Merge pull request #4569 from containerd/dev

update runc (1.3.2), BuildKit (0.25.1), stargz-snapshotter (0.18.0), etc.

Author: AkihiroSuda

Dockerfile

@@ -18,13 +18,13 @@
 # Basic deps
 # @BINARY: the binary checksums are verified via Dockerfile.d/SHA256SUMS.d/<COMPONENT>-<VERSION>
 ARG CONTAINERD_VERSION=v2.2.0-rc.0@870bb7c80de5f4f69952b0188154ce61dbd4115a
-ARG RUNC_VERSION=v1.3.1@e6457afc48eff1ce22dece664932395026a7105e
+ARG RUNC_VERSION=v1.3.2@aeabe4e711d903ef0ea86a4155da0f9e00eabd29
 ARG CNI_PLUGINS_VERSION=v1.8.0@BINARY
 
 # Extra deps: Build
-ARG BUILDKIT_VERSION=v0.24.0@BINARY
+ARG BUILDKIT_VERSION=v0.25.1@BINARY
 # Extra deps: Lazy-pulling
-ARG STARGZ_SNAPSHOTTER_VERSION=v0.17.0@BINARY
+ARG STARGZ_SNAPSHOTTER_VERSION=v0.18.0@BINARY
 # Extra deps: Encryption
 ARG IMGCRYPT_VERSION=v2.0.1@c377ec98ff79ec9205eabf555ebd2ea784738c6c
 # Extra deps: Rootless
@@ -47,10 +47,10 @@ ARG GOMODJAIL_VERSION=v0.1.3@cea529ddd971b677c67d8af7e936fbc62b35b98c
 ARG GO_VERSION=1.25
 ARG UBUNTU_VERSION=24.04
 ARG CONTAINERIZED_SYSTEMD_VERSION=v0.1.1
-ARG GOTESTSUM_VERSION=v1.12.3
-ARG NYDUS_VERSION=v2.3.5
+ARG GOTESTSUM_VERSION=v1.13.0
+ARG NYDUS_VERSION=v2.3.9
 ARG SOCI_SNAPSHOTTER_VERSION=0.11.1
-ARG KUBO_VERSION=v0.37.0
+ARG KUBO_VERSION=v0.38.2
 
 FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.8.0@sha256:add602d55daca18914838a78221f6bbe4284114b452c86a48f96d59aeb00f5c6 AS xx
 

Dockerfile.d/SHA256SUMS.d/buildkit-v0.24.0

@@ -0,0 +1,2 @@
+85aa27c480fc9159705d21a3e66abe305f8dc708b8aeecd1e87bbc5c3de98642  buildkit-v0.25.1.linux-amd64.tar.gz
+b7ad3db5e886ef40a28974dc94217666054c147bd0e06e5f71420210c4b72fba  buildkit-v0.25.1.linux-arm64.tar.gz

Dockerfile.d/SHA256SUMS.d/buildkit-v0.25.1

@@ -0,0 +1,3 @@
+1baf2a04a0291187a0c3f5b99eed67172553dc65b9683736d3c9f3e5f7b179d9  stargz-snapshotter-v0.18.0-linux-amd64.tar.gz
+8d678d65dcfb73781af62dcb2c17ed80f045147b905d13e557396451e9d45eb4  stargz-snapshotter-v0.18.0-linux-arm64.tar.gz
+f1cf855870af16a653d8acb9daa3edf84687c2c05323cb958f078fb148af3eec  stargz-snapshotter.service