Skip to content

🎨 Renovate: Update moby/buildkit Docker tag to v0.31.2 - #379

Merged
SpiritLooper merged 1 commit into
mainfrom
renovate/moby-buildkit-0.x
Jul 16, 2026
Merged

🎨 Renovate: Update moby/buildkit Docker tag to v0.31.2#379
SpiritLooper merged 1 commit into
mainfrom
renovate/moby-buildkit-0.x

Conversation

@SpiritLooper

Copy link
Copy Markdown
Owner

This PR contains the following updates:

Package Update Change
moby/buildkit patch v0.31.1-rootlessv0.31.2-rootless

Release Notes

moby/buildkit (moby/buildkit)

v0.31.2

Compare Source

Welcome to the v0.31.2 release of buildkit!

This is a security patch release with four moderate and one low severity security fixes.

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors
  • Tõnis Tiigi
  • CrazyMax
  • Dawei Wei
Notable Changes
  • Git source checkout from a bundle file could lead to command injection. GHSA-hw3h-2gp9-cxpv
  • Possible panic when incorrect parameters sent from frontend. GHSA-qx3x-mv6r-52p6
  • LLB file operation can be tricked to remove /tmp directory contents. GHSA-32pv-7hq5-qhwq
  • Malicious client can bypass destination directory validation on local sources upload. GHSA-g2h8-426c-7976
  • WCOW cache mount source selector resolves NTFS junctions outside of cache root. GHSA-388v-wmr2-g2v2
  • Fix possible buildctl failures after successful builds over slow connhelper transports. #​6940
  • Fix possible daemon crash during concurrent builds. #​6916
Dependency Changes

Previous release can be found at v0.31.1


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@github-actions

Copy link
Copy Markdown
Contributor

Here is the diff to main:

--- k8s/apps/forgejo Kustomization: flux-system/forgejo HelmRelease: forgejo/buildkitd

+++ k8s/apps/forgejo Kustomization: flux-system/forgejo HelmRelease: forgejo/buildkitd

@@ -56,7 +56,7 @@

       env:
       - name: TZ
         value: Europe/Paris
-      image: moby/buildkit:v0.31.1-rootless
+      image: moby/buildkit:v0.31.2-rootless
       name: buildkitd
       service: 1234
       volumeMounts:

@SpiritLooper
SpiritLooper merged commit 7206d8a into main Jul 16, 2026
2 of 3 checks passed
@SpiritLooper
SpiritLooper deleted the renovate/moby-buildkit-0.x branch July 17, 2026 17:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants