Skip to content

chore(deps): update docker build tooling - #930

Merged
neilime merged 1 commit into
mainfrom
renovate/docker-build-tooling
Oct 18, 2026
Merged

neilime merged 1 commit into
mainfrom
renovate/docker-build-tooling

Conversation

@hoverkraft-bot

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
docker/buildx minor v0.36.1 → v0.38.0
moby/buildkit minor v0.32.2 → v0.34.0

Release Notes

docker/buildx

v0.38.0

Compare Source

buildx 0.38.0

Welcome to the v0.38.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors
  • CrazyMax
  • Tõnis Tiigi
  • Sebastiaan van Stijn
  • Akihiro Suda
  • Tomas Perez Molina
  • Dean Chen
  • MohammadHasan Akbari
  • Nicolas De Loof
  • Ricardo Branco
  • Ryan Bonnell
Notable Changes
  • Bake now supports configuring job execution modes and parallelization limits with --jobs/-j flag. New execution modes include defer-error to delay cancellation of failed jobs and defer-output to wait for all jobs to complete before exporting results. #​4044
  • New experiment command docker buildx replay build allows rebuilding historical builds based on recorded provenance of a distributed artifact or Docker image. This subcommand is expected to be updated with additional features and improvements in future releases. #​4122 #​3818
  • HTTP hosts passed to build policies are now normalized to assist writing accurate policy rules. #​4068
  • Bake --set overrides have now been updated to use singular keys for better consistency and clarity. #​4089
  • Bake --set overrides now support clearing array values with an empty parameter. #​4107
  • Git advice output can now be controlled with BUILDKIT_GIT_ADVICE and BUILDX_BAKE_GIT_ADVICE. #​4103
  • Compose support has been updated to v2.16.1 #​4118
  • Zstd compressed archives can now be passed as build context. #​4104
  • Update Kubernetes driver to handle AppArmor profile correctly. #​4083
  • Improve Kubernetes driver dial retry backoff logic. #​4039
  • Fix possible issues with builder feature detection using stale cached data. #​4085 #​4082
  • Fix possible panic from result image loading and progress race. #​4064
  • Fix possible stale node status printed by inspect --bootstrap command. #​4048
  • Fix confusing error messages when encountering undefined variables in bake targets. #​4086
  • Fix possible incorrect parsing of bake target overrides. #​4088
  • Fix possible build error with Kubernetes driver and linked targets. #​4073
  • Fix issue with Kubernetes driver waiting for connection readiness. #​4077
Dependency Changes
  • github.com/aws/aws-sdk-go-v2 v1.43.8 -> v1.47.0
  • github.com/aws/aws-sdk-go-v2/config v1.32.39 -> v1.33.4
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.38 -> v1.20.4
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.39 -> v1.20.0
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.39 -> v1.5.3
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.39 -> v2.8.3
  • github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.40 -> v1.5.3
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.18 -> v1.13.19
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.39 -> v1.14.3
  • github.com/aws/aws-sdk-go-v2/service/signin v1.5.8 -> v1.10.0
  • github.com/aws/aws-sdk-go-v2/service/sso v1.33.8 -> v1.38.0
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.8 -> v1.43.0
  • github.com/aws/aws-sdk-go-v2/service/sts v1.45.8 -> v1.50.0
  • github.com/aws/smithy-go v1.27.10 -> v1.28.2
  • github.com/clipperhouse/uax29/v2 v2.2.0 -> v2.6.0
  • github.com/compose-spec/compose-go/v2 v2.14.0 -> v2.16.1
  • github.com/containerd/containerd/api v1.11.1 -> v1.12.0
  • github.com/containerd/containerd/v2 v2.3.6 -> v2.4.1
  • github.com/containerd/log/otel v0.1.0 new
  • github.com/containerd/ttrpc v1.2.9 -> v1.2.10
  • github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 -> v4.4.1
  • github.com/docker/cli v29.7.2 -> v29.8.2
  • github.com/docker/docker-credential-helpers v0.9.8 -> v0.9.9
  • github.com/docker/go-connections v0.7.0 -> v0.8.1
  • github.com/fvbommel/sortorder v1.1.0 -> v1.2.0
  • github.com/fxamacker/cbor/v2 v2.9.0 -> v2.9.4
  • github.com/go-openapi/analysis v0.25.2 -> v0.25.5
  • github.com/go-openapi/jsonpointer v0.23.1 -> v1.0.0
  • github.com/go-openapi/jsonreference v0.21.6 -> v1.0.0
  • github.com/go-openapi/loads v0.24.0 -> v0.25.0
  • github.com/go-openapi/runtime v0.32.4 -> v0.33.0
  • github.com/go-openapi/spec v0.22.6 -> v0.22.9
  • github.com/go-openapi/strfmt v0.26.4 -> v0.27.0
  • github.com/go-openapi/swag v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/cmdutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/conv v0.27.0 -> v0.28.0
  • github.com/go-openapi/swag/fileutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/jsonutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/loading v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/mangling v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/netutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/pools v0.28.0 new
  • github.com/go-openapi/swag/stringutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/typeutils v0.27.0 -> v0.28.0
  • github.com/go-openapi/swag/yamlutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/validate v0.26.0 -> v0.26.1
  • github.com/goccy/go-json v0.10.5 -> v0.10.6
  • github.com/gofrs/flock v0.13.0 -> v0.13.1
  • github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 -> v2.30.0
  • github.com/klauspost/compress v1.19.2 -> v1.20.1
  • github.com/lestrrat-go/dsig v1.0.0 -> v1.2.1
  • github.com/lestrrat-go/httprc/v3 v3.0.2 -> v3.0.5
  • github.com/lestrrat-go/jwx/v3 v3.0.13 -> v3.1.1
  • github.com/mattn/go-runewidth v0.0.23 -> v0.0.29
  • github.com/mattn/go-shellwords v1.0.12 -> v1.0.13
  • github.com/moby/buildkit v0.33.1 -> v0.34.0
  • github.com/moby/moby/api v1.55.0 -> v1.56.0
  • github.com/moby/moby/client v0.5.0 -> v0.6.0
  • github.com/moby/policy-helpers dd6c549 -> bd98f47
  • github.com/open-policy-agent/opa v1.14.1 -> v1.19.0
  • github.com/package-url/packageurl-go v0.1.1 -> v0.1.7
  • github.com/santhosh-tekuri/jsonschema/v6 v6.0.1 -> v6.0.3
  • github.com/valyala/fastjson v1.6.7 -> v1.6.10
  • github.com/vektah/gqlparser/v2 v2.5.32 -> v2.5.36
  • go.etcd.io/bbolt v1.5.0 new
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0 -> v0.71.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.70.0 -> v0.71.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 -> v0.71.0
  • go.opentelemetry.io/otel v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.44.0 -> v1.46.0
  • go.opentelemetry.io/otel/metric v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/sdk v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/sdk/metric v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/trace v1.45.0 -> v1.46.0
  • google.golang.org/genproto/googleapis/api 6ac0973 -> da73d73
  • google.golang.org/genproto/googleapis/rpc 6ac0973 -> da73d73
  • google.golang.org/grpc v1.83.2 -> v1.84.0
  • k8s.io/api v0.36.3 -> v0.37.0
  • k8s.io/apimachinery v0.36.3 -> v0.37.0
  • k8s.io/client-go v0.36.3 -> v0.37.0
  • k8s.io/kube-openapi 5883c5e -> d427ff9
  • k8s.io/streaming v0.36.3 -> v0.37.0
  • k8s.io/utils 28399d8 -> be93311
  • sigs.k8s.io/structured-merge-diff/v6 v6.3.3 -> v6.4.2

Previous release can be found at v0.37.2

v0.37.2

Compare Source

Welcome to the v0.37.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors
  • CrazyMax
  • Sebastiaan van Stijn
  • Tõnis Tiigi
Notable Changes
  • Bake with --progress=rawjson now rejects ungranted entitlements instead of skipping the consent check. Grant the requested privileges explicitly with --allow. GHSA-gwr2-q96m-6682
  • Bake now requires fs.read approval for secret files selected by an implicit id fallback and for local OCI layout named contexts. GHSA-p54p-jq4x-rc28
Dependency Changes
  • github.com/containerd/containerd/v2 v2.3.4 -> v2.3.6
  • github.com/moby/buildkit v0.33.0 -> v0.33.1
  • golang.org/x/crypto v0.55.0 -> v0.56.0

Previous release can be found at v0.37.1

v0.37.1

Compare Source

Welcome to the v0.37.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors
  • CrazyMax
  • Tomas Perez Molina
  • Tõnis Tiigi
Notable Changes
  • Fix failed multi-node image pushes leaving the requested tag pointing to a partial image. #​4058
  • Fix newly started container builders not getting a full readiness timeout before first use. #​4050
  • Fix builder removal cleanup being tied to the status timeout. #​4072
  • Fix linked Bake targets using the Kubernetes driver losing shared clients before the build completes. #​4073
Dependency Changes

This release has no dependency changes

Previous release can be found at v0.37.0

v0.37.0

Compare Source

Welcome to the v0.37.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors
  • CrazyMax
  • Tõnis Tiigi
  • Sebastiaan van Stijn
  • Alberto Garcia Hierro
  • Brad Davidson
  • Guilhem Charles
  • Guillaume Lours
Notable Changes
  • Buildx now supports cloud driver builder instances to run builds with Docker Build Cloud service. No custom version of Buildx binary is needed anymore. #​4017
  • Newly started container builders now wait for BuildKit readiness before first use. #​4027
  • Policy evaluation now uses Docker CLI registry auth for image metadata. #​4046
  • Several consistency issues with handling Windows platform identifiers with OS version have been fixed. #​4035 #​4034 #​4008
  • Using the Kubernetes driver now skips terminating pods when choosing a pod. #​3997
  • Avoid creating temporary files on the host to send builder configuration to remote containers. #​3996
  • Fix issue where Bake builds could sometimes drop sending build secrets when using linked targets. #​4014
  • Fix cases where empty source policy sessions were created for some builds, possibly causing confusing progress output. #​4028
Dependency Changes
  • github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.8
  • github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.39
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.38
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.39
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.39
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.39
  • github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.40
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.18
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.39
  • github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.8
  • github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.8
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.8
  • github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.8
  • github.com/aws/smithy-go v1.27.4 -> v1.27.10
  • github.com/compose-spec/compose-go/v2 v2.13.0 -> v2.14.0
  • github.com/containerd/containerd/v2 v2.3.3 -> v2.3.4
  • github.com/containerd/platforms v1.0.0-rc.4 -> v1.0.0-rc.5
  • github.com/docker/cli v29.6.2 -> v29.7.2
  • github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
  • github.com/go-logr/logr v1.4.3 -> v1.4.4
  • github.com/klauspost/compress v1.19.1 -> v1.19.2
  • github.com/moby/buildkit v0.32.2 -> v0.33.0
  • github.com/moby/go-archive v0.2.1 -> v0.2.0
  • github.com/moby/policy-helpers 856be88 -> dd6c549
  • github.com/pelletier/go-toml/v2 v2.3.1 -> v2.4.3
  • github.com/sirupsen/logrus v1.9.4 -> v1.10.2
  • github.com/stretchr/testify v1.11.1 -> v1.12.1
  • github.com/tonistiigi/fsutil 6d9dc2e -> 83cac42
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0 -> v0.70.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
  • go.opentelemetry.io/otel v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
  • go.opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0
  • go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
  • golang.org/x/crypto v0.54.0 -> v0.55.0
  • golang.org/x/mod v0.38.0 -> v0.40.0
  • golang.org/x/net v0.57.0 -> v0.58.0
  • golang.org/x/text v0.40.0 -> v0.41.0
  • golang.org/x/tools v0.47.0 -> v0.49.0
  • google.golang.org/genproto/googleapis/api 3dc84a4 -> 6ac0973
  • google.golang.org/genproto/googleapis/rpc 3dc84a4 -> 6ac0973
  • google.golang.org/grpc v1.82.1 -> v1.83.2
  • google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 -> v1.6.2
  • google.golang.org/protobuf f2248ac -> v1.36.12
  • k8s.io/api v0.36.0 -> v0.36.3
  • k8s.io/apimachinery v0.36.0 -> v0.36.3
  • k8s.io/client-go v0.36.0 -> v0.36.3
  • sigs.k8s.io/structured-merge-diff/v6 v6.3.2 -> v6.3.3

Previous release can be found at v0.36.1

moby/buildkit

v0.34.0

Compare Source

buildkit 0.34.0

Welcome to the v0.34.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors
  • Tõnis Tiigi
  • CrazyMax
  • Sebastiaan van Stijn
  • Akihiro Suda
  • Ernestas Lukoševičius
  • Alexandre Rodrigues
  • Kamil Monicz
  • okhowang(王沛文)
  • Alex G. Wolff
  • Ben Harris
  • Guthrie McAfee Armstrong
  • Jonathan A. Sternberg
  • KR Ravindra
  • MohammadHasan Akbari
  • MsfPablo
  • Paul Schroeder
  • Ruzan Sasuri
  • Sterling Greene
  • Suhail Hany
  • ZRHann
Notable changes
  • Built-in Dockerfile frontend has been updated to v1.28.0 changelog
  • BoltDB databases now support compaction to periodically reduce database size and compress them on disk. This feature is currently opt-in and can be enabled with TOML configuration. The intention is to enable it by default in future releases. #​7138 #​7248
  • Local and tar exporters now support the src option for specifying the subdirectory to export. #​7226
  • Provenance attestation now contains information about the target platform of the build. #​7227
  • Unpack exporter option is not supported in rewrite-timestamp mode. #​6939
  • Reduce BoltDB database size and performance overhead #​6882
  • Transient registry token failures are now retried. #​7155
  • Add protection to using concurrent local cache exports with reset option. #​7153
  • NewContainer API in Gateway now preserves the platform information of the created container. #​7083
  • Enable configuring Hyper-V isolation mode for Windows containers. #​7067
  • S3 remote cache backend now supports compression options. #​7121
  • Session authentication timeout is now configurable from TOML configuration. #​7225
  • Startup performance of internal databases has been improved by creating a BoltDB freelist on graceful shutdown #​7249
  • Improve recovery from database open failures in more internal databases. #​7137
  • Buildkitd now supports defining the configuration path with an environment variable. #​7144
  • Original messages from GitHub cache backend are now preserved. #​7232
  • Avoid panic from misconfigured GC policy. #​7209
  • Fix issue where some cache records could remain in use after build completion with an error. #​7223
  • Fix possible cache export failure with parallel requests. #​7145
  • Fix incorrect backslash escaping in RUN step progress output. #​7188
  • Fix encoding of some material URLs with custom ports in the provenance attestation. #​5641
  • Fix possible "ref locked: unavailable" errors on parallel builds export step. #​7182
  • Fix possible build errors when using SOURCE_DATE_EPOCH together with subdir Git sources. #​7183
  • Fix possible EBUSY errors from overlay filesystem on some systems. #​7167
  • Fix bug that could cause some internal database indexes to never get released. #​7135
  • Fix handling of IPv6 hosts without an explicit port. #​7164
  • Fix possible build error when canceling QEMU emulated build step. #​7092
  • Fix using normalized variant of platform identifier in annotation key #​7244
  • Fix possible storage reference leak when canceling build in the middle of exec step #​7247
  • Fix possible deadlock on large bidirectional stdio streams #​7240
  • Fix possible hang on container output writer error #​7243
Dependency Changes
  • github.com/aws/aws-sdk-go-v2 v1.43.8 -> v1.47.0
  • github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.18 -> v1.7.20
  • github.com/aws/aws-sdk-go-v2/config v1.32.39 -> v1.33.4
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.38 -> v1.20.4
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.39 -> v1.20.0
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.39 -> v1.5.3
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.39 -> v2.8.3
  • github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.40 -> v1.5.3
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.18 -> v1.13.19
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.39 -> v1.14.3
  • github.com/aws/aws-sdk-go-v2/service/signin v1.5.8 -> v1.10.0
  • github.com/aws/aws-sdk-go-v2/service/sso v1.33.8 -> v1.38.0
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.8 -> v1.43.0
  • github.com/aws/aws-sdk-go-v2/service/sts v1.45.8 -> v1.50.0
  • github.com/aws/smithy-go v1.27.10 -> v1.28.2
  • github.com/containerd/containerd/api v1.11.1 -> v1.12.0
  • github.com/containerd/containerd/v2 v2.3.6 -> v2.4.1
  • github.com/containerd/go-cni v1.1.13 -> v1.1.14
  • github.com/containerd/log/otel v0.1.0 new
  • github.com/containerd/ttrpc v1.2.9 -> v1.2.10
  • github.com/containernetworking/cni v1.3.0 -> v1.3.1
  • github.com/cyphar/filepath-securejoin v0.6.1 -> v0.7.0
  • github.com/docker/cli v29.7.2 -> v29.8.2
  • github.com/docker/docker-credential-helpers v0.9.8 -> v0.9.9
  • github.com/docker/go-metrics v0.0.1 -> v0.1.0
  • github.com/fsnotify/fsnotify v1.9.0 -> v1.10.1
  • github.com/go-openapi/analysis v0.25.2 -> v0.25.5
  • github.com/go-openapi/jsonpointer v0.23.1 -> v1.0.0
  • github.com/go-openapi/jsonreference v0.21.6 -> v1.0.0
  • github.com/go-openapi/loads v0.24.0 -> v0.25.0
  • github.com/go-openapi/runtime v0.32.4 -> v0.33.0
  • github.com/go-openapi/spec v0.22.6 -> v0.22.9
  • github.com/go-openapi/strfmt v0.26.4 -> v0.27.0
  • github.com/go-openapi/swag v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/cmdutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/conv v0.27.0 -> v0.28.0
  • github.com/go-openapi/swag/fileutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/jsonutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/loading v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/mangling v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/netutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/pools v0.28.0 new
  • github.com/go-openapi/swag/stringutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/swag/typeutils v0.27.0 -> v0.28.0
  • github.com/go-openapi/swag/yamlutils v0.26.1 -> v0.28.0
  • github.com/go-openapi/validate v0.26.0 -> v0.26.1
  • github.com/gofrs/flock v0.13.0 -> v0.13.1
  • github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 -> v2.30.0
  • github.com/klauspost/compress v1.19.2 -> v1.20.1
  • github.com/moby/policy-helpers dd6c549 -> bd98f47
  • github.com/moby/profiles/seccomp v0.2.3 -> v0.2.4
  • github.com/moby/sys/userns v0.2.0 -> v0.2.1
  • github.com/package-url/packageurl-go v0.1.1 -> v0.1.7
  • github.com/prometheus/client_model v0.6.2 -> v0.6.3
  • github.com/prometheus/common v0.70.1 -> v0.71.0
  • github.com/sirupsen/logrus v1.10.1 -> v1.10.2
  • github.com/tonistiigi/go-actions-cache 54bc28c -> afe8013
  • github.com/urfave/cli/v3 v3.9.0 -> v3.11.0
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0 -> v0.71.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.70.0 -> v0.71.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 -> v0.71.0
  • go.opentelemetry.io/otel v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/exporters/prometheus v0.67.0 -> v0.68.0
  • go.opentelemetry.io/otel/metric v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/sdk v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/sdk/metric v1.45.0 -> v1.46.0
  • go.opentelemetry.io/otel/trace v1.45.0 -> v1.46.0
  • google.golang.org/genproto/googleapis/api 6ac0973 -> da73d73
  • google.golang.org/genproto/googleapis/rpc 6ac0973 -> da73d73
  • google.golang.org/grpc v1.83.2 -> v1.84.0
  • tags.cncf.io/container-device-interface v1.1.0 -> v1.1.1
  • tags.cncf.io/container-device-interface/specs-go v1.1.0 -> v1.1.1

Previous release can be found at v0.33.1

v0.33.1

Compare Source

Welcome to the v0.33.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors
  • Tõnis Tiigi
  • CrazyMax
  • Sebastiaan van Stijn
Notable Changes
  • Built-in Dockerfile frontend has been updated to v1.27.1 changelog.
  • Fix proxy CA cleanup so build steps cannot redirect it outside the build rootfs, block it with a special file, or succeed when cleanup fails. GHSA-2f5p-x9ph-g97x
  • Fix a daemon panic when a build requests CDI devices while CDI support is disabled. Optional devices are ignored; required devices produce an error. GHSA-r456-g3gm-cvxf
  • Verify container blob contents against their claimed digest before caching them. This protects shared caches from unverified blobs supplied through the low-level LLB API. GHSA-p3rc-w3hc-pqvv
  • Verify applied image layer DiffIDs, bind lazy stargz snapshots to their verified TOC digest, and isolate legacy layer snapshots. Image source cache keys no longer rely on unverified DiffIDs. GHSA-f2v9-hprr-32q3
  • Prevent malicious external frontends from crashing the daemon through gateway container lifecycle races or malformed requests and definitions. GHSA-4hgw-qrhw-fhg8
  • Reject special files in daemon-side snapshot reads and replace existing special files safely in LLB mkfile operations. GHSA-9728-qjrv-2xh2
  • Reject malformed LLB file operations with invalid symlink owner inputs instead of allowing a daemon panic. GHSA-fjj4-h6vf-m9hj
  • Reject malformed LLB merge operations with mismatched input counts instead of allowing a daemon panic. GHSA-cv6p-7w7g-xjwq
  • Limit Dockerfile, .dockerignore, gateway file, and nested LLB definition reads to prevent oversized inputs from exhausting daemon memory. GHSA-mgqf-486f-49vp
  • Apply source policies to Git bundle locators and reject Git full remote URLs that do not match the source identifier. GHSA-66hf-6vf5-87hc
Dependency Changes
  • github.com/containerd/containerd/v2 v2.3.4 -> v2.3.6
  • golang.org/x/crypto v0.55.0 -> v0.56.0

Previous release can be found at v0.33.0

v0.33.0

Compare Source

Welcome to the v0.33.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors
  • CrazyMax
  • Tõnis Tiigi
  • Sebastiaan van Stijn
  • Matthieu MOREL
  • eliuriegas
  • Daniel Nephin
  • Dawei Wei
  • Guthrie McAfee Armstrong
  • Jiří Moravčík
  • Leo Li
  • Ravi Arnan
  • Shurong Cao
  • Spencer G. Jones
  • Vedant Madane
Notable Changes
  • Built-in Dockerfile frontend has been updated to v1.27.0 changelog
  • Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #​7074
  • The maximum attestation size for exporters has been raised to 80 MiB. #​7104
  • Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #​7039
  • Buildctl now supports passing valueless build-args read from the environment. #​7030
  • Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #​7022
  • Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #​6998
  • Build history can now be disabled from daemon configuration #​7040
  • Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #​7068
  • MaxRegistryConcurrency now also applies to remote cache requests. #​7049
  • Windows containers now support RUN --mount=type=secret build secrets. #​6944
  • Fix possible "no active session for" error when running concurrent builds with remote cache #​7047
  • Fix possible "failed to apply diffs: snapshot does not exist" error #​7035
  • Fix possible context upload errors when context directory contains foreign characters. #​6989
  • Fix possible silently dropped cache link in remote cache exporter. #​7053
  • Fix xz archive unpacking silently skipping when xz binary was missing in environment. #​7071
  • Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #​7072
  • Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #​7092
Dependency Changes
  • cyphar.com/go-pathrs v0.2.1 -> v0.2.5
  • github.com/Microsoft/hcsshim v0.15.0-rc.1 -> v0.15.0-rc.4
  • github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.8
  • github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14 -> v1.7.18
  • github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.39
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.38
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.39
  • github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.3.5 -> v0.3.10
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.39
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.39
  • github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.40
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.18
  • github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.24 -> v1.9.28
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.39
  • github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.32 -> v1.19.36
  • github.com/aws/aws-sdk-go-v2/service/s3 v1.106.0 -> v1.106.5
  • github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.8
  • github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.8
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.8
  • github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.8
  • github.com/aws/smithy-go v1.27.4 -> v1.27.10
  • github.com/containerd/containerd/v2 v2.3.3 -> v2.3.4
  • github.com/containerd/go-runc v1.1.0 -> v1.2.1
  • github.com/containerd/platforms v1.0.0-rc.4 -> v1.0.0-rc.5
  • github.com/cyphar/filepath-securejoin v0.6.0 -> v0.6.1
  • github.com/docker/cli v29.6.2 -> v29.7.2
  • github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
  • github.com/go-logr/logr v1.4.3 -> v1.4.4
  • github.com/klauspost/compress v1.19.1 -> v1.19.2
  • github.com/moby/policy-helpers 856be88 -> dd6c549
  • github.com/moby/sys/userns v0.1.0 -> v0.2.0
  • github.com/pelletier/go-toml/v2 v2.3.1 -> v2.4.3
  • github.com/prometheus/client_golang v1.23.2 -> v1.24.1
  • github.com/prometheus/common v0.67.5 -> v0.70.1
  • github.com/prometheus/procfs v0.20.1 -> v0.21.1
  • github.com/sirupsen/logrus v1.9.4 -> v1.10.1
  • github.com/stretchr/testify v1.11.1 -> v1.12.1
  • github.com/tonistiigi/fsutil 6d9dc2e -> 83cac42
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0 -> v0.70.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
  • go.opentelemetry.io/otel v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/prometheus v0.66.0 -> v0.67.0
  • go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
  • go.opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0
  • go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
  • golang.org/x/crypto v0.54.0 -> v0.55.0
  • golang.org/x/mod v0.38.0 -> v0.40.0
  • golang.org/x/net v0.57.0 -> v0.58.0
  • golang.org/x/text v0.40.0 -> v0.41.0
  • google.golang.org/genproto/googleapis/api 3dc84a4 -> 6ac0973
  • google.golang.org/genproto/googleapis/rpc 3dc84a4 -> 6ac0973
  • google.golang.org/grpc v1.82.1 -> v1.83.2
  • google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 -> v1.6.2
  • google.golang.org/protobuf f2248ac -> v1.36.12

Previous release can be found at v0.32.2


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@github-actions

Copy link
Copy Markdown
Contributor

Hi, thank you for creating your PR, we will check it out very soon

@github-actions

Copy link
Copy Markdown
Contributor

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
GITHUB_ACTIONS_ZIZMOR Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅
YAML_PRETTIER Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@neilime
neilime merged commit f81aff1 into main Oct 18, 2026
177 checks passed
@neilime
neilime deleted the renovate/docker-build-tooling branch October 18, 2026 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant