Skip to content

chore(deps): bump the go-dependencies group with 2 updates - #12

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-1bd9a1d690
Open

chore(deps): bump the go-dependencies group with 2 updates#12
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-1bd9a1d690

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 2 updates: github.com/moby/buildkit and github.com/moby/moby/client.

Updates github.com/moby/buildkit from 0.31.2 to 0.32.0

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.32.0

Welcome to the v0.32.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi
  • CrazyMax
  • Sebastiaan van Stijn
  • Akihiro Suda
  • Dawei Wei
  • Felix de Souza
  • Alberto Garcia Hierro
  • Devendra Kushwah
  • Giles Cope
  • Kunalbehbud
  • MohammadHasan Akbari
  • Natnael Gebremariam
  • Pierre Fenoll
  • Simon Aguilera
  • s3onghyun

Notable Changes

  • Built-in Dockerfile frontend has been updated to v1.26.0. changelog
  • Attestations now default to OCI artifact descriptors, use oci-artifacts=false if your registry does not support OCI artifacts. #6914
  • Build steps can now opt out of default OpenTelemetry tracing or define custom tracing configuration. #6958
  • Bolt database performance has been improved. #6943
  • Included Runc container runtime has been updated to v1.4.3. #6853
  • All remote cache backends now use OCI mediatypes for record descriptors. #6913
  • Source policy identifiers are now normalized before sending them to policy evaluation. #6909
  • SBOM scanner support for Windows has been added. #6941
  • Session exporters now support an optional finalization callback after exports complete, allowing providers to run completion logic while gateway references are still available. #6978
  • Lock contention in the LLB solver has been reduced. #6917
  • Improve SSH support when using non-standard ports. #6895
  • Improve validation of reading contents of invalid files via API. #6903
  • Deprecated OTEL fallback variables OTEL_TRACE_PARENT, OTEL_TRACE_STATE are no longer supported. Use TRACEPARENT and TRACESTATE instead. #6874
  • Fix possible cache miss issue on parallel builds with shared parts. #6955
  • Fix chunked encoding support for S3-compatible remote cache backends. #6970
  • Fix regression on handling OTEL_IGNORE_ERROR environment variable. #6966

Dependency Changes

  • github.com/Microsoft/go-winio v0.6.2 -> ad3df93bed29
  • github.com/Microsoft/hcsshim v0.14.1 -> v0.15.0-rc.1
  • github.com/ProtonMail/go-crypto v1.3.0 -> v1.4.1

... (truncated)

Commits
  • f5d08d5 Merge pull request #6992 from crazy-max/fix-export-finalize-test
  • b1eea81 test: require image exporter for session finalize
  • a498582 Merge pull request #6990 from crazy-max/fix-windows-local-export-invalid-test
  • cc977b3 test: avoid local exporter invalid mode integration hang
  • 7a9ce8f Merge pull request #6983 from moby/dependabot/github_actions/github/codeql-ac...
  • 2b8e155 Merge pull request #6988 from moby/dependabot/github_actions/docker/login-act...
  • dc7e2b1 build(deps): bump docker/login-action from 4.4.0 to 4.5.1
  • 7281141 Merge pull request #6982 from thaJeztah/bump_go_archive_0.2.1
  • f1ee611 build(deps): bump github/codeql-action/upload-sarif
  • 53b2d03 vendor: github.com/moby/go-archive v0.2.1
  • Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.5.0 to 0.5.1

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.5.1

0.5.1

Changelog

  • client/pkg/jsonmessage: Display: fix godoc link. moby/moby#53070
  • client: ServiceCreate, ServiceUpdate: fix duplicate and 'unkown' platforms. moby/moby#53012
  • client: ServiceInspect, ContainerCommit: omit optional query args if not set. moby/moby#53010
  • golangci-lint: enable perfsprint linter. moby/moby#53016
Changelog

Sourced from github.com/moby/moby/client's changelog.

0.5.1 (2013-07-30)

  • API: Docker client now sets useragent (RFC 2616)
  • Runtime: Add ps args to docker top
  • Runtime: Add support for container ID files (pidfile like)
  • Runtime: Add container=lxc in default env
  • Runtime: Support networkless containers with docker run -n and docker -d -b=none
  • API: Add /events endpoint
  • Builder: ADD command now understands URLs
  • Builder: CmdAdd and CmdEnv now respect Dockerfile-set ENV variables
  • Hack: Simplify unit tests with helpers
  • Hack: Improve docker.upstart event
  • Hack: Add coverage testing into docker-ci
  • Runtime: Stdout/stderr logs are now stored in the same file as JSON
  • Runtime: Allocate a /16 IP range by default, with fallback to /24. Try 12 ranges instead of 3.
  • Runtime: Change .dockercfg format to json and support multiple auth remote
  • Runtime: Do not override volumes from config
  • Runtime: Fix issue with EXPOSE override
  • Builder: Create directories with 755 instead of 700 within ADD instruction
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 2 updates: [github.com/moby/buildkit](https://github.com/moby/buildkit) and [github.com/moby/moby/client](https://github.com/moby/moby).


Updates `github.com/moby/buildkit` from 0.31.2 to 0.32.0
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.31.2...v0.32.0)

Updates `github.com/moby/moby/client` from 0.5.0 to 0.5.1
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.5.1/CHANGELOG.md)
- [Commits](moby/moby@v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 1, 2026
@github-code-quality

Copy link
Copy Markdown

Code Coverage Overview

Languages: Go

Go / code-coverage/go

The overall coverage in commit 1b73aa9 in the dependabot/go_module... branch remains at 53%, unchanged from commit 4a0ce59 in the main branch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants