Skip to content

chore(deps): bump github.com/moby/buildkit from 0.29.0 to 0.32.0 - #441

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/moby/buildkit-0.32.0
Open

chore(deps): bump github.com/moby/buildkit from 0.29.0 to 0.32.0#441
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/moby/buildkit-0.32.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/moby/buildkit from 0.29.0 to 0.32.0.

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.32.0

Welcome to the v0.32.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi
  • CrazyMax
  • Sebastiaan van Stijn
  • Akihiro Suda
  • Dawei Wei
  • Felix de Souza
  • Alberto Garcia Hierro
  • Devendra Kushwah
  • Giles Cope
  • Kunalbehbud
  • MohammadHasan Akbari
  • Natnael Gebremariam
  • Pierre Fenoll
  • Simon Aguilera
  • s3onghyun

Notable Changes

  • Built-in Dockerfile frontend has been updated to v1.26.0. changelog
  • Attestations now default to OCI artifact descriptors, use oci-artifacts=false if your registry does not support OCI artifacts. #6914
  • Build steps can now opt out of default OpenTelemetry tracing or define custom tracing configuration. #6958
  • Bolt database performance has been improved. #6943
  • Included Runc container runtime has been updated to v1.4.3. #6853
  • All remote cache backends now use OCI mediatypes for record descriptors. #6913
  • Source policy identifiers are now normalized before sending them to policy evaluation. #6909
  • SBOM scanner support for Windows has been added. #6941
  • Session exporters now support an optional finalization callback after exports complete, allowing providers to run completion logic while gateway references are still available. #6978
  • Lock contention in the LLB solver has been reduced. #6917
  • Improve SSH support when using non-standard ports. #6895
  • Improve validation of reading contents of invalid files via API. #6903
  • Deprecated OTEL fallback variables OTEL_TRACE_PARENT, OTEL_TRACE_STATE are no longer supported. Use TRACEPARENT and TRACESTATE instead. #6874
  • Fix possible cache miss issue on parallel builds with shared parts. #6955
  • Fix chunked encoding support for S3-compatible remote cache backends. #6970
  • Fix regression on handling OTEL_IGNORE_ERROR environment variable. #6966

Dependency Changes

  • github.com/Microsoft/go-winio v0.6.2 -> ad3df93bed29
  • github.com/Microsoft/hcsshim v0.14.1 -> v0.15.0-rc.1
  • github.com/ProtonMail/go-crypto v1.3.0 -> v1.4.1

... (truncated)

Commits
  • f5d08d5 Merge pull request #6992 from crazy-max/fix-export-finalize-test
  • b1eea81 test: require image exporter for session finalize
  • a498582 Merge pull request #6990 from crazy-max/fix-windows-local-export-invalid-test
  • cc977b3 test: avoid local exporter invalid mode integration hang
  • 7a9ce8f Merge pull request #6983 from moby/dependabot/github_actions/github/codeql-ac...
  • 2b8e155 Merge pull request #6988 from moby/dependabot/github_actions/docker/login-act...
  • dc7e2b1 build(deps): bump docker/login-action from 4.4.0 to 4.5.1
  • 7281141 Merge pull request #6982 from thaJeztah/bump_go_archive_0.2.1
  • f1ee611 build(deps): bump github/codeql-action/upload-sarif
  • 53b2d03 vendor: github.com/moby/go-archive v0.2.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.29.0 to 0.32.0.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.29.0...v0.32.0)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants