Mdocker

Welcome to the 0.10.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`.

Notable changes

- Fix sending the correct origin URL as `vsc:source` metadata 1548
- Fix possible panic from data-race 1504
- Fix regression with `rm --all-inactive` 1547
- Improve attestation access in `imagetools inspect` by lazily loading data 1546
- Correctly mark capabilities request as internal 1538
- Detect invalid attestation configuration 1545
- Update containerd patches to fix possible push regression affecting `imagetools` commands 1559

Dependency Changes

* **github.com/containerd/containerd** v1.6.14 -> 1709cfe273d9
* **github.com/moby/buildkit** v0.11.0 -> v0.11.2

Previous release can be found at [v0.10.0](https://github.com/docker/buildx/releases/tag/v0.10.0)

Welcome to the 0.10.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`.

Notable changes

- Build command supports new flags `--attest` and shorthands `--sbom` and `--provenance` for adding attestations for your current build. `--attest type=sbom` or `--sbom=true` will generate SBOM (Software Bill of Materials) attestation for your build result in SPDX format. `--attest type=provenance` or `--provenance=true` will generate SLSA provenance attestation for your build result with information about how the build was performed. When creating OCI images a minimal provenance attestation is included with the image by default. This feature requires BuildKit v0.11.0+. Read more about advanced SBOM options from [BuildKit docs](https://github.com/moby/buildkit/tree/v0.11.0/docs/attestations). #1412 1475

- When building with BuildKit that supports provenance attestations Buildx will automatically share the version control information of your build context so it can be shown in provenance for later debugging. Previously this only happened when building from a Git URL directly. To opt-out of this behavior you can set `BUILDX_GIT_INFO=0`. Optionally you can also automatically define labels with VCS info by setting `BUILDX_GIT_LABELS=1`. 1462 1297 1341 1468 1477

- Named contexts with `--build-context` now support `oci-layout://` protocol for initializing the context with a value of a local OCI layout directory. E.g. `--build-context stagename=oci-layout://path/to/dir`. This feature requires BuildKit v0.11.0+ and Dockerfile 1.5.0+. 1456

- Bake now supports resource interpolation where you can reuse the values from other target definitions. 1434

- Buildx will now automatically forward `SOURCE_DATE_EPOCH` build-arg if one is defined in your environment. This feature is meant to be used with updated reproducible builds support in BuildKit v0.11.0+ 1482

- Buildx will now remember the last activity for a builder for better organization of builder instances. 1439

- Bake now supports null values for build arguments and label to use the defaults set in Dockerfile 1449

- Imagetools inspect commands now supports showind SBOM and Provenance data 1444 1498

- Increase performance of `buildx ls` and inspect flows 1430 1454 1455 1345

- Adding extra hosts with Docker driver now supports Docker specific "host-gateway" special value 1446

- OCI exporter now supports `tar=false` option for exporting OCI format directly in a directory 1420

- Compose support has been updated to 1.6.0 1387

- `--invoke` can now load default launch environment from the image metadata 1324

- Fix container driver behavior in regards to UserNS 1368

- Fix possible panic in Bake when using wrong variable value type 1442

- Fix possible panic in `imagetools inspect` 1441 1406

- Fix sending empty `--add-host` value to BuildKit by default 1457

- Fix handling progress prefixes with progress groups 1305

- Fix recursively resolving groups in Bake 1313

- Fix possible wrong indentation on multi-node builder manifests 1396

- Fix possible panic from missing OpenTelemetry configuration 1383

- Fix `--progress=tty` behavior when TTY is not available 1371

- Fix connection error conditions in `prune` and `du` commands 1307


Contributors

* CrazyMax
* Justin Chadwell
* Tõnis Tiigi
* David Karlsson
* Sebastiaan van Stijn
* Akihiro Suda
* David Gageot
* Felix de Souza
* Christian Dupuis
* Mark Hildreth
* Nick Sieger
* accetto
* zhyon404


Dependency Changes

* **cloud.google.com/go/compute** v1.12.1 **_new_**
* **cloud.google.com/go/compute/metadata** v0.2.1 **_new_**
* **github.com/aws/aws-sdk-go-v2** v1.16.3 **_new_**
* **github.com/aws/aws-sdk-go-v2/config** v1.15.5 **_new_**
* **github.com/aws/aws-sdk-go-v2/credentials** v1.12.0 **_new_**
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.12.4 **_new_**
* **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.1.10 **_new_**
* **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.4.4 **_new_**
* **github.com/aws/aws-sdk-go-v2/internal/ini** v1.3.11 **_new_**
* **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.9.4 **_new_**
* **github.com/aws/aws-sdk-go-v2/service/sso** v1.11.4 **_new_**
* **github.com/aws/aws-sdk-go-v2/service/sts** v1.16.4 **_new_**
* **github.com/aws/smithy-go** v1.11.2 **_new_**
* **github.com/compose-spec/compose-go** v1.4.0 -> v1.6.0
* **github.com/containerd/containerd** v1.6.6 -> v1.6.14
* **github.com/docker/cli** 418ca3b4d46f -> v23.0.0-rc.1
* **github.com/docker/cli-docs-tool** v0.5.0 -> v0.5.1
* **github.com/docker/docker** a60b458179aa -> v23.0.0-rc.1
* **github.com/docker/docker-credential-helpers** v0.6.4 -> v0.7.0
* **github.com/docker/go-units** v0.4.0 -> v0.5.0
* **github.com/go-logr/logr** v1.2.2 -> v1.2.3
* **github.com/gofrs/flock** v0.7.3 -> v0.8.1
* **github.com/google/go-cmp** v0.5.8 -> v0.5.9
* **github.com/inconshreveable/mousetrap** v1.0.0 -> v1.0.1
* **github.com/klauspost/compress** v1.15.7 -> v1.15.12
* **github.com/moby/buildkit** 55ba9d14360a -> v0.11.0
* **github.com/moby/patternmatcher** v0.5.0 **_new_**
* **github.com/moby/sys/mountinfo** v0.6.2 **_new_**
* **github.com/moby/sys/sequential** v0.5.0 **_new_**
* **github.com/moby/term** 3f7ff695adc6 -> abb19827d345
* **github.com/opencontainers/image-spec** c5a74bcca799 -> 02efb9a75ee1
* **github.com/pelletier/go-toml** v1.9.4 -> v1.9.5
* **github.com/prometheus/client_golang** v1.12.2 -> v1.14.0
* **github.com/prometheus/client_model** v0.2.0 -> v0.3.0
* **github.com/prometheus/common** v0.32.1 -> v0.37.0
* **github.com/prometheus/procfs** v0.7.3 -> v0.8.0
* **github.com/spf13/cobra** v1.5.0 -> v1.6.1
* **github.com/spf13/viper** v1.14.0 **_new_**
* **github.com/stretchr/testify** v1.8.0 -> v1.8.1
* **github.com/tonistiigi/fsutil** 0dbf3a8a7d58 -> fb433841cbfa
* **golang.org/x/crypto** 3147a52a75dd -> v0.2.0
* **golang.org/x/net** cd36cc0744dd -> v0.4.0
* **golang.org/x/oauth2** 2bc19b11175f -> 6fdb5e3db783
* **golang.org/x/sync** 886fb9371eb4 -> v0.1.0
* **golang.org/x/sys** c0bba94af5f8 -> v0.3.0
* **golang.org/x/term** 03fcf44c2211 -> v0.3.0
* **golang.org/x/time** 90d013bbcef8 -> v0.1.0
* **google.golang.org/genproto** 1973136f34c6 -> 1bc688fe9f3e
* **google.golang.org/grpc** v1.47.0 -> v1.50.1

Previous release can be found at [v0.9.1](https://github.com/docker/buildx/releases/tag/v0.9.1)

Welcome to the 0.10.0-rc3 release of buildx!
*This is a pre-release of buildx*

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Notable changes

- Add SBOM/Provenance support to imagetools inspect 1444
- OCI-layout now doesn't require digest to be set 1456
- SOURCE_DATE_EPOCH is now automatically forwarded as build-arg if set 1482

Dependency Changes

* **github.com/containerd/containerd** v1.6.11 -> v1.6.14
* **github.com/docker/cli** v23.0.0-beta.1 -> v23.0.0-rc.1
* **github.com/docker/docker** v23.0.0-beta.1 -> v23.0.0-rc.1
* **github.com/moby/buildkit** 862b22d7e7cf -> v0.11.0-rc4
* **github.com/tonistiigi/fsutil** 0127568185cf -> fb433841cbfa

Previous release can be found at [v0.10.0-rc2](https://github.com/docker/buildx/releases/tag/v0.10.0-rc2)

Welcome to the 0.10.0-rc2 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Notable changes

- Fix handling `BUILDX_GIT_INFO` environment variable 1468

- All build options are now forwarded with the main build request as well as the frontend request 1476

- Bake now supports null values for build arguments and label to use the defaults set in Dockerfile 1449

- Duplicate attestations fields now produce an error https://github.com/docker/buildx/pull/1475

- Reading current commit info from version control system has been updated. The performance on WSL2 has been increased https://github.com/docker/buildx/pull/1477

- Release pipeline for Buildx now produces SBOM and Provenance artifacts 1472

Welcome to the 0.10.0-rc1 release of buildx!
*This is a pre-release of buildx*

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Notable changes

- Build command supports new flags `--attest` and shorthands `--sbom` and `--provenance` for adding attestations for your current build. `--attest type=sbom` or `--sbom=true` will generate SBOM (Software Bill of Materials) attestation for your build result in SPDX format. `--attest type=provenance` or `--provenance=true` will generate SLSA provenance attestation for your build result with information about how the build was performed. When creating OCI images a minimal provenance attestation is included with the image by default. This feature requires BuildKit v0.11. Read more about advanced SBOM options from [BuildKit docs](https://github.com/moby/buildkit/blob/v0.11.0-rc2/docs/sbom.md). #1412

- When building with BuildKit that supports provenance attestations Buildx will automatically share the version control information of your build context so it can be shown in provenance for later debugging. Previously this only happened when building from a Git URL directly. To opt-out of this behavior you can set `BUILDX_GIT_INFO=0`. Optionally you can also automatically define labels with VCS info by setting `BUILDX_GIT_LABELS=1`. 1462 1297 1341

- Named contexts with `--build-context` now support `oci-layout://` protocol for initializing the context with a value of a local OCI layout directory. E.g. `--build-context stagename=oci-layout://path/to/dirsha256:digest`.

- Bake now supports resource interpolation where you can reuse the values from other target definitions. 1434

- Buildx will now remember the last activity for a builder for better organization of builder instances. 1439

- Increase performance of `buildx ls` and inspect flows 1430 1454 1455 1345

- Adding extra hosts with Docker driver now supports Docker specific "host-gateway" special value 1446

- OCI exporter now supports `tar=false` option for exporting OCI format directly in a directory 1420

- Compose support has been updated to 1.6.0 1387

- `--invoke` can now load default launch environment from the image metadata 1324

- Fix container driver behavior in regards to UserNS 1368

- Fix possible panic in Bake when using wrong variable value type 1442

- Fix possible panic in `imagetools inspect` 1441 1406

- Fix sending empty `--add-host` value to BuildKit by default 1457

- Fix handling progress prefixes with progress groups 1305

- Fix recursively resolving groups in Bake 1313

- Fix possible wrong indentation on multi-node builder manifests 1396

- Fix possible panic from missing OpenTelemetry configuration 1383

- Fix `--progress=tty` behavior when TTY is not available 1371

- Fix connection error conditions in `prune` and `du` commands 1307


Contributors

* CrazyMax
* Justin Chadwell
* Tõnis Tiigi
* David Karlsson
* Sebastiaan van Stijn
* Akihiro Suda
* David Gageot
* Felix de Souza
* Christian Dupuis
* Mark Hildreth
* Nick Sieger
* accetto
* zhyon404


Dependency Changes

* **cloud.google.com/go/compute** v1.12.1 **_new_**
* **cloud.google.com/go/compute/metadata** v0.2.1 **_new_**
* **github.com/aws/aws-sdk-go-v2** v1.16.3 **_new_**
* **github.com/aws/aws-sdk-go-v2/config** v1.15.5 **_new_**
* **github.com/aws/aws-sdk-go-v2/credentials** v1.12.0 **_new_**
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.12.4 **_new_**
* **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.1.10 **_new_**
* **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.4.4 **_new_**
* **github.com/aws/aws-sdk-go-v2/internal/ini** v1.3.11 **_new_**
* **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.9.4 **_new_**
* **github.com/aws/aws-sdk-go-v2/service/sso** v1.11.4 **_new_**
* **github.com/aws/aws-sdk-go-v2/service/sts** v1.16.4 **_new_**
* **github.com/aws/smithy-go** v1.11.2 **_new_**
* **github.com/compose-spec/compose-go** v1.4.0 -> v1.6.0
* **github.com/containerd/containerd** v1.6.6 -> v1.6.11
* **github.com/docker/cli** 418ca3b4d46f -> v23.0.0-beta.1
* **github.com/docker/docker** a60b458179aa -> v23.0.0-beta.1
* **github.com/docker/docker-credential-helpers** v0.6.4 -> v0.7.0
* **github.com/docker/go-units** v0.4.0 -> v0.5.0
* **github.com/go-logr/logr** v1.2.2 -> v1.2.3
* **github.com/gofrs/flock** v0.7.3 -> v0.8.1
* **github.com/google/go-cmp** v0.5.8 -> v0.5.9
* **github.com/inconshreveable/mousetrap** v1.0.0 -> v1.0.1
* **github.com/klauspost/compress** v1.15.7 -> v1.15.12
* **github.com/moby/buildkit** 55ba9d14360a -> 862b22d7e7cf
* **github.com/moby/patternmatcher** v0.5.0 **_new_**
* **github.com/moby/sys/sequential** v0.5.0 **_new_**
* **github.com/moby/term** 3f7ff695adc6 -> abb19827d345
* **github.com/opencontainers/image-spec** c5a74bcca799 -> 02efb9a75ee1
* **github.com/pelletier/go-toml** v1.9.4 -> v1.9.5
* **github.com/prometheus/client_golang** v1.12.2 -> v1.14.0
* **github.com/prometheus/client_model** v0.2.0 -> v0.3.0
* **github.com/prometheus/common** v0.32.1 -> v0.37.0
* **github.com/prometheus/procfs** v0.7.3 -> v0.8.0
* **github.com/spf13/cobra** v1.5.0 -> v1.6.1
* **github.com/spf13/viper** v1.14.0 **_new_**
* **github.com/stretchr/testify** v1.8.0 -> v1.8.1
* **github.com/tonistiigi/fsutil** 0dbf3a8a7d58 -> 0127568185cf
* **golang.org/x/crypto** 3147a52a75dd -> v0.2.0
* **golang.org/x/net** cd36cc0744dd -> v0.4.0
* **golang.org/x/oauth2** 2bc19b11175f -> 6fdb5e3db783
* **golang.org/x/sync** 886fb9371eb4 -> v0.1.0
* **golang.org/x/sys** c0bba94af5f8 -> v0.3.0
* **golang.org/x/term** 03fcf44c2211 -> v0.3.0
* **golang.org/x/time** 90d013bbcef8 -> v0.1.0
* **google.golang.org/genproto** 1973136f34c6 -> 1bc688fe9f3e
* **google.golang.org/grpc** v1.47.0 -> v1.50.1

Previous release can be found at [v0.9.1](https://github.com/docker/buildx/releases/tag/v0.9.1)

Notable changes

- Fix regression on building compose files that contain services without a build block 1277
- Ensure used buildkit version also shows up in the inspect command 1279