Bump github.com/moby/buildkit from 0.11.6 to 0.12.5

[antoinerg]

To address:

• CVE-2024-23652
• CVE-2024-23653

[tomkennedy513]

You can ignore the failing tests for building images. They are failing since the actions are running in a fork

[antoinerg]

You can ignore the failing tests for building images. They are failing since the actions are running in a fork

That's too bad. I was hoping to trigger the e2e tests to make sure the changes are ✔️

cc @tomkennedy513

[tomkennedy513]

You can ignore the failing tests for building images. They are failing since the actions are running in a fork

That's too bad. I was hoping to trigger the e2e tests to make sure the changes are ✔️

cc @tomkennedy513

Ya we always intended on having a pr flow that would build the images to a local registry and then do e2e but never got around to getting it implemented. I'm ok merging, but I was just curious about those 2 new requires that were added.

[antoinerg]

Ya we always intended on having a pr flow that would build the images to a local registry and then do e2e but never got around to getting it implemented. I'm ok merging, but I was just curious about those 2 new requires that were added.

I removed the block then ran go mod tidy again to produce b0d7900. They are new indirect dependencies!

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 67.19%. Comparing base (68156a7) to head (b0d7900).

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@               Coverage Diff                @@
##           release/v0.13.x    #1565   +/-   ##
================================================
  Coverage            67.19%   67.19%           
================================================
  Files                  140      140           
  Lines                 8827     8827           
================================================
  Hits                  5931     5931           
  Misses                2389     2389           
  Partials               507      507           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[antoinerg]

@tomkennedy513 thank you for the fast review. I'm not authorized to merge this pull request but please go ahead and merge it!

Is there a timeline for a new patch release of kpack that would include those changes?

Thanks again!

[tomkennedy513]

@tomkennedy513 thank you for the fast review. I'm not authorized to merge this pull request but please go ahead and merge it!

Is there a timeline for a new patch release of kpack that would include those changes?

Thanks again!

I can release it when the pipeline finishes. can you also cherry pick these changes to main and open a PR?

[antoinerg]

can you also cherry pick these changes to main and open a PR?

Absolutely! Please see #1566

[antoinerg]

I can release it when the pipeline finishes.

Awesome! 🚀

[tomkennedy513]

I can release it when the pipeline finishes.

Awesome! 🚀

0.13.3 is released! thank you for working on this