[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
docker/buildx-bin	stage	patch	0.38.1 → 0.38.2

---

Release Notes

docker/buildx (docker/buildx-bin)

v0.38.2

Compare Source

Welcome to the v0.38.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn

Notable Changes

• Fix Bake filesystem entitlement checks when building multiple targets together so paths from every target are checked against the approved entitlements. GHSA-xg6v-cv2h-2w5h
• Fix Bake filesystem entitlement path boundaries so paths under the same parent directory that share the current working directory's basename prefix cannot bypass fs.read approval. GHSA-rghq-x9hf-hc3r

Dependency Changes

• github.com/containerd/containerd/v2 v2.4.1 -> v2.4.2
• github.com/klauspost/compress v1.20.1 -> v1.20.2
• github.com/moby/buildkit v0.34.0 -> v0.34.2
• github.com/tonistiigi/fsutil 83cac42 -> a72de9d
• go.yaml.in/yaml/v3 v3.0.5 -> v3.0.6

Previous release can be found at v0.38.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!