diff --git a/ci/Dockerfile-buildkit b/ci/Dockerfile-buildkit
index 581a4068a8832..d4be4b7821320 100644
--- a/ci/Dockerfile-buildkit
+++ b/ci/Dockerfile-buildkit
@@ -1,3 +1,3 @@
 # We dont build from this dockerfile - we just parse the version, but storing
 # here means we get the dependabot updates
-FROM moby/buildkit:v0.31.1@sha256:6b59b7df63a8cb9902736f9ddf7fcff8261613d3e7449b8ea8b7537fc399c03a
+FROM moby/buildkit:v0.31.2@sha256:2f5adac4ecd194d9f8c10b7b5d7bceb5186853db1b26e5abd3a657af0b7e26ec