FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

deps(go): bump module github.com/moby/buildkit to v0.32.0 by updateclibot[bot] · Pull Request #9780 · updatecli/updatecli · GitHub

/ updatecli Public

deps(go): bump module github.com/moby/buildkit to v0.32.0 - #9780

Merged
olblak merged 2 commits into
mainfrom
updatecli_main_412f4047cea2242ddd66e871814efd613c314fafd5c2e6650a991915c054aa08
Aug 3, 2026
ConversationCommits (2)ChecksFiles changed
Merged

deps(go): bump module github.com/moby/buildkit to v0.32.0#9780
olblak merged 2 commits into
mainfrom
updatecli_main_412f4047cea2242ddd66e871814efd613c314fafd5c2e6650a991915c054aa08

Conversation

updateclibot Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

deps(go): bump module github.com/moby/buildkit

clean: go mod tidy

ran shell command "go mod tidy"

deps(go): bump module github.com/moby/buildkit to v0.32.0

go.mod updated Module path "github.com/moby/buildkit" version from "v0.31.2" to "v0.32.0"

v0.32.0 
Welcome to the v0.32.0 release of buildkit!



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* Tõnis Tiigi
* CrazyMax
* Sebastiaan van Stijn
* Akihiro Suda
* Dawei Wei
* Felix de Souza
* Alberto Garcia Hierro
* Devendra Kushwah
* Giles Cope
* Kunalbehbud
* MohammadHasan Akbari
* Natnael Gebremariam
* Pierre Fenoll
* Simon Aguilera
* s3onghyun

### Notable Changes

- Built-in Dockerfile frontend has been updated to v1.26.0. [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.26.0)
- Attestations now default to OCI artifact descriptors, use `oci-artifacts=false` if your registry does not support OCI artifacts. #6914 
- Build steps can now opt out of default OpenTelemetry tracing or define custom tracing configuration. #6958
- Bolt database performance has been improved. #6943
- Included Runc container runtime has been updated to v1.4.3. #6853
- All remote cache backends now use OCI mediatypes for record descriptors. #6913
- Source policy identifiers are now normalized before sending them to policy evaluation. #6909
- SBOM scanner support for Windows has been added. #6941
- Session exporters now support an optional finalization callback after exports complete, allowing providers to run completion logic while gateway references are still available. #6978
- Lock contention in the LLB solver has been reduced. #6917
- Improve SSH support when using non-standard ports. #6895 
- Improve validation of reading contents of invalid files via API. #6903
- Deprecated OTEL fallback variables `OTEL_TRACE_PARENT`, `OTEL_TRACE_STATE` are no longer supported. Use `TRACEPARENT` and `TRACESTATE` instead. #6874
- Fix possible cache miss issue on parallel builds with shared parts. #6955
- Fix chunked encoding support for S3-compatible remote cache backends. #6970
- Fix regression on handling `OTEL_IGNORE_ERROR` environment variable. #6966

### Dependency Changes

* **github.com/Microsoft/go-winio**                                  v0.6.2 -> ad3df93bed29
* **github.com/Microsoft/hcsshim**                                   v0.14.1 -> v0.15.0-rc.1
* **github.com/ProtonMail/go-crypto**                                v1.3.0 -> v1.4.1
* **github.com/aws/aws-sdk-go-v2**                                   v1.42.0 -> v1.43.0
* **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream**          v1.7.13 -> v1.7.14
* **github.com/aws/aws-sdk-go-v2/config**                            v1.32.24 -> v1.32.31
* **github.com/aws/aws-sdk-go-v2/credentials**                       v1.19.23 -> v1.19.30
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                  v1.18.29 -> v1.18.31
* **github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager**        v0.2.9 -> v0.3.5
* **github.com/aws/aws-sdk-go-v2/internal/configsources**            v1.4.29 -> v1.4.31
* **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**             v2.7.29 -> v2.7.31
* **github.com/aws/aws-sdk-go-v2/internal/v4a**                      v1.4.30 -> v1.4.32
* **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding**  v1.13.12 -> v1.13.13
* **github.com/aws/aws-sdk-go-v2/service/internal/checksum**         v1.9.22 -> v1.9.24
* **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**    v1.13.29 -> v1.13.31
* **github.com/aws/aws-sdk-go-v2/service/internal/s3shared**         v1.19.29 -> v1.19.32
* **github.com/aws/aws-sdk-go-v2/service/s3**                        v1.103.3 -> v1.106.0
* **github.com/aws/aws-sdk-go-v2/service/signin**                    v1.1.5 -> v1.5.0
* **github.com/aws/aws-sdk-go-v2/service/sso**                       v1.31.3 -> v1.33.0
* **github.com/aws/aws-sdk-go-v2/service/ssooidc**                   v1.36.6 -> v1.38.0
* **github.com/aws/aws-sdk-go-v2/service/sts**                       v1.43.3 -> v1.45.0
* **github.com/aws/smithy-go**                                       v1.27.2 -> v1.27.4
* **github.com/containerd/containerd/api**                           v1.10.0 -> v1.11.1
* **github.com/containerd/containerd/v2**                            v2.2.4 -> v2.3.3
* **github.com/containerd/plugin**                                   v1.0.0 -> v1.1.0
* **github.com/containerd/ttrpc**                                    v1.2.8 -> v1.2.9
* **github.com/docker/cli**                                          v29.5.3 -> v29.6.2
* **github.com/go-openapi/errors**                                   v0.22.7 -> v0.22.8
* **github.com/go-openapi/loads**                                    v0.23.3 -> v0.24.0
* **github.com/go-openapi/runtime**                                  v0.32.3 -> v0.32.4
* **github.com/go-openapi/spec**                                     v0.22.5 -> v0.22.6
* **github.com/go-openapi/strfmt**                                   v0.26.3 -> v0.26.4
* **github.com/go-openapi/swag**                                     v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/cmdutils**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/conv**                                v0.26.0 -> v0.27.0
* **github.com/go-openapi/swag/fileutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/jsonname**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/jsonutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/loading**                             v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/mangling**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/netutils**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/stringutils**                         v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/typeutils**                           v0.26.0 -> v0.27.0
* **github.com/go-openapi/swag/yamlutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/validate**                                 v0.25.3 -> v0.26.0
* **github.com/gohugoio/hashstructure**                              v0.6.0 **_new_**
* **github.com/google/go-containerregistry**                         v0.21.6 -> v0.21.7
* **github.com/klauspost/compress**                                  v1.18.6 -> v1.19.1
* **github.com/moby/go-archive**                                     v0.2.0 -> v0.2.1
* **github.com/moby/policy-helpers**                                 d5411a945cfc -> 856be88baec4
* **github.com/moby/sys/mount**                                      fc52b7222d0b -> v0.3.5
* **github.com/moby/sys/user**                                       v0.4.0 -> v0.4.1
* **github.com/sigstore/rekor**                                      v1.5.2 -> v1.5.3
* **github.com/sigstore/rekor-tiles/v2**                             5d098a2b6443 -> v2.3.0
* **github.com/sigstore/sigstore-go**                                v1.2.1 -> v1.2.2
* **github.com/tonistiigi/fsutil**                                   30cd4fc5d911 -> 6d9dc2ebad62
* **go.etcd.io/bbolt**                                               v1.4.3 -> v1.5.0
* **go.opentelemetry.io/otel/exporters/prometheus**                  v0.65.0 -> v0.66.0
* **golang.org/x/crypto**                                            v0.52.0 -> v0.54.0
* **golang.org/x/mod**                                               v0.36.0 -> v0.38.0
* **golang.org/x/net**                                               v0.55.0 -> v0.57.0
* **golang.org/x/sync**                                              v0.20.0 -> v0.22.0
* **golang.org/x/sys**                                               v0.45.0 -> v0.47.0
* **golang.org/x/term**                                              v0.43.0 -> v0.45.0
* **golang.org/x/text**                                              v0.37.0 -> v0.40.0
* **google.golang.org/grpc**                                         v1.81.1 -> v1.82.1
* **google.golang.org/protobuf**                                     v1.36.11 -> f2248ac996af

Previous release can be found at [v0.31.2](https://github.com/moby/buildkit/releases/tag/v0.31.2)
v0.32.0-rc2 
Welcome to the v0.32.0-rc2 release of buildkit!  
*This is a pre-release of buildkit*



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* CrazyMax
* Alberto Garcia Hierro
* Sebastiaan van Stijn
* Tõnis Tiigi

### Notable Changes

- Built-in Dockerfile frontend has been updated to v1.26.0-rc2 [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.26.0-rc2)
- Session exporters now support an optional finalization callback after exports complete, allowing providers to run completion logic while gateway references are still available. #6978

### Dependency Changes

* **github.com/moby/go-archive**  v0.2.0 -> v0.2.1

Previous release can be found at [v0.32.0-rc1](https://github.com/moby/buildkit/releases/tag/v0.32.0-rc1)
v0.32.0-rc1 
buildkit 0.32.0-rc1

Welcome to the v0.32.0-rc1 release of buildkit!  
*This is a pre-release of buildkit*



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* Tõnis Tiigi
* CrazyMax
* Sebastiaan van Stijn
* Akihiro Suda
* Dawei Wei
* Felix de Souza
* Devendra Kushwah
* Giles Cope
* Kunalbehbud
* MohammadHasan Akbari
* Natnael Gebremariam
* Pierre Fenoll
* Simon Aguilera
* s3onghyun

### Notable Changes

- Built-in Dockerfile frontend has been updated to v1.26.0-rc1 [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.26.0-rc1)
- Attestations now default to OCI artifact descriptors, use `oci-artifacts=false` if your registry does not support OCI artifacts. #6914 
- Build steps can now opt out of default OpenTelemetry tracing or define custom tracing configuration #6958
- Bolt database performance has been improved #6943
- Included Runc container runtime has been updated to v1.4.3 #6853
- All remote cache backends now use OCI mediatypes for record descriptors #6913
- Source policy identifiers are now normalized before sending them to policy evaluation #6909
- SBOM scanner support for Windows has been added #6941
- Lock contention in the LLB solver has been reduced #6917
- Improve SSH support when using non-standard ports #6895 
- Improve validation of reading contents of invalid files via API #6903
- Deprecated OTEL fallback variables `OTEL_TRACE_PARENT`, `OTEL_TRACE_STATE` are no longer supported. Use `TRACEPARENT` and `TRACESTATE` instead. #6874
- Fix possible cache miss issue on parallel builds with shared parts #6955
- Fix chunked encoding support for S3-compatible remote cache backends #6970
- Fix regression on handling `OTEL_IGNORE_ERROR` environment variable #6966


### Dependency Changes

* **github.com/Microsoft/go-winio**                                  v0.6.2 -> ad3df93bed29
* **github.com/Microsoft/hcsshim**                                   v0.14.1 -> v0.15.0-rc.1
* **github.com/ProtonMail/go-crypto**                                v1.3.0 -> v1.4.1
* **github.com/aws/aws-sdk-go-v2**                                   v1.42.0 -> v1.43.0
* **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream**          v1.7.13 -> v1.7.14
* **github.com/aws/aws-sdk-go-v2/config**                            v1.32.24 -> v1.32.31
* **github.com/aws/aws-sdk-go-v2/credentials**                       v1.19.23 -> v1.19.30
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                  v1.18.29 -> v1.18.31
* **github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager**        v0.2.9 -> v0.3.5
* **github.com/aws/aws-sdk-go-v2/internal/configsources**            v1.4.29 -> v1.4.31
* **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**             v2.7.29 -> v2.7.31
* **github.com/aws/aws-sdk-go-v2/internal/v4a**                      v1.4.30 -> v1.4.32
* **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding**  v1.13.12 -> v1.13.13
* **github.com/aws/aws-sdk-go-v2/service/internal/checksum**         v1.9.22 -> v1.9.24
* **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**    v1.13.29 -> v1.13.31
* **github.com/aws/aws-sdk-go-v2/service/internal/s3shared**         v1.19.29 -> v1.19.32
* **github.com/aws/aws-sdk-go-v2/service/s3**                        v1.103.3 -> v1.106.0
* **github.com/aws/aws-sdk-go-v2/service/signin**                    v1.1.5 -> v1.5.0
* **github.com/aws/aws-sdk-go-v2/service/sso**                       v1.31.3 -> v1.33.0
* **github.com/aws/aws-sdk-go-v2/service/ssooidc**                   v1.36.6 -> v1.38.0
* **github.com/aws/aws-sdk-go-v2/service/sts**                       v1.43.3 -> v1.45.0
* **github.com/aws/smithy-go**                                       v1.27.2 -> v1.27.4
* **github.com/containerd/containerd/api**                           v1.10.0 -> v1.11.1
* **github.com/containerd/containerd/v2**                            v2.2.4 -> v2.3.3
* **github.com/containerd/plugin**                                   v1.0.0 -> v1.1.0
* **github.com/containerd/ttrpc**                                    v1.2.8 -> v1.2.9
* **github.com/docker/cli**                                          v29.5.3 -> v29.6.2
* **github.com/go-openapi/errors**                                   v0.22.7 -> v0.22.8
* **github.com/go-openapi/loads**                                    v0.23.3 -> v0.24.0
* **github.com/go-openapi/runtime**                                  v0.32.3 -> v0.32.4
* **github.com/go-openapi/spec**                                     v0.22.5 -> v0.22.6
* **github.com/go-openapi/strfmt**                                   v0.26.3 -> v0.26.4
* **github.com/go-openapi/swag**                                     v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/cmdutils**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/conv**                                v0.26.0 -> v0.27.0
* **github.com/go-openapi/swag/fileutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/jsonname**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/jsonutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/loading**                             v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/mangling**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/netutils**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/stringutils**                         v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/typeutils**                           v0.26.0 -> v0.27.0
* **github.com/go-openapi/swag/yamlutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/validate**                                 v0.25.3 -> v0.26.0
* **github.com/gohugoio/hashstructure**                              v0.6.0 **_new_**
* **github.com/google/go-containerregistry**                         v0.21.6 -> v0.21.7
* **github.com/klauspost/compress**                                  v1.18.6 -> v1.19.1
* **github.com/moby/policy-helpers**                                 d5411a945cfc -> 856be88baec4
* **github.com/moby/sys/mount**                                      fc52b7222d0b -> v0.3.5
* **github.com/moby/sys/user**                                       v0.4.0 -> v0.4.1
* **github.com/sigstore/rekor**                                      v1.5.2 -> v1.5.3
* **github.com/sigstore/rekor-tiles/v2**                             5d098a2b6443 -> v2.3.0
* **github.com/sigstore/sigstore-go**                                v1.2.1 -> v1.2.2
* **github.com/tonistiigi/fsutil**                                   30cd4fc5d911 -> 6d9dc2ebad62
* **go.etcd.io/bbolt**                                               v1.4.3 -> v1.5.0
* **go.opentelemetry.io/otel/exporters/prometheus**                  v0.65.0 -> v0.66.0
* **google.golang.org/grpc**                                         v1.81.1 -> v1.82.1
* **google.golang.org/protobuf**                                     v1.36.11 -> f2248ac996af

Previous release can be found at [v0.31.2](https://github.com/moby/buildkit/releases/tag/v0.31.2)
v0.31.2 
Welcome to the v0.31.2 release of buildkit!

This is a security patch release with four moderate and one low severity security fixes.

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* Tõnis Tiigi
* CrazyMax
* Dawei Wei

### Notable Changes

- Git source checkout from a bundle file could lead to command injection. https://github.com/moby/buildkit/security/advisories/GHSA-hw3h-2gp9-cxpv
- Possible panic when incorrect parameters sent from frontend. https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6
- LLB file operation can be tricked to remove `/tmp` directory contents. https://github.com/moby/buildkit/security/advisories/GHSA-32pv-7hq5-qhwq
- Malicious client can bypass destination directory validation on local sources upload. https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976
- WCOW cache mount source selector resolves NTFS junctions outside of cache root. https://github.com/moby/buildkit/security/advisories/GHSA-388v-wmr2-g2v2
- Fix possible buildctl failures after successful builds over slow connhelper transports. #6940
- Fix possible daemon crash during concurrent builds. #6916

### Dependency Changes

* **github.com/tonistiigi/fsutil**  0257b3308df4 -> 30cd4fc5d911

Previous release can be found at [v0.31.1](https://github.com/moby/buildkit/releases/tag/v0.31.1)
GitHub Action workflow link

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

updateclibot Bot added the dependencies Pull requests that update a dependency file label Aug 3, 2026
olblak enabled auto-merge (squash) August 3, 2026 15:24
olblak merged commit 36a3959 into main Aug 3, 2026
8 of 10 checks passed
olblak deleted the updatecli_main_412f4047cea2242ddd66e871814efd613c314fafd5c2e6650a991915c054aa08 branch August 3, 2026 16:04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

olblak olblak approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

Back | FazBrowse Home | New Git URL