Update dependency buildkit to v0.33.0

renovate-bot bot commented

2026-09-02 18:00:39 +02:00

Collaborator

This PR contains the following updates:

Package	Update	Change
buildkit	minor	`0.32.2` → `0.33.0`

Release Notes

moby/buildkit (buildkit)

`v0.33.0`

Compare Source

Welcome to the v0.33.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

CrazyMax
Tõnis Tiigi
Sebastiaan van Stijn
Matthieu MOREL
eliuriegas
Daniel Nephin
Dawei Wei
Guthrie McAfee Armstrong
Jiří Moravčík
Leo Li
Ravi Arnan
Shurong Cao
Spencer G. Jones
Vedant Madane

Notable Changes

Built-in Dockerfile frontend has been updated to v1.27.0 changelog
Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #7074
The maximum attestation size for exporters has been raised to 80 MiB. #7104
Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #7039
Buildctl now supports passing valueless build-args read from the environment. #7030
Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #7022
Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #6998
Build history can now be disabled from daemon configuration #7040
Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #7068
MaxRegistryConcurrency now also applies to remote cache requests. #7049
Windows containers now support RUN --mount=type=secret build secrets. #6944
Fix possible "no active session for" error when running concurrent builds with remote cache #7047
Fix possible "failed to apply diffs: snapshot does not exist" error #7035
Fix possible context upload errors when context directory contains foreign characters. #6989
Fix possible silently dropped cache link in remote cache exporter. #7053
Fix xz archive unpacking silently skipping when xz binary was missing in environment. #7071
Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #7072
Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #7092

Dependency Changes

cyphar.com/go-pathrs v0.2.1 -> v0.2.5
github.com/Microsoft/hcsshim v0.15.0-rc.1 -> v0.15.0-rc.4
github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.8
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14 -> v1.7.18
github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.39
github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.38
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.39
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.3.5 -> v0.3.10
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.39
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.39
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.40
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.18
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.24 -> v1.9.28
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.39
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.32 -> v1.19.36
github.com/aws/aws-sdk-go-v2/service/s3 v1.106.0 -> v1.106.5
github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.8
github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.8
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.8
github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.8
github.com/aws/smithy-go v1.27.4 -> v1.27.10
github.com/containerd/containerd/v2 v2.3.3 -> v2.3.4
github.com/containerd/go-runc v1.1.0 -> v1.2.1
github.com/containerd/platforms v1.0.0-rc.4 -> v1.0.0-rc.5
github.com/cyphar/filepath-securejoin v0.6.0 -> v0.6.1
github.com/docker/cli v29.6.2 -> v29.7.2
github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
github.com/go-logr/logr v1.4.3 -> v1.4.4
github.com/klauspost/compress v1.19.1 -> v1.19.2
github.com/moby/policy-helpers 856be88 -> dd6c549
github.com/moby/sys/userns v0.1.0 -> v0.2.0
github.com/pelletier/go-toml/v2 v2.3.1 -> v2.4.3
github.com/prometheus/client_golang v1.23.2 -> v1.24.1
github.com/prometheus/common v0.67.5 -> v0.70.1
github.com/prometheus/procfs v0.20.1 -> v0.21.1
github.com/sirupsen/logrus v1.9.4 -> v1.10.1
github.com/stretchr/testify v1.11.1 -> v1.12.1
github.com/tonistiigi/fsutil 6d9dc2e -> 83cac42
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0 -> v0.70.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
go.opentelemetry.io/otel v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/exporters/prometheus v0.66.0 -> v0.67.0
go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
go.opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0
go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
golang.org/x/crypto v0.54.0 -> v0.55.0
golang.org/x/mod v0.38.0 -> v0.40.0
golang.org/x/net v0.57.0 -> v0.58.0
golang.org/x/text v0.40.0 -> v0.41.0
google.golang.org/genproto/googleapis/api 3dc84a4 -> 6ac0973
google.golang.org/genproto/googleapis/rpc 3dc84a4 -> 6ac0973
google.golang.org/grpc v1.82.1 -> v1.83.2
google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 -> v1.6.2
google.golang.org/protobuf f2248ac -> v1.36.12

Previous release can be found at v0.32.2

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [buildkit](https://github.com/moby/buildkit) | minor | `0.32.2` → `0.33.0` | --- ### Release Notes <details> <summary>moby/buildkit (buildkit)</summary> ### [`v0.33.0`](https://github.com/moby/buildkit/releases/tag/v0.33.0) [Compare Source](https://github.com/moby/buildkit/compare/v0.32.2...v0.33.0-rc1) Welcome to the v0.33.0 release of buildkit! Please try out the release binaries and report any issues at <https://github.com/moby/buildkit/issues>. ##### Contributors - CrazyMax - Tõnis Tiigi - Sebastiaan van Stijn - Matthieu MOREL - eliuriegas - Daniel Nephin - Dawei Wei - Guthrie McAfee Armstrong - Jiří Moravčík - Leo Li - Ravi Arnan - Shurong Cao - Spencer G. Jones - Vedant Madane ##### Notable Changes - Built-in Dockerfile frontend has been updated to v1.27.0 [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.27.0) - Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. [#7074](https://github.com/moby/buildkit/issues/7074) - The maximum attestation size for exporters has been raised to 80 MiB. [#7104](https://github.com/moby/buildkit/issues/7104) - Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. [#7039](https://github.com/moby/buildkit/issues/7039) - Buildctl now supports passing valueless build-args read from the environment. [#7030](https://github.com/moby/buildkit/issues/7030) - Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. [#7022](https://github.com/moby/buildkit/issues/7022) - Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. [#6998](https://github.com/moby/buildkit/issues/6998) - Build history can now be disabled from daemon configuration [#7040](https://github.com/moby/buildkit/issues/7040) - Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. [#7068](https://github.com/moby/buildkit/issues/7068) - MaxRegistryConcurrency now also applies to remote cache requests. [#7049](https://github.com/moby/buildkit/issues/7049) - Windows containers now support `RUN --mount=type=secret` build secrets. [#6944](https://github.com/moby/buildkit/issues/6944) - Fix possible "no active session for" error when running concurrent builds with remote cache [#7047](https://github.com/moby/buildkit/issues/7047) - Fix possible "failed to apply diffs: snapshot does not exist" error [#7035](https://github.com/moby/buildkit/issues/7035) - Fix possible context upload errors when context directory contains foreign characters. [#6989](https://github.com/moby/buildkit/issues/6989) - Fix possible silently dropped cache link in remote cache exporter. [#7053](https://github.com/moby/buildkit/issues/7053) - Fix xz archive unpacking silently skipping when xz binary was missing in environment. [#7071](https://github.com/moby/buildkit/issues/7071) - Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions [#7072](https://github.com/moby/buildkit/issues/7072) - Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. [#7092](https://github.com/moby/buildkit/issues/7092) ##### Dependency Changes - **cyphar.com/go-pathrs** v0.2.1 -> v0.2.5 - **github.com/Microsoft/hcsshim** v0.15.0-rc.1 -> v0.15.0-rc.4 - **github.com/aws/aws-sdk-go-v2** v1.43.0 -> v1.43.8 - **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream** v1.7.14 -> v1.7.18 - **github.com/aws/aws-sdk-go-v2/config** v1.32.31 -> v1.32.39 - **github.com/aws/aws-sdk-go-v2/credentials** v1.19.30 -> v1.19.38 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.31 -> v1.18.39 - **github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager** v0.3.5 -> v0.3.10 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.4.31 -> v1.4.39 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.7.31 -> v2.7.39 - **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.4.32 -> v1.4.40 - **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.13.13 -> v1.13.18 - **github.com/aws/aws-sdk-go-v2/service/internal/checksum** v1.9.24 -> v1.9.28 - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.13.31 -> v1.13.39 - **github.com/aws/aws-sdk-go-v2/service/internal/s3shared** v1.19.32 -> v1.19.36 - **github.com/aws/aws-sdk-go-v2/service/s3** v1.106.0 -> v1.106.5 - **github.com/aws/aws-sdk-go-v2/service/signin** v1.5.0 -> v1.5.8 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.33.0 -> v1.33.8 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.38.0 -> v1.38.8 - **github.com/aws/aws-sdk-go-v2/service/sts** v1.45.0 -> v1.45.8 - **github.com/aws/smithy-go** v1.27.4 -> v1.27.10 - **github.com/containerd/containerd/v2** v2.3.3 -> v2.3.4 - **github.com/containerd/go-runc** v1.1.0 -> v1.2.1 - **github.com/containerd/platforms** v1.0.0-rc.4 -> v1.0.0-rc.5 - **github.com/cyphar/filepath-securejoin** v0.6.0 -> v0.6.1 - **github.com/docker/cli** v29.6.2 -> v29.7.2 - **github.com/felixge/httpsnoop** v1.0.4 -> v1.1.0 - **github.com/go-logr/logr** v1.4.3 -> v1.4.4 - **github.com/klauspost/compress** v1.19.1 -> v1.19.2 - **github.com/moby/policy-helpers** [`856be88`](https://github.com/moby/buildkit/commit/856be88baec4) -> [`dd6c549`](https://github.com/moby/buildkit/commit/dd6c5499c491) - **github.com/moby/sys/userns** v0.1.0 -> v0.2.0 - **github.com/pelletier/go-toml/v2** v2.3.1 -> v2.4.3 - **github.com/prometheus/client\_golang** v1.23.2 -> v1.24.1 - **github.com/prometheus/common** v0.67.5 -> v0.70.1 - **github.com/prometheus/procfs** v0.20.1 -> v0.21.1 - **github.com/sirupsen/logrus** v1.9.4 -> v1.10.1 - **github.com/stretchr/testify** v1.11.1 -> v1.12.1 - **github.com/tonistiigi/fsutil** [`6d9dc2e`](https://github.com/moby/buildkit/commit/6d9dc2ebad62) -> [`83cac42`](https://github.com/moby/buildkit/commit/83cac42c1c52) - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.69.0 -> v0.70.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.69.0 -> v0.70.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.69.0 -> v0.70.0 - **go.opentelemetry.io/otel** v1.44.0 -> v1.45.0 - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc** v1.44.0 -> v1.45.0 - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp** v1.44.0 -> v1.45.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.44.0 -> v1.45.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.44.0 -> v1.45.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.44.0 -> v1.45.0 - **go.opentelemetry.io/otel/exporters/prometheus** v0.66.0 -> v0.67.0 - **go.opentelemetry.io/otel/metric** v1.44.0 -> v1.45.0 - **go.opentelemetry.io/otel/sdk** v1.44.0 -> v1.45.0 - **go.opentelemetry.io/otel/sdk/metric** v1.44.0 -> v1.45.0 - **go.opentelemetry.io/otel/trace** v1.44.0 -> v1.45.0 - **go.opentelemetry.io/proto/otlp** v1.10.0 -> v1.11.0 - **go.yaml.in/yaml/v3** v3.0.4 -> v3.0.5 - **golang.org/x/crypto** v0.54.0 -> v0.55.0 - **golang.org/x/mod** v0.38.0 -> v0.40.0 - **golang.org/x/net** v0.57.0 -> v0.58.0 - **golang.org/x/text** v0.40.0 -> v0.41.0 - **google.golang.org/genproto/googleapis/api** [`3dc84a4`](https://github.com/moby/buildkit/commit/3dc84a4a5aaa) -> [`6ac0973`](https://github.com/moby/buildkit/commit/6ac0973c030d) - **google.golang.org/genproto/googleapis/rpc** [`3dc84a4`](https://github.com/moby/buildkit/commit/3dc84a4a5aaa) -> [`6ac0973`](https://github.com/moby/buildkit/commit/6ac0973c030d) - **google.golang.org/grpc** v1.82.1 -> v1.83.2 - **google.golang.org/grpc/cmd/protoc-gen-go-grpc** v1.6.1 -> v1.6.2 - **google.golang.org/protobuf** [`f2248ac`](https://github.com/moby/buildkit/commit/f2248ac996af) -> v1.36.12 Previous release can be found at [v0.32.2](https://github.com/moby/buildkit/releases/tag/v0.32.2) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot bot added 1 commit

2026-09-02 18:00:39 +02:00

Update dependency buildkit to v0.33.0

/ check (pull_request) Successful in 50s

Details

e81ce7bfbc

renovate-bot bot scheduled this pull request to auto merge when all checks succeed

2026-09-02 18:00:39 +02:00

renovate-bot bot merged commit 27e720cce1 into next

2026-09-07 10:27:32 +02:00

renovate-bot bot deleted branch renovate/buildkit-0.x

2026-09-07 10:27:33 +02:00