fix(deps): update module github.com/moby/buildkit to v0.17.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/moby/buildkit	v0.15.2 -> v0.17.1

---

Release Notes

moby/buildkit (github.com/moby/buildkit)

v0.17.1

Compare Source

Welcome to the v0.17.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Notable changes

• Builtin Dockerfile frontend has been updated to v1.11.1 changelog

Previous release can be found at v0.17.0

v0.17.0

Compare Source

Welcome to the v0.17.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• David Karlsson
• Justin Chadwell
• Talon Bowler
• Anthony Nandaa
• Akihiro Suda
• Shaun Thompson
• Austin Vazquez
• Billy Owire
• Eoin Farrell
• MohammadHasan Akbari
• Alberto Garcia Hierro
• Gabriel-Adrian Samfira
• Laurent Goderre
• Marat Radchenko
• Matt Rickard
• Paulo Sousa
• Sergio Garcez
• Silvin Lubecki
• castrombithisamm
• ryio1010

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.11.0 changelog
• Garbage collection policies and prune filters have been updated to be more flexible and allow more control over used storage. Users can now define storage controls based on how much empty space is available on disk and define reserved and maximum storage limits separately #​5359 #​5079
• FileOp.Copy now supports non-octal values for setting file mode with chmod #​5375
• Protobuf tooling has moved away from GoGo Protobuf. #​5356 #​5409 #​5396 #​5342
• Memory allocations, especially when uploading big build contexts or copying build results back to client, have been reduced #​5409 #​5442
• Allow Git builds from SHA references that are not part of a branch or tag #​5441
• Improve OpenTelemetry tracing for authentication routines #​5432
• HTTP requests from build steps now use BuildKit specific user-agent like the Container registry requests #​5407
• ExecOp build steps now supports setting expected non-zero exit codes #​5339
• Parameter options can now be passed to the SBOM scanner #​5372
• Determinism of LLB marshaling has been improved to reduce unnecessary cache lookups #​5374
• Completeness of history records is now validated at startup #​5378
• Debug address now supports new flight recorder endpoints #​5337
• Improve communication with registries that return empty authentication scope #​5321
• Fix Git builds with .git directory possibly not containing information about the cloned reference #​5444
• Fix an issue with FileOp copy with constant timestamps not working correctly for parent directories #​5461
• Fix accessing OCI layout from read-only filesystems not working does to file locks #​5452
• Fix gRPC h2 protocol identifier to comply with TLS-ALPN #​5419
• Fix error handling for requiring AppArmor profiles in unsupported system #​5373
• Fix possible panic from nil result conversion in solver #​5406
• Fix possible panic from triggered error handler #​5335
• Fix missing LLB input validation when checking build policies #​5362
• Fix possible "digest mismatch" error when using HTTP(s) build sources #​5343
• Fix possible file walking issue in Windows Containers when using certain mount structures #​5289

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.0 -> v1.11.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.1.0 -> v1.6.0
• github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0 -> v1.8.0
• github.com/AzureAD/microsoft-authentication-library-for-go v0.6.0 -> v1.2.2
• github.com/Microsoft/hcsshim v0.11.7 -> v0.12.5
• github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
• github.com/containerd/cgroups/v3 v3.0.2 new
• github.com/containerd/containerd v1.7.21 -> v1.7.22
• github.com/containerd/continuity v0.4.3 -> v0.4.4
• github.com/cpuguy83/go-md2man/v2 v2.0.4 -> v2.0.5
• github.com/docker/cli v27.2.1 -> v27.3.1
• github.com/docker/docker v27.2.1 -> v27.3.1
• github.com/golang-jwt/jwt/v5 v5.2.1 new
• github.com/klauspost/compress v1.17.9 -> v1.17.11
• github.com/moby/sys/mount v0.3.3 -> v0.3.4
• github.com/moby/sys/sequential v0.5.0 -> v0.6.0
• github.com/planetscale/vtprotobuf 0393e58 new
• github.com/tonistiigi/dchapes-mode ca0759f new
• github.com/tonistiigi/fsutil 91a3fc4 -> 397af53
• github.com/urfave/cli v1.22.15 -> v1.22.16
• go.etcd.io/bbolt v1.3.10 -> v1.3.11
• golang.org/x/exp 701f63a new
• google.golang.org/genproto/googleapis/api ef43131 -> ef581f9
• google.golang.org/genproto/googleapis/rpc ef43131 -> ef581f9
• google.golang.org/grpc v1.62.0 -> v1.66.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1 new

Previous release can be found at v0.16.0

v0.16.0

Compare Source

Welcome to the v0.16.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Akihiro Suda
• David Karlsson
• Shaun Thompson
• Talon Bowler
• Arkadiusz Drabczyk
• Craig Andrews
• Justin Chadwell
• Mitsuru Kariya
• Anthony Nandaa
• Bertrand Paquet
• Ignas Mikalajūnas
• Jonathan A. Sternberg
• Billy Owire
• Debosmit Ray
• Kai Takac
• Marat Radchenko
• a-palchikov

Notable changes

• Builtin Dockerfile frontend has been updated to v1.10.0 changelog
• Remote cache export to S3 backend can now happen with parallel requests and can be controlled with new upload_parallelism option #​5270
• Remote cache export to S3 backend now supports layers larger than 5GB #​5266
• History records now contain information about the number of warnings that were generated during the build #​5166
• Printing check results with library now allows source mapping modifications #​5295
• Unconditionally use /etc/resolv.conf rather than systemd's config in host networking mode #​5207
• Certain history, graph consistency, and some syscall errors as now marked as internal and use corresponding gRPC error code #​5163 #​5182
• Output of errors produced by the container executor has been improved #​5179
• Stack traces produced by build errors are now clearer and avoid duplicates #​5180
• Build containers killed by OOMKiller are now detected and shown to the user in the error message #​5260
• Runc container runtime has been updated to v1.1.14 #​5300
• Pre-defined OCI annotations are now set to the BuildKit image #​3554
• Fix pruning cache mounts that use uid/gid/mode/from on no-cache builds #​5306
• Fix issue where --import-cache flag could be ignored for buildctl #​5143
• Fix OTEL trace ID being missing from logs #​5315

Dependency Changes

• github.com/containerd/containerd v1.7.19 -> v1.7.21
• github.com/containerd/nydus-snapshotter v0.13.7 -> v0.14.0
• github.com/containerd/typeurl/v2 v2.1.1 -> v2.2.0
• github.com/docker/cli v27.0.3 -> v27.2.1
• github.com/docker/docker v27.0.3 -> v27.2.1
• github.com/moby/sys/signal v0.7.0 -> v0.7.1
• github.com/moby/sys/userns v0.1.0 new
• github.com/pkg/browser ce105d0 -> 5ac0b6a
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.42.0 -> v0.44.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.42.0 -> v0.44.0
• google.golang.org/genproto 49dd2c1 -> ef43131
• google.golang.org/genproto/googleapis/api 49dd2c1 -> ef43131
• google.golang.org/genproto/googleapis/rpc 49dd2c1 -> ef43131
• google.golang.org/grpc v1.59.0 -> v1.62.0

Previous release can be found at v0.15.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/containerd/typeurl/v2	v2.1.1 -> v2.2.0
google.golang.org/protobuf	v1.33.0 -> v1.35.1