Bump github.com/containers/buildah from 1.38.1 to 1.39.0

[dependabot]

Bumps github.com/containers/buildah from 1.38.1 to 1.39.0.

Release notes

Sourced from github.com/containers/buildah's releases.

v1.39.0

What's Changed

Notable changes

• Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0, Buildah to v1.38.0 by @​TomSweeneyRedHat in containers/buildah#5830
• CI VMs: bump again by @​edsantiago in containers/buildah#5833
• Finish updating to go 1.22 by @​nalind in containers/buildah#5835
• (not just) Makefile cleanups by @​kolyshkin in containers/buildah#5832
• executor: allow to specify --no-pivot-root by @​giuseppe in containers/buildah#5838
• Makefile: list sources via find conditionally by @​danishprakash in containers/buildah#5807
• Tests: make _prefetch() parallel-safe by @​edsantiago in containers/buildah#5841
• [skip-ci] Packit: f39 and rhel cleanups by @​lsm5 in containers/buildah#5849
• CI: remove some inter-job dependencies, run cross-compile task with make -j, use /tmp for Go build cache by @​nalind in containers/buildah#5856
• copier: use .PAXRecords instead of .Xattrs by @​nalind in containers/buildah#5875
• Add context to an error message by @​nalind in containers/buildah#5873
• manifest add: add --artifact-annotation by @​nalind in containers/buildah#5854
• chroot: on Linux, try to pivot_root before falling back to chroot by @​nalind in containers/buildah#5874
• Fix an error message in the chroot unit test by @​nalind in containers/buildah#5876
• stage_executor: set avoidLookingCache only if mounting stage and not additional build context by @​flouthoc in containers/buildah#5693
• Allow cache mounts to be stages and additional build contexts by @​nalind in containers/buildah#5897
• New VM Images by @​Luap99 in containers/buildah#5900
• [skip-ci] RPM: cleanup changelog conditionals by @​lsm5 in containers/buildah#5888
• copy-preserving-extended-attributes: use a different base image by @​nalind in containers/buildah#5901
• Add support for --security-opt mask and unmask by @​rhatdan in containers/buildah#5883
• [CI:DOCS] Touch up changelogs by @​TomSweeneyRedHat in containers/buildah#5907
• relabel(): correct a misleading parameter name by @​nalind in containers/buildah#5922
• Add more checks to the --mount flag parsing logic by @​nalind in containers/buildah#5925
• chroot mount flags integration test: copy binaries by @​nalind in containers/buildah#5926
• bump github.com/vbatts/tar-split by @​nalind in containers/buildah#5930
• fix broken doc link by @​cheesesashimi in containers/buildah#5936
• run_freebsd.go: only import runtime-spec once by @​nalind in containers/buildah#5935
• Update c/image and update tests by @​mtrmac in containers/buildah#5932
• refactor: replace golang.org/x/exp with stdlib by @​Juneezee in containers/buildah#5937
• Run(): always clean up options.ExternalImageMounts by @​nalind in containers/buildah#5924
• Accept image names as sources for cache mounts by @​nalind in containers/buildah#5934
• [skip-ci] RPM: use default gobuild macro on RHEL by @​lsm5 in containers/buildah#5938
• vendor to latest c/{common,image,storage} by @​Luap99 in containers/buildah#5929
• build, run: record hash or digest in image history for sources used in --mount by @​flouthoc in containers/buildah#5691
• pkg/overlay: cleanups by @​nalind in containers/buildah#5927
• bats tests - parallelize by @​edsantiago in containers/buildah#5552
• CI, .cirrus: parallelize containerized integration by @​flouthoc in containers/buildah#5947

Dependency updates

• Update module github.com/moby/sys/capability to v0.4.0 by @​renovate in containers/buildah#5836
• Update module github.com/opencontainers/runc to v1.2.2 by @​renovate in containers/buildah#5840
• Update module github.com/moby/buildkit to v0.17.2 by @​renovate in containers/buildah#5844
• Update module github.com/stretchr/testify to v1.10.0 by @​renovate in containers/buildah#5846
• Update github.com/opencontainers/runtime-tools digest to f7e3563 by @​renovate in containers/buildah#5852
• Update golang.org/x/exp digest to 2d47ceb by @​renovate in containers/buildah#5853
• Update module github.com/moby/buildkit to v0.18.1 by @​renovate in containers/buildah#5848

... (truncated)

Changelog

Sourced from github.com/containers/buildah's changelog.

v1.39.0 (2025-01-31)

Bump c/storage v1.57.1, c/image 5.34.0,  c/common v0.62.0
Update module github.com/containers/storage to v1.57.0
CI, .cirrus: parallelize containerized integration
ed's comment: cleanup
use seperate blobinfocache for flaky test
bump CI VMs to 4 CPUs (was: 2) for integration tests
cleanup, debug, and disable parallel in blobcache tests
bats tests - parallelize
pkg/overlay: cleanups
RPM: include check section to silence rpmlint
RPM: use default gobuild macro on RHEL
tests: remove masked /sys/dev/block check
vendor to latest c/{common,image,storage}
build, run: record hash or digest in image history
Accept image names as sources for cache mounts
Run(): always clean up options.ExternalImageMounts
refactor: replace golang.org/x/exp with stdlib
Update to c/image @main
fix broken doc link
run_freebsd.go: only import runtime-spec once
fix(deps): update module github.com/docker/docker to v27.5.1+incompatible
bump github.com/vbatts/tar-split
Add more checks to the --mount flag parsing logic
chroot mount flags integration test: copy binaries
fix(deps): update module github.com/moby/buildkit to v0.19.0
relabel(): correct a misleading parameter name
Fix TOCTOU error when bind and cache mounts use "src" values
define.TempDirForURL(): always use an intermediate subdirectory
internal/volume.GetBindMount(): discard writes in bind mounts
pkg/overlay: add a MountLabel flag to Options
pkg/overlay: add a ForceMount flag to Options
Add internal/volumes.bindFromChroot()
Add an internal/open package
fix(deps): update module github.com/containers/common to v0.61.1
fix(deps): update module github.com/containers/image/v5 to v5.33.1
[CI:DOCS] Touch up changelogs
fix(deps): update module github.com/docker/docker to v27.5.0+incompatible
copy-preserving-extended-attributes: use a different base image
fix(deps): update github.com/containers/luksy digest to a3a812d
chore(deps): update module golang.org/x/net to v0.33.0 [security]
fix(deps): update module golang.org/x/crypto to v0.32.0
New VM Images
fix(deps): update module github.com/opencontainers/runc to v1.2.4
fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
fix(deps): update module github.com/containers/ocicrypt to v1.2.1
Add support for --security-opt mask and unmask
Allow cache mounts to be stages or additional build contexts
[skip-ci] RPM: cleanup changelog conditionals

... (truncated)

Commits

• c15ab10 Bump to Buildah v1.39.0
• 298a641 Bump c/storage v1.57.1, c/image 5.34.0, c/common v0.62.0
• 2fe355b Merge pull request #5957 from containers/renovate/github.com-containers-stora...
• 3c7c611 Update module github.com/containers/storage to v1.57.0
• 607ca30 Merge pull request #5947 from flouthoc/containerized_integration_parallel
• d11bd71 CI, .cirrus: parallelize containerized integration
• 042414a Merge pull request #5552 from edsantiago/bats-parallel
• bd2d78e ed's comment: cleanup
• ea39556 use seperate blobinfocache for flaky test
• 72161b3 bump CI VMs to 4 CPUs (was: 2) for integration tests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)