v1.18.0

• build/bake: Support BuildKit secrets through the build-secrets workflow secret, including multiline values and target-specific secrets for Bake. Bake secrets must already be declared in the target definition by @crazy-max in #248
• build/bake: Add opt-in BuildKit proxy networking with buildkit-proxy-network, enabling HTTP(S) request logging and capture of downloaded build materials in provenance by @crazy-max in #280
• build/bake: Add a registry-login input to enable authentication before builds that do not push images, such as builds using private base images with local output. The default auto mode preserves the existing login behavior by @crazy-max in #225
• build/bake: Disable per-job Docker Build summaries to reduce clutter in workflow runs with multiple targets or platforms by @crazy-max in #319
• bake: Pass variables explicitly to Buildx, preventing unrelated runner and workflow environment values from implicitly overriding the Bake definition. Caller-provided variables take precedence over forwarded CI and metadata variables by @crazy-max in #277
• build/bake: Retry fetching Sigstore trust metadata to reduce transient failures when verifying downloaded build tools by @crazy-max in docker/actions-toolkit#1297
• build/bake: Update default runners to Ubuntu 26.04 by @crazy-max in #320
• registry-identities: Support Azure Container Registry and Chainguard authentication through GitHub OIDC, without storing long-lived registry credentials by @crazy-max in #302
• registry-identities: Support additional private Amazon ECR account IDs through account_ids, allowing authentication to multiple accounts in the same region using the assumed role by @crazy-max in #301
• registry-identities: Support an optional scope field for Docker Hub OIDC authentication to control the authentication token's access by @crazy-max in #306
• update Buildx version to v0.38.0 in #285 #289 #298 #309
• update BuildKit image to v0.34.0 in #286 #299 #308
• update github-builder-runtime module to 0.106.0 in #283 #288 #300 #303 #305 #290 #313
• update actions/download-artifact from 8.0.1 to 8.0.2 in #312
• update actions/upload-artifact from 7.0.1 to 7.0.2 in #310 #311
• update aws-actions/configure-aws-credentials from 6.2.3 to 6.3.0 in #284 #293
• update docker/bake-action from 7.3.0 to 7.5.0 in #292 #317
• update docker/build-push-action from 7.3.0 to 7.4.0 in #294
• update docker/setup-buildx-action from 4.3.0 to 4.4.1 in #296
• update docker/setup-qemu-action from 4.2.0 to 4.4.0 in #287 #291

Full Changelog: v1.17.0...v1.18.0