Skip to content

fix(deps): update module github.com/moby/buildkit to v0.32.2 - #877

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-moby-buildkit-0.x
Open

fix(deps): update module github.com/moby/buildkit to v0.32.2#877
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-moby-buildkit-0.x

Conversation

@renovate

@renovaterenovateBot commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

PackageChangeAgeConfidence
github.com/moby/buildkitv0.31.1v0.32.2ageconfidence

Release Notes

moby/buildkit (github.com/moby/buildkit)

v0.32.2

Compare Source

Welcome to the v0.32.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors
  • CrazyMax
Notable Changes
  • Revert the v0.32.1 OCI artifact attestation push-order workaround, restoring BuildKit's spec-aligned behavior of allowing referrers to be pushed before their subject manifests. #​7016
Dependency Changes

This release has no dependency changes

Previous release can be found at v0.32.1

v0.32.1

Compare Source

Welcome to the v0.32.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors
  • CrazyMax
Notable Changes
  • Fix archive extraction through implied parent directories and absolute symlinks. #​7005
  • Fix OCI artifact attestation pushes to registries that strictly validate subject references. #​7012
Dependency Changes
  • github.com/moby/go-archive v0.2.1 -> v0.2.0

Previous release can be found at v0.32.0

v0.32.0

Compare Source

Welcome to the v0.32.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors
  • Tõnis Tiigi
  • CrazyMax
  • Sebastiaan van Stijn
  • Akihiro Suda
  • Dawei Wei
  • Felix de Souza
  • Alberto Garcia Hierro
  • Devendra Kushwah
  • Giles Cope
  • Kunalbehbud
  • MohammadHasan Akbari
  • Natnael Gebremariam
  • Pierre Fenoll
  • Simon Aguilera
  • s3onghyun
Notable Changes
  • Built-in Dockerfile frontend has been updated to v1.26.0. changelog
  • Attestations now default to OCI artifact descriptors, use oci-artifacts=false if your registry does not support OCI artifacts. #​6914
  • Build steps can now opt out of default OpenTelemetry tracing or define custom tracing configuration. #​6958
  • Bolt database performance has been improved. #​6943
  • Included Runc container runtime has been updated to v1.4.3. #​6853
  • All remote cache backends now use OCI mediatypes for record descriptors. #​6913
  • Source policy identifiers are now normalized before sending them to policy evaluation. #​6909
  • SBOM scanner support for Windows has been added. #​6941
  • Session exporters now support an optional finalization callback after exports complete, allowing providers to run completion logic while gateway references are still available. #​6978
  • Lock contention in the LLB solver has been reduced. #​6917
  • Improve SSH support when using non-standard ports. #​6895
  • Improve validation of reading contents of invalid files via API. #​6903
  • Deprecated OTEL fallback variables OTEL_TRACE_PARENT, OTEL_TRACE_STATE are no longer supported. Use TRACEPARENT and TRACESTATE instead. #​6874
  • Fix possible cache miss issue on parallel builds with shared parts. #​6955
  • Fix chunked encoding support for S3-compatible remote cache backends. #​6970
  • Fix regression on handling OTEL_IGNORE_ERROR environment variable. #​6966
Dependency Changes
  • github.com/Microsoft/go-winio v0.6.2 -> ad3df93
  • github.com/Microsoft/hcsshim v0.14.1 -> v0.15.0-rc.1
  • github.com/ProtonMail/go-crypto v1.3.0 -> v1.4.1
  • github.com/aws/aws-sdk-go-v2 v1.42.0 -> v1.43.0
  • github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.13 -> v1.7.14
  • github.com/aws/aws-sdk-go-v2/config v1.32.24 -> v1.32.31
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.23 -> v1.19.30
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.29 -> v1.18.31
  • github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.2.9 -> v0.3.5
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.29 -> v1.4.31
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29 -> v2.7.31
  • github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30 -> v1.4.32
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12 -> v1.13.13
  • github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.22 -> v1.9.24
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.29 -> v1.13.31
  • github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.29 -> v1.19.32
  • github.com/aws/aws-sdk-go-v2/service/s3 v1.103.3 -> v1.106.0
  • github.com/aws/aws-sdk-go-v2/service/signin v1.1.5 -> v1.5.0
  • github.com/aws/aws-sdk-go-v2/service/sso v1.31.3 -> v1.33.0
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.6 -> v1.38.0
  • github.com/aws/aws-sdk-go-v2/service/sts v1.43.3 -> v1.45.0
  • github.com/aws/smithy-go v1.27.2 -> v1.27.4
  • github.com/containerd/containerd/api v1.10.0 -> v1.11.1
  • github.com/containerd/containerd/v2 v2.2.4 -> v2.3.3
  • github.com/containerd/plugin v1.0.0 -> v1.1.0
  • github.com/containerd/ttrpc v1.2.8 -> v1.2.9
  • github.com/docker/cli v29.5.3 -> v29.6.2
  • github.com/go-openapi/errors v0.22.7 -> v0.22.8
  • github.com/go-openapi/loads v0.23.3 -> v0.24.0
  • github.com/go-openapi/runtime v0.32.3 -> v0.32.4
  • github.com/go-openapi/spec v0.22.5 -> v0.22.6
  • github.com/go-openapi/strfmt v0.26.3 -> v0.26.4
  • github.com/go-openapi/swag v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/cmdutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/conv v0.26.0 -> v0.27.0
  • github.com/go-openapi/swag/fileutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/jsonname v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/jsonutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/loading v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/mangling v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/netutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/stringutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/typeutils v0.26.0 -> v0.27.0
  • github.com/go-openapi/swag/yamlutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/validate v0.25.3 -> v0.26.0
  • github.com/gohugoio/hashstructure v0.6.0 new
  • github.com/google/go-containerregistry v0.21.6 -> v0.21.7
  • github.com/klauspost/compress v1.18.6 -> v1.19.1
  • github.com/moby/go-archive v0.2.0 -> v0.2.1
  • github.com/moby/policy-helpersd5411a9 -> 856be88
  • github.com/moby/sys/mountfc52b72 -> v0.3.5
  • github.com/moby/sys/user v0.4.0 -> v0.4.1
  • github.com/sigstore/rekor v1.5.2 -> v1.5.3
  • github.com/sigstore/rekor-tiles/v25d098a2 -> v2.3.0
  • github.com/sigstore/sigstore-go v1.2.1 -> v1.2.2
  • github.com/tonistiigi/fsutil30cd4fc -> 6d9dc2e
  • go.etcd.io/bbolt v1.4.3 -> v1.5.0
  • go.opentelemetry.io/otel/exporters/prometheus v0.65.0 -> v0.66.0
  • golang.org/x/crypto v0.52.0 -> v0.54.0
  • golang.org/x/mod v0.36.0 -> v0.38.0
  • golang.org/x/net v0.55.0 -> v0.57.0
  • golang.org/x/sync v0.20.0 -> v0.22.0
  • golang.org/x/sys v0.45.0 -> v0.47.0
  • golang.org/x/term v0.43.0 -> v0.45.0
  • golang.org/x/text v0.37.0 -> v0.40.0
  • google.golang.org/grpc v1.81.1 -> v1.82.1
  • google.golang.org/protobuf v1.36.11 -> f2248ac

Previous release can be found at v0.31.2

v0.31.2

Compare Source

Welcome to the v0.31.2 release of buildkit!

This is a security patch release with four moderate and one low severity security fixes.

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors
  • Tõnis Tiigi
  • CrazyMax
  • Dawei Wei
Notable Changes
  • Git source checkout from a bundle file could lead to command injection. GHSA-hw3h-2gp9-cxpv
  • Possible panic when incorrect parameters sent from frontend. GHSA-qx3x-mv6r-52p6
  • LLB file operation can be tricked to remove /tmp directory contents. GHSA-32pv-7hq5-qhwq
  • Malicious client can bypass destination directory validation on local sources upload. GHSA-g2h8-426c-7976
  • WCOW cache mount source selector resolves NTFS junctions outside of cache root. GHSA-388v-wmr2-g2v2
  • Fix possible buildctl failures after successful builds over slow connhelper transports. #​6940
  • Fix possible daemon crash during concurrent builds. #​6916
Dependency Changes

Previous release can be found at v0.31.1


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovateBot commented Aug 17, 2026

Copy link
Copy Markdown
ContributorAuthor

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

PackageChange
go1.26.1 -> 1.26.3
golang.org/x/textv0.37.0 -> v0.40.0
google.golang.org/protobufv1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af

@renovate
renovateBot enabled auto-merge (squash) August 17, 2026 06:50
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants