build(deps): bump github.com/docker/buildx v0.33.0, buildkit v0.29.0

[thaJeztah]

What I did

Related issue

(not mandatory) A picture of a cute animal, if possible in relation to what you did

[thaJeztah]

This came from go-tuf; work in progress to drop those bumps;

• ci: use .go-version file for actions/setup-go, update to go1.25.8 theupdateframework/go-tuf#722
• Decouple CI Go version from module minimum theupdateframework/go-tuf#726

[Copilot]

Pull request overview

This PR updates the Go module dependencies for github.com/docker/compose/v5, primarily bumping Docker Buildx and Moby BuildKit, which in turn refreshes a set of related transitive dependencies.

Changes:

• Bump github.com/docker/buildx to v0.33.0 and github.com/moby/buildkit to v0.29.0.
• Update various indirect dependencies pulled in by those upgrades (e.g., containerd, sigstore, in-toto, klauspost/compress, etc.).
• Update the go directive in go.mod from 1.25.0 to 1.25.5.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
go.mod	Updates Buildx/BuildKit versions, refreshes indirect deps, and bumps the declared Go version.
go.sum	Synchronizes dependency checksums with the updated module graph.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The PR title/description indicates a buildx/buildkit dependency bump, but this also raises the module's declared Go version from 1.25.0 to 1.25.5. Please confirm this is intentional (it effectively increases the minimum Go version for consumers) and consider keeping the go directive at the intended language version (e.g., 1.25.x baseline) while tracking the exact toolchain patch via .go-version/toolchain if needed; otherwise update the PR metadata to reflect the Go version bump.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!