Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 10, 2026

Bumps the go-dependencies group with 3 updates in the / directory: github.com/moby/buildkit, github.com/osscontainertools/kaniko and golang.org/x/sys.

Updates github.com/moby/buildkit from 0.26.3 to 0.27.1

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.27.1

Welcome to the v0.27.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax
  • Sebastiaan van Stijn
  • Tõnis Tiigi

Notable Changes

Dependency Changes

  • github.com/klauspost/compress v1.18.2 -> v1.18.3
  • github.com/moby/policy-helpers 9fcc1a9ec5c9 -> eeebf1a0ab2b

Previous release can be found at v0.27.0

v0.27.0

buildkit 0.27.0

Welcome to the v0.27.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi
  • CrazyMax
  • Akihiro Suda
  • Sebastiaan van Stijn
  • Justin Chadwell
  • Jonathan A. Sternberg
  • David Karlsson
  • Dawei Wei
  • Natnael Gebremariam
  • Aleksandr Karpinskii
  • Amr Mahdi
  • Brian Goff
  • Joyal George K J

... (truncated)

Commits
  • 5fbebf9 Merge pull request #6497 from crazy-max/v0.27_picks_v0.27.1
  • 6f52322 vendor: github.com/klauspost/compress v1.18.3
  • 4651691 vendor: update moby/policy-helpers to eeebf1a
  • 2bcd66d Merge pull request #6482 from tonistiigi/v0.27-picks-2
  • 6c53e9e forwarder: fix concurrent map write panic in the gateway forwarder
  • 64bc21a Merge pull request #6479 from tonistiigi/v0.27-picks
  • 6f380e6 vendor: align google.golang.org/genproto/xxx versions
  • a9c91f7 vendor: update go-actions-cache to 54bc28c2
  • b2fc80e Merge pull request #6473 from tonistiigi/attestation-index-error
  • a50e8a1 source: avoid error when attestation asked from non-index
  • Additional commits viewable in compare view

Updates github.com/osscontainertools/kaniko from 1.26.4 to 1.26.5

Release notes

Sourced from github.com/osscontainertools/kaniko's releases.

v1.26.5

Community Update

@​Bixilon made their first contribution in osscontainertools/kaniko#458

Also many thanks to @​BlackTurtle123 and @​xathon for reporting the issues fixed in this release.

What's Changed

Security

Bugfixes

Standardization

Usability

Maintenance

Changelog

Sourced from github.com/osscontainertools/kaniko's changelog.

v1.26.5 Release 2026-02-05

Community Update

@​Bixilon made their first contribution in osscontainertools/kaniko#458

Also many thanks to @​BlackTurtle123 and @​xathon for reporting the issues fixed in this release.

What's Changed

Security

Bugfixes

Standardization

Usability

Maintenance

Commits
  • c1b1a10 Merge pull request #494 from osscontainertools/release-v1.26.5
  • 73f505f release
  • db3f744 Merge pull request #491 from osscontainertools/dependabot/docker/deploy/golan...
  • 1cba7ca chore(deps): bump golang from 1.25.6 to 1.25.7 in /deploy
  • 361e584 mz440: cleanup kaniko workspace on failure too (#453)
  • b719f0b mz444: dynamically determine kanikoDir (#454)
  • 6834f18 Merge pull request #492 from osscontainertools/dependabot/github_actions/acti...
  • 5272764 chore(deps): bump imjasonh/setup-crane in the actions group
  • 1f41f10 Merge pull request #490 from osscontainertools/dependabot/go_modules/google.g...
  • 0738e0b chore(deps): bump google.golang.org/api from 0.264.0 to 0.265.0
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.40.0 to 0.41.0

Commits
  • fc646e4 cpu: use IsProcessorFeaturePresent to calculate ARM64 on windows
  • f11c7bb windows: add IsProcessorFeaturePresent and processor feature consts
  • d25a7aa unix: add IoctlSetString on all platforms
  • 6fb913b unix: return early on error in Recvmsg
  • See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
github.com/moby/buildkit [>= 0.20.a, < 0.21]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 3 updates in the / directory: [github.com/moby/buildkit](https://github.com/moby/buildkit), [github.com/osscontainertools/kaniko](https://github.com/osscontainertools/kaniko) and [golang.org/x/sys](https://github.com/golang/sys).


Updates `github.com/moby/buildkit` from 0.26.3 to 0.27.1
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.26.3...v0.27.1)

Updates `github.com/osscontainertools/kaniko` from 1.26.4 to 1.26.5
- [Release notes](https://github.com/osscontainertools/kaniko/releases)
- [Changelog](https://github.com/osscontainertools/kaniko/blob/main/CHANGELOG.md)
- [Commits](osscontainertools/kaniko@v1.26.4...v1.26.5)

Updates `golang.org/x/sys` from 0.40.0 to 0.41.0
- [Commits](golang/sys@v0.40.0...v0.41.0)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/osscontainertools/kaniko
  dependency-version: 1.26.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 10, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 10, 2026 23:12
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 10, 2026
@jabrown85 jabrown85 merged commit 242020f into main Feb 11, 2026
6 checks passed
@jabrown85 jabrown85 deleted the dependabot/go_modules/go-dependencies-b18bdbbfd6 branch February 11, 2026 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant