Commit 0f4f671
authored
build(deps): bump github.com/moby/buildkit from 0.28.1 to 0.29.0 (#654)
Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from
0.28.1 to 0.29.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/moby/buildkit/releases">github.com/moby/buildkit's
releases</a>.</em></p>
<blockquote>
<h2>v0.29.0</h2>
<p>Welcome to the v0.29.0 release of buildkit!</p>
<p>Please try out the release binaries and report any issues at
<a
href="https://github.com/moby/buildkit/issues">https://github.com/moby/buildkit/issues</a>.</p>
<h3>Contributors</h3>
<ul>
<li>Tõnis Tiigi</li>
<li>CrazyMax</li>
<li>David Karlsson</li>
<li>Akihiro Suda</li>
<li>Sebastiaan van Stijn</li>
<li>Brian Ristuccia</li>
<li>Jonathan A. Sternberg</li>
<li>Mateusz Gozdek</li>
<li>Natnael Gebremariam</li>
</ul>
<h3>Notable Changes</h3>
<ul>
<li>Builtin Dockerfile frontend has been updated to v1.23.0 <a
href="https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.23.0">changelog</a></li>
<li>Git sources can now initialize all files from a Git checkout with
commit time in the LLB API for better reproducibility. See <a
href="https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.23.0">Dockerfile
changelog</a> for how to enable this in the Dockerfile frontend <a
href="https://redirect.github.com/moby/buildkit/issues/6600">#6600</a></li>
<li>Various file access operations in Git and HTTP sources have been
hardened for improved security <a
href="https://redirect.github.com/moby/buildkit/issues/6613">#6613</a></li>
<li>Frontends can now report updated <code>SOURCE_DATE_EPOCH</code> with
result metadata that can be used by exporters <a
href="https://redirect.github.com/moby/buildkit/issues/6601">#6601</a></li>
<li>Fix possible panic when listing build history after recent deletions
<a
href="https://redirect.github.com/moby/buildkit/issues/6614">#6614</a></li>
<li>Fix possible issue where builds from Git repositories could start to
fail after submodule rename <a
href="https://redirect.github.com/moby/buildkit/issues/6563">#6563</a></li>
<li>Fix possible process lifecycle event ordering issue in interactive
container API that could cause deadlocks in the client <a
href="https://redirect.github.com/moby/buildkit/issues/6531">#6531</a></li>
<li>Fix regression where build progress skipped the message about layers
being pushed to the registry <a
href="https://redirect.github.com/moby/buildkit/issues/6587">#6587</a></li>
<li>Fix possible cgroup initialization failure in BuildKit container
image entrypoint on some environments <a
href="https://redirect.github.com/moby/buildkit/issues/6585">#6585</a></li>
<li>Fix issue with resolving symlinks via file access methods of the
Gateway API <a
href="https://redirect.github.com/moby/buildkit/issues/6559">#6559</a></li>
<li>Fix possible "parent snapshot does not exist" error when
exporting images in parallel <a
href="https://redirect.github.com/moby/buildkit/issues/6558">#6558</a></li>
<li>Fix possible panic from zstd compression <a
href="https://redirect.github.com/moby/buildkit/issues/6599">#6599</a></li>
<li>Fix issue where cache imports from an uninitialized local cache tag
could fail the build <a
href="https://redirect.github.com/moby/buildkit/issues/6554">#6554</a></li>
<li>Included CNI plugins have been updated to v1.9.1 <a
href="https://redirect.github.com/moby/buildkit/issues/6583">#6583</a></li>
<li>Included QEMU emulator support has been updated to v10.2.1 <a
href="https://redirect.github.com/moby/buildkit/issues/6580">#6580</a></li>
<li>Runc container runtime has been updated to v1.3.5 <a
href="https://redirect.github.com/moby/buildkit/issues/6625">#6625</a></li>
</ul>
<h3>Dependency Changes</h3>
<ul>
<li><strong>github.com/aws/aws-sdk-go-v2</strong> v1.41.1 ->
v1.41.4</li>
<li><strong>github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream</strong>
v1.7.4 -> v1.7.5</li>
<li><strong>github.com/aws/aws-sdk-go-v2/config</strong> v1.32.7 ->
v1.32.12</li>
<li><strong>github.com/aws/aws-sdk-go-v2/credentials</strong> v1.19.7
-> v1.19.12</li>
<li><strong>github.com/aws/aws-sdk-go-v2/feature/ec2/imds</strong>
v1.18.17 -> v1.18.20</li>
<li><strong>github.com/aws/aws-sdk-go-v2/internal/configsources</strong>
v1.4.17 -> v1.4.20</li>
<li><strong>github.com/aws/aws-sdk-go-v2/internal/endpoints/v2</strong>
v2.7.17 -> v2.7.20</li>
<li><strong>github.com/aws/aws-sdk-go-v2/internal/ini</strong> v1.8.4
-> v1.8.6</li>
<li><strong>github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding</strong>
v1.13.4 -> v1.13.7</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/moby/buildkit/commit/8543ce4428265d547cb009e5ad62348284497a88"><code>8543ce4</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/buildkit/issues/6634">#6634</a>
from moby/dependabot/github_actions/crazy-max-dot-gi...</li>
<li><a
href="https://github.com/moby/buildkit/commit/1154c7eda062136a8a590ab22dead213ec309101"><code>1154c7e</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/buildkit/issues/6635">#6635</a>
from moby/dependabot/github_actions/codecov/codecov-...</li>
<li><a
href="https://github.com/moby/buildkit/commit/326e4d184d68efa25ec23314885e90dcc40c0d46"><code>326e4d1</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/buildkit/issues/6637">#6637</a>
from moby/dependabot/github_actions/github/codeql-ac...</li>
<li><a
href="https://github.com/moby/buildkit/commit/676cdfa5309276128eb15e22417204955e0396a8"><code>676cdfa</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/buildkit/issues/6636">#6636</a>
from moby/dependabot/github_actions/actions/setup-go...</li>
<li><a
href="https://github.com/moby/buildkit/commit/1dd2e5057a3d357ebcc1880d544d36c249973a5f"><code>1dd2e50</code></a>
build(deps): bump github/codeql-action from 4.34.1 to 4.35.1</li>
<li><a
href="https://github.com/moby/buildkit/commit/21fb77153c31888f48126302735232d2c3b72d65"><code>21fb771</code></a>
build(deps): bump actions/setup-go from 6.3.0 to 6.4.0</li>
<li><a
href="https://github.com/moby/buildkit/commit/06b36e556dfdc2296b705121ec6ace57487d1e6f"><code>06b36e5</code></a>
build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0</li>
<li><a
href="https://github.com/moby/buildkit/commit/969f5e4030788c0fe8ab0dc8238c69427975e6ef"><code>969f5e4</code></a>
build(deps): bump the crazy-max-dot-github group with 2 updates</li>
<li><a
href="https://github.com/moby/buildkit/commit/f8fd302904168b49cf54db74d3020ca6907fd006"><code>f8fd302</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/buildkit/issues/6623">#6623</a>
from crazy-max/zizmor</li>
<li><a
href="https://github.com/moby/buildkit/commit/a103fb63eb0afa54208e06e8d801812a00571cd8"><code>a103fb6</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/buildkit/issues/6625">#6625</a>
from thaJeztah/bump_runc_1.3</li>
<li>Additional commits viewable in <a
href="https://github.com/moby/buildkit/compare/v0.28.1...v0.29.0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.2 files changed
Lines changed: 16 additions & 16 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
29 | 29 | | |
30 | 30 | | |
31 | 31 | | |
32 | | - | |
| 32 | + | |
33 | 33 | | |
34 | 34 | | |
35 | 35 | | |
| |||
173 | 173 | | |
174 | 174 | | |
175 | 175 | | |
176 | | - | |
| 176 | + | |
177 | 177 | | |
178 | 178 | | |
179 | 179 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
210 | 210 | | |
211 | 211 | | |
212 | 212 | | |
213 | | - | |
214 | | - | |
| 213 | + | |
| 214 | + | |
215 | 215 | | |
216 | 216 | | |
217 | 217 | | |
| |||
306 | 306 | | |
307 | 307 | | |
308 | 308 | | |
309 | | - | |
310 | | - | |
| 309 | + | |
| 310 | + | |
311 | 311 | | |
312 | 312 | | |
313 | 313 | | |
| |||
457 | 457 | | |
458 | 458 | | |
459 | 459 | | |
460 | | - | |
461 | | - | |
462 | | - | |
463 | | - | |
| 460 | + | |
| 461 | + | |
| 462 | + | |
| 463 | + | |
464 | 464 | | |
465 | 465 | | |
466 | 466 | | |
| |||
469 | 469 | | |
470 | 470 | | |
471 | 471 | | |
472 | | - | |
473 | | - | |
| 472 | + | |
| 473 | + | |
474 | 474 | | |
475 | 475 | | |
476 | 476 | | |
| |||
566 | 566 | | |
567 | 567 | | |
568 | 568 | | |
569 | | - | |
570 | | - | |
571 | | - | |
572 | | - | |
| 569 | + | |
| 570 | + | |
| 571 | + | |
| 572 | + | |
573 | 573 | | |
574 | 574 | | |
575 | 575 | | |
| |||
0 commit comments