Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025

Bumps github.com/moby/buildkit from 0.13.2 to 0.24.0.

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.24.0

Welcome to the v0.24.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi
  • CrazyMax
  • Sebastiaan van Stijn
  • Akihiro Suda
  • Andrés Delfino
  • Alberto Contreras
  • Alberto Garcia Hierro
  • Anthony Nandaa
  • Baptiste Girard-Carrabin
  • Derek McGowan
  • Justin Chadwell
  • Kohei Tokunaga
  • Michael Dwan

Notable Changes

  • Built-in Dockerfile frontend has been updated to v1.18.0
  • LLB Git operation now allows controlling if submodules should be initialized (default) or skipped. #6173
  • Max-parallelism control can now also be set with --max-parallelism daemon flag. #6105
  • Improve errors when using build arguments in COPY --from flag value. #6153
  • Debug server now supports new endpoints for inspecting the cache key database and remote cache manifests. In order to debug plaintexts of the cache keys --save-cache-debug needs to be enabled in the daemon. #6076 #6061 #6133
  • Base Alpine version has been updated to 3.22. #6048
  • Client now allows configuring exporter content store. #6045
  • Release binary artifacts now use Git commit time as timestamp. #6037
  • Fix incorrect empty checkout when accessing Git source with subdir pointing to a submodule. #6170
  • Fix allowing device entitlement for buildkitd daemon with startup flags. #6080
  • Fix possible panic from BoltDB when copying lots of files between build steps. #6159 #6136 #6165
  • Fix possible deadlocks from the error handler in the sync package. #6158
  • Fix issue with exporting cache with different compression formats for images with lots of layers. #6092 #6088
  • Fix displaying error details on unexpected response status code. #6067
  • Fix incorrect empty checkout when accessing Git source with subdir pointing to a submodule. #6170

Dependency Changes

  • github.com/containerd/containerd/v2 v2.1.3 -> v2.1.4
  • github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7
  • github.com/docker/cli v28.2.2 -> v28.3.3
  • github.com/docker/docker v28.2.2 -> v28.3.3
  • github.com/moby/profiles/seccomp v0.1.0 new
  • github.com/urfave/cli v1.22.16 -> v1.22.17

... (truncated)

Commits
  • b772c31 Merge pull request #6184 from crazy-max/v0.24_picks_0.24.0
  • 6aa63e4 dockerfile: enable gitquerystring frontend capability
  • 88fe558 Merge pull request #6182 from crazy-max/v0.24_pick_dockerfile-docs
  • 213e858 docs: use latest "labs" for --parents and --exclude
  • a59c3fe Merge pull request #6180 from crazy-max/v0.24_picks-0.24.0
  • b090508 dockerfile: fix client init in testGitQueryString
  • 7ff02fb Merge pull request #6173 from tonistiigi/git-qs-addopt
  • 0c716fd Merge pull request #6176 from tonistiigi/remove-ref-initialize
  • bb018e9 dfgitutil: don't initialize ref from checksum
  • 04dc5dd dfgitutil: allow valueless keep-git-dir and submodules options
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.13.2 to 0.24.0.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.13.2...v0.24.0)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 8, 2025
Copy link

github-actions bot commented Sep 8, 2025

🍕 Here are the new binary sizes!

Name New size (kiB) size (kiB) Delta (%)
macOS (amd) 52080 52064 +0.03
macOS (arm) 51740 51728 +0.02
linux (amd) 50516 50496 +0.04
linux (arm) 49860 49864 ❤️ -0.01
windows (amd) 47468 47456 +0.03

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 6, 2025

Superseded by #6082.

@dependabot dependabot bot closed this Oct 6, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/moby/buildkit-0.24.0 branch October 6, 2025 13:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants