v1.18.1

• update BuildKit image to v0.34.1 in #321
• update Buildx version to v0.38.1 in #322

Full Changelog: v1.18.0...v1.18.1

v1.18.0

• build/bake: Support BuildKit secrets through the build-secrets workflow secret, including multiline values and target-specific secrets for Bake. Bake secrets must already be declared in the target definition by @crazy-max in #248
• build/bake: Add opt-in BuildKit proxy networking with buildkit-proxy-network, enabling HTTP(S) request logging and capture of downloaded build materials in provenance by @crazy-max in #280
• build/bake: Add a registry-login input to enable authentication before builds that do not push images, such as builds using private base images with local output. The default auto mode preserves the existing login behavior by @crazy-max in #225
• build/bake: Disable per-job Docker Build summaries to reduce clutter in workflow runs with multiple targets or platforms by @crazy-max in #319
• bake: Pass variables explicitly to Buildx, preventing unrelated runner and workflow environment values from implicitly overriding the Bake definition. Caller-provided variables take precedence over forwarded CI and metadata variables by @crazy-max in #277
• build/bake: Retry fetching Sigstore trust metadata to reduce transient failures when verifying downloaded build tools by @crazy-max in docker/actions-toolkit#1297
• build/bake: Update default runners to Ubuntu 26.04 by @crazy-max in #320
• registry-identities: Support Azure Container Registry and Chainguard authentication through GitHub OIDC, without storing long-lived registry credentials by @crazy-max in #302
• registry-identities: Support additional private Amazon ECR account IDs through account_ids, allowing authentication to multiple accounts in the same region using the assumed role by @crazy-max in #301
• registry-identities: Support an optional scope field for Docker Hub OIDC authentication to control the authentication token's access by @crazy-max in #306
• update Buildx version to v0.38.0 in #285 #289 #298 #309
• update BuildKit image to v0.34.0 in #286 #299 #308
• update github-builder-runtime module to 0.106.0 in #283 #288 #300 #303 #305 #290 #313
• update actions/download-artifact from 8.0.1 to 8.0.2 in #312
• update actions/upload-artifact from 7.0.1 to 7.0.2 in #310 #311
• update aws-actions/configure-aws-credentials from 6.2.3 to 6.3.0 in #284 #293
• update docker/bake-action from 7.3.0 to 7.5.0 in #292 #317
• update docker/build-push-action from 7.3.0 to 7.4.0 in #294
• update docker/setup-buildx-action from 4.3.0 to 4.4.1 in #296
• update docker/setup-qemu-action from 4.2.0 to 4.4.0 in #287 #291

Full Changelog: v1.17.0...v1.18.0

v1.17.0

• bake: allow the default target input to apply by @crazy-max in #275
• bake: fix missing privateRepo output by @crazy-max in #274
• update github-builder-runtime module to 0.95.0 in #279
• update cosign to v3.1.3 in #232
• update BuildKit Syft Scanner image to 1.12.0 in #278
• update docker/setup-buildx-action from 4.2.0 to 4.3.0 in #281

Full Changelog: v1.16.0...v1.17.0

v1.16.0

• build/bake: skip registry identity validation without registry login by @crazy-max in #266
• update Buildx version to v0.36.1 in #268 #272
• update BuildKit image to v0.32.2 in #269 #271
• update docker/login-action from 4.5.1 to 4.6.0 in #270

Full Changelog: v1.15.0...v1.16.0

v1.15.0

• build/bake: registry identities support by @crazy-max in #243
  • Docker Hub OIDC by @crazy-max in #265
  • AWS ECR by @crazy-max in #243 #261 #262 #263
  • GCP WIF by @crazy-max in #244
• build: enable metadata labels and annotations inputs by @crazy-max in #257 #258
• build/bake: fail fast on dependency signature verification errors by @crazy-max in #252
• update BuildKit image to v0.31.2 in #254
• update github-builder-runtime module to 0.94.0 in #253 #260
• update docker/login-action from 4.4.0 to 4.5.1 #264

Full Changelog: v1.14.0...v1.15.0

v1.14.0

• build/bake: add artifact retention days input by @crazy-max in #250

Full Changelog: v1.13.0...v1.14.0

v1.13.0

• build/bake: add reusable workflow job name prefix by @crazy-max in #249
• update BuildKit image to v0.31.1 in #234
• update Buildx version to v0.35.0 in #235
• update github-builder-runtime module to 0.92.0 in #238
• update docker/bake-action from 7.2.0 to 7.3.0 in #240
• update docker/build-push-action from 7.2.0 to 7.3.0 in #242
• update docker/login-action from 4.2.0 to 4.4.0 in #246
• update docker/metadata-action from 6.1.0 to 6.2.0 in #245
• update docker/setup-buildx-action from 4.1.0 to 4.2.0 in #247
• update docker/setup-qemu-action from 4.1.0 to 4.2.0 in #241

Full Changelog: v1.12.0...v1.13.0

v1.12.0

• build/bake: preserve tag refs in git contexts by @crazy-max in #231
• update Binfmt image to qemu-v10.2.3-68 in #228

Full Changelog: v1.11.0...v1.12.0

v1.11.0

• bake: fixed an issue where large builds could fail during image digest extraction by @crazy-max in #227

Full Changelog: v1.10.0...v1.11.0

v1.10.0

• build/bake: inline GitHub runtime handling in workflows by @crazy-max in #216
• build/bake: switch to github-builder-runtime package by @crazy-max in #218
• update docker/bake-action from 7.1.0 to 7.2.0 in #211
• update docker/build-push-action from 7.1.0 to 7.2.0 in #212
• update docker/login-action from 4.1.0 to 4.2.0 in #215
• update docker/metadata-action from 6.0.0 to 6.1.0 in #213
• update docker/setup-buildx-action from 4.0.0 to 4.1.0 in #214
• update docker/setup-qemu-action from 4.0.0 to 4.1.0 in #222

Full Changelog: v1.9.0...v1.10.0