Skip to content

🌱 Bump github.com/moby/buildkit from 0.26.3 to 0.33.0 - #5274

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/moby/buildkit-0.33.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/moby/buildkit-0.33.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/moby/buildkit from 0.26.3 to 0.33.0.

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.33.0

Welcome to the v0.33.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax
  • Tõnis Tiigi
  • Sebastiaan van Stijn
  • Matthieu MOREL
  • eliuriegas
  • Daniel Nephin
  • Dawei Wei
  • Guthrie McAfee Armstrong
  • Jiří Moravčík
  • Leo Li
  • Ravi Arnan
  • Shurong Cao
  • Spencer G. Jones
  • Vedant Madane

Notable Changes

  • Built-in Dockerfile frontend has been updated to v1.27.0 changelog
  • Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #7074
  • The maximum attestation size for exporters has been raised to 80 MiB. #7104
  • Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #7039
  • Buildctl now supports passing valueless build-args read from the environment. #7030
  • Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #7022
  • Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #6998
  • Build history can now be disabled from daemon configuration #7040
  • Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #7068
  • MaxRegistryConcurrency now also applies to remote cache requests. #7049
  • Windows containers now support RUN --mount=type=secret build secrets. #6944
  • Fix possible "no active session for" error when running concurrent builds with remote cache #7047
  • Fix possible "failed to apply diffs: snapshot does not exist" error #7035
  • Fix possible context upload errors when context directory contains foreign characters. #6989
  • Fix possible silently dropped cache link in remote cache exporter. #7053
  • Fix xz archive unpacking silently skipping when xz binary was missing in environment. #7071
  • Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #7072
  • Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #7092

Dependency Changes

  • cyphar.com/go-pathrs v0.2.1 -> v0.2.5

... (truncated)

Commits
  • dddd562 Merge pull request #7105 from crazy-max/v0.33_picks_v0.33.0-rc2
  • 3c05040 vendor: update moby/policy-helpers to dd6c5499c491
  • ae09dd0 solver: avoid mutating exec args for QEMU
  • bd1ac13 exporter: raise max attestation size to 80 MiB
  • ccfc875 dockerfile: update version to 1.27
  • eece108 Merge pull request #7080 from tonistiigi/dockerd-test-fix-v0.33
  • d3f86c1 test: fix dockerd integration coverage
  • b09f8f1 Merge pull request #6944 from rzlink/wcow-secret-mount
  • bb80b2a Merge pull request #7078 from thaJeztah/bump_grpc
  • 964cf3d vendor: google.golang.org/grpc v1.83.2
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
github.com/moby/buildkit [>= 0.31.1.a, < 0.31.2]

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.26.3 to 0.33.0.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.26.3...v0.33.0)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 1, 2026 06:47
@dependabot dependabot Bot added the go Pull requests that update Go code label Oct 1, 2026
@dependabot
dependabot Bot requested review from justaugustus and spencerschrock and removed request for a team October 1, 2026 06:47
@dependabot
dependabot Bot had a problem deploying to integration-test October 1, 2026 06:48 Failure

This branch had an error being deployed

2 failed deployments
gitlab — 969749dc Deployed Oct 1, 2026 by dependabot[bot] via gitlab-integration-trusted #5320
integration-test — 969749dc Deployed Oct 1, 2026 by dependabot[bot] via integration-trusted #12671
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

0 participants