52 +00:00
Conversation 0 Commits 1 Files changed 1 +1 -1
murdoc commented 2026-07-31 07:20:44 +00:00
Owner
Copy link

This PR contains the following updates:

Package Update Change OpenSSF
docker/buildx minor 0.35.0 → 0.36.0 OpenSSF Scorecard

Release Notes

docker/buildx (docker/buildx)

v0.36.0

Compare Source

Welcome to the v0.36.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors
  • CrazyMax
  • Tõnis Tiigi
  • Sebastiaan van Stijn
  • MohammadHasan Akbari
  • Matt Van Horn
  • amarkdotdev
  • Areeb Ahmed
  • Guillaume Lours
  • Paweł Gronowski
  • Pierre Gimalac
  • s3onghyun
Notables Changes
  • Default source policy can now validate the authenticity of BuildKit release images when creating docker-container builder with docker buildx create command. #​3961
  • Bake command now supports overriding declared secret sources. #​3962
  • Broken builder instances are now correctly handled on removal. #​3934
  • Bake now supports resolving files relative to the bake file location instead of the current working directory with BUILDX_BAKE_FILE_RELATIVE_PATHS=true. #​3935
  • Source policies now support new array.flatten builtin and OPA template strings. #​3913
  • Imagetools commands now do extra validation of the descriptor inputs from files. #​3933
  • Windows release binaries are now code-signed, matching the signing coverage already provided for macOS release artifacts. #​3978
  • Compose compatibility has been updated to v2.13.0. #​3929
  • Fix source policy support on Windows when loading local files inside policy. #​3944
  • Fix Kubernetes driver random load balancer support. #​3861
  • Fix Kubernetes driver builds hanging indefinitely when the remote exec stream ends. #​3966
  • Fix iidfile for containerd-backed Docker driver. #​3952
  • Fix authority pseudo-header when using remote driver. #​3928
  • Fix possible FD leak when using source policies. #​3943
Dependency Changes
  • github.com/Microsoft/go-winio v0.6.2 -> ad3df93
  • github.com/ProtonMail/go-crypto v1.3.0 -> v1.4.1
  • github.com/aws/aws-sdk-go-v2 v1.42.0 -> v1.43.0
  • github.com/aws/aws-sdk-go-v2/config v1.32.24 -> v1.32.31
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.23 -> v1.19.30
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.29 -> v1.18.31
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.29 -> v1.4.31
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29 -> v2.7.31
  • github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30 -> v1.4.32
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12 -> v1.13.13
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.29 -> v1.13.31
  • github.com/aws/aws-sdk-go-v2/service/signin v1.1.5 -> v1.5.0
  • github.com/aws/aws-sdk-go-v2/service/sso v1.31.3 -> v1.33.0
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.6 -> v1.38.0
  • github.com/aws/aws-sdk-go-v2/service/sts v1.43.3 -> v1.45.0
  • github.com/aws/smithy-go v1.27.2 -> v1.27.4
  • github.com/compose-spec/compose-go/v2 v2.10.2 -> v2.13.0
  • github.com/containerd/containerd/api v1.10.0 -> v1.11.1
  • github.com/containerd/containerd/v2 v2.2.4 -> v2.3.3
  • github.com/containerd/ttrpc v1.2.8 -> v1.2.9
  • github.com/docker/cli v29.5.3 -> v29.6.2
  • github.com/go-openapi/errors v0.22.7 -> v0.22.8
  • github.com/go-openapi/loads v0.23.3 -> v0.24.0
  • github.com/go-openapi/runtime v0.32.3 -> v0.32.4
  • github.com/go-openapi/spec v0.22.5 -> v0.22.6
  • github.com/go-openapi/strfmt v0.26.3 -> v0.26.4
  • github.com/go-openapi/swag v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/cmdutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/conv v0.26.0 -> v0.27.0
  • github.com/go-openapi/swag/fileutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/jsonname v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/jsonutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/loading v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/mangling v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/netutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/stringutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/typeutils v0.26.0 -> v0.27.0
  • github.com/go-openapi/swag/yamlutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/validate v0.25.3 -> v0.26.0
  • github.com/google/go-containerregistry v0.21.6 -> v0.21.7
  • github.com/klauspost/compress v1.18.6 -> v1.19.1
  • github.com/lestrrat-go/httprc/v3 v3.0.1 -> v3.0.2
  • github.com/lestrrat-go/jwx/v3 v3.0.11 -> v3.0.13
  • github.com/moby/buildkit v0.31.0 -> v0.32.0
  • github.com/moby/go-archive v0.2.0 -> v0.2.1
  • github.com/moby/moby/api v1.54.2 -> v1.55.0
  • github.com/moby/moby/client v0.4.1 -> v0.5.0
  • github.com/moby/policy-helpers d5411a9 -> 856be88
  • github.com/moby/sys/user v0.4.0 -> v0.4.1
  • github.com/open-policy-agent/opa v1.10.1 -> v1.14.1
  • github.com/segmentio/asm v1.2.0 -> v1.2.1
  • github.com/sigstore/rekor v1.5.2 -> v1.5.3
  • github.com/sigstore/rekor-tiles/v2 5d098a2 -> v2.3.0
  • github.com/sigstore/sigstore-go v1.2.1 -> v1.2.2
  • github.com/tonistiigi/fsutil 0257b33 -> 6d9dc2e
  • github.com/valyala/fastjson v1.6.4 -> v1.6.7
  • github.com/vektah/gqlparser/v2 v2.5.30 -> v2.5.32
  • golang.org/x/crypto v0.52.0 -> v0.54.0
  • golang.org/x/mod v0.36.0 -> v0.38.0
  • golang.org/x/net v0.55.0 -> v0.57.0
  • golang.org/x/sync v0.20.0 -> v0.22.0
  • golang.org/x/sys v0.45.0 -> v0.47.0
  • golang.org/x/term v0.43.0 -> v0.45.0
  • golang.org/x/text v0.37.0 -> v0.40.0
  • golang.org/x/tools v0.45.0 -> v0.47.0
  • google.golang.org/grpc v1.81.1 -> v1.82.1
  • google.golang.org/protobuf v1.36.11 -> f2248ac
  • k8s.io/api v0.35.4 -> v0.36.0
  • k8s.io/apimachinery v0.35.4 -> v0.36.0
  • k8s.io/client-go v0.35.4 -> v0.36.0
  • k8s.io/kube-openapi 589584f -> 5883c5e
  • k8s.io/streaming v0.36.0 new
  • k8s.io/utils bc988d5 -> 28399d8
  • sigs.k8s.io/structured-merge-diff/v6 v6.3.0 -> v6.3.2

Previous release can be found at v0.35.0

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "after 3am and before 6pm"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | OpenSSF | |---|---|---|---| | [docker/buildx](https://github.com/docker/buildx) | minor | `0.35.0` → `0.36.0` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/docker/buildx/badge)](https://securityscorecards.dev/viewer/?uri=github.com/docker/buildx) | --- ### Release Notes <details> <summary>docker/buildx (docker/buildx)</summary> ### [`v0.36.0`](https://github.com/docker/buildx/releases/tag/v0.36.0) [Compare Source](https://github.com/docker/buildx/compare/v0.35.0...v0.36.0) Welcome to the v0.36.0 release of buildx! Please try out the release binaries and report any issues at <https://github.com/docker/buildx/issues>. ##### Contributors - CrazyMax - Tõnis Tiigi - Sebastiaan van Stijn - MohammadHasan Akbari - Matt Van Horn - amarkdotdev - Areeb Ahmed - Guillaume Lours - Paweł Gronowski - Pierre Gimalac - s3onghyun ##### Notables Changes - Default source policy can now validate the authenticity of BuildKit release images when creating docker-container builder with `docker buildx create` command. [#&#8203;3961](https://github.com/docker/buildx/issues/3961) - Bake command now supports overriding declared secret sources. [#&#8203;3962](https://github.com/docker/buildx/issues/3962) - Broken builder instances are now correctly handled on removal. [#&#8203;3934](https://github.com/docker/buildx/issues/3934) - Bake now supports resolving files relative to the bake file location instead of the current working directory with `BUILDX_BAKE_FILE_RELATIVE_PATHS=true`. [#&#8203;3935](https://github.com/docker/buildx/issues/3935) - Source policies now support new `array.flatten` builtin and OPA template strings. [#&#8203;3913](https://github.com/docker/buildx/issues/3913) - Imagetools commands now do extra validation of the descriptor inputs from files. [#&#8203;3933](https://github.com/docker/buildx/issues/3933) - Windows release binaries are now code-signed, matching the signing coverage already provided for macOS release artifacts. [#&#8203;3978](https://github.com/docker/buildx/issues/3978) - Compose compatibility has been updated to v2.13.0. [#&#8203;3929](https://github.com/docker/buildx/issues/3929) - Fix source policy support on Windows when loading local files inside policy. [#&#8203;3944](https://github.com/docker/buildx/issues/3944) - Fix Kubernetes driver random load balancer support. [#&#8203;3861](https://github.com/docker/buildx/issues/3861) - Fix Kubernetes driver builds hanging indefinitely when the remote exec stream ends. [#&#8203;3966](https://github.com/docker/buildx/issues/3966) - Fix iidfile for containerd-backed Docker driver. [#&#8203;3952](https://github.com/docker/buildx/issues/3952) - Fix authority pseudo-header when using remote driver. [#&#8203;3928](https://github.com/docker/buildx/issues/3928) - Fix possible FD leak when using source policies. [#&#8203;3943](https://github.com/docker/buildx/issues/3943) ##### Dependency Changes - **github.com/Microsoft/go-winio** v0.6.2 -> [`ad3df93`](https://github.com/docker/buildx/commit/ad3df93bed29) - **github.com/ProtonMail/go-crypto** v1.3.0 -> v1.4.1 - **github.com/aws/aws-sdk-go-v2** v1.42.0 -> v1.43.0 - **github.com/aws/aws-sdk-go-v2/config** v1.32.24 -> v1.32.31 - **github.com/aws/aws-sdk-go-v2/credentials** v1.19.23 -> v1.19.30 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.29 -> v1.18.31 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.4.29 -> v1.4.31 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.7.29 -> v2.7.31 - **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.4.30 -> v1.4.32 - **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.13.12 -> v1.13.13 - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.13.29 -> v1.13.31 - **github.com/aws/aws-sdk-go-v2/service/signin** v1.1.5 -> v1.5.0 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.31.3 -> v1.33.0 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.36.6 -> v1.38.0 - **github.com/aws/aws-sdk-go-v2/service/sts** v1.43.3 -> v1.45.0 - **github.com/aws/smithy-go** v1.27.2 -> v1.27.4 - **github.com/compose-spec/compose-go/v2** v2.10.2 -> v2.13.0 - **github.com/containerd/containerd/api** v1.10.0 -> v1.11.1 - **github.com/containerd/containerd/v2** v2.2.4 -> v2.3.3 - **github.com/containerd/ttrpc** v1.2.8 -> v1.2.9 - **github.com/docker/cli** v29.5.3 -> v29.6.2 - **github.com/go-openapi/errors** v0.22.7 -> v0.22.8 - **github.com/go-openapi/loads** v0.23.3 -> v0.24.0 - **github.com/go-openapi/runtime** v0.32.3 -> v0.32.4 - **github.com/go-openapi/spec** v0.22.5 -> v0.22.6 - **github.com/go-openapi/strfmt** v0.26.3 -> v0.26.4 - **github.com/go-openapi/swag** v0.26.0 -> v0.26.1 - **github.com/go-openapi/swag/cmdutils** v0.26.0 -> v0.26.1 - **github.com/go-openapi/swag/conv** v0.26.0 -> v0.27.0 - **github.com/go-openapi/swag/fileutils** v0.26.0 -> v0.26.1 - **github.com/go-openapi/swag/jsonname** v0.26.0 -> v0.26.1 - **github.com/go-openapi/swag/jsonutils** v0.26.0 -> v0.26.1 - **github.com/go-openapi/swag/loading** v0.26.0 -> v0.26.1 - **github.com/go-openapi/swag/mangling** v0.26.0 -> v0.26.1 - **github.com/go-openapi/swag/netutils** v0.26.0 -> v0.26.1 - **github.com/go-openapi/swag/stringutils** v0.26.0 -> v0.26.1 - **github.com/go-openapi/swag/typeutils** v0.26.0 -> v0.27.0 - **github.com/go-openapi/swag/yamlutils** v0.26.0 -> v0.26.1 - **github.com/go-openapi/validate** v0.25.3 -> v0.26.0 - **github.com/google/go-containerregistry** v0.21.6 -> v0.21.7 - **github.com/klauspost/compress** v1.18.6 -> v1.19.1 - **github.com/lestrrat-go/httprc/v3** v3.0.1 -> v3.0.2 - **github.com/lestrrat-go/jwx/v3** v3.0.11 -> v3.0.13 - **github.com/moby/buildkit** v0.31.0 -> v0.32.0 - **github.com/moby/go-archive** v0.2.0 -> v0.2.1 - **github.com/moby/moby/api** v1.54.2 -> v1.55.0 - **github.com/moby/moby/client** v0.4.1 -> v0.5.0 - **github.com/moby/policy-helpers** [`d5411a9`](https://github.com/docker/buildx/commit/d5411a945cfc) -> [`856be88`](https://github.com/docker/buildx/commit/856be88baec4) - **github.com/moby/sys/user** v0.4.0 -> v0.4.1 - **github.com/open-policy-agent/opa** v1.10.1 -> v1.14.1 - **github.com/segmentio/asm** v1.2.0 -> v1.2.1 - **github.com/sigstore/rekor** v1.5.2 -> v1.5.3 - **github.com/sigstore/rekor-tiles/v2** [`5d098a2`](https://github.com/docker/buildx/commit/5d098a2b6443) -> v2.3.0 - **github.com/sigstore/sigstore-go** v1.2.1 -> v1.2.2 - **github.com/tonistiigi/fsutil** [`0257b33`](https://github.com/docker/buildx/commit/0257b3308df4) -> [`6d9dc2e`](https://github.com/docker/buildx/commit/6d9dc2ebad62) - **github.com/valyala/fastjson** v1.6.4 -> v1.6.7 - **github.com/vektah/gqlparser/v2** v2.5.30 -> v2.5.32 - **golang.org/x/crypto** v0.52.0 -> v0.54.0 - **golang.org/x/mod** v0.36.0 -> v0.38.0 - **golang.org/x/net** v0.55.0 -> v0.57.0 - **golang.org/x/sync** v0.20.0 -> v0.22.0 - **golang.org/x/sys** v0.45.0 -> v0.47.0 - **golang.org/x/term** v0.43.0 -> v0.45.0 - **golang.org/x/text** v0.37.0 -> v0.40.0 - **golang.org/x/tools** v0.45.0 -> v0.47.0 - **google.golang.org/grpc** v1.81.1 -> v1.82.1 - **google.golang.org/protobuf** v1.36.11 -> [`f2248ac`](https://github.com/docker/buildx/commit/f2248ac996af) - **k8s.io/api** v0.35.4 -> v0.36.0 - **k8s.io/apimachinery** v0.35.4 -> v0.36.0 - **k8s.io/client-go** v0.35.4 -> v0.36.0 - **k8s.io/kube-openapi** [`589584f`](https://github.com/docker/buildx/commit/589584f1c912) -> [`5883c5e`](https://github.com/docker/buildx/commit/5883c5ee87b9) - **k8s.io/streaming** v0.36.0 ***new*** - **k8s.io/utils** [`bc988d5`](https://github.com/docker/buildx/commit/bc988d571ff4) -> [`28399d8`](https://github.com/docker/buildx/commit/28399d86e0b5) - **sigs.k8s.io/structured-merge-diff/v6** v6.3.0 -> v6.3.2 Previous release can be found at [v0.35.0](https://github.com/docker/buildx/releases/tag/v0.35.0) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "after 3am and before 6pm" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuNCIsInVwZGF0ZWRJblZlciI6IjQzLjI2NS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJnaXRodWItcmVsZWFzZXMiLCJtaW5vciIsInJlbm92YXRlIl19-->
chore(deps): update dependency docker/buildx to v0.36.0
Some checks are pending
renovate/stability-days Updates have not met minimum release age requirement
Details
pre-commit-check / pre-commit (pull_request) Successful in 5s
Details
CI Pipeline for building and pushing Docker images (staging and latest) / build_and_push_temp (pull_request) Successful in 13m48s
Details
CI Pipeline for building and pushing Docker images (staging and latest) / trivy_scan (pull_request) Successful in 1m34s
Details
CI Pipeline for building and pushing Docker images (staging and latest) / push_final (pull_request) Successful in 5s
Details
5ca8c20911
murdoc scheduled this pull request to auto merge when all checks succeed 2026-07-31 07:20:44 +00:00
murdoc merged commit 4181d12867 into main 2026-07-31 07:20:52 +00:00
murdoc deleted branch renovate-docker-buildx-0-x 2026-07-31 07:20:52 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
murdoc/opencode-sandbox!185
No description provided.