Merge pull request #320 from docker/dependabot/npm_and_yarn/actions/artifact-2.1.7

build(deps): bump @actions/artifact from 2.1.5 to 2.1.7
Merge pull request #321 from docker/dependabot/github_actions/peter-evans/create-pull-request-6.0.5
2024-04-26 09:45:21 +02:00 · 2024-04-26 09:44:22 +02:00 · 2024-04-26 09:43:51 +02:00 · 2024-04-25 23:03:17 +00:00 · 2024-04-25 22:36:47 +00:00 · 2024-04-25 11:43:00 +02:00
71 changed files with 6490 additions and 2928 deletions
--- a/.eslintrc.json
+++ b/.eslintrc.json
@@ -1,12 +1,13 @@
 {
  "env": {
    "node": true,
-    "es2021": true,
+    "es6": true,
    "mocha": true,
    "jest": true
  },
  "extends": [
    "eslint:recommended",
+    "plugin:@typescript-eslint/eslint-recommended",
    "plugin:@typescript-eslint/recommended",
    "plugin:import/errors",
    "plugin:import/typescript", // this is needed to allow importing typescript files from JS
@@ -16,7 +17,7 @@
  ],
  "parser": "@typescript-eslint/parser",
  "parserOptions": {
-    "ecmaVersion": "latest",
+    "ecmaVersion": "2023",
    "sourceType": "module"
  },
  "plugins": [
@@ -27,7 +28,7 @@
  "rules": {
    "import/no-unresolved": [
      "error", {
-        "ignore": ["csv-parse/sync"]
+        "ignore": ["csv-parse/sync", "@octokit/openapi-types"]
      }
    ],
    "jest/no-disabled-tests": 0
--- a/.github/buildx-lab-releases.json
+++ b/.github/buildx-lab-releases.json
@@ -1,43 +1,330 @@
 {
  "latest": {
-    "id": 118213369,
-    "tag_name": "v0.11.2-desktop.2",
-    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.11.2-desktop.2",
+    "id": 137689487,
+    "tag_name": "v0.12.1-desktop.4",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.12.1-desktop.4",
    "assets": [
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v6",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v7",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-ppc64le",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-riscv64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-s390x",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-amd64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-arm64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/checksums.txt"
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/checksums.txt"
+    ]
+  },
+  "v0.13.1-desktop-preview.2": {
+    "id": 151417247,
+    "tag_name": "v0.13.1-desktop-preview.2",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.13.1-desktop-preview.2",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/checksums.txt"
+    ]
+  },
+  "v0.12.1-desktop.4": {
+    "id": 137689487,
+    "tag_name": "v0.12.1-desktop.4",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.12.1-desktop.4",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/checksums.txt"
+    ]
+  },
+  "v0.12.1-desktop.3": {
+    "id": 137560191,
+    "tag_name": "v0.12.1-desktop.3",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.12.1-desktop.3",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/checksums.txt"
+    ]
+  },
+  "v0.12.0-desktop.2": {
+    "id": 132264953,
+    "tag_name": "v0.12.0-desktop.2",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.12.0-desktop.2",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/buildx-v0.12.0-desktop.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.2/checksums.txt"
+    ]
+  },
+  "v0.12.0-desktop.1": {
+    "id": 130699107,
+    "tag_name": "v0.12.0-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.12.0-desktop.1",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/checksums.txt"
+    ]
+  },
+  "v0.11.2-desktop.5": {
+    "id": 123496811,
+    "tag_name": "v0.11.2-desktop.5",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.11.2-desktop.5",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/checksums.txt"
+    ]
+  },
+  "v0.11.2-desktop.4": {
+    "id": 119399782,
+    "tag_name": "v0.11.2-desktop.4",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.11.2-desktop.4",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/checksums.txt"
    ]
  },
  "v0.11.2-desktop.2": {
--- a/.github/buildx-releases.json
+++ b/.github/buildx-releases.json
@@ -1,43 +1,494 @@
 {
  "latest": {
-    "id": 112690624,
-    "tag_name": "v0.11.2",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.11.2",
+    "id": 151768856,
+    "tag_name": "v0.14.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.14.0",
    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.11.2/checksums.txt"
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/checksums.txt"
+    ]
+  },
+  "v0.14.0": {
+    "id": 151768856,
+    "tag_name": "v0.14.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.14.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/checksums.txt"
+    ]
+  },
+  "v0.14.0-rc2": {
+    "id": 151606490,
+    "tag_name": "v0.14.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.14.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.14.0-rc1": {
+    "id": 150784571,
+    "tag_name": "v0.14.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.14.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/checksums.txt"
+    ]
+  },
+  "v0.13.1": {
+    "id": 146098987,
+    "tag_name": "v0.13.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.13.1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/checksums.txt"
+    ]
+  },
+  "v0.13.0": {
+    "id": 144928424,
+    "tag_name": "v0.13.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.13.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/checksums.txt"
+    ]
+  },
+  "v0.13.0-rc2": {
+    "id": 144109355,
+    "tag_name": "v0.13.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.13.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.13.0-rc1": {
+    "id": 143461510,
+    "tag_name": "v0.13.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.13.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/checksums.txt"
+    ]
+  },
+  "v0.12.1": {
+    "id": 136761257,
+    "tag_name": "v0.12.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.12.1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/checksums.txt"
+    ]
+  },
+  "v0.12.0": {
+    "id": 129855827,
+    "tag_name": "v0.12.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.12.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0/checksums.txt"
+    ]
+  },
+  "v0.12.0-rc2": {
+    "id": 129419270,
+    "tag_name": "v0.12.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.12.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/buildx-v0.12.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.12.0-rc1": {
+    "id": 126865056,
+    "tag_name": "v0.12.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.12.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/buildx-v0.12.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.0-rc1/checksums.txt"
    ]
  },
  "v0.11.2": {
--- a/.github/docker-releases.json
+++ b/.github/docker-releases.json
@@ -1,8 +1,182 @@
 {
  "latest": {
-    "id": 113348684,
-    "tag_name": "v24.0.5",
-    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.5",
+    "id": 149919896,
+    "tag_name": "v26.1.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.1.0",
+    "assets": []
+  },
+  "v26.1.0": {
+    "id": 149919896,
+    "tag_name": "v26.1.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.1.0",
+    "assets": []
+  },
+  "v26.0.2": {
+    "id": 151768426,
+    "tag_name": "v26.0.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.2",
+    "assets": []
+  },
+  "v26.0.1": {
+    "id": 149921469,
+    "tag_name": "v26.0.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.1",
+    "assets": []
+  },
+  "v23.0.10": {
+    "id": 147776752,
+    "tag_name": "v23.0.10",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.10",
+    "assets": []
+  },
+  "v26.0.0": {
+    "id": 145844215,
+    "tag_name": "v26.0.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.0",
+    "assets": []
+  },
+  "v26.0.0-rc3": {
+    "id": 146688910,
+    "tag_name": "v26.0.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.0-rc3",
+    "assets": []
+  },
+  "v25.0.5": {
+    "id": 147202747,
+    "tag_name": "v25.0.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.5",
+    "assets": []
+  },
+  "v26.0.0-rc2": {
+    "id": 144926580,
+    "tag_name": "v26.0.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.0-rc2",
+    "assets": []
+  },
+  "v25.0.4": {
+    "id": 144022554,
+    "tag_name": "v25.0.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.4",
+    "assets": []
+  },
+  "v26.0.0-rc1": {
+    "id": 142822675,
+    "tag_name": "v26.0.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.0-rc1",
+    "assets": []
+  },
+  "v25.0.3": {
+    "id": 140187402,
+    "tag_name": "v25.0.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.3",
+    "assets": []
+  },
+  "v25.0.2": {
+    "id": 139426676,
+    "tag_name": "v25.0.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.2",
+    "assets": []
+  },
+  "v24.0.9": {
+    "id": 139508924,
+    "tag_name": "v24.0.9",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.9",
+    "assets": []
+  },
+  "v23.0.9": {
+    "id": 139233691,
+    "tag_name": "v23.0.9",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.9",
+    "assets": []
+  },
+  "v24.0.8": {
+    "id": 138593185,
+    "tag_name": "v24.0.8",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.8",
+    "assets": []
+  },
+  "v25.0.1": {
+    "id": 138305010,
+    "tag_name": "v25.0.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.1",
+    "assets": []
+  },
+  "v25.0.0": {
+    "id": 137711983,
+    "tag_name": "v25.0.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0",
+    "assets": []
+  },
+  "v25.0.0-rc.3": {
+    "id": 137464931,
+    "tag_name": "v25.0.0-rc.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-rc.3",
+    "assets": []
+  },
+  "v25.0.0-rc.2": {
+    "id": 136912066,
+    "tag_name": "v25.0.0-rc.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-rc.2",
+    "assets": []
+  },
+  "v25.0.0-rc.1": {
+    "id": 135904442,
+    "tag_name": "v25.0.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-rc.1",
+    "assets": []
+  },
+  "v25.0.0-beta.3": {
+    "id": 134782996,
+    "tag_name": "v25.0.0-beta.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-beta.3",
+    "assets": []
+  },
+  "v25.0.0-beta.2": {
+    "id": 133659834,
+    "tag_name": "v25.0.0-beta.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-beta.2",
+    "assets": []
+  },
+  "v23.0.8": {
+    "id": 132317923,
+    "tag_name": "v23.0.8",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.8",
+    "assets": []
+  },
+  "v20.10.27": {
+    "id": 132318746,
+    "tag_name": "v20.10.27",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.27",
+    "assets": []
+  },
+  "v25.0.0-beta.1": {
+    "id": 129244747,
+    "tag_name": "v25.0.0-beta.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-beta.1",
+    "assets": []
+  },
+  "v24.0.7": {
+    "id": 126933125,
+    "tag_name": "v24.0.7",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.7",
+    "assets": []
+  },
+  "v23.0.7": {
+    "id": 122845906,
+    "tag_name": "v23.0.7",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.7",
+    "assets": []
+  },
+  "v20.10.26": {
+    "id": 122843129,
+    "tag_name": "v20.10.26",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.26",
+    "assets": []
+  },
+  "v24.0.6": {
+    "id": 120021175,
+    "tag_name": "v24.0.6",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.6",
    "assets": []
  },
  "v24.0.5": {
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -18,9 +18,9 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Build
-        uses: docker/bake-action@v3
+        uses: docker/bake-action@v4
        with:
          targets: build
--- a/.github/workflows/buildx-lab-releases-json.yml
+++ b/.github/workflows/buildx-lab-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@fa6141aedf23596fb8bdcceab9cce8dadaa31bd9
    with:
      repository: docker/buildx-desktop
      artifact_name: buildx-lab-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Download
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
        with:
          name: buildx-lab-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38
+        uses: peter-evans/create-pull-request@6d6857d36972b65feb161a90e484f2984215f83e  # v6.0.5
        with:
          base: main
          branch: bot/buildx-lab-releases-json
--- a/.github/workflows/buildx-releases-json.yml
+++ b/.github/workflows/buildx-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@fa6141aedf23596fb8bdcceab9cce8dadaa31bd9
    with:
      repository: docker/buildx
      artifact_name: buildx-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Download
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
        with:
          name: buildx-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38
+        uses: peter-evans/create-pull-request@6d6857d36972b65feb161a90e484f2984215f83e  # v6.0.5
        with:
          base: main
          branch: bot/buildx-releases-json
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,41 @@
+name: codeql
+
+on:
+  push:
+    branches:
+      - 'main'
+  pull_request:
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+env:
+  NODE_VERSION: 20
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+      -
+        name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: javascript-typescript
+      -
+        name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+      -
+        name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:javascript-typescript"
--- a/.github/workflows/docker-releases-json.yml
+++ b/.github/workflows/docker-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@fa6141aedf23596fb8bdcceab9cce8dadaa31bd9
    with:
      repository: moby/moby
      artifact_name: docker-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Download
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
        with:
          name: docker-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38
+        uses: peter-evans/create-pull-request@6d6857d36972b65feb161a90e484f2984215f83e  # v6.0.5
        with:
          base: main
          branch: bot/docker-releases-json
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -15,13 +15,13 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
      -
        name: Publish
-        uses: docker/bake-action@v3
+        uses: docker/bake-action@v4
        with:
          targets: publish
        env:
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -13,26 +13,41 @@ on:
    paths-ignore:
      - '.github/*-releases.json'

+env:
+  NODE_VERSION: "20"
+  BUILDX_VERSION: "v0.14.0"
+
 jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Test
-        uses: docker/bake-action@v3
+        uses: docker/bake-action@v4
        with:
          targets: test-coverage
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      -
+        name: Check coverage
+        run: |
+          if [ -f ./coverage/clover.xml ] && [ ! -f ./coverage/allSkipped.txt ]; then
+            echo "RUN_CODECOV=true" >> $GITHUB_ENV
+          else
+            echo "RUN_CODECOV=false" >> $GITHUB_ENV
+          fi
+        shell: bash
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
+        if: env.RUN_CODECOV == 'true'
        with:
          file: ./coverage/clover.xml
          flags: unit
+          token: ${{ secrets.CODECOV_TOKEN }}

  prepare-itg:
    runs-on: ubuntu-latest
@@ -41,12 +56,12 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
        with:
-          node-version: 16
+          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
      -
        name: Install
@@ -75,34 +90,53 @@ jobs:
        test: ${{ fromJson(needs.prepare-itg.outputs.matrix) }}
        os:
          - ubuntu-latest
-          - macos-latest
+          #- macos-14  # no virt: https://github.com/docker/actions-toolkit/issues/317
+          - macos-13
+          - macos-12
          - windows-latest
-        exclude:
-          - os: macos-latest
-            test: buildx/bake.test.itg.ts
-          - os: windows-latest
-            test: buildx/bake.test.itg.ts
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
+      -
+        name: Expose GitHub Runtime
+        uses: crazy-max/ghaction-github-runtime@v3
      -
        name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
        with:
-          node-version: 16
+          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
+      -
+        name: Set up Docker Buildx
+        if: startsWith(matrix.os, 'ubuntu')
+        uses: docker/setup-buildx-action@v3
+        with:
+          version: ${{ env.BUILDX_VERSION }}
+          driver: docker
      -
        name: Install
        run: yarn install
      -
        name: Test
-        run: yarn test:itg-coverage --runTestsByPath __tests__/${{ matrix.test }} --coverageDirectory=./coverage
+        run: |
+          yarn test:itg-coverage --runTestsByPath __tests__/${{ matrix.test }} --coverageDirectory=./coverage
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      -
+        name: Check coverage
+        run: |
+          if [ -f ./coverage/clover.xml ] && [ ! -f ./coverage/allSkipped.txt ]; then
+            echo "RUN_CODECOV=true" >> $GITHUB_ENV
+          else
+            echo "RUN_CODECOV=false" >> $GITHUB_ENV
+          fi
+        shell: bash
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
+        if: env.RUN_CODECOV == 'true'
        with:
          file: ./coverage/clover.xml
          flags: itg
+          token: ${{ secrets.CODECOV_TOKEN }}
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -21,7 +21,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Matrix
        id: targets
@@ -39,9 +39,9 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Validate
-        uses: docker/bake-action@v3
+        uses: docker/bake-action@v4
        with:
          targets: ${{ matrix.target }}
--- a/.yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
+++ b/.yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
--- a/.yarn/releases/yarn-3.3.1.cjs
+++ b/.yarn/releases/yarn-3.3.1.cjs
--- a/.yarn/releases/yarn-3.6.3.cjs
+++ b/.yarn/releases/yarn-3.6.3.cjs
--- a/.yarnrc.yml
+++ b/.yarnrc.yml
@@ -1,16 +1,15 @@
-nodeLinker: node-modules
-
-npmAuthToken: "${NODE_AUTH_TOKEN:-fallback}"
-
 logFilters:
-  # https://yarnpkg.com/advanced/error-codes
  - code: YN0013
    level: discard
  - code: YN0076
    level: discard

+nodeLinker: node-modules
+
+npmAuthToken: "${NODE_AUTH_TOKEN:-fallback}"
+
 plugins:
  - path: .yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
    spec: "@yarnpkg/plugin-interactive-tools"

-yarnPath: .yarn/releases/yarn-3.3.1.cjs
+yarnPath: .yarn/releases/yarn-3.6.3.cjs
--- a/tests/buildx/bake.test.itg.ts
+++ b/tests/buildx/bake.test.itg.ts
@@ -23,21 +23,40 @@ import {BakeDefinition} from '../../src/types/bake';

 const fixturesDir = path.join(__dirname, '..', 'fixtures');

+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;
+
 beforeEach(() => {
  jest.clearAllMocks();
 });

-describe('parseDefinitions', () => {
+maybe('getDefinition', () => {
  // prettier-ignore
  test.each([
    [
-      ['https://github.com/docker/buildx.git#v0.10.4'],
+      'https://github.com/docker/buildx.git#v0.10.4',
      ['binaries-cross'],
-      path.join(fixturesDir, 'bake-buildx-0.10.4-binaries-cross.json')
-    ]
-  ])('given %p', async (sources: string[], targets: string[], out: string) => {
+      path.join(fixturesDir, 'bake-buildx-0.10.4-binaries-cross.json'),
+      false,
+    ],
+    // TODO: uncomment this test case when we have access to the private repo using an access token
+    // [
+    //   'https://github.com/docker/test-docker-action.git#remote-private',
+    //   ['default'],
+    //   path.join(fixturesDir, 'bake-test-docker-action-remote-private.json'),
+    //   true,
+    // ]
+  ])('given %p', async (source: string, targets: string[], out: string, auth) => {
+    const gitAuthToken = process.env.GITHUB_TOKEN || '';
+    if (auth && !gitAuthToken) {
+      console.log(`Git auth token not available, skipping test`);
+      return;
+    }
    const bake = new Bake();
    const expectedDef = <BakeDefinition>JSON.parse(fs.readFileSync(out, {encoding: 'utf-8'}).trim())
-    expect(await bake.parseDefinitions(sources, targets)).toEqual(expectedDef);
+    expect(await bake.getDefinition({
+      source: source,
+      targets: targets,
+      githubToken: gitAuthToken,
+    })).toEqual(expectedDef);
  });
 });
--- a/tests/buildx/bake.test.ts
+++ b/tests/buildx/bake.test.ts
@@ -14,44 +14,99 @@
 * limitations under the License.
 */

-import {beforeEach, describe, expect, jest, test} from '@jest/globals';
+import {afterEach, beforeEach, describe, expect, it, jest, test} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';
+import * as rimraf from 'rimraf';

 import {Bake} from '../../src/buildx/bake';
-import {BakeDefinition} from '../../src/types/bake';
+import {Context} from '../../src/context';
+
+import {ExecOptions} from '@actions/exec';
+import {BakeDefinition, BakeMetadata} from '../../src/types/bake';

 const fixturesDir = path.join(__dirname, '..', 'fixtures');
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-inputs-jest');
+const tmpName = path.join(tmpDir, '.tmpname-jest');
+const metadata: BakeMetadata = {
+  app: {
+    'buildx.build.ref': 'default/default/7frbdw1fmfozgtqavghowsepk'
+  },
+  db: {
+    'buildx.build.ref': 'default/default/onic7g2axylf56rxetob7qruy'
+  }
+};
+
+jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+  if (!fs.existsSync(tmpDir)) {
+    fs.mkdirSync(tmpDir, {recursive: true});
+  }
+  return tmpDir;
+});
+
+jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
+  return tmpName;
+});

 beforeEach(() => {
  jest.clearAllMocks();
 });

-describe('parseDefinitions', () => {
+afterEach(() => {
+  rimraf.sync(tmpDir);
+});
+
+describe('resolveMetadata', () => {
+  it('matches', async () => {
+    const metadataFile = Bake.getMetadataFilePath();
+    await fs.writeFileSync(metadataFile, JSON.stringify(metadata));
+    const expected = Bake.resolveMetadata();
+    expect(expected).toEqual(metadata as BakeMetadata);
+  });
+});
+
+describe('resolveRefs', () => {
+  it('matches', async () => {
+    const metadataFile = Bake.getMetadataFilePath();
+    await fs.writeFileSync(metadataFile, JSON.stringify(metadata));
+    const expected = Bake.resolveRefs();
+    expect(expected).toEqual(['default/default/7frbdw1fmfozgtqavghowsepk', 'default/default/onic7g2axylf56rxetob7qruy']);
+  });
+});
+
+describe('getDefinition', () => {
  // prettier-ignore
  test.each([
    [
      [path.join(fixturesDir, 'bake-01.hcl')],
      ['validate'],
      [],
+      {silent: true},
      path.join(fixturesDir, 'bake-01-validate.json')
    ],
    [
      [path.join(fixturesDir, 'bake-02.hcl')],
      ['build'],
      [],
+      undefined,
      path.join(fixturesDir, 'bake-02-build.json')
    ],
    [
      [path.join(fixturesDir, 'bake-01.hcl')],
      ['image'],
      ['*.output=type=docker', '*.platform=linux/amd64'],
+      undefined,
      path.join(fixturesDir, 'bake-01-overrides.json')
    ]
-  ])('given %p', async (sources: string[], targets: string[], overrides: string[], out: string) => {
+  ])('given %p', async (files: string[], targets: string[], overrides: string[], execOptions: ExecOptions | undefined, out: string) => {
    const bake = new Bake();
    const expectedDef = <BakeDefinition>JSON.parse(fs.readFileSync(out, {encoding: 'utf-8'}).trim())
-    expect(await bake.parseDefinitions(sources, targets, overrides)).toEqual(expectedDef);
+    expect(await bake.getDefinition({
+      files: files,
+      targets: targets,
+      overrides: overrides
+    }, execOptions)).toEqual(expectedDef);
  });
 });

--- a/tests/buildx/inputs.test.ts
+++ b/tests/buildx/inputs.test.ts
@@ -20,16 +20,19 @@ import * as path from 'path';
 import * as rimraf from 'rimraf';

 import {Context} from '../../src/context';
-import {Inputs} from '../../src/buildx/inputs';
+import {Build} from '../../src/buildx/build';
+
+import {BuildMetadata} from '../../src/types/build';

 const fixturesDir = path.join(__dirname, '..', 'fixtures');
 // prettier-ignore
 const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-inputs-jest');
 const tmpName = path.join(tmpDir, '.tmpname-jest');
-const metadata = `{
-  "containerimage.config.digest": "sha256:059b68a595b22564a1cbc167af369349fdc2ecc1f7bc092c2235cbf601a795fd",
-  "containerimage.digest": "sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c"
-}`;
+const metadata: BuildMetadata = {
+  'buildx.build.ref': 'default/default/n6ibcp9b2pw108rrz7ywdznvo',
+  'containerimage.config.digest': 'sha256:059b68a595b22564a1cbc167f369349fdc2ecc1f7bc092c2235cbf601a795fd',
+  'containerimage.digest': 'sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c'
+};

 jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
  if (!fs.existsSync(tmpDir)) {
@@ -50,30 +53,39 @@ afterEach(() => {
  rimraf.sync(tmpDir);
 });

-describe('resolveBuildImageID', () => {
+describe('resolveImageID', () => {
  it('matches', async () => {
    const imageID = 'sha256:bfb45ab72e46908183546477a08f8867fc40cebadd00af54b071b097aed127a9';
-    const imageIDFile = Inputs.getBuildImageIDFilePath();
+    const imageIDFile = Build.getImageIDFilePath();
    await fs.writeFileSync(imageIDFile, imageID);
-    const expected = Inputs.resolveBuildImageID();
+    const expected = Build.resolveImageID();
    expect(expected).toEqual(imageID);
  });
 });

-describe('resolveBuildMetadata', () => {
+describe('resolveMetadata', () => {
  it('matches', async () => {
-    const metadataFile = Inputs.getBuildMetadataFilePath();
-    await fs.writeFileSync(metadataFile, metadata);
-    const expected = Inputs.resolveBuildMetadata();
+    const metadataFile = Build.getMetadataFilePath();
+    await fs.writeFileSync(metadataFile, JSON.stringify(metadata));
+    const expected = Build.resolveMetadata();
    expect(expected).toEqual(metadata);
  });
 });

+describe('resolveRef', () => {
+  it('matches', async () => {
+    const metadataFile = Build.getMetadataFilePath();
+    await fs.writeFileSync(metadataFile, JSON.stringify(metadata));
+    const expected = Build.resolveRef();
+    expect(expected).toEqual('default/default/n6ibcp9b2pw108rrz7ywdznvo');
+  });
+});
+
 describe('resolveDigest', () => {
  it('matches', async () => {
-    const metadataFile = Inputs.getBuildMetadataFilePath();
-    await fs.writeFileSync(metadataFile, metadata);
-    const expected = Inputs.resolveDigest();
+    const metadataFile = Build.getMetadataFilePath();
+    await fs.writeFileSync(metadataFile, JSON.stringify(metadata));
+    const expected = Build.resolveDigest();
    expect(expected).toEqual('sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c');
  });
 });
@@ -120,7 +132,7 @@ describe('getProvenanceInput', () => {
    ],
  ])('given input %p', async (input: string, expected: string) => {
    await setInput('provenance', input);
-    expect(Inputs.getProvenanceInput('provenance')).toEqual(expected);
+    expect(Build.getProvenanceInput('provenance')).toEqual(expected);
  });
 });

@@ -148,11 +160,11 @@ describe('resolveProvenanceAttrs', () => {
      'builder-id=https://github.com/docker/actions-toolkit/actions/runs/123'
    ],
  ])('given %p', async (input: string, expected: string) => {
-    expect(Inputs.resolveProvenanceAttrs(input)).toEqual(expected);
+    expect(Build.resolveProvenanceAttrs(input)).toEqual(expected);
  });
 });

-describe('resolveBuildSecret', () => {
+describe('resolveSecret', () => {
  test.each([
    ['A_SECRET=abcdef0123456789', false, 'A_SECRET', 'abcdef0123456789', null],
    ['GIT_AUTH_TOKEN=abcdefghijklmno=0123456789', false, 'GIT_AUTH_TOKEN', 'abcdefghijklmno=0123456789', null],
@@ -166,9 +178,9 @@ describe('resolveBuildSecret', () => {
    try {
      let secret: string;
      if (file) {
-        secret = Inputs.resolveBuildSecretFile(kvp);
+        secret = Build.resolveSecretFile(kvp);
      } else {
-        secret = Inputs.resolveBuildSecretString(kvp);
+        secret = Build.resolveSecretString(kvp);
      }
      expect(secret).toEqual(`id=${exKey},src=${tmpName}`);
      expect(fs.readFileSync(tmpName, 'utf-8')).toEqual(exValue);
@@ -185,8 +197,8 @@ describe('resolveBuildSecret', () => {
    ['FOO=bar=baz', 'FOO', 'bar=baz', null]
  ])('given %p key and %p env', async (kvp: string, exKey: string, exValue: string, error: Error | null) => {
    try {
-      const secret = Inputs.resolveBuildSecretEnv(kvp);
-      expect(secret).toEqual(`id=${exKey},env="${exValue}"`);
+      const secret = Build.resolveSecretEnv(kvp);
+      expect(secret).toEqual(`id=${exKey},env=${exValue}`);
    } catch (e) {
      // eslint-disable-next-line jest/no-conditional-expect
      expect(e.message).toEqual(error?.message);
@@ -206,7 +218,7 @@ describe('hasLocalExporter', () => {
    [['" type= local" , dest=./release-out'], true],
    [['.'], true]
  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean) => {
-    expect(Inputs.hasLocalExporter(exporters)).toEqual(expected);
+    expect(Build.hasLocalExporter(exporters)).toEqual(expected);
  });
 });

@@ -222,7 +234,7 @@ describe('hasTarExporter', () => {
    [['" type= local" , dest=./release-out'], false],
    [['.'], false]
  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean) => {
-    expect(Inputs.hasTarExporter(exporters)).toEqual(expected);
+    expect(Build.hasTarExporter(exporters)).toEqual(expected);
  });
 });

@@ -240,7 +252,42 @@ describe('hasDockerExporter', () => {
    [['type=docker'], true, true],
    [['.'], true, true],
  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean, load: boolean | undefined) => {
-    expect(Inputs.hasDockerExporter(exporters, load)).toEqual(expected);
+    expect(Build.hasDockerExporter(exporters, load)).toEqual(expected);
+  });
+});
+
+describe('hasAttestationType', () => {
+  // prettier-ignore
+  test.each([
+    ['type=provenance,mode=min', 'provenance', true],
+    ['type=sbom,true', 'sbom', true],
+    ['type=foo,bar', 'provenance', false],
+  ])('given %p for %p returns %p', async (attrs: string, name: string, expected: boolean) => {
+    expect(Build.hasAttestationType(name, attrs)).toEqual(expected);
+  });
+});
+
+describe('resolveAttestationAttrs', () => {
+  // prettier-ignore
+  test.each([
+    [
+      'type=provenance,mode=min',
+      'type=provenance,mode=min'
+    ],
+    [
+      'type=provenance,true',
+      'type=provenance,disabled=false'
+    ],
+    [
+      'type=provenance,false',
+      'type=provenance,disabled=true'
+    ],
+    [
+      '',
+      ''
+    ],
+  ])('given %p', async (input: string, expected: string) => {
+    expect(Build.resolveAttestationAttrs(input)).toEqual(expected);
  });
 });

@@ -250,7 +297,7 @@ describe('hasGitAuthTokenSecret', () => {
    [['A_SECRET=abcdef0123456789'], false],
    [['GIT_AUTH_TOKEN=abcdefghijklmno=0123456789'], true],
  ])('given %p secret', async (kvp: Array<string>, expected: boolean) => {
-    expect(Inputs.hasGitAuthTokenSecret(kvp)).toBe(expected);
+    expect(Build.hasGitAuthTokenSecret(kvp)).toBe(expected);
  });
 });

--- a/tests/buildx/builder.test.ts
+++ b/tests/buildx/builder.test.ts
@@ -393,7 +393,71 @@ describe('parseInspect', () => {
          }
        ],
      }
-    ]
+    ],
+    [
+     'inspect11.txt',
+     {
+       "name": "builder",
+       "driver": "docker-container",
+       "lastActivity": new Date("2024-03-01T14:25:03.000Z"),
+       "nodes": [
+         {
+           "buildkit": "37657a1",
+           "buildkitd-flags": "--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host --allow-insecure-entitlement=network.host",
+           "driver-opts": [
+             "env.JAEGER_TRACE=localhost:6831",
+             "image=moby/buildkit:master",
+             "network=host",
+             "env.BUILDKIT_STEP_LOG_MAX_SIZE=10485760",
+             "env.BUILDKIT_STEP_LOG_MAX_SPEED=10485760",
+           ],
+           "endpoint": "unix:///var/run/docker.sock",
+           "name": "builder0",
+           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6",
+           "status": "running",
+           "features": {
+             "Cache export": true,
+             "Docker exporter": true,
+             "Multi-platform build": true,
+             "OCI exporter": true,
+           },
+           "labels": {
+             "org.mobyproject.buildkit.worker.executor": "oci",
+             "org.mobyproject.buildkit.worker.hostname": "docker-desktop",
+             "org.mobyproject.buildkit.worker.network": "host",
+             "org.mobyproject.buildkit.worker.oci.process-mode": "sandbox",
+             "org.mobyproject.buildkit.worker.selinux.enabled": "false",
+             "org.mobyproject.buildkit.worker.snapshotter": "overlayfs",
+           },
+           "gcPolicy": [
+             {
+               "all": false,
+               "filter": [
+                 "type==source.local",
+                 "type==exec.cachemount",
+                 "type==source.git.checkout"
+               ],
+               "keepDuration": "48h0m0s",
+               "keepBytes": "488.3MiB",
+             },
+             {
+               "all": false,
+               "keepDuration": "1440h0m0s",
+               "keepBytes": "94.06GiB",
+             },
+             {
+               "all": false,
+               "keepBytes": "94.06GiB",
+             },
+             {
+               "all": true,
+               "keepBytes": "94.06GiB",
+             }
+           ]
+         }
+       ]
+     }
+    ],
  ])('given %p', async (inspectFile, expected) => {
    expect(await Builder.parseInspect(fs.readFileSync(path.join(fixturesDir, inspectFile)).toString())).toEqual(expected);
  });
--- a/tests/buildx/buildx.test.ts
+++ b/tests/buildx/buildx.test.ts
@@ -26,6 +26,7 @@ import {Exec} from '../../src/exec';

 import {Cert} from '../../src/types/buildx';

+const fixturesDir = path.join(__dirname, '..', 'fixtures');
 // prettier-ignore
 const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-jest');
 const tmpName = path.join(tmpDir, '.tmpname-jest');
@@ -116,21 +117,6 @@ describe('isAvailable', () => {
  });
 });

-describe('printInspect', () => {
-  it('prints builder2 instance', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
-    const buildx = new Buildx({
-      standalone: true
-    });
-    await buildx.printInspect('builder2').catch(() => {
-      // noop
-    });
-    expect(execSpy).toHaveBeenCalledWith(`buildx`, ['inspect', 'builder2'], {
-      failOnStdErr: false
-    });
-  });
-});
-
 describe('printVersion', () => {
  it('docker cli', async () => {
    const execSpy = jest.spyOn(Exec, 'exec');
@@ -267,3 +253,38 @@ describe('resolveCertsDriverOpts', () => {
    }
  });
 });
+
+describe('refs', () => {
+  it('returns all refs', async () => {
+    const refs = Buildx.refs({
+      dir: path.join(fixturesDir, 'buildx-refs')
+    });
+    expect(Object.keys(refs).length).toEqual(11);
+  });
+  it('returns default builder refs', async () => {
+    const refs = Buildx.refs({
+      dir: path.join(fixturesDir, 'buildx-refs'),
+      builderName: 'default'
+    });
+    expect(Object.keys(refs).length).toEqual(8);
+  });
+  it('returns foo builder refs', async () => {
+    const refs = Buildx.refs({
+      dir: path.join(fixturesDir, 'buildx-refs'),
+      builderName: 'foo'
+    });
+    expect(Object.keys(refs).length).toEqual(3);
+  });
+  it('returns default builder refs since', async () => {
+    const mdate = new Date('2023-09-05T00:00:00Z');
+    fs.utimesSync(path.join(fixturesDir, 'buildx-refs', 'default', 'default', '36dix0eiv9evr61vrwzn32w7q'), mdate, mdate);
+    fs.utimesSync(path.join(fixturesDir, 'buildx-refs', 'default', 'default', '49p5r8und2konke5pmlyzqp3n'), mdate, mdate);
+    fs.utimesSync(path.join(fixturesDir, 'buildx-refs', 'default', 'default', 'a8zqzhhv5yiazm396jobsgdw2'), mdate, mdate);
+    const refs = Buildx.refs({
+      dir: path.join(fixturesDir, 'buildx-refs'),
+      builderName: 'default',
+      since: new Date('2024-01-10T00:00:00Z')
+    });
+    expect(Object.keys(refs).length).toEqual(5);
+  });
+});
--- a/tests/buildx/install.test.itg.ts
+++ b/tests/buildx/install.test.itg.ts
@@ -0,0 +1,42 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, test} from '@jest/globals';
+import * as fs from 'fs';
+
+import {Install} from '../../src/buildx/install';
+
+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;
+
+maybe('download', () => {
+  // prettier-ignore
+  test.each(['latest'])(
+    'install docker %s', async (version) => {
+      await expect((async () => {
+        const install = new Install({
+          standalone: true
+        });
+        const toolPath = await install.download(version);
+        if (!fs.existsSync(toolPath)) {
+          throw new Error('toolPath does not exist');
+        }
+        const binPath = await install.installStandalone(toolPath);
+        if (!fs.existsSync(binPath)) {
+          throw new Error('binPath does not exist');
+        }
+      })()).resolves.not.toThrow();
+    }, 60000);
+});
--- a/tests/buildx/install.test.ts
+++ b/tests/buildx/install.test.ts
@@ -67,6 +67,17 @@ describe('download', () => {
    expect(fs.existsSync(toolPath)).toBe(true);
  });

+  // prettier-ignore
+  test.each([
+    ['v0.11.2'],
+    ['v0.12.0'],
+  ])(
+  'acquires %p of buildx without cache', async (version) => {
+    const install = new Install({standalone: false});
+    const toolPath = await install.download(version, true);
+    expect(fs.existsSync(toolPath)).toBe(true);
+  });
+
  // TODO: add tests for arm
  // prettier-ignore
  test.each([
@@ -88,12 +99,6 @@ describe('download', () => {
    },
    100000
  );
-
-  it('returns latest buildx GitHub release', async () => {
-    const release = await Install.getRelease('latest');
-    expect(release).not.toBeNull();
-    expect(release?.tag_name).not.toEqual('');
-  });
 });

 describe('build', () => {
@@ -116,30 +121,72 @@ describe('build', () => {
  }, 100000);
 });

+describe('getDownloadVersion', () => {
+  it('returns official latest download version', async () => {
+    const version = await Install.getDownloadVersion('latest');
+    expect(version.key).toEqual('official');
+    expect(version.version).toEqual('latest');
+    expect(version.downloadURL).toEqual('https://github.com/docker/buildx/releases/download/v%s/%s');
+    expect(version.releasesURL).toEqual('https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json');
+  });
+
+  it('returns official v0.10.1 download version', async () => {
+    const version = await Install.getDownloadVersion('v0.10.1');
+    expect(version.key).toEqual('official');
+    expect(version.version).toEqual('v0.10.1');
+    expect(version.downloadURL).toEqual('https://github.com/docker/buildx/releases/download/v%s/%s');
+    expect(version.releasesURL).toEqual('https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json');
+  });
+
+  it('returns lab latest download version', async () => {
+    const version = await Install.getDownloadVersion('lab:latest');
+    expect(version.key).toEqual('lab');
+    expect(version.version).toEqual('latest');
+    expect(version.downloadURL).toEqual('https://github.com/docker/buildx-desktop/releases/download/v%s/%s');
+    expect(version.releasesURL).toEqual('https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-lab-releases.json');
+  });
+
+  it('returns lab v0.11.2-desktop.2 download version', async () => {
+    const version = await Install.getDownloadVersion('lab:v0.11.2-desktop.2');
+    expect(version.key).toEqual('lab');
+    expect(version.version).toEqual('v0.11.2-desktop.2');
+    expect(version.downloadURL).toEqual('https://github.com/docker/buildx-desktop/releases/download/v%s/%s');
+    expect(version.releasesURL).toEqual('https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-lab-releases.json');
+  });
+
+  it('unknown repo', async () => {
+    await expect(Install.getDownloadVersion('foo:bar')).rejects.toThrow(new Error('Cannot find buildx version for foo:bar'));
+  });
+});
+
 describe('getRelease', () => {
-  it('returns latest buildx GitHub release', async () => {
-    const release = await Install.getRelease('latest');
+  it('returns latest official GitHub release', async () => {
+    const version = await Install.getDownloadVersion('latest');
+    const release = await Install.getRelease(version);
    expect(release).not.toBeNull();
    expect(release?.tag_name).not.toEqual('');
  });

-  it('returns v0.10.1 buildx GitHub release', async () => {
-    const release = await Install.getRelease('v0.10.1');
+  it('returns v0.10.1 official GitHub release', async () => {
+    const version = await Install.getDownloadVersion('v0.10.1');
+    const release = await Install.getRelease(version);
    expect(release).not.toBeNull();
    expect(release?.id).toEqual(90346950);
    expect(release?.tag_name).toEqual('v0.10.1');
    expect(release?.html_url).toEqual('https://github.com/docker/buildx/releases/tag/v0.10.1');
  });

-  it('returns v0.2.2 buildx GitHub release', async () => {
-    const release = await Install.getRelease('v0.2.2');
+  it('returns v0.11.2-desktop.2 lab GitHub release', async () => {
+    const version = await Install.getDownloadVersion('lab:v0.11.2-desktop.2');
+    const release = await Install.getRelease(version);
    expect(release).not.toBeNull();
-    expect(release?.id).toEqual(17671545);
-    expect(release?.tag_name).toEqual('v0.2.2');
-    expect(release?.html_url).toEqual('https://github.com/docker/buildx/releases/tag/v0.2.2');
+    expect(release?.id).toEqual(118213369);
+    expect(release?.tag_name).toEqual('v0.11.2-desktop.2');
+    expect(release?.html_url).toEqual('https://github.com/docker/buildx-desktop/releases/tag/v0.11.2-desktop.2');
  });

  it('unknown release', async () => {
-    await expect(Install.getRelease('foo')).rejects.toThrow(new Error('Cannot find Buildx release foo in https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json'));
+    const version = await Install.getDownloadVersion('foo');
+    await expect(Install.getRelease(version)).rejects.toThrow(new Error('Cannot find Buildx release foo in https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json'));
  });
 });
--- a/tests/cache.test.itg.ts
+++ b/tests/cache.test.itg.ts
@@ -0,0 +1,40 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import path from 'path';
+import {describe, expect, it} from '@jest/globals';
+
+import {Cache} from '../src/cache';
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'cache-jest');
+
+const fixturesDir = path.join(__dirname, 'fixtures');
+
+describe('cache', () => {
+  it('github-repo', async () => {
+    const r = (Math.random() + 1).toString(36).substring(7);
+    const htcName = `cache-test-github-repo-${r}`;
+    const c = new Cache({
+      htcName: htcName,
+      htcVersion: `v1.0.0+${r}`,
+      baseCacheDir: path.join(tmpDir, '.cache-test'),
+      cacheFile: 'github-repo.json'
+    });
+    expect(await c.save(path.join(fixturesDir, 'github-repo.json'))).not.toEqual('');
+    expect(await c.find()).not.toEqual('');
+  });
+});
--- a/tests/context.test.ts
+++ b/tests/context.test.ts
@@ -55,9 +55,3 @@ describe('gitContext', () => {
    expect(Context.gitContext()).toEqual('https://github.com/docker/actions-toolkit.git#refs/heads/master');
  });
 });
-
-describe('provenanceBuilderID', () => {
-  it('returns 123', async () => {
-    expect(Context.provenanceBuilderID()).toEqual('https://github.com/docker/actions-toolkit/actions/runs/123');
-  });
-});
--- a/tests/docker/docker.test.itg.ts
+++ b/tests/docker/docker.test.itg.ts
@@ -0,0 +1,56 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, test} from '@jest/globals';
+
+import {Docker} from '../../src/docker/docker';
+
+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;
+
+maybe('pull', () => {
+  // prettier-ignore
+  test.each([
+    [
+      'busybox',
+      undefined,
+    ],
+    [
+      'busybox:1.36',
+      undefined,
+    ],
+    [
+      'busybox@sha256:7ae8447f3a7f5bccaa765926f25fc038e425cf1b2be6748727bbea9a13102094',
+      undefined,
+    ],
+    [
+      'doesnotexist:foo',
+      `pull access denied for doesnotexist`,
+    ],
+  ])('pulling %p', async (image: string, err: string | undefined) => {
+      try {
+        await Docker.pull(image, true);
+        if (err !== undefined) {
+          throw new Error('Expected an error to be thrown');
+        }
+      } catch (e) {
+        if (err === undefined) {
+          throw new Error(`Expected no error, but got: ${e.message}`);
+        }
+        // eslint-disable-next-line jest/no-conditional-expect
+        expect(e.message).toContain(err);
+      }
+    }, 600000);
+});
--- a/tests/docker/install.test.itg.ts
+++ b/tests/docker/install.test.itg.ts
@@ -29,20 +29,23 @@ describe('install', () => {
    jest.resetModules();
    process.env = {
      ...originalEnv,
-      SIGN_QEMU_BINARY: '1'
+      LIMA_START_ARGS: '--cpus 4 --memory 8',
+      LIMA_IMAGES: `x86_64:https://cloud.debian.org/images/cloud/bookworm/20231013-1532/debian-12-genericcloud-amd64-20231013-1532.qcow2@sha512:6b55e88b027c14da1b55c85a25a9f7069d4560a8fdb2d948c986a585db469728a06d2c528303e34bb62d8b2984def38fd9ddfc00965846ff6e05b01d6e883bfe
+aarch64:https://cloud.debian.org/images/cloud/bookworm/20231013-1532/debian-12-genericcloud-arm64-20231013-1532.qcow2`
    };
  });
  afterEach(() => {
    process.env = originalEnv;
  });
  // prettier-ignore
-  test.each(['v24.0.5'])(
+  test.each(['v24.0.4'])(
    'install docker %s', async (version) => {
      await expect((async () => {
        const install = new Install({
          version: version,
          runDir: tmpDir,
-          contextName: 'foo'
+          contextName: 'foo',
+          daemonConfig: `{"debug":true,"features":{"containerd-snapshotter":true}}`
        });
        await install.download();
        await install.install();
@@ -50,5 +53,5 @@ describe('install', () => {
        await Docker.printInfo();
        await install.tearDown();
      })()).resolves.not.toThrow();
-    }, 600000);
+    }, 1200000);
 });
--- a/tests/docker/install.test.ts
+++ b/tests/docker/install.test.ts
@@ -71,3 +71,32 @@ describe('getRelease', () => {
    await expect(Install.getRelease('foo')).rejects.toThrow(new Error('Cannot find Docker release foo in https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/docker-releases.json'));
  });
 });
+
+describe('limaImage', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      LIMA_IMAGES: `x86_64:https://cloud-images.ubuntu.com/releases/23.10/release-20231011/ubuntu-23.10-server-cloudimg-amd64.img@sha256:f6529be56da3429a56e4f5ef202bf4958201bc63f8541e478caa6e8eb712e635
+aarch64:https://cloud-images.ubuntu.com/releases/23.10/release-20231011/ubuntu-23.10-server-cloudimg-arm64.img`
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('returns custom images', async () => {
+    expect(Install.limaCustomImages()).toEqual([
+      {
+        location: 'https://cloud-images.ubuntu.com/releases/23.10/release-20231011/ubuntu-23.10-server-cloudimg-amd64.img',
+        arch: 'x86_64',
+        digest: 'sha256:f6529be56da3429a56e4f5ef202bf4958201bc63f8541e478caa6e8eb712e635'
+      },
+      {
+        location: 'https://cloud-images.ubuntu.com/releases/23.10/release-20231011/ubuntu-23.10-server-cloudimg-arm64.img',
+        arch: 'aarch64',
+        digest: ''
+      }
+    ]);
+  });
+});
--- a/tests/fixtures/bake-test-docker-action-remote-private.json
+++ b/tests/fixtures/bake-test-docker-action-remote-private.json
@@ -0,0 +1,11 @@
+{
+  "target": {
+    "default": {
+      "context": "https://github.com/docker/test-docker-action.git#remote-private",
+      "dockerfile": "Dockerfile",
+      "tags": [
+        "foo"
+      ]
+    }
+  }
+}
--- a/tests/fixtures/buildx-refs/group/1fugf958r4peyg86h6scim5t5
+++ b/tests/fixtures/buildx-refs/group/1fugf958r4peyg86h6scim5t5
@@ -0,0 +1 @@
+{"Definition":"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","Targets":["dev"],"Refs":["vzxn0jxr44khtq7hc8drtzwjv"]}
--- a/tests/fixtures/buildx-refs/default/default/36dix0eiv9evr61vrwzn32w7q
+++ b/tests/fixtures/buildx-refs/default/default/36dix0eiv9evr61vrwzn32w7q
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker/docker-alpine-s6","DockerfilePath":""}
--- a/tests/fixtures/buildx-refs/default/default/49p5r8und2konke5pmlyzqp3n
+++ b/tests/fixtures/buildx-refs/default/default/49p5r8und2konke5pmlyzqp3n
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":""}
--- a/tests/fixtures/buildx-refs/default/default/a8zqzhhv5yiazm396jobsgdw2
+++ b/tests/fixtures/buildx-refs/default/default/a8zqzhhv5yiazm396jobsgdw2
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":"/home/crazymax/github/docker_org/buildx/Dockerfile"}
--- a/tests/fixtures/buildx-refs/default/default/ij71n3ubmhck85d03zdvye5nr
+++ b/tests/fixtures/buildx-refs/default/default/ij71n3ubmhck85d03zdvye5nr
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":"/home/crazymax/github/docker_org/buildx/Dockerfile"}
--- a/tests/fixtures/buildx-refs/default/default/o1ctbgdb1mwekkxocc6filxde
+++ b/tests/fixtures/buildx-refs/default/default/o1ctbgdb1mwekkxocc6filxde
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":""}
--- a/tests/fixtures/buildx-refs/default/default/qvb2qy61mspqdyzf8whvjy0x1
+++ b/tests/fixtures/buildx-refs/default/default/qvb2qy61mspqdyzf8whvjy0x1
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":"/home/crazymax/github/docker_org/buildx/Dockerfile"}
--- a/tests/fixtures/buildx-refs/default/default/qxu22kx1mrydcjkbl0b0l6es8
+++ b/tests/fixtures/buildx-refs/default/default/qxu22kx1mrydcjkbl0b0l6es8
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":""}
--- a/tests/fixtures/buildx-refs/default/default/vzxn0jxr44khtq7hc8drtzwjv
+++ b/tests/fixtures/buildx-refs/default/default/vzxn0jxr44khtq7hc8drtzwjv
@@ -0,0 +1 @@
+{"Target":"dev","LocalPath":"/home/crazymax/github/docker_org/docker","DockerfilePath":"/home/crazymax/github/docker_org/docker/Dockerfile","GroupRef":"1fugf958r4peyg86h6scim5t5"}
--- a/tests/fixtures/buildx-refs/foo/foo0/21hqcxmgxyhugz2m24tmi7xco
+++ b/tests/fixtures/buildx-refs/foo/foo0/21hqcxmgxyhugz2m24tmi7xco
@@ -0,0 +1 @@
+{"Target":"default","LocalPath":"/home/crazymax/github/docker_org/compose/.dev/47231","DockerfilePath":"/home/crazymax/github/docker_org/compose/.dev/47231/bad/Dockerfile"}
--- a/tests/fixtures/buildx-refs/foo/foo0/5nm14argzndbc4hw1jx6v9d5k
+++ b/tests/fixtures/buildx-refs/foo/foo0/5nm14argzndbc4hw1jx6v9d5k
@@ -0,0 +1 @@
+{"Target":"default","LocalPath":"/home/crazymax/github/docker_org/compose/.dev/47231","DockerfilePath":"/home/crazymax/github/docker_org/compose/.dev/47231/bad/Dockerfile"}
--- a/tests/fixtures/buildx-refs/foo/foo0/7dblgs0dsjm22ti6p53sih6b7
+++ b/tests/fixtures/buildx-refs/foo/foo0/7dblgs0dsjm22ti6p53sih6b7
@@ -0,0 +1 @@
+{"Target":"default","LocalPath":"/home/crazymax/github/docker_org/compose/.dev/47231","DockerfilePath":"/home/crazymax/github/docker_org/compose/.dev/47231/bad/Dockerfile"}
--- a/tests/fixtures/inspect11.txt
+++ b/tests/fixtures/inspect11.txt
@@ -0,0 +1,39 @@
+Name:          builder
+Driver:        docker-container
+Last Activity: 2024-03-01 14:25:03 +0000 UTC
+
+Nodes:
+Name:                  builder0
+Endpoint:              unix:///var/run/docker.sock
+Driver Options:        env.JAEGER_TRACE="localhost:6831" image="moby/buildkit:master" network="host" env.BUILDKIT_STEP_LOG_MAX_SIZE="10485760" env.BUILDKIT_STEP_LOG_MAX_SPEED="10485760"
+Status:                running
+BuildKit daemon flags: --debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host --allow-insecure-entitlement=network.host
+BuildKit version:      37657a1
+Platforms:             linux/amd64, linux/amd64/v2, linux/amd64/v3, linux/arm64, linux/riscv64, linux/ppc64le, linux/s390x, linux/386, linux/mips64le, linux/mips64, linux/arm/v7, linux/arm/v6
+Features:
+ Cache export:         true
+ Docker exporter:      true
+ Multi-platform build: true
+ OCI exporter:         true
+Labels:
+ org.mobyproject.buildkit.worker.executor:         oci
+ org.mobyproject.buildkit.worker.hostname:         docker-desktop
+ org.mobyproject.buildkit.worker.network:          host
+ org.mobyproject.buildkit.worker.oci.process-mode: sandbox
+ org.mobyproject.buildkit.worker.selinux.enabled:  false
+ org.mobyproject.buildkit.worker.snapshotter:      overlayfs
+GC Policy rule#0:
+ All:           false
+ Filters:       type==source.local,type==exec.cachemount,type==source.git.checkout
+ Keep Duration: 48h0m0s
+ Keep Bytes:    488.3MiB
+GC Policy rule#1:
+ All:           false
+ Keep Duration: 1440h0m0s
+ Keep Bytes:    94.06GiB
+GC Policy rule#2:
+ All:        false
+ Keep Bytes: 94.06GiB
+GC Policy rule#3:
+ All:        true
+ Keep Bytes: 94.06GiB
--- a/tests/git.test.ts
+++ b/tests/git.test.ts
@@ -34,6 +34,9 @@ describe('context', () => {
        case 'git show --format=%H HEAD --quiet --':
          result = 'test-sha';
          break;
+        case 'git branch --show-current':
+          result = 'test';
+          break;
        case 'git symbolic-ref HEAD':
          result = 'refs/heads/test';
          break;
@@ -90,17 +93,146 @@ describe('remoteURL', () => {
 });

 describe('ref', () => {
-  it('have been called', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
-    try {
-      await Git.ref();
-    } catch (err) {
-      // noop
-    }
-    expect(execSpy).toHaveBeenCalledWith(`git`, ['symbolic-ref', 'HEAD'], {
-      silent: true,
-      ignoreReturnCode: true
+  it('returns mocked ref', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = 'test';
+          break;
+        case 'git symbolic-ref HEAD':
+          result = 'refs/heads/test';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/heads/test');
+  });
+
+  it('returns mocked detached tag ref', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD, tag: 8.0.0';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/tags/8.0.0');
+  });
+
+  it('returns mocked detached tag ref (shallow clone)', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'grafted, HEAD, tag: 8.0.0';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/tags/8.0.0');
+  });
+
+  it('returns mocked detached pull request merge ref (shallow clone)', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'grafted, HEAD, pull/221/merge';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/pull/221/merge');
+  });
+
+  it('should throws an error when detached HEAD ref is not supported', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'wrong, HEAD, tag: 8.0.0';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    await expect(Git.ref()).rejects.toThrow('Cannot find detached HEAD ref in "wrong, HEAD, tag: 8.0.0"');
+  });
+
+  it('returns mocked detached branch ref', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD, origin/test, test';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/heads/test');
  });
 });

--- a/tests/github.test.itg.ts
+++ b/tests/github.test.itg.ts
@@ -0,0 +1,41 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeEach, describe, expect, it, jest} from '@jest/globals';
+import * as path from 'path';
+
+import {GitHub} from '../src/github';
+
+const fixturesDir = path.join(__dirname, 'fixtures');
+
+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+maybe('uploadArtifact', () => {
+  it('uploads an artifact', async () => {
+    const res = await GitHub.uploadArtifact({
+      filename: path.join(fixturesDir, 'github-repo.json'),
+      mimeType: 'application/json',
+      retentionDays: 1
+    });
+    expect(res).toBeDefined();
+    console.log('uploadArtifactResponse', res);
+    expect(res?.url).toBeDefined();
+  });
+});
--- a/tests/github.test.ts
+++ b/tests/github.test.ts
@@ -89,6 +89,12 @@ describe('apiURL', () => {
  });
 });

+describe('workflowRunURL', () => {
+  it('returns 123', async () => {
+    expect(GitHub.workflowRunURL).toEqual('https://github.com/docker/actions-toolkit/actions/runs/123');
+  });
+});
+
 describe('actionsRuntimeToken', () => {
  const originalEnv = process.env;
  beforeEach(() => {
@@ -111,7 +117,10 @@ describe('actionsRuntimeToken', () => {
    }).toThrow();
  });
  it('fixture', async () => {
-    process.env.ACTIONS_RUNTIME_TOKEN = fs.readFileSync(path.join(__dirname, 'fixtures', 'runtimeToken.txt')).toString().trim();
+    process.env.ACTIONS_RUNTIME_TOKEN = fs
+      .readFileSync(path.join(__dirname, 'fixtures', 'runtimeToken.txt'))
+      .toString()
+      .trim();
    const runtimeToken = GitHub.actionsRuntimeToken;
    expect(runtimeToken?.ac).toEqual('[{"Scope":"refs/heads/master","Permission":3}]');
    expect(runtimeToken?.iss).toEqual('vstoken.actions.githubusercontent.com');
@@ -135,11 +144,14 @@ describe('printActionsRuntimeTokenACs', () => {
  });
  it('malformed', async () => {
    process.env.ACTIONS_RUNTIME_TOKEN = 'foo';
-    await expect(GitHub.printActionsRuntimeTokenACs()).rejects.toThrow(new Error("Cannot parse GitHub Actions Runtime Token: Invalid token specified: Cannot read properties of undefined (reading 'replace')"));
+    await expect(GitHub.printActionsRuntimeTokenACs()).rejects.toThrow(new Error('Cannot parse GitHub Actions Runtime Token: Invalid token specified: missing part #2'));
  });
  it('refs/heads/master', async () => {
    const infoSpy = jest.spyOn(core, 'info');
-    process.env.ACTIONS_RUNTIME_TOKEN = fs.readFileSync(path.join(__dirname, 'fixtures', 'runtimeToken.txt')).toString().trim();
+    process.env.ACTIONS_RUNTIME_TOKEN = fs
+      .readFileSync(path.join(__dirname, 'fixtures', 'runtimeToken.txt'))
+      .toString()
+      .trim();
    await GitHub.printActionsRuntimeTokenACs();
    expect(infoSpy).toHaveBeenCalledTimes(1);
    expect(infoSpy).toHaveBeenCalledWith(`refs/heads/master: read/write`);
--- a/tests/testResultsProcessor.ts
+++ b/tests/testResultsProcessor.ts
@@ -0,0 +1,30 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const fs = require('fs');
+
+module.exports = results => {
+  const allSkipped = results.testResults.every(result => {
+    return result.skipped;
+  });
+  if (allSkipped) {
+    console.log('All tests were skipped!');
+    // create an empty file to signal that all tests were skipped for CI
+    fs.closeSync(fs.openSync('./coverage/allSkipped.txt', 'w'));
+  }
+  return results;
+};
--- a/tests/util.test.ts
+++ b/tests/util.test.ts
@@ -191,6 +191,12 @@ ccccccccc`,
      'FOO=bar'
    ]);
  });
+
+  it('keep quotes', async () => {
+    const output = `type=image,"name=ghcr.io/nginxinc/nginx-unprivileged,docker.io/nginxinc/nginx-unprivileged",push-by-digest=true,name-canonical=true,push=true`;
+    setInput('outputs', output);
+    expect(Util.getInputList('outputs', {ignoreComma: true, quote: false})).toEqual([output]);
+  });
 });

 describe('asyncForEach', () => {
@@ -267,6 +273,68 @@ describe('trimSuffix', () => {
  });
 });

+describe('hash', () => {
+  it('returns 2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae', async () => {
+    expect(Util.hash('foo')).toEqual('2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae');
+  });
+});
+
+// https://github.com/golang/go/blob/f6b93a4c358b28b350dd8fe1780c1f78e520c09c/src/strconv/atob_test.go#L36-L58
+describe('parseBool', () => {
+  [
+    {input: '', expected: false, throwsError: true},
+    {input: 'asdf', expected: false, throwsError: true},
+    {input: '0', expected: false, throwsError: false},
+    {input: 'f', expected: false, throwsError: false},
+    {input: 'F', expected: false, throwsError: false},
+    {input: 'FALSE', expected: false, throwsError: false},
+    {input: 'false', expected: false, throwsError: false},
+    {input: 'False', expected: false, throwsError: false},
+    {input: '1', expected: true, throwsError: false},
+    {input: 't', expected: true, throwsError: false},
+    {input: 'T', expected: true, throwsError: false},
+    {input: 'TRUE', expected: true, throwsError: false},
+    {input: 'true', expected: true, throwsError: false},
+    {input: 'True', expected: true, throwsError: false}
+  ].forEach(({input, expected, throwsError}) => {
+    test(`parseBool("${input}")`, () => {
+      if (throwsError) {
+        // eslint-disable-next-line jest/no-conditional-expect
+        expect(() => Util.parseBool(input)).toThrow();
+      } else {
+        // eslint-disable-next-line jest/no-conditional-expect
+        expect(Util.parseBool(input)).toBe(expected);
+      }
+    });
+  });
+});
+
+describe('formatFileSize', () => {
+  test('should return "0 Bytes" when given 0 bytes', () => {
+    expect(Util.formatFileSize(0)).toBe('0 Bytes');
+  });
+  test('should format bytes to KB correctly', () => {
+    expect(Util.formatFileSize(1024)).toBe('1 KB');
+    expect(Util.formatFileSize(2048)).toBe('2 KB');
+    expect(Util.formatFileSize(1500)).toBe('1.46 KB');
+  });
+  test('should format bytes to MB correctly', () => {
+    expect(Util.formatFileSize(1024 * 1024)).toBe('1 MB');
+    expect(Util.formatFileSize(2.5 * 1024 * 1024)).toBe('2.5 MB');
+    expect(Util.formatFileSize(3.8 * 1024 * 1024)).toBe('3.8 MB');
+  });
+  test('should format bytes to GB correctly', () => {
+    expect(Util.formatFileSize(1024 * 1024 * 1024)).toBe('1 GB');
+    expect(Util.formatFileSize(2.5 * 1024 * 1024 * 1024)).toBe('2.5 GB');
+    expect(Util.formatFileSize(3.8 * 1024 * 1024 * 1024)).toBe('3.8 GB');
+  });
+  test('should format bytes to TB correctly', () => {
+    expect(Util.formatFileSize(1024 * 1024 * 1024 * 1024)).toBe('1 TB');
+    expect(Util.formatFileSize(2.5 * 1024 * 1024 * 1024 * 1024)).toBe('2.5 TB');
+    expect(Util.formatFileSize(3.8 * 1024 * 1024 * 1024 * 1024)).toBe('3.8 TB');
+  });
+});
+
 // See: https://github.com/actions/toolkit/blob/a1b068ec31a042ff1e10a522d8fdf0b8869d53ca/packages/core/src/core.ts#L89
 function getInputName(name: string): string {
  return `INPUT_${name.replace(/ /g, '_').toUpperCase()}`;
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -14,9 +14,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.

-ARG NODE_VERSION=16
-ARG DOCKER_VERSION=20.10.22
-ARG BUILDX_VERSION=0.10.0
+ARG NODE_VERSION=20
+ARG DOCKER_VERSION=26.0.2
+ARG BUILDX_VERSION=0.14.0

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git
--- a/jest.config.itg.ts
+++ b/jest.config.itg.ts
@@ -27,5 +27,6 @@ module.exports = {
  moduleNameMapper: {
    '^csv-parse/sync': '<rootDir>/node_modules/csv-parse/dist/cjs/sync.cjs'
  },
+  testResultsProcessor: './__tests__/testResultsProcessor.ts',
  verbose: false
 };
--- a/jest.config.ts
+++ b/jest.config.ts
@@ -43,5 +43,6 @@ module.exports = {
  },
  collectCoverageFrom: ['src/**/{!(index.ts),}.ts'],
  coveragePathIgnorePatterns: ['lib/', 'node_modules/', '__mocks__/', '__tests__/'],
+  testResultsProcessor: './__tests__/testResultsProcessor.ts',
  verbose: true
 };
--- a/package.json
+++ b/package.json
@@ -30,7 +30,7 @@
  ],
  "author": "Docker Inc.",
  "license": "Apache-2.0",
-  "packageManager": "yarn@3.3.1",
+  "packageManager": "yarn@3.6.3",
  "main": "lib/index.js",
  "types": "lib/index.d.ts",
  "directories": {
@@ -45,40 +45,43 @@
    "registry": "https://registry.npmjs.org/"
  },
  "dependencies": {
-    "@actions/cache": "^3.2.2",
-    "@actions/core": "^1.10.0",
+    "@actions/artifact": "^2.1.7",
+    "@actions/cache": "^3.2.4",
+    "@actions/core": "^1.10.1",
    "@actions/exec": "^1.1.1",
-    "@actions/github": "^5.1.1",
-    "@actions/http-client": "^2.1.1",
+    "@actions/github": "^6.0.0",
+    "@actions/http-client": "^2.2.1",
    "@actions/io": "^1.1.3",
    "@actions/tool-cache": "^2.0.1",
-    "@octokit/plugin-rest-endpoint-methods": "^7.2.3",
+    "@azure/storage-blob": "^12.15.0",
+    "@octokit/core": "^5.1.0",
+    "@octokit/plugin-rest-endpoint-methods": "^10.4.0",
    "async-retry": "^1.3.3",
-    "csv-parse": "^5.4.0",
+    "csv-parse": "^5.5.5",
    "handlebars": "^4.7.8",
-    "jwt-decode": "^3.1.2",
-    "semver": "^7.5.4",
-    "tmp": "^0.2.1"
+    "jwt-decode": "^4.0.0",
+    "semver": "^7.6.0",
+    "tmp": "^0.2.3"
  },
  "devDependencies": {
    "@types/csv-parse": "^1.2.2",
-    "@types/node": "^16.18.21",
-    "@types/semver": "^7.5.0",
+    "@types/js-yaml": "^4.0.5",
+    "@types/node": "^20.5.9",
+    "@types/semver": "^7.5.8",
    "@types/tmp": "^0.2.3",
-    "@typescript-eslint/eslint-plugin": "^5.56.0",
-    "@typescript-eslint/parser": "^5.56.0",
-    "cpy-cli": "^4.2.0",
-    "dotenv": "^16.0.3",
-    "eslint": "^8.36.0",
-    "eslint-config-prettier": "^8.8.0",
-    "eslint-plugin-import": "^2.27.5",
-    "eslint-plugin-jest": "^27.2.1",
-    "eslint-plugin-prettier": "^4.2.1",
-    "jest": "^29.5.0",
-    "prettier": "^2.8.7",
-    "rimraf": "^4.4.1",
-    "ts-jest": "^29.0.5",
+    "@typescript-eslint/eslint-plugin": "^6.6.0",
+    "@typescript-eslint/parser": "^6.6.0",
+    "dotenv": "^16.3.1",
+    "eslint": "^8.48.0",
+    "eslint-config-prettier": "^9.0.0",
+    "eslint-plugin-import": "^2.28.1",
+    "eslint-plugin-jest": "^27.2.3",
+    "eslint-plugin-prettier": "^5.0.0",
+    "jest": "^29.6.4",
+    "prettier": "^3.0.3",
+    "rimraf": "^5.0.1",
+    "ts-jest": "^29.1.1",
    "ts-node": "^10.9.1",
-    "typescript": "^4.9.5"
+    "typescript": "^5.2.2"
  }
 }
--- a/src/buildx/bake.ts
+++ b/src/buildx/bake.ts
@@ -14,17 +14,36 @@
 * limitations under the License.
 */

+import fs from 'fs';
+import path from 'path';
+
+import {Build} from './build';
 import {Buildx} from './buildx';
+import {Context} from '../context';
 import {Exec} from '../exec';
-import {Inputs} from './inputs';
 import {Util} from '../util';

-import {BakeDefinition} from '../types/bake';
+import {ExecOptions} from '@actions/exec';
+import {BakeDefinition, BakeMetadata} from '../types/bake';

 export interface BakeOpts {
  buildx?: Buildx;
 }

+export interface BakeCmdOpts {
+  files?: Array<string>;
+  load?: boolean;
+  noCache?: boolean;
+  overrides?: Array<string>;
+  provenance?: string;
+  push?: boolean;
+  sbom?: string;
+  source?: string;
+  targets?: Array<string>;
+
+  githubToken?: string; // for auth with remote definitions on private repos
+}
+
 export class Bake {
  private readonly buildx: Buildx;

@@ -32,13 +51,54 @@ export class Bake {
    this.buildx = opts?.buildx || new Buildx();
  }

-  public async parseDefinitions(sources: Array<string>, targets?: Array<string>, overrides?: Array<string>, load?: boolean, push?: boolean, workdir?: string): Promise<BakeDefinition> {
+  public static getMetadataFilePath(): string {
+    return path.join(Context.tmpDir(), 'metadata-file');
+  }
+
+  public static resolveMetadata(): BakeMetadata | undefined {
+    const metadataFile = Bake.getMetadataFilePath();
+    if (!fs.existsSync(metadataFile)) {
+      return undefined;
+    }
+    const content = fs.readFileSync(metadataFile, {encoding: 'utf-8'}).trim();
+    if (content === 'null') {
+      return undefined;
+    }
+    return <BakeMetadata>JSON.parse(content);
+  }
+
+  public static resolveRefs(): Array<string> | undefined {
+    const metadata = Bake.resolveMetadata();
+    if (!metadata) {
+      return undefined;
+    }
+    const refs = new Array<string>();
+    for (const key in metadata) {
+      if ('buildx.build.ref' in metadata[key]) {
+        refs.push(metadata[key]['buildx.build.ref']);
+      }
+    }
+    return refs;
+  }
+
+  public async getDefinition(cmdOpts: BakeCmdOpts, execOptions?: ExecOptions): Promise<BakeDefinition> {
+    execOptions = execOptions || {ignoreReturnCode: true};
+    execOptions.ignoreReturnCode = true;
+    if (cmdOpts.githubToken) {
+      execOptions.env = Object.assign({}, process.env, {
+        BUILDX_BAKE_GIT_AUTH_TOKEN: cmdOpts.githubToken
+      }) as {
+        [key: string]: string;
+      };
+    }
+
    const args = ['bake'];

-    let remoteDef;
+    let remoteDef: string | undefined;
    const files: Array<string> = [];
+    const sources = [...(cmdOpts.files || []), cmdOpts.source];
    if (sources) {
-      for (const source of sources.map(v => v.trim())) {
+      for (const source of sources.map(v => (v ? v.trim() : ''))) {
        if (source.length == 0) {
          continue;
        }
@@ -47,7 +107,7 @@ export class Bake {
          continue;
        }
        if (remoteDef) {
-          throw new Error(`Only one remote bake definition is allowed`);
+          throw new Error(`Only one remote bake definition can be defined`);
        }
        remoteDef = source;
      }
@@ -58,41 +118,50 @@ export class Bake {
    for (const file of files) {
      args.push('--file', file);
    }
-    if (overrides) {
-      for (const override of overrides) {
+    if (cmdOpts.overrides) {
+      for (const override of cmdOpts.overrides) {
        args.push('--set', override);
      }
    }
-    if (load) {
+    if (cmdOpts.load) {
      args.push('--load');
    }
-    if (push) {
+    if (cmdOpts.noCache) {
+      args.push('--no-cache');
+    }
+    if (cmdOpts.provenance) {
+      args.push('--provenance', cmdOpts.provenance);
+    }
+    if (cmdOpts.push) {
      args.push('--push');
    }
+    if (cmdOpts.sbom) {
+      args.push('--sbom', cmdOpts.sbom);
+    }

-    const printCmd = await this.buildx.getCommand([...args, '--print', ...(targets || [])]);
-    return await Exec.getExecOutput(printCmd.command, printCmd.args, {
-      cwd: workdir,
-      ignoreReturnCode: true,
-      silent: true
-    }).then(res => {
+    const printCmd = await this.buildx.getCommand([...args, '--print', ...(cmdOpts.targets || [])]);
+    return await Exec.getExecOutput(printCmd.command, printCmd.args, execOptions).then(res => {
      if (res.stderr.length > 0 && res.exitCode != 0) {
-        throw new Error(res.stderr);
+        throw new Error(`cannot parse bake definitions: ${res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error'}`);
      }
-      return <BakeDefinition>JSON.parse(res.stdout.trim());
+      return Bake.parseDefinition(res.stdout.trim());
    });
  }

+  public static parseDefinition(dt: string): BakeDefinition {
+    return <BakeDefinition>JSON.parse(dt);
+  }
+
  public static hasLocalExporter(def: BakeDefinition): boolean {
-    return Inputs.hasExporterType('local', Bake.exporters(def));
+    return Build.hasExporterType('local', Bake.exporters(def));
  }

  public static hasTarExporter(def: BakeDefinition): boolean {
-    return Inputs.hasExporterType('tar', Bake.exporters(def));
+    return Build.hasExporterType('tar', Bake.exporters(def));
  }

  public static hasDockerExporter(def: BakeDefinition, load?: boolean): boolean {
-    return load || Inputs.hasExporterType('docker', Bake.exporters(def));
+    return load || Build.hasExporterType('docker', Bake.exporters(def));
  }

  private static exporters(def: BakeDefinition): Array<string> {
--- a/src/buildx/inputs.ts
+++ b/src/buildx/inputs.ts
@@ -20,38 +20,30 @@ import * as core from '@actions/core';
 import {parse} from 'csv-parse/sync';

 import {Context} from '../context';
+import {GitHub} from '../github';
+import {Util} from '../util';

-const parseKvp = (kvp: string): [string, string] => {
-  const delimiterIndex = kvp.indexOf('=');
-  const key = kvp.substring(0, delimiterIndex);
-  const value = kvp.substring(delimiterIndex + 1);
+import {BuildMetadata} from '../types/build';

-  if (key.length == 0 || value.length == 0) {
-    throw new Error(`${kvp} is not a valid secret`);
-  }
-
-  return [key, value];
-};
-
-export class Inputs {
-  public static getBuildImageIDFilePath(): string {
+export class Build {
+  public static getImageIDFilePath(): string {
    return path.join(Context.tmpDir(), 'iidfile');
  }

-  public static getBuildMetadataFilePath(): string {
+  public static getMetadataFilePath(): string {
    return path.join(Context.tmpDir(), 'metadata-file');
  }

-  public static resolveBuildImageID(): string | undefined {
-    const iidFile = Inputs.getBuildImageIDFilePath();
+  public static resolveImageID(): string | undefined {
+    const iidFile = Build.getImageIDFilePath();
    if (!fs.existsSync(iidFile)) {
      return undefined;
    }
    return fs.readFileSync(iidFile, {encoding: 'utf-8'}).trim();
  }

-  public static resolveBuildMetadata(): string | undefined {
-    const metadataFile = Inputs.getBuildMetadataFilePath();
+  public static resolveMetadata(): BuildMetadata | undefined {
+    const metadataFile = Build.getMetadataFilePath();
    if (!fs.existsSync(metadataFile)) {
      return undefined;
    }
@@ -59,40 +51,49 @@ export class Inputs {
    if (content === 'null') {
      return undefined;
    }
-    return content;
+    return <BuildMetadata>JSON.parse(content);
  }

-  public static resolveDigest(): string | undefined {
-    const metadata = Inputs.resolveBuildMetadata();
-    if (metadata === undefined) {
+  public static resolveRef(): string | undefined {
+    const metadata = Build.resolveMetadata();
+    if (!metadata) {
      return undefined;
    }
-    const metadataJSON = JSON.parse(metadata);
-    if (metadataJSON['containerimage.digest']) {
-      return metadataJSON['containerimage.digest'];
+    if ('buildx.build.ref' in metadata) {
+      return metadata['buildx.build.ref'];
    }
    return undefined;
  }

-  public static resolveBuildSecretString(kvp: string): string {
-    return Inputs.resolveBuildSecret(kvp, false);
+  public static resolveDigest(): string | undefined {
+    const metadata = Build.resolveMetadata();
+    if (!metadata) {
+      return undefined;
+    }
+    if ('containerimage.digest' in metadata) {
+      return metadata['containerimage.digest'];
+    }
+    return undefined;
  }

-  public static resolveBuildSecretFile(kvp: string): string {
-    return Inputs.resolveBuildSecret(kvp, true);
+  public static resolveSecretString(kvp: string): string {
+    const [key, file] = Build.resolveSecret(kvp, false);
+    return `id=${key},src=${file}`;
  }

-  public static resolveBuildSecretEnv(kvp: string): string {
-    const [key, value] = parseKvp(kvp);
-
-    return `id=${key},env="${value}"`;
+  public static resolveSecretFile(kvp: string): string {
+    const [key, file] = Build.resolveSecret(kvp, true);
+    return `id=${key},src=${file}`;
  }

-  public static resolveBuildSecret(kvp: string, file: boolean): string {
-    const [key, _value] = parseKvp(kvp);
+  public static resolveSecretEnv(kvp: string): string {
+    const [key, value] = Build.parseSecretKvp(kvp);
+    return `id=${key},env=${value}`;
+  }

+  public static resolveSecret(kvp: string, file: boolean): [string, string] {
+    const [key, _value] = Build.parseSecretKvp(kvp);
    let value = _value;
-
    if (file) {
      if (!fs.existsSync(value)) {
        throw new Error(`secret file ${value} not found`);
@@ -101,7 +102,7 @@ export class Inputs {
    }
    const secretFile = Context.tmpName({tmpdir: Context.tmpDir()});
    fs.writeFileSync(secretFile, value);
-    return `id=${key},src=${secretFile}`;
+    return [key, secretFile];
  }

  public static getProvenanceInput(name: string): string {
@@ -111,16 +112,16 @@ export class Inputs {
      return input;
    }
    try {
-      return core.getBooleanInput(name) ? `builder-id=${Context.provenanceBuilderID()}` : 'false';
+      return core.getBooleanInput(name) ? `builder-id=${GitHub.workflowRunURL}` : 'false';
    } catch (err) {
      // not a valid boolean, so we assume it's a string
-      return Inputs.resolveProvenanceAttrs(input);
+      return Build.resolveProvenanceAttrs(input);
    }
  }

  public static resolveProvenanceAttrs(input: string): string {
    if (!input) {
-      return `builder-id=${Context.provenanceBuilderID()}`;
+      return `builder-id=${GitHub.workflowRunURL}`;
    }
    // parse attributes from input
    const fields = parse(input, {
@@ -138,19 +139,19 @@ export class Inputs {
      }
    }
    // if not add builder-id attribute
-    return `${input},builder-id=${Context.provenanceBuilderID()}`;
+    return `${input},builder-id=${GitHub.workflowRunURL}`;
  }

  public static hasLocalExporter(exporters: string[]): boolean {
-    return Inputs.hasExporterType('local', exporters);
+    return Build.hasExporterType('local', exporters);
  }

  public static hasTarExporter(exporters: string[]): boolean {
-    return Inputs.hasExporterType('tar', exporters);
+    return Build.hasExporterType('tar', exporters);
  }

  public static hasDockerExporter(exporters: string[], load?: boolean): boolean {
-    return load || Inputs.hasExporterType('docker', exporters);
+    return load || Build.hasExporterType('docker', exporters);
  }

  public static hasExporterType(name: string, exporters: string[]): boolean {
@@ -175,6 +176,45 @@ export class Inputs {
    return false;
  }

+  public static hasAttestationType(name: string, attrs: string): boolean {
+    const records = parse(attrs, {
+      delimiter: ',',
+      trim: true,
+      columns: false,
+      relaxColumnCount: true
+    });
+    for (const record of records) {
+      for (const [key, value] of record.map((chunk: string) => chunk.split('=').map(item => item.trim()))) {
+        if (key == 'type' && value == name) {
+          return true;
+        }
+      }
+    }
+    return false;
+  }
+
+  public static resolveAttestationAttrs(attrs: string): string {
+    const records = parse(attrs, {
+      delimiter: ',',
+      trim: true,
+      columns: false,
+      relaxColumnCount: true
+    });
+    const res: Array<string> = [];
+    for (const record of records) {
+      for (const attr of record) {
+        try {
+          // https://github.com/docker/buildx/blob/8abef5908705e49f7ba88ef8c957e1127b597a2a/util/buildflags/attests.go#L13-L21
+          const v = Util.parseBool(attr);
+          res.push(`disabled=${!v}`);
+        } catch (err) {
+          res.push(attr);
+        }
+      }
+    }
+    return res.join(',');
+  }
+
  public static hasGitAuthTokenSecret(secrets: string[]): boolean {
    for (const secret of secrets) {
      if (secret.startsWith('GIT_AUTH_TOKEN=')) {
@@ -183,4 +223,14 @@ export class Inputs {
    }
    return false;
  }
+
+  private static parseSecretKvp(kvp: string): [string, string] {
+    const delimiterIndex = kvp.indexOf('=');
+    const key = kvp.substring(0, delimiterIndex);
+    const value = kvp.substring(delimiterIndex + 1);
+    if (key.length == 0 || value.length == 0) {
+      throw new Error(`${kvp} is not a valid secret`);
+    }
+    return [key, value];
+  }
 }
--- a/src/buildx/builder.ts
+++ b/src/buildx/builder.ts
@@ -55,11 +55,25 @@ export class Builder {
    return ok;
  }

-  public async inspect(name: string): Promise<BuilderInfo> {
-    const cmd = await this.buildx.getCommand(['inspect', name]);
+  public async inspect(name?: string): Promise<BuilderInfo> {
+    // always enable debug for inspect command, so we can display additional
+    // fields such as features: https://github.com/docker/buildx/pull/1854
+    const envs = Object.assign({}, process.env, {
+      DEBUG: '1'
+    }) as {
+      [key: string]: string;
+    };
+
+    const args = ['inspect'];
+    if (name) {
+      args.push(name);
+    }
+
+    const cmd = await this.buildx.getCommand(args);
    return await Exec.getExecOutput(cmd.command, cmd.args, {
      ignoreReturnCode: true,
-      silent: true
+      silent: true,
+      env: envs
    }).then(res => {
      if (res.stderr.length > 0 && res.exitCode != 0) {
        throw new Error(res.stderr.trim());
@@ -83,7 +97,7 @@ export class Builder {
        continue;
      }
      switch (true) {
-        case lkey == 'name': {
+        case lkey == 'name':
          parsingType = undefined;
          if (builder.name == undefined) {
            builder.name = value;
@@ -98,42 +112,36 @@ export class Builder {
            currentNode = {name: value};
          }
          break;
-        }
-        case lkey == 'driver': {
+        case lkey == 'driver':
          parsingType = undefined;
          builder.driver = value;
          break;
-        }
-        case lkey == 'last activity': {
+        case lkey == 'last activity':
          parsingType = undefined;
          builder.lastActivity = new Date(value);
          break;
-        }
-        case lkey == 'endpoint': {
+        case lkey == 'endpoint':
          parsingType = undefined;
          currentNode.endpoint = value;
          break;
-        }
-        case lkey == 'driver options': {
+        case lkey == 'driver options':
          parsingType = undefined;
          currentNode['driver-opts'] = (value.match(/([a-zA-Z0-9_.]+)="([^"]*)"/g) || []).map(v => v.replace(/^(.*)="(.*)"$/g, '$1=$2'));
          break;
-        }
-        case lkey == 'status': {
+        case lkey == 'status':
          parsingType = undefined;
          currentNode.status = value;
          break;
-        }
-        case lkey == 'flags': {
+        case lkey == 'buildkit daemon flags':
+        case lkey == 'flags': // buildx < v0.13
          parsingType = undefined;
          currentNode['buildkitd-flags'] = value;
          break;
-        }
-        case lkey == 'buildkit': {
+        case lkey == 'buildkit version':
+        case lkey == 'buildkit': // buildx < v0.13
          parsingType = undefined;
          currentNode.buildkit = value;
          break;
-        }
        case lkey == 'platforms': {
          parsingType = undefined;
          if (!value) {
@@ -145,7 +153,7 @@ export class Builder {
          if (value.includes('*')) {
            for (const platform of value.split(', ')) {
              if (platform.includes('*')) {
-                platforms.push(platform.replace('*', ''));
+                platforms.push(platform.replace(/\*/g, ''));
              }
            }
          } else {
@@ -155,21 +163,28 @@ export class Builder {
          currentNode.platforms = platforms.join(',');
          break;
        }
-        case lkey == 'labels': {
+        case lkey == 'features':
+          parsingType = 'features';
+          currentNode.features = {};
+          break;
+        case lkey == 'labels':
          parsingType = 'label';
          currentNode.labels = {};
          break;
-        }
-        case lkey.startsWith('gc policy rule#'): {
+        case lkey.startsWith('gc policy rule#'):
          parsingType = 'gcpolicy';
          if (currentNode.gcPolicy && currentGCPolicy) {
            currentNode.gcPolicy.push(currentGCPolicy);
            currentGCPolicy = undefined;
          }
          break;
-        }
        default: {
          switch (parsingType || '') {
+            case 'features': {
+              currentNode.features = currentNode.features || {};
+              currentNode.features[key.trim()] = Boolean(value);
+              break;
+            }
            case 'label': {
              currentNode.labels = currentNode.labels || {};
              currentNode.labels[key.trim()] = value;
--- a/src/buildx/buildx.ts
+++ b/src/buildx/buildx.ts
@@ -22,7 +22,7 @@ import * as semver from 'semver';
 import {Docker} from '../docker/docker';
 import {Exec} from '../exec';

-import {Cert} from '../types/buildx';
+import {Cert, LocalRefsOpts, LocalRefsResponse, LocalState} from '../types/buildx';

 export interface BuildxOpts {
  standalone?: boolean;
@@ -45,6 +45,14 @@ export class Buildx {
    return process.env.BUILDX_CONFIG || path.join(Docker.configDir, 'buildx');
  }

+  static get refsDir(): string {
+    return path.join(Buildx.configDir, 'refs');
+  }
+
+  static get refsGroupDir(): string {
+    return path.join(Buildx.refsDir, '__group__');
+  }
+
  static get certsDir(): string {
    return path.join(Buildx.configDir, 'certs');
  }
@@ -86,13 +94,6 @@ export class Buildx {
    return ok;
  }

-  public async printInspect(name: string): Promise<void> {
-    const cmd = await this.getCommand(['inspect', name]);
-    await Exec.exec(cmd.command, cmd.args, {
-      failOnStdErr: false
-    });
-  }
-
  public async version(): Promise<string> {
    if (this._versionOnce) {
      return this._version;
@@ -175,4 +176,46 @@ export class Buildx {
    }
    return driverOpts;
  }
+
+  public static refs(opts: LocalRefsOpts, refs: LocalRefsResponse = {}): LocalRefsResponse {
+    const {dir, builderName, nodeName, since} = opts;
+
+    let dirpath = path.resolve(dir);
+    if (opts.builderName) {
+      dirpath = path.join(dirpath, opts.builderName);
+    }
+    if (opts.nodeName) {
+      dirpath = path.join(dirpath, opts.nodeName);
+    }
+    if (!fs.existsSync(dirpath)) {
+      return refs;
+    }
+
+    const files = fs.readdirSync(dirpath);
+    for (const file of files) {
+      const filePath = path.join(dirpath, file);
+      const stat = fs.statSync(filePath);
+      if (stat.isDirectory()) {
+        const nopts: LocalRefsOpts = {...opts};
+        if (!builderName) {
+          if (file === '__group__') {
+            continue;
+          }
+          nopts.builderName = file;
+        } else if (!nodeName) {
+          nopts.nodeName = file;
+        }
+        Buildx.refs(nopts, refs);
+      } else {
+        if (since && stat.mtime < since) {
+          continue;
+        }
+        const localState = <LocalState>JSON.parse(fs.readFileSync(filePath, 'utf8'));
+        const ref = `${builderName}/${nodeName}/${file}`;
+        refs[ref] = localState;
+      }
+    }
+
+    return refs;
+  }
 }
--- a/src/buildx/install.ts
+++ b/src/buildx/install.ts
@@ -14,24 +14,24 @@
 * limitations under the License.
 */

-import crypto from 'crypto';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as core from '@actions/core';
 import * as httpm from '@actions/http-client';
 import * as tc from '@actions/tool-cache';
-import * as cache from '@actions/cache';
 import * as semver from 'semver';
 import * as util from 'util';

 import {Buildx} from './buildx';
+import {Cache} from '../cache';
 import {Context} from '../context';
 import {Exec} from '../exec';
 import {Docker} from '../docker/docker';
 import {Git} from '../git';
 import {Util} from '../util';

+import {DownloadVersion} from '../types/buildx';
 import {GitHubRelease} from '../types/github';

 export interface InstallOpts {
@@ -47,10 +47,14 @@ export class Install {

  /*
   * Download buildx binary from GitHub release
-   * @param version semver version or latest
+   * @param v: version semver version or latest
+   * @param ghaNoCache: disable binary caching in GitHub Actions cache backend
   * @returns path to the buildx binary
   */
-  public async download(version: string): Promise<string> {
+  public async download(v: string, ghaNoCache?: boolean): Promise<string> {
+    const version: DownloadVersion = await Install.getDownloadVersion(v);
+    core.debug(`Install.download version: ${version.version}`);
+
    const release: GitHubRelease = await Install.getRelease(version);
    core.debug(`Install.download release tag name: ${release.tag_name}`);

@@ -62,7 +66,13 @@ export class Install {
      throw new Error(`Invalid Buildx version "${vspec}".`);
    }

-    const installCache = new InstallCache('buildx-dl-bin', vspec);
+    const installCache = new Cache({
+      htcName: version.key != 'official' ? `buildx-dl-bin-${version.key}` : 'buildx-dl-bin',
+      htcVersion: vspec,
+      baseCacheDir: path.join(Buildx.configDir, '.bin'),
+      cacheFile: os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx',
+      ghaNoCache: ghaNoCache
+    });

    const cacheFoundPath = await installCache.find();
    if (cacheFoundPath) {
@@ -70,7 +80,7 @@ export class Install {
      return cacheFoundPath;
    }

-    const downloadURL = util.format('https://github.com/docker/buildx/releases/download/v%s/%s', vspec, this.filename(vspec));
+    const downloadURL = util.format(version.downloadURL, vspec, this.filename(vspec));
    core.info(`Downloading ${downloadURL}`);

    const htcDownloadPath = await tc.downloadTool(downloadURL);
@@ -83,14 +93,21 @@ export class Install {

  /*
   * Build buildx binary from source
-   * @param gitContext git repo context
+   * @param gitContext: git repo context
+   * @param ghaNoCache: disable binary caching in GitHub Actions cache backend
   * @returns path to the buildx binary
   */
-  public async build(gitContext: string): Promise<string> {
+  public async build(gitContext: string, ghaNoCache?: boolean): Promise<string> {
    const vspec = await this.vspec(gitContext);
    core.debug(`Install.build vspec: ${vspec}`);

-    const installCache = new InstallCache('buildx-build-bin', vspec);
+    const installCache = new Cache({
+      htcName: 'buildx-build-bin',
+      htcVersion: vspec,
+      baseCacheDir: path.join(Buildx.configDir, '.bin'),
+      cacheFile: os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx',
+      ghaNoCache: ghaNoCache
+    });

    const cacheFoundPath = await installCache.find();
    if (cacheFoundPath) {
@@ -248,95 +265,52 @@ export class Install {

    const [owner, repo] = baseURL.substring('https://github.com/'.length).split('/');
    const key = `${owner}/${Util.trimSuffix(repo, '.git')}/${sha}`;
-    const hash = crypto.createHash('sha256').update(key).digest('hex');
+    const hash = Util.hash(key);
    core.info(`Use ${hash} version spec cache key for ${key}`);
    return hash;
  }

-  public static async getRelease(version: string): Promise<GitHubRelease> {
-    const url = `https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json`;
+  public static async getDownloadVersion(v: string): Promise<DownloadVersion> {
+    let [repoKey, version] = v.split(':');
+    if (!version) {
+      version = repoKey;
+      repoKey = 'official';
+    }
+    switch (repoKey) {
+      case 'official': {
+        return {
+          key: repoKey,
+          version: version,
+          downloadURL: 'https://github.com/docker/buildx/releases/download/v%s/%s',
+          releasesURL: 'https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json'
+        };
+      }
+      case 'lab': {
+        return {
+          key: repoKey,
+          version: version,
+          downloadURL: 'https://github.com/docker/buildx-desktop/releases/download/v%s/%s',
+          releasesURL: 'https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-lab-releases.json'
+        };
+      }
+      default: {
+        throw new Error(`Cannot find buildx version for ${v}`);
+      }
+    }
+  }
+
+  public static async getRelease(version: DownloadVersion): Promise<GitHubRelease> {
    const http: httpm.HttpClient = new httpm.HttpClient('docker-actions-toolkit');
-    const resp: httpm.HttpClientResponse = await http.get(url);
+    const resp: httpm.HttpClientResponse = await http.get(version.releasesURL);
    const body = await resp.readBody();
    const statusCode = resp.message.statusCode || 500;
    if (statusCode >= 400) {
-      throw new Error(`Failed to get Buildx release ${version} from ${url} with status code ${statusCode}: ${body}`);
+      throw new Error(`Failed to get Buildx releases from ${version.releasesURL} with status code ${statusCode}: ${body}`);
    }
    const releases = <Record<string, GitHubRelease>>JSON.parse(body);
-    if (!releases[version]) {
-      throw new Error(`Cannot find Buildx release ${version} in ${url}`);
+    if (!releases[version.version]) {
+      throw new Error(`Cannot find Buildx release ${version.version} in ${version.releasesURL}`);
    }
-    return releases[version];
-  }
-}
-
-class InstallCache {
-  private readonly htcName: string;
-  private readonly htcVersion: string;
-  private readonly ghaCacheKey: string;
-  private readonly cacheDir: string;
-  private readonly cacheFile: string;
-  private readonly cachePath: string;
-
-  constructor(htcName: string, htcVersion: string) {
-    this.htcName = htcName;
-    this.htcVersion = htcVersion;
-    this.ghaCacheKey = util.format('%s-%s-%s', this.htcName, this.htcVersion, this.platform());
-    this.cacheDir = path.join(Buildx.configDir, '.bin', htcVersion, this.platform());
-    this.cacheFile = os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx';
-    this.cachePath = path.join(this.cacheDir, this.cacheFile);
-    if (!fs.existsSync(this.cacheDir)) {
-      fs.mkdirSync(this.cacheDir, {recursive: true});
-    }
-  }
-
-  public async save(file: string): Promise<string> {
-    core.debug(`InstallCache.save ${file}`);
-    const cachePath = this.copyToCache(file);
-
-    const htcPath = await tc.cacheDir(this.cacheDir, this.htcName, this.htcVersion, this.platform());
-    core.debug(`InstallCache.save cached to hosted tool cache ${htcPath}`);
-
-    if (cache.isFeatureAvailable()) {
-      core.debug(`InstallCache.save caching ${this.ghaCacheKey} to GitHub Actions cache`);
-      await cache.saveCache([this.cacheDir], this.ghaCacheKey);
-    }
-
-    return cachePath;
-  }
-
-  public async find(): Promise<string> {
-    let htcPath = tc.find(this.htcName, this.htcVersion, this.platform());
-    if (htcPath) {
-      core.info(`Restored from hosted tool cache ${htcPath}`);
-      return this.copyToCache(`${htcPath}/${this.cacheFile}`);
-    }
-
-    if (cache.isFeatureAvailable()) {
-      core.debug(`GitHub Actions cache feature available`);
-      if (await cache.restoreCache([this.cacheDir], this.ghaCacheKey)) {
-        core.info(`Restored ${this.ghaCacheKey} from GitHub Actions cache`);
-        htcPath = await tc.cacheDir(this.cacheDir, this.htcName, this.htcVersion, this.platform());
-        core.info(`Restored to hosted tool cache ${htcPath}`);
-        return this.copyToCache(`${htcPath}/${this.cacheFile}`);
-      }
-    } else {
-      core.info(`GitHub Actions cache feature not available`);
-    }
-
-    return '';
-  }
-
-  private copyToCache(file: string): string {
-    core.debug(`Copying ${file} to ${this.cachePath}`);
-    fs.copyFileSync(file, this.cachePath);
-    fs.chmodSync(this.cachePath, '0755');
-    return this.cachePath;
-  }
-
-  private platform(): string {
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    const arm_version = (process.config.variables as any).arm_version;
-    return `${os.platform()}-${os.arch()}${arm_version ? 'v' + arm_version : ''}`;
+    return releases[version.version];
  }
 }
--- a/src/cache.ts
+++ b/src/cache.ts
@@ -0,0 +1,134 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import * as core from '@actions/core';
+import * as tc from '@actions/tool-cache';
+import * as cache from '@actions/cache';
+import * as util from 'util';
+
+export interface CacheOpts {
+  htcName: string;
+  htcVersion: string;
+  baseCacheDir: string;
+  cacheFile: string;
+  ghaNoCache?: boolean;
+}
+
+export interface CachePostState {
+  dir: string;
+  key: string;
+}
+
+export class Cache {
+  private readonly opts: CacheOpts;
+  private readonly ghaCacheKey: string;
+  private readonly ghaNoCache?: boolean;
+  private readonly cacheDir: string;
+  private readonly cachePath: string;
+
+  private static readonly POST_CACHE_KEY = 'postCache';
+
+  constructor(opts: CacheOpts) {
+    this.opts = opts;
+    this.ghaCacheKey = util.format('%s-%s-%s', this.opts.htcName, this.opts.htcVersion, this.platform());
+    this.ghaNoCache = this.opts.ghaNoCache;
+    this.cacheDir = path.join(this.opts.baseCacheDir, this.opts.htcVersion, this.platform());
+    this.cachePath = path.join(this.cacheDir, this.opts.cacheFile);
+    if (!fs.existsSync(this.cacheDir)) {
+      fs.mkdirSync(this.cacheDir, {recursive: true});
+    }
+  }
+
+  public async save(file: string): Promise<string> {
+    core.debug(`Cache.save ${file}`);
+    const cachePath = this.copyToCache(file);
+
+    const htcPath = await tc.cacheDir(this.cacheDir, this.opts.htcName, this.opts.htcVersion, this.platform());
+    core.debug(`Cache.save cached to hosted tool cache ${htcPath}`);
+
+    if (!this.ghaNoCache && cache.isFeatureAvailable()) {
+      core.debug(`Cache.save sending ${this.ghaCacheKey} to post state`);
+      core.saveState(
+        Cache.POST_CACHE_KEY,
+        JSON.stringify({
+          dir: this.cacheDir,
+          key: this.ghaCacheKey
+        } as CachePostState)
+      );
+    }
+
+    return cachePath;
+  }
+
+  public async find(): Promise<string> {
+    let htcPath = tc.find(this.opts.htcName, this.opts.htcVersion, this.platform());
+    if (htcPath) {
+      core.info(`Restored from hosted tool cache ${htcPath}`);
+      return this.copyToCache(`${htcPath}/${this.opts.cacheFile}`);
+    }
+
+    if (!this.ghaNoCache && cache.isFeatureAvailable()) {
+      core.debug(`GitHub Actions cache feature available`);
+      if (await cache.restoreCache([this.cacheDir], this.ghaCacheKey)) {
+        core.info(`Restored ${this.ghaCacheKey} from GitHub Actions cache`);
+        htcPath = await tc.cacheDir(this.cacheDir, this.opts.htcName, this.opts.htcVersion, this.platform());
+        core.info(`Cached to hosted tool cache ${htcPath}`);
+        return this.copyToCache(`${htcPath}/${this.opts.cacheFile}`);
+      }
+    } else if (this.ghaNoCache) {
+      core.info(`GitHub Actions cache disabled`);
+    } else {
+      core.info(`GitHub Actions cache feature not available`);
+    }
+
+    return '';
+  }
+
+  public static async post(): Promise<CachePostState | undefined> {
+    const state = core.getState(Cache.POST_CACHE_KEY);
+    if (!state) {
+      core.info(`State not set`);
+      return Promise.resolve(undefined);
+    }
+    let cacheState: CachePostState;
+    try {
+      cacheState = <CachePostState>JSON.parse(state);
+    } catch (e) {
+      throw new Error(`Failed to parse cache post state: ${e}`);
+    }
+    if (!cacheState.dir || !cacheState.key) {
+      throw new Error(`Invalid cache post state: ${state}`);
+    }
+    core.info(`Caching ${cacheState.key} to GitHub Actions cache`);
+    await cache.saveCache([cacheState.dir], cacheState.key);
+    return cacheState;
+  }
+
+  private copyToCache(file: string): string {
+    core.debug(`Copying ${file} to ${this.cachePath}`);
+    fs.copyFileSync(file, this.cachePath);
+    return this.cachePath;
+  }
+
+  private platform(): string {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const arm_version = (process.config.variables as any).arm_version;
+    return `${os.platform()}-${os.arch()}${arm_version ? 'v' + arm_version : ''}`;
+  }
+}
--- a/src/context.ts
+++ b/src/context.ts
@@ -23,7 +23,12 @@ import * as github from '@actions/github';
 import {GitHub} from './github';

 export class Context {
-  private static readonly _tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-'));
+  private static readonly _tmpDir = fs.mkdtempSync(path.join(Context.ensureDirExists(process.env.RUNNER_TEMP || os.tmpdir()), 'docker-actions-toolkit-'));
+
+  private static ensureDirExists(dir: string): string {
+    fs.mkdirSync(dir, {recursive: true});
+    return dir;
+  }

  public static tmpDir(): string {
    return Context._tmpDir;
--- a/src/docker/assets.ts
+++ b/src/docker/assets.ts
@@ -17,10 +17,6 @@
 import fs from 'fs';
 import {Context} from '../context';

-export const setupDockerLinuxSh = (): string => {
-  return get('docker-setup-linux.sh', setupDockerLinuxShData, '0755');
-};
-
 export const setupDockerWinPs1 = (): string => {
  return get('docker-setup-win.ps1', setupDockerWinPs1Data);
 };
@@ -29,8 +25,8 @@ export const dockerServiceLogsPs1 = (): string => {
  return get('docker-service-logs.ps1', dockerServiceLogsPs1Data);
 };

-export const colimaYaml = (): string => {
-  return get('colima.yaml', colimaYamlData);
+export const limaYaml = (): string => {
+  return get('lima.yaml', limaYamlData);
 };

 const get = (filename: string, data: string, mode?: string): string => {
@@ -45,42 +41,6 @@ const get = (filename: string, data: string, mode?: string): string => {
  return assetPath;
 };

-export const setupDockerLinuxShData = `
-#!/usr/bin/env bash
-
-set -eu
-
-: "\${TOOLDIR=}"
-: "\${RUNDIR=}"
-: "\${DOCKER_HOST=}"
-
-export PATH="$TOOLDIR::$PATH"
-
-if [ -z "$DOCKER_HOST" ]; then
-  echo >&2 'error: DOCKER_HOST required'
-  false
-fi
-
-if ! command -v dockerd &> /dev/null; then
-  echo >&2 'error: dockerd missing from PATH'
-  false
-fi
-
-mkdir -p "$RUNDIR"
-
-(
-  echo "Starting dockerd"
-  set -x
-  exec dockerd \\
-    --host="$DOCKER_HOST" \\
-    --exec-root="$RUNDIR/execroot" \\
-    --data-root="$RUNDIR/data" \\
-    --pidfile="$RUNDIR/docker.pid" \\
-    --userland-proxy=false \\
-    2>&1 | tee "$RUNDIR/dockerd.log"
-) &
-`;
-
 export const setupDockerWinPs1Data = `
 [CmdletBinding()]
 param(
@@ -91,7 +51,10 @@ param(
    [string]$RunDir,

    [Parameter(Mandatory = $true)]
-    [string]$DockerHost)
+    [string]$DockerHost,
+
+    [Parameter(Mandatory = $false)]
+    [string]$DaemonConfig)

 $pwver = (Get-ItemProperty -Path HKLM:\\SOFTWARE\\Microsoft\\PowerShell\\3\\PowerShellEngine -Name 'PowerShellVersion').PowerShellVersion
 Write-Host "PowerShell version: $pwver"
@@ -119,6 +82,12 @@ if (Get-Service docker -ErrorAction SilentlyContinue) {
 $env:DOCKER_HOST = $DockerHost
 Write-Host "DOCKER_HOST: $env:DOCKER_HOST"

+if ($DaemonConfig) {
+  Write-Host "Writing Docker daemon config"
+  New-Item -ItemType Directory -Force -Path "$env:ProgramData\\Docker\\config"
+  $DaemonConfig | Out-File -FilePath "$env:ProgramData\\Docker\\config\\daemon.json"
+}
+
 Write-Host "Creating service"
 New-Item -ItemType Directory "$RunDir\\moby-root" -ErrorAction SilentlyContinue | Out-Null
 New-Item -ItemType Directory "$RunDir\\moby-exec" -ErrorAction SilentlyContinue | Out-Null
@@ -159,191 +128,127 @@ Get-WinEvent -ea SilentlyContinue \`
    ForEach-Object {"$($_.TimeCreated.ToUniversalTime().ToString("o")) [$($_.LevelDisplayName)] $($_.Message)"}
 `;

-export const colimaYamlData = `
-# Number of CPUs to be allocated to the virtual machine.
-# Default: 2
-cpu: 2
-
-# Size of the disk in GiB to be allocated to the virtual machine.
-# NOTE: changing this has no effect after the virtual machine has been created.
-# Default: 60
-disk: 60
-
-# Size of the memory in GiB to be allocated to the virtual machine.
-# Default: 2
-memory: 2
-
-# Architecture of the virtual machine (x86_64, aarch64, host).
-# Default: host
-arch: host
-
-# Container runtime to be used (docker, containerd).
-# Default: docker
-runtime: docker
-
-# Kubernetes configuration for the virtual machine.
-kubernetes:
-  enabled: false
-
-# Auto-activate on the Host for client access.
-# Setting to true does the following on startup
-#  - sets as active Docker context (for Docker runtime).
-#  - sets as active Kubernetes context (if Kubernetes is enabled).
-# Default: true
-autoActivate: false
-
-# Network configurations for the virtual machine.
-network:
-  # Assign reachable IP address to the virtual machine.
-  # NOTE: this is currently macOS only and ignored on Linux.
-  # Default: false
-  address: false
-
-  # Custom DNS resolvers for the virtual machine.
-  #
-  # EXAMPLE
-  # dns: [8.8.8.8, 1.1.1.1]
-  #
-  # Default: []
-  dns: []
-
-  # DNS hostnames to resolve to custom targets using the internal resolver.
-  # This setting has no effect if a custom DNS resolver list is supplied above.
-  # It does not configure the /etc/hosts files of any machine or container.
-  # The value can be an IP address or another host.
-  #
-  # EXAMPLE
-  # dnsHosts:
-  #   example.com: 1.2.3.4
-  dnsHosts:
-    host.docker.internal: host.lima.internal
-
-  # Network driver to use (slirp, gvproxy), (requires vmType \`qemu\`)
-  #   - slirp is the default user mode networking provided by Qemu
-  #   - gvproxy is an alternative to VPNKit based on gVisor https://github.com/containers/gvisor-tap-vsock
-  # Default: gvproxy
-  driver: gvproxy
-
-# Forward the host's SSH agent to the virtual machine.
-# Default: false
-forwardAgent: false
-
-# Docker daemon configuration that maps directly to daemon.json.
-# https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file.
-# NOTE: some settings may affect Colima's ability to start docker. e.g. \`hosts\`.
-#
-# EXAMPLE - disable buildkit
-# docker:
-#   features:
-#     buildkit: false
-#
-# EXAMPLE - add insecure registries
-# docker:
-#   insecure-registries:
-#     - myregistry.com:5000
-#     - host.docker.internal:5000
-#
-# Colima default behaviour: buildkit enabled
-# Default: {}
-docker: {}
-
-# Virtual Machine type (qemu, vz)
-# NOTE: this is macOS 13 only. For Linux and macOS <13.0, qemu is always used.
-#
-# vz is macOS virtualization framework and requires macOS 13
-#
-# Default: qemu
+export const limaYamlData = `
+# VM type: "qemu" or "vz" (on macOS 13 and later).
+# The vmType can be specified only on creating the instance.
+# The vmType of existing instances cannot be changed.
+# Builtin default: "qemu"
 vmType: qemu

-# Volume mount driver for the virtual machine (virtiofs, 9p, sshfs).
-#
-# virtiofs is limited to macOS and vmType \`vz\`. It is the fastest of the options.
-#
-# 9p is the recommended and the most stable option for vmType \`qemu\`.
-#
-# sshfs is faster than 9p but the least reliable of the options (when there are lots
-# of concurrent reads or writes).
-#
-# Default: virtiofs (for vz), sshfs (for qemu)
-mountType: 9p
+# OS: "Linux".
+# Builtin default: "Linux"
+os: null

-# The CPU type for the virtual machine (requires vmType \`qemu\`).
-# Options available for host emulation can be checked with: \`qemu-system-$(arch) -cpu help\`.
-# Instructions are also supported by appending to the cpu type e.g. "qemu64,+ssse3".
-# Default: host
-cpuType: host
+# Arch: "default", "x86_64", "aarch64".
+# Builtin default: "default" (corresponds to the host architecture)
+arch: null

-# For a more general purpose virtual machine, Ubuntu container is optionally provided
-# as a layer on the virtual machine.
-# The underlying virtual machine is still accessible via \`colima ssh --layer=false\` or running \`colima\` in
-# the Ubuntu session.
-#
-# Default: false
-layer: false
+images:
+{{#each customImages}}
+- location: "{{location}}"
+  arch: "{{arch}}"
+  digest: "{{digest}}"
+{{/each}}
+- location: "https://cloud-images.ubuntu.com/releases/22.04/release-20231026/ubuntu-22.04-server-cloudimg-amd64.img"
+  arch: "x86_64"
+  digest: "sha256:054db2d88c454bb0ad8dfd8883955e3946b57d2b0bf0d023f3ade3c93cdd14e5"
+- location: "https://cloud-images.ubuntu.com/releases/22.04/release-20231026/ubuntu-22.04-server-cloudimg-arm64.img"
+  arch: "aarch64"
+  digest: "sha256:eafa7742ce5ff109222ea313d31ea366d587b4e89b900b11d8285ae775dfe8c3"
+
+# CPUs
+# Builtin default: min(4, host CPU cores)
+cpus: null
+
+# Memory size
+# Builtin default: min("4GiB", half of host memory)
+memory: null
+
+# Disk size
+# Builtin default: "100GiB"
+disk: 60GiB
+
+# Expose host directories to the guest, the mount point might be accessible from all UIDs in the guest
+# Builtin default: null (Mount nothing)
+# This file: Mount the home as read-only, /tmp/lima as writable
+mounts:
+- location: "~"
+- location: "/tmp/lima"
+  writable: true
+
+# Mount type for above mounts, such as "reverse-sshfs" (from sshocker), "9p" (EXPERIMENTAL, from QEMU’s virtio-9p-pci, aka virtfs),
+# or "virtiofs" (EXPERIMENTAL, needs \`vmType: vz\`)
+# Builtin default: "reverse-sshfs" (for QEMU), "virtiofs" (for vz)
+mountType: null
+
+containerd:
+  system: false
+  user: false

-# Custom provision scripts for the virtual machine.
-# Provisioning scripts are executed on startup and therefore needs to be idempotent.
-#
-# EXAMPLE - script exected as root
-# provision:
-#   - mode: system
-#     script: apk add htop vim
-#
-# EXAMPLE - script exected as user
-# provision:
-#   - mode: user
-#     script: |
-#       [ -f ~/.provision ] && exit 0;
-#       echo provisioning as $USER...
-#       touch ~/.provision
-#
-# Default: []
 provision:
-  - mode: system
-    script: |
-      mkdir -p /tmp/docker-bins
-      cd /tmp/docker-bins
-      wget -qO- "https://download.docker.com/linux/static/{{dockerChannel}}/{{hostArch}}/docker-{{dockerVersion}}.tgz" | tar xvz --strip 1
-      mv -f /tmp/docker-bins/* /usr/bin/
+- mode: system
+  # This script defines the host.docker.internal hostname when hostResolver is disabled.
+  # It is also needed for lima 0.8.2 and earlier, which does not support hostResolver.hosts.
+  # Names defined in /etc/hosts inside the VM are not resolved inside containers when
+  # using the hostResolver; use hostResolver.hosts instead (requires lima 0.8.3 or later).
+  script: |
+    #!/bin/sh
+    sed -i 's/host.lima.internal.*/host.lima.internal host.docker.internal/' /etc/hosts
+- mode: system
+  script: |
+    #!/bin/sh
+    apt-get install -f -y iptables
+- mode: system
+  script: |
+    #!/bin/bash
+    set -eux -o pipefail
+    command -v docker >/dev/null 2>&1 && exit 0
+    if [ ! -e /etc/systemd/system/docker.socket.d/override.conf ]; then
+      mkdir -p /etc/systemd/system/docker.socket.d
+      # Alternatively we could just add the user to the "docker" group, but that requires restarting the user session
+      cat <<-EOF >/etc/systemd/system/docker.socket.d/override.conf
+      [Socket]
+      SocketUser=\${LIMA_CIDATA_USER}
+    EOF
+    fi
+    if [ ! -e /etc/docker/daemon.json ]; then
+      mkdir -p /etc/docker
+      cat <<-EOF >/etc/docker/daemon.json
+      {{stringify daemonConfig}}
+    EOF
+    fi
+    export DEBIAN_FRONTEND=noninteractive
+    curl -fsSL https://get.docker.com | sh -s -- --channel {{dockerBinChannel}} --version {{dockerBinVersion}}

-# Modify ~/.ssh/config automatically to include a SSH config for the virtual machine.
-# SSH config will still be generated in ~/.colima/ssh_config regardless.
-# Default: true
-sshConfig: false
+probes:
+- script: |
+    #!/bin/bash
+    set -eux -o pipefail
+    if ! timeout 30s bash -c "until command -v docker >/dev/null 2>&1; do sleep 3; done"; then
+      echo >&2 "docker is not installed yet"
+      exit 1
+    fi
+    if ! timeout 30s bash -c "until pgrep dockerd; do sleep 3; done"; then
+      echo >&2 "dockerd is not running"
+      exit 1
+    fi
+  hint: See "/var/log/cloud-init-output.log". in the guest

-# Configure volume mounts for the virtual machine.
-# Colima mounts user's home directory by default to provide a familiar
-# user experience.
-#
-# EXAMPLE
-# mounts:
-#   - location: ~/secrets
-#     writable: false
-#   - location: ~/projects
-#     writable: true
-#
-# Colima default behaviour: $HOME and /tmp/colima are mounted as writable.
-# Default: []
-mounts: []
+hostResolver:
+  # hostResolver.hosts requires lima 0.8.3 or later. Names defined here will also
+  # resolve inside containers, and not just inside the VM itself.
+  hosts:
+    host.docker.internal: host.lima.internal

-# Environment variables for the virtual machine.
-#
-# EXAMPLE
-# env:
-#   KEY: value
-#   ANOTHER_KEY: another value
-#
-# Default: {}
-env: {}
-`;
-
-export const qemuEntitlements = `
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-    <key>com.apple.security.hypervisor</key>
-    <true/>
-</dict>
-</plist>
+portForwards:
+- guestSocket: "/var/run/docker.sock"
+  hostSocket: "{{dockerSock}}"
+
+audio:
+  # EXPERIMENTAL
+  # QEMU audiodev, e.g., "none", "coreaudio", "pa", "alsa", "oss".
+  # VZ driver, use "vz" as device name
+  # Choosing "none" will mute the audio output, and not play any sound.
+  # Builtin default: ""
+  device: none
 `;
--- a/src/docker/docker.ts
+++ b/src/docker/docker.ts
@@ -20,7 +20,10 @@ import path from 'path';
 import * as core from '@actions/core';
 import * as io from '@actions/io';

+import {Context} from '../context';
+import {Cache} from '../cache';
 import {Exec} from '../exec';
+import {Util} from '../util';

 import {ConfigFile} from '../types/docker';

@@ -73,4 +76,89 @@ export class Docker {
  public static async printInfo(): Promise<void> {
    await Exec.exec('docker', ['info']);
  }
+
+  public static parseRepoTag(image: string): {repository: string; tag: string} {
+    let sepPos: number;
+    const digestPos = image.indexOf('@');
+    const colonPos = image.lastIndexOf(':');
+    if (digestPos >= 0) {
+      // priority on digest
+      sepPos = digestPos;
+    } else if (colonPos >= 0) {
+      sepPos = colonPos;
+    } else {
+      return {
+        repository: image,
+        tag: 'latest'
+      };
+    }
+    const tag = image.slice(sepPos + 1);
+    if (tag.indexOf('/') === -1) {
+      return {
+        repository: image.slice(0, sepPos),
+        tag: tag
+      };
+    }
+    return {
+      repository: image,
+      tag: 'latest'
+    };
+  }
+
+  public static async pull(image: string, cache?: boolean): Promise<void> {
+    const parsedImage = Docker.parseRepoTag(image);
+    const repoSanitized = parsedImage.repository.replace(/[^a-zA-Z0-9.]+/g, '--');
+    const tagSanitized = parsedImage.tag.replace(/[^a-zA-Z0-9.]+/g, '--');
+
+    const imageCache = new Cache({
+      htcName: repoSanitized,
+      htcVersion: tagSanitized,
+      baseCacheDir: path.join(Docker.configDir, '.cache', 'images', repoSanitized),
+      cacheFile: 'image.tar'
+    });
+
+    let cacheFoundPath: string | undefined;
+    if (cache) {
+      cacheFoundPath = await imageCache.find();
+      if (cacheFoundPath) {
+        core.info(`Image found from cache in ${cacheFoundPath}`);
+        await Exec.getExecOutput(`docker`, ['load', '-i', cacheFoundPath], {
+          ignoreReturnCode: true
+        }).then(res => {
+          if (res.stderr.length > 0 && res.exitCode != 0) {
+            core.warning(`Failed to load image from cache: ${res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error'}`);
+          }
+        });
+      }
+    }
+
+    let pulled = true;
+    await Exec.getExecOutput(`docker`, ['pull', image], {
+      ignoreReturnCode: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        pulled = false;
+        const err = res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error';
+        if (cacheFoundPath) {
+          core.warning(`Failed to pull image, using one from cache: ${err}`);
+        } else {
+          throw new Error(err);
+        }
+      }
+    });
+
+    if (cache && pulled) {
+      const imageTarPath = path.join(Context.tmpDir(), `${Util.hash(image)}.tar`);
+      await Exec.getExecOutput(`docker`, ['save', '-o', imageTarPath, image], {
+        ignoreReturnCode: true
+      }).then(async res => {
+        if (res.stderr.length > 0 && res.exitCode != 0) {
+          core.warning(`Failed to save image: ${res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error'}`);
+        } else {
+          const cachePath = await imageCache.save(imageTarPath);
+          core.info(`Image cached to ${cachePath}`);
+        }
+      });
+    }
+  }
 }
--- a/src/docker/install.ts
+++ b/src/docker/install.ts
@@ -16,6 +16,7 @@

 import * as child_process from 'child_process';
 import fs from 'fs';
+import fsp from 'fs/promises';
 import os from 'os';
 import path from 'path';
 import retry from 'async-retry';
@@ -29,7 +30,7 @@ import * as tc from '@actions/tool-cache';
 import {Context} from '../context';
 import {Exec} from '../exec';
 import {Util} from '../util';
-import {colimaYamlData, dockerServiceLogsPs1, qemuEntitlements, setupDockerLinuxSh, setupDockerWinPs1} from './assets';
+import {limaYamlData, dockerServiceLogsPs1, setupDockerWinPs1} from './assets';
 import {GitHubRelease} from '../types/github';

 export interface InstallOpts {
@@ -37,6 +38,13 @@ export interface InstallOpts {
  channel?: string;
  runDir: string;
  contextName?: string;
+  daemonConfig?: string;
+}
+
+interface LimaImage {
+  location: string;
+  arch: string;
+  digest?: string;
 }

 export class Install {
@@ -44,14 +52,18 @@ export class Install {
  private readonly version: string;
  private readonly channel: string;
  private readonly contextName: string;
+  private readonly daemonConfig?: string;
  private _version: string | undefined;
  private _toolDir: string | undefined;

+  private readonly limaInstanceName = 'docker-actions-toolkit';
+
  constructor(opts: InstallOpts) {
    this.runDir = opts.runDir;
    this.version = opts.version || 'latest';
    this.channel = opts.channel || 'stable';
    this.contextName = opts.contextName || 'setup-docker-action';
+    this.daemonConfig = opts.daemonConfig;
  }

  get toolDir(): string {
@@ -99,7 +111,7 @@ export class Install {
    return tooldir;
  }

-  public async install(): Promise<void> {
+  public async install(): Promise<string> {
    if (!this.toolDir) {
      throw new Error('toolDir must be set. Run download first.');
    }
@@ -108,16 +120,13 @@ export class Install {
    }
    switch (os.platform()) {
      case 'darwin': {
-        await this.installDarwin();
-        break;
+        return await this.installDarwin();
      }
      case 'linux': {
-        await this.installLinux();
-        break;
+        return await this.installLinux();
      }
      case 'win32': {
-        await this.installWindows();
-        break;
+        return await this.installWindows();
      }
      default: {
        throw new Error(`Unsupported platform: ${os.platform()}`);
@@ -125,26 +134,47 @@ export class Install {
    }
  }

-  private async installDarwin(): Promise<void> {
-    const colimaDir = path.join(os.homedir(), '.colima', 'default'); // TODO: create a custom colima profile to avoid overlap with other actions
-    await io.mkdirP(colimaDir);
-    const dockerHost = `unix://${colimaDir}/docker.sock`;
+  private async installDarwin(): Promise<string> {
+    const limaDir = path.join(os.homedir(), '.lima', this.limaInstanceName);
+    await io.mkdirP(limaDir);
+    const dockerHost = `unix://${limaDir}/docker.sock`;

-    if (!(await Install.colimaInstalled())) {
-      await core.group('Installing colima', async () => {
-        await Exec.exec('brew', ['install', 'colima']);
+    // avoid brew to auto update and upgrade unrelated packages.
+    let envs = Object.assign({}, process.env, {
+      HOMEBREW_NO_AUTO_UPDATE: '1',
+      HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK: '1'
+    }) as {
+      [key: string]: string;
+    };
+
+    if (!(await Install.limaInstalled())) {
+      await core.group('Installing lima', async () => {
+        await Exec.exec('brew', ['install', 'lima'], {env: envs});
      });
    }

-    await core.group('Creating colima config', async () => {
-      const colimaCfg = handlebars.compile(colimaYamlData)({
-        hostArch: Install.platformArch(),
-        dockerVersion: this._version,
-        dockerChannel: this.channel
+    await core.group('Lima version', async () => {
+      await Exec.exec('lima', ['--version'], {env: envs});
+    });
+
+    await core.group('Creating lima config', async () => {
+      let limaDaemonConfig = {};
+      if (this.daemonConfig) {
+        limaDaemonConfig = JSON.parse(this.daemonConfig);
+      }
+      handlebars.registerHelper('stringify', function (obj) {
+        return new handlebars.SafeString(JSON.stringify(obj));
      });
-      core.info(`Writing colima config to ${path.join(colimaDir, 'colima.yaml')}`);
-      fs.writeFileSync(path.join(colimaDir, 'colima.yaml'), colimaCfg);
-      core.info(colimaCfg);
+      const limaCfg = handlebars.compile(limaYamlData)({
+        customImages: Install.limaCustomImages(),
+        daemonConfig: limaDaemonConfig,
+        dockerSock: `${limaDir}/docker.sock`,
+        dockerBinVersion: this._version,
+        dockerBinChannel: this.channel
+      });
+      core.info(`Writing lima config to ${path.join(limaDir, 'lima.yaml')}`);
+      fs.writeFileSync(path.join(limaDir, 'lima.yaml'), limaCfg);
+      core.info(limaCfg);
    });

    const qemuArch = await Install.qemuArch();
@@ -152,32 +182,38 @@ export class Install {
      await Exec.exec(`qemu-system-${qemuArch} --version`);
    });

-    // https://github.com/abiosoft/colima/issues/786#issuecomment-1693629650
-    if (process.env.SIGN_QEMU_BINARY === '1') {
-      await core.group('Signing QEMU binary with entitlements', async () => {
-        const qemuEntitlementsFile = path.join(Context.tmpDir(), 'qemu-entitlements.xml');
-        core.info(`Writing entitlements to ${qemuEntitlementsFile}`);
-        fs.writeFileSync(qemuEntitlementsFile, qemuEntitlements);
-        await Exec.exec(`codesign --sign - --entitlements ${qemuEntitlementsFile} --force /usr/local/bin/qemu-system-${qemuArch}`);
-      });
-    }
-
-    // colima is already started on the runner so env var added in download
+    // lima might already be started on the runner so env var added in download
    // method is not expanded to the running process.
-    const envs = Object.assign({}, process.env, {
+    envs = Object.assign({}, envs, {
      PATH: `${this.toolDir}:${process.env.PATH}`
    }) as {
      [key: string]: string;
    };

-    await core.group('Starting colima', async () => {
+    await core.group('Starting lima instance', async () => {
+      const limaStartArgs = ['start', `--name=${this.limaInstanceName}`];
+      if (process.env.LIMA_START_ARGS) {
+        limaStartArgs.push(process.env.LIMA_START_ARGS);
+      }
      try {
-        await Exec.exec('colima', ['start', '--very-verbose'], {env: envs});
+        await Exec.exec(`limactl ${limaStartArgs.join(' ')}`, [], {env: envs});
      } catch (e) {
-        const haStderrLog = path.join(os.homedir(), '.lima', 'colima', 'ha.stderr.log');
-        if (fs.existsSync(haStderrLog)) {
-          core.info(`Printing debug logs (${haStderrLog}):\n${fs.readFileSync(haStderrLog, {encoding: 'utf8'})}`);
-        }
+        fsp
+          .readdir(limaDir)
+          .then(files => {
+            files
+              .filter(f => path.extname(f) === '.log')
+              .forEach(f => {
+                const logfile = path.join(limaDir, f);
+                const logcontent = fs.readFileSync(logfile, {encoding: 'utf8'}).trim();
+                if (logcontent.length > 0) {
+                  core.info(`### ${logfile}:\n${logcontent}`);
+                }
+              });
+          })
+          .catch(() => {
+            // ignore
+          });
        throw e;
      }
    });
@@ -186,50 +222,73 @@ export class Install {
      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
      await Exec.exec('docker', ['context', 'use', this.contextName]);
    });
+
+    return dockerHost;
  }

-  private async installLinux(): Promise<void> {
+  private async installLinux(): Promise<string> {
    const dockerHost = `unix://${path.join(this.runDir, 'docker.sock')}`;
    await io.mkdirP(this.runDir);

+    const daemonConfigPath = path.join(this.runDir, 'daemon.json');
+    await fs.writeFileSync(daemonConfigPath, '{}');
+
+    let daemonConfig = undefined;
+    const daemonConfigDefaultPath = '/etc/docker/daemon.json';
+    if (fs.existsSync(daemonConfigDefaultPath)) {
+      await core.group('Default Docker daemon config found', async () => {
+        core.info(JSON.stringify(JSON.parse(fs.readFileSync(daemonConfigDefaultPath, {encoding: 'utf8'})), null, 2));
+      });
+      daemonConfig = JSON.parse(fs.readFileSync(daemonConfigDefaultPath, {encoding: 'utf8'}));
+    }
+    if (this.daemonConfig) {
+      daemonConfig = Object.assign(daemonConfig || {}, JSON.parse(this.daemonConfig));
+    }
+
+    if (daemonConfig) {
+      const daemonConfigStr = JSON.stringify(daemonConfig, null, 2);
+      await core.group('Writing Docker daemon config', async () => {
+        fs.writeFileSync(daemonConfigPath, daemonConfigStr);
+        core.info(daemonConfigStr);
+      });
+    }
+
    await core.group('Start Docker daemon', async () => {
      const bashPath: string = await io.which('bash', true);
-      const proc = await child_process.spawn(`sudo -E ${bashPath} ${setupDockerLinuxSh()}`, [], {
-        detached: true,
-        shell: true,
-        stdio: ['ignore', process.stdout, process.stderr],
-        env: Object.assign({}, process.env, {
-          TOOLDIR: this.toolDir,
-          RUNDIR: this.runDir,
-          DOCKER_HOST: dockerHost
-        }) as {
-          [key: string]: string;
+      const cmd = `${this.toolDir}/dockerd --host="${dockerHost}" --config-file="${daemonConfigPath}" --exec-root="${this.runDir}/execroot" --data-root="${this.runDir}/data" --pidfile="${this.runDir}/docker.pid" --userland-proxy=false`;
+      core.info(`[command] ${cmd}`); // https://github.com/actions/toolkit/blob/3d652d3133965f63309e4b2e1c8852cdbdcb3833/packages/exec/src/toolrunner.ts#L47
+      const proc = await child_process.spawn(
+        // We can't use Exec.exec here because we need to detach the process to
+        // avoid killing it when the action finishes running. Even if detached,
+        // we also need to run dockerd in a subshell and unref the process so
+        // GitHub Action doesn't wait for it to finish.
+        `sudo -E ${bashPath} << EOF
+( ${cmd} 2>&1 | tee "${this.runDir}/dockerd.log" ) &
+EOF`,
+        [],
+        {
+          detached: true,
+          shell: true,
+          stdio: ['ignore', process.stdout, process.stderr]
        }
-      });
+      );
      proc.unref();
-      const retries = 20;
+      await Util.sleep(3);
+      const retries = 10;
      await retry(
        async bail => {
-          await Exec.getExecOutput(`docker version`, undefined, {
-            ignoreReturnCode: true,
-            silent: true,
-            env: Object.assign({}, process.env, {
-              DOCKER_HOST: dockerHost
-            }) as {
-              [key: string]: string;
-            }
-          })
-            .then(res => {
-              if (res.stderr.length > 0 && res.exitCode != 0) {
-                bail(new Error(res.stderr));
-                return false;
+          try {
+            await Exec.getExecOutput(`docker version`, undefined, {
+              silent: true,
+              env: Object.assign({}, process.env, {
+                DOCKER_HOST: dockerHost
+              }) as {
+                [key: string]: string;
              }
-              return res.exitCode == 0;
-            })
-            .catch(error => {
-              bail(error);
-              return false;
            });
+          } catch (e) {
+            bail(e);
+          }
        },
        {
          retries: retries,
@@ -246,16 +305,39 @@ export class Install {
      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
      await Exec.exec('docker', ['context', 'use', this.contextName]);
    });
+
+    return dockerHost;
  }

-  private async installWindows(): Promise<void> {
+  private async installWindows(): Promise<string> {
    const dockerHost = 'npipe:////./pipe/setup_docker_action';

+    let daemonConfig = undefined;
+    const daemonConfigPath = path.join(this.runDir, 'daemon.json');
+    if (fs.existsSync(daemonConfigPath)) {
+      await core.group('Default Docker daemon config found', async () => {
+        core.info(JSON.stringify(JSON.parse(fs.readFileSync(daemonConfigPath, {encoding: 'utf8'})), null, 2));
+      });
+      daemonConfig = JSON.parse(fs.readFileSync(daemonConfigPath, {encoding: 'utf8'}));
+    }
+    if (this.daemonConfig) {
+      daemonConfig = Object.assign(daemonConfig || {}, JSON.parse(this.daemonConfig));
+    }
+
+    let daemonConfigStr = '{}';
+    if (daemonConfig) {
+      daemonConfigStr = JSON.stringify(daemonConfig, null, 2);
+      await core.group('Docker daemon config', async () => {
+        core.info(daemonConfigStr);
+      });
+    }
+
    await core.group('Install Docker daemon service', async () => {
      const setupCmd = await Util.powershellCommand(setupDockerWinPs1(), {
        ToolDir: this.toolDir,
        RunDir: this.runDir,
-        DockerHost: dockerHost
+        DockerHost: dockerHost,
+        DaemonConfig: daemonConfigStr
      });
      await Exec.exec(setupCmd.command, setupCmd.args);
      const logCmd = await Util.powershellCommand(dockerServiceLogsPs1());
@@ -266,6 +348,8 @@ export class Install {
      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
      await Exec.exec('docker', ['context', 'use', this.contextName]);
    });
+
+    return dockerHost;
  }

  public async tearDown(): Promise<void> {
@@ -293,10 +377,15 @@ export class Install {

  private async tearDownDarwin(): Promise<void> {
    await core.group('Docker daemon logs', async () => {
-      await Exec.exec('colima', ['exec', '--', 'cat', '/var/log/docker.log']);
+      await Exec.exec('limactl', ['shell', '--tty=false', this.limaInstanceName, 'sudo', 'journalctl', '-u', 'docker.service', '-l', '--no-pager']).catch(() => {
+        core.warning(`Failed to get Docker daemon logs`);
+      });
    });
-    await core.group('Stopping colima', async () => {
-      await Exec.exec('colima', ['stop', '--very-verbose']);
+    await core.group('Stopping lima instance', async () => {
+      await Exec.exec('limactl', ['stop', '--tty=false', this.limaInstanceName, '--force']);
+    });
+    await core.group('Removing lima instance', async () => {
+      await Exec.exec('limactl', ['delete', '--tty=false', this.limaInstanceName, '--force']);
    });
    await core.group('Removing Docker context', async () => {
      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
@@ -311,13 +400,17 @@ export class Install {
      core.info(fs.readFileSync(path.join(this.runDir, 'dockerd.log'), {encoding: 'utf8'}));
    });
    await core.group('Stopping Docker daemon', async () => {
-      await Exec.exec('sudo', ['kill', fs.readFileSync(path.join(this.runDir, 'docker.pid')).toString().trim()]);
+      await Exec.exec('sudo', ['kill', '-s', 'SIGTERM', fs.readFileSync(path.join(this.runDir, 'docker.pid')).toString().trim()]);
+      await Util.sleep(5);
    });
    await core.group('Removing Docker context', async () => {
      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
    });
    await core.group(`Cleaning up runDir`, async () => {
-      await Exec.exec('sudo', ['rm', '-rf', this.runDir]);
+      await Exec.exec('sudo', ['rm', '-rf', this.runDir], {
+        ignoreReturnCode: true,
+        failOnStdErr: false
+      });
    });
  }

@@ -363,6 +456,9 @@ export class Install {
      case 'ppc64': {
        return 'ppc64le';
      }
+      case 'arm64': {
+        return 'aarch64';
+      }
      case 'arm': {
        // eslint-disable-next-line @typescript-eslint/no-explicit-any
        const arm_version = (process.config.variables as any).arm_version;
@@ -384,15 +480,15 @@ export class Install {
    }
  }

-  private static async colimaInstalled(): Promise<boolean> {
+  private static async limaInstalled(): Promise<boolean> {
    return await io
-      .which('colima', true)
+      .which('lima', true)
      .then(res => {
-        core.debug(`docker.Install.colimaAvailable ok: ${res}`);
+        core.debug(`docker.Install.limaAvailable ok: ${res}`);
        return true;
      })
      .catch(error => {
-        core.debug(`docker.Install.colimaAvailable error: ${error}`);
+        core.debug(`docker.Install.limaAvailable error: ${error}`);
        return false;
      });
  }
@@ -426,4 +522,25 @@ export class Install {
    }
    return releases[version];
  }
+
+  public static limaCustomImages(): LimaImage[] {
+    const res: LimaImage[] = [];
+    const env = process.env.LIMA_IMAGES;
+    if (!env) {
+      return res;
+    }
+    for (const input of Util.getList(env, {ignoreComma: true, comment: '#'})) {
+      const archIndex = input.indexOf(':');
+      const arch = input.substring(0, archIndex).trim();
+      const digestIndex = input.indexOf('@');
+      const location = input.substring(archIndex + 1, digestIndex !== -1 ? digestIndex : undefined).trim();
+      const digest = digestIndex !== -1 ? input.substring(digestIndex + 1).trim() : '';
+      res.push({
+        location: location,
+        arch: arch,
+        digest: digest
+      });
+    }
+    return res;
+  }
 }
--- a/src/git.ts
+++ b/src/git.ts
@@ -89,13 +89,12 @@ export class Git {
  }

  public static async ref(): Promise<string> {
-    return await Git.exec(['symbolic-ref', 'HEAD']).catch(() => {
-      // if it fails (for example in a detached HEAD state), falls back to
-      // using git tag or describe to get the exact matching tag name.
-      return Git.tag().then(tag => {
-        return `refs/tags/${tag}`;
-      });
-    });
+    const isHeadDetached = await Git.isHeadDetached();
+    if (isHeadDetached) {
+      return await Git.getDetachedRef();
+    }
+
+    return await Git.exec(['symbolic-ref', 'HEAD']);
  }

  public static async fullCommit(): Promise<string> {
@@ -115,6 +114,44 @@ export class Git {
    });
  }

+  private static async isHeadDetached(): Promise<boolean> {
+    return await Git.exec(['branch', '--show-current']).then(res => {
+      return res.length == 0;
+    });
+  }
+
+  private static async getDetachedRef(): Promise<string> {
+    const res = await Git.exec(['show', '-s', '--pretty=%D']);
+
+    // Can be "HEAD, <tagname>" or "grafted, HEAD, <tagname>"
+    const refMatch = res.match(/^(grafted, )?HEAD, (.*)$/);
+
+    if (!refMatch || !refMatch[2]) {
+      throw new Error(`Cannot find detached HEAD ref in "${res}"`);
+    }
+
+    const ref = refMatch[2].trim();
+
+    // Tag refs are formatted as "tag: <tagname>"
+    if (ref.startsWith('tag: ')) {
+      return `refs/tags/${ref.split(':')[1].trim()}`;
+    }
+
+    // Branch refs are formatted as "<origin>/<branch-name>, <branch-name>"
+    const branchMatch = ref.match(/^[^/]+\/[^/]+, (.+)$/);
+    if (branchMatch) {
+      return `refs/heads/${branchMatch[1].trim()}`;
+    }
+
+    // Pull request merge refs are formatted as "pull/<number>/<state>"
+    const prMatch = ref.match(/^pull\/\d+\/(head|merge)$/);
+    if (prMatch) {
+      return `refs/${ref}`;
+    }
+
+    throw new Error(`Unsupported detached HEAD ref in "${res}"`);
+  }
+
  private static async exec(args: string[] = []): Promise<string> {
    return await Exec.getExecOutput(`git`, args, {
      ignoreReturnCode: true,
--- a/src/github.ts
+++ b/src/github.ts
@@ -14,13 +14,23 @@
 * limitations under the License.
 */

-import {GitHub as Octokit} from '@actions/github/lib/utils';
+import crypto from 'crypto';
+import fs from 'fs';
+import path from 'path';
+import {CreateArtifactRequest, FinalizeArtifactRequest, StringValue} from '@actions/artifact/lib/generated';
+import {internalArtifactTwirpClient} from '@actions/artifact/lib/internal/shared/artifact-twirp-client';
+import {getBackendIdsFromToken} from '@actions/artifact/lib/internal/shared/util';
+import {getExpiration} from '@actions/artifact/lib/internal/upload/retention';
+import {InvalidResponseError, NetworkError} from '@actions/artifact';
 import * as core from '@actions/core';
 import * as github from '@actions/github';
+import {GitHub as Octokit} from '@actions/github/lib/utils';
 import {Context} from '@actions/github/lib/context';
-import jwt_decode from 'jwt-decode';
+import {TransferProgressEvent} from '@azure/core-http';
+import {BlobClient, BlobHTTPHeaders} from '@azure/storage-blob';
+import {jwtDecode, JwtPayload} from 'jwt-decode';

-import {GitHubActionsRuntimeToken, GitHubActionsRuntimeTokenAC, GitHubRepo} from './types/github';
+import {GitHubActionsRuntimeToken, GitHubActionsRuntimeTokenAC, GitHubRepo, UploadArtifactOpts, UploadArtifactResponse} from './types/github';

 export interface GitHubOpts {
  token?: string;
@@ -49,9 +59,13 @@ export class GitHub {
    return process.env.GITHUB_API_URL || 'https://api.github.com';
  }

+  static get workflowRunURL(): string {
+    return `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}/actions/runs/${github.context.runId}`;
+  }
+
  static get actionsRuntimeToken(): GitHubActionsRuntimeToken | undefined {
    const token = process.env['ACTIONS_RUNTIME_TOKEN'] || '';
-    return token ? jwt_decode<GitHubActionsRuntimeToken>(token) : undefined;
+    return token ? (jwtDecode<JwtPayload>(token) as GitHubActionsRuntimeToken) : undefined;
  }

  public static async printActionsRuntimeTokenACs() {
@@ -86,4 +100,94 @@ export class GitHub {
      throw new Error(`Cannot parse GitHub Actions Runtime Token ACs: ${e.message}`);
    }
  }
+
+  public static async uploadArtifact(opts: UploadArtifactOpts): Promise<UploadArtifactResponse> {
+    const artifactName = path.basename(opts.filename);
+    const backendIds = getBackendIdsFromToken();
+    const artifactClient = internalArtifactTwirpClient();
+
+    core.info(`Uploading ${artifactName} to blob storage`);
+
+    const createArtifactReq: CreateArtifactRequest = {
+      workflowRunBackendId: backendIds.workflowRunBackendId,
+      workflowJobRunBackendId: backendIds.workflowJobRunBackendId,
+      name: artifactName,
+      version: 4
+    };
+
+    const expiresAt = getExpiration(opts?.retentionDays);
+    if (expiresAt) {
+      createArtifactReq.expiresAt = expiresAt;
+    }
+
+    const createArtifactResp = await artifactClient.CreateArtifact(createArtifactReq);
+    if (!createArtifactResp.ok) {
+      throw new InvalidResponseError('cannot create artifact client');
+    }
+
+    let uploadByteCount = 0;
+    const blobClient = new BlobClient(createArtifactResp.signedUploadUrl);
+    const blockBlobClient = blobClient.getBlockBlobClient();
+
+    const headers: BlobHTTPHeaders = {
+      blobContentDisposition: `attachment; filename="${artifactName}"`
+    };
+    if (opts.mimeType) {
+      headers.blobContentType = opts.mimeType;
+    }
+    core.debug(`Upload headers: ${JSON.stringify(headers)}`);
+
+    try {
+      core.info('Beginning upload of artifact content to blob storage');
+      await blockBlobClient.uploadFile(opts.filename, {
+        blobHTTPHeaders: headers,
+        onProgress: (progress: TransferProgressEvent): void => {
+          core.info(`Uploaded bytes ${progress.loadedBytes}`);
+          uploadByteCount = progress.loadedBytes;
+        }
+      });
+    } catch (error) {
+      if (NetworkError.isNetworkErrorCode(error?.code)) {
+        throw new NetworkError(error?.code);
+      }
+      throw error;
+    }
+
+    core.info('Finished uploading artifact content to blob storage!');
+
+    const sha256Hash = crypto.createHash('sha256').update(fs.readFileSync(opts.filename)).digest('hex');
+    core.info(`SHA256 hash of uploaded artifact is ${sha256Hash}`);
+
+    const finalizeArtifactReq: FinalizeArtifactRequest = {
+      workflowRunBackendId: backendIds.workflowRunBackendId,
+      workflowJobRunBackendId: backendIds.workflowJobRunBackendId,
+      name: artifactName,
+      size: uploadByteCount ? uploadByteCount.toString() : '0'
+    };
+
+    if (sha256Hash) {
+      finalizeArtifactReq.hash = StringValue.create({
+        value: `sha256:${sha256Hash}`
+      });
+    }
+
+    core.info(`Finalizing artifact upload`);
+    const finalizeArtifactResp = await artifactClient.FinalizeArtifact(finalizeArtifactReq);
+    if (!finalizeArtifactResp.ok) {
+      throw new InvalidResponseError('Cannot finalize artifact upload');
+    }
+
+    const artifactId = BigInt(finalizeArtifactResp.artifactId);
+    core.info(`Artifact successfully finalized (${artifactId})`);
+
+    const artifactURL = `${GitHub.workflowRunURL}/artifacts/${artifactId}`;
+    core.info(`Artifact download URL: ${artifactURL}`);
+
+    return {
+      id: Number(artifactId),
+      filename: artifactName,
+      size: uploadByteCount,
+      url: artifactURL
+    };
+  }
 }
--- a/src/index.ts
+++ b/src/index.ts
@@ -16,6 +16,8 @@

 import * as core from '@actions/core';

+import {Cache} from './cache';
+
 const isPost = !!process.env['STATE_isPost'];
 if (!isPost) {
  core.saveState('isPost', 'true');
@@ -36,7 +38,12 @@ export async function run(main: () => Promise<void>, post?: () => Promise<void>)
    } catch (e) {
      core.setFailed(e.message);
    }
-  } else if (post) {
-    await post();
+  } else {
+    if (post) {
+      await post();
+    }
+    await core.group(`Post cache`, async () => {
+      await Cache.post();
+    });
  }
 }
--- a/src/types/bake.ts
+++ b/src/types/bake.ts
@@ -19,6 +19,10 @@ export interface BakeDefinition {
  target: Record<string, Target>;
 }

+export interface BakeMetadata {
+  [target: string]: Record<string, string>;
+}
+
 export interface Group {
  targets: Array<string>;
 }
@@ -39,7 +43,9 @@ export interface Target {
  platforms?: Array<string>;
  pull?: boolean;
  secret?: Array<string>;
+  'shm-size'?: string;
  ssh?: Array<string>;
  tags?: Array<string>;
  target?: string;
+  ulimits?: Array<string>;
 }
--- a/src/types/build.ts
+++ b/src/types/build.ts
@@ -0,0 +1,19 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export type BuildMetadata = {
+  [key: string]: string;
+};
--- a/src/types/builder.ts
+++ b/src/types/builder.ts
@@ -32,6 +32,7 @@ export interface Node {
 export interface NodeInfo extends Node {
  status?: string;
  buildkit?: string;
+  features?: Record<string, boolean>;
  labels?: Record<string, string>;
  gcPolicy?: Array<GCPolicy>;
 }
--- a/src/types/buildx.ts
+++ b/src/types/buildx.ts
@@ -19,3 +19,28 @@ export interface Cert {
  cert?: string;
  key?: string;
 }
+
+export interface DownloadVersion {
+  key: string;
+  version: string;
+  downloadURL: string;
+  releasesURL: string;
+}
+
+export interface LocalRefsOpts {
+  dir: string;
+  builderName?: string;
+  nodeName?: string;
+  since?: Date;
+}
+
+export interface LocalRefsResponse {
+  [ref: string]: LocalState;
+}
+
+export interface LocalState {
+  Target: string;
+  LocalPath: string;
+  DockerfilePath: string;
+  GroupRef?: string;
+}
--- a/src/types/github.ts
+++ b/src/types/github.ts
@@ -34,3 +34,16 @@ export interface GitHubActionsRuntimeTokenAC {
  Scope: string;
  Permission: number;
 }
+
+export interface UploadArtifactOpts {
+  filename: string;
+  mimeType?: string;
+  retentionDays?: number;
+}
+
+export interface UploadArtifactResponse {
+  id: number;
+  filename: string;
+  size: number;
+  url: string;
+}
--- a/src/util.ts
+++ b/src/util.ts
@@ -14,27 +14,30 @@
 * limitations under the License.
 */

+import crypto from 'crypto';
 import fs from 'fs';
 import * as core from '@actions/core';
 import * as io from '@actions/io';
 import {parse} from 'csv-parse/sync';

-export interface InputListOpts {
+export interface ListOpts {
  ignoreComma?: boolean;
  comment?: string;
  quote?: string | boolean | Buffer | null;
 }

 export class Util {
-  public static getInputList(name: string, opts?: InputListOpts): string[] {
-    const res: Array<string> = [];
+  public static getInputList(name: string, opts?: ListOpts): string[] {
+    return this.getList(core.getInput(name), opts);
+  }

-    const items = core.getInput(name);
-    if (items == '') {
+  public static getList(input: string, opts?: ListOpts): string[] {
+    const res: Array<string> = [];
+    if (input == '') {
      return res;
    }

-    const records = parse(items, {
+    const records = parse(input, {
      columns: false,
      relaxQuotes: true,
      comment: opts?.comment,
@@ -133,4 +136,42 @@ export class Util {
    }
    return str.substring(0, index);
  }
+
+  public static sleep(seconds: number) {
+    return new Promise(resolve => setTimeout(resolve, seconds * 1000));
+  }
+
+  public static hash(input: string): string {
+    return crypto.createHash('sha256').update(input).digest('hex');
+  }
+
+  // https://github.com/golang/go/blob/f6b93a4c358b28b350dd8fe1780c1f78e520c09c/src/strconv/atob.go#L7-L18
+  public static parseBool(str: string): boolean {
+    switch (str) {
+      case '1':
+      case 't':
+      case 'T':
+      case 'true':
+      case 'TRUE':
+      case 'True':
+        return true;
+      case '0':
+      case 'f':
+      case 'F':
+      case 'false':
+      case 'FALSE':
+      case 'False':
+        return false;
+      default:
+        throw new Error(`parseBool syntax error: ${str}`);
+    }
+  }
+
+  public static formatFileSize(bytes: number): string {
+    if (bytes === 0) return '0 Bytes';
+    const k = 1024;
+    const sizes = ['Bytes', 'KB', 'MB', 'GB', 'TB', 'PB', 'EB', 'ZB', 'YB'];
+    const i = Math.floor(Math.log(bytes) / Math.log(k));
+    return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];
+  }
 }
--- a/yarn.lock
+++ b/yarn.lock
				`@@ -0,0 +1 @@`
				{"Definition":"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","Targets":["dev"],"Refs":["vzxn0jxr44khtq7hc8drtzwjv"]}
				`@@ -0,0 +1 @@`
				`{"LocalPath":"/home/crazymax/github/docker/docker-alpine-s6","DockerfilePath":""}`
				`@@ -0,0 +1 @@`
				`{"Target":"dev","LocalPath":"/home/crazymax/github/docker_org/docker","DockerfilePath":"/home/crazymax/github/docker_org/docker/Dockerfile","GroupRef":"1fugf958r4peyg86h6scim5t5"}`
				`@@ -0,0 +1 @@`
				`{"Target":"default","LocalPath":"/home/crazymax/github/docker_org/compose/.dev/47231","DockerfilePath":"/home/crazymax/github/docker_org/compose/.dev/47231/bad/Dockerfile"}`