Skip to content

deps(go): bump module github.com/moby/buildkit to v0.32.0 - #9780

Merged
olblak merged 2 commits into
mainfrom
updatecli_main_412f4047cea2242ddd66e871814efd613c314fafd5c2e6650a991915c054aa08
Aug 3, 2026
Merged

deps(go): bump module github.com/moby/buildkit to v0.32.0#9780
olblak merged 2 commits into
mainfrom
updatecli_main_412f4047cea2242ddd66e871814efd613c314fafd5c2e6650a991915c054aa08

Conversation

@updateclibot

@updateclibot updateclibot Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

deps(go): bump module github.com/moby/buildkit

clean: go mod tidy

ran shell command "go mod tidy"

deps(go): bump module github.com/moby/buildkit to v0.32.0

go.mod updated Module path "github.com/moby/buildkit" version from "v0.31.2" to "v0.32.0"

v0.32.0 
Welcome to the v0.32.0 release of buildkit!



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* Tõnis Tiigi
* CrazyMax
* Sebastiaan van Stijn
* Akihiro Suda
* Dawei Wei
* Felix de Souza
* Alberto Garcia Hierro
* Devendra Kushwah
* Giles Cope
* Kunalbehbud
* MohammadHasan Akbari
* Natnael Gebremariam
* Pierre Fenoll
* Simon Aguilera
* s3onghyun

### Notable Changes

- Built-in Dockerfile frontend has been updated to v1.26.0. [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.26.0)
- Attestations now default to OCI artifact descriptors, use `oci-artifacts=false` if your registry does not support OCI artifacts. #6914 
- Build steps can now opt out of default OpenTelemetry tracing or define custom tracing configuration. #6958
- Bolt database performance has been improved. #6943
- Included Runc container runtime has been updated to v1.4.3. #6853
- All remote cache backends now use OCI mediatypes for record descriptors. #6913
- Source policy identifiers are now normalized before sending them to policy evaluation. #6909
- SBOM scanner support for Windows has been added. #6941
- Session exporters now support an optional finalization callback after exports complete, allowing providers to run completion logic while gateway references are still available. #6978
- Lock contention in the LLB solver has been reduced. #6917
- Improve SSH support when using non-standard ports. #6895 
- Improve validation of reading contents of invalid files via API. #6903
- Deprecated OTEL fallback variables `OTEL_TRACE_PARENT`, `OTEL_TRACE_STATE` are no longer supported. Use `TRACEPARENT` and `TRACESTATE` instead. #6874
- Fix possible cache miss issue on parallel builds with shared parts. #6955
- Fix chunked encoding support for S3-compatible remote cache backends. #6970
- Fix regression on handling `OTEL_IGNORE_ERROR` environment variable. #6966

### Dependency Changes

* **github.com/Microsoft/go-winio**                                  v0.6.2 -> ad3df93bed29
* **github.com/Microsoft/hcsshim**                                   v0.14.1 -> v0.15.0-rc.1
* **github.com/ProtonMail/go-crypto**                                v1.3.0 -> v1.4.1
* **github.com/aws/aws-sdk-go-v2**                                   v1.42.0 -> v1.43.0
* **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream**          v1.7.13 -> v1.7.14
* **github.com/aws/aws-sdk-go-v2/config**                            v1.32.24 -> v1.32.31
* **github.com/aws/aws-sdk-go-v2/credentials**                       v1.19.23 -> v1.19.30
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                  v1.18.29 -> v1.18.31
* **github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager**        v0.2.9 -> v0.3.5
* **github.com/aws/aws-sdk-go-v2/internal/configsources**            v1.4.29 -> v1.4.31
* **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**             v2.7.29 -> v2.7.31
* **github.com/aws/aws-sdk-go-v2/internal/v4a**                      v1.4.30 -> v1.4.32
* **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding**  v1.13.12 -> v1.13.13
* **github.com/aws/aws-sdk-go-v2/service/internal/checksum**         v1.9.22 -> v1.9.24
* **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**    v1.13.29 -> v1.13.31
* **github.com/aws/aws-sdk-go-v2/service/internal/s3shared**         v1.19.29 -> v1.19.32
* **github.com/aws/aws-sdk-go-v2/service/s3**                        v1.103.3 -> v1.106.0
* **github.com/aws/aws-sdk-go-v2/service/signin**                    v1.1.5 -> v1.5.0
* **github.com/aws/aws-sdk-go-v2/service/sso**                       v1.31.3 -> v1.33.0
* **github.com/aws/aws-sdk-go-v2/service/ssooidc**                   v1.36.6 -> v1.38.0
* **github.com/aws/aws-sdk-go-v2/service/sts**                       v1.43.3 -> v1.45.0
* **github.com/aws/smithy-go**                                       v1.27.2 -> v1.27.4
* **github.com/containerd/containerd/api**                           v1.10.0 -> v1.11.1
* **github.com/containerd/containerd/v2**                            v2.2.4 -> v2.3.3
* **github.com/containerd/plugin**                                   v1.0.0 -> v1.1.0
* **github.com/containerd/ttrpc**                                    v1.2.8 -> v1.2.9
* **github.com/docker/cli**                                          v29.5.3 -> v29.6.2
* **github.com/go-openapi/errors**                                   v0.22.7 -> v0.22.8
* **github.com/go-openapi/loads**                                    v0.23.3 -> v0.24.0
* **github.com/go-openapi/runtime**                                  v0.32.3 -> v0.32.4
* **github.com/go-openapi/spec**                                     v0.22.5 -> v0.22.6
* **github.com/go-openapi/strfmt**                                   v0.26.3 -> v0.26.4
* **github.com/go-openapi/swag**                                     v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/cmdutils**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/conv**                                v0.26.0 -> v0.27.0
* **github.com/go-openapi/swag/fileutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/jsonname**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/jsonutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/loading**                             v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/mangling**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/netutils**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/stringutils**                         v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/typeutils**                           v0.26.0 -> v0.27.0
* **github.com/go-openapi/swag/yamlutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/validate**                                 v0.25.3 -> v0.26.0
* **github.com/gohugoio/hashstructure**                              v0.6.0 **_new_**
* **github.com/google/go-containerregistry**                         v0.21.6 -> v0.21.7
* **github.com/klauspost/compress**                                  v1.18.6 -> v1.19.1
* **github.com/moby/go-archive**                                     v0.2.0 -> v0.2.1
* **github.com/moby/policy-helpers**                                 d5411a945cfc -> 856be88baec4
* **github.com/moby/sys/mount**                                      fc52b7222d0b -> v0.3.5
* **github.com/moby/sys/user**                                       v0.4.0 -> v0.4.1
* **github.com/sigstore/rekor**                                      v1.5.2 -> v1.5.3
* **github.com/sigstore/rekor-tiles/v2**                             5d098a2b6443 -> v2.3.0
* **github.com/sigstore/sigstore-go**                                v1.2.1 -> v1.2.2
* **github.com/tonistiigi/fsutil**                                   30cd4fc5d911 -> 6d9dc2ebad62
* **go.etcd.io/bbolt**                                               v1.4.3 -> v1.5.0
* **go.opentelemetry.io/otel/exporters/prometheus**                  v0.65.0 -> v0.66.0
* **golang.org/x/crypto**                                            v0.52.0 -> v0.54.0
* **golang.org/x/mod**                                               v0.36.0 -> v0.38.0
* **golang.org/x/net**                                               v0.55.0 -> v0.57.0
* **golang.org/x/sync**                                              v0.20.0 -> v0.22.0
* **golang.org/x/sys**                                               v0.45.0 -> v0.47.0
* **golang.org/x/term**                                              v0.43.0 -> v0.45.0
* **golang.org/x/text**                                              v0.37.0 -> v0.40.0
* **google.golang.org/grpc**                                         v1.81.1 -> v1.82.1
* **google.golang.org/protobuf**                                     v1.36.11 -> f2248ac996af

Previous release can be found at [v0.31.2](https://github.com/moby/buildkit/releases/tag/v0.31.2)
v0.32.0-rc2 
Welcome to the v0.32.0-rc2 release of buildkit!  
*This is a pre-release of buildkit*



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* CrazyMax
* Alberto Garcia Hierro
* Sebastiaan van Stijn
* Tõnis Tiigi

### Notable Changes

- Built-in Dockerfile frontend has been updated to v1.26.0-rc2 [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.26.0-rc2)
- Session exporters now support an optional finalization callback after exports complete, allowing providers to run completion logic while gateway references are still available. #6978

### Dependency Changes

* **github.com/moby/go-archive**  v0.2.0 -> v0.2.1

Previous release can be found at [v0.32.0-rc1](https://github.com/moby/buildkit/releases/tag/v0.32.0-rc1)
v0.32.0-rc1 
buildkit 0.32.0-rc1

Welcome to the v0.32.0-rc1 release of buildkit!  
*This is a pre-release of buildkit*



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* Tõnis Tiigi
* CrazyMax
* Sebastiaan van Stijn
* Akihiro Suda
* Dawei Wei
* Felix de Souza
* Devendra Kushwah
* Giles Cope
* Kunalbehbud
* MohammadHasan Akbari
* Natnael Gebremariam
* Pierre Fenoll
* Simon Aguilera
* s3onghyun

### Notable Changes

- Built-in Dockerfile frontend has been updated to v1.26.0-rc1 [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.26.0-rc1)
- Attestations now default to OCI artifact descriptors, use `oci-artifacts=false` if your registry does not support OCI artifacts. #6914 
- Build steps can now opt out of default OpenTelemetry tracing or define custom tracing configuration #6958
- Bolt database performance has been improved #6943
- Included Runc container runtime has been updated to v1.4.3 #6853
- All remote cache backends now use OCI mediatypes for record descriptors #6913
- Source policy identifiers are now normalized before sending them to policy evaluation #6909
- SBOM scanner support for Windows has been added #6941
- Lock contention in the LLB solver has been reduced #6917
- Improve SSH support when using non-standard ports #6895 
- Improve validation of reading contents of invalid files via API #6903
- Deprecated OTEL fallback variables `OTEL_TRACE_PARENT`, `OTEL_TRACE_STATE` are no longer supported. Use `TRACEPARENT` and `TRACESTATE` instead. #6874
- Fix possible cache miss issue on parallel builds with shared parts #6955
- Fix chunked encoding support for S3-compatible remote cache backends #6970
- Fix regression on handling `OTEL_IGNORE_ERROR` environment variable #6966


### Dependency Changes

* **github.com/Microsoft/go-winio**                                  v0.6.2 -> ad3df93bed29
* **github.com/Microsoft/hcsshim**                                   v0.14.1 -> v0.15.0-rc.1
* **github.com/ProtonMail/go-crypto**                                v1.3.0 -> v1.4.1
* **github.com/aws/aws-sdk-go-v2**                                   v1.42.0 -> v1.43.0
* **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream**          v1.7.13 -> v1.7.14
* **github.com/aws/aws-sdk-go-v2/config**                            v1.32.24 -> v1.32.31
* **github.com/aws/aws-sdk-go-v2/credentials**                       v1.19.23 -> v1.19.30
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                  v1.18.29 -> v1.18.31
* **github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager**        v0.2.9 -> v0.3.5
* **github.com/aws/aws-sdk-go-v2/internal/configsources**            v1.4.29 -> v1.4.31
* **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**             v2.7.29 -> v2.7.31
* **github.com/aws/aws-sdk-go-v2/internal/v4a**                      v1.4.30 -> v1.4.32
* **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding**  v1.13.12 -> v1.13.13
* **github.com/aws/aws-sdk-go-v2/service/internal/checksum**         v1.9.22 -> v1.9.24
* **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**    v1.13.29 -> v1.13.31
* **github.com/aws/aws-sdk-go-v2/service/internal/s3shared**         v1.19.29 -> v1.19.32
* **github.com/aws/aws-sdk-go-v2/service/s3**                        v1.103.3 -> v1.106.0
* **github.com/aws/aws-sdk-go-v2/service/signin**                    v1.1.5 -> v1.5.0
* **github.com/aws/aws-sdk-go-v2/service/sso**                       v1.31.3 -> v1.33.0
* **github.com/aws/aws-sdk-go-v2/service/ssooidc**                   v1.36.6 -> v1.38.0
* **github.com/aws/aws-sdk-go-v2/service/sts**                       v1.43.3 -> v1.45.0
* **github.com/aws/smithy-go**                                       v1.27.2 -> v1.27.4
* **github.com/containerd/containerd/api**                           v1.10.0 -> v1.11.1
* **github.com/containerd/containerd/v2**                            v2.2.4 -> v2.3.3
* **github.com/containerd/plugin**                                   v1.0.0 -> v1.1.0
* **github.com/containerd/ttrpc**                                    v1.2.8 -> v1.2.9
* **github.com/docker/cli**                                          v29.5.3 -> v29.6.2
* **github.com/go-openapi/errors**                                   v0.22.7 -> v0.22.8
* **github.com/go-openapi/loads**                                    v0.23.3 -> v0.24.0
* **github.com/go-openapi/runtime**                                  v0.32.3 -> v0.32.4
* **github.com/go-openapi/spec**                                     v0.22.5 -> v0.22.6
* **github.com/go-openapi/strfmt**                                   v0.26.3 -> v0.26.4
* **github.com/go-openapi/swag**                                     v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/cmdutils**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/conv**                                v0.26.0 -> v0.27.0
* **github.com/go-openapi/swag/fileutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/jsonname**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/jsonutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/loading**                             v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/mangling**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/netutils**                            v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/stringutils**                         v0.26.0 -> v0.26.1
* **github.com/go-openapi/swag/typeutils**                           v0.26.0 -> v0.27.0
* **github.com/go-openapi/swag/yamlutils**                           v0.26.0 -> v0.26.1
* **github.com/go-openapi/validate**                                 v0.25.3 -> v0.26.0
* **github.com/gohugoio/hashstructure**                              v0.6.0 **_new_**
* **github.com/google/go-containerregistry**                         v0.21.6 -> v0.21.7
* **github.com/klauspost/compress**                                  v1.18.6 -> v1.19.1
* **github.com/moby/policy-helpers**                                 d5411a945cfc -> 856be88baec4
* **github.com/moby/sys/mount**                                      fc52b7222d0b -> v0.3.5
* **github.com/moby/sys/user**                                       v0.4.0 -> v0.4.1
* **github.com/sigstore/rekor**                                      v1.5.2 -> v1.5.3
* **github.com/sigstore/rekor-tiles/v2**                             5d098a2b6443 -> v2.3.0
* **github.com/sigstore/sigstore-go**                                v1.2.1 -> v1.2.2
* **github.com/tonistiigi/fsutil**                                   30cd4fc5d911 -> 6d9dc2ebad62
* **go.etcd.io/bbolt**                                               v1.4.3 -> v1.5.0
* **go.opentelemetry.io/otel/exporters/prometheus**                  v0.65.0 -> v0.66.0
* **google.golang.org/grpc**                                         v1.81.1 -> v1.82.1
* **google.golang.org/protobuf**                                     v1.36.11 -> f2248ac996af

Previous release can be found at [v0.31.2](https://github.com/moby/buildkit/releases/tag/v0.31.2)
v0.31.2 
Welcome to the v0.31.2 release of buildkit!

This is a security patch release with four moderate and one low severity security fixes.

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* Tõnis Tiigi
* CrazyMax
* Dawei Wei

### Notable Changes

- Git source checkout from a bundle file could lead to command injection. https://github.com/moby/buildkit/security/advisories/GHSA-hw3h-2gp9-cxpv
- Possible panic when incorrect parameters sent from frontend. https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6
- LLB file operation can be tricked to remove `/tmp` directory contents. https://github.com/moby/buildkit/security/advisories/GHSA-32pv-7hq5-qhwq
- Malicious client can bypass destination directory validation on local sources upload. https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976
- WCOW cache mount source selector resolves NTFS junctions outside of cache root. https://github.com/moby/buildkit/security/advisories/GHSA-388v-wmr2-g2v2
- Fix possible buildctl failures after successful builds over slow connhelper transports. #6940
- Fix possible daemon crash during concurrent builds. #6916

### Dependency Changes

* **github.com/tonistiigi/fsutil**  0257b3308df4 -> 30cd4fc5d911

Previous release can be found at [v0.31.1](https://github.com/moby/buildkit/releases/tag/v0.31.1)
GitHub Action workflow link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

updateclibot Bot added 2 commits August 3, 2026 06:41
@updateclibot
chore: deps(go): bump module github.com/moby/buildkit to v0.32.0
30f3bae 
Made with ❤️️ by updatecli
@updateclibot
chore: clean: go mod tidy
7057d37 
Made with ❤️️ by updatecli
@updateclibot updateclibot Bot added the dependencies Pull requests that update a dependency file label Aug 3, 2026
@olblak
olblak enabled auto-merge (squash) August 3, 2026 15:24
@olblak
olblak merged commit 36a3959 into main Aug 3, 2026
8 of 10 checks passed
@olblak
olblak deleted the updatecli_main_412f4047cea2242ddd66e871814efd613c314fafd5c2e6650a991915c054aa08 branch August 3, 2026 16:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@olblak olblak olblak approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@olblak