Update dependency buildkit to v0.31.2 #27

Merged

renovate-bot merged 1 commit from renovate/buildkit-0.x into next

2026-07-20 09:38:42 +02:00

renovate-bot bot commented

2026-07-16 17:00:36 +02:00

Collaborator

This PR contains the following updates:

Package	Update	Change
buildkit	patch	`0.31.1` → `0.31.2`

Release Notes

moby/buildkit (buildkit)

`v0.31.2`

Compare Source

Welcome to the v0.31.2 release of buildkit!

This is a security patch release with four moderate and one low severity security fixes.

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

Tõnis Tiigi
CrazyMax
Dawei Wei

Notable Changes

Git source checkout from a bundle file could lead to command injection. https://github.com/moby/buildkit/security/advisories/GHSA-hw3h-2gp9-cxpv
Possible panic when incorrect parameters sent from frontend. https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6
LLB file operation can be tricked to remove /tmp directory contents. https://github.com/moby/buildkit/security/advisories/GHSA-32pv-7hq5-qhwq
Malicious client can bypass destination directory validation on local sources upload. https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976
WCOW cache mount source selector resolves NTFS junctions outside of cache root. https://github.com/moby/buildkit/security/advisories/GHSA-388v-wmr2-g2v2
Fix possible buildctl failures after successful builds over slow connhelper transports. #6940
Fix possible daemon crash during concurrent builds. #6916

Dependency Changes

github.com/tonistiigi/fsutil 0257b33 -> 30cd4fc

Previous release can be found at v0.31.1

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [buildkit](https://github.com/moby/buildkit) | patch | `0.31.1` → `0.31.2` | --- ### Release Notes <details> <summary>moby/buildkit (buildkit)</summary> ### [`v0.31.2`](https://github.com/moby/buildkit/releases/tag/v0.31.2) [Compare Source](https://github.com/moby/buildkit/compare/v0.31.1...v0.31.2) Welcome to the v0.31.2 release of buildkit! This is a security patch release with four moderate and one low severity security fixes. Please try out the release binaries and report any issues at <https://github.com/moby/buildkit/issues>. ##### Contributors - Tõnis Tiigi - CrazyMax - Dawei Wei ##### Notable Changes - Git source checkout from a bundle file could lead to command injection. <https://github.com/moby/buildkit/security/advisories/GHSA-hw3h-2gp9-cxpv> - Possible panic when incorrect parameters sent from frontend. <https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6> - LLB file operation can be tricked to remove `/tmp` directory contents. <https://github.com/moby/buildkit/security/advisories/GHSA-32pv-7hq5-qhwq> - Malicious client can bypass destination directory validation on local sources upload. <https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976> - WCOW cache mount source selector resolves NTFS junctions outside of cache root. <https://github.com/moby/buildkit/security/advisories/GHSA-388v-wmr2-g2v2> - Fix possible buildctl failures after successful builds over slow connhelper transports. [#6940](https://github.com/moby/buildkit/issues/6940) - Fix possible daemon crash during concurrent builds. [#6916](https://github.com/moby/buildkit/issues/6916) ##### Dependency Changes - **github.com/tonistiigi/fsutil** [`0257b33`](https://github.com/moby/buildkit/commit/0257b3308df4) -> [`30cd4fc`](https://github.com/moby/buildkit/commit/30cd4fc5d911) Previous release can be found at [v0.31.1](https://github.com/moby/buildkit/releases/tag/v0.31.1) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot bot added 1 commit

2026-07-16 17:00:36 +02:00

Update dependency buildkit to v0.31.2

/ check (pull_request) Successful in 59s

Details

55a747b721

renovate-bot bot scheduled this pull request to auto merge when all checks succeed

2026-07-16 17:00:37 +02:00

renovate-bot bot merged commit 6467d5f6b8 into next

2026-07-20 09:38:42 +02:00

renovate-bot bot deleted branch renovate/buildkit-0.x

2026-07-20 09:38:42 +02:00