fix(deps): update module github.com/moby/buildkit to v0.26.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/moby/buildkit	v0.25.1 -> v0.26.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

moby/buildkit (github.com/moby/buildkit)

v0.26.0

Compare Source

buildkit 0.26.0

Welcome to the v0.26.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• Brian Goff
• Dawei Wei
• Alberto Garcia Hierro
• Damon Holden
• David Karlsson
• Justin Chadwell
• Mikhail Dmitrichenko
• bpascard

Notable Changes

• Change how file checksum is calculated when wildcards and include/exclude patterns are involved to better align with how they are calculated in the non-wildcard path. #​6238
• LLB Copy operation now allows specifying required paths to be included in the copy. #​6229
• Fixed race condition between cache and snapshot for the Git source. #​6281
• Fixed race condition in HTTP cache key digest computation that could cause duplicate requests and digest mismatch errors. #​6292
• Runc container runtime has been updated to v1.3.3. #​6331
• Source metadata requests via ResolveSourceMeta, previously available for image sources, can now be performed for Git sources. This can be used to resolve Git commit and tag checksums and also to access the raw commit and tag objects for further verification. #​6283
• Source metadata requests via ResolveSourceMeta, previously available for image sources, can now be performed for HTTP sources. This can be used to access artifact checksums, last-modified time etc. #​6285
• Git sources can now perform verification of GPG or SSH signatures on commits and tags. Enable git signature checks via source policy. #​6300 #​6344
• contentutil package now supports moving referrer objects when using CopyChain function. #​6336
• Fix fetch by commit for git source when tags change or branch names are updated. #​6259
• Fix http connection leak when resolving metadata from http source on non-2xx HTTP status codes. #​6313
• A new type of source policies has been added that supports making policy decisions on the client side via session tunnel. #​6276
• Add buildkit capability for detecting if source policy decisions can be made via session tunnel. #​6345
• Avoid intermediate type wrappers for custom fields in provenance. #​6275
• Add raw commit/tag object access when resolving git source metadata. #​6298
• Move image source resolver away from the ResolveImageConfig type to ResolveSourceMetadata. #​6330 # probably not needed for changelog
• Fix inline cache used with multiple exporters. #​6263
• Fix handling multiple inline cache exporters configured for single build. #​6272
• Fix handling of annotated Git tags. The pin of the annotated tag should be the SHA of the tag and not the commit it is pointing to. #​6251
• Fix source policy attributes validation when multiple rules use the same identifier. #​6342

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0 -> v1.18.2
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.0 -> v1.11.0
• github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 -> v1.11.2
• github.com/AzureAD/microsoft-authentication-library-for-go v1.3.2 -> v1.4.2
• github.com/Microsoft/hcsshim v0.13.0 -> v0.14.0-rc.1
• github.com/ProtonMail/go-crypto v1.3.0 new
• github.com/aws/aws-sdk-go-v2 v1.30.3 -> v1.38.1
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 -> v1.7.0
• github.com/aws/aws-sdk-go-v2/config v1.27.27 -> v1.31.3
• github.com/aws/aws-sdk-go-v2/credentials v1.17.27 -> v1.18.7
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 -> v1.18.4
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.8 -> v1.17.10
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 -> v1.4.4
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 -> v2.7.4
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 -> v1.8.3
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 -> v1.4.4
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 -> v1.13.0
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 -> v1.8.4
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 -> v1.13.4
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 -> v1.19.4
• github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 -> v1.87.1
• github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 -> v1.28.2
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 -> v1.34.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 -> v1.38.0
• github.com/aws/smithy-go v1.20.3 -> v1.22.5
• github.com/cenkalti/backoff/v5 v5.0.3 new
• github.com/cloudflare/circl v1.6.0 new
• github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0
• github.com/containerd/containerd/api v1.9.0 -> v1.10.0
• github.com/containerd/containerd/v2 v2.1.4 -> v2.2.0
• github.com/containerd/go-cni v1.1.12 -> v1.1.13
• github.com/containerd/nydus-snapshotter v0.15.2 -> v0.15.4
• github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
• github.com/containerd/stargz-snapshotter v0.16.3 -> v0.17.0
• github.com/containerd/stargz-snapshotter/estargz v0.16.3 -> v0.17.0
• github.com/containernetworking/plugins v1.7.1 -> v1.8.0
• github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
• github.com/docker/cli v28.4.0 -> v28.5.0
• github.com/fatih/color v1.18.0 new
• github.com/go-logr/logr v1.4.2 -> v1.4.3
• github.com/gofrs/flock v0.12.1 -> v0.13.0
• github.com/golang-jwt/jwt/v5 v5.2.2 -> v5.3.0
• github.com/golang/groupcache 41bb18b -> 2c02b82
• github.com/google/pprof 27863c8 -> f64d9cf
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 -> v2.27.2
• github.com/hanwen/go-fuse/v2 v2.6.3 -> v2.8.0
• github.com/hashicorp/go-retryablehttp v0.7.7 -> v0.7.8
• github.com/hiddeco/sshsig v0.2.0 new
• github.com/klauspost/compress v1.18.0 -> v1.18.1
• github.com/mattn/go-colorable v0.1.14 new
• github.com/moby/policy-helpers bcaa71c new
• github.com/moby/sys/capability v0.4.0 new
• github.com/opencontainers/runtime-tools 2e043c6 -> 0ea5ed0
• github.com/prometheus/client_golang v1.22.0 -> v1.23.2
• github.com/prometheus/client_model v0.6.1 -> v0.6.2
• github.com/prometheus/common v0.62.0 -> v0.66.1
• github.com/prometheus/procfs v0.15.1 -> v0.16.1
• github.com/secure-systems-lab/go-securesystemslib v0.6.0 -> v0.9.1
• github.com/stretchr/testify v1.10.0 -> v1.11.1
• github.com/vbatts/tar-split v0.12.1 -> v0.12.2
• go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.61.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 -> v0.61.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 -> v0.61.0
• go.opentelemetry.io/otel v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/metric v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/sdk v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/sdk/metric v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/trace v1.35.0 -> v1.38.0
• go.opentelemetry.io/proto/otlp v1.5.0 -> v1.7.1
• go.yaml.in/yaml/v2 v2.4.2 new
• golang.org/x/crypto v0.37.0 -> v0.42.0
• golang.org/x/exp 7e4ce0a -> df92998
• golang.org/x/mod v0.24.0 -> v0.29.0
• golang.org/x/net v0.39.0 -> v0.44.0
• golang.org/x/sync v0.16.0 -> v0.17.0
• golang.org/x/sys v0.33.0 -> v0.37.0
• golang.org/x/text v0.24.0 -> v0.29.0
• golang.org/x/time v0.11.0 -> v0.14.0
• google.golang.org/genproto/googleapis/api 56aae31 -> c5933d9
• google.golang.org/genproto/googleapis/rpc 56aae31 -> c5933d9
• google.golang.org/grpc v1.72.2 -> v1.76.0
• google.golang.org/protobuf v1.36.9 -> v1.36.10
• sigs.k8s.io/yaml v1.4.0 -> v1.6.0

Previous release can be found at v0.25.2

v0.25.2

Compare Source

Welcome to the v0.25.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi

Notable Changes

• Update Runc to v1.3.3 #​6332

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.25.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.0 -> 1.24.3
github.com/containerd/stargz-snapshotter/estargz	v0.16.3 -> v0.17.0
github.com/docker/cli	v28.4.0+incompatible -> v28.5.0+incompatible
github.com/fatih/color	v1.15.0 -> v1.18.0
github.com/klauspost/compress	v1.18.0 -> v1.18.1
github.com/mattn/go-colorable	v0.1.13 -> v0.1.14
github.com/mattn/go-isatty	v0.0.19 -> v0.0.20
github.com/vbatts/tar-split	v0.12.1 -> v0.12.2
golang.org/x/sys	v0.33.0 -> v0.37.0
google.golang.org/protobuf	v1.36.9 -> v1.36.10