deps(go): bump module github.com/moby/buildkit to v0.33.0 by updateclibot[bot] · Pull Request #10476 · updatecli/updatecli · GitHub
Skip to content

deps(go): bump module github.com/moby/buildkit to v0.33.0 - #10476

Merged
olblak merged 2 commits into
mainfrom
updatecli_main_412f4047cea2242ddd66e871814efd613c314fafd5c2e6650a991915c054aa08
Sep 12, 2026
Merged

deps(go): bump module github.com/moby/buildkit to v0.33.0#10476
olblak merged 2 commits into
mainfrom
updatecli_main_412f4047cea2242ddd66e871814efd613c314fafd5c2e6650a991915c054aa08

Conversation

@updateclibot

@updateclibot updateclibot Bot commented Sep 12, 2026

Copy link
Copy Markdown
Contributor

deps(go): bump module github.com/moby/buildkit

clean: go mod tidy

ran shell command "go mod tidy"

deps(go): bump module github.com/moby/buildkit to v0.33.0

go.mod updated Module path "github.com/moby/buildkit" version from "v0.32.2" to "v0.33.0"

v0.33.0 
Welcome to the v0.33.0 release of buildkit!



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* CrazyMax
* Tõnis Tiigi
* Sebastiaan van Stijn
* Matthieu MOREL
* eliuriegas
* Daniel Nephin
* Dawei Wei
* Guthrie McAfee Armstrong
* Jiří Moravčík
* Leo Li
* Ravi Arnan
* Shurong Cao
* Spencer G. Jones
* Vedant Madane

### Notable Changes

- Built-in Dockerfile frontend has been updated to v1.27.0 [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.27.0)
- Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #7074
- The maximum attestation size for exporters has been raised to 80 MiB. #7104
- Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #7039
- Buildctl now supports passing valueless build-args read from the environment. #7030
- Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #7022
- Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #6998
- Build history can now be disabled from daemon configuration #7040
- Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #7068
- MaxRegistryConcurrency now also applies to remote cache requests. #7049
- Windows containers now support `RUN --mount=type=secret` build secrets. #6944
- Fix possible "no active session for" error when running concurrent builds with remote cache #7047
- Fix possible "failed to apply diffs: snapshot does not exist" error #7035
- Fix possible context upload errors when context directory contains foreign characters. #6989
- Fix possible silently dropped cache link in remote cache exporter. #7053
- Fix xz archive unpacking silently skipping when xz binary was missing in environment. #7071
- Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #7072
- Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #7092


### Dependency Changes

* **cyphar.com/go-pathrs**                                                          v0.2.1 -> v0.2.5
* **github.com/Microsoft/hcsshim**                                                  v0.15.0-rc.1 -> v0.15.0-rc.4
* **github.com/aws/aws-sdk-go-v2**                                                  v1.43.0 -> v1.43.8
* **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream**                         v1.7.14 -> v1.7.18
* **github.com/aws/aws-sdk-go-v2/config**                                           v1.32.31 -> v1.32.39
* **github.com/aws/aws-sdk-go-v2/credentials**                                      v1.19.30 -> v1.19.38
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                                 v1.18.31 -> v1.18.39
* **github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager**                       v0.3.5 -> v0.3.10
* **github.com/aws/aws-sdk-go-v2/internal/configsources**                           v1.4.31 -> v1.4.39
* **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**                            v2.7.31 -> v2.7.39
* **github.com/aws/aws-sdk-go-v2/internal/v4a**                                     v1.4.32 -> v1.4.40
* **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding**                 v1.13.13 -> v1.13.18
* **github.com/aws/aws-sdk-go-v2/service/internal/checksum**                        v1.9.24 -> v1.9.28
* **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**                   v1.13.31 -> v1.13.39
* **github.com/aws/aws-sdk-go-v2/service/internal/s3shared**                        v1.19.32 -> v1.19.36
* **github.com/aws/aws-sdk-go-v2/service/s3**                                       v1.106.0 -> v1.106.5
* **github.com/aws/aws-sdk-go-v2/service/signin**                                   v1.5.0 -> v1.5.8
* **github.com/aws/aws-sdk-go-v2/service/sso**                                      v1.33.0 -> v1.33.8
* **github.com/aws/aws-sdk-go-v2/service/ssooidc**                                  v1.38.0 -> v1.38.8
* **github.com/aws/aws-sdk-go-v2/service/sts**                                      v1.45.0 -> v1.45.8
* **github.com/aws/smithy-go**                                                      v1.27.4 -> v1.27.10
* **github.com/containerd/containerd/v2**                                           v2.3.3 -> v2.3.4
* **github.com/containerd/go-runc**                                                 v1.1.0 -> v1.2.1
* **github.com/containerd/platforms**                                               v1.0.0-rc.4 -> v1.0.0-rc.5
* **github.com/cyphar/filepath-securejoin**                                         v0.6.0 -> v0.6.1
* **github.com/docker/cli**                                                         v29.6.2 -> v29.7.2
* **github.com/felixge/httpsnoop**                                                  v1.0.4 -> v1.1.0
* **github.com/go-logr/logr**                                                       v1.4.3 -> v1.4.4
* **github.com/klauspost/compress**                                                 v1.19.1 -> v1.19.2
* **github.com/moby/policy-helpers**                                                856be88baec4 -> dd6c5499c491
* **github.com/moby/sys/userns**                                                    v0.1.0 -> v0.2.0
* **github.com/pelletier/go-toml/v2**                                               v2.3.1 -> v2.4.3
* **github.com/prometheus/client_golang**                                           v1.23.2 -> v1.24.1
* **github.com/prometheus/common**                                                  v0.67.5 -> v0.70.1
* **github.com/prometheus/procfs**                                                  v0.20.1 -> v0.21.1
* **github.com/sirupsen/logrus**                                                    v1.9.4 -> v1.10.1
* **github.com/stretchr/testify**                                                   v1.11.1 -> v1.12.1
* **github.com/tonistiigi/fsutil**                                                  6d9dc2ebad62 -> 83cac42c1c52
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**   v0.69.0 -> v0.70.0
* **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace**  v0.69.0 -> v0.70.0
* **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**                 v0.69.0 -> v0.70.0
* **go.opentelemetry.io/otel**                                                      v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc**             v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp**             v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                             v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**               v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**               v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/prometheus**                                 v0.66.0 -> v0.67.0
* **go.opentelemetry.io/otel/metric**                                               v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/sdk**                                                  v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/sdk/metric**                                           v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/trace**                                                v1.44.0 -> v1.45.0
* **go.opentelemetry.io/proto/otlp**                                                v1.10.0 -> v1.11.0
* **go.yaml.in/yaml/v3**                                                            v3.0.4 -> v3.0.5
* **golang.org/x/crypto**                                                           v0.54.0 -> v0.55.0
* **golang.org/x/mod**                                                              v0.38.0 -> v0.40.0
* **golang.org/x/net**                                                              v0.57.0 -> v0.58.0
* **golang.org/x/text**                                                             v0.40.0 -> v0.41.0
* **google.golang.org/genproto/googleapis/api**                                     3dc84a4a5aaa -> 6ac0973c030d
* **google.golang.org/genproto/googleapis/rpc**                                     3dc84a4a5aaa -> 6ac0973c030d
* **google.golang.org/grpc**                                                        v1.82.1 -> v1.83.2
* **google.golang.org/grpc/cmd/protoc-gen-go-grpc**                                 v1.6.1 -> v1.6.2
* **google.golang.org/protobuf**                                                    f2248ac996af -> v1.36.12

Previous release can be found at [v0.32.2](https://github.com/moby/buildkit/releases/tag/v0.32.2)
v0.33.0-rc2 
Welcome to the v0.33.0-rc2 release of buildkit!
*This is a pre-release of buildkit*



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* Tõnis Tiigi
* CrazyMax

### Notable Changes

- The maximum attestation size for exporters has been raised to 80 MiB. #7104
- Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #7092

### Dependency Changes

* **github.com/moby/policy-helpers**  856be88baec4 -> dd6c5499c491

Previous release can be found at [v0.33.0-rc1](https://github.com/moby/buildkit/releases/tag/v0.33.0-rc1)
v0.33.0-rc1 
buildkit 0.33.0-rc1

Welcome to the v0.33.0-rc1 release of buildkit!  
*This is a pre-release of buildkit*



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* CrazyMax
* Tõnis Tiigi
* Sebastiaan van Stijn
* Matthieu MOREL
* eliuriegas
* Daniel Nephin
* Dawei Wei
* Guthrie McAfee Armstrong
* Jiří Moravčík
* Leo Li
* Ravi Arnan
* Shurong Cao
* Spencer G. Jones
* Vedant Madane

### Notable Changes

- Built-in Dockerfile frontend has been updated to v1.27.0-rc1 [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.27.0-rc1)
- Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #7074
- Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #7039
- Buildctl now supports passing valueless build-args read from the environment. #7030
- Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #7022
- Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #6998
- Build history can now be disabled from daemon configuration #7040
- Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #7068
- MaxRegistryConcurrency now also applies to remote cache requests. #7049
- Windows containers now support `RUN --mount=type=secret` build secrets. #6944
- Fix possible "no active session for" error when running concurrent builds with remote cache #7047
- Fix possible "failed to apply diffs: snapshot does not exist" error #7035
- Fix possible context upload errors when context directory contains foreign characters. #6989
- Fix possible silently dropped cache link in remote cache exporter. #7053
- Fix xz archive unpacking silently skipping when xz binary was missing in environment. #7071
- Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #7072


### Dependency Changes

* **cyphar.com/go-pathrs**                                                          v0.2.1 -> v0.2.5
* **github.com/Microsoft/hcsshim**                                                  v0.15.0-rc.1 -> v0.15.0-rc.4
* **github.com/aws/aws-sdk-go-v2**                                                  v1.43.0 -> v1.43.8
* **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream**                         v1.7.14 -> v1.7.18
* **github.com/aws/aws-sdk-go-v2/config**                                           v1.32.31 -> v1.32.39
* **github.com/aws/aws-sdk-go-v2/credentials**                                      v1.19.30 -> v1.19.38
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                                 v1.18.31 -> v1.18.39
* **github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager**                       v0.3.5 -> v0.3.10
* **github.com/aws/aws-sdk-go-v2/internal/configsources**                           v1.4.31 -> v1.4.39
* **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**                            v2.7.31 -> v2.7.39
* **github.com/aws/aws-sdk-go-v2/internal/v4a**                                     v1.4.32 -> v1.4.40
* **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding**                 v1.13.13 -> v1.13.18
* **github.com/aws/aws-sdk-go-v2/service/internal/checksum**                        v1.9.24 -> v1.9.28
* **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**                   v1.13.31 -> v1.13.39
* **github.com/aws/aws-sdk-go-v2/service/internal/s3shared**                        v1.19.32 -> v1.19.36
* **github.com/aws/aws-sdk-go-v2/service/s3**                                       v1.106.0 -> v1.106.5
* **github.com/aws/aws-sdk-go-v2/service/signin**                                   v1.5.0 -> v1.5.8
* **github.com/aws/aws-sdk-go-v2/service/sso**                                      v1.33.0 -> v1.33.8
* **github.com/aws/aws-sdk-go-v2/service/ssooidc**                                  v1.38.0 -> v1.38.8
* **github.com/aws/aws-sdk-go-v2/service/sts**                                      v1.45.0 -> v1.45.8
* **github.com/aws/smithy-go**                                                      v1.27.4 -> v1.27.10
* **github.com/containerd/containerd/v2**                                           v2.3.3 -> v2.3.4
* **github.com/containerd/go-runc**                                                 v1.1.0 -> v1.2.1
* **github.com/containerd/platforms**                                               v1.0.0-rc.4 -> v1.0.0-rc.5
* **github.com/cyphar/filepath-securejoin**                                         v0.6.0 -> v0.6.1
* **github.com/docker/cli**                                                         v29.6.2 -> v29.7.2
* **github.com/felixge/httpsnoop**                                                  v1.0.4 -> v1.1.0
* **github.com/go-logr/logr**                                                       v1.4.3 -> v1.4.4
* **github.com/klauspost/compress**                                                 v1.19.1 -> v1.19.2
* **github.com/moby/sys/userns**                                                    v0.1.0 -> v0.2.0
* **github.com/pelletier/go-toml/v2**                                               v2.3.1 -> v2.4.3
* **github.com/prometheus/client_golang**                                           v1.23.2 -> v1.24.1
* **github.com/prometheus/common**                                                  v0.67.5 -> v0.70.1
* **github.com/prometheus/procfs**                                                  v0.20.1 -> v0.21.1
* **github.com/sirupsen/logrus**                                                    v1.9.4 -> v1.10.1
* **github.com/stretchr/testify**                                                   v1.11.1 -> v1.12.1
* **github.com/tonistiigi/fsutil**                                                  6d9dc2ebad62 -> 83cac42c1c52
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**   v0.69.0 -> v0.70.0
* **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace**  v0.69.0 -> v0.70.0
* **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**                 v0.69.0 -> v0.70.0
* **go.opentelemetry.io/otel**                                                      v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc**             v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp**             v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                             v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**               v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**               v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/exporters/prometheus**                                 v0.66.0 -> v0.67.0
* **go.opentelemetry.io/otel/metric**                                               v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/sdk**                                                  v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/sdk/metric**                                           v1.44.0 -> v1.45.0
* **go.opentelemetry.io/otel/trace**                                                v1.44.0 -> v1.45.0
* **go.opentelemetry.io/proto/otlp**                                                v1.10.0 -> v1.11.0
* **go.yaml.in/yaml/v3**                                                            v3.0.4 -> v3.0.5
* **google.golang.org/genproto/googleapis/api**                                     3dc84a4a5aaa -> 6ac0973c030d
* **google.golang.org/genproto/googleapis/rpc**                                     3dc84a4a5aaa -> 6ac0973c030d
* **google.golang.org/grpc**                                                        v1.82.1 -> v1.83.2
* **google.golang.org/grpc/cmd/protoc-gen-go-grpc**                                 v1.6.1 -> v1.6.2
* **google.golang.org/protobuf**                                                    f2248ac996af -> v1.36.12

Previous release can be found at [v0.32.2](https://github.com/moby/buildkit/releases/tag/v0.32.2)
v0.32.2 
Welcome to the v0.32.2 release of buildkit!



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* CrazyMax

### Notable Changes

- Revert the v0.32.1 OCI artifact attestation push-order workaround, restoring BuildKit's spec-aligned behavior of allowing referrers to be pushed before their subject manifests. #7016

### Dependency Changes

This release has no dependency changes

Previous release can be found at [v0.32.1](https://github.com/moby/buildkit/releases/tag/v0.32.1)
GitHub Action workflow link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

@updateclibot
chore: deps(go): bump module github.com/moby/buildkit to v0.33.0
7dfb971 
Made with ❤️️ by updatecli
@updateclibot
chore: clean: go mod tidy
10fca9b 
Made with ❤️️ by updatecli
@coderabbitai

coderabbitai Bot commented Sep 12, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 21ea38bc-aa49-4a1c-bb6e-c4321d223a4e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@updateclibot updateclibot Bot added the dependencies Pull requests that update a dependency file label Sep 12, 2026
@mergify

mergify Bot commented Sep 12, 2026

Copy link
Copy Markdown

@olblak
olblak merged commit 2c905b7 into main Sep 12, 2026
9 checks passed
@olblak
olblak deleted the updatecli_main_412f4047cea2242ddd66e871814efd613c314fafd5c2e6650a991915c054aa08 branch September 12, 2026 19:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@olblak olblak olblak approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@olblak