chore(deps): bump the moby group with 3 updates

[dependabot]

Bumps the moby group with 3 updates: github.com/docker/cli, github.com/moby/buildkit and github.com/moby/moby/client.

Updates github.com/docker/cli from 29.7.2+incompatible to 29.8.0+incompatible

Commits

• 88096ef Merge pull request #7288 from thaJeztah/bump_jose
• c50ce17 vendor: github.com/go-jose/go-jose/v4 v4.1.5
• cec24c7 Merge pull request #7285 from vvoland/update-docker
• d5ea3bd vendor: github.com/moby/moby/client v0.6.0
• 7cf09ba vendor: github.com/moby/moby/api v1.56.0
• 6239084 Merge pull request #7108 from zhangyoufu/umask
• 45a3e0b e2e/container: Skip umask test until engine support
• 79dd1f4 Merge pull request #7284 from thaJeztah/trust_bump
• 32bfe54 cmd/docker-trust: update dependencies
• d703697 cmd/docker-trust: fix tests
• Additional commits viewable in compare view

Updates github.com/moby/buildkit from 0.32.2 to 0.33.0

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.33.0

Welcome to the v0.33.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Matthieu MOREL
• eliuriegas
• Daniel Nephin
• Dawei Wei
• Guthrie McAfee Armstrong
• Jiří Moravčík
• Leo Li
• Ravi Arnan
• Shurong Cao
• Spencer G. Jones
• Vedant Madane

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.27.0 changelog
• Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #7074
• The maximum attestation size for exporters has been raised to 80 MiB. #7104
• Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #7039
• Buildctl now supports passing valueless build-args read from the environment. #7030
• Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #7022
• Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #6998
• Build history can now be disabled from daemon configuration #7040
• Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #7068
• MaxRegistryConcurrency now also applies to remote cache requests. #7049
• Windows containers now support RUN --mount=type=secret build secrets. #6944
• Fix possible "no active session for" error when running concurrent builds with remote cache #7047
• Fix possible "failed to apply diffs: snapshot does not exist" error #7035
• Fix possible context upload errors when context directory contains foreign characters. #6989
• Fix possible silently dropped cache link in remote cache exporter. #7053
• Fix xz archive unpacking silently skipping when xz binary was missing in environment. #7071
• Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #7072
• Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #7092

Dependency Changes

• cyphar.com/go-pathrs v0.2.1 -> v0.2.5

... (truncated)

Commits

• dddd562 Merge pull request #7105 from crazy-max/v0.33_picks_v0.33.0-rc2
• 3c05040 vendor: update moby/policy-helpers to dd6c5499c491
• ae09dd0 solver: avoid mutating exec args for QEMU
• bd1ac13 exporter: raise max attestation size to 80 MiB
• ccfc875 dockerfile: update version to 1.27
• eece108 Merge pull request #7080 from tonistiigi/dockerd-test-fix-v0.33
• d3f86c1 test: fix dockerd integration coverage
• b09f8f1 Merge pull request #6944 from rzlink/wcow-secret-mount
• bb80b2a Merge pull request #7078 from thaJeztah/bump_grpc
• 964cf3d vendor: google.golang.org/grpc v1.83.2
• Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.5.1 to 0.6.0

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.0

0.6.0

Changelog

• pkg/jsonmessage: add new WithMessagePrinter option to use a custom printer for messages. moby/moby#53489
• api: Bump to 1.56. moby/moby#53425
• minor cleanups, refactors. moby/moby#53509

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.0 (2013-08-22)

• Runtime: Load authConfig only when needed and fix useless WARNING

• Runtime: Add lxc-conf flag to allow custom lxc options

• Runtime: Fix race conditions in parallel pull
• Runtime: Improve CMD, ENTRYPOINT, and attach docs.

• Documentation: Small fix to docs regarding adding docker groups
• Documentation: Add MongoDB image example

• Builder: Add USER instruction do Dockerfile

• Documentation: updated default -H docs
• Remote API: Sort Images by most recent creation date.

• Builder: Add workdir support for the Buildfile
• Runtime: Add an option to set the working directory

• Runtime: Show tag used when image is missing

• Documentation: Update readme with dependencies for building
• Documentation: Add instructions for creating and using the docker group
• Remote API: Reworking opaque requests in registry module

• Runtime: Fix Graph ByParent() to generate list of child images per parent image.

• Runtime: Add Image name to LogEvent tests
• Documentation: Add sudo to examples and installation to documentation

• Hack: Bash Completion: Limit commands to containers of a relevant state

• Remote API: Add image name in /events
• Runtime: Apply volumes-from before creating volumes

• Runtime: Make docker run handle SIGINT/SIGTERM
• Runtime: Prevent crash when .dockercfg not readable

• Hack: Add docker dependencies coverage testing into docker-ci

• Runtime: Add -privileged flag and relevant tests, docs, and examples
• Packaging: Docker-brew 0.5.2 support and memory footprint reduction

• Runtime: Install script should be fetched over https, not http.

• Packaging: Add new docker dependencies into docker-ci
• Runtime: Use Go 1.1.2 for dockerbuilder
• Registry: Improve auth push
• Runtime: API, issue 1471: Use groups for socket permissions
• Documentation: PostgreSQL service example in documentation
• Contrib: bash completion script
• Tests: Improve TestKillDifferentUser to prevent timeout on buildbot
• Documentation: Fix typo in docs for docker run -dns
• Documentation: Adding a reference to ps -a

• Runtime: Correctly detect IPv4 forwarding
• Packaging: Revert "docker.upstart: avoid spawning a sh process"

• Runtime: Use ranged for loop on channels

• Runtime: Fix typo: fmt.Sprint -> fmt.Sprintf
• Tests: Fix typo in TestBindMounts (runContainer called without image)

• Runtime: add websocket support to /container//attach/ws
• Runtime: Mount /dev/shm as a tmpfs

• Builder: Only count known instructions as build steps
• Builder: Fix docker build and docker events output
• Runtime: switch from http to https for get.docker.io

• Tests: Improve TestGetContainersTop so it does not rely on sleep

• Packaging: Docker-brew and Docker standard library

• Testing: Add some tests in server and utils

... (truncated)

Commits

• f4a4f1c Bump to 0.6.0
• f925edd Merge pull request #1525 from griff/1503-fix
• 12715c8 Merge pull request #1609 from jpetazzo/release-docker-with-docker
• 326dadd Merge pull request #1565 from dotcloud/only_load_authconfig_when_needed
• a3510c9 Merge pull request #1560 from dotcloud/439-allow-lxc-args
• 262d57e Merge pull request #1623 from mhennings/1592-fix-race-conditions-in-parallel-...
• 551092f Add lxc-conf flag to allow custom lxc options
• 3f802f4 Fix race conditions in parallel pull
• 0b9c8e2 Merge pull request #1596 from metalivedev/1149-easyfixes
• 42fe550 Merge pull request #1614 from denibertovic/docs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions