chore(deps): weekly safe go updates · 3 packages

[mendral-app]

Packages bumped

Package	Old	New	Type
github.com/moby/buildkit	v0.31.1	v0.32.0	direct
github.com/mattn/go-isatty	v0.0.22	v0.0.24	indirect
golang.org/x/sys	v0.46.0	v0.47.0	indirect

Note: The go directive was bumped from 1.25.9 → 1.26.3 (required by buildkit v0.32.0). go mod tidy also removed the unused indirect github.com/gogo/protobuf.

Per-package details

github.com/moby/buildkit v0.31.1 → v0.32.0

Minor release (published 2026-07-27). Highlights:

• Built-in Dockerfile frontend updated to v1.26.0
• Attestations now default to OCI artifact descriptors
• Build steps can opt out of default OpenTelemetry tracing
• Bolt database performance improved
• Runc updated to v1.4.3
• All remote cache backends now use OCI mediatypes
• Various buildkitd fixes (SSH ports, lock contention, chunked encoding, cache misses)

Impact on this codebase: godolint uses buildkit exclusively for frontend/dockerfile/parser.Parse() and parser.Node. The parser package API is unchanged between v0.31 and v0.32 — all notable changes target the daemon, solver, and cache backends. No code changes required.

github.com/mattn/go-isatty v0.0.22 → v0.0.24

• v0.0.23: Add Haiku OS stub; lower Go directive to 1.20 for Windows 7 compat
• v0.0.24: Use TIOCGWINSZ instead of TCGETS to detect terminals — avoids false positives on non-tty devices that share the TCGETS ioctl number with OSS sound API

Impact on this codebase: Indirect dependency pulled by zerolog/go-colorable. The ioctl fix improves correctness of terminal detection on Linux. No code changes required.

golang.org/x/sys v0.46.0 → v0.47.0

Standard library extension module bump, pulled transitively by buildkit v0.32.0.

Impact on this codebase: Indirect only. No code changes required.

Files modified

• go.mod
• go.sum

Skipped this ecosystem

Package	Current	Reason
github.com/rs/zerolog	v1.35.1	Already at latest tagged version
github.com/urfave/cli/v3	v3.10.1	Already at latest tagged version
mvdan.cc/sh/v3	v3.13.1	Already at latest tagged version
github.com/containerd/typeurl/v2	v2.3.0	Already at latest tagged version
github.com/mattn/go-colorable	v0.1.15	Already at latest tagged version
github.com/planetscale/vtprotobuf	v0.6.1-0.20240319094008-0393e58bdf10	Pseudo-version; no newer tagged release
github.com/pkg/errors	v0.9.1	Already at latest tagged version

---

Supersedes: PR #11 (bumped buildkit to v0.31.2 and go-isatty to v0.0.23) and PR #10 (bumped golang.org/x/sys to v0.47.0) — both are subsumed by this PR's wider bumps.

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session