Update module github.com/moby/buildkit to v0.26.2

[pulumi-renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/moby/buildkit	require	minor	v0.20.1 -> v0.26.2

---

Release Notes

moby/buildkit (github.com/moby/buildkit)

v0.26.2

Compare Source

Welcome to the v0.26.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi

Notable Changes

• Fix possible error when uploading big files to S3 cache exporter #​6373

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.26.1

v0.26.1

Compare Source

Welcome to the v0.26.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi

Notable Changes

• Fix excessive chunking when fetching blobs #​6366

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.26.0

v0.26.0

Compare Source

buildkit 0.26.0

Welcome to the v0.26.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• Brian Goff
• Dawei Wei
• Alberto Garcia Hierro
• Damon Holden
• David Karlsson
• Justin Chadwell
• Mikhail Dmitrichenko
• bpascard

Notable Changes

• Change how file checksum is calculated when wildcards and include/exclude patterns are involved to better align with how they are calculated in the non-wildcard path. #​6238
• LLB Copy operation now allows specifying required paths to be included in the copy. #​6229
• Fixed race condition between cache and snapshot for the Git source. #​6281
• Fixed race condition in HTTP cache key digest computation that could cause duplicate requests and digest mismatch errors. #​6292
• Runc container runtime has been updated to v1.3.3. #​6331
• Source metadata requests via ResolveSourceMeta, previously available for image sources, can now be performed for Git sources. This can be used to resolve Git commit and tag checksums and also to access the raw commit and tag objects for further verification. #​6283
• Source metadata requests via ResolveSourceMeta, previously available for image sources, can now be performed for HTTP sources. This can be used to access artifact checksums, last-modified time etc. #​6285
• Git sources can now perform verification of GPG or SSH signatures on commits and tags. Enable git signature checks via source policy. #​6300 #​6344
• contentutil package now supports moving referrer objects when using CopyChain function. #​6336
• Fix fetch by commit for git source when tags change or branch names are updated. #​6259
• Fix http connection leak when resolving metadata from http source on non-2xx HTTP status codes. #​6313
• A new type of source policies has been added that supports making policy decisions on the client side via session tunnel. #​6276
• Add buildkit capability for detecting if source policy decisions can be made via session tunnel. #​6345
• Avoid intermediate type wrappers for custom fields in provenance. #​6275
• Add raw commit/tag object access when resolving git source metadata. #​6298
• Move image source resolver away from the ResolveImageConfig type to ResolveSourceMetadata. #​6330 # probably not needed for changelog
• Fix inline cache used with multiple exporters. #​6263
• Fix handling multiple inline cache exporters configured for single build. #​6272
• Fix handling of annotated Git tags. The pin of the annotated tag should be the SHA of the tag and not the commit it is pointing to. #​6251
• Fix source policy attributes validation when multiple rules use the same identifier. #​6342

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0 -> v1.18.2
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.0 -> v1.11.0
• github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 -> v1.11.2
• github.com/AzureAD/microsoft-authentication-library-for-go v1.3.2 -> v1.4.2
• github.com/Microsoft/hcsshim v0.13.0 -> v0.14.0-rc.1
• github.com/ProtonMail/go-crypto v1.3.0 new
• github.com/aws/aws-sdk-go-v2 v1.30.3 -> v1.38.1
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 -> v1.7.0
• github.com/aws/aws-sdk-go-v2/config v1.27.27 -> v1.31.3
• github.com/aws/aws-sdk-go-v2/credentials v1.17.27 -> v1.18.7
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 -> v1.18.4
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.8 -> v1.17.10
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 -> v1.4.4
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 -> v2.7.4
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 -> v1.8.3
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 -> v1.4.4
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 -> v1.13.0
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 -> v1.8.4
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 -> v1.13.4
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 -> v1.19.4
• github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 -> v1.87.1
• github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 -> v1.28.2
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 -> v1.34.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 -> v1.38.0
• github.com/aws/smithy-go v1.20.3 -> v1.22.5
• github.com/cenkalti/backoff/v5 v5.0.3 new
• github.com/cloudflare/circl v1.6.0 new
• github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0
• github.com/containerd/containerd/api v1.9.0 -> v1.10.0
• github.com/containerd/containerd/v2 v2.1.4 -> v2.2.0
• github.com/containerd/go-cni v1.1.12 -> v1.1.13
• github.com/containerd/nydus-snapshotter v0.15.2 -> v0.15.4
• github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
• github.com/containerd/stargz-snapshotter v0.16.3 -> v0.17.0
• github.com/containerd/stargz-snapshotter/estargz v0.16.3 -> v0.17.0
• github.com/containernetworking/plugins v1.7.1 -> v1.8.0
• github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
• github.com/docker/cli v28.4.0 -> v28.5.0
• github.com/fatih/color v1.18.0 new
• github.com/go-logr/logr v1.4.2 -> v1.4.3
• github.com/gofrs/flock v0.12.1 -> v0.13.0
• github.com/golang-jwt/jwt/v5 v5.2.2 -> v5.3.0
• github.com/golang/groupcache 41bb18b -> 2c02b82
• github.com/google/pprof 27863c8 -> f64d9cf
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 -> v2.27.2
• github.com/hanwen/go-fuse/v2 v2.6.3 -> v2.8.0
• github.com/hashicorp/go-retryablehttp v0.7.7 -> v0.7.8
• github.com/hiddeco/sshsig v0.2.0 new
• github.com/klauspost/compress v1.18.0 -> v1.18.1
• github.com/mattn/go-colorable v0.1.14 new
• github.com/moby/policy-helpers bcaa71c new
• github.com/moby/sys/capability v0.4.0 new
• github.com/opencontainers/runtime-tools 2e043c6 -> 0ea5ed0
• github.com/prometheus/client_golang v1.22.0 -> v1.23.2
• github.com/prometheus/client_model v0.6.1 -> v0.6.2
• github.com/prometheus/common v0.62.0 -> v0.66.1
• github.com/prometheus/procfs v0.15.1 -> v0.16.1
• github.com/secure-systems-lab/go-securesystemslib v0.6.0 -> v0.9.1
• github.com/stretchr/testify v1.10.0 -> v1.11.1
• github.com/vbatts/tar-split v0.12.1 -> v0.12.2
• go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.61.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 -> v0.61.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 -> v0.61.0
• go.opentelemetry.io/otel v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/metric v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/sdk v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/sdk/metric v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/trace v1.35.0 -> v1.38.0
• go.opentelemetry.io/proto/otlp v1.5.0 -> v1.7.1
• go.yaml.in/yaml/v2 v2.4.2 new
• golang.org/x/crypto v0.37.0 -> v0.42.0
• golang.org/x/exp 7e4ce0a -> df92998
• golang.org/x/mod v0.24.0 -> v0.29.0
• golang.org/x/net v0.39.0 -> v0.44.0
• golang.org/x/sync v0.16.0 -> v0.17.0
• golang.org/x/sys v0.33.0 -> v0.37.0
• golang.org/x/text v0.24.0 -> v0.29.0
• golang.org/x/time v0.11.0 -> v0.14.0
• google.golang.org/genproto/googleapis/api 56aae31 -> c5933d9
• google.golang.org/genproto/googleapis/rpc 56aae31 -> c5933d9
• google.golang.org/grpc v1.72.2 -> v1.76.0
• google.golang.org/protobuf v1.36.9 -> v1.36.10
• sigs.k8s.io/yaml v1.4.0 -> v1.6.0

Previous release can be found at v0.25.2

v0.25.2

Compare Source

Welcome to the v0.25.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi

Notable Changes

• Update Runc to v1.3.3 #​6332

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.25.1

v0.25.1

Compare Source

buildkit 0.25.1

Welcome to the v0.25.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax

Notable Changes

• Fix possible cache export failure when previously exported cache blob has been deleted #​6261
• Fix possible cache corruption or error when using inline cache with multiple exporters #​6263
• Fix intermediate wrapper for custom provenance attestation fields #​6275

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.25.0

v0.25.0

Compare Source

buildkit 0.25.0

Welcome to the v0.25.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Jonathan A. Sternberg
• Akihiro Suda
• Brian Goff
• greggu
• Sebastiaan van Stijn
• Søren Hansen
• Vigilans
• Sam Oluwalana
• Shivam
• Tianon Gravi
• nikelborm

Notable Changes

• Git sources now support working with SHA-256 based code repositories. #​6194
• New Checksum has been added to llb.Image to specify verification digest of the image. Unlike the existing digest in the image reference, where digest overrides the tag if both are set, in this mode, the image is resolved by the tag and only verified by checksum. #​6234
• The remote cache exporter (also used in provenance creation) has been completely rewritten to solve various concurrency and loop issues. There should be no user-visible changes in the cache format itself. #​6129
• BuildKit daemon now supports a way to add custom fields to the provenance attestation to specify the environment BuildKit is running in. Additional field are picked up from config files in /etc/buildkitd/provenance.d directory. #​6210
• Containerd executor on Windows now supports HyperVIsolation option. #​6224
• Included runc container runtime has been updated to v1.3.1 #​6236
• CNI plugins have been updated to v1.8.0 #​6185
• Qemu emulation binaries have been updated to v10.0.4. #​6215
• Fix possible infinite loop when exporting cache #​6186
• Fix issue where some errors could lose their source or stack information when wrapped with errors.Join. #​6226
• Multiple fixes to how the builds from Git context are recorded in provenance. #​6213
• Fix issue where build arguments could be missing in the history record's provenance attestation. #​6221
• Fix issue where materials=false could be incorrectly set in provenance attestation for a build that used frontend inputs. #​6203
• Fix not setting the platform in the subject descriptor of the OCI artifact-style attestation manifest. This confused some registries. #​6191
• Fix some improper formatting in error messages. #​6192
• Fix issue with checking out annotated tags by full reference. #​6244

Dependency Changes

• github.com/docker/cli v28.3.3 -> v28.4.0
• google.golang.org/protobuf v1.36.6 -> v1.36.9

Previous release can be found at v0.24.0

v0.24.0

Compare Source

Welcome to the v0.24.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Akihiro Suda
• Andrés Delfino
• Alberto Contreras
• Alberto Garcia Hierro
• Anthony Nandaa
• Baptiste Girard-Carrabin
• Derek McGowan
• Justin Chadwell
• Kohei Tokunaga
• Michael Dwan

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.18.0
• LLB Git operation now allows controlling if submodules should be initialized (default) or skipped. #​6173
• Max-parallelism control can now also be set with --max-parallelism daemon flag. #​6105
• Improve errors when using build arguments in COPY --from flag value. #​6153
• Debug server now supports new endpoints for inspecting the cache key database and remote cache manifests. In order to debug plaintexts of the cache keys --save-cache-debug needs to be enabled in the daemon. #​6076 #​6061 #​6133
• Base Alpine version has been updated to 3.22. #​6048
• Client now allows configuring exporter content store. #​6045
• Release binary artifacts now use Git commit time as timestamp. #​6037
• Fix incorrect empty checkout when accessing Git source with subdir pointing to a submodule. #​6170
• Fix allowing device entitlement for buildkitd daemon with startup flags. #​6080
• Fix possible panic from BoltDB when copying lots of files between build steps. #​6159 #​6136 #​6165
• Fix possible deadlocks from the error handler in the sync package. #​6158
• Fix issue with exporting cache with different compression formats for images with lots of layers. #​6092 #​6088
• Fix displaying error details on unexpected response status code. #​6067
• Fix incorrect empty checkout when accessing Git source with subdir pointing to a submodule. #​6170

Dependency Changes

• github.com/containerd/containerd/v2 v2.1.3 -> v2.1.4
• github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7
• github.com/docker/cli v28.2.2 -> v28.3.3
• github.com/docker/docker v28.2.2 -> v28.3.3
• github.com/moby/profiles/seccomp v0.1.0 new
• github.com/urfave/cli v1.22.16 -> v1.22.17
• go.etcd.io/bbolt v1.4.0 -> v1.4.3
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.56.0 -> v0.60.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0 -> v1.35.0
• golang.org/x/sync v0.14.0 -> v0.16.0

Previous release can be found at v0.23.2

v0.23.2

Compare Source

Welcome to the v0.23.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi

Notable Changes

• Fix attestation filename in local exporter. #​6051
• Fix expired cache URLs in GitHub Actions cache exporter. #​6053

Dependency Changes

• github.com/tonistiigi/go-actions-cache 388a2ec -> 378c5ed

Previous release can be found at v0.23.1

v0.23.1

Compare Source

Welcome to the v0.23.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Derek McGowan

Notable Changes

• Fix a possible issue where pulling images from some registries that don't handle the Range header correctly(Artifactory) would fail. #​6040

Dependency Changes

• github.com/containerd/containerd/v2 v2.1.1 -> v2.1.3

Previous release can be found at v0.23.0

v0.23.0

Compare Source

Welcome to the v0.23.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Anthony Nandaa
• Austin Vazquez
• Brian Goff
• Dan Duvall
• Jonathan A. Sternberg
• Nicolas Schweitzer
• Roberto Villarreal
• Sebastiaan van Stijn
• zfrank

Notable Changes

• Add opt-in support for SLSA provenance v1. This is expected to become the default in a future release. #​6005 docs
• Allow duration based filters on diskusage requests. #​5455
• Allow authorization secrets to be set per hostname with HTTP_AUTH_HEADER_<host> or HTTP_AUTH_TOKEN_<host>. #​6023
• Add support for raw mode in the SSH agent provider. #​6003
• Improve URL joining to prevent malformed GitHub Cache service URLs. #​6026 tonistiigi/go-actions-cache#38
• Update Runc v1.3.0. #​5977
• Fix possible "unknown file mode" error when transferring files on Windows (previous fix did not work). #​6025
• Fix race condition when enabling and disabling privileges in WCOW. #​5959
• Fix unnecessary registry requests for local image lookups if reference contains a digest. #​6029
• Fix privileges error for local exporter in WCOW. #​6007
• Fix OCI export of multi-platform scratch result. #​5996
• Fix handle not found error during cache export. #​5999
• Fix type=local,platform-split=true for single platform build to work the same as it would with a multi-platform build. #​6007
• Fix some data races shown on the race detector. #​6006

Dependency Changes

• github.com/Microsoft/hcsshim v0.12.9 -> v0.13.0
• github.com/containerd/accelerated-container-image v1.2.3 -> v1.3.0
• github.com/containerd/console v1.0.4 -> v1.0.5
• github.com/containerd/containerd/api v1.8.0 -> v1.9.0
• github.com/containerd/containerd/v2 v2.0.5 -> v2.1.1
• github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.1 -> v2.1.6
• github.com/containerd/nydus-snapshotter v0.15.0 -> v0.15.2
• github.com/containernetworking/cni v1.2.3 -> v1.3.0
• github.com/containernetworking/plugins v1.5.1 -> v1.7.1
• github.com/docker/cli v28.1.1 -> v28.2.2
• github.com/docker/docker v28.1.1 -> v28.2.2
• github.com/fsnotify/fsnotify v1.7.0 -> v1.9.0
• github.com/google/pprof a892ee0 -> 27863c8
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 -> v2.26.1
• github.com/in-toto/in-toto-golang v0.5.0 -> v0.9.0
• github.com/opencontainers/runtime-spec v1.2.0 -> v1.2.1
• github.com/opencontainers/selinux v1.11.1 -> v1.12.0
• github.com/prometheus/client_golang v1.20.5 -> v1.22.0
• github.com/prometheus/common v0.55.0 -> v0.62.0
• github.com/secure-systems-lab/go-securesystemslib v0.4.0 -> v0.6.0
• github.com/spdx/tools-golang v0.5.3 -> v0.5.5
• github.com/tonistiigi/fsutil 3f76f81 -> 586307a
• github.com/tonistiigi/go-actions-cache 3e9a664 -> 388a2ec
• github.com/tonistiigi/go-csvvalue ddb21b7 -> 030d3b2
• github.com/vishvananda/netlink 084abd9 -> v1.3.1
• go.etcd.io/bbolt v1.3.11 -> v1.4.0
• go.opentelemetry.io/auto/sdk v1.1.0 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 -> v0.60.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 -> v0.60.0
• go.opentelemetry.io/otel v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/metric v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/sdk v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/sdk/metric v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/trace v1.31.0 -> v1.35.0
• go.opentelemetry.io/proto/otlp v1.3.1 -> v1.5.0
• golang.org/x/sync v0.13.0 -> v0.14.0
• golang.org/x/sys v0.32.0 -> v0.33.0
• google.golang.org/genproto/googleapis/api 324edc3 -> 56aae31
• google.golang.org/genproto/googleapis/rpc 324edc3 -> 56aae31
• google.golang.org/grpc v1.69.4 -> v1.72.2
• google.golang.org/protobuf v1.35.2 -> v1.36.6
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.73 -> v1.2.76
• kernel.org/pub/linux/libs/security/libcap/psx v1.2.73 -> v1.2.76

Previous release can be found at v0.22.0

v0.22.0

Compare Source

Welcome to the v0.22.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Sebastiaan van Stijn
• Alberto Garcia Hierro
• Anthony Nandaa
• Jonathan A. Sternberg
• Bertrand Paquet
• Gleb Nebolyubov
• Justin Chadwell
• liulanzheng

Notable Changes

• Add checksum support to Git source. #​5975
• Allow duration based filters on diskusage requests. #​5455
• Ignore Apple extended file attributes during copy. #​5937 tonistiigi/fsutil#235
• Support for building overlaybd images. #​3867 docs
• Improve error message for registry and local cache export when using image-manifest and oci-mediatypes options. #​5966
• Fix supported platforms reported by the worker. #​5968
• Fix CDI device request by class annotation. #​5969
• Fix panic when using a tiny terminal. #​5967
• CNI plugins have been updated to v1.7.1. #​5533

Dependency Changes

• github.com/containerd/accelerated-container-image v1.2.3 new
• github.com/containerd/containerd/v2 v2.0.4 -> v2.0.5
• github.com/docker/cli v28.0.4 -> v28.1.1
• github.com/docker/docker v28.0.4 -> v28.1.1
• github.com/moby/go-archive 21f3f33 -> v0.1.0
• github.com/moby/sys/atomicwriter v0.1.0 new
• github.com/tonistiigi/fsutil 5b74a7a -> 3f76f81
• github.com/vbatts/tar-split v0.11.6 -> v0.12.1

Previous release can be found at v0.21.1

v0.21.1

Compare Source

Welcome to the v0.21.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• Akihiro Suda
• Gleb Nebolyubov

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.15.1.
• Fix buildctl --tlsdir for non-cert-manager.io tls certificate naming. #​5950
• Fix panic when null cache options were sent using solve grpc API. #​5925

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.21.0

v0.21.0

Compare Source

Welcome to the v0.21.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Jonathan A. Sternberg
• Anthony Nandaa
• Sebastiaan van Stijn
• Dan Duvall
• Austin Vazquez
• Billy Owire
• Derek McGowan
• Gleb Nebolyubov
• Michael Korn

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.15.0. changelog
• Runc container runtime has been updated to v1.2.6. #​5845
• The cache manifest created by --cache-to now defaults to OCI artifact manifest (instead of OCI image index). For old behavior, set image-manifest=false. #​5864
• The cache timeout for registry credentials has been reduced from 10 min to 5 min. #​5859
• Buildctl --tlsdir option now allows filenames compatible with cert-manager.io. #​5886
• Update free-space filter GC/prune filter to not remove all data when no max-space value is set. #​5827
• Mitigate GitHub Actions cache v2 flakiness. #​5805
• Add autoallow and entitlements support to CDI devices. #​5742
• Support authentication in LLB for Git and HTTP. #​5733
• Support for adding additional request header fields for HTTP sources. #​5732
• OpenTelemetry traces now contain spans for layer extraction. #​5831
• containerd image exporter creates dangling images by default. #​5858
• Add support for bind and cache mounts for WCOW. #​5708
• Add session exporter capability. #​5907 #​5908
• Add metadata-only transfer option for local source. #​5897
• Fix X mode to be Linux-compatible for file operations using chmod. #​5850
• Fix --chmod when applied to parent directories. #​5788
• Fix missing user-agent when buildkit requests layers from the registry. #​5834
• Fix missing user-agent for GitHub Actions importer. #​5759 #​5760
• Fix reading secrets from any session on parallel build requests. #​5833
• Fix race condition causing "file used by another process" errors with WCOW. #​5885

Dependency Changes

• github.com/docker/cli v27.5.1 -> v28.0.4
• github.com/docker/docker v27.5.1 -> v28.0.4
• github.com/docker/docker-credential-helpers v0.8.2 -> v0.9.3
• github.com/golang-jwt/jwt/v5 v5.2.1 -> v5.2.2
• github.com/google/go-cmp v0.6.0 -> v0.7.0
• github.com/klauspost/compress v1.17.11 -> v1.18.0
• github.com/moby/go-archive 21f3f33 new
• github.com/moby/sys/user v0.3.0 -> v0.4.0
• github.com/opencontainers/image-spec v1.1.0 -> v1.1.1
• github.com/tonistiigi/dchapes-mode ca0759f -> 73d941a
• github.com/tonistiigi/fsutil b14e27f -> 5b74a7a
• golang.org/x/crypto v0.31.0 -> v0.37.0
• golang.org/x/exp 2d47ceb -> 7e4ce0a
• golang.org/x/mod v0.22.0 -> v0.24.0
• golang.org/x/net v0.33.0 -> v0.39.0
• golang.org/x/sync v0.10.0 -> v0.13.0
• golang.org/x/sys v0.29.0 -> v0.32.0
• golang.org/x/text v0.21.0 -> v0.24.0
• golang.org/x/time v0.6.0 -> v0.11.0
• tags.cncf.io/container-device-interface v0.8.1 -> v1.0.1
• tags.cncf.io/container-device-interface/specs-go v0.8.0 -> v1.0.0

Previous release can be found at v0.20.2

v0.20.2

Compare Source

buildkit 0.20.2

Welcome to the v0.20.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Akihiro Suda
• Derek McGowan
• Jonathan A. Sternberg

Changes

• Fix possible UID overflow when setting user for container #​5844 GHSA-265r-hfxg-fhmg
• update RootlessKit to v2.3.4 #​5825

Dependency Changes

• github.com/containerd/containerd/v2 v2.0.3 -> v2.0.4

Previous release can be found at v0.20.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[pulumi-renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 94 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.1 -> 1.24.3
github.com/docker/cli	v28.0.4+incompatible -> v28.5.0+incompatible
github.com/docker/docker	v28.0.1+incompatible -> v28.5.2+incompatible
github.com/stretchr/testify	v1.10.0 -> v1.11.1
github.com/tonistiigi/fsutil	v0.0.0-20250113203817-b14e27f4135a -> v0.0.0-20250605211040-586307ad452f
github.com/tonistiigi/go-csvvalue	v0.0.0-20240710180619-ddb21b71c0b4 -> v0.0.0-20240814133006-030d3b2625d0
go.opentelemetry.io/otel/metric	v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/sdk	v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/trace	v1.36.0 -> v1.38.0
golang.org/x/exp	v0.0.0-20250718183923-645b1fa84792 -> v0.0.0-20250911091902-df9299821621
google.golang.org/protobuf	v1.36.6 -> v1.36.10
cloud.google.com/go/compute/metadata	v0.6.0 -> v0.7.0
dario.cat/mergo	v1.0.1 -> v1.0.2
github.com/Azure/azure-sdk-for-go/sdk/azcore	v1.17.0 -> v1.18.2
github.com/Azure/azure-sdk-for-go/sdk/azidentity	v1.8.2 -> v1.11.0
github.com/Azure/azure-sdk-for-go/sdk/internal	v1.10.0 -> v1.11.2
github.com/AzureAD/microsoft-authentication-library-for-go	v1.3.3 -> v1.4.2
github.com/ProtonMail/go-crypto	v1.2.0 -> v1.3.0
github.com/aws/aws-sdk-go-v2	v1.30.3 -> v1.38.1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	v1.6.3 -> v1.7.0
github.com/aws/aws-sdk-go-v2/config	v1.27.27 -> v1.31.3
github.com/aws/aws-sdk-go-v2/credentials	v1.17.27 -> v1.18.7
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.16.11 -> v1.18.4
github.com/aws/aws-sdk-go-v2/feature/s3/manager	v1.17.8 -> v1.17.10
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.3.15 -> v1.4.4
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.6.15 -> v2.7.4
github.com/aws/aws-sdk-go-v2/internal/ini	v1.8.0 -> v1.8.3
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.3.15 -> v1.4.4
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.11.3 -> v1.13.0
github.com/aws/aws-sdk-go-v2/service/internal/checksum	v1.3.17 -> v1.8.4
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.11.17 -> v1.13.4
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	v1.17.15 -> v1.19.4
github.com/aws/aws-sdk-go-v2/service/s3	v1.58.2 -> v1.87.1
github.com/aws/aws-sdk-go-v2/service/sso	v1.22.4 -> v1.28.2
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.26.4 -> v1.34.0
github.com/aws/aws-sdk-go-v2/service/sts	v1.30.3 -> v1.38.0
github.com/aws/smithy-go	v1.20.3 -> v1.22.5
github.com/cenkalti/backoff/v5	v5.0.2 -> v5.0.3
github.com/containerd/console	v1.0.4 -> v1.0.5
github.com/containerd/containerd/api	v1.8.0 -> v1.10.0
github.com/containerd/containerd/v2	v2.0.7 -> v2.2.0
github.com/containerd/platforms	v1.0.0-rc.1 -> v1.0.0-rc.2
github.com/cpuguy83/go-md2man/v2	v2.0.6 -> v2.0.7
github.com/docker/docker-credential-helpers	v0.8.2 -> v0.9.3
github.com/emicklei/go-restful/v3	v3.11.0 -> v3.13.0
github.com/fatih/color	v1.17.0 -> v1.18.0
github.com/fxamacker/cbor/v2	v2.7.0 -> v2.9.0
github.com/go-logr/logr	v1.4.2 -> v1.4.3
github.com/go-openapi/jsonpointer	v0.19.6 -> v0.21.0
github.com/go-openapi/swag	v0.22.4 -> v0.23.0
github.com/gofrs/flock	v0.12.1 -> v0.13.0
github.com/golang-jwt/jwt/v5	v5.2.2 -> v5.3.0
github.com/golang/glog	v1.2.4 -> v1.2.5
github.com/google/gnostic-models	v0.6.8 -> v0.7.0
github.com/google/pprof	v0.0.0-20240525223248-4bfdf5a9a2af -> v0.0.0-20250820193118-f64d9cf942d6
github.com/gorilla/websocket	v1.5.0 -> v1.5.4-0.20250319132907-e064f32e3674
github.com/grpc-ecosystem/grpc-gateway/v2	v2.26.3 -> v2.27.2
github.com/hashicorp/go-retryablehttp	v0.7.7 -> v0.7.8
github.com/in-toto/in-toto-golang	v0.5.0 -> v0.9.0
github.com/klauspost/compress	v1.17.11 -> v1.18.1
github.com/mattn/go-colorable	v0.1.13 -> v0.1.14
github.com/moby/spdystream	v0.4.0 -> v0.5.0
github.com/moby/sys/user	v0.3.0 -> v0.4.0
github.com/modern-go/reflect2	v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/opencontainers/image-spec	v1.1.0 -> v1.1.1
github.com/pelletier/go-toml/v2	v2.2.3 -> v2.2.4
github.com/prometheus/client_golang	v1.20.5 -> v1.23.2
github.com/prometheus/client_model	v0.6.1 -> v0.6.2
github.com/prometheus/common	v0.55.0 -> v0.66.1
github.com/prometheus/procfs	v0.15.1 -> v0.16.1
github.com/secure-systems-lab/go-securesystemslib	v0.4.0 -> v0.9.1
github.com/tonistiigi/dchapes-mode	v0.0.0-20241001053921-ca0759fec205 -> v0.0.0-20250318174251-73d941a28323
go.opentelemetry.io/auto/sdk	v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.56.0 -> v0.61.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace	v0.56.0 -> v0.61.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.56.0 -> v0.61.0
go.opentelemetry.io/otel	v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc	v1.31.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp	v1.31.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.31.0 -> v1.38.0
go.opentelemetry.io/otel/sdk/metric	v1.34.0 -> v1.38.0
go.opentelemetry.io/proto/otlp	v1.6.0 -> v1.7.1
golang.org/x/time	v0.12.0 -> v0.14.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250519155744-55703ea1f237 -> v0.0.0-20250825161204-c5933d9347a5
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250519155744-55703ea1f237 -> v0.0.0-20250825161204-c5933d9347a5
google.golang.org/grpc	v1.72.1 -> v1.76.0
k8s.io/api	v0.31.2 -> v0.34.1
k8s.io/apimachinery	v0.31.2 -> v0.34.1
k8s.io/client-go	v0.31.2 -> v0.34.1
k8s.io/kube-openapi	v0.0.0-20240228011516-70dd3763d340 -> v0.0.0-20250710124328-f3f2b991d03b
k8s.io/utils	v0.0.0-20240711033017-18e509b52bc8 -> v0.0.0-20250604170112-4c0f3b243397
sigs.k8s.io/json	v0.0.0-20221116044647-bc3834ca7abd -> v0.0.0-20241014173422-cfa47c3a1cc8
sigs.k8s.io/yaml	v1.4.0 -> v1.6.0