ci: Bump Base Space

[weebo-update-cli]

Upgrade BaseSpace

Bump task version

1 file(s) updated with "TASKFILE_VERSION=\"v3.49.0\"": * che-base/Containerfile

v3.49.0

- Fixed included Taskfiles with `watch: true` not triggering watch mode when called from the root Taskfile (#2686, #1763 by @trulede).
- Fixed Remote Git Taskfiles failing on Windows due to backslashes in URL paths (#2656 by @Trim21).
- Fixed Remote Git Taskfiles timing out when resolving includes after accepting the trust prompt (#2669, #2668 by @vmaerten).
- Fixed unclear error message when Taskfile search stops at a directory ownership boundary (#2682, #1683 by @trulede).
- Fixed global variables from imported Taskfiles not resolving `ref:` values correctly (#2632 by @trulede).
- Every `.taskrc.yml` option can now be overridden with a `TASK_`-prefixed environment variable, making CI and container configuration easier (#2607, #1066 by @vmaerten).

Bump krew version

1 file(s) updated with "KREW_VERSION=\"v0.5.0\"": * che-base/Containerfile

v0.5.0

Installation
------------
To install this release, refer to the instructions at https://github.com/kubernetes-sigs/krew/blob/v0.5.0/README.md.

Release Assets
--------------
Artifacts for this release can be downloaded from the following links.
It is recommended to follow [installation instructions](https://github.com/kubernetes-sigs/krew/blob/v0.5.0/README.md)
and not using these artifacts directly.

- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-darwin_amd64.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-darwin_amd64.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-darwin_arm64.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-darwin_arm64.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_amd64.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_amd64.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_arm.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_arm.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_arm64.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_arm64.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_ppc64le.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_ppc64le.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-windows_amd64.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-windows_amd64.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew.exe
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew.exe.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew.yaml

Thanks to our contributors for helping out with v0.5.0:
- Tyler Auerbeck
- Danny Kulchinsky
- mattn
- ls-2018
- Mikel Olasagasti Uranga
- Ishaan Mittal
- Ahmet Alp Balkan

(krew v0.5.0 was tagged on Thu Feb 26 02:31:09 UTC 2026.)

<details>
<summary>Merged pull requests</summary>

* add optional netrc authentication support for plugin downloads [#897](https://github.com/kubernetes-sigs/krew/pull/897)
* docs for netrc auth [#899](https://github.com/kubernetes-sigs/krew/pull/899)
* Update to Go 1.25 and latest Go dependencies [#890](https://github.com/kubernetes-sigs/krew/pull/890)
* feat: speed up ci [#884](https://github.com/kubernetes-sigs/krew/pull/884)
* Fix: Non-constant format string in PrintWarning [#877](https://github.com/kubernetes-sigs/krew/pull/877)
* Bump GitHub actions to latest stable [#881](https://github.com/kubernetes-sigs/krew/pull/881)
* bump golangci-lint to v2 [#880](https://github.com/kubernetes-sigs/krew/pull/880)
* Add workaround for msys2/cygwin git [#873](https://github.com/kubernetes-sigs/krew/pull/873)
</details>

Bump cog version

1 file(s) updated with "COCOGITTO_VERSION=\"7.0.0\"": * che-base/Containerfile

7.0.0

This release comes with a monthly update note: https://github.com/cocogitto/cocogitto/discussions/552

#### Features
- 5b3fbaa6a06b88bf56359143da43bef036bd90b7 - (**changelog**) add support for GitHub specificgit trailers in changelog - @oknozor
- 94bbd56a3ffd6560885e0a54aa52da06112f8d4f - (**verify**) Add stdin support via --file - (#515) - Sangeeth Sudheer, Cursor, @oknozor
- ![BREAKING](https://img.shields.io/badge/BREAKING-red) b72dc7f6bc2855d3f399b00942a3de4f5cd6ad63 - implement package resolver for monorepo - @oknozor

- 5d41a778039fd6dfc4d6a494c0c45200102745aa - use dependency resolver for workspace dep resolution - @oknozor

- c39d20531a86e486f2cdc3a6afee90a6b459dae6 - add cocogitto dependency resolver - @oknozor

- 460d1ffb48296b424799518f0a537fdfb5a5eaf9 - make the repository a workspace - @oknozor

- 4ec1940aadbe9c3df49fce64a8ee0f33bd12ba1a - Update name of cog.toml field - Jonathan Andrew

- ac98431993159eb5e34d06c275eb0081a674f3ff - Consolidate pre-release CLI options - Jonathan Andrew

- 5391ec13bf894795e26352ee0fb8e2aa0feac7b9 - Allow pre_pattern to be specified in cog.toml - Jonathan Andrew

- a172168403c8b4c55fccb906546f6a7adc67a6d8 - Add --auto-pre and --pre-pattern flags - Jonathan Andrew

- fd4451ee16df7f164da403bd9806a22eec741a13 - Auto-increment pre-releases - Jonathan Andrew

#### Bug Fixes
- 11d0e05b668a7bd7715b822ca6f0893f0b9b2c60 - (**commit**) respect EDITOR variable with spaces on Windows - Ku6epXBOCTuK
- f74bb1b1c7e08b5eea256f5f8520cd3a6b1498e0 - (**test**) replace deprecated `cargo_bin` with macro - Ku6epXBOCTuK
- 7a3255347a1be0f98595e98e04b1880b08117045 - (**verify**) add scope validation to verify command - Ku6epXBOCTuK
- be572ec9c0f4053d7b9a886dc771cacc2747730a - add worktree support by using git_dir instead of repo dir - @oknozor

- f98f72820355d2adf8b67bdbfe4126da31851ee5 - resolve clippy warning about needless borrow - Ku6epXBOCTuK

- 80cc0c59bbe8d432adaa7585b6d5d9b0fc2b26c2 - version date in changelogs - @oknozor

- f12a389579c73bcb81f121721563c395e029b5ea - update default config for fixup commits - @oknozor

#### Performance Improvements
- bff9e69b8a589bcf625b220034264f654ca5205b - check all tags at once when building cache - @ba-lindner

#### Revert
- 3592d81caf6e02e4af493d6edb2fdb6ea3ecd9f5 - "chore: fix release 6.5" - @oknozor

#### Documentation
- 3e0943e1932fdb76c3d2666d9f0f80516a22470d - (**README**) add mise alternative method installation - jylenhof
- df1c6c51943093bcc3287f6ac41302818b234f33 - fix cog-doc generation - @oknozor

- ba227cc54bd478ea9eaa8dc6bdf244b85146f9e4 - deny missing docs fir the settings module - @oknozor

- ba94bb9526a9d736c6514f43f60a0029d7c090f8 - add docs for dependency resolution - @oknozor

- 1fc95cd43547cffa0bc83f485e2509ed88393f89 - replace expired discord invit with a permanent one - @oknozor

- cad56ce75c0480fbc633fe8f38a518a517fe898b - Update docs - Jonathan Andrew

- b71ae86661895476e02fce3950cdaf2d3c4dea4e - Update user guide - Jonathan Andrew

- a3b67241f10e25b040879a6b1ff1be089063b2aa - Fix documentation - Jonathan Andrew

- 609080185b1cc7892afca7f96827a994d6e9e59d - update changelog to the latest fashion - @oknozor

#### Continuous Integration
- acfc1ba6a9a7d05b1bab7264cfd0f4b2383df015 - add cargo package/publish to manual bump profile - @oknozor

- ef605a97cf435c201f4ac496feb0899383acb19c - only trigger release on global tags - @oknozor

- 38403d9efb1a2bbf2c7412e32f06890a765248da - adapt cog.toml to monorepo - @oknozor

- 3760a7ccc9399f04de56d3c7059ec6a20111e01c - update cog.toml with postbump hook - @oknozor

- 3525392b9a9ef377715ec1876f352e526f94e270 - add path filter to avoid uneeded builds on doc PRs - @oknozor

#### Refactoring
- fc8d522090013c67e659814839aa054483ecc3e6 - (**changelog**) simplify changelog template rendering - @oknozor
- c3faf3161d0e28f40d363d3cb750120862e305c4 - Use clap for argument conflicts/dependencies - Jonathan Andrew

- 0438ea6186c3dd1cc1b8768ae3926e5d2dfcd449 - Improve numeric identifier extraction - Jonathan Andrew

## What's Changed
* revert: "chore: fix release 6.5" by @oknozor in https://github.com/cocogitto/cocogitto/pull/503
* perf: check all tags at once when building cache by @ba-lindner in https://github.com/cocogitto/cocogitto/pull/509
* docs(README): add mise alternative method installation by @jylenhof in https://github.com/cocogitto/cocogitto/pull/507
* chore: update assert_cmd to 2.1 by @oknozor in https://github.com/cocogitto/cocogitto/pull/520
* fix: update default config for fixup commits by @oknozor in https://github.com/cocogitto/cocogitto/pull/521
* feat(verify): Add stdin support via --file - by @runofthemillgeek in https://github.com/cocogitto/cocogitto/pull/515
* ci: add path filter to avoid uneeded builds on doc PRs by @oknozor in https://github.com/cocogitto/cocogitto/pull/522
* Fix/version date in changelogs by @oknozor in https://github.com/cocogitto/cocogitto/pull/524
* docs: update changelog to the latest fashion by @oknozor in https://github.com/cocogitto/cocogitto/pull/525
* refactor(changelog): simplify changelog template rendering by @oknozor in https://github.com/cocogitto/cocogitto/pull/528
* feat(changelog): add support for GitHub specificgit trailers in chang… by @oknozor in https://github.com/cocogitto/cocogitto/pull/531
* feat: Auto-increment pre-releases by @jonnyandrew in https://github.com/cocogitto/cocogitto/pull/510
* fix(test): replace deprecated `cargo_bin` with macro by @Ku6epXBOCTuK in https://github.com/cocogitto/cocogitto/pull/539
* fix(commit): respect EDITOR variable with spaces on Windows by @Ku6epXBOCTuK in https://github.com/cocogitto/cocogitto/pull/538
* docs: replace expired discord invit with a permanent one by @oknozor in https://github.com/cocogitto/cocogitto/pull/540
* fix(verify): add scope validation to verify command by @Ku6epXBOCTuK in https://github.com/cocogitto/cocogitto/pull/541
* Fix/add workstree support by @oknozor in https://github.com/cocogitto/cocogitto/pull/548

## New Contributors
* @jylenhof made their first contribution in https://github.com/cocogitto/cocogitto/pull/507
* @runofthemillgeek made their first contribution in https://github.com/cocogitto/cocogitto/pull/515
* @jonnyandrew made their first contribution in https://github.com/cocogitto/cocogitto/pull/510
* @Ku6epXBOCTuK made their first contribution in https://github.com/cocogitto/cocogitto/pull/539

**Full Changelog**: https://github.com/cocogitto/cocogitto/compare/6.5.0...7.0.0

Bump buildkit version

1 file(s) updated with "BUILDKIT_VERSION=\"v0.28.0\"": * che-base/Containerfile

v0.28.0

buildkit 0.28.0

Welcome to the v0.28.0 release of buildkit!



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* Tõnis Tiigi
* CrazyMax
* Sebastiaan van Stijn
* Jonathan A. Sternberg
* Akihiro Suda
* Amr Mahdi
* Dan Duvall
* David Karlsson
* Jonas Geiler
* Kevin L.
* rsteube

### Notable Changes

- Builtin Dockerfile frontend has been updated to v1.22.0 [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.22.0)
- The default provenance format has been switched to SLSA v1.0 from the previous v0.2. The old format can still be generated by setting the `version` attribute. #6526
- Provenance attestation for an image can now be directly pulled via Source metadata request. #6516 #6514 #6537
- Pushing result images and exporting build cache now happens in parallel, for better performance. #6451
- LLB definition now supports two new Source types for accessing raw blobs from image registries and from OCI layouts. New sources use identifier protocols `docker-image+blob://` and `oci-layout+blob://`. #4286
- LLB API now supports custom checksum requests for HTTP sources, allowing fetching checksums for different algorithms than the default SHA256 and with optional suffixes. #6527 #6537
- LLB API now supports validating HTTP sources with PGP signatures, similarly to previous support for Git sources. #6527
- With the update to a newer version of the in-toto library, the provenance attestation key `InvocationID` has changed to `InvocationId` to strictly follow the SLSA spec. This change doesn't affect BuildKit/Buildx Golang tooling, but could affect 3rd party tools if they are using case-sensitive JSON parsing. #6533
- Embedded Qemu emulator support has been updated to v10.1.3 #6524
- Update BuildKit Cgroups implementation to work in (Kubernetes) environments that don't have their own Cgroup namespace. #6368
- Buildctl binary now supports bash completion. #6474
- PGP signature verification now supports combined public keys as input for defining the required signer. #6519
- Fix possible "failed to read expected number of bytes" error when reading attestation chains #6520
- Fix possible error from race condition when creating images in parallel #6477 


### Dependency Changes

* **github.com/aws/aws-sdk-go-v2**                                   v1.39.6 -> v1.41.1
* **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream**          v1.7.2 -> v1.7.4
* **github.com/aws/aws-sdk-go-v2/config**                            v1.31.20 -> v1.32.7
* **github.com/aws/aws-sdk-go-v2/credentials**                       v1.18.24 -> v1.19.7
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                  v1.18.13 -> v1.18.17
* **github.com/aws/aws-sdk-go-v2/internal/configsources**            v1.4.13 -> v1.4.17
* **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**             v2.7.13 -> v2.7.17
* **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding**  v1.13.3 -> v1.13.4
* **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**    v1.13.13 -> v1.13.17
* **github.com/aws/aws-sdk-go-v2/service/signin**                    v1.0.5 **_new_**
* **github.com/aws/aws-sdk-go-v2/service/sso**                       v1.30.3 -> v1.30.9
* **github.com/aws/aws-sdk-go-v2/service/ssooidc**                   v1.35.7 -> v1.35.13
* **github.com/aws/aws-sdk-go-v2/service/sts**                       v1.40.2 -> v1.41.6
* **github.com/aws/smithy-go**                                       v1.23.2 -> v1.24.0
* **github.com/cloudflare/circl**                                    v1.6.1 -> v1.6.3
* **github.com/containerd/nydus-snapshotter**                        v0.15.10 -> v0.15.11
* **github.com/containerd/stargz-snapshotter**                       v0.17.0 -> v0.18.2
* **github.com/containerd/stargz-snapshotter/estargz**               v0.17.0 -> v0.18.2
* **github.com/coreos/go-systemd/v22**                               v22.6.0 -> v22.7.0
* **github.com/docker/cli**                                          v29.1.4 -> v29.2.1
* **github.com/go-openapi/errors**                                   v0.22.4 -> v0.22.6
* **github.com/go-openapi/jsonpointer**                              v0.22.1 -> v0.22.4
* **github.com/go-openapi/jsonreference**                            v0.21.3 -> v0.21.4
* **github.com/go-openapi/spec**                                     v0.22.1 -> v0.22.3
* **github.com/go-openapi/swag**                                     v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/cmdutils**                            v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/conv**                                v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/fileutils**                           v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/jsonname**                            v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/jsonutils**                           v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/loading**                             v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/mangling**                            v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/netutils**                            v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/stringutils**                         v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/typeutils**                           v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/yamlutils**                           v0.25.3 -> v0.25.4
* **github.com/google/go-containerregistry**                         v0.20.6 -> v0.20.7
* **github.com/hanwen/go-fuse/v2**                                   v2.8.0 -> v2.9.0
* **github.com/in-toto/in-toto-golang**                              v0.9.0 -> v0.10.0
* **github.com/klauspost/compress**                                  v1.18.3 -> v1.18.4
* **github.com/moby/policy-helpers**                                 eeebf1a0ab2b -> 824747bfdd3c
* **github.com/morikuni/aec**                                        v1.0.0 -> v1.1.0
* **github.com/pelletier/go-toml/v2**                                v2.2.4 **_new_**
* **github.com/secure-systems-lab/go-securesystemslib**              v0.9.1 -> v0.10.0
* **github.com/sigstore/rekor**                                      v1.4.3 -> v1.5.0
* **github.com/sigstore/sigstore**                                   v1.10.0 -> v1.10.4
* **github.com/sigstore/sigstore-go**                                b5fe07a5a7d7 -> v1.1.4
* **github.com/sigstore/timestamp-authority/v2**                     v2.0.2 -> v2.0.3
* **github.com/theupdateframework/go-tuf/v2**                        v2.3.0 -> v2.4.1
* **google.golang.org/genproto/googleapis/api**                      f26f9409b101 -> ff82c1b0f217
* **google.golang.org/genproto/googleapis/rpc**                      f26f9409b101 -> 0a764e51fe1b
* **google.golang.org/grpc**                                         v1.76.0 -> v1.78.0

Previous release can be found at [v0.27.1](https://github.com/moby/buildkit/releases/tag/v0.27.1)

GitHub Action workflow link

---

Created automatically by Updatecli Options: Most of Updatecli configuration is done via its manifest(s). If you close this pull request, Updatecli will automatically reopen it, the next time it runs. If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made. Feel free to report any issues at github.com/updatecli/updatecli. If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!