fix(deps): update go deps

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
github.com/charmbracelet/huh	require	digest	40d2b68 -> c41a69b
github.com/charmbracelet/huh/spinner	require	digest	fe12c0e -> c41a69b
github.com/moby/buildkit	require	minor	v0.22.0 -> v0.23.2
github.com/urfave/cli/v3	require	minor	v3.3.8 -> v3.4.1
go (source)	toolchain	minor	1.24.6 -> 1.25.0
golang.org/x/time	require	minor	v0.11.0 -> v0.12.0
google.golang.org/protobuf	require	patch	v1.36.7 -> v1.36.8
k8s.io/apimachinery	require	patch	v0.33.1 -> v0.33.4

---

Release Notes

moby/buildkit (github.com/moby/buildkit)

v0.23.2

Compare Source

Welcome to the v0.23.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi

Notable Changes

• Fix attestation filename in local exporter. #​6051
• Fix expired cache URLs in GitHub Actions cache exporter. #​6053

Dependency Changes

• github.com/tonistiigi/go-actions-cache 388a2ec -> 378c5ed

Previous release can be found at v0.23.1

v0.23.1

Compare Source

Welcome to the v0.23.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Derek McGowan

Notable Changes

• Fix a possible issue where pulling images from some registries that don't handle the Range header correctly(Artifactory) would fail. #​6040

Dependency Changes

• github.com/containerd/containerd/v2 v2.1.1 -> v2.1.3

Previous release can be found at v0.23.0

v0.23.0

Compare Source

Welcome to the v0.23.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Anthony Nandaa
• Austin Vazquez
• Brian Goff
• Dan Duvall
• Jonathan A. Sternberg
• Nicolas Schweitzer
• Roberto Villarreal
• Sebastiaan van Stijn
• zfrank

Notable Changes

• Add opt-in support for SLSA provenance v1. This is expected to become the default in a future release. #​6005 docs
• Allow duration based filters on diskusage requests. #​5455
• Allow authorization secrets to be set per hostname with HTTP_AUTH_HEADER_<host> or HTTP_AUTH_TOKEN_<host>. #​6023
• Add support for raw mode in the SSH agent provider. #​6003
• Improve URL joining to prevent malformed GitHub Cache service URLs. #​6026 tonistiigi/go-actions-cache#38
• Update Runc v1.3.0. #​5977
• Fix possible "unknown file mode" error when transferring files on Windows (previous fix did not work). #​6025
• Fix race condition when enabling and disabling privileges in WCOW. #​5959
• Fix unnecessary registry requests for local image lookups if reference contains a digest. #​6029
• Fix privileges error for local exporter in WCOW. #​6007
• Fix OCI export of multi-platform scratch result. #​5996
• Fix handle not found error during cache export. #​5999
• Fix type=local,platform-split=true for single platform build to work the same as it would with a multi-platform build. #​6007
• Fix some data races shown on the race detector. #​6006

Dependency Changes

• github.com/Microsoft/hcsshim v0.12.9 -> v0.13.0
• github.com/containerd/accelerated-container-image v1.2.3 -> v1.3.0
• github.com/containerd/console v1.0.4 -> v1.0.5
• github.com/containerd/containerd/api v1.8.0 -> v1.9.0
• github.com/containerd/containerd/v2 v2.0.5 -> v2.1.1
• github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.1 -> v2.1.6
• github.com/containerd/nydus-snapshotter v0.15.0 -> v0.15.2
• github.com/containernetworking/cni v1.2.3 -> v1.3.0
• github.com/containernetworking/plugins v1.5.1 -> v1.7.1
• github.com/docker/cli v28.1.1 -> v28.2.2
• github.com/docker/docker v28.1.1 -> v28.2.2
• github.com/fsnotify/fsnotify v1.7.0 -> v1.9.0
• github.com/google/pprof a892ee0 -> 27863c8
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 -> v2.26.1
• github.com/in-toto/in-toto-golang v0.5.0 -> v0.9.0
• github.com/opencontainers/runtime-spec v1.2.0 -> v1.2.1
• github.com/opencontainers/selinux v1.11.1 -> v1.12.0
• github.com/prometheus/client_golang v1.20.5 -> v1.22.0
• github.com/prometheus/common v0.55.0 -> v0.62.0
• github.com/secure-systems-lab/go-securesystemslib v0.4.0 -> v0.6.0
• github.com/spdx/tools-golang v0.5.3 -> v0.5.5
• github.com/tonistiigi/fsutil 3f76f81 -> 586307a
• github.com/tonistiigi/go-actions-cache 3e9a664 -> 388a2ec
• github.com/tonistiigi/go-csvvalue ddb21b7 -> 030d3b2
• github.com/vishvananda/netlink 084abd9 -> v1.3.1
• go.etcd.io/bbolt v1.3.11 -> v1.4.0
• go.opentelemetry.io/auto/sdk v1.1.0 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 -> v0.60.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 -> v0.60.0
• go.opentelemetry.io/otel v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/metric v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/sdk v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/sdk/metric v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/trace v1.31.0 -> v1.35.0
• go.opentelemetry.io/proto/otlp v1.3.1 -> v1.5.0
• golang.org/x/sync v0.13.0 -> v0.14.0
• golang.org/x/sys v0.32.0 -> v0.33.0
• google.golang.org/genproto/googleapis/api 324edc3 -> 56aae31
• google.golang.org/genproto/googleapis/rpc 324edc3 -> 56aae31
• google.golang.org/grpc v1.69.4 -> v1.72.2
• google.golang.org/protobuf v1.35.2 -> v1.36.6
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.73 -> v1.2.76
• kernel.org/pub/linux/libs/security/libcap/psx v1.2.73 -> v1.2.76

Previous release can be found at v0.22.0

urfave/cli (github.com/urfave/cli/v3)

v3.4.1

Compare Source

What's Changed

• Use recommended GitHub Actions runner labels by @​meatballhat in https://github.com/urfave/cli/pull/2181
• chore(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] inhttps://github.com/urfave/cli/pull/21799
• Document that v3 series is recommended for new development by @​meatballhat in https://github.com/urfave/cli/pull/2186

Full Changelog: urfave/cli@v3.4.0...v3.4.1

v3.4.0

Compare Source

What's Changed

• Export help display functions as variables to allow custom help display logic by @​almas-x in https://github.com/urfave/cli/pull/2150
• Invoke OnUsageError when missing required flags by @​MohitPanchariya in https://github.com/urfave/cli/pull/2161
• Fix:(issue_2169) Allow trim space for string slice flags by @​dearchap in https://github.com/urfave/cli/pull/2171
• Add example of flag groups to docs by @​jllovet in https://github.com/urfave/cli/pull/2178
• Add installation instructions for gfmrun by @​jllovet in https://github.com/urfave/cli/pull/2177
• Ensure public vars reference public types by @​meatballhat in https://github.com/urfave/cli/pull/2180

New Contributors

• @​almas-x made their first contribution in https://github.com/urfave/cli/pull/2150
• @​MohitPanchariya made their first contribution in https://github.com/urfave/cli/pull/2161
• @​jllovet made their first contribution in https://github.com/urfave/cli/pull/2178

Full Changelog: urfave/cli@v3.3.9...v3.4.0

v3.3.9

Compare Source

What's Changed

• Fix typos in documentation for customizations and full API example by @​amarjit03 in https://github.com/urfave/cli/pull/2165
• Update advanced.md by @​thetillhoff in https://github.com/urfave/cli/pull/2170

New Contributors

• @​amarjit03 made their first contribution in https://github.com/urfave/cli/pull/2165
• @​thetillhoff made their first contribution in https://github.com/urfave/cli/pull/2170

Full Changelog: urfave/cli@v3.3.8...v3.3.9

golang/go (go)

v1.25.0

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.8

Compare Source

Maintenance:

CL/696316: all: set Go language version to Go 1.23
CL/696315: types: regenerate using latest protobuf v32 release

kubernetes/apimachinery (k8s.io/apimachinery)

v0.33.4

Compare Source

v0.33.3

Compare Source

v0.33.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 6am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
github.com/containerd/console	v1.0.4 -> v1.0.5
github.com/containerd/containerd/v2	v2.0.5 -> v2.1.3
github.com/in-toto/in-toto-golang	v0.5.0 -> v0.9.0
github.com/secure-systems-lab/go-securesystemslib	v0.4.0 -> v0.6.0
github.com/tonistiigi/fsutil	v0.0.0-20250417144416-3f76f8130144 -> v0.0.0-20250605211040-586307ad452f
github.com/tonistiigi/go-csvvalue	v0.0.0-20240710180619-ddb21b71c0b4 -> v0.0.0-20240814133006-030d3b2625d0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.56.0 -> v0.60.0