chore(deps): update module github.com/moby/buildkit to v0.32.1 (8.19)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/moby/buildkit	v0.31.2 → v0.32.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

moby/buildkit (github.com/moby/buildkit)

v0.32.1

Compare Source

Welcome to the v0.32.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax

Notable Changes

• Fix archive extraction through implied parent directories and absolute symlinks. #​7005
• Fix OCI artifact attestation pushes to registries that strictly validate subject references. #​7012

Dependency Changes

• github.com/moby/go-archive v0.2.1 -> v0.2.0

Previous release can be found at v0.32.0

v0.32.0

Compare Source

Welcome to the v0.32.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Akihiro Suda
• Dawei Wei
• Felix de Souza
• Alberto Garcia Hierro
• Devendra Kushwah
• Giles Cope
• Kunalbehbud
• MohammadHasan Akbari
• Natnael Gebremariam
• Pierre Fenoll
• Simon Aguilera
• s3onghyun

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.26.0. changelog
• Attestations now default to OCI artifact descriptors, use oci-artifacts=false if your registry does not support OCI artifacts. #​6914
• Build steps can now opt out of default OpenTelemetry tracing or define custom tracing configuration. #​6958
• Bolt database performance has been improved. #​6943
• Included Runc container runtime has been updated to v1.4.3. #​6853
• All remote cache backends now use OCI mediatypes for record descriptors. #​6913
• Source policy identifiers are now normalized before sending them to policy evaluation. #​6909
• SBOM scanner support for Windows has been added. #​6941
• Session exporters now support an optional finalization callback after exports complete, allowing providers to run completion logic while gateway references are still available. #​6978
• Lock contention in the LLB solver has been reduced. #​6917
• Improve SSH support when using non-standard ports. #​6895
• Improve validation of reading contents of invalid files via API. #​6903
• Deprecated OTEL fallback variables OTEL_TRACE_PARENT, OTEL_TRACE_STATE are no longer supported. Use TRACEPARENT and TRACESTATE instead. #​6874
• Fix possible cache miss issue on parallel builds with shared parts. #​6955
• Fix chunked encoding support for S3-compatible remote cache backends. #​6970
• Fix regression on handling OTEL_IGNORE_ERROR environment variable. #​6966

Dependency Changes

• github.com/Microsoft/go-winio v0.6.2 -> ad3df93
• github.com/Microsoft/hcsshim v0.14.1 -> v0.15.0-rc.1
• github.com/ProtonMail/go-crypto v1.3.0 -> v1.4.1
• github.com/aws/aws-sdk-go-v2 v1.42.0 -> v1.43.0
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.13 -> v1.7.14
• github.com/aws/aws-sdk-go-v2/config v1.32.24 -> v1.32.31
• github.com/aws/aws-sdk-go-v2/credentials v1.19.23 -> v1.19.30
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.29 -> v1.18.31
• github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.2.9 -> v0.3.5
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.29 -> v1.4.31
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29 -> v2.7.31
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30 -> v1.4.32
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12 -> v1.13.13
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.22 -> v1.9.24
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.29 -> v1.13.31
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.29 -> v1.19.32
• github.com/aws/aws-sdk-go-v2/service/s3 v1.103.3 -> v1.106.0
• github.com/aws/aws-sdk-go-v2/service/signin v1.1.5 -> v1.5.0
• github.com/aws/aws-sdk-go-v2/service/sso v1.31.3 -> v1.33.0
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.6 -> v1.38.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.43.3 -> v1.45.0
• github.com/aws/smithy-go v1.27.2 -> v1.27.4
• github.com/containerd/containerd/api v1.10.0 -> v1.11.1
• github.com/containerd/containerd/v2 v2.2.4 -> v2.3.3
• github.com/containerd/plugin v1.0.0 -> v1.1.0
• github.com/containerd/ttrpc v1.2.8 -> v1.2.9
• github.com/docker/cli v29.5.3 -> v29.6.2
• github.com/go-openapi/errors v0.22.7 -> v0.22.8
• github.com/go-openapi/loads v0.23.3 -> v0.24.0
• github.com/go-openapi/runtime v0.32.3 -> v0.32.4
• github.com/go-openapi/spec v0.22.5 -> v0.22.6
• github.com/go-openapi/strfmt v0.26.3 -> v0.26.4
• github.com/go-openapi/swag v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/cmdutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/conv v0.26.0 -> v0.27.0
• github.com/go-openapi/swag/fileutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/jsonname v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/jsonutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/loading v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/mangling v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/netutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/stringutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/typeutils v0.26.0 -> v0.27.0
• github.com/go-openapi/swag/yamlutils v0.26.0 -> v0.26.1
• github.com/go-openapi/validate v0.25.3 -> v0.26.0
• github.com/gohugoio/hashstructure v0.6.0 new
• github.com/google/go-containerregistry v0.21.6 -> v0.21.7
• github.com/klauspost/compress v1.18.6 -> v1.19.1
• github.com/moby/go-archive v0.2.0 -> v0.2.1
• github.com/moby/policy-helpers d5411a9 -> 856be88
• github.com/moby/sys/mount fc52b72 -> v0.3.5
• github.com/moby/sys/user v0.4.0 -> v0.4.1
• github.com/sigstore/rekor v1.5.2 -> v1.5.3
• github.com/sigstore/rekor-tiles/v2 5d098a2 -> v2.3.0
• github.com/sigstore/sigstore-go v1.2.1 -> v1.2.2
• github.com/tonistiigi/fsutil 30cd4fc -> 6d9dc2e
• go.etcd.io/bbolt v1.4.3 -> v1.5.0
• go.opentelemetry.io/otel/exporters/prometheus v0.65.0 -> v0.66.0
• golang.org/x/crypto v0.52.0 -> v0.54.0
• golang.org/x/mod v0.36.0 -> v0.38.0
• golang.org/x/net v0.55.0 -> v0.57.0
• golang.org/x/sync v0.20.0 -> v0.22.0
• golang.org/x/sys v0.45.0 -> v0.47.0
• golang.org/x/term v0.43.0 -> v0.45.0
• golang.org/x/text v0.37.0 -> v0.40.0
• google.golang.org/grpc v1.81.1 -> v1.82.1
• google.golang.org/protobuf v1.36.11 -> f2248ac

Previous release can be found at v0.31.2

---

Configuration

📅 Schedule: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[elastic-renovate-prod]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading k8s.io/client-go v0.36.0
go: downloading k8s.io/api v0.36.0
go: downloading k8s.io/apimachinery v0.36.0
go: downloading k8s.io/utils v0.0.0-20260319190234-28399d86e0b5
go: downloading github.com/Microsoft/go-winio v0.6.3-0.20251027160822-ad3df93bed29
go: downloading github.com/Microsoft/hcsshim v0.15.0-rc.1
go: downloading k8s.io/component-base v0.36.0
go: downloading k8s.io/streaming v0.36.0
go: github.com/elastic/cloudbeat/internal/vulnerability imports
	github.com/aquasecurity/trivy/pkg/commands/artifact imports
	github.com/aquasecurity/trivy/pkg/misconf imports
	github.com/aquasecurity/trivy/pkg/iac/scanners/helm imports
	github.com/aquasecurity/trivy/pkg/iac/scanners/helm/parser imports
	helm.sh/helm/v3/pkg/action imports
	helm.sh/helm/v3/pkg/kube imports
	k8s.io/kubectl/pkg/cmd/util imports
	k8s.io/kubectl/pkg/scheme imports
	k8s.io/api/scheduling/v1alpha1: cannot find module providing package k8s.io/api/scheduling/v1alpha1