Skip to content

Conversation

@pull
Copy link

@pull pull bot commented Apr 27, 2021

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

tonistiigi and others added 28 commits August 28, 2025 20:17
Support querystring form Git URLs
Initializing ref from checksum has unexpected side effects:
- Short checksum can't be used for fetching
- Default branch would be missing when fetching with keep-git-dir

Signed-off-by: Tonis Tiigi <[email protected]>
dfgitutil: don't initialize ref from checksum
add keep-git-dir and submodules controls for Git querystring URLs
dockerfile: fix client init in testGitQueryString
The `--parents` and `--exclude` options have been part of the labs
channel since 1.7, but have not yet been promoted to stable.

Using the 1.7-labs version in these examples means that users would
be downgrading their Dockerfile syntax from 1.17 (soon 1.18.0) to
a much older syntax.

Let's update the notes to use the latest labs syntax so that users
are not surprised by other features no longer being supported when
using the labs syntax.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
docs: use latest "labs" for --parents and --exclude
dockerfile: enable gitquerystring frontend capability
- Align record selected for export with the record used for alternatives
- Add integration test for ExportTo ErrNotFound

Signed-off-by: Sam Oluwalana <[email protected]>
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/labeler](https://github.com/actions/labeler) from 5 to 6.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@v5...v6)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
solver: Resolve infinite loop when record is ErrNotFound
…setup-go-6

build(deps): bump actions/setup-go from 5 to 6
…labeler-6

build(deps): bump actions/labeler from 5 to 6
…github-script-8

build(deps): bump actions/github-script from 7 to 8
dockerfile: update cni to 1.8.0
The `iter.Seq` returned from `maps.Keys` does not print properly with
`%+v` so it prints the pointer location instead of the contents. Use
`slices.Collect` to collect the iterator into a slice so it can be
printed properly into the error message.

Signed-off-by: Jonathan A. Sternberg <[email protected]>
gateway: no such ref now prints the all refs properly
This fails in `gitSourceHandler` because it can't handle *both* SHA-1 and SHA-256 before Git 2.45 (see PR comments), and there's not a simple way to fix that without newer Git or larger refactoring.

Signed-off-by: Tianon Gravi <[email protected]>
Signed-off-by: Tonis Tiigi <[email protected]>
tonistiigi and others added 30 commits November 4, 2025 09:05
Signed-off-by: Tonis Tiigi <[email protected]>
dockerfile: update runc to 1.3.3
ci: create ubuntu tag for buildx image
Based on the Referrers handler definition in Containerd 2.2

Signed-off-by: Tonis Tiigi <[email protected]>
dockerfile: promote --parents flag from labs
contentutil: allow referrers objects to be moved with CopyChain
dockerfile: promote RUN --security flag from labs
contrib(nvidia): match right apt repo based on os release
ResolveImageConfig was changed to ResolveSourceMetadata long time
ago for cross-source implementation but the worker implementation
was still using old method name with conversions.

Signed-off-by: Tonis Tiigi <[email protected]>
Attestation chain can be used by the client to verify
signature identity of the image.

Signed-off-by: Tonis Tiigi <[email protected]>
Image manifest content is not needed for signature verification as
the verification is against the top index root. Still report
image manifest digest for more info about the reported attestation
subject but clients need to re-resolve it from the root manifest
for signature verification.

Signed-off-by: Tonis Tiigi <[email protected]>
image: move image source resolver away from old interface
Add support for dynamic source policies via client session.

Client session can allow or deny specific source or
ask additional metadata information via sourcemetaresolver if
that is needed to make the decision.

Signed-off-by: Tonis Tiigi <[email protected]>
policysession: dynamic source policy support
go.mod: github.com/containerd/containerd/v2 v2.2.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.