chore: update container images

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Type	Update	Change
cgr.dev/chainguard/wolfi-base		digest	8dd9cea -> a9547b6
moby/buildkit	service	minor	v0.17.2 -> v0.18.0

---

Release Notes

moby/buildkit (moby/buildkit)

v0.18.0

Compare Source

buildkit 0.18.0

Welcome to the v0.18.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Sebastiaan van Stijn
• David Karlsson
• Jonathan A. Sternberg
• Anthony Nandaa
• Austin Vazquez
• Erik Sipsma
• Marat Radchenko
• Brian Goff
• Erik Sjölund
• Justin Chadwell
• Shaun Thompson
• Tianon Gravi

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.12.0 changelog
• Runc container runtime has been updated to v1.2.2 #​5532
• Allow graceful daemon stop while there are active history event requests #​5522
• Improve performance of booting BuildKit with many local cache records (regression v0.16.0+) #​5550
• Improve stacktraces on cancellation errors #​5536
• Improve performance of recalculating content checksums after incremental context upload #​5521
• Fix leaving unreleased references behind after SBOM generation #​5511
• Make sure blob data is immediately released after deleting build history records #​5515
• Fix caching HTTP resources from servers that report the same ETag for different URLs #​5549
• Fix possible issue with uploaded build context when using old clients #​5517
• Fix old cache keys not being cleaned up by background garbage collection (worked for manual prune) #​5540
• Fix possible incorrect casing in provenance JSON #​5524
• Fix possible intermittent cancellation error when building from big build context due to internal gRPC bug #​5530
• Fix build errors on OpenBSD #​5542
• Fix possible issue when building from tarball URL on WCOW #​5523
• Fix warning of incompatible semconv configuration in OpenTelemetry #​5503 #​5501

Dependency Changes

• github.com/Microsoft/hcsshim v0.12.5 -> v0.12.8
• github.com/cenkalti/backoff/v4 v4.2.1 -> v4.3.0
• github.com/containerd/cgroups/v3 v3.0.2 -> v3.0.3
• github.com/containerd/containerd v1.7.22 -> v1.7.24
• github.com/containerd/continuity v0.4.4 -> v0.4.5
• github.com/containerd/errdefs v0.1.0 -> v0.3.0
• github.com/containerd/typeurl/v2 v2.2.0 -> v2.2.3
• github.com/docker/cli v27.3.1 -> v27.4.0-rc.2
• github.com/docker/docker v27.3.1 -> v27.4.0-rc.2
• github.com/go-logr/logr v1.4.1 -> v1.4.2
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 -> v2.20.0
• github.com/munnerz/goautoneg a7dc8b6 new
• github.com/prometheus/client_golang v1.17.0 -> v1.20.2
• github.com/prometheus/client_model v0.5.0 -> v0.6.1
• github.com/prometheus/common v0.44.0 -> v0.55.0
• github.com/tonistiigi/fsutil 397af53 -> 31cf1f4
• github.com/tonistiigi/go-actions-cache 58651d5 -> 394979b
• github.com/vishvananda/netlink v1.2.1-beta.2 -> v1.3.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 -> v0.53.0
• go.opentelemetry.io/otel v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/metric v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/sdk v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/sdk/metric v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/trace v1.21.0 -> v1.28.0
• go.opentelemetry.io/proto/otlp v1.0.0 -> v1.3.1
• google.golang.org/genproto/googleapis/api ef581f9 -> f6361c8
• google.golang.org/genproto/googleapis/rpc ef581f9 -> f6361c8

Previous release can be found at v0.17.2

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.