Bump github.com/moby/buildkit from 0.11.6 to 0.12.5

[moukoublen]

Summary of your changes

Screenshot/Data

Related Issues

Checklist

• I have added tests that prove my fix is effective or that my feature works
• I have added the necessary README/documentation (if appropriate)

Introducing a new rule?

• Generate rule metadata using this script
• Add relevant unit tests
• Generate relevant rule templates using this script, and open a PR in elastic/packages/cloud_security_posture

[mergify]

This pull request does not have a backport label. Could you fix it @moukoublen? 🙏
To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• backport-v./d./d./d is the label to automatically backport to the 8./d branch. /d is the digit
  NOTE: backport-skip has been added to this pull request.

[github-actions]

📊 Allure Report - 💚 No failures were reported.

Result	Count
🟥 Failed	0
🟩 Passed	359
⬜ Skipped	33

[orouz]

any reason why these don't need to be replaced anymore?

[moukoublen]

Yes, we specifically need oras.land/oras-go@v1.2.5

buildkit 0.12.5 needs docker v25
https://github.com/moby/buildkit/blob/v0.12.5/go.mod#L31

But oras-go 1.2.4 breaks with newer docker so we need 1.2.5 (check Important in the release notes)

https://github.com/oras-project/oras-go/releases/tag/v1.2.5

---

the other one go.opentelemetry.io/otel/metric v0.38.0 => go.opentelemetry.io/otel/metric v0.34.0 is not useful anymore since we have metric v1.24.0 so the replace does nothing to sum.