ci(deps): bump moby/buildkit from 0.16.0 to 0.17.0

[mazi-renovate]

This PR contains the following updates:

Package	Update	Change	OpenSSF
moby/buildkit	minor	v0.16.0 -> v0.17.0

---

Release Notes

moby/buildkit (moby/buildkit)

v0.17.0

Compare Source

Welcome to the v0.17.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• David Karlsson
• Justin Chadwell
• Talon Bowler
• Anthony Nandaa
• Akihiro Suda
• Shaun Thompson
• Austin Vazquez
• Billy Owire
• Eoin Farrell
• MohammadHasan Akbari
• Alberto Garcia Hierro
• Gabriel-Adrian Samfira
• Laurent Goderre
• Marat Radchenko
• Matt Rickard
• Paulo Sousa
• Sergio Garcez
• Silvin Lubecki
• castrombithisamm
• ryio1010

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.11.0 changelog
• Garbage collection policies and prune filters have been updated to be more flexible and allow more control over used storage. Users can now define storage controls based on how much empty space is available on disk and define reserved and maximum storage limits separately #​5359 #​5079
• FileOp.Copy now supports non-octal values for setting file mode with chmod #​5375
• Protobuf tooling has moved away from GoGo Protobuf. #​5356 #​5409 #​5396 #​5342
• Memory allocations, especially when uploading big build contexts or copying build results back to client, have been reduced #​5409 #​5442
• Allow Git builds from SHA references that are not part of a branch or tag #​5441
• Improve OpenTelemetry tracing for authentication routines #​5432
• HTTP requests from build steps now use BuildKit specific user-agent like the Container registry requests #​5407
• ExecOp build steps now supports setting expected non-zero exit codes #​5339
• Parameter options can now be passed to the SBOM scanner #​5372
• Determinism of LLB marshaling has been improved to reduce unnecessary cache lookups #​5374
• Completeness of history records is now validated at startup #​5378
• Debug address now supports new flight recorder endpoints #​5337
• Improve communication with registries that return empty authentication scope #​5321
• Fix Git builds with .git directory possibly not containing information about the cloned reference #​5444
• Fix an issue with FileOp copy with constant timestamps not working correctly for parent directories #​5461
• Fix accessing OCI layout from read-only filesystems not working does to file locks #​5452
• Fix gRPC h2 protocol identifier to comply with TLS-ALPN #​5419
• Fix error handling for requiring AppArmor profiles in unsupported system #​5373
• Fix possible panic from nil result conversion in solver #​5406
• Fix possible panic from triggered error handler #​5335
• Fix missing LLB input validation when checking build policies #​5362
• Fix possible "digest mismatch" error when using HTTP(s) build sources #​5343
• Fix possible file walking issue in Windows Containers when using certain mount structures #​5289

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.0 -> v1.11.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.1.0 -> v1.6.0
• github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0 -> v1.8.0
• github.com/AzureAD/microsoft-authentication-library-for-go v0.6.0 -> v1.2.2
• github.com/Microsoft/hcsshim v0.11.7 -> v0.12.5
• github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
• github.com/containerd/cgroups/v3 v3.0.2 new
• github.com/containerd/containerd v1.7.21 -> v1.7.22
• github.com/containerd/continuity v0.4.3 -> v0.4.4
• github.com/cpuguy83/go-md2man/v2 v2.0.4 -> v2.0.5
• github.com/docker/cli v27.2.1 -> v27.3.1
• github.com/docker/docker v27.2.1 -> v27.3.1
• github.com/golang-jwt/jwt/v5 v5.2.1 new
• github.com/klauspost/compress v1.17.9 -> v1.17.11
• github.com/moby/sys/mount v0.3.3 -> v0.3.4
• github.com/moby/sys/sequential v0.5.0 -> v0.6.0
• github.com/planetscale/vtprotobuf 0393e58 new
• github.com/tonistiigi/dchapes-mode ca0759f new
• github.com/tonistiigi/fsutil 91a3fc4 -> 397af53
• github.com/urfave/cli v1.22.15 -> v1.22.16
• go.etcd.io/bbolt v1.3.10 -> v1.3.11
• golang.org/x/exp 701f63a new
• google.golang.org/genproto/googleapis/api ef43131 -> ef581f9
• google.golang.org/genproto/googleapis/rpc ef43131 -> ef581f9
• google.golang.org/grpc v1.62.0 -> v1.66.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1 new

Previous release can be found at v0.16.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot. - View logs

[github-actions]

Latest commit:	62c6893 ( base: d14384b + head: a6819bf )
Status:	✅  Deploy successful!
Preview URL:	https://4a1cec05.github-test-15v.pages.dev
PR Preview URL:	https://pull-1032-merge.github-test-15v.pages.dev

View workflow logs
View Cloudflare logs