Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bump buildkit to 0.11.4 #10772

Closed
wants to merge 1 commit into from
Closed

bump buildkit to 0.11.4 #10772

wants to merge 1 commit into from

Conversation

ndeloof
Copy link
Contributor

@ndeloof ndeloof commented Jul 5, 2023

Related issue
closes https://github.com/docker/compose/security/dependabot/21

(not mandatory) A picture of a cute animal, if possible in relation to what you did

Signed-off-by: Nicolas De Loof <[email protected]>
@ndeloof ndeloof requested review from milas, glours, laurazard, a team, nicksieger, StefanScherer and ulyssessouza and removed request for a team July 5, 2023 06:53
@glours
Copy link
Contributor

glours commented Jul 10, 2023

I think we should use this PR instead to be sure the version of buildkit is align with the one defined in buildx

Copy link
Member

@thaJeztah thaJeztah left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

see comment below

github.com/moby/buildkit v0.11.0-rc3.0.20230609092854-67a08623b95a
github.com/moby/buildkit v0.11.4
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ v0.11.4 is older than v0.11.0-rc3.0.20230609092854-67a08623b95a. which is actually "v0.12-dev"

The v0.11.0-rc3.0.20230609092854-67a08623b95a pseudo version is based on the last tag that was cut from master (v0.11.0-rc3), which always makes it confusing. (sigh)

But if you look at the commit; moby/buildkit@67a08623b95a, then you'll see it's a commit from master;
Screenshot 2023-07-17 at 01 51 03

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

v0.11.4 is older than v0.11.0-rc3

seriously? 😰

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, go modules tried to be smart and create versions for non-tagged commits, and it does so by;

  • taking the commit
  • find the last tag in the commit's history (in this case: master branch)
  • if the tag cannot be parsed as SemVer, continue with the next one
  • once a "SemVer" tag is found, take the tag and increment "Z" (vX.Y.Z+1)
  • ...and that's what they use as "pseudo version" prefix

Which, erm, doesn't really work if a project uses release-branches, and the last tag was the pre-release before the release-branch was created.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants