Skip to content

feat(deps): github.com/moby/buildkit v0.33.0-rc1 - #14138

Draft
thaJeztah wants to merge 1 commit into
docker:mainfrom
thaJeztah:bump_buildkit
Draft

feat(deps): github.com/moby/buildkit v0.33.0-rc1#14138
thaJeztah wants to merge 1 commit into
docker:mainfrom
thaJeztah:bump_buildkit

Conversation

@thaJeztah

Copy link
Copy Markdown
Member

What I did

Related issue

(not mandatory) A picture of a cute animal, if possible in relation to what you did

@thaJeztah

Copy link
Copy Markdown
Member Author

Just testing the RC

@docker-agent docker-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

This PR performs a routine dependency bump, upgrading github.com/moby/buildkit from v0.32.2 to v0.33.0-rc1, along with transitive updates to containerd (v2.3.4), OTel core (v1.45.0), OTel contrib (v0.70.0), grpc (v1.83.2), golang.org/x/crypto (v0.55.0), golang.org/x/net (v0.58.0), and several other indirect dependencies.

Analysis summary:

  • The moby/buildkit v0.33.0-rc1 RC pin is intentional: docker/compose and buildkit share the same Docker/Moby org, and this project has an established pattern of tracking RC versions for integration testing (containerd/platforms was already at v1.0.0-rc.4, now v1.0.0-rc.5). Compose is distributed as a compiled binary, not a library, so the RC pin does not propagate as a go module dependency to end users.
  • OTel version alignment is correct: all core packages move to v1.45.0 and contrib packages to v0.70.0 consistently.
  • Security-relevant packages (golang.org/x/crypto, golang.org/x/net) are incremental updates with no known outstanding CVEs at the target versions.
  • grpc v1.83.2 and protobuf v1.36.12 (GA, not pre-release) align correctly with the updated genproto packages.
  • No indirect dependency downgrades or version conflicts detected.

No actionable issues found.

@codecov

codecov Bot commented Aug 27, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@glours

glours commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

@thaJeztah can you rebase it and fix the conflicts please?

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

3 participants