chore(deps): update moby/buildkit docker tag to v0.33.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
moby/buildkit	stage	minor	v0.32.2 → v0.33.0

---

Release Notes

moby/buildkit (moby/buildkit)

v0.33.0

Compare Source

Welcome to the v0.33.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Matthieu MOREL
• eliuriegas
• Daniel Nephin
• Dawei Wei
• Guthrie McAfee Armstrong
• Jiří Moravčík
• Leo Li
• Ravi Arnan
• Shurong Cao
• Spencer G. Jones
• Vedant Madane

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.27.0 changelog
• Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #​7074
• The maximum attestation size for exporters has been raised to 80 MiB. #​7104
• Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #​7039
• Buildctl now supports passing valueless build-args read from the environment. #​7030
• Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #​7022
• Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #​6998
• Build history can now be disabled from daemon configuration #​7040
• Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #​7068
• MaxRegistryConcurrency now also applies to remote cache requests. #​7049
• Windows containers now support RUN --mount=type=secret build secrets. #​6944
• Fix possible "no active session for" error when running concurrent builds with remote cache #​7047
• Fix possible "failed to apply diffs: snapshot does not exist" error #​7035
• Fix possible context upload errors when context directory contains foreign characters. #​6989
• Fix possible silently dropped cache link in remote cache exporter. #​7053
• Fix xz archive unpacking silently skipping when xz binary was missing in environment. #​7071
• Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #​7072
• Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #​7092

Dependency Changes

• cyphar.com/go-pathrs v0.2.1 -> v0.2.5
• github.com/Microsoft/hcsshim v0.15.0-rc.1 -> v0.15.0-rc.4
• github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.8
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14 -> v1.7.18
• github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.39
• github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.38
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.39
• github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.3.5 -> v0.3.10
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.39
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.39
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.40
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.18
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.24 -> v1.9.28
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.39
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.32 -> v1.19.36
• github.com/aws/aws-sdk-go-v2/service/s3 v1.106.0 -> v1.106.5
• github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.8
• github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.8
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.8
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.8
• github.com/aws/smithy-go v1.27.4 -> v1.27.10
• github.com/containerd/containerd/v2 v2.3.3 -> v2.3.4
• github.com/containerd/go-runc v1.1.0 -> v1.2.1
• github.com/containerd/platforms v1.0.0-rc.4 -> v1.0.0-rc.5
• github.com/cyphar/filepath-securejoin v0.6.0 -> v0.6.1
• github.com/docker/cli v29.6.2 -> v29.7.2
• github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
• github.com/go-logr/logr v1.4.3 -> v1.4.4
• github.com/klauspost/compress v1.19.1 -> v1.19.2
• github.com/moby/policy-helpers 856be88 -> dd6c549
• github.com/moby/sys/userns v0.1.0 -> v0.2.0
• github.com/pelletier/go-toml/v2 v2.3.1 -> v2.4.3
• github.com/prometheus/client_golang v1.23.2 -> v1.24.1
• github.com/prometheus/common v0.67.5 -> v0.70.1
• github.com/prometheus/procfs v0.20.1 -> v0.21.1
• github.com/sirupsen/logrus v1.9.4 -> v1.10.1
• github.com/stretchr/testify v1.11.1 -> v1.12.1
• github.com/tonistiigi/fsutil 6d9dc2e -> 83cac42
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
• go.opentelemetry.io/otel v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/prometheus v0.66.0 -> v0.67.0
• go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
• go.opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0
• go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
• golang.org/x/crypto v0.54.0 -> v0.55.0
• golang.org/x/mod v0.38.0 -> v0.40.0
• golang.org/x/net v0.57.0 -> v0.58.0
• golang.org/x/text v0.40.0 -> v0.41.0
• google.golang.org/genproto/googleapis/api 3dc84a4 -> 6ac0973
• google.golang.org/genproto/googleapis/rpc 3dc84a4 -> 6ac0973
• google.golang.org/grpc v1.82.1 -> v1.83.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 -> v1.6.2
• google.golang.org/protobuf f2248ac -> v1.36.12

Previous release can be found at v0.32.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.