Skip to content

build(deps): bump github.com/moby/buildkit from 0.32.1 to 0.32.2 - #14033

Merged
ndeloof merged 1 commit into
mainfrom
dependabot/go_modules/github.com/moby/buildkit-0.32.2
Aug 12, 2026
Merged

build(deps): bump github.com/moby/buildkit from 0.32.1 to 0.32.2#14033
ndeloof merged 1 commit into
mainfrom
dependabot/go_modules/github.com/moby/buildkit-0.32.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/moby/buildkit from 0.32.1 to 0.32.2.

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.32.2

Welcome to the v0.32.2 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax

Notable Changes

  • Revert the v0.32.1 OCI artifact attestation push-order workaround, restoring BuildKit's spec-aligned behavior of allowing referrers to be pushed before their subject manifests. #7016

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.32.1

Commits
  • 991535e Merge pull request #7016 from crazy-max/v0.32_backport_7015
  • b4e609f exporter: revert attestation manifest push order
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.32.1 to 0.32.2.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.32.1...v0.32.2)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 12, 2026
@dependabot
dependabot Bot requested review from a team as code owners August 12, 2026 09:03
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 12, 2026
@dependabot
dependabot Bot requested review from glours and ndeloof August 12, 2026 09:03
@dependabot dependabot Bot added the go Pull requests that update go code label Aug 12, 2026
@ndeloof
ndeloof enabled auto-merge (rebase) August 12, 2026 13:16
@ndeloof
ndeloof merged commit 17a35fc into main Aug 12, 2026
87 of 88 checks passed
@ndeloof
ndeloof deleted the dependabot/go_modules/github.com/moby/buildkit-0.32.2 branch August 12, 2026 13:27
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Aug 19, 2026
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker/compose](https://github.com/docker/compose) | minor | `v5.4.0` → `v5.5.0` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>docker/compose (docker/compose)</summary>

### [`v5.5.0`](https://github.com/docker/compose/releases/tag/v5.5.0)

[Compare Source](docker/compose@v5.4.0...v5.5.0)

#### What's Changed

> ℹ️  This release overhauls image digest reconciliation to prevent unnecessary container recreation.\
> Existing containers may be recreated the first time you run `compose up` after upgrading, as image digests are re-evaluated using the new logic.
>
> `compose pull` now honors `pull_policy` refresh windows (`daily`, `weekly`, `every_N`).

##### ✨ Improvements

- New image digest reconciliation process by [@&#8203;glours](https://github.com/glours) & [@&#8203;ndeloof](https://github.com/ndeloof) [#&#8203;14011](docker/compose#14011) [#&#8203;14041](docker/compose#14041)

##### 🐛 Fixes

- Fix(bridge): skip pulling default image references for build-only ser… by [@&#8203;ericwyles](https://github.com/ericwyles) in [#&#8203;14010](docker/compose#14010)
- Fix(watch): stop pruning every dangling image of the project by [@&#8203;glours](https://github.com/glours) in [#&#8203;14012](docker/compose#14012)
- Fix(config): resolve service environment when computing --hash by [@&#8203;glours](https://github.com/glours) in [#&#8203;14002](docker/compose#14002)
- Fix(watch): skip unreadable directories instead of failing the watch by [@&#8203;Endika](https://github.com/Endika) in [#&#8203;13992](docker/compose#13992)
- Fix: ignore one-off container events in up monitor by [@&#8203;brano-osif](https://github.com/brano-osif) in [#&#8203;14038](docker/compose#14038)
- Fix(bridge): validate arguments of bridge subcommands by [@&#8203;glours](https://github.com/glours) in [#&#8203;14003](docker/compose#14003)
- Fix(images): tolerate containers whose image record is gone by [@&#8203;ndeloof](https://github.com/ndeloof) in [#&#8203;14028](docker/compose#14028)

##### 🔧  Internal

- Test: Set stop\_signal to SIGTERM in nginx-based services by [@&#8203;ricardobranco777](https://github.com/ricardobranco777) in [#&#8203;13881](docker/compose#13881)
- Chore: inline needlessly extracted single-use helpers by [@&#8203;ndeloof](https://github.com/ndeloof) in [#&#8203;14048](docker/compose#14048)
- Add ENGINE column driven by label by [@&#8203;nicksieger](https://github.com/nicksieger) in [#&#8203;13959](docker/compose#13959)

##### ⚙️ Dependencies

- Build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;13999](docker/compose#13999)
- Build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;14009](docker/compose#14009)
- Build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;14019](docker/compose#14019)
- Build(deps): bump github.com/moby/buildkit from 0.32.1 to 0.32.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;14033](docker/compose#14033)
- Build(deps): bump github.com/docker/buildx from 0.36.0 to 0.36.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;14034](docker/compose#14034)
- Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.15.0 to 1.16.0 in the docker-actions group by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;14035](docker/compose#14035)
- Build(deps): bump github.com/moby/go-archive from 0.3.2 to 0.3.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;14043](docker/compose#14043)
- Build(deps): bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;14022](docker/compose#14022)
- Build(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.2+incompatible by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;14042](docker/compose#14042)
- Build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;14008](docker/compose#14008)
- Bump golang to version 1.26.6 by [@&#8203;glours](https://github.com/glours) in [#&#8203;14045](docker/compose#14045)

#### New Contributors

- [@&#8203;ericwyles](https://github.com/ericwyles) made their first contribution in [#&#8203;14010](docker/compose#14010)
- [@&#8203;Endika](https://github.com/Endika) made their first contribution in [#&#8203;13992](docker/compose#13992)
- [@&#8203;brano-osif](https://github.com/brano-osif) made their first contribution in [#&#8203;14038](docker/compose#14038)

**Full Changelog**: <docker/compose@v5.4.0...v5.5.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiLCJhdXRvbWF0aW9uOmJvdC1hdXRob3JlZCIsImRlcGVuZGVuY3ktdHlwZTo6bWlub3IiXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant