fix(deps): update module github.com/moby/buildkit to v0.17.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/moby/buildkit	v0.16.0 -> v0.17.0

---

Release Notes

moby/buildkit (github.com/moby/buildkit)

v0.17.0

Compare Source

Welcome to the v0.17.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• David Karlsson
• Justin Chadwell
• Talon Bowler
• Anthony Nandaa
• Akihiro Suda
• Shaun Thompson
• Austin Vazquez
• Billy Owire
• Eoin Farrell
• MohammadHasan Akbari
• Alberto Garcia Hierro
• Gabriel-Adrian Samfira
• Laurent Goderre
• Marat Radchenko
• Matt Rickard
• Paulo Sousa
• Sergio Garcez
• Silvin Lubecki
• castrombithisamm
• ryio1010

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.11.0 changelog
• Garbage collection policies and prune filters have been updated to be more flexible and allow more control over used storage. Users can now define storage controls based on how much empty space is available on disk and define reserved and maximum storage limits separately #​5359 #​5079
• FileOp.Copy now supports non-octal values for setting file mode with chmod #​5375
• Protobuf tooling has moved away from GoGo Protobuf. #​5356 #​5409 #​5396 #​5342
• Memory allocations, especially when uploading big build contexts or copying build results back to client, have been reduced #​5409 #​5442
• Allow Git builds from SHA references that are not part of a branch or tag #​5441
• Improve OpenTelemetry tracing for authentication routines #​5432
• HTTP requests from build steps now use BuildKit specific user-agent like the Container registry requests #​5407
• ExecOp build steps now supports setting expected non-zero exit codes #​5339
• Parameter options can now be passed to the SBOM scanner #​5372
• Determinism of LLB marshaling has been improved to reduce unnecessary cache lookups #​5374
• Completeness of history records is now validated at startup #​5378
• Debug address now supports new flight recorder endpoints #​5337
• Improve communication with registries that return empty authentication scope #​5321
• Fix Git builds with .git directory possibly not containing information about the cloned reference #​5444
• Fix an issue with FileOp copy with constant timestamps not working correctly for parent directories #​5461
• Fix accessing OCI layout from read-only filesystems not working does to file locks #​5452
• Fix gRPC h2 protocol identifier to comply with TLS-ALPN #​5419
• Fix error handling for requiring AppArmor profiles in unsupported system #​5373
• Fix possible panic from nil result conversion in solver #​5406
• Fix possible panic from triggered error handler #​5335
• Fix missing LLB input validation when checking build policies #​5362
• Fix possible "digest mismatch" error when using HTTP(s) build sources #​5343
• Fix possible file walking issue in Windows Containers when using certain mount structures #​5289

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.0 -> v1.11.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.1.0 -> v1.6.0
• github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0 -> v1.8.0
• github.com/AzureAD/microsoft-authentication-library-for-go v0.6.0 -> v1.2.2
• github.com/Microsoft/hcsshim v0.11.7 -> v0.12.5
• github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
• github.com/containerd/cgroups/v3 v3.0.2 new
• github.com/containerd/containerd v1.7.21 -> v1.7.22
• github.com/containerd/continuity v0.4.3 -> v0.4.4
• github.com/cpuguy83/go-md2man/v2 v2.0.4 -> v2.0.5
• github.com/docker/cli v27.2.1 -> v27.3.1
• github.com/docker/docker v27.2.1 -> v27.3.1
• github.com/golang-jwt/jwt/v5 v5.2.1 new
• github.com/klauspost/compress v1.17.9 -> v1.17.11
• github.com/moby/sys/mount v0.3.3 -> v0.3.4
• github.com/moby/sys/sequential v0.5.0 -> v0.6.0
• github.com/planetscale/vtprotobuf 0393e58 new
• github.com/tonistiigi/dchapes-mode ca0759f new
• github.com/tonistiigi/fsutil 91a3fc4 -> 397af53
• github.com/urfave/cli v1.22.15 -> v1.22.16
• go.etcd.io/bbolt v1.3.10 -> v1.3.11
• golang.org/x/exp 701f63a new
• google.golang.org/genproto/googleapis/api ef43131 -> ef581f9
• google.golang.org/genproto/googleapis/rpc ef43131 -> ef581f9
• google.golang.org/grpc v1.62.0 -> v1.66.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1 new

Previous release can be found at v0.16.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
github.com/klauspost/compress	v1.17.9 -> v1.17.11
github.com/moby/sys/sequential	v0.5.0 -> v0.6.0
google.golang.org/grpc	v1.65.0 -> v1.66.2
google.golang.org/protobuf	v1.34.2 -> v1.35.1

[nalind]

/approve
/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: nalind, renovate[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [nalind]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[rhatdan]

/lgtm