[PR #1635] [MERGED] build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3 #2043

Closed
opened 2026-03-01 21:53:46 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/1635
Author: @dependabot[bot]
Created: 2/20/2023
Status: Merged
Merged: 2/20/2023
Merged by: @mergify[bot]

Base: masterHead: dependabot/go_modules/github.com/moby/buildkit-0.11.3


📝 Commits (1)

  • 8bec372 build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3

📊 Changes

2 files changed (+6 additions, -6 deletions)

View changed files

📝 go.mod (+2 -2)
📝 go.sum (+4 -4)

📄 Description

Bumps github.com/moby/buildkit from 0.11.2 to 0.11.3.

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.11.3

Welcome to the 0.11.3 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Notable Changes

  • Builtin Dockerfile frontend updated to v1.5.2
  • Fix not mounting optional secrets missing from build requests #3561
  • Fix an issue with Github cache backend that could cause invalid range requests #3618
  • Fix possible cache loading error when loading local cache created by BuildKit releases older than v0.10 #3605
  • Fix issues with missing layer metadata in SBOMs in latest releases #3594
  • Fix possible "digest not found" error on exporting build results #3566
  • Make sure timezones are dropped on handling SOURCE_DATE_EPOCH #3559

Dependency Changes

  • github.com/containerd/containerd 1709cfe273d9 -> v1.6.16

Previous release can be found at v0.11.2

Commits
  • 4ddee42 Merge pull request #3634 from tonistiigi/v0.11.3-picks
  • 66e0587 hack: do not cache some stages on release
  • 821f130 hack: do not set attest flags when exporting to docker
  • 2d0740f ci: create matrix for building frontend image
  • b666117 dockerfile: release frontend for i386 platform
  • b31ccd0 gha: avoid range requests with too big offset
  • b924f0b cache: add fallback for snapshotID
  • 95aaabd client: add tests for layerID in comment field
  • f0c74da exporter: fix sbom supplement core detection
  • 0ddf801 exporter: fix supplement sboms on empty scratch layer
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/1635 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/20/2023 **Status:** ✅ Merged **Merged:** 2/20/2023 **Merged by:** [@mergify[bot]](https://github.com/apps/mergify) **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/moby/buildkit-0.11.3` --- ### 📝 Commits (1) - [`8bec372`](https://github.com/nektos/act/commit/8bec3720ecfbc4ca7cc51f25fbf90b047e589f2c) build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3 ### 📊 Changes **2 files changed** (+6 additions, -6 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+2 -2) 📝 `go.sum` (+4 -4) </details> ### 📄 Description Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.11.2 to 0.11.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/moby/buildkit/releases">github.com/moby/buildkit's releases</a>.</em></p> <blockquote> <h2>v0.11.3</h2> <p>Welcome to the 0.11.3 release of buildkit!</p> <p>Please try out the release binaries and report any issues at <a href="https://github.com/moby/buildkit/issues">https://github.com/moby/buildkit/issues</a>.</p> <h3>Notable Changes</h3> <ul> <li>Builtin Dockerfile frontend updated to v1.5.2</li> <li>Fix not mounting optional secrets missing from build requests <a href="https://github-redirect.dependabot.com/moby/buildkit/issues/3561">#3561</a></li> <li>Fix an issue with Github cache backend that could cause invalid range requests <a href="https://github-redirect.dependabot.com/moby/buildkit/issues/3618">#3618</a></li> <li>Fix possible cache loading error when loading local cache created by BuildKit releases older than v0.10 <a href="https://github-redirect.dependabot.com/moby/buildkit/issues/3605">#3605</a></li> <li>Fix issues with missing layer metadata in SBOMs in latest releases <a href="https://github-redirect.dependabot.com/moby/buildkit/issues/3594">#3594</a></li> <li>Fix possible &quot;digest not found&quot; error on exporting build results <a href="https://github-redirect.dependabot.com/moby/buildkit/issues/3566">#3566</a></li> <li>Make sure timezones are dropped on handling <code>SOURCE_DATE_EPOCH</code> <a href="https://github-redirect.dependabot.com/moby/buildkit/issues/3559">#3559</a></li> </ul> <h3>Dependency Changes</h3> <ul> <li><strong>github.com/containerd/containerd</strong> 1709cfe273d9 -&gt; v1.6.16</li> </ul> <p>Previous release can be found at <a href="https://github.com/moby/buildkit/releases/tag/v0.11.2">v0.11.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moby/buildkit/commit/4ddee42a32aac4cd33bf9c2be4c87c2ffd34747b"><code>4ddee42</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/moby/buildkit/issues/3634">#3634</a> from tonistiigi/v0.11.3-picks</li> <li><a href="https://github.com/moby/buildkit/commit/66e05870676a51dc713d35eb84abed8cfc17c078"><code>66e0587</code></a> hack: do not cache some stages on release</li> <li><a href="https://github.com/moby/buildkit/commit/821f130af2bd5ee0dc83a22e6e2eb377e51c076d"><code>821f130</code></a> hack: do not set attest flags when exporting to docker</li> <li><a href="https://github.com/moby/buildkit/commit/2d0740f048271fd53787da9649dd8b47c7475125"><code>2d0740f</code></a> ci: create matrix for building frontend image</li> <li><a href="https://github.com/moby/buildkit/commit/b66611781dec5ae926b0a6f5ab2a742fbf0f8331"><code>b666117</code></a> dockerfile: release frontend for i386 platform</li> <li><a href="https://github.com/moby/buildkit/commit/b31ccd0417a05ca119b62de9791bb71060c07a5d"><code>b31ccd0</code></a> gha: avoid range requests with too big offset</li> <li><a href="https://github.com/moby/buildkit/commit/b924f0b5ce5e97d43bd3400a92c1ae77ccf1ab5c"><code>b924f0b</code></a> cache: add fallback for snapshotID</li> <li><a href="https://github.com/moby/buildkit/commit/95aaabda0d712938c349eedc54a36f153523ff8a"><code>95aaabd</code></a> client: add tests for layerID in comment field</li> <li><a href="https://github.com/moby/buildkit/commit/f0c74da97c4764bb0979d4d5d40f47ed36a9eb74"><code>f0c74da</code></a> exporter: fix sbom supplement core detection</li> <li><a href="https://github.com/moby/buildkit/commit/0ddf8016648252cff20332bed86e95824b7667b2"><code>0ddf801</code></a> exporter: fix supplement sboms on empty scratch layer</li> <li>Additional commits viewable in <a href="https://github.com/moby/buildkit/compare/v0.11.2...v0.11.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/moby/buildkit&package-manager=go_modules&previous-version=0.11.2&new-version=0.11.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-01 21:53:46 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/act#2043
No description provided.