chore(deps): update dependency docker/buildx to v0.37.2 #222

Merged

murdoc merged 1 commit from renovate-docker-buildx-0-x into main

2026-10-01 05:13:15 +00:00

murdoc commented

2026-10-01 05:10:12 +00:00

Owner

This PR contains the following updates:

Package	Update	Change	OpenSSF
docker/buildx	patch	`0.37.1` → `0.37.2`

Release Notes

docker/buildx (docker/buildx)

`v0.37.2`

Compare Source

Welcome to the v0.37.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

CrazyMax
Sebastiaan van Stijn
Tõnis Tiigi

Notable Changes

Bake with --progress=rawjson now rejects ungranted entitlements instead of skipping the consent check. Grant the requested privileges explicitly with --allow. https://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682
Bake now requires fs.read approval for secret files selected by an implicit id fallback and for local OCI layout named contexts. https://github.com/docker/buildx/security/advisories/GHSA-p54p-jq4x-rc28

Dependency Changes

github.com/containerd/containerd/v2 v2.3.4 -> v2.3.6
github.com/moby/buildkit v0.33.0 -> v0.33.1
golang.org/x/crypto v0.55.0 -> v0.56.0

Previous release can be found at v0.37.1

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- "after 3am and before 6pm"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | OpenSSF | |---|---|---|---| | [docker/buildx](https://github.com/docker/buildx) | patch | `0.37.1` → `0.37.2` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/docker/buildx/badge)](https://securityscorecards.dev/viewer/?uri=github.com/docker/buildx) | --- ### Release Notes <details> <summary>docker/buildx (docker/buildx)</summary> ### [`v0.37.2`](https://github.com/docker/buildx/releases/tag/v0.37.2) [Compare Source](https://github.com/docker/buildx/compare/v0.37.1...v0.37.2) Welcome to the v0.37.2 release of buildx! Please try out the release binaries and report any issues at <https://github.com/docker/buildx/issues>. ##### Contributors - CrazyMax - Sebastiaan van Stijn - Tõnis Tiigi ##### Notable Changes - Bake with `--progress=rawjson` now rejects ungranted entitlements instead of skipping the consent check. Grant the requested privileges explicitly with `--allow`. <https://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682> - Bake now requires `fs.read` approval for secret files selected by an implicit `id` fallback and for local OCI layout named contexts. <https://github.com/docker/buildx/security/advisories/GHSA-p54p-jq4x-rc28> ##### Dependency Changes - **github.com/containerd/containerd/v2** v2.3.4 -> v2.3.6 - **github.com/moby/buildkit** v0.33.0 -> v0.33.1 - **golang.org/x/crypto** v0.55.0 -> v0.56.0 Previous release can be found at [v0.37.1](https://github.com/docker/buildx/releases/tag/v0.37.1) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "after 3am and before 6pm" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

murdoc added 1 commit

2026-10-01 05:10:13 +00:00