Skip to content

feat(deps): github.com/moby/buildkit v0.33.0-rc1 - #14138

Draft
thaJeztah wants to merge 1 commit into
docker:mainfrom
thaJeztah:bump_buildkit
Draft

feat(deps): github.com/moby/buildkit v0.33.0-rc1#14138
thaJeztah wants to merge 1 commit into
docker:mainfrom
thaJeztah:bump_buildkit

Conversation

@thaJeztah

Copy link
Copy Markdown
Member

What I did

Related issue

(not mandatory) A picture of a cute animal, if possible in relation to what you did

@thaJeztah

Copy link
Copy Markdown
Member Author

Just testing the RC

@docker-agent docker-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

This PR performs a routine dependency bump, upgrading github.com/moby/buildkit from v0.32.2 to v0.33.0-rc1, along with transitive updates to containerd (v2.3.4), OTel core (v1.45.0), OTel contrib (v0.70.0), grpc (v1.83.2), golang.org/x/crypto (v0.55.0), golang.org/x/net (v0.58.0), and several other indirect dependencies.

Analysis summary:

  • The moby/buildkit v0.33.0-rc1 RC pin is intentional: docker/compose and buildkit share the same Docker/Moby org, and this project has an established pattern of tracking RC versions for integration testing (containerd/platforms was already at v1.0.0-rc.4, now v1.0.0-rc.5). Compose is distributed as a compiled binary, not a library, so the RC pin does not propagate as a go module dependency to end users.
  • OTel version alignment is correct: all core packages move to v1.45.0 and contrib packages to v0.70.0 consistently.
  • Security-relevant packages (golang.org/x/crypto, golang.org/x/net) are incremental updates with no known outstanding CVEs at the target versions.
  • grpc v1.83.2 and protobuf v1.36.12 (GA, not pre-release) align correctly with the updated genproto packages.
  • No indirect dependency downgrades or version conflicts detected.

No actionable issues found.

@codecov

codecov Bot commented Aug 27, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@glours

glours commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

@thaJeztah can you rebase it and fix the conflicts please?

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants