fix(deps): update module github.com/moby/buildkit to v0.32.0 #345
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "ci" | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - release-* | |
| pull_request: | |
| branches: | |
| - main | |
| - release-* | |
| permissions: {} | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| path-filter: | |
| name: path-filter | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| permissions: | |
| pull-requests: read | |
| outputs: | |
| code: ${{ steps.filter.outputs.code }} | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - id: filter | |
| uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2 | |
| with: | |
| filters: .github/filters.yaml | |
| validate: | |
| name: validate | |
| runs-on: cncf-ubuntu-4-16-x86 | |
| timeout-minutes: 20 | |
| permissions: | |
| pull-requests: read # For tests/validate/pr-should-include-tests to query PR labels. | |
| env: | |
| # Base commit of this PR; used by the Makefile and the helper scripts to | |
| # compute the commit range (git merge-base $DEST_BRANCH HEAD). | |
| DEST_BRANCH: ${{ github.event.pull_request.base.sha || github.ref_name }} | |
| PR_NUMBER: ${{ github.event.pull_request.number || '' }} | |
| PR_HEAD: ${{ github.event.pull_request.head.sha || '' }} | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| # Check out the actual PR head (not the synthetic merge commit) so | |
| # the commit-range checks validate the contributor's commits. | |
| # Unless on branch push then checkout the normal ref that triggered the job | |
| ref: ${{ github.event.pull_request.head.sha || github.ref }} | |
| # Full history (all branches) is required for git merge-base to find | |
| # the fork point against the base branch. | |
| fetch-depth: 0 | |
| - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 | |
| with: | |
| go-version: stable # use latest go for golangci-lint | |
| cache: false | |
| - name: Install build dependencies | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y \ | |
| gawk \ | |
| libassuan-dev \ | |
| libbtrfs-dev \ | |
| libgpgme-dev \ | |
| libseccomp-dev \ | |
| libsystemd-dev \ | |
| libclone-perl | |
| - name: Install codespell | |
| # Version of codespell bundled with Ubuntu is way old, so use pip. | |
| run: pip install --break-system-packages codespell==v2.4.2 | |
| - name: make validate | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} | |
| run: make validate | |
| vendor: | |
| name: vendor | |
| runs-on: cncf-ubuntu-2-8-x86 | |
| timeout-minutes: 10 | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 | |
| with: | |
| go-version-file: go.mod | |
| cache: true | |
| - name: make vendor | |
| run: | | |
| make vendor | |
| make -C tests/tools vendor | |
| ./hack/tree_status.sh | |
| cross: | |
| name: cross | |
| runs-on: cncf-ubuntu-8-32-x86 | |
| timeout-minutes: 30 | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 | |
| with: | |
| go-version-file: go.mod | |
| cache: true | |
| - name: Build all cross targets | |
| run: make -j4 cross CGO_ENABLED=0 | |
| unit: | |
| needs: [validate, vendor, path-filter] | |
| if: needs.path-filter.outputs.code == 'true' || github.event_name != 'pull_request' | |
| name: unit ${{ matrix.storage }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| storage: [vfs, overlay] | |
| uses: ./.github/workflows/lima.yml | |
| with: | |
| runner: cncf-ubuntu-4-16-x86 | |
| test: unit | |
| storage: ${{ matrix.storage }} | |
| priv: root | |
| distro: fedora-current | |
| timeout: 60 | |
| conformance: | |
| needs: [validate, vendor, path-filter] | |
| if: needs.path-filter.outputs.code == 'true' || github.event_name != 'pull_request' | |
| name: conformance ${{ matrix.storage }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| storage: [vfs, overlay] | |
| uses: ./.github/workflows/lima.yml | |
| with: | |
| runner: cncf-ubuntu-8-32-x86 | |
| test: conformance | |
| storage: ${{ matrix.storage }} | |
| priv: root | |
| distro: debian-sid | |
| timeout: 40 | |
| integration: | |
| needs: [validate, vendor, path-filter] | |
| if: needs.path-filter.outputs.code == 'true' || github.event_name != 'pull_request' | |
| name: integration ${{ matrix.storage }} ${{ matrix.priv }} ${{ matrix.distro }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| distro: [fedora-current, fedora-prior, debian-sid] | |
| storage: [vfs, overlay] | |
| priv: [root, rootless] | |
| include: | |
| - storage: overlay | |
| priv: root | |
| distro: fedora-rawhide | |
| uses: ./.github/workflows/lima.yml | |
| with: | |
| runner: cncf-ubuntu-8-32-x86 | |
| test: integration | |
| storage: ${{ matrix.storage }} | |
| priv: ${{ matrix.priv }} | |
| distro: ${{ matrix.distro }} | |
| timeout: 60 | |
| in_podman: | |
| needs: [validate, vendor, path-filter] | |
| if: needs.path-filter.outputs.code == 'true' || github.event_name != 'pull_request' | |
| name: in_podman | |
| uses: ./.github/workflows/lima.yml | |
| with: | |
| runner: cncf-ubuntu-8-32-x86 | |
| test: in_podman | |
| storage: vfs | |
| priv: root | |
| distro: fedora-current | |
| timeout: 60 | |
| mac: | |
| needs: [validate, vendor] | |
| name: build (darwin) | |
| runs-on: macos-26 | |
| timeout-minutes: 30 | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 | |
| with: | |
| go-version-file: go.mod | |
| cache: true | |
| - name: Build darwin/arm64 | |
| run: make bin/buildah.darwin.arm64 | |
| - name: Build darwin/amd64 | |
| run: make bin/buildah.darwin.amd64 | |
| - name: Upload artifacts | |
| if: always() | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: buildah-darwin | |
| path: bin/buildah.darwin.* | |
| if-no-files-found: error | |
| success: | |
| name: "Total Success" | |
| if: always() | |
| needs: | |
| - path-filter | |
| - validate | |
| - vendor | |
| - cross | |
| - unit | |
| - conformance | |
| - integration | |
| - in_podman | |
| - mac | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check all required jobs | |
| run: | | |
| if [[ "${{ contains(needs.*.result, 'failure') }}" == "true" ]] || \ | |
| [[ "${{ contains(needs.*.result, 'cancelled') }}" == "true" ]]; then | |
| echo "One or more required jobs failed or were cancelled" | |
| exit 1 | |
| fi | |
| echo "All required jobs passed or were skipped" |