chore(deps): bump the go-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the go-dependencies group with 5 updates in the / directory:

Package	From	To
github.com/moby/buildkit	0.32.2	0.33.0
github.com/moby/moby/api	1.55.0	1.56.0
github.com/moby/moby/client	0.5.1	0.6.0
golang.org/x/crypto	0.55.0	0.57.0
golang.org/x/net	0.58.0	0.59.0

Updates github.com/moby/buildkit from 0.32.2 to 0.33.0

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.33.0

Welcome to the v0.33.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Matthieu MOREL
• eliuriegas
• Daniel Nephin
• Dawei Wei
• Guthrie McAfee Armstrong
• Jiří Moravčík
• Leo Li
• Ravi Arnan
• Shurong Cao
• Spencer G. Jones
• Vedant Madane

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.27.0 changelog
• Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #7074
• The maximum attestation size for exporters has been raised to 80 MiB. #7104
• Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #7039
• Buildctl now supports passing valueless build-args read from the environment. #7030
• Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #7022
• Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #6998
• Build history can now be disabled from daemon configuration #7040
• Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #7068
• MaxRegistryConcurrency now also applies to remote cache requests. #7049
• Windows containers now support RUN --mount=type=secret build secrets. #6944
• Fix possible "no active session for" error when running concurrent builds with remote cache #7047
• Fix possible "failed to apply diffs: snapshot does not exist" error #7035
• Fix possible context upload errors when context directory contains foreign characters. #6989
• Fix possible silently dropped cache link in remote cache exporter. #7053
• Fix xz archive unpacking silently skipping when xz binary was missing in environment. #7071
• Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #7072
• Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #7092

Dependency Changes

• cyphar.com/go-pathrs v0.2.1 -> v0.2.5

... (truncated)

Commits

• dddd562 Merge pull request #7105 from crazy-max/v0.33_picks_v0.33.0-rc2
• 3c05040 vendor: update moby/policy-helpers to dd6c5499c491
• ae09dd0 solver: avoid mutating exec args for QEMU
• bd1ac13 exporter: raise max attestation size to 80 MiB
• ccfc875 dockerfile: update version to 1.27
• eece108 Merge pull request #7080 from tonistiigi/dockerd-test-fix-v0.33
• d3f86c1 test: fix dockerd integration coverage
• b09f8f1 Merge pull request #6944 from rzlink/wcow-secret-mount
• bb80b2a Merge pull request #7078 from thaJeztah/bump_grpc
• 964cf3d vendor: google.golang.org/grpc v1.83.2
• Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.55.0 to 1.56.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.0

1.56.0

Changelog

• GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538
• POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463
• api/docs: sync API docs v1.25 - v1.55. moby/moby#53246
• api/swagger: Align Healthcheck name with Go struct. moby/moby#53567
• api/types/plugin: Deprecated plugin.Privileges sorting methods in favor of slices.SortFunc. moby/moby#53511
• api/types/plugin: fix Privileges Swap implementation. moby/moby#53510
• api: Bump to 1.56. moby/moby#53425
• api: document Task.NetworksAttachments in the swagger definition. moby/moby#53082
• api: remove gotest.tools from tests. moby/moby#53535
• api: swagger: Use int64 for build query params. moby/moby#53520
• api: use blackbox testing. moby/moby#53525
• Fix API reference documenting an unsupported names filter for GET /configs. moby/moby#53447

Commits

• 9b2179d Merge pull request #53572 from vvoland/api-docs-cut
• 575cf82 Merge pull request #53571 from thaJeztah/bump_tools
• 20beedb api/docs: Cut v1.56
• bb86302 Merge pull request #53569 from vvoland/afvsock-lsm
• 65be55a Merge pull request #53513 from thaJeztah/daemon_fix_list
• 0af79c4 Merge pull request #53570 from vvoland/process-release
• 7d1ce6a Merge pull request #53568 from renovate-bot/renovate/github.com-mdlayher-sock...
• 0df1a00 Dockerfile: update cli v29.7.2, compose v5.5.1, buildx v0.37.0
• e1d06bd Drop replace rules
• b40d37e Merge pull request #53359 from vvoland/ext-namegenerator
• Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.5.1 to 0.6.0

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.0

0.6.0

Changelog

• pkg/jsonmessage: add new WithMessagePrinter option to use a custom printer for messages. moby/moby#53489
• api: Bump to 1.56. moby/moby#53425
• minor cleanups, refactors. moby/moby#53509

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.0 (2013-08-22)

• Runtime: Load authConfig only when needed and fix useless WARNING

• Runtime: Add lxc-conf flag to allow custom lxc options

• Runtime: Fix race conditions in parallel pull
• Runtime: Improve CMD, ENTRYPOINT, and attach docs.

• Documentation: Small fix to docs regarding adding docker groups
• Documentation: Add MongoDB image example

• Builder: Add USER instruction do Dockerfile

• Documentation: updated default -H docs
• Remote API: Sort Images by most recent creation date.

• Builder: Add workdir support for the Buildfile
• Runtime: Add an option to set the working directory

• Runtime: Show tag used when image is missing

• Documentation: Update readme with dependencies for building
• Documentation: Add instructions for creating and using the docker group
• Remote API: Reworking opaque requests in registry module

• Runtime: Fix Graph ByParent() to generate list of child images per parent image.

• Runtime: Add Image name to LogEvent tests
• Documentation: Add sudo to examples and installation to documentation

• Hack: Bash Completion: Limit commands to containers of a relevant state

• Remote API: Add image name in /events
• Runtime: Apply volumes-from before creating volumes

• Runtime: Make docker run handle SIGINT/SIGTERM
• Runtime: Prevent crash when .dockercfg not readable

• Hack: Add docker dependencies coverage testing into docker-ci

• Runtime: Add -privileged flag and relevant tests, docs, and examples
• Packaging: Docker-brew 0.5.2 support and memory footprint reduction

• Runtime: Install script should be fetched over https, not http.

• Packaging: Add new docker dependencies into docker-ci
• Runtime: Use Go 1.1.2 for dockerbuilder
• Registry: Improve auth push
• Runtime: API, issue 1471: Use groups for socket permissions
• Documentation: PostgreSQL service example in documentation
• Contrib: bash completion script
• Tests: Improve TestKillDifferentUser to prevent timeout on buildbot
• Documentation: Fix typo in docs for docker run -dns
• Documentation: Adding a reference to ps -a

• Runtime: Correctly detect IPv4 forwarding
• Packaging: Revert "docker.upstart: avoid spawning a sh process"

• Runtime: Use ranged for loop on channels

• Runtime: Fix typo: fmt.Sprint -> fmt.Sprintf
• Tests: Fix typo in TestBindMounts (runContainer called without image)

• Runtime: add websocket support to /container//attach/ws
• Runtime: Mount /dev/shm as a tmpfs

• Builder: Only count known instructions as build steps
• Builder: Fix docker build and docker events output
• Runtime: switch from http to https for get.docker.io

• Tests: Improve TestGetContainersTop so it does not rely on sleep

• Packaging: Docker-brew and Docker standard library

• Testing: Add some tests in server and utils

... (truncated)

Commits

• f4a4f1c Bump to 0.6.0
• f925edd Merge pull request #1525 from griff/1503-fix
• 12715c8 Merge pull request #1609 from jpetazzo/release-docker-with-docker
• 326dadd Merge pull request #1565 from dotcloud/only_load_authconfig_when_needed
• a3510c9 Merge pull request #1560 from dotcloud/439-allow-lxc-args
• 262d57e Merge pull request #1623 from mhennings/1592-fix-race-conditions-in-parallel-...
• 551092f Add lxc-conf flag to allow custom lxc options
• 3f802f4 Fix race conditions in parallel pull
• 0b9c8e2 Merge pull request #1596 from metalivedev/1149-easyfixes
• 42fe550 Merge pull request #1614 from denibertovic/docs
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.57.0

Commits

• 3f62bf1 go.mod: update golang.org/x dependencies
• 86efde5 ssh: reject unexpected message types on established channels
• a6cdac6 ssh: drop traffic on undecided channels
• 39dc44e ssh: don't skip the source-address critical option in CheckCert
• afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
• 89f4e9b x509roots/fallback: update bundle
• 71488c4 ssh/knownhosts: compare only public key portions for revocation
• 82adefa ssh: synchronize unexpected response test
• c757c98 all: upgrade go directive to at least 1.26.0 [generated]
• 593c81a ssh: correctly ignore pre-banner lines
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.58.0 to 0.59.0

Commits

• 540d04c go.mod: update golang.org/x dependencies
• 20eef7f quic: clear fast-path receive buffer on stream reset
• c23af1b internal/http3: fix compilation error due to missed symbol name update
• eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
• 12e0501 internal/http3: server header size limits
• d89285e quic: add Stream.StopSending, and rework stream/application errors
• d34deae quic: ensure Endpoint.Close waits for connection loops to exit
• 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
• b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
• 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions