v0.2.0

Frontend image: ghcr.io/emirb/kernelbuild-buildkit:0.2.0

Pin it in a Kernelfile with:

#syntax=ghcr.io/emirb/kernelbuild-buildkit@sha256:dc8413037049ea824387cbb8461ed9272b1cc18bfaaecf3c427d2293a359580d

Verify with gh attestation verify oci://ghcr.io/emirb/kernelbuild-buildkit:0.2.0 --repo emirb/kernelbuild-buildkit.

Assets: kbuildctl for linux and darwin (amd64, arm64), kbuild-step for linux/amd64 (client mode), and checksums.txt.
Each archive carries build provenance (gh attestation verify <file> --repo emirb/kernelbuild-buildkit, or provenance.intoto.jsonl) and a keyless signature (cosign verify-blob --bundle <file>.sigstore.json <file>).

What's Changed

Changes

• Build(deps): bump codecov/codecov-action from 5 to 7 by @dependabot[bot] in #12
• README: say exactly where the kernel config goes and what it is called by @emirb in #19
• Go 1.27.1 by @emirb in #20
• Build(deps): bump actions/attest-build-provenance from 3 to 4 by @dependabot[bot] in #6
• CI: never cancel a push to main by @emirb in #21
• README: read the Scorecard badge from the current API by @emirb in #22
• Bump golang.org/x/crypto past GO-2026-6303, -6354 and -6355 by @emirb in #24
• Tests for the opt layer, the gateway build path, tree preparation, configure, extraction writes, and base resolution by @emirb in #23
• Release: attach a Sigstore bundle per asset and the provenance statements by @emirb in #25
• Pin every action to a commit SHA by @emirb in #27

Full Changelog: v0.1.1...v0.2.0

v0.1.1

Frontend image: ghcr.io/emirb/kernelbuild-buildkit:0.1.1

Pin it in a Kernelfile with:

#syntax=ghcr.io/emirb/kernelbuild-buildkit@sha256:cc32bf2350d7dae0ef466701de03e6927711f979b0480e119053045677745cfa

Verify with gh attestation verify oci://ghcr.io/emirb/kernelbuild-buildkit:0.1.1 --repo emirb/kernelbuild-buildkit.

Assets: kbuildctl for linux and darwin (amd64, arm64), kbuild-step for linux/amd64 (client mode), and checksums.txt.
Each archive carries build provenance: gh attestation verify <file> --repo emirb/kernelbuild-buildkit.

What's Changed

Changes

• Codecov: upload with the repository token by @emirb in #15
• Scorecard: match the reference workflow by @emirb in #16
• Build(deps): bump the go-modules group across 1 directory with 4 updates by @dependabot[bot] in #7
• README: note the release gate's cold build-and-boot measurement by @emirb in #17
• Release: attach kbuildctl and kbuild-step archives with checksums and provenance by @emirb in #18

Full Changelog: v0.1.0...v0.1.1

v0.1.0

Frontend image: ghcr.io/emirb/kernelbuild-buildkit:0.1.0

Pin it in a Kernelfile with:

#syntax=ghcr.io/emirb/kernelbuild-buildkit@sha256:33fec341d1790eb823f61f2cc2ff2934815fb567c03d58f16bded81d96c86d6d

Verify with gh attestation verify oci://ghcr.io/emirb/kernelbuild-buildkit:0.1.0 --repo emirb/kernelbuild-buildkit.

What's Changed

Changes

• Pin actions to major tags and group Go module updates monthly by @emirb in #5
• CI: run the #syntax= e2e on every change and gate releases on a booted kernel by @emirb in #8
• CI hygiene: concurrency, shared checks, scoped permissions, Scorecard, no GOPROXY=direct by @emirb in #10
• Pin cosign-installer and scorecard-action to exact versions; drop the retired Go Report Card badge by @emirb in #14

Full Changelog: https://github.com/emirb/kernelbuild-buildkit/commits/v0.1.0