[renokeeper]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
buildx	uses-with	patch	v0.38.1 → v0.38.2

---

Release Notes

docker/buildx (buildx)

v0.38.2

Compare Source

Welcome to the v0.38.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn

Notable Changes

• Fix Bake filesystem entitlement checks when building multiple targets together so paths from every target are checked against the approved entitlements. GHSA-xg6v-cv2h-2w5h
• Fix Bake filesystem entitlement path boundaries so paths under the same parent directory that share the current working directory's basename prefix cannot bypass fs.read approval. GHSA-rghq-x9hf-hc3r

Dependency Changes

• github.com/containerd/containerd/v2 v2.4.1 -> v2.4.2
• github.com/klauspost/compress v1.20.1 -> v1.20.2
• github.com/moby/buildkit v0.34.0 -> v0.34.2
• github.com/tonistiigi/fsutil 83cac42 -> a72de9d
• go.yaml.in/yaml/v3 v3.0.5 -> v3.0.6

Previous release can be found at v0.38.1

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • "before 6am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[greptile-apps]

PR author is in the excluded authors list.