Go: Bump github.com/moby/buildkit from 0.12.5 to 0.28.1#7359
Go: Bump github.com/moby/buildkit from 0.12.5 to 0.28.1#7359dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.12.5 to 0.28.1. - [Release notes](https://github.com/moby/buildkit/releases) - [Commits](moby/buildkit@v0.12.5...v0.28.1) --- updated-dependencies: - dependency-name: github.com/moby/buildkit dependency-version: 0.28.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
area/dependency
✅ Deploy Preview for odo-docusaurus-preview canceled.
|
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a redhat-developer member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
Bumps github.com/moby/buildkit from 0.12.5 to 0.28.1.
Release notes
Sourced from github.com/moby/buildkit's releases.
... (truncated)
Commits
45b038cgit: normalize and validate subdir pathsf5462c2git: harden ref arg handling71577a5source: extract SafeFileName into shared pathutil packagedf43783source/http: use os.Root for saved file operations9ce6f62source/http: sanitize downloaded filenames099cf80executor: validate container IDs centrally2642113Merge pull request #6610 from thaJeztah/0.28_backport_bump_patternmatcher802da78vendor: github.com/moby/patternmatcher v0.6.15245d86Merge pull request #6551 from tonistiigi/v0.28-cherry-picks90ee5devendor: update x/net to v0.51.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.