fix(deps): update module github.com/moby/buildkit to v0.29.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/moby/buildkit	v0.28.1 → v0.29.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

moby/buildkit (github.com/moby/buildkit)

v0.29.0

Compare Source

Welcome to the v0.29.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• David Karlsson
• Akihiro Suda
• Sebastiaan van Stijn
• Brian Ristuccia
• Jonathan A. Sternberg
• Mateusz Gozdek
• Natnael Gebremariam

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.23.0 changelog
• Git sources can now initialize all files from a Git checkout with commit time in the LLB API for better reproducibility. See Dockerfile changelog for how to enable this in the Dockerfile frontend #​6600
• Various file access operations in Git and HTTP sources have been hardened for improved security #​6613
• Frontends can now report updated SOURCE_DATE_EPOCH with result metadata that can be used by exporters #​6601
• Fix possible panic when listing build history after recent deletions #​6614
• Fix possible issue where builds from Git repositories could start to fail after submodule rename #​6563
• Fix possible process lifecycle event ordering issue in interactive container API that could cause deadlocks in the client #​6531
• Fix regression where build progress skipped the message about layers being pushed to the registry #​6587
• Fix possible cgroup initialization failure in BuildKit container image entrypoint on some environments #​6585
• Fix issue with resolving symlinks via file access methods of the Gateway API #​6559
• Fix possible "parent snapshot does not exist" error when exporting images in parallel #​6558
• Fix possible panic from zstd compression #​6599
• Fix issue where cache imports from an uninitialized local cache tag could fail the build #​6554
• Included CNI plugins have been updated to v1.9.1 #​6583
• Included QEMU emulator support has been updated to v10.2.1 #​6580
• Runc container runtime has been updated to v1.3.5 #​6625

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.41.1 -> v1.41.4
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4 -> v1.7.5
• github.com/aws/aws-sdk-go-v2/config v1.32.7 -> v1.32.12
• github.com/aws/aws-sdk-go-v2/credentials v1.19.7 -> v1.19.12
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.17 -> v1.18.20
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.17 -> v1.4.20
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.17 -> v2.7.20
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 -> v1.8.6
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 -> v1.13.7
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.17 -> v1.13.20
• github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 -> v1.0.8
• github.com/aws/aws-sdk-go-v2/service/sso v1.30.9 -> v1.30.13
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.13 -> v1.35.17
• github.com/aws/aws-sdk-go-v2/service/sts v1.41.6 -> v1.41.9
• github.com/aws/smithy-go v1.24.0 -> v1.24.2
• github.com/containerd/cgroups/v3 v3.1.2 -> v3.1.3
• github.com/containerd/containerd/v2 v2.2.1 -> v2.2.2
• github.com/containerd/nydus-snapshotter v0.15.11 -> v0.15.13
• github.com/containerd/ttrpc v1.2.7 -> v1.2.8
• github.com/containernetworking/plugins v1.9.0 -> v1.9.1
• github.com/docker/cli v29.2.1 -> v29.3.1
• github.com/go-openapi/analysis v0.24.1 -> v0.24.3
• github.com/go-openapi/errors v0.22.6 -> v0.22.7
• github.com/go-openapi/jsonpointer v0.22.4 -> v0.22.5
• github.com/go-openapi/jsonreference v0.21.4 -> v0.21.5
• github.com/go-openapi/loads v0.23.2 -> v0.23.3
• github.com/go-openapi/spec v0.22.3 -> v0.22.4
• github.com/go-openapi/strfmt v0.25.0 -> v0.26.1
• github.com/go-openapi/swag/conv v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/fileutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/jsonname v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/jsonutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/loading v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/mangling v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/stringutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/typeutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/yamlutils v0.25.4 -> v0.25.5
• github.com/go-openapi/validate v0.25.1 -> v0.25.2
• github.com/go-viper/mapstructure/v2 v2.4.0 -> v2.5.0
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 -> v2.27.7
• github.com/klauspost/compress v1.18.4 -> v1.18.5
• github.com/moby/policy-helpers 824747b -> b7c0b99
• github.com/oklog/ulid/v2 v2.1.1 new
• go.opentelemetry.io/otel v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/metric v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/sdk v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/sdk/metric v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/trace v1.38.0 -> v1.40.0
• go.opentelemetry.io/proto/otlp v1.7.1 -> v1.9.0
• golang.org/x/sys v0.41.0 -> v0.42.0
• golang.org/x/term v0.40.0 -> v0.41.0
• google.golang.org/genproto/googleapis/api ff82c1b -> 8636f87
• google.golang.org/genproto/googleapis/rpc 0a764e5 -> 8636f87
• google.golang.org/grpc v1.78.0 -> v1.79.3

Previous release can be found at v0.28.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/docker/cli	v29.3.0+incompatible -> v29.3.1+incompatible
github.com/klauspost/compress	v1.18.4 -> v1.18.5