Repository: buildpacks/lifecycle
Pull request #1373 (2024-07-08 23:04:21)

Bump the go-dependencies group across 1 directory with 6 updates
Bumps the go-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/GoogleContainerTools/kaniko](https://github.com/GoogleContainerTools/kaniko) | `1.23.0` | `1.23.1` |
| [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.17` | `1.7.19` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.19.1` | `0.20.0` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.13.2` | `0.14.1` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.20.0` | `0.22.0` |


Updates `github.com/GoogleContainerTools/kaniko` from 1.23.0 to 1.23.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/GoogleContainerTools/kaniko/releases">github.com/GoogleContainerTools/kaniko's releases</a>.</em></p>
<blockquote>
<h1>v1.23.1 Release 2024-06-07</h1>
<p>The executor images in this release are:</p>
<pre><code>gcr.io/kaniko-project/executor:v1.23.1
gcr.io/kaniko-project/executor:latest
</code></pre>
<p>The debug images are available at:</p>
<pre><code>gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.23.1-debug
</code></pre>
<p>The slim executor images which don't contain any authentication binaries are available at:</p>
<pre><code>gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.23.1-slim
</code></pre>
<p>Highlights:</p>
<p>This patch release reverts recently changed behaviour it so that --no-push properly still pushes intermediate cache layers.  Additionally documentation around the --no-push and --no-push-cache flag have been added to make the expected behaviour more clear.  Additionally numerous dependencies have been updated.</p>
<p>Fixes:</p>
<ul>
<li>fix: Enable pushing cache with --no-push <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3181">#3181</a></li>
</ul>
<p>Docs Updates:</p>
<ul>
<li>docs: document --no-push-cache flag in README.md <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3188">#3188</a></li>
</ul>
<p>Dependency Updates::</p>
<ul>
<li>chore(deps): bump google.golang.org/api from 0.181.0 to 0.182.0 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3187">#3187</a></li>
<li>chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.17 to 1.16.21 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3179">#3179</a></li>
<li>chore(deps): bump google.golang.org/api from 0.180.0 to 0.181.0 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3170">#3170</a></li>
<li>chore(deps): bump google-github-actions/auth from 2.1.2 to 2.1.3 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3168">#3168</a></li>
<li>chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.53.2 to 1.54.2 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3169">#3169</a></li>
<li>chore(deps): bump cloud.google.com/go/storage from 1.40.0 to 1.41.0 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3171">#3171</a></li>
<li>chore(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3172">#3172</a></li>
<li>chore(deps): bump github.com/docker/docker from 26.1.2+incompatible to 26.1.3+incompatible <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3173">#3173</a></li>
</ul>
<p>Huge thank you for this release towards our contributors:</p>
<ul>
<li>Aaron Prindle</li>
<li>dependabot[bot]</li>
<li>Leo Palmer Sunmo</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/GoogleContainerTools/kaniko/blob/main/CHANGELOG.md">github.com/GoogleContainerTools/kaniko's changelog</a>.</em></p>
<blockquote>
<h1>v1.23.1 Release 2024-06-07</h1>
<p>The executor images in this release are:</p>
<pre><code>gcr.io/kaniko-project/executor:v1.23.1
gcr.io/kaniko-project/executor:latest
</code></pre>
<p>The debug images are available at:</p>
<pre><code>gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.23.1-debug
</code></pre>
<p>The slim executor images which don't contain any authentication binaries are available at:</p>
<pre><code>gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.23.1-slim
</code></pre>
<ul>
<li>Enable pushing cache with --no-push <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3181">#3181</a></li>
<li>docs: document --no-push-cache flag in README.md <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3188">#3188</a></li>
<li>chore(deps): bump google.golang.org/api from 0.181.0 to 0.182.0 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3187">#3187</a></li>
<li>chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.17 to 1.16.21 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3179">#3179</a></li>
<li>chore(deps): bump google.golang.org/api from 0.180.0 to 0.181.0 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3170">#3170</a></li>
<li>chore(deps): bump google-github-actions/auth from 2.1.2 to 2.1.3 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3168">#3168</a></li>
<li>chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.53.2 to 1.54.2 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3169">#3169</a></li>
<li>chore(deps): bump cloud.google.com/go/storage from 1.40.0 to 1.41.0 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3171">#3171</a></li>
<li>chore(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17 <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3172">#3172</a></li>
<li>chore(deps): bump github.com/docker/docker from 26.1.2+incompatible to 26.1.3+incompatible <a href="https://redirect.github.com/GoogleContainerTools/kaniko/pull/3173">#3173</a></li>
</ul>
<p>Huge thank you for this release towards our contributors:</p>
<ul>
<li>Aaron Prindle</li>
<li>dependabot[bot]</li>
<li>Leo Palmer Sunmo</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/GoogleContainerTools/kaniko/commit/c93ecd3120826820e948738c6bc34eaa825c27a2"><code>c93ecd3</code></a> chore(release): release v1.23.1 (<a href="https://redirect.github.com/GoogleContainerTools/kaniko/issues/3189">#3189</a>)</li>
<li><a href="https://github.com/GoogleContainerTools/kaniko/commit/f087f4ac248434044f4b96c8bb4c199a50143dd5"><code>f087f4a</code></a> docs: document --no-push-cache flag in README.md (<a href="https://redirect.github.com/GoogleContainerTools/kaniko/issues/3188">#3188</a>)</li>
<li><a href="https://github.com/GoogleContainerTools/kaniko/commit/6a340c6a1f6eaf0c0dce8ec433a28e5bb0908fa5"><code>6a340c6</code></a> Enable pushing cache with --no-push (<a href="https://redirect.github.com/GoogleContainerTools/kaniko/issues/3181">#3181</a>)</li>
<li><a href="https://github.com/GoogleContainerTools/kaniko/commit/942fbe65e8d9186a85e6fb6c2e303b32457d7e93"><code>942fbe6</code></a> chore(deps): bump google.golang.org/api from 0.181.0 to 0.182.0 (<a href="https://redirect.github.com/GoogleContainerTools/kaniko/issues/3187">#3187</a>)</li>
<li><a href="https://github.com/GoogleContainerTools/kaniko/commit/f671fca1f1ce08b1a50241cd597f41a712235388"><code>f671fca</code></a> chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (<a href="https://redirect.github.com/GoogleContainerTools/kaniko/issues/3179">#3179</a>)</li>
<li><a href="https://github.com/GoogleContainerTools/kaniko/commit/9c08f1cb04f733c145adb788c3441b84d4457141"><code>9c08f1c</code></a> chore(deps): bump google.golang.org/api from 0.180.0 to 0.181.0 (<a href="https://redirect.github.com/GoogleContainerTools/kaniko/issues/3170">#3170</a>)</li>
<li><a href="https://github.com/GoogleContainerTools/kaniko/commit/823763267a53c6b03fdd2e766eab08819b810fe1"><code>8237632</code></a> chore(deps): bump google-github-actions/auth from 2.1.2 to 2.1.3 (<a href="https://redirect.github.com/GoogleContainerTools/kaniko/issues/3168">#3168</a>)</li>
<li><a href="https://github.com/GoogleContainerTools/kaniko/commit/5d1c088e67d4e325f3fac32bdae66cde2f824f9f"><code>5d1c088</code></a> chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (<a href="https://redirect.github.com/GoogleContainerTools/kaniko/issues/3169">#3169</a>)</li>
<li><a href="https://github.com/GoogleContainerTools/kaniko/commit/b64e9a8ebd851e207521e72d2b9f747ef32769bd"><code>b64e9a8</code></a> chore(deps): bump cloud.google.com/go/storage from 1.40.0 to 1.41.0 (<a href="https://redirect.github.com/GoogleContainerTools/kaniko/issues/3171">#3171</a>)</li>
<li><a href="https://github.com/GoogleContainerTools/kaniko/commit/96fa5ff99ab3df417c098e3bd1da26097faf3277"><code>96fa5ff</code></a> chore(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17 (<a href="https://redirect.github.com/GoogleContainerTools/kaniko/issues/3172">#3172</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/GoogleContainerTools/kaniko/compare/v1.23.0...v1.23.1">compare view</a></li>
</ul>
</details>
<br />

Updates `github.com/containerd/containerd` from 1.7.17 to 1.7.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/containerd/containerd/releases">github.com/containerd/containerd's releases</a>.</em></p>
<blockquote>
<h2>containerd API 1.7.19</h2>
<p>Welcome to the api/v1.7.19 release of containerd!</p>
<p>The first dedicated release for the containerd 1.7 API. This release is
separately tagged from the main 1.7.x releases after the v1.7.18
release but follows the versioning.</p>
<h3>Highlights</h3>
<ul>
<li>Add API go module (<a href="https://redirect.github.com/containerd/containerd/pull/10189">#10189</a>)</li>
</ul>
<p>Please try out the release binaries and report any issues at
<a href="https://github.com/containerd/containerd/issues">https://github.com/containerd/containerd/issues</a>.</p>
<h3>Contributors</h3>
<ul>
<li>Derek McGowan</li>
<li>Akhil Mohan</li>
<li>Phil Estes</li>
<li>Sebastiaan van Stijn</li>
</ul>
<h3>Changes</h3>
<!-- raw HTML omitted -->
<ul>
<li>Prepare release notes for api v1.7.19 (<a href="https://redirect.github.com/containerd/containerd/pull/10386">#10386</a>)
<ul>
<li><a href="https://github.com/containerd/containerd/commit/436feeb0ddcf8188c84c616b97b34cc8acd1aa9f"><code>436feeb0d</code></a> Prepare api release for v1.7.19</li>
</ul>
</li>
<li>: api: update github.com/containerd/ttrpc v1.2.5 to align with containerd 1.7 module (<a href="https://redirect.github.com/containerd/containerd/pull/10364">#10364</a>)
<ul>
<li><a href="https://github.com/containerd/containerd/commit/2a6aa6ddf1f09bedc8b86f33a277f2cf6852eedd"><code>2a6aa6ddf</code></a> [release/1.7] api: update github.com/containerd/ttrpc v1.2.5</li>
</ul>
</li>
<li>Add API go module (<a href="https://redirect.github.com/containerd/containerd/pull/10189">#10189</a>)
<ul>
<li><a href="https://github.com/containerd/containerd/commit/3be919f3c023f776e5db1b162f642d79a36312a8"><code>3be919f3c</code></a> Add support for 1.8 interfaces</li>
<li><a href="https://github.com/containerd/containerd/commit/a3a7431bc3151a5d0a8c6d9e36a6430a76418f81"><code>a3a7431bc</code></a> Add api go submodule</li>
<li><a href="https://github.com/containerd/containerd/commit/4b82470f6939ab951334105cf0b10ca9167964ea"><code>4b82470f6</code></a> refactor: move plugin/fieldpath to api/types/</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
<h3>Dependency Changes</h3>
<ul>
<li><strong>github.com/containerd/ttrpc</strong>                v1.2.4 -&gt; v1.2.5</li>
<li><strong>github.com/golang/protobuf</strong>                 v1.5.4 -&gt; v1.5.3</li>
<li><strong>google.golang.org/genproto/googleapis/rpc</strong>  d307bd883b97 -&gt; b8732ec3820d</li>
</ul>
<p>Previous release can be found at <a href="https://github.com/containerd/containerd/releases/tag/v1.7.18">v1.7.18</a></p>
<h2>containerd 1.7.19</h2>
<p>Welcome to the v1.7.19 release of containerd!</p>
<p>The nineteenth patch release for containerd 1.7 contains various updates and
splits the main module from the api module in preparation for the same change
in containerd 2.0. Splitting the modules will allow 1.7 and 2.x to both exist</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/containerd/containerd/commit/2bf793ef6dc9a18e00cb12efb64355c2c9d5eb41"><code>2bf793e</code></a> Merge pull request <a href="https://redirect.github.com/containerd/containerd/issues/10391">#10391</a> from dmcgowan/prepare-v1.7.19</li>
<li><a href="https://github.com/containerd/containerd/commit/74a3d29017d780a06601e9015958a162c86f44f4"><code>74a3d29</code></a> Prepare release notes for v1.7.19</li>
<li><a href="https://github.com/containerd/containerd/commit/043c7123f4020247b9fe4321f923e457f1157576"><code>043c712</code></a> Merge pull request <a href="https://redirect.github.com/containerd/containerd/issues/10406">#10406</a> from samuelkarp/nri-panic-1.7</li>
<li><a href="https://github.com/containerd/containerd/commit/5a587e85d2818af6b6e9ca98fc09a3186fb45704"><code>5a587e8</code></a> Merge pull request <a href="https://redirect.github.com/containerd/containerd/issues/10403">#10403</a> from thaJeztah/1.7_backport_hcsshim_version</li>
<li><a href="https://github.com/containerd/containerd/commit/7f5d3c5f4d5325265f3dfe76f9cc4c17859a6e8a"><code>7f5d3c5</code></a> cri: ensure NRI API never has nil CRI</li>
<li><a href="https://github.com/containerd/containerd/commit/aea977fae1066a44228f2f9bad1847700e1d3d68"><code>aea977f</code></a> Merge pull request <a href="https://redirect.github.com/containerd/containerd/issues/10397">#10397</a> from thaJeztah/1.7_backport_deprecate_reference_Spl...</li>
<li><a href="https://github.com/containerd/containerd/commit/6efc5bb89621afab16ff7aaeb83460fd27d1c4c1"><code>6efc5bb</code></a> update runhcs binary to v0.11.7</li>
<li><a href="https://github.com/containerd/containerd/commit/945ae09fd30a421f108993d7e04f9a6c0b5aa989"><code>945ae09</code></a> Windows: Supply windows shim version via file</li>
<li><a href="https://github.com/containerd/containerd/commit/bb84d90b5bc8b177be3f7a44b91fa1d747786d5a"><code>bb84d90</code></a> Merge pull request <a href="https://redirect.github.com/containerd/containerd/issues/10396">#10396</a> from yyatmsft/updatehcsshim-release17</li>
<li><a href="https://github.com/containerd/containerd/commit/dba53578c2b8d5db159295371a6aa9fd0d1ee79f"><code>dba5357</code></a> pkg/reference: deprecate SplitObject</li>
<li>Additional commits viewable in <a href="https://github.com/containerd/containerd/compare/v1.7.17...v1.7.19">compare view</a></li>
</ul>
</details>
<br />

Updates `github.com/docker/docker` from 26.1.2+incompatible to 26.1.3+incompatible
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p>
<blockquote>
<h2>v26.1.3</h2>
<h2>26.1.3</h2>
<p>For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:</p>
<ul>
<li><a href="https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A26.1.3">docker/cli, 26.1.3 milestone</a></li>
<li><a href="https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A26.1.3">moby/moby, 26.1.3 milestone</a></li>
<li>Deprecated and removed features, see <a href="https://github.com/docker/cli/blob/v26.1.3/docs/deprecated.md">Deprecated Features</a>.</li>
<li>Changes to the Engine API, see <a href="https://github.com/moby/moby/blob/v26.1.3/docs/api/version-history.md">API version history</a>.</li>
</ul>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>Fix a regression that prevented the use of DNS servers within a <code>--internal</code> network. <a href="https://redirect.github.com/moby/moby/pull/47832">moby/moby#47832</a></li>
<li>When the internal DNS server's own address is supplied as an external server address, ignore it to avoid unproductive recursion. <a href="https://redirect.github.com/moby/moby/pull/47833">moby/moby#47833</a></li>
</ul>
<h3>Packaging updates</h3>
<ul>
<li>Allow runc to kill containers when confined to the runc profile in AppArmor version 4.0.0 and later. <a href="https://redirect.github.com/moby/moby/pull/47829">moby/moby#47829</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/moby/moby/commit/8e96db1c328d0467b015768e42a62c0f834970bb"><code>8e96db1</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/47832">#47832</a> from vvoland/v26.1-47821</li>
<li><a href="https://github.com/moby/moby/commit/c21fe3efa3d0e85585d19863a4575532fbe9c04b"><code>c21fe3e</code></a> Forward DNS requests into --internal networks</li>
<li><a href="https://github.com/moby/moby/commit/86af4eddb3452ee556c74d225fbb3e082357d181"><code>86af4ed</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/47833">#47833</a> from vvoland/v26.1-47744</li>
<li><a href="https://github.com/moby/moby/commit/73511cdee009d7df60443c861709c9933762b481"><code>73511cd</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/47829">#47829</a> from vvoland/v26.1-47749</li>
<li><a href="https://github.com/moby/moby/commit/9326cda7bf4a52a46b4e835505c57d2d281196dd"><code>9326cda</code></a> Do not forward DNS requests to self.</li>
<li><a href="https://github.com/moby/moby/commit/76fcf9a8e0f1cc6824a8c58f0ab4cc3a77bd3826"><code>76fcf9a</code></a> apparmor: Allow confined runc to kill containers</li>
<li>See full diff in <a href="https://github.com/docker/docker/compare/v26.1.2...v26.1.3">compare view</a></li>
</ul>
</details>
<br />

Updates `github.com/google/go-containerregistry` from 0.19.1 to 0.20.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's releases</a>.</em></p>
<blockquote>
<h2>v0.20.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Referrer API must return correct Content-Type by <a href="https://github.com/GregoireW"><code>@​GregoireW</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1968">google/go-containerregistry#1968</a></li>
<li>🚨 POTENTIALLY BREAKING: Restore blind-write to remote.Put by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1970">google/go-containerregistry#1970</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/GregoireW"><code>@​GregoireW</code></a> made their first contribution in <a href="https://redirect.github.com/google/go-containerregistry/pull/1968">google/go-containerregistry#1968</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/google/go-containerregistry/compare/v0.19.2...v0.20.0">https://github.com/google/go-containerregistry/compare/v0.19.2...v0.20.0</a></p>
<h2>v0.19.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Add JSON marshalling funcs for Digest. by <a href="https://github.com/wlynch"><code>@​wlynch</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1915">google/go-containerregistry#1915</a></li>
<li>registry: Implement Range requests for blobs by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1917">google/go-containerregistry#1917</a></li>
<li>Support podman auth file REGISTRY_AUTH_FILE. by <a href="https://github.com/zhaoyonghe"><code>@​zhaoyonghe</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1914">google/go-containerregistry#1914</a></li>
<li>feat: crane mutate platform by <a href="https://github.com/joshwlewis"><code>@​joshwlewis</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1919">google/go-containerregistry#1919</a></li>
<li>Add Context support to auth methods by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1949">google/go-containerregistry#1949</a></li>
<li>Fix windows race condition when writing image with duplicate layers by <a href="https://github.com/dgannon991"><code>@​dgannon991</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1921">google/go-containerregistry#1921</a></li>
<li>Add -O shorthand for --omit-digest-tags to crane. by <a href="https://github.com/smoser"><code>@​smoser</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1958">google/go-containerregistry#1958</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/wlynch"><code>@​wlynch</code></a> made their first contribution in <a href="https://redirect.github.com/google/go-containerregistry/pull/1915">google/go-containerregistry#1915</a></li>
<li><a href="https://github.com/zhaoyonghe"><code>@​zhaoyonghe</code></a> made their first contribution in <a href="https://redirect.github.com/google/go-containerregistry/pull/1914">google/go-containerregistry#1914</a></li>
<li><a href="https://github.com/joshwlewis"><code>@​joshwlewis</code></a> made their first contribution in <a href="https://redirect.github.com/google/go-containerregistry/pull/1919">google/go-containerregistry#1919</a></li>
<li><a href="https://github.com/dgannon991"><code>@​dgannon991</code></a> made their first contribution in <a href="https://redirect.github.com/google/go-containerregistry/pull/1921">google/go-containerregistry#1921</a></li>
<li><a href="https://github.com/smoser"><code>@​smoser</code></a> made their first contribution in <a href="https://redirect.github.com/google/go-containerregistry/pull/1958">google/go-containerregistry#1958</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/google/go-containerregistry/compare/v0.19.1...v0.19.2">https://github.com/google/go-containerregistry/compare/v0.19.1...v0.19.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/google/go-containerregistry/commit/d36047ae385302d20acd872e28f036a475fb9417"><code>d36047a</code></a> Restore blind-write to remote.Put (<a href="https://redirect.github.com/google/go-containerregistry/issues/1970">#1970</a>)</li>
<li><a href="https://github.com/google/go-containerregistry/commit/9915a85d155f894e18a05d2e3d3f8d249244206f"><code>9915a85</code></a> Referrer API must return correct Content-Type (<a href="https://redirect.github.com/google/go-containerregistry/issues/1968">#1968</a>)</li>
<li><a href="https://github.com/google/go-containerregistry/commit/1b4e4078a545f2b6f96766a064b45ee77cdbefdd"><code>1b4e407</code></a> Add -O shorthand for --omit-digest-tags to crane. (<a href="https://redirect.github.com/google/go-containerregistry/issues/1958">#1958</a>)</li>
<li><a href="https://github.com/google/go-containerregistry/commit/3764db238e3ebf35a3ea0da696287701214859b9"><code>3764db2</code></a> Fix windows race condition when writing image with duplicate layers (<a href="https://redirect.github.com/google/go-containerregistry/issues/1921">#1921</a>)</li>
<li><a href="https://github.com/google/go-containerregistry/commit/39d1148136d6d225d58aa2697aa2f23dc8d45927"><code>39d1148</code></a> Add Context support to auth methods (<a href="https://redirect.github.com/google/go-containerregistry/issues/1949">#1949</a>)</li>
<li><a href="https://github.com/google/go-containerregistry/commit/ff385a972813c79bbd5fc89357ff2cefe3e5b43c"><code>ff385a9</code></a> feat: mutate platform (<a href="https://redirect.github.com/google/go-containerregistry/issues/1919">#1919</a>)</li>
<li><a href="https://github.com/google/go-containerregistry/commit/98dd3e91704f90756f7635557788d634665e8813"><code>98dd3e9</code></a> Support podman auth file REGISTRY_AUTH_FILE. (<a href="https://redirect.github.com/google/go-containerregistry/issues/1914">#1914</a>)</li>
<li><a href="https://github.com/google/go-containerregistry/commit/051d642e295e3e86b58bb5feabb184036fa34a52"><code>051d642</code></a> registry: Implement Range requests for blobs (<a href="https://redirect.github.com/google/go-containerregistry/issues/1917">#1917</a>)</li>
<li><a href="https://github.com/google/go-containerregistry/commit/03091849b482099b6cead558b25d89fe921152e3"><code>0309184</code></a> Add JSON marshalling funcs for Digest. (<a href="https://redirect.github.com/google/go-containerregistry/issues/1915">#1915</a>)</li>
<li>See full diff in <a href="https://github.com/google/go-containerregistry/compare/v0.19.1...v0.20.0">compare view</a></li>
</ul>
</details>
<br />

Updates `github.com/moby/buildkit` from 0.13.2 to 0.14.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/moby/buildkit/releases">github.com/moby/buildkit's releases</a>.</em></p>
<blockquote>
<h2>v0.14.1</h2>
<p>Welcome to the 0.14.1 release of buildkit!</p>
<p>Please try out the release binaries and report any issues at
<a href="https://github.com/moby/buildkit/issues">https://github.com/moby/buildkit/issues</a>.</p>
<h3>Contributors</h3>
<ul>
<li>Talon Bowler</li>
<li>Akihiro Suda</li>
<li>Tõnis Tiigi</li>
<li>Paweł Gronowski</li>
</ul>
<h3>Notable Changes</h3>
<ul>
<li>Builtin Dockerfile frontend has been updated to v1.8.1 <a href="https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.8.1">changelog</a></li>
<li>Fix possible issue on pushing blobs with <code>rewrite-timestamp=true</code> option <a href="https://redirect.github.com/moby/buildkit/issues/5040">#5040</a></li>
<li>Fix possible concurrency issue on handling HTTPS to HTTP fallbacks for insecure registries <a href="https://redirect.github.com/moby/buildkit/issues/5044">#5044</a></li>
</ul>
<h3>Dependency Changes</h3>
<p>This release has no dependency changes</p>
<p>Previous release can be found at <a href="https://github.com/moby/buildkit/releases/tag/v0.14.0">v0.14.0</a></p>
<h2>v0.14.0</h2>
<p>Welcome to the 0.14.0 release of buildkit!</p>
<p>Please try out the release binaries and report any issues at
<a href="https://github.com/moby/buildkit/issues">https://github.com/moby/buildkit/issues</a>.</p>
<h3>Contributors</h3>
<ul>
<li>Tõnis Tiigi</li>
<li>CrazyMax</li>
<li>Talon James Bowler</li>
<li>Akihiro Suda</li>
<li>Jonathan A. Sternberg</li>
<li>Justin Chadwell</li>
<li>David Karlsson</li>
<li>Sebastiaan van Stijn</li>
<li>Anthony Nandaa</li>
<li>Erik Sipsma</li>
<li>Aleksa Sarai</li>
<li>Adam Perlin</li>
<li>Shaun Thompson</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/moby/buildkit/commit/eb864a84592468ee9b434326cb7efd66f58555af"><code>eb864a8</code></a> Merge pull request <a href="https://redirect.github.com/moby/buildkit/issues/5053">#5053</a> from tonistiigi/v0.14.1-cherry-picks</li>
<li><a href="https://github.com/moby/buildkit/commit/dedaef0afe0d9a269c298fdb2773b9163626611b"><code>dedaef0</code></a> shell: handle empty string for var replacements</li>
<li><a href="https://github.com/moby/buildkit/commit/b45ab30fc0809c4eaa42039f2d0945462d44bfd4"><code>b45ab30</code></a> Initialize build args from stage base</li>
<li><a href="https://github.com/moby/buildkit/commit/e34c21a7b0b63477e253dc654e15f536a09f5c42"><code>e34c21a</code></a> Consolidate instruction casing lint rules</li>
<li><a href="https://github.com/moby/buildkit/commit/050e3b6f3b944f4c4175a0248dd2d1390e8e0da1"><code>050e3b6</code></a> Updates lint output to print detail instead of description</li>
<li><a href="https://github.com/moby/buildkit/commit/2bf5cbff6571375f48058e92e6c58a336f29c668"><code>2bf5cbf</code></a> util/resolver: Make httpFallback concurrent safe</li>
<li><a href="https://github.com/moby/buildkit/commit/49dd5f4f19f540e606736c18bdb7ce70cd7ae3b6"><code>49dd5f4</code></a> Adds 'WARNING' prefix to the rule check output and update lint</li>
<li><a href="https://github.com/moby/buildkit/commit/05bd56be25db9b10527ea62ddd4325e94945e036"><code>05bd56b</code></a> Merge pull request <a href="https://redirect.github.com/moby/buildkit/issues/5040">#5040</a> from AkihiroSuda/cherrypick-5008-0.14</li>
<li><a href="https://github.com/moby/buildkit/commit/5a7352c1da270cfebc2dc91d3cd1feed511b92e0"><code>5a7352c</code></a> Fix content not found with <code>push=true,rewrite-timestamp=true</code></li>
<li><a href="https://github.com/moby/buildkit/commit/4d9a4e5df9e11596a3261c1952cde3c6346be762"><code>4d9a4e5</code></a> Merge pull request <a href="https://redirect.github.com/moby/buildkit/issues/5017">#5017</a> from crazy-max/fix-history-exporters</li>
<li>Additional commits viewable in <a href="https://github.com/moby/buildkit/compare/v0.13.2...v0.14.1">compare view</a></li>
</ul>
</details>
<br />

Updates `golang.org/x/sys` from 0.20.0 to 0.22.0
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/golang/sys/commit/faed7ec2641160cebe7fdf3fa6d401d848d2710f"><code>faed7ec</code></a> unix: add PthreadChdir and PthreadFchdir on darwin</li>
<li><a href="https://github.com/golang/sys/commit/c892bb7ec2a2624d5417525f44698a5e241dfb04"><code>c892bb7</code></a> unix: fix MmapPtr test failing on OpenBSD</li>
<li><a href="https://github.com/golang/sys/commit/a0ef40af1f19dfed5b852735bcdebe22554248ce"><code>a0ef40a</code></a> unix: fix MremapPtr test failing on NetBSD</li>
<li><a href="https://github.com/golang/sys/commit/daa239428c2d61fe52eab0fce9e8d0921c9dbbed"><code>daa2394</code></a> unix: add unsafe mmap, munmap, mremap</li>
<li><a href="https://github.com/golang/sys/commit/76700875dfcc135287c18189252576117307b695"><code>7670087</code></a> windows: add GetAce Windows API</li>
<li><a href="https://github.com/golang/sys/commit/348425aa18d7aba1101fc962319ecb7f07879fe2"><code>348425a</code></a> windows/svc: do not pass theService to windows.RegisterServiceCtrlHandlerEx</li>
<li><a href="https://github.com/golang/sys/commit/673e0f94c16da4b6d7f550d6af66fde0c69503e4"><code>673e0f9</code></a> unix: skip ethtool driver test for busy interface</li>
<li><a href="https://github.com/golang/sys/commit/6943ab67c485d110829e8c77c3a46235a07d73b9"><code>6943ab6</code></a> unix/linux: update glibc to 2.39</li>
<li><a href="https://github.com/golang/sys/commit/92f3ad6e7f2c62ef8e7c26906fdb3b67419566ac"><code>92f3ad6</code></a> unix: update to Linux kernel 6.9</li>
<li><a href="https://github.com/golang/sys/commit/f34bb9fccc5017bce03e0a0446cc145e8424054b"><code>f34bb9f</code></a> windows: add net user enum</li>
<li>Additional commits viewable in <a href="https://github.com/golang/sys/compare/v0.20.0...v0.22.0">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>


Patch:
diff --git a/go.mod b/go.mod
index ee5ac968..79cd77c8 100644
--- a/go.mod
+++ b/go.mod
@@ -2,23 +2,23 @@ module github.com/buildpacks/lifecycle
 
 require (
 	github.com/BurntSushi/toml v1.4.0
-	github.com/GoogleContainerTools/kaniko v1.23.0
+	github.com/GoogleContainerTools/kaniko v1.23.1
 	github.com/apex/log v1.9.0
 	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20240419161514-af205d85bb44
 	github.com/buildpacks/imgutil v0.0.0-20240605145725-186f89b2d168
 	github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589
-	github.com/containerd/containerd v1.7.17
-	github.com/docker/docker v26.1.2+incompatible
+	github.com/containerd/containerd v1.7.19
+	github.com/docker/docker v26.1.4+incompatible
 	github.com/golang/mock v1.6.0
 	github.com/google/go-cmp v0.6.0
-	github.com/google/go-containerregistry v0.19.1
+	github.com/google/go-containerregistry v0.20.0
 	github.com/google/uuid v1.6.0
 	github.com/heroku/color v0.0.6
 	github.com/moby/buildkit v0.13.2
 	github.com/pkg/errors v0.9.1
 	github.com/sclevine/spec v1.4.0
 	golang.org/x/sync v0.7.0
-	golang.org/x/sys v0.20.0
+	golang.org/x/sys v0.22.0
 )
 
 require (
@@ -36,38 +36,41 @@ require (
 	github.com/Azure/go-autorest/logger v0.2.1 // indirect
 	github.com/Azure/go-autorest/tracing v0.6.0 // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
-	github.com/Microsoft/hcsshim v0.11.5 // indirect
+	github.com/Microsoft/hcsshim v0.11.7 // indirect
 	github.com/agext/levenshtein v1.2.3 // indirect
-	github.com/aws/aws-sdk-go-v2 v1.26.1 // indirect
-	github.com/aws/aws-sdk-go-v2/config v1.27.13 // indirect
-	github.com/aws/aws-sdk-go-v2/credentials v1.17.13 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.1 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.5 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.5 // indirect
+	github.com/aws/aws-sdk-go-v2 v1.27.0 // indirect
+	github.com/aws/aws-sdk-go-v2/config v1.27.16 // indirect
+	github.com/aws/aws-sdk-go-v2/credentials v1.17.16 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.3 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.7 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.7 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ecr v1.27.4 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.23.4 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.2 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.7 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.20.6 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.24.0 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.28.7 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.9 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.20.9 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.24.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.28.10 // indirect
 	github.com/aws/smithy-go v1.20.2 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/cespare/xxhash/v2 v2.2.0 // indirect
-	github.com/cilium/ebpf v0.12.3 // indirect
+	github.com/cilium/ebpf v0.9.1 // indirect
 	github.com/containerd/cgroups v1.1.0 // indirect
 	github.com/containerd/cgroups/v3 v3.0.2 // indirect
+	github.com/containerd/containerd/api v1.7.19 // indirect
 	github.com/containerd/continuity v0.4.3 // indirect
+	github.com/containerd/errdefs v0.1.0 // indirect
 	github.com/containerd/fifo v1.1.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
+	github.com/containerd/platforms v0.2.1 // indirect
 	github.com/containerd/stargz-snapshotter/estargz v0.15.1 // indirect
-	github.com/containerd/ttrpc v1.2.4 // indirect
+	github.com/containerd/ttrpc v1.2.5 // indirect
 	github.com/containerd/typeurl/v2 v2.1.1 // indirect
 	github.com/coreos/go-systemd/v22 v22.5.0 // indirect
 	github.com/dimchansky/utfbom v1.1.1 // indirect
 	github.com/distribution/reference v0.6.0 // indirect
-	github.com/docker/cli v26.1.0+incompatible // indirect
+	github.com/docker/cli v26.1.4+incompatible // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
 	github.com/docker/docker-credential-helpers v0.8.1 // indirect
 	github.com/docker/go-connections v0.5.0 // indirect
@@ -126,14 +129,13 @@ require (
 	go.opentelemetry.io/otel/metric v1.25.0 // indirect
 	go.opentelemetry.io/otel/trace v1.25.0 // indirect
 	golang.org/x/crypto v0.23.0 // indirect
-	golang.org/x/exp v0.0.0-20240416160154-fe59bbe5cc7f // indirect
 	golang.org/x/net v0.25.0 // indirect
 	golang.org/x/oauth2 v0.20.0 // indirect
 	golang.org/x/text v0.15.0 // indirect
 	golang.org/x/time v0.5.0 // indirect
-	google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20240429193739-8cf5692501f6 // indirect
-	google.golang.org/grpc v1.63.2 // indirect
+	google.golang.org/genproto v0.0.0-20240401170217-c3f982113cda // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20240521202816-d264139d666e // indirect
+	google.golang.org/grpc v1.64.0 // indirect
 	google.golang.org/protobuf v1.34.1 // indirect
 )
 
diff --git a/go.sum b/go.sum
index 71d48c6c..d25443e4 100644
--- a/go.sum
+++ b/go.sum
@@ -35,12 +35,12 @@ github.com/Azure/go-autorest/tracing v0.6.0/go.mod h1:+vhtPC754Xsa23ID7GlGsrdKBp
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/toml v1.4.0 h1:kuoIxZQy2WRRk1pttg9asf+WVv6tWQuBNVmK8+nqPr0=
 github.com/BurntSushi/toml v1.4.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho=
-github.com/GoogleContainerTools/kaniko v1.23.0 h1:/YTWOF3uL40kNyK2821Wc+12Czlon1U+gmISWw9CLTM=
-github.com/GoogleContainerTools/kaniko v1.23.0/go.mod h1:lTA7EDyPzSGYxcXxaxWCztINdHMb1Qxj6+eAn1vo2EI=
+github.com/GoogleContainerTools/kaniko v1.23.1 h1:1N6XhVTrUB0CNVIUeruXfZ9CtpJP3TuZkxDZYg2NilA=
+github.com/GoogleContainerTools/kaniko v1.23.1/go.mod h1:r3od0LXG7hnM2i/WMIX1e6kmLiKpV1D7skalBZBvsbk=
 github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY=
 github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU=
-github.com/Microsoft/hcsshim v0.11.5 h1:haEcLNpj9Ka1gd3B3tAEs9CpE0c+1IhoL59w/exYU38=
-github.com/Microsoft/hcsshim v0.11.5/go.mod h1:MV8xMfmECjl5HdO7U/3/hFVnkmSBjAjmA09d4bExKcU=
+github.com/Microsoft/hcsshim v0.11.7 h1:vl/nj3Bar/CvJSYo7gIQPyRWc9f3c6IeSNavBTSZNZQ=
+github.com/Microsoft/hcsshim v0.11.7/go.mod h1:MV8xMfmECjl5HdO7U/3/hFVnkmSBjAjmA09d4bExKcU=
 github.com/agext/levenshtein v1.2.3 h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo=
 github.com/agext/levenshtein v1.2.3/go.mod h1:JEDfjyjHDjOF/1e4FlBE/PkbqA9OfWu2ki2W0IB5558=
 github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
@@ -51,18 +51,18 @@ github.com/apex/logs v1.0.0/go.mod h1:XzxuLZ5myVHDy9SAmYpamKKRNApGj54PfYLcFrXqDw
 github.com/aphistic/golf v0.0.0-20180712155816-02c07f170c5a/go.mod h1:3NqKYiepwy8kCu4PNA+aP7WUV72eXWJeP9/r3/K9aLE=
 github.com/aphistic/sweet v0.2.0/go.mod h1:fWDlIh/isSE9n6EPsRmC0det+whmX6dJid3stzu0Xys=
 github.com/aws/aws-sdk-go v1.20.6/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
-github.com/aws/aws-sdk-go-v2 v1.26.1 h1:5554eUqIYVWpU0YmeeYZ0wU64H2VLBs8TlhRB2L+EkA=
-github.com/aws/aws-sdk-go-v2 v1.26.1/go.mod h1:ffIFB97e2yNsv4aTSGkqtHnppsIJzw7G7BReUZ3jCXM=
-github.com/aws/aws-sdk-go-v2/config v1.27.13 h1:WbKW8hOzrWoOA/+35S5okqO/2Ap8hkkFUzoW8Hzq24A=
-github.com/aws/aws-sdk-go-v2/config v1.27.13/go.mod h1:XLiyiTMnguytjRER7u5RIkhIqS8Nyz41SwAWb4xEjxs=
-github.com/aws/aws-sdk-go-v2/credentials v1.17.13 h1:XDCJDzk/u5cN7Aple7D/MiAhx1Rjo/0nueJ0La8mRuE=
-github.com/aws/aws-sdk-go-v2/credentials v1.17.13/go.mod h1:FMNcjQrmuBYvOTZDtOLCIu0esmxjF7RuA/89iSXWzQI=
-github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.1 h1:FVJ0r5XTHSmIHJV6KuDmdYhEpvlHpiSd38RQWhut5J4=
-github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.1/go.mod h1:zusuAeqezXzAB24LGuzuekqMAEgWkVYukBec3kr3jUg=
-github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.5 h1:aw39xVGeRWlWx9EzGVnhOR4yOjQDHPQ6o6NmBlscyQg=
-github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.5/go.mod h1:FSaRudD0dXiMPK2UjknVwwTYyZMRsHv3TtkabsZih5I=
-github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.5 h1:PG1F3OD1szkuQPzDw3CIQsRIrtTlUC3lP84taWzHlq0=
-github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.5/go.mod h1:jU1li6RFryMz+so64PpKtudI+QzbKoIEivqdf6LNpOc=
+github.com/aws/aws-sdk-go-v2 v1.27.0 h1:7bZWKoXhzI+mMR/HjdMx8ZCC5+6fY0lS5tr0bbgiLlo=
+github.com/aws/aws-sdk-go-v2 v1.27.0/go.mod h1:ffIFB97e2yNsv4aTSGkqtHnppsIJzw7G7BReUZ3jCXM=
+github.com/aws/aws-sdk-go-v2/config v1.27.16 h1:knpCuH7laFVGYTNd99Ns5t+8PuRjDn4HnnZK48csipM=
+github.com/aws/aws-sdk-go-v2/config v1.27.16/go.mod h1:vutqgRhDUktwSge3hrC3nkuirzkJ4E/mLj5GvI0BQas=
+github.com/aws/aws-sdk-go-v2/credentials v1.17.16 h1:7d2QxY83uYl0l58ceyiSpxg9bSbStqBC6BeEeHEchwo=
+github.com/aws/aws-sdk-go-v2/credentials v1.17.16/go.mod h1:Ae6li/6Yc6eMzysRL2BXlPYvnrLLBg3D11/AmOjw50k=
+github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.3 h1:dQLK4TjtnlRGb0czOht2CevZ5l6RSyRWAnKeGd7VAFE=
+github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.3/go.mod h1:TL79f2P6+8Q7dTsILpiVST+AL9lkF6PPGI167Ny0Cjw=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.7 h1:lf/8VTF2cM+N4SLzaYJERKEWAXq8MOMpZfU6wEPWsPk=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.7/go.mod h1:4SjkU7QiqK2M9oozyMzfZ/23LmUY+h3oFqhdeP5OMiI=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.7 h1:4OYVp0705xu8yjdyoWix0r9wPIRXnIzzOoUpQVHIJ/g=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.7/go.mod h1:vd7ESTEvI76T2Na050gODNmNU7+OyKrIKroYTu4ABiI=
 github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 h1:hT8rVHwugYE2lEfdFE0QWVo81lF7jMrYJVDWI+f+VxU=
 github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0/go.mod h1:8tu/lYfQfFe6IGnaOdrpVgEL2IrrDOf6/m9RQum4NkY=
 github.com/aws/aws-sdk-go-v2/service/ecr v1.27.4 h1:Qr9W21mzWT3RhfYn9iAux7CeRIdbnTAqmiOlASqQgZI=
@@ -71,14 +71,14 @@ github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.23.4 h1:aNuiieMaS2IHxqAsTdM/pj
 github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.23.4/go.mod h1:8pvvNAklmq+hKmqyvFoMRg0bwg9sdGOvdwximmKiKP0=
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.2 h1:Ji0DY1xUsUr3I8cHps0G+XM3WWU16lP6yG8qu1GAZAs=
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.2/go.mod h1:5CsjAbs3NlGQyZNFACh+zztPDI7fU6eW9QsxjfnuBKg=
-github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.7 h1:ogRAwT1/gxJBcSWDMZlgyFUM962F51A5CRhDLbxLdmo=
-github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.7/go.mod h1:YCsIZhXfRPLFFCl5xxY+1T9RKzOKjCut+28JSX2DnAk=
-github.com/aws/aws-sdk-go-v2/service/sso v1.20.6 h1:o5cTaeunSpfXiLTIBx5xo2enQmiChtu1IBbzXnfU9Hs=
-github.com/aws/aws-sdk-go-v2/service/sso v1.20.6/go.mod h1:qGzynb/msuZIE8I75DVRCUXw3o3ZyBmUvMwQ2t/BrGM=
-github.com/aws/aws-sdk-go-v2/service/ssooidc v1.24.0 h1:Qe0r0lVURDDeBQJ4yP+BOrJkvkiCo/3FH/t+wY11dmw=
-github.com/aws/aws-sdk-go-v2/service/ssooidc v1.24.0/go.mod h1:mUYPBhaF2lGiukDEjJX2BLRRKTmoUSitGDUgM4tRxak=
-github.com/aws/aws-sdk-go-v2/service/sts v1.28.7 h1:et3Ta53gotFR4ERLXXHIHl/Uuk1qYpP5uU7cvNql8ns=
-github.com/aws/aws-sdk-go-v2/service/sts v1.28.7/go.mod h1:FZf1/nKNEkHdGGJP/cI2MoIMquumuRK6ol3QQJNDxmw=
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.9 h1:Wx0rlZoEJR7JwlSZcHnEa7CNjrSIyVxMFWGAaXy4fJY=
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.9/go.mod h1:aVMHdE0aHO3v+f/iw01fmXV/5DbfQ3Bi9nN7nd9bE9Y=
+github.com/aws/aws-sdk-go-v2/service/sso v1.20.9 h1:aD7AGQhvPuAxlSUfo0CWU7s6FpkbyykMhGYMvlqTjVs=
+github.com/aws/aws-sdk-go-v2/service/sso v1.20.9/go.mod h1:c1qtZUWtygI6ZdvKppzCSXsDOq5I4luJPZ0Ud3juFCA=
+github.com/aws/aws-sdk-go-v2/service/ssooidc v1.24.3 h1:Pav5q3cA260Zqez42T9UhIlsd9QeypszRPwC9LdSSsQ=
+github.com/aws/aws-sdk-go-v2/service/ssooidc v1.24.3/go.mod h1:9lmoVDVLz/yUZwLaQ676TK02fhCu4+PgRSmMaKR1ozk=
+github.com/aws/aws-sdk-go-v2/service/sts v1.28.10 h1:69tpbPED7jKPyzMcrwSvhWcJ9bPnZsZs18NT40JwM0g=
+github.com/aws/aws-sdk-go-v2/service/sts v1.28.10/go.mod h1:0Aqn1MnEuitqfsCNyKsdKLhDUOr4txD/g19EfiUqgws=
 github.com/aws/smithy-go v1.20.2 h1:tbp628ireGtzcHDDmLT/6ADHidqnwgF57XOXZe6tp4Q=
 github.com/aws/smithy-go v1.20.2/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E=
 github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20240419161514-af205d85bb44 h1:oNDkocd5/+6jUuxyz07jQWnKhgpNtKQoZSXKMb7emqQ=
@@ -97,26 +97,32 @@ github.com/cespare/xxhash/v2 v2.2.0 h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj
 github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589 h1:krfRl01rzPzxSxyLyrChD+U+MzsBXbm0OwYYB67uF+4=
 github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589/go.mod h1:OuDyvmLnMCwa2ep4Jkm6nyA0ocJuZlGyk2gGseVzERM=
-github.com/cilium/ebpf v0.12.3 h1:8ht6F9MquybnY97at+VDZb3eQQr8ev79RueWeVaEcG4=
-github.com/cilium/ebpf v0.12.3/go.mod h1:TctK1ivibvI3znr66ljgi4hqOT8EYQjz1KWBfb1UVgM=
+github.com/cilium/ebpf v0.9.1 h1:64sn2K3UKw8NbP/blsixRpF3nXuyhz/VjRlRzvlBRu4=
+github.com/cilium/ebpf v0.9.1/go.mod h1:+OhNOIXx/Fnu1IE8bJz2dzOA+VSfyTfdNUVdlQnxUFY=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
 github.com/containerd/cgroups v1.1.0 h1:v8rEWFl6EoqHB+swVNjVoCJE8o3jX7e8nqBGPLaDFBM=
 github.com/containerd/cgroups v1.1.0/go.mod h1:6ppBcbh/NOOUU+dMKrykgaBnK9lCIBxHqJDGwsa1mIw=
 github.com/containerd/cgroups/v3 v3.0.2 h1:f5WFqIVSgo5IZmtTT3qVBo6TzI1ON6sycSBKkymb9L0=
 github.com/containerd/cgroups/v3 v3.0.2/go.mod h1:JUgITrzdFqp42uI2ryGA+ge0ap/nxzYgkGmIcetmErE=
-github.com/containerd/containerd v1.7.17 h1:KjNnn0+tAVQHAoaWRjmdak9WlvnFR/8rU1CHHy8Rm2A=
-github.com/containerd/containerd v1.7.17/go.mod h1:vK+hhT4TIv2uejlcDlbVIc8+h/BqtKLIyNrtCZol8lI=
+github.com/containerd/containerd v1.7.19 h1:/xQ4XRJ0tamDkdzrrBAUy/LE5nCcxFKdBm4EcPrSMEE=
+github.com/containerd/containerd v1.7.19/go.mod h1:h4FtNYUUMB4Phr6v+xG89RYKj9XccvbNSCKjdufCrkc=
+github.com/containerd/containerd/api v1.7.19 h1:VWbJL+8Ap4Ju2mx9c9qS1uFSB1OVYr5JJrW2yT5vFoA=
+github.com/containerd/containerd/api v1.7.19/go.mod h1:fwGavl3LNwAV5ilJ0sbrABL44AQxmNjDRcwheXDb6Ig=
 github.com/containerd/continuity v0.4.3 h1:6HVkalIp+2u1ZLH1J/pYX2oBVXlJZvh1X1A7bEZ9Su8=
 github.com/containerd/continuity v0.4.3/go.mod h1:F6PTNCKepoxEaXLQp3wDAjygEnImnZ/7o4JzpodfroQ=
+github.com/containerd/errdefs v0.1.0 h1:m0wCRBiu1WJT/Fr+iOoQHMQS/eP5myQ8lCv4Dz5ZURM=
+github.com/containerd/errdefs v0.1.0/go.mod h1:YgWiiHtLmSeBrvpw+UfPijzbLaB77mEG1WwJTDETIV0=
 github.com/containerd/fifo v1.1.0 h1:4I2mbh5stb1u6ycIABlBw9zgtlK8viPI9QkQNRQEEmY=
 github.com/containerd/fifo v1.1.0/go.mod h1:bmC4NWMbXlt2EZ0Hc7Fx7QzTFxgPID13eH0Qu+MAb2o=
 github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I=
 github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo=
+github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A=
+github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw=
 github.com/containerd/stargz-snapshotter/estargz v0.15.1 h1:eXJjw9RbkLFgioVaTG+G/ZW/0kEe2oEKCdS/ZxIyoCU=
 github.com/containerd/stargz-snapshotter/estargz v0.15.1/go.mod h1:gr2RNwukQ/S9Nv33Lt6UC7xEx58C+LHRdoqbEKjz1Kk=
-github.com/containerd/ttrpc v1.2.4 h1:eQCQK4h9dxDmpOb9QOOMh2NHTfzroH1IkmHiKZi05Oo=
-github.com/containerd/ttrpc v1.2.4/go.mod h1:ojvb8SJBSch0XkqNO0L0YX/5NxR3UnVk2LzFKBK0upc=
+github.com/containerd/ttrpc v1.2.5 h1:IFckT1EFQoFBMG4c3sMdT8EP3/aKfumK1msY+Ze4oLU=
+github.com/containerd/ttrpc v1.2.5/go.mod h1:YCXHsb32f+Sq5/72xHubdiJRQY9inL4a4ZQrAbN1q9o=
 github.com/containerd/typeurl/v2 v2.1.1 h1:3Q4Pt7i8nYwy2KmQWIw2+1hTvwTE/6w9FqcttATPO/4=
 github.com/containerd/typeurl/v2 v2.1.1/go.mod h1:IDp2JFvbwZ31H8dQbEIY7sDl2L3o3HZj1hsSQlywkQ0=
 github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs=
@@ -130,12 +136,12 @@ github.com/dimchansky/utfbom v1.1.1 h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi
 github.com/dimchansky/utfbom v1.1.1/go.mod h1:SxdoEBH5qIqFocHMyGOXVAybYJdr71b1Q/j0mACtrfE=
 github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk=
 github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
-github.com/docker/cli v26.1.0+incompatible h1:+nwRy8Ocd8cYNQ60mozDDICICD8aoFGtlPXifX/UQ3Y=
-github.com/docker/cli v26.1.0+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
+github.com/docker/cli v26.1.4+incompatible h1:I8PHdc0MtxEADqYJZvhBrW9bo8gawKwwenxRM7/rLu8=
+github.com/docker/cli v26.1.4+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
 github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
-github.com/docker/docker v26.1.2+incompatible h1:UVX5ZOrrfTGZZYEP+ZDq3Xn9PdHNXaSYMFPDumMqG2k=
-github.com/docker/docker v26.1.2+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
+github.com/docker/docker v26.1.4+incompatible h1:vuTpXDuoga+Z38m1OZHzl7NKisKWaWlhjQk7IDPSLsU=
+github.com/docker/docker v26.1.4+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/docker-credential-helpers v0.8.1 h1:j/eKUktUltBtMzKqmfLB0PAgqYyMHOp5vfsD1807oKo=
 github.com/docker/docker-credential-helpers v0.8.1/go.mod h1:P3ci7E3lwkZg6XiHdRKft1KckHiO9a2rNtyFbZ/ry9M=
 github.com/docker/go-connections v0.5.0 h1:USnMq7hx7gwdVZq1L49hLXaFtUdTADjXGp+uj1Br63c=
@@ -157,8 +163,8 @@ github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7
 github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
 github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=
 github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
-github.com/frankban/quicktest v1.14.5 h1:dfYrrRyLtiqT9GyKXgdh+k4inNeTvmGbuSgZ3lx3GhA=
-github.com/frankban/quicktest v1.14.5/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
+github.com/frankban/quicktest v1.14.0 h1:+cqqvzZV87b4adx/5ayVOaYZ2CrvM4ejQvUdBzPPUss=
+github.com/frankban/quicktest v1.14.0/go.mod h1:NeW+ay9A/U67EYXNFA1nPE8e/tnQv/09mUdL/ijj8og=
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
 github.com/go-logfmt/logfmt v0.3.0/go.mod h1:Qt1PoO58o5twSAckw1HlFXLmHsOX5/0LbT9GBnD5lWE=
@@ -208,8 +214,8 @@ github.com/google/go-cmp v0.5.3/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
 github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-containerregistry v0.19.1 h1:yMQ62Al6/V0Z7CqIrrS1iYoA5/oQCm88DeNujc7C1KY=
-github.com/google/go-containerregistry v0.19.1/go.mod h1:YCMFNQeeXeLF+dnhhWkqDItx/JSkH01j1Kis4PsjzFI=
+github.com/google/go-containerregistry v0.20.0 h1:wRqHpOeVh3DnenOrPy9xDOLdnLatiGuuNRVelR2gSbg=
+github.com/google/go-containerregistry v0.20.0/go.mod h1:YCMFNQeeXeLF+dnhhWkqDItx/JSkH01j1Kis4PsjzFI=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
@@ -418,8 +424,6 @@ golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58
 golang.org/x/crypto v0.23.0 h1:dIJU/v2J8Mdglj/8rJ6UUOM3Zc9zLZxVZwwxMooUSAI=
 golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
-golang.org/x/exp v0.0.0-20240416160154-fe59bbe5cc7f h1:99ci1mjWVBWwJiEKYY6jWa4d2nTQVIEhZIptnrVb1XY=
-golang.org/x/exp v0.0.0-20240416160154-fe59bbe5cc7f/go.mod h1:/lliqkxwWAhPjf5oSOIJup2XcqJaw8RGS6k3TGEc7GI=
 golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
 golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
 golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
@@ -427,8 +431,8 @@ golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
-golang.org/x/mod v0.17.0 h1:zY54UmvipHiNd+pm+m0x9KhZ9hl1/7QNMyxXbc6ICqA=
-golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
+golang.org/x/mod v0.13.0 h1:I/DsJXRlw/8l/0c24sM9yb0T4z9liZTduXvdAWYiysY=
+golang.org/x/mod v0.13.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -484,8 +488,8 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.20.0 h1:Od9JTbYCk261bKm4M/mw7AklTlFYIa0bIp9BgSm1S8Y=
-golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI=
+golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
@@ -509,8 +513,8 @@ golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roY
 golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.1.1/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.20.0 h1:hz/CVckiOxybQvFw6h7b/q80NTr9IUQb4s1IIzW7KNY=
-golang.org/x/tools v0.20.0/go.mod h1:WvitBU7JJf6A4jOdg4S1tviW9bhUxkgeCui/0JHctQg=
+golang.org/x/tools v0.14.0 h1:jvNa2pY0M4r62jkRQ6RwEZZyPcymeL9XZMLBbV7U2nc=
+golang.org/x/tools v0.14.0/go.mod h1:uYBEerGOWcJyEORxN+Ek8+TT266gXkNlHdJBwexUsBg=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -520,19 +524,19 @@ google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7
 google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
 google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
 google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo=
-google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de h1:F6qOa9AZTYJXOUEr4jDysRDLrm4PHePlge4v4TGAlxY=
-google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de/go.mod h1:VUhTRKeHn9wwcdrk73nvdC9gF178Tzhmt/qyaFcPLSo=
-google.golang.org/genproto/googleapis/api v0.0.0-20240415180920-8c6c420018be h1:Zz7rLWqp0ApfsR/l7+zSHhY3PMiH2xqgxlfYfAfNpoU=
-google.golang.org/genproto/googleapis/api v0.0.0-20240415180920-8c6c420018be/go.mod h1:dvdCTIoAGbkWbcIKBniID56/7XHTt6WfxXNMxuziJ+w=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20240429193739-8cf5692501f6 h1:DujSIu+2tC9Ht0aPNA7jgj23Iq8Ewi5sgkQ++wdvonE=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20240429193739-8cf5692501f6/go.mod h1:WtryC6hu0hhx87FDGxWCDptyssuo68sk10vYjF+T9fY=
+google.golang.org/genproto v0.0.0-20240401170217-c3f982113cda h1:wu/KJm9KJwpfHWhkkZGohVC6KRrc1oJNr4jwtQMOQXw=
+google.golang.org/genproto v0.0.0-20240401170217-c3f982113cda/go.mod h1:g2LLCvCeCSir/JJSWosk19BR4NVxGqHUC6rxIRsd7Aw=
+google.golang.org/genproto/googleapis/api v0.0.0-20240513163218-0867130af1f8 h1:W5Xj/70xIA4x60O/IFyXivR5MGqblAb8R3w26pnD6No=
+google.golang.org/genproto/googleapis/api v0.0.0-20240513163218-0867130af1f8/go.mod h1:vPrPUTsDCYxXWjP7clS81mZ6/803D8K4iM9Ma27VKas=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20240521202816-d264139d666e h1:Elxv5MwEkCI9f5SkoL6afed6NTdxaGoAo39eANBwHL8=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20240521202816-d264139d666e/go.mod h1:EfXuqaE1J41VCDicxHzUDm+8rk+7ZdXzHV0IhO/I6s0=
 google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
 google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
 google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
 google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
 google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv2fbc=
-google.golang.org/grpc v1.63.2 h1:MUeiw1B2maTVZthpU5xvASfTh3LDbxHd6IJ6QQVU+xM=
-google.golang.org/grpc v1.63.2/go.mod h1:WAX/8DgncnokcFUldAxq7GeB5DXHDbMF+lLvDomNkRA=
+google.golang.org/grpc v1.64.0 h1:KH3VH9y/MgNQg1dE7b3XfVK0GsPSIzJwdF617gUSbvY=
+google.golang.org/grpc v1.64.0/go.mod h1:oxjF8E3FBnjp+/gVFYdWacaLDx9na1aqy9oovLpxQYg=
 google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
 google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
 google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
diff --git a/platform/target_data.go b/platform/target_data.go
index b77ce477..85c32f68 100644
--- a/platform/target_data.go
+++ b/platform/target_data.go
@@ -1,6 +1,9 @@
 package platform
 
 import (
+	"fmt"
+	"runtime"
+
 	"github.com/buildpacks/imgutil"
 
 	"github.com/buildpacks/lifecycle/buildpack"
@@ -87,10 +90,16 @@ func matches(target1, target2 string) bool {
 	return target1 == target2
 }
 
-// GetTargetOSFromFileSystem populates the target metadata you pass in if the information is available
-// returns a boolean indicating whether it populated any data.
+// GetTargetOSFromFileSystem populates the provided target metadata with information from /etc/os-release
+// if it is available.
 func GetTargetOSFromFileSystem(d fsutil.Detector, tm *files.TargetMetadata, logger log.Logger) {
 	if d.HasSystemdFile() {
+		if tm.OS == "" {
+			tm.OS = "linux"
+		}
+		if tm.Arch == "" {
+			tm.Arch = runtime.GOARCH // in a future world where we support cross platform builds, this should be removed
+		}
 		contents, err := d.ReadSystemdFile()
 		if err != nil {
 			logger.Warnf("Encountered error trying to read /etc/os-release file: %s", err.Error())
@@ -112,21 +121,30 @@ func EnvVarsFor(d fsutil.Detector, tm files.TargetMetadata, logger log.Logger) [
 		logger.Info("target distro name/version labels not found, reading /etc/os-release file")
 		GetTargetOSFromFileSystem(d, &tm, logger)
 	}
+	// required
 	ret := []string{
 		"CNB_TARGET_OS=" + tm.OS,
 		"CNB_TARGET_ARCH=" + tm.Arch,
-		"CNB_TARGET_ARCH_VARIANT=" + tm.ArchVariant,
 	}
+	// optional
 	var distName, distVersion string
 	if tm.Distro != nil {
 		distName = tm.Distro.Name
 		distVersion = tm.Distro.Version
 	}
-	ret = append(ret, "CNB_TARGET_DISTRO_NAME="+distName)
-	ret = append(ret, "CNB_TARGET_DISTRO_VERSION="+distVersion)
+	ret = appendIfNotEmpty(ret, "CNB_TARGET_ARCH_VARIANT", tm.ArchVariant)
+	ret = appendIfNotEmpty(ret, "CNB_TARGET_DISTRO_NAME", distName)
+	ret = appendIfNotEmpty(ret, "CNB_TARGET_DISTRO_VERSION", distVersion)
 	return ret
 }
 
+func appendIfNotEmpty(env []string, key, val string) []string {
+	if val == "" {
+		return env
+	}
+	return append(env, fmt.Sprintf("%s=%s", key, val))
+}
+
 // TargetSatisfiedForRebase treats optional fields (ArchVariant and Distribution fields) as wildcards if empty, returns true if all populated fields match
 func TargetSatisfiedForRebase(t files.TargetMetadata, appTargetMetadata files.TargetMetadata) bool {
 	if t.OS != appTargetMetadata.OS || t.Arch != appTargetMetadata.Arch {


Test patch:
diff --git a/phase/builder_test.go b/phase/builder_test.go
index e4f4fa1e..3a197cce 100644
--- a/phase/builder_test.go
+++ b/phase/builder_test.go
@@ -189,7 +189,6 @@ func testBuilder(t *testing.T, when spec.G, it spec.S) {
 			executor.EXPECT().Build(*bpA, gomock.Any(), gomock.Any()).DoAndReturn(
 				func(_ buildpack.BpDescriptor, inputs buildpack.BuildInputs, logger llog.Logger) (buildpack.BuildOutputs, error) {
 					h.AssertContains(t, inputs.TargetEnv, "CNB_TARGET_ARCH=amd64")
-					h.AssertContains(t, inputs.TargetEnv, "CNB_TARGET_ARCH_VARIANT=")
 					h.AssertContains(t, inputs.TargetEnv, "CNB_TARGET_OS=linux")
 					return buildpack.BuildOutputs{}, nil
 				},
@@ -201,7 +200,6 @@ func testBuilder(t *testing.T, when spec.G, it spec.S) {
 			executor.EXPECT().Build(*bpB, gomock.Any(), gomock.Any()).Do(
 				func(_ buildpack.BpDescriptor, inputs buildpack.BuildInputs, _ llog.Logger) (buildpack.BuildOutputs, error) {
 					h.AssertContains(t, inputs.TargetEnv, "CNB_TARGET_ARCH=amd64")
-					h.AssertContains(t, inputs.TargetEnv, "CNB_TARGET_ARCH_VARIANT=")
 					h.AssertContains(t, inputs.TargetEnv, "CNB_TARGET_OS=linux")
 					return buildpack.BuildOutputs{}, nil
 				})
diff --git a/phase/detector_test.go b/phase/detector_test.go
index 1c0e3be0..ff429cd5 100644
--- a/phase/detector_test.go
+++ b/phase/detector_test.go
@@ -221,7 +221,6 @@ func testDetector(t *testing.T, when spec.G, it spec.S) {
 			executor.EXPECT().Detect(bpA1, gomock.Any(), gomock.Any()).Do(
 				func(_ buildpack.Descriptor, inputs buildpack.DetectInputs, _ log.Logger) buildpack.DetectOutputs {
 					h.AssertContains(t, inputs.TargetEnv, "CNB_TARGET_ARCH=amd64")
-					h.AssertContains(t, inputs.TargetEnv, "CNB_TARGET_ARCH_VARIANT=")
 					h.AssertContains(t, inputs.TargetEnv, "CNB_TARGET_OS=linux")
 					return buildpack.DetectOutputs{}
 				})
diff --git a/phase/generator_test.go b/phase/generator_test.go
index aefc13e1..df7ecb98 100644
--- a/phase/generator_test.go
+++ b/phase/generator_test.go
@@ -283,7 +283,6 @@ func testGenerator(t *testing.T, when spec.G, it spec.S) {
 						func(d buildpack.ExtDescriptor, inputs buildpack.GenerateInputs, _ *log.Logger) (buildpack.GenerateOutputs, error) {
 							h.AssertContains(t, inputs.TargetEnv,
 								"CNB_TARGET_ARCH=amd64",
-								"CNB_TARGET_ARCH_VARIANT=",
 								"CNB_TARGET_OS=linux",
 							)
 							return buildpack.GenerateOutputs{Dockerfiles: []buildpack.DockerfileInfo{{ExtensionID: d.Extension.ID,
@@ -293,7 +292,6 @@ func testGenerator(t *testing.T, when spec.G, it spec.S) {
 						func(d buildpack.ExtDescriptor, inputs buildpack.GenerateInputs, _ *log.Logger) (buildpack.GenerateOutputs, error) {
 							h.AssertContains(t, inputs.TargetEnv,
 								"CNB_TARGET_ARCH=amd64",
-								"CNB_TARGET_ARCH_VARIANT=",
 								"CNB_TARGET_OS=linux",
 							)
 							return buildpack.GenerateOutputs{Dockerfiles: []buildpack.DockerfileInfo{{ExtensionID: d.Extension.ID,
diff --git a/platform/target_data_test.go b/platform/target_data_test.go
index cb78ade9..f5aa9ee6 100644
--- a/platform/target_data_test.go
+++ b/platform/target_data_test.go
@@ -2,6 +2,7 @@ package platform_test
 
 import (
 	"fmt"
+	"runtime"
 	"testing"
 
 	"github.com/apex/log"
@@ -129,6 +130,8 @@ func testTargetData(t *testing.T, when spec.G, it spec.S) {
 				t:       t,
 				HasFile: true}
 			platform.GetTargetOSFromFileSystem(&d, &tm, logr)
+			h.AssertEq(t, "linux", tm.OS)
+			h.AssertEq(t, runtime.GOARCH, tm.Arch)
 			h.AssertEq(t, "opensesame", tm.Distro.Name)
 			h.AssertEq(t, "3.14", tm.Distro.Version)
 		})
@@ -199,12 +202,28 @@ func testTargetData(t *testing.T, when spec.G, it spec.S) {
 			observed := platform.EnvVarsFor(d, tm, &log.Logger{Handler: memory.New()})
 			h.AssertContains(t, observed, "CNB_TARGET_ARCH="+tm.Arch)
 			h.AssertContains(t, observed, "CNB_TARGET_OS="+tm.OS)
-			// note: per the spec only the ID field is optional, so I guess the others should always be set: https://github.com/buildpacks/rfcs/blob/main/text/0096-remove-stacks-mixins.md#runtime-metadata
-			// the empty ones:
-			h.AssertContains(t, observed, "CNB_TARGET_ARCH_VARIANT=")
-			h.AssertContains(t, observed, "CNB_TARGET_DISTRO_NAME=")
-			h.AssertContains(t, observed, "CNB_TARGET_DISTRO_VERSION=")
-			h.AssertEq(t, len(observed), 5)
+			h.AssertEq(t, len(observed), 2)
+		})
+
+		when("optional vars are empty", func() {
+			it("omits them", func() {
+				tm := files.TargetMetadata{
+					// required
+					OS:   "linux",
+					Arch: "pentium",
+					// optional
+					ArchVariant: "",
+					Distro:      &files.OSDistro{Name: "nix", Version: ""},
+					ID:          "",
+				}
+				d := &mockDetector{
+					contents: "this is just test contents really",
+					t:        t,
+					HasFile:  false,
+				}
+				observed := platform.EnvVarsFor(d, tm, &log.Logger{Handler: memory.New()})
+				h.AssertEq(t, len(observed), 3)
+			})
 		})
 	})