fix(buildkitd): GHSA-m6hq-p25p-ffr2, GHSA-pwhc-rpq9-4c8w

[catmsred]

Bump containerd version

Relates: https://github.com/chainguard-dev/CVE-Dashboard/issues/35786, https://github.com/chainguard-dev/CVE-Dashboard/issues/35640

[octo-sts]

📦 Build Failed: Missing Dependency

Error: failed to run update. Error: package github.com/containerd/containerd was not found on the go.mod file. Please remove the package or add it to the list of 'replaces'

Build Details

Category	Details
Build System	melange/go
Failure Point	go/bump step - gobump command execution

Root Cause Analysis 🔍

The gobump tool is trying to update the github.com/containerd/containerd package to version v1.7.29, but this package is not present in the go.mod file. The build configuration specifies packages to update that don't exist as dependencies in the current module, causing the dependency management step to fail.

---

Was this comment helpful? Please use 👍 or 👎 reactions on this comment.