Bump github.com/moby/buildkit from 0.26.3 to 0.33.0

[dependabot]

Bumps github.com/moby/buildkit from 0.26.3 to 0.33.0.

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.33.0

Welcome to the v0.33.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Matthieu MOREL
• eliuriegas
• Daniel Nephin
• Dawei Wei
• Guthrie McAfee Armstrong
• Jiří Moravčík
• Leo Li
• Ravi Arnan
• Shurong Cao
• Spencer G. Jones
• Vedant Madane

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.27.0 changelog
• Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #7074
• The maximum attestation size for exporters has been raised to 80 MiB. #7104
• Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #7039
• Buildctl now supports passing valueless build-args read from the environment. #7030
• Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #7022
• Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #6998
• Build history can now be disabled from daemon configuration #7040
• Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #7068
• MaxRegistryConcurrency now also applies to remote cache requests. #7049
• Windows containers now support RUN --mount=type=secret build secrets. #6944
• Fix possible "no active session for" error when running concurrent builds with remote cache #7047
• Fix possible "failed to apply diffs: snapshot does not exist" error #7035
• Fix possible context upload errors when context directory contains foreign characters. #6989
• Fix possible silently dropped cache link in remote cache exporter. #7053
• Fix xz archive unpacking silently skipping when xz binary was missing in environment. #7071
• Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #7072
• Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #7092

Dependency Changes

• cyphar.com/go-pathrs v0.2.1 -> v0.2.5

... (truncated)

Commits

• dddd562 Merge pull request #7105 from crazy-max/v0.33_picks_v0.33.0-rc2
• 3c05040 vendor: update moby/policy-helpers to dd6c5499c491
• ae09dd0 solver: avoid mutating exec args for QEMU
• bd1ac13 exporter: raise max attestation size to 80 MiB
• ccfc875 dockerfile: update version to 1.27
• eece108 Merge pull request #7080 from tonistiigi/dockerd-test-fix-v0.33
• d3f86c1 test: fix dockerd integration coverage
• b09f8f1 Merge pull request #6944 from rzlink/wcow-secret-mount
• bb80b2a Merge pull request #7078 from thaJeztah/bump_grpc
• 964cf3d vendor: google.golang.org/grpc v1.83.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign jdubrick for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 1fe4d993-a010-453f-bf02-e52575a59a89

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[thepetk]

bumps up golang to 1.26

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.