ci: Bump Base Space

[weebo-update-cli]

Upgrade BaseSpace

Bump task version

1 file(s) updated with "TASKFILE_VERSION=\"v3.49.1\"": * che-base/Containerfile

v3.49.1

* Reverted #2632 for now, which caused some regressions. That change will be reworked. (#2720, #2722, #2723).

v3.49.0

- Fixed included Taskfiles with `watch: true` not triggering watch mode when called from the root Taskfile (#2686, #1763 by @trulede).
- Fixed Remote Git Taskfiles failing on Windows due to backslashes in URL paths (#2656 by @Trim21).
- Fixed Remote Git Taskfiles timing out when resolving includes after accepting the trust prompt (#2669, #2668 by @vmaerten).
- Fixed unclear error message when Taskfile search stops at a directory ownership boundary (#2682, #1683 by @trulede).
- Fixed global variables from imported Taskfiles not resolving `ref:` values correctly (#2632 by @trulede).
- Every `.taskrc.yml` option can now be overridden with a `TASK_`-prefixed environment variable, making CI and container configuration easier (#2607, #1066 by @vmaerten).

Bump krew version

1 file(s) updated with "KREW_VERSION=\"v0.5.0\"": * che-base/Containerfile

v0.5.0

Installation
------------
To install this release, refer to the instructions at https://github.com/kubernetes-sigs/krew/blob/v0.5.0/README.md.

Release Assets
--------------
Artifacts for this release can be downloaded from the following links.
It is recommended to follow [installation instructions](https://github.com/kubernetes-sigs/krew/blob/v0.5.0/README.md)
and not using these artifacts directly.

- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-darwin_amd64.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-darwin_amd64.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-darwin_arm64.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-darwin_arm64.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_amd64.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_amd64.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_arm.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_arm.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_arm64.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_arm64.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_ppc64le.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-linux_ppc64le.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-windows_amd64.tar.gz
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew-windows_amd64.tar.gz.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew.exe
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew.exe.sha256
- https://github.com/kubernetes-sigs/krew/releases/download/v0.5.0/krew.yaml

Thanks to our contributors for helping out with v0.5.0:
- Tyler Auerbeck
- Danny Kulchinsky
- mattn
- ls-2018
- Mikel Olasagasti Uranga
- Ishaan Mittal
- Ahmet Alp Balkan

(krew v0.5.0 was tagged on Thu Feb 26 02:31:09 UTC 2026.)

<details>
<summary>Merged pull requests</summary>

* add optional netrc authentication support for plugin downloads [#897](https://github.com/kubernetes-sigs/krew/pull/897)
* docs for netrc auth [#899](https://github.com/kubernetes-sigs/krew/pull/899)
* Update to Go 1.25 and latest Go dependencies [#890](https://github.com/kubernetes-sigs/krew/pull/890)
* feat: speed up ci [#884](https://github.com/kubernetes-sigs/krew/pull/884)
* Fix: Non-constant format string in PrintWarning [#877](https://github.com/kubernetes-sigs/krew/pull/877)
* Bump GitHub actions to latest stable [#881](https://github.com/kubernetes-sigs/krew/pull/881)
* bump golangci-lint to v2 [#880](https://github.com/kubernetes-sigs/krew/pull/880)
* Add workaround for msys2/cygwin git [#873](https://github.com/kubernetes-sigs/krew/pull/873)
</details>

Bump helm version

1 file(s) updated with "HELM_VERSION=\"v4.1.3\"": * che-base/Containerfile

v4.1.3

Helm v4.1.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

- Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com):
  -  for questions and just to hang out
  -  for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts: [ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0)

## Notable Changes

- Fixed a bug where --dry-run=server was not respecting generateName #31563
- Fixed a bug where empty CRD resources caused a crash. Now it prints an error #31578 
- Fixed a bug where OCI references with tag+digest failed with "invalid byte" error #31601
- Fixed a regression in Helm 4, where user-provided nil value was not preserved when chart has an empty map or no default for a key #31644 
- Fixed a regression since Helm 3.18.0 where Pulling charts from OCI repositories that use an index to store both Container Images and Helm Charts under the same tag failed #31776 
- Fixed a Helm 4 regression where gotemplate white space trimming directly after YAML doc separators, when present after postrendering, caused YAML file corruption #31868 
- Fixed a bug where `FailedStatus` is treated as a terminal state, causing upgrades to fail prematurely when cluster autoscalers needed time to provision nodes, or when pods were being deleted during rolling updates #31897 
- Fixed broken backwards compatibility for deprecated `--atomic` flag on install command #31901
- SDK: Fixed a Windows 'Access Deined' error if multiple processes try to download the same chart version concurrently #31128
- SDK: Fixed a bug where users did not receive any logs from the waiter, causing confusion as several minutes could pass with no user feedback #31717
- SDK: Fixed a bug where server-side apply defaults did not always match the CLI defaults #31732
- SDK: Fixed a Go import issue when downstream tooling attempted to vendor helm.sh/helm/v4/pkg/kube #31852 

## Installation and Upgrading

Download Helm v4.1.3. The common platform binaries are here:

- [MacOS amd64](https://get.helm.sh/helm-v4.1.3-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.1.3-darwin-amd64.tar.gz.sha256sum) / 742132e11cc08a81c97f70180cd714ae8376f8c896247a7b14ae1f51838b5a0b)
- [MacOS arm64](https://get.helm.sh/helm-v4.1.3-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.1.3-darwin-arm64.tar.gz.sha256sum) / 21c02fe2f7e27d08e24a6bf93103f9d2b25aab6f13f91814b2cfabc99b108a5e)
- [Linux amd64](https://get.helm.sh/helm-v4.1.3-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.1.3-linux-amd64.tar.gz.sha256sum) / 02ce9722d541238f81459938b84cf47df2fdf1187493b4bfb2346754d82a4700)
- [Linux arm](https://get.helm.sh/helm-v4.1.3-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v4.1.3-linux-arm.tar.gz.sha256sum) / 5ea614cd1562e682e213e07f3632b76f9d7b4b0917918e820c515a9030a59951)
- [Linux arm64](https://get.helm.sh/helm-v4.1.3-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.1.3-linux-arm64.tar.gz.sha256sum) / 5db45e027cc8de4677ec869e5d803fc7631b0bab1c1eb62ac603a62d22359a43)
- [Linux i386](https://get.helm.sh/helm-v4.1.3-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v4.1.3-linux-386.tar.gz.sha256sum) / 6cbf1f7cca1f4917a0d4a593a22b7c6ec88207e159196eac94f8eaaad8730431)
- [Linux loong64](https://get.helm.sh/helm-v4.1.3-linux-loong64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.1.3-linux-loong64.tar.gz.sha256sum) / <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.
RequestId:a97d6fdb-301e-0045-72a5-b120d7000000
Time:2026-03-11T22:20:16.6057319Z</Message></Error>)
- [Linux ppc64le](https://get.helm.sh/helm-v4.1.3-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v4.1.3-linux-ppc64le.tar.gz.sha256sum) / 413c21ea07f85beb952807b45cafbcd3bb0ff50aa3ed66e8e87b47bebf2312ce)
- [Linux s390x](https://get.helm.sh/helm-v4.1.3-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v4.1.3-linux-s390x.tar.gz.sha256sum) / c1a5c613429ca50e70ebed3e7535d272805ed4a7aa61c1af20d85121a07e7bcd)
- [Linux riscv64](https://get.helm.sh/helm-v4.1.3-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.1.3-linux-riscv64.tar.gz.sha256sum) / 0a0beb5b30c24947d71586a7c6bcd774e207ce42b072b046513cf0cff46106a8)
- [Windows amd64](https://get.helm.sh/helm-v4.1.3-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v4.1.3-windows-amd64.zip.sha256sum) / a69356c872fca122650e8c392341c5c49c19da004353514611118087ea2ee7cf)
- [Windows arm64](https://get.helm.sh/helm-v4.1.3-windows-arm64.zip) ([checksum](https://get.helm.sh/helm-v4.1.3-windows-arm64.zip.sha256sum) / 6b05bec8659014df56ede28068a216451b6401d0fbbfd2dadffbef908cd03ff5)

This release was signed with `208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155` and can be found at @scottrigby [keybase account](https://keybase.io/r6by). Please use the attached signatures for verifying this release using `gpg`.

The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`.

## What's Next

- 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
- 4.1.4 and 3.20.2 are the next patch releases and will be on April 8, 2026

## Changelog

- chore(defaults): server-side apply SDK defaults should always match the CLI defaults c94d381b03be117e7e57908edbf642104e00eb8f (Matheus Pimenta)
- whitespace b36d660fb7a5a162d59dcc7877af190b477ecf2b (Austin Abro)
- use logger with waiter 04a91af89e185fb2ff08592057726d54fdd22471 (Austin Abro)
- Remove refactorring changes from coalesce_test.go c3c57dba9878074a7642f2cdf583e809bba7f96e (Evans Mungai)
- Fix import d47cb2b7efaa26090510f4c2289127f40451062e (Evans Mungai)
- Update pkg/chart/common/util/coalesce_test.go 790bf929d5d341df663e0219338fcbf0d5a3119b (Evans Mungai)
- Fix lint warning f7cec12e23fe800495814432da4368b54c6d4552 (Evans Mungai)
- Preserve nil values in chart already d94a5c97cbff6b8e857c578ac7fd29407aa60907 (Evans Mungai)
- fix(values): preserve nil values when chart default is empty map 8c5fe4ef9781c714dc121288a4d499e62cc10bf8 (Evans Mungai)
- chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 217db28a4b75bff615275dc1e3975cf4d389c1d9 (dependabot[bot])
- Restored --atomic flag on install command 7cb43e0c58d8ccf18ca54eadb8d8d6cfb14c06f7 (Travis Leeden)
- fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394 5b26d4f1f99091262fef50ed51133e7ae8e3b011 (Terry Howe)
- fix: bump fluxcd/cli-utils to v0.37.2-flux.1 360c1315ba2d468fcff77193f52764c6ad912c90 (Terry Howe)
- chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.0 to 0.21.1 69a0a92ae3025cb00b480cb1084670d84b9fa018 (dependabot[bot])
- fix: insert newline after doc separators glued to content by template trimming b868e6a7cce696744d3f0c87e3f6bba6a779aff3 (Matheus Pimenta)
- fix: correct import comment in statuswait.go from v3 to v4 dbfbea91e34220911481f82fc6831284d954959a (rohansood10)
- chore(deps): bump the k8s-io group with 7 updates 099192c285233653032e13f557e1b4a7c31e046b (dependabot[bot])
- add image index test 4967ead76215e2ea694c37164d14520da9ba8bde (Pedro Tôrres)
- fix pulling charts from OCI indices 2fe6b106e6d515b6792d53aff517489ae97387be (Pedro Tôrres)
- fix: handle OCI digest algorithm prefix in chart downloader (#31601) e3e2d01ef45c6e4179d0536ea4a475f18fa23846 (Evans Mungai)
- fix(install): check nil for restClientGetter and fix tests c15e7114dc0a0f24e0fda65dff83e7a18e264f60 (Manuel Alonso)
- chore(refactor): better testing and functionality for installing crd df82e68ce1cac6825a59ed43d68d7560d6426979 (Manuel Alonso)
- fix(test): fix tests and check nil for restclient 4b896ca82fa827760086998d6521965e0ace059f (Manuel Alonso)
- fix(test): merge fix correctly 3fc79399c8af02b6704c10cba14be2ced9497cb2 (Manuel Alonso Gonzalez)
- fix(install): add more tests and check nil file data 6017d2b470b07a4f55efd2c55ac0745203ddcd0b (Manuel Alonso)
- fix(test): no check empty resources f451967ab5a5a9b1a26deb699bd1a1f4f2ba6b1e (Manuel Alonso)
- fix(install): check lenght and file nil, add tests fdadff59eb8c3552de76c7647a9c787c248cdbd2 (Manuel Alonso)
- fix(action): crd resources can be empty 10d606726560f1e813617c050c7b9cfbb8b0cb26 (Manuel Alonso)
- fix: casing issue fixed 0fec40f9b61a1dc5799e67bd4fb4ea4321cdd836 (Mujib Ahasan)
- fix: error handled correctly 263749874cb21ba31ebca17fe6c19fb3d0379417 (Mujib Ahasan)
- fix: doc string added 961d7d7cd6b39ccc3a63bce7bba505b94a9be384 (Mujib Ahasan)
- update: test coverage added for helper function validateNameAndGenerateName 29e45067f3f5a772c1400eb756605ba3bc615176 (Mujib Ahasan)
- update: helper function added for the business logic d55b0b9022017aa7a5005d1c6bdc049872bc37f7 (Mujib Ahasan)
- generateName is also considered in logic c1c090e8cead42ee16c36f987f2534c543b556fc (Mujib Ahasan)
- update: business logic respected for skipping object missing name 5e093136f456232f0c80c4d2481e5191b3c72530 (Mujib Ahasan)
- fixed: --dry-run=server now respect generateName f289d1605c9f02c843dd1b5dd03221fdb980f28e (Mujib Ahasan)
- fix(downloader): safely handle concurrent file writes on Windows bfac7393e4cc8b22a36fb015264d10ddb30e03da (Orgad Shaneh)

Bump cog version

1 file(s) updated with "COCOGITTO_VERSION=\"7.0.0\"": * che-base/Containerfile

7.0.0

This release comes with a monthly update note: https://github.com/cocogitto/cocogitto/discussions/552

#### Features
- 5b3fbaa6a06b88bf56359143da43bef036bd90b7 - (**changelog**) add support for GitHub specificgit trailers in changelog - @oknozor
- 94bbd56a3ffd6560885e0a54aa52da06112f8d4f - (**verify**) Add stdin support via --file - (#515) - Sangeeth Sudheer, Cursor, @oknozor
- ![BREAKING](https://img.shields.io/badge/BREAKING-red) b72dc7f6bc2855d3f399b00942a3de4f5cd6ad63 - implement package resolver for monorepo - @oknozor

- 5d41a778039fd6dfc4d6a494c0c45200102745aa - use dependency resolver for workspace dep resolution - @oknozor

- c39d20531a86e486f2cdc3a6afee90a6b459dae6 - add cocogitto dependency resolver - @oknozor

- 460d1ffb48296b424799518f0a537fdfb5a5eaf9 - make the repository a workspace - @oknozor

- 4ec1940aadbe9c3df49fce64a8ee0f33bd12ba1a - Update name of cog.toml field - Jonathan Andrew

- ac98431993159eb5e34d06c275eb0081a674f3ff - Consolidate pre-release CLI options - Jonathan Andrew

- 5391ec13bf894795e26352ee0fb8e2aa0feac7b9 - Allow pre_pattern to be specified in cog.toml - Jonathan Andrew

- a172168403c8b4c55fccb906546f6a7adc67a6d8 - Add --auto-pre and --pre-pattern flags - Jonathan Andrew

- fd4451ee16df7f164da403bd9806a22eec741a13 - Auto-increment pre-releases - Jonathan Andrew

#### Bug Fixes
- 11d0e05b668a7bd7715b822ca6f0893f0b9b2c60 - (**commit**) respect EDITOR variable with spaces on Windows - Ku6epXBOCTuK
- f74bb1b1c7e08b5eea256f5f8520cd3a6b1498e0 - (**test**) replace deprecated `cargo_bin` with macro - Ku6epXBOCTuK
- 7a3255347a1be0f98595e98e04b1880b08117045 - (**verify**) add scope validation to verify command - Ku6epXBOCTuK
- be572ec9c0f4053d7b9a886dc771cacc2747730a - add worktree support by using git_dir instead of repo dir - @oknozor

- f98f72820355d2adf8b67bdbfe4126da31851ee5 - resolve clippy warning about needless borrow - Ku6epXBOCTuK

- 80cc0c59bbe8d432adaa7585b6d5d9b0fc2b26c2 - version date in changelogs - @oknozor

- f12a389579c73bcb81f121721563c395e029b5ea - update default config for fixup commits - @oknozor

#### Performance Improvements
- bff9e69b8a589bcf625b220034264f654ca5205b - check all tags at once when building cache - @ba-lindner

#### Revert
- 3592d81caf6e02e4af493d6edb2fdb6ea3ecd9f5 - "chore: fix release 6.5" - @oknozor

#### Documentation
- 3e0943e1932fdb76c3d2666d9f0f80516a22470d - (**README**) add mise alternative method installation - jylenhof
- df1c6c51943093bcc3287f6ac41302818b234f33 - fix cog-doc generation - @oknozor

- ba227cc54bd478ea9eaa8dc6bdf244b85146f9e4 - deny missing docs fir the settings module - @oknozor

- ba94bb9526a9d736c6514f43f60a0029d7c090f8 - add docs for dependency resolution - @oknozor

- 1fc95cd43547cffa0bc83f485e2509ed88393f89 - replace expired discord invit with a permanent one - @oknozor

- cad56ce75c0480fbc633fe8f38a518a517fe898b - Update docs - Jonathan Andrew

- b71ae86661895476e02fce3950cdaf2d3c4dea4e - Update user guide - Jonathan Andrew

- a3b67241f10e25b040879a6b1ff1be089063b2aa - Fix documentation - Jonathan Andrew

- 609080185b1cc7892afca7f96827a994d6e9e59d - update changelog to the latest fashion - @oknozor

#### Continuous Integration
- acfc1ba6a9a7d05b1bab7264cfd0f4b2383df015 - add cargo package/publish to manual bump profile - @oknozor

- ef605a97cf435c201f4ac496feb0899383acb19c - only trigger release on global tags - @oknozor

- 38403d9efb1a2bbf2c7412e32f06890a765248da - adapt cog.toml to monorepo - @oknozor

- 3760a7ccc9399f04de56d3c7059ec6a20111e01c - update cog.toml with postbump hook - @oknozor

- 3525392b9a9ef377715ec1876f352e526f94e270 - add path filter to avoid uneeded builds on doc PRs - @oknozor

#### Refactoring
- fc8d522090013c67e659814839aa054483ecc3e6 - (**changelog**) simplify changelog template rendering - @oknozor
- c3faf3161d0e28f40d363d3cb750120862e305c4 - Use clap for argument conflicts/dependencies - Jonathan Andrew

- 0438ea6186c3dd1cc1b8768ae3926e5d2dfcd449 - Improve numeric identifier extraction - Jonathan Andrew

## What's Changed
* revert: "chore: fix release 6.5" by @oknozor in https://github.com/cocogitto/cocogitto/pull/503
* perf: check all tags at once when building cache by @ba-lindner in https://github.com/cocogitto/cocogitto/pull/509
* docs(README): add mise alternative method installation by @jylenhof in https://github.com/cocogitto/cocogitto/pull/507
* chore: update assert_cmd to 2.1 by @oknozor in https://github.com/cocogitto/cocogitto/pull/520
* fix: update default config for fixup commits by @oknozor in https://github.com/cocogitto/cocogitto/pull/521
* feat(verify): Add stdin support via --file - by @runofthemillgeek in https://github.com/cocogitto/cocogitto/pull/515
* ci: add path filter to avoid uneeded builds on doc PRs by @oknozor in https://github.com/cocogitto/cocogitto/pull/522
* Fix/version date in changelogs by @oknozor in https://github.com/cocogitto/cocogitto/pull/524
* docs: update changelog to the latest fashion by @oknozor in https://github.com/cocogitto/cocogitto/pull/525
* refactor(changelog): simplify changelog template rendering by @oknozor in https://github.com/cocogitto/cocogitto/pull/528
* feat(changelog): add support for GitHub specificgit trailers in chang… by @oknozor in https://github.com/cocogitto/cocogitto/pull/531
* feat: Auto-increment pre-releases by @jonnyandrew in https://github.com/cocogitto/cocogitto/pull/510
* fix(test): replace deprecated `cargo_bin` with macro by @Ku6epXBOCTuK in https://github.com/cocogitto/cocogitto/pull/539
* fix(commit): respect EDITOR variable with spaces on Windows by @Ku6epXBOCTuK in https://github.com/cocogitto/cocogitto/pull/538
* docs: replace expired discord invit with a permanent one by @oknozor in https://github.com/cocogitto/cocogitto/pull/540
* fix(verify): add scope validation to verify command by @Ku6epXBOCTuK in https://github.com/cocogitto/cocogitto/pull/541
* Fix/add workstree support by @oknozor in https://github.com/cocogitto/cocogitto/pull/548

## New Contributors
* @jylenhof made their first contribution in https://github.com/cocogitto/cocogitto/pull/507
* @runofthemillgeek made their first contribution in https://github.com/cocogitto/cocogitto/pull/515
* @jonnyandrew made their first contribution in https://github.com/cocogitto/cocogitto/pull/510
* @Ku6epXBOCTuK made their first contribution in https://github.com/cocogitto/cocogitto/pull/539

**Full Changelog**: https://github.com/cocogitto/cocogitto/compare/6.5.0...7.0.0

Bump buildkit version

1 file(s) updated with "BUILDKIT_VERSION=\"v0.28.0\"": * che-base/Containerfile

v0.28.0

buildkit 0.28.0

Welcome to the v0.28.0 release of buildkit!



Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

### Contributors

* Tõnis Tiigi
* CrazyMax
* Sebastiaan van Stijn
* Jonathan A. Sternberg
* Akihiro Suda
* Amr Mahdi
* Dan Duvall
* David Karlsson
* Jonas Geiler
* Kevin L.
* rsteube

### Notable Changes

- Builtin Dockerfile frontend has been updated to v1.22.0 [changelog](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.22.0)
- The default provenance format has been switched to SLSA v1.0 from the previous v0.2. The old format can still be generated by setting the `version` attribute. #6526
- Provenance attestation for an image can now be directly pulled via Source metadata request. #6516 #6514 #6537
- Pushing result images and exporting build cache now happens in parallel, for better performance. #6451
- LLB definition now supports two new Source types for accessing raw blobs from image registries and from OCI layouts. New sources use identifier protocols `docker-image+blob://` and `oci-layout+blob://`. #4286
- LLB API now supports custom checksum requests for HTTP sources, allowing fetching checksums for different algorithms than the default SHA256 and with optional suffixes. #6527 #6537
- LLB API now supports validating HTTP sources with PGP signatures, similarly to previous support for Git sources. #6527
- With the update to a newer version of the in-toto library, the provenance attestation key `InvocationID` has changed to `InvocationId` to strictly follow the SLSA spec. This change doesn't affect BuildKit/Buildx Golang tooling, but could affect 3rd party tools if they are using case-sensitive JSON parsing. #6533
- Embedded Qemu emulator support has been updated to v10.1.3 #6524
- Update BuildKit Cgroups implementation to work in (Kubernetes) environments that don't have their own Cgroup namespace. #6368
- Buildctl binary now supports bash completion. #6474
- PGP signature verification now supports combined public keys as input for defining the required signer. #6519
- Fix possible "failed to read expected number of bytes" error when reading attestation chains #6520
- Fix possible error from race condition when creating images in parallel #6477 


### Dependency Changes

* **github.com/aws/aws-sdk-go-v2**                                   v1.39.6 -> v1.41.1
* **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream**          v1.7.2 -> v1.7.4
* **github.com/aws/aws-sdk-go-v2/config**                            v1.31.20 -> v1.32.7
* **github.com/aws/aws-sdk-go-v2/credentials**                       v1.18.24 -> v1.19.7
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                  v1.18.13 -> v1.18.17
* **github.com/aws/aws-sdk-go-v2/internal/configsources**            v1.4.13 -> v1.4.17
* **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**             v2.7.13 -> v2.7.17
* **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding**  v1.13.3 -> v1.13.4
* **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**    v1.13.13 -> v1.13.17
* **github.com/aws/aws-sdk-go-v2/service/signin**                    v1.0.5 **_new_**
* **github.com/aws/aws-sdk-go-v2/service/sso**                       v1.30.3 -> v1.30.9
* **github.com/aws/aws-sdk-go-v2/service/ssooidc**                   v1.35.7 -> v1.35.13
* **github.com/aws/aws-sdk-go-v2/service/sts**                       v1.40.2 -> v1.41.6
* **github.com/aws/smithy-go**                                       v1.23.2 -> v1.24.0
* **github.com/cloudflare/circl**                                    v1.6.1 -> v1.6.3
* **github.com/containerd/nydus-snapshotter**                        v0.15.10 -> v0.15.11
* **github.com/containerd/stargz-snapshotter**                       v0.17.0 -> v0.18.2
* **github.com/containerd/stargz-snapshotter/estargz**               v0.17.0 -> v0.18.2
* **github.com/coreos/go-systemd/v22**                               v22.6.0 -> v22.7.0
* **github.com/docker/cli**                                          v29.1.4 -> v29.2.1
* **github.com/go-openapi/errors**                                   v0.22.4 -> v0.22.6
* **github.com/go-openapi/jsonpointer**                              v0.22.1 -> v0.22.4
* **github.com/go-openapi/jsonreference**                            v0.21.3 -> v0.21.4
* **github.com/go-openapi/spec**                                     v0.22.1 -> v0.22.3
* **github.com/go-openapi/swag**                                     v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/cmdutils**                            v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/conv**                                v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/fileutils**                           v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/jsonname**                            v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/jsonutils**                           v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/loading**                             v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/mangling**                            v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/netutils**                            v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/stringutils**                         v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/typeutils**                           v0.25.3 -> v0.25.4
* **github.com/go-openapi/swag/yamlutils**                           v0.25.3 -> v0.25.4
* **github.com/google/go-containerregistry**                         v0.20.6 -> v0.20.7
* **github.com/hanwen/go-fuse/v2**                                   v2.8.0 -> v2.9.0
* **github.com/in-toto/in-toto-golang**                              v0.9.0 -> v0.10.0
* **github.com/klauspost/compress**                                  v1.18.3 -> v1.18.4
* **github.com/moby/policy-helpers**                                 eeebf1a0ab2b -> 824747bfdd3c
* **github.com/morikuni/aec**                                        v1.0.0 -> v1.1.0
* **github.com/pelletier/go-toml/v2**                                v2.2.4 **_new_**
* **github.com/secure-systems-lab/go-securesystemslib**              v0.9.1 -> v0.10.0
* **github.com/sigstore/rekor**                                      v1.4.3 -> v1.5.0
* **github.com/sigstore/sigstore**                                   v1.10.0 -> v1.10.4
* **github.com/sigstore/sigstore-go**                                b5fe07a5a7d7 -> v1.1.4
* **github.com/sigstore/timestamp-authority/v2**                     v2.0.2 -> v2.0.3
* **github.com/theupdateframework/go-tuf/v2**                        v2.3.0 -> v2.4.1
* **google.golang.org/genproto/googleapis/api**                      f26f9409b101 -> ff82c1b0f217
* **google.golang.org/genproto/googleapis/rpc**                      f26f9409b101 -> 0a764e51fe1b
* **google.golang.org/grpc**                                         v1.76.0 -> v1.78.0

Previous release can be found at [v0.27.1](https://github.com/moby/buildkit/releases/tag/v0.27.1)

Bump gitleaks version

1 file(s) updated with "GITLEAKS_VERSION=\"8.30.1\"": * che-base/Containerfile

v8.30.1

## Changelog
* 83d9cd684c87d95d656c1458ef04895a7f1cbd8e update goreleaser
* 8d1f98c7967eb1e79cb44ac6241a124e145d2165 Removed unnecessary functions from report template (#2040)
* ca20267a84aa1fa2c2a9c1a13cdb50cafb48eeb0 its the simple things (#2020)
* b66ac75e4fa93d86d78fccd6e2f36d2c0698b2a2 build: switch to Go 1.24 (#2002)

GitHub Action workflow link

---

Created automatically by Updatecli Options: Most of Updatecli configuration is done via its manifest(s). If you close this pull request, Updatecli will automatically reopen it, the next time it runs. If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made. Feel free to report any issues at github.com/updatecli/updatecli. If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!