chore(deps): update module github.com/bufbuild/buf/cmd/buf to v1.68.2 (main) (#15103)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/bufbuild/buf/cmd/buf](https://redirect.github.com/bufbuild/buf)
| `v1.67.0` → `v1.68.2` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fbufbuild%2fbuf%2fcmd%2fbuf/v1.68.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fbufbuild%2fbuf%2fcmd%2fbuf/v1.67.0/v1.68.2?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the warning logs for
more information.

---

### Release Notes

<details>
<summary>bufbuild/buf (github.com/bufbuild/buf/cmd/buf)</summary>

###
[`v1.68.2`](https://redirect.github.com/bufbuild/buf/blob/HEAD/CHANGELOG.md#v1682---2026-04-17)

[Compare
Source](https://redirect.github.com/bufbuild/buf/compare/v1.68.1...v1.68.2)

- Fix build failures for modules with a vendored `descriptor.proto`.
- Fix LSP incorrectly reporting "edition '2024' not yet fully supported"
errors.
- Fix CEL compilation error messages in `buf lint` to use the structured
error API instead of parsing cel-go's text output.
- Add `--debug-address` flag to `buf lsp serve` to provide debug and
profile support.

###
[`v1.68.1`](https://redirect.github.com/bufbuild/buf/blob/HEAD/CHANGELOG.md#v1681---2026-04-14)

[Compare
Source](https://redirect.github.com/bufbuild/buf/compare/v1.68.0...v1.68.1)

- Revert the use of the new compiler report format and properly ungate
Editions 2024 features.
- Fix absolute imports (leading-dot) marked unused in diagnostics.

###
[`v1.68.0`](https://redirect.github.com/bufbuild/buf/blob/HEAD/CHANGELOG.md#v1680---2026-04-14)

[Compare
Source](https://redirect.github.com/bufbuild/buf/compare/v1.67.0...v1.68.0)

- Use new compiler for build process and support Editions 2024 features.
- Add LSP document links for `buf.yaml` deps, `buf.gen.yaml` remote
plugins and input modules, `buf.policy.yaml` name and BSR plugins, and
`buf.lock` dep names, making each a clickable link to its BSR page.
- Add LSP code lenses for `buf.yaml` files to update all dependencies
(`buf.dep.updateAll`) or check for available updates
(`buf.dep.checkUpdates`).
- Improve shell completions for `buf` flags with fixed value sets and
file/directory arguments.
- Add `buf curl` URL path shell completions (service and method names)
via
  server reflection, `--schema`, or the local buf module.
- Add support for Edition 2024 syntax to `buf format`.
- Fix `buf generate --clean` deleting files from nested plugin output
directories.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM (`* 0-3 * * *`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [x] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

## Need help?
You can ask for more help in the following Slack channel:
#proj-renovate-self-hosted. In that channel you can also find ADR and
FAQ docs in the Resources section.

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjcuMiIsInVwZGF0ZWRJblZlciI6IjQzLjEyNy4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZGF0ZSIsInVwZGF0ZS1taW5vciJdfQ==-->

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Build-tooling-only version bumps; main risk is CI/build differences if
`buf` behavior changes for protobuf formatting/linting.
> 
> **Overview**
> Updates the build container tooling by bumping
`github.com/bufbuild/buf/cmd/buf` from `v1.67.0` to `v1.68.2` in
`mimir-build-image/Dockerfile`.
> 
> Also updates `Makefile`’s `LATEST_BUILD_IMAGE_TAG` so `make
fetch-build-image` pulls the newer prebuilt build image that includes
the updated toolchain.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
64c3fc9. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

Makefile

@@ -224,7 +224,7 @@ mimir-build-image/$(UPTODATE): mimir-build-image/*
 # All the boiler plate for building golang follows:
 SUDO := $(shell docker info >/dev/null 2>&1 || echo "sudo -E")
 BUILD_IN_CONTAINER ?= true
-LATEST_BUILD_IMAGE_TAG ?= pr15102-a76c02ab6c
+LATEST_BUILD_IMAGE_TAG ?= pr15103-d1b68e5c9d
 
 # TTY is parameterized to allow CI and scripts to run builds,
 # as it currently disallows TTY devices.

mimir-build-image/Dockerfile

@@ -58,7 +58,7 @@ RUN GO111MODULE=on \
 	go install github.com/norwoodj/helm-docs/cmd/helm-docs@v1.14.2 && \
 	go install github.com/open-policy-agent/conftest@v0.68.2 && \
 	go install github.com/uber-go/gopatch@v0.4.0 && \
-	go install github.com/bufbuild/buf/cmd/buf@v1.67.0 && \
+	go install github.com/bufbuild/buf/cmd/buf@v1.68.2 && \
 	rm -rf /go/pkg /go/src /root/.cache
 
 COPY --from=helm /usr/bin/helm /usr/bin/helm