fix(deps): update module github.com/moby/buildkit to v0.27.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/moby/buildkit	v0.26.3 → v0.27.1

---

Release Notes

moby/buildkit (github.com/moby/buildkit)

v0.27.1

Compare Source

Welcome to the v0.27.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Sebastiaan van Stijn
• Tõnis Tiigi

Notable Changes

• Fix possible panic when verifying signature of GitHub Actions cache moby/policy-helpers#21

Dependency Changes

• github.com/klauspost/compress v1.18.2 -> v1.18.3
• github.com/moby/policy-helpers 9fcc1a9 -> eeebf1a

Previous release can be found at v0.27.0

v0.27.0

Compare Source

buildkit 0.27.0

Welcome to the v0.27.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Sebastiaan van Stijn
• Justin Chadwell
• Jonathan A. Sternberg
• David Karlsson
• Dawei Wei
• Natnael Gebremariam
• Aleksandr Karpinskii
• Amr Mahdi
• Brian Goff
• Joyal George K J
• Matt Coster
• Roberto Villarreal
• Rodolfo Carvalho
• Silvin Lubecki
• Tiger Kaovilai

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.21.0
• This is a first version of BuildKit with signed release images and artifacts built using Docker Github Builder
• Allow convert decisions from Session Source Policy implementations #​6427
• Github Cache backend now support optional signed cache that is cryptographically verified on import #​6397
• Provide a gateway interface for reading container filesystems during builds #​6262
• Push registry remote cache blobs in parallel for faster uploads #​6455
• Cache attestation chain pull-through responses for better performance #​6435
• Allow custom AuthConfig providers in client #​6408
• Surface policy deny messages in build errors #​6458
• Fix Git 2.52 support for matching some error conditions #​6452
• Expose the build reference in exporter buildinfo #​6424
• Improve expired keys handling in Git signature verification #​6412
• Cache gateway forwarder mounts and deduplicate snapshot responses #​6387
• Remove development gateway frontend options in favor of build-contexts #​6350
• Prevent status stream from closing too early by using an inactivity timeout #​6396
• Recover from history.db corruption #​6371
• Fix xattr copy failures on SELinux systems #​6015
• Fix error return when requesting attestation from non-index image #​6473
• Fix possible "digest not found" error when fetching attestation chain due to missing lease #​6464
• Fix Windows copy operations around protected files #​6369
• Fix possible race condition in gateway bridge forwarder #​6355
• Fix concurrency in source policy evaluation to prevent parallel panics #​6448

Dependency Changes

• cyphar.com/go-pathrs v0.2.1 new
• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.2 -> v1.20.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.11.0 -> v1.13.1
• github.com/AzureAD/microsoft-authentication-library-for-go v1.4.2 -> v1.6.0
• github.com/asaskevich/govalidator a9d515a new
• github.com/aws/aws-sdk-go-v2 v1.38.1 -> v1.39.6
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.0 -> v1.7.2
• github.com/aws/aws-sdk-go-v2/config v1.31.3 -> v1.31.20
• github.com/aws/aws-sdk-go-v2/credentials v1.18.7 -> v1.18.24
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.4 -> v1.18.13
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.4 -> v1.4.13
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.4 -> v2.7.13
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 -> v1.8.4
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.4 -> v1.4.12
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.0 -> v1.13.3
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.8.4 -> v1.9.3
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.4 -> v1.13.13
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.4 -> v1.19.12
• github.com/aws/aws-sdk-go-v2/service/s3 v1.87.1 -> v1.89.1
• github.com/aws/aws-sdk-go-v2/service/sso v1.28.2 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.34.0 -> v1.35.7
• github.com/aws/aws-sdk-go-v2/service/sts v1.38.0 -> v1.40.2
• github.com/aws/smithy-go v1.22.5 -> v1.23.2
• github.com/blang/semver v3.5.1 new
• github.com/cloudflare/circl v1.6.0 -> v1.6.1
• github.com/containerd/cgroups/v3 v3.1.0 -> v3.1.2
• github.com/containerd/containerd/v2 v2.2.0 -> v2.2.1
• github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.6 -> v2.1.7
• github.com/containerd/nydus-snapshotter v0.15.4 -> v0.15.10
• github.com/cyberphone/json-canonicalization 19d51d7 new
• github.com/cyphar/filepath-securejoin v0.6.0 new
• github.com/digitorus/pkcs7 3a137a8 new
• github.com/digitorus/timestamp 220c5c2 new
• github.com/docker/cli v28.5.0 -> v29.1.4
• github.com/docker/docker-credential-helpers v0.9.3 -> v0.9.5
• github.com/go-openapi/analysis v0.24.1 new
• github.com/go-openapi/errors v0.22.4 new
• github.com/go-openapi/jsonpointer v0.22.1 new
• github.com/go-openapi/jsonreference v0.21.3 new
• github.com/go-openapi/loads v0.23.2 new
• github.com/go-openapi/runtime v0.29.2 new
• github.com/go-openapi/spec v0.22.1 new
• github.com/go-openapi/strfmt v0.25.0 new
• github.com/go-openapi/swag v0.25.3 new
• github.com/go-openapi/swag/cmdutils v0.25.3 new
• github.com/go-openapi/swag/conv v0.25.3 new
• github.com/go-openapi/swag/fileutils v0.25.3 new
• github.com/go-openapi/swag/jsonname v0.25.3 new
• github.com/go-openapi/swag/jsonutils v0.25.3 new
• github.com/go-openapi/swag/loading v0.25.3 new
• github.com/go-openapi/swag/mangling v0.25.3 new
• github.com/go-openapi/swag/netutils v0.25.3 new
• github.com/go-openapi/swag/stringutils v0.25.3 new
• github.com/go-openapi/swag/typeutils v0.25.3 new
• github.com/go-openapi/swag/yamlutils v0.25.3 new
• github.com/go-openapi/validate v0.25.1 new
• github.com/go-viper/mapstructure/v2 v2.4.0 new
• github.com/google/certificate-transparency-go v1.3.2 new
• github.com/google/go-containerregistry v0.20.6 new
• github.com/grafana/regexp a468a5b new
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 -> v2.27.3
• github.com/in-toto/attestation v1.1.2 new
• github.com/klauspost/compress v1.18.1 -> v1.18.2
• github.com/moby/go-archive v0.1.0 -> v0.2.0
• github.com/moby/policy-helpers bcaa71c -> 9fcc1a9
• github.com/oklog/ulid v1.3.1 new
• github.com/opencontainers/runtime-spec v1.2.1 -> v1.3.0
• github.com/opencontainers/runtime-tools 0ea5ed0 -> edf4cb3
• github.com/opencontainers/selinux v1.12.0 -> v1.13.1
• github.com/prometheus/otlptranslator v0.0.2 new
• github.com/prometheus/procfs v0.16.1 -> v0.17.0
• github.com/sigstore/protobuf-specs v0.5.0 new
• github.com/sigstore/rekor v1.4.3 new
• github.com/sigstore/rekor-tiles/v2 v2.0.1 new
• github.com/sigstore/sigstore v1.10.0 new
• github.com/sigstore/sigstore-go b5fe07a new
• github.com/sigstore/timestamp-authority/v2 v2.0.2 new
• github.com/sirupsen/logrus v1.9.3 -> v1.9.4
• github.com/spdx/tools-golang v0.5.5 -> v0.5.7
• github.com/theupdateframework/go-tuf/v2 v2.3.0 new
• github.com/tonistiigi/fsutil 586307a -> a2aa163
• github.com/tonistiigi/go-actions-cache 378c5ed -> 54bc28c
• github.com/transparency-dev/formats 404c0d5 new
• github.com/transparency-dev/merkle v0.0.2 new
• go.mongodb.org/mongo-driver v1.17.6 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 -> v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.61.0 -> v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 -> v0.63.0
• go.opentelemetry.io/otel/exporters/prometheus v0.42.0 -> v0.60.0
• go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
• go.yaml.in/yaml/v3 v3.0.4 new
• golang.org/x/term v0.38.0 new
• google.golang.org/genproto/googleapis/api c5933d9 -> f26f940
• google.golang.org/genproto/googleapis/rpc c5933d9 -> f26f940
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.76 -> v1.2.77
• kernel.org/pub/linux/libs/security/libcap/psx v1.2.76 -> v1.2.77
• tags.cncf.io/container-device-interface v1.0.1 -> v1.1.0
• tags.cncf.io/container-device-interface/specs-go v1.0.0 -> v1.1.0

Previous release can be found at v0.26.3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.6 -> 1.25.0
github.com/moby/go-archive	v0.1.0 -> v0.2.0
github.com/sigstore/sigstore	v1.9.6-0.20251111174640-d8ab8afb1326 -> v1.10.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250929231259-57b25ae835d4 -> v0.0.0-20251103181224-f26f9409b101
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251022142026-3a174f9686a8 -> v0.0.0-20251103181224-f26f9409b101

[packit-as-a-service]

Ephemeral COPR build failed. @containers/packit-build please check.

[nalind]

This should be obsoleted by #6659, but not until we're ready go require Go 1.25.