Update dependency buildkit to v0.27.1

renovate-bot bot commented

2026-01-22 00:01:57 +01:00

Collaborator

This PR contains the following updates:

Package	Update	Change
buildkit	minor	`0.26.3` -> `0.27.1`

Release Notes

moby/buildkit (buildkit)

`v0.27.0`

Compare Source

buildkit 0.27.0

Welcome to the v0.27.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

Tõnis Tiigi
CrazyMax
Akihiro Suda
Sebastiaan van Stijn
Justin Chadwell
Jonathan A. Sternberg
David Karlsson
Dawei Wei
Natnael Gebremariam
Aleksandr Karpinskii
Amr Mahdi
Brian Goff
Joyal George K J
Matt Coster
Roberto Villarreal
Rodolfo Carvalho
Silvin Lubecki
Tiger Kaovilai

Notable Changes

Built-in Dockerfile frontend has been updated to v1.21.0
This is a first version of BuildKit with signed release images and artifacts built using Docker Github Builder
Allow convert decisions from Session Source Policy implementations #6427
Github Cache backend now support optional signed cache that is cryptographically verified on import #6397
Provide a gateway interface for reading container filesystems during builds #6262
Push registry remote cache blobs in parallel for faster uploads #6455
Cache attestation chain pull-through responses for better performance #6435
Allow custom AuthConfig providers in client #6408
Surface policy deny messages in build errors #6458
Fix Git 2.52 support for matching some error conditions #6452
Expose the build reference in exporter buildinfo #6424
Improve expired keys handling in Git signature verification #6412
Cache gateway forwarder mounts and deduplicate snapshot responses #6387
Remove development gateway frontend options in favor of build-contexts #6350
Prevent status stream from closing too early by using an inactivity timeout #6396
Recover from history.db corruption #6371
Fix xattr copy failures on SELinux systems #6015
Fix error return when requesting attestation from non-index image #6473
Fix possible "digest not found" error when fetching attestation chain due to missing lease #6464
Fix Windows copy operations around protected files #6369
Fix possible race condition in gateway bridge forwarder #6355
Fix concurrency in source policy evaluation to prevent parallel panics #6448

Dependency Changes

cyphar.com/go-pathrs v0.2.1 new
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.2 -> v1.20.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.11.0 -> v1.13.1
github.com/AzureAD/microsoft-authentication-library-for-go v1.4.2 -> v1.6.0
github.com/asaskevich/govalidator a9d515a new
github.com/aws/aws-sdk-go-v2 v1.38.1 -> v1.39.6
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.0 -> v1.7.2
github.com/aws/aws-sdk-go-v2/config v1.31.3 -> v1.31.20
github.com/aws/aws-sdk-go-v2/credentials v1.18.7 -> v1.18.24
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.4 -> v1.18.13
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.4 -> v1.4.13
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.4 -> v2.7.13
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 -> v1.8.4
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.4 -> v1.4.12
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.0 -> v1.13.3
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.8.4 -> v1.9.3
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.4 -> v1.13.13
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.4 -> v1.19.12
github.com/aws/aws-sdk-go-v2/service/s3 v1.87.1 -> v1.89.1
github.com/aws/aws-sdk-go-v2/service/sso v1.28.2 -> v1.30.3
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.34.0 -> v1.35.7
github.com/aws/aws-sdk-go-v2/service/sts v1.38.0 -> v1.40.2
github.com/aws/smithy-go v1.22.5 -> v1.23.2
github.com/blang/semver v3.5.1 new
github.com/cloudflare/circl v1.6.0 -> v1.6.1
github.com/containerd/cgroups/v3 v3.1.0 -> v3.1.2
github.com/containerd/containerd/v2 v2.2.0 -> v2.2.1
github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.6 -> v2.1.7
github.com/containerd/nydus-snapshotter v0.15.4 -> v0.15.10
github.com/cyberphone/json-canonicalization 19d51d7 new
github.com/cyphar/filepath-securejoin v0.6.0 new
github.com/digitorus/pkcs7 3a137a8 new
github.com/digitorus/timestamp 220c5c2 new
github.com/docker/cli v28.5.0 -> v29.1.4
github.com/docker/docker-credential-helpers v0.9.3 -> v0.9.5
github.com/go-openapi/analysis v0.24.1 new
github.com/go-openapi/errors v0.22.4 new
github.com/go-openapi/jsonpointer v0.22.1 new
github.com/go-openapi/jsonreference v0.21.3 new
github.com/go-openapi/loads v0.23.2 new
github.com/go-openapi/runtime v0.29.2 new
github.com/go-openapi/spec v0.22.1 new
github.com/go-openapi/strfmt v0.25.0 new
github.com/go-openapi/swag v0.25.3 new
github.com/go-openapi/swag/cmdutils v0.25.3 new
github.com/go-openapi/swag/conv v0.25.3 new
github.com/go-openapi/swag/fileutils v0.25.3 new
github.com/go-openapi/swag/jsonname v0.25.3 new
github.com/go-openapi/swag/jsonutils v0.25.3 new
github.com/go-openapi/swag/loading v0.25.3 new
github.com/go-openapi/swag/mangling v0.25.3 new
github.com/go-openapi/swag/netutils v0.25.3 new
github.com/go-openapi/swag/stringutils v0.25.3 new
github.com/go-openapi/swag/typeutils v0.25.3 new
github.com/go-openapi/swag/yamlutils v0.25.3 new
github.com/go-openapi/validate v0.25.1 new
github.com/go-viper/mapstructure/v2 v2.4.0 new
github.com/google/certificate-transparency-go v1.3.2 new
github.com/google/go-containerregistry v0.20.6 new
github.com/grafana/regexp a468a5b new
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 -> v2.27.3
github.com/in-toto/attestation v1.1.2 new
github.com/klauspost/compress v1.18.1 -> v1.18.2
github.com/moby/go-archive v0.1.0 -> v0.2.0
github.com/moby/policy-helpers bcaa71c -> 9fcc1a9
github.com/oklog/ulid v1.3.1 new
github.com/opencontainers/runtime-spec v1.2.1 -> v1.3.0
github.com/opencontainers/runtime-tools 0ea5ed0 -> edf4cb3
github.com/opencontainers/selinux v1.12.0 -> v1.13.1
github.com/prometheus/otlptranslator v0.0.2 new
github.com/prometheus/procfs v0.16.1 -> v0.17.0
github.com/sigstore/protobuf-specs v0.5.0 new
github.com/sigstore/rekor v1.4.3 new
github.com/sigstore/rekor-tiles/v2 v2.0.1 new
github.com/sigstore/sigstore v1.10.0 new
github.com/sigstore/sigstore-go b5fe07a new
github.com/sigstore/timestamp-authority/v2 v2.0.2 new
github.com/sirupsen/logrus v1.9.3 -> v1.9.4
github.com/spdx/tools-golang v0.5.5 -> v0.5.7
github.com/theupdateframework/go-tuf/v2 v2.3.0 new
github.com/tonistiigi/fsutil 586307a -> a2aa163
github.com/tonistiigi/go-actions-cache 378c5ed -> 54bc28c
github.com/transparency-dev/formats 404c0d5 new
github.com/transparency-dev/merkle v0.0.2 new
go.mongodb.org/mongo-driver v1.17.6 new
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 -> v0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.61.0 -> v0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 -> v0.63.0
go.opentelemetry.io/otel/exporters/prometheus v0.42.0 -> v0.60.0
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
go.yaml.in/yaml/v3 v3.0.4 new
golang.org/x/term v0.38.0 new
google.golang.org/genproto/googleapis/api c5933d9 -> f26f940
google.golang.org/genproto/googleapis/rpc c5933d9 -> f26f940
kernel.org/pub/linux/libs/security/libcap/cap v1.2.76 -> v1.2.77
kernel.org/pub/linux/libs/security/libcap/psx v1.2.76 -> v1.2.77
tags.cncf.io/container-device-interface v1.0.1 -> v1.1.0
tags.cncf.io/container-device-interface/specs-go v1.0.0 -> v1.1.0

Previous release can be found at v0.26.3

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [buildkit](https://github.com/moby/buildkit) | minor | `0.26.3` -> `0.27.1` | --- ### Release Notes <details> <summary>moby/buildkit (buildkit)</summary> ### [`v0.27.1`](https://github.com/moby/buildkit/compare/v0.27.0...v0.27.1) [Compare Source](https://github.com/moby/buildkit/compare/v0.27.0...v0.27.1) ### [`v0.27.0`](https://github.com/moby/buildkit/releases/tag/v0.27.0) [Compare Source](https://github.com/moby/buildkit/compare/v0.26.3...v0.27.0) buildkit 0.27.0 Welcome to the v0.27.0 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Tõnis Tiigi - CrazyMax - Akihiro Suda - Sebastiaan van Stijn - Justin Chadwell - Jonathan A. Sternberg - David Karlsson - Dawei Wei - Natnael Gebremariam - Aleksandr Karpinskii - Amr Mahdi - Brian Goff - Joyal George K J - Matt Coster - Roberto Villarreal - Rodolfo Carvalho - Silvin Lubecki - Tiger Kaovilai ##### Notable Changes - Built-in Dockerfile frontend has been updated to [v1.21.0](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.21.0) - This is a first version of BuildKit with signed release images and artifacts built using [Docker Github Builder](https://github.com/docker/github-builder-experimental) - Allow convert decisions from Session Source Policy implementations [#6427](https://github.com/moby/buildkit/issues/6427) - Github Cache backend now support optional signed cache that is cryptographically verified on import [#6397](https://github.com/moby/buildkit/issues/6397) - Provide a gateway interface for reading container filesystems during builds [#6262](https://github.com/moby/buildkit/issues/6262) - Push registry remote cache blobs in parallel for faster uploads [#6455](https://github.com/moby/buildkit/issues/6455) - Cache attestation chain pull-through responses for better performance [#6435](https://github.com/moby/buildkit/issues/6435) - Allow custom `AuthConfig` providers in client [#6408](https://github.com/moby/buildkit/issues/6408) - Surface policy deny messages in build errors [#6458](https://github.com/moby/buildkit/issues/6458) - Fix Git 2.52 support for matching some error conditions [#6452](https://github.com/moby/buildkit/issues/6452) - Expose the build reference in exporter buildinfo [#6424](https://github.com/moby/buildkit/issues/6424) - Improve expired keys handling in Git signature verification [#6412](https://github.com/moby/buildkit/issues/6412) - Cache gateway forwarder mounts and deduplicate snapshot responses [#6387](https://github.com/moby/buildkit/issues/6387) - Remove development gateway frontend options in favor of build-contexts [#6350](https://github.com/moby/buildkit/issues/6350) - Prevent status stream from closing too early by using an inactivity timeout [#6396](https://github.com/moby/buildkit/issues/6396) - Recover from history.db corruption [#6371](https://github.com/moby/buildkit/issues/6371) - Fix xattr copy failures on SELinux systems [#6015](https://github.com/moby/buildkit/issues/6015) - Fix error return when requesting attestation from non-index image [#6473](https://github.com/moby/buildkit/issues/6473) - Fix possible "digest not found" error when fetching attestation chain due to missing lease [#6464](https://github.com/moby/buildkit/issues/6464) - Fix Windows copy operations around protected files [#6369](https://github.com/moby/buildkit/issues/6369) - Fix possible race condition in gateway bridge forwarder [#6355](https://github.com/moby/buildkit/issues/6355) - Fix concurrency in source policy evaluation to prevent parallel panics [#6448](https://github.com/moby/buildkit/issues/6448) ##### Dependency Changes - **cyphar.com/go-pathrs** v0.2.1 ***new*** - **github.com/Azure/azure-sdk-for-go/sdk/azcore** v1.18.2 -> v1.20.0 - **github.com/Azure/azure-sdk-for-go/sdk/azidentity** v1.11.0 -> v1.13.1 - **github.com/AzureAD/microsoft-authentication-library-for-go** v1.4.2 -> v1.6.0 - **github.com/asaskevich/govalidator** [`a9d515a`](https://github.com/moby/buildkit/commit/a9d515a09cc2) ***new*** - **github.com/aws/aws-sdk-go-v2** v1.38.1 -> v1.39.6 - **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream** v1.7.0 -> v1.7.2 - **github.com/aws/aws-sdk-go-v2/config** v1.31.3 -> v1.31.20 - **github.com/aws/aws-sdk-go-v2/credentials** v1.18.7 -> v1.18.24 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.4 -> v1.18.13 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.4.4 -> v1.4.13 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.7.4 -> v2.7.13 - **github.com/aws/aws-sdk-go-v2/internal/ini** v1.8.3 -> v1.8.4 - **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.4.4 -> v1.4.12 - **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.13.0 -> v1.13.3 - **github.com/aws/aws-sdk-go-v2/service/internal/checksum** v1.8.4 -> v1.9.3 - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.13.4 -> v1.13.13 - **github.com/aws/aws-sdk-go-v2/service/internal/s3shared** v1.19.4 -> v1.19.12 - **github.com/aws/aws-sdk-go-v2/service/s3** v1.87.1 -> v1.89.1 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.28.2 -> v1.30.3 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.34.0 -> v1.35.7 - **github.com/aws/aws-sdk-go-v2/service/sts** v1.38.0 -> v1.40.2 - **github.com/aws/smithy-go** v1.22.5 -> v1.23.2 - **github.com/blang/semver** v3.5.1 ***new*** - **github.com/cloudflare/circl** v1.6.0 -> v1.6.1 - **github.com/containerd/cgroups/v3** v3.1.0 -> v3.1.2 - **github.com/containerd/containerd/v2** v2.2.0 -> v2.2.1 - **github.com/containerd/fuse-overlayfs-snapshotter/v2** v2.1.6 -> v2.1.7 - **github.com/containerd/nydus-snapshotter** v0.15.4 -> v0.15.10 - **github.com/cyberphone/json-canonicalization** [`19d51d7`](https://github.com/moby/buildkit/commit/19d51d7fe467) ***new*** - **github.com/cyphar/filepath-securejoin** v0.6.0 ***new*** - **github.com/digitorus/pkcs7** [`3a137a8`](https://github.com/moby/buildkit/commit/3a137a874352) ***new*** - **github.com/digitorus/timestamp** [`220c5c2`](https://github.com/moby/buildkit/commit/220c5c2851b7) ***new*** - **github.com/docker/cli** v28.5.0 -> v29.1.4 - **github.com/docker/docker-credential-helpers** v0.9.3 -> v0.9.5 - **github.com/go-openapi/analysis** v0.24.1 ***new*** - **github.com/go-openapi/errors** v0.22.4 ***new*** - **github.com/go-openapi/jsonpointer** v0.22.1 ***new*** - **github.com/go-openapi/jsonreference** v0.21.3 ***new*** - **github.com/go-openapi/loads** v0.23.2 ***new*** - **github.com/go-openapi/runtime** v0.29.2 ***new*** - **github.com/go-openapi/spec** v0.22.1 ***new*** - **github.com/go-openapi/strfmt** v0.25.0 ***new*** - **github.com/go-openapi/swag** v0.25.3 ***new*** - **github.com/go-openapi/swag/cmdutils** v0.25.3 ***new*** - **github.com/go-openapi/swag/conv** v0.25.3 ***new*** - **github.com/go-openapi/swag/fileutils** v0.25.3 ***new*** - **github.com/go-openapi/swag/jsonname** v0.25.3 ***new*** - **github.com/go-openapi/swag/jsonutils** v0.25.3 ***new*** - **github.com/go-openapi/swag/loading** v0.25.3 ***new*** - **github.com/go-openapi/swag/mangling** v0.25.3 ***new*** - **github.com/go-openapi/swag/netutils** v0.25.3 ***new*** - **github.com/go-openapi/swag/stringutils** v0.25.3 ***new*** - **github.com/go-openapi/swag/typeutils** v0.25.3 ***new*** - **github.com/go-openapi/swag/yamlutils** v0.25.3 ***new*** - **github.com/go-openapi/validate** v0.25.1 ***new*** - **github.com/go-viper/mapstructure/v2** v2.4.0 ***new*** - **github.com/google/certificate-transparency-go** v1.3.2 ***new*** - **github.com/google/go-containerregistry** v0.20.6 ***new*** - **github.com/grafana/regexp** [`a468a5b`](https://github.com/moby/buildkit/commit/a468a5bfb3bc) ***new*** - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.27.2 -> v2.27.3 - **github.com/in-toto/attestation** v1.1.2 ***new*** - **github.com/klauspost/compress** v1.18.1 -> v1.18.2 - **github.com/moby/go-archive** v0.1.0 -> v0.2.0 - **github.com/moby/policy-helpers** [`bcaa71c`](https://github.com/moby/buildkit/commit/bcaa71c99f14) -> [`9fcc1a9`](https://github.com/moby/buildkit/commit/9fcc1a9ec5c9) - **github.com/oklog/ulid** v1.3.1 ***new*** - **github.com/opencontainers/runtime-spec** v1.2.1 -> v1.3.0 - **github.com/opencontainers/runtime-tools** [`0ea5ed0`](https://github.com/moby/buildkit/commit/0ea5ed0382a2) -> [`edf4cb3`](https://github.com/moby/buildkit/commit/edf4cb3d2116) - **github.com/opencontainers/selinux** v1.12.0 -> v1.13.1 - **github.com/prometheus/otlptranslator** v0.0.2 ***new*** - **github.com/prometheus/procfs** v0.16.1 -> v0.17.0 - **github.com/sigstore/protobuf-specs** v0.5.0 ***new*** - **github.com/sigstore/rekor** v1.4.3 ***new*** - **github.com/sigstore/rekor-tiles/v2** v2.0.1 ***new*** - **github.com/sigstore/sigstore** v1.10.0 ***new*** - **github.com/sigstore/sigstore-go** [`b5fe07a`](https://github.com/moby/buildkit/commit/b5fe07a5a7d7) ***new*** - **github.com/sigstore/timestamp-authority/v2** v2.0.2 ***new*** - **github.com/sirupsen/logrus** v1.9.3 -> v1.9.4 - **github.com/spdx/tools-golang** v0.5.5 -> v0.5.7 - **github.com/theupdateframework/go-tuf/v2** v2.3.0 ***new*** - **github.com/tonistiigi/fsutil** [`586307a`](https://github.com/moby/buildkit/commit/586307ad452f) -> [`a2aa163`](https://github.com/moby/buildkit/commit/a2aa163d723f) - **github.com/tonistiigi/go-actions-cache** [`378c5ed`](https://github.com/moby/buildkit/commit/378c5ed1ddd9) -> [`54bc28c`](https://github.com/moby/buildkit/commit/54bc28c26fd2) - **github.com/transparency-dev/formats** [`404c0d5`](https://github.com/moby/buildkit/commit/404c0d5b696c) ***new*** - **github.com/transparency-dev/merkle** v0.0.2 ***new*** - **go.mongodb.org/mongo-driver** v1.17.6 ***new*** - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.61.0 -> v0.63.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.61.0 -> v0.63.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.61.0 -> v0.63.0 - **go.opentelemetry.io/otel/exporters/prometheus** v0.42.0 -> v0.60.0 - **go.yaml.in/yaml/v2** v2.4.2 -> v2.4.3 - **go.yaml.in/yaml/v3** v3.0.4 ***new*** - **golang.org/x/term** v0.38.0 ***new*** - **google.golang.org/genproto/googleapis/api** [`c5933d9`](https://github.com/moby/buildkit/commit/c5933d9347a5) -> [`f26f940`](https://github.com/moby/buildkit/commit/f26f9409b101) - **google.golang.org/genproto/googleapis/rpc** [`c5933d9`](https://github.com/moby/buildkit/commit/c5933d9347a5) -> [`f26f940`](https://github.com/moby/buildkit/commit/f26f9409b101) - **kernel.org/pub/linux/libs/security/libcap/cap** v1.2.76 -> v1.2.77 - **kernel.org/pub/linux/libs/security/libcap/psx** v1.2.76 -> v1.2.77 - **tags.cncf.io/container-device-interface** v1.0.1 -> v1.1.0 - **tags.cncf.io/container-device-interface/specs-go** v1.0.0 -> v1.1.0 Previous release can be found at [v0.26.3](https://github.com/moby/buildkit/releases/tag/v0.26.3) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot bot added 1 commit

2026-01-22 00:01:58 +01:00