Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 8, 2025

Bumps github.com/moby/buildkit from 0.11.4 to 0.23.2.

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.23.2

Welcome to the v0.23.2 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax
  • Tõnis Tiigi

Notable Changes

  • Fix attestation filename in local exporter. #6051
  • Fix expired cache URLs in GitHub Actions cache exporter. #6053

Dependency Changes

  • github.com/tonistiigi/go-actions-cache 388a2ec8cdf8 -> 378c5ed1ddd9

Previous release can be found at v0.23.1

v0.23.1

Welcome to the v0.23.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Derek McGowan

Notable Changes

  • Fix a possible issue where pulling images from some registries that don't handle the Range header correctly(Artifactory) would fail. #6040

Dependency Changes

  • github.com/containerd/containerd/v2 v2.1.1 -> v2.1.3

Previous release can be found at v0.23.0

v0.23.0

Welcome to the v0.23.0 release of buildkit!

... (truncated)

Commits
  • 40b2ede Merge pull request #6056 from crazy-max/v0.23_picks_0.23.2
  • 858cb7c gha cache: reload expired cache URLs
  • a8a1485 test: provenance local export
  • 090ffce local: fix attestation filename
  • c51ecee frontend: group provenance tests
  • 0a23057 Merge pull request #6039 from tonistiigi/v0.23-container-patch
  • 1d9a271 Update containerd to v2.1.3
  • cc8ff80 Merge pull request #6031 from tonistiigi/v0.23-rc2-picks
  • 2a2ea09 resolver: allow reference matches for local image lookups
  • 7fdda10 Merge pull request #6027 from crazy-max/fix-docs-provenance
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.11.4 to 0.23.2.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.11.4...v0.23.2)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 8, 2025
@dependabot dependabot bot requested review from rchincha, smoser and hallyn as code owners July 8, 2025 00:10
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 8, 2025
@hallyn hallyn merged commit d6c7079 into main Jul 9, 2025
3 of 12 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/moby/buildkit-0.23.2 branch July 9, 2025 01:06
hallyn added a commit to hallyn/stacker-1 that referenced this pull request Jul 24, 2025
hallyn added a commit that referenced this pull request Jul 26, 2025
* Revert "build(deps): Bump the go_modules group across 1 directory with 5 updates (#701)"

This reverts commit b892200.

* Revert "build(deps): Bump github.com/containers/image/v5 from 5.24.2 to 5.35.0 (#691)"

This reverts commit 049224b.

* Revert "build(deps): Bump github.com/cheggaaa/pb/v3 from 3.1.2 to 3.1.7 (#700)"

This reverts commit 335b3cd.

* Revert "build(deps): Bump benjlevesque/short-sha from 2.1 to 3.0 (#683)"

This reverts commit 82da84f.

* Revert "build(deps): Bump github.com/moby/buildkit from 0.11.4 to 0.23.2 (#699)"

This reverts commit d6c7079.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant