chore(deps): bump github.com/moby/buildkit from 0.30.0 to 0.31.1

[dependabot]

Bumps github.com/moby/buildkit from 0.30.0 to 0.31.1.

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.31.1

buildkit 0.31.1

Welcome to the v0.31.1 release of buildkit!

This is a security patch release with two low severity security fixes.

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi

Notable Changes

• Custom frontend could bypass Seccomp/AppArmor restrictions GHSA-7236-3392-c5c6
• Possible runtime DoS via unbounded group parsing GHSA-72x6-4j93-7w86

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.31.0

v0.31.0

buildkit 0.31.0

Welcome to the v0.31.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Bjorn Neergaard
• Jonathan A. Sternberg
• Akihiro Suda
• Bryce Gibson
• Ava Barron
• Brian Goff
• Jiří Moravčík
• ZRHann
• Kevin NZUGUEM

... (truncated)

Commits

• 673b7e0 Merge pull request #6896 from tonistiigi/v0.31.1-picks
• 81ce1c6 ci: tolerate empty test matrix includes
• 69a3924 user: limit size of parsed passwd/group files
• 3ea6dd0 security: validate exec security modes
• c411f0a Merge pull request #6876 from thaJeztah/bump_runc
• f292e5c Dockerfile: update runc binary to v1.3.6
• d31ba4a Merge pull request #6867 from okhowang/fix/platforms-data-race
• e819928 Merge pull request #6869 from crazy-max/update-policy-helpers
• e4d0dba chore: update generated files
• c13539b vendor: update policy-helpers to d5411a945cfc
• Additional commits viewable in compare view

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

This pull request updates github.com/moby/buildkit to version 0.31.1 to address critical security vulnerabilities, specifically Seccomp/AppArmor bypasses (GHSA-7236-3392-c5c6) and potential Denial of Service (DoS) attacks via group parsing (GHSA-72x6-4j93-7w86).

Codacy analysis indicates the changes are up to standards, with no new quality issues, complexity increases, or clones introduced. No blocking security flaws or logic bugs were identified within the dependency update itself. The update also includes a significant number of transitive bumps for the AWS SDK and OpenTelemetry libraries; while no issues were found, these changes require standard verification via the provided test plan.

Test suggestions

• Verify that the application compiles without errors after the dependency upgrades and removals (specifically gogo/protobuf).
• Verify that build operations using the Buildkit frontend function correctly with version 0.31.1.
• Verify that AWS-related features still function correctly with the bumped AWS SDK v2 versions.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify that the application compiles without errors after the dependency upgrades and removals (specifically gogo/protobuf).
2. Verify that build operations using the Buildkit frontend function correctly with version 0.31.1.
3. Verify that AWS-related features still function correctly with the bumped AWS SDK v2 versions.

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}