Update product-os/flowzone action to v23.1.17

[klutchell-renovate]

This PR contains the following updates:

Package	Type	Update	Change
product-os/flowzone	workflow	patch	v23.1.12 → v23.1.17

---

Release Notes

product-os/flowzone (product-os/flowzone)

v23.1.17

Compare Source

Update dependency docker/buildx to v0.37.0

Notable changes

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Alberto Garcia Hierro
• Brad Davidson
• Guilhem Charles
• Guillaume Lours
• Buildx now supports cloud driver builder instances to run builds with Docker Build Cloud service. No custom version of Buildx binary is needed anymore. #​4017
• Newly started container builders now wait for BuildKit readiness before first use. #​4027
• Policy evaluation now uses Docker CLI registry auth for image metadata. #​4046
• Several consistency issues with handling Windows platform identifiers with OS version have been fixed. #​4035 #​4034 #​4008
• Using the Kubernetes driver now skips terminating pods when choosing a pod. #​3997
• Avoid creating temporary files on the host to send builder configuration to remote containers. #​3996
• Fix issue where Bake builds could sometimes drop sending build secrets when using linked targets. #​4014
• Fix cases where empty source policy sessions were created for some builds, possibly causing confusing progress output. #​4028
• github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.8
• github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.39
• github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.38
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.39
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.39
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.39
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.40
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.18
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.39
• github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.8
• github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.8
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.8
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.8
• github.com/aws/smithy-go v1.27.4 -> v1.27.10
• github.com/compose-spec/compose-go/v2 v2.13.0 -> v2.14.0
• github.com/containerd/containerd/v2 v2.3.3 -> v2.3.4
• github.com/containerd/platforms v1.0.0-rc.4 -> v1.0.0-rc.5
• github.com/docker/cli v29.6.2 -> v29.7.2
• github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
• github.com/go-logr/logr v1.4.3 -> v1.4.4
• github.com/klauspost/compress v1.19.1 -> v1.19.2
• github.com/moby/buildkit v0.32.2 -> v0.33.0
• github.com/moby/go-archive v0.2.1 -> v0.2.0
• github.com/moby/policy-helpers 856be88 -> dd6c549
• github.com/pelletier/go-toml/v2 v2.3.1 -> v2.4.3
• github.com/sirupsen/logrus v1.9.4 -> v1.10.2
• github.com/stretchr/testify v1.11.1 -> v1.12.1
• github.com/tonistiigi/fsutil 6d9dc2e -> 83cac42
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
• go.opentelemetry.io/otel v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
• go.opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0
• go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
• golang.org/x/crypto v0.54.0 -> v0.55.0
• golang.org/x/mod v0.38.0 -> v0.40.0
• golang.org/x/net v0.57.0 -> v0.58.0
• golang.org/x/text v0.40.0 -> v0.41.0
• golang.org/x/tools v0.47.0 -> v0.49.0
• google.golang.org/genproto/googleapis/api 3dc84a4 -> 6ac0973
• google.golang.org/genproto/googleapis/rpc 3dc84a4 -> 6ac0973
• google.golang.org/grpc v1.82.1 -> v1.83.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 -> v1.6.2
• google.golang.org/protobuf f2248ac -> v1.36.12
• k8s.io/api v0.36.0 -> v0.36.3
• k8s.io/apimachinery v0.36.0 -> v0.36.3
• k8s.io/client-go v0.36.0 -> v0.36.3
• sigs.k8s.io/structured-merge-diff/v6 v6.3.2 -> v6.3.3

docker/buildx (docker/buildx)

v0.37.0

Compare Source

Welcome to the v0.37.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Alberto Garcia Hierro
• Brad Davidson
• Guilhem Charles
• Guillaume Lours

Notable Changes

• Buildx now supports cloud driver builder instances to run builds with Docker Build Cloud service. No custom version of Buildx binary is needed anymore. #​4017
• Newly started container builders now wait for BuildKit readiness before first use. #​4027
• Policy evaluation now uses Docker CLI registry auth for image metadata. #​4046
• Several consistency issues with handling Windows platform identifiers with OS version have been fixed. #​4035 #​4034 #​4008
• Using the Kubernetes driver now skips terminating pods when choosing a pod. #​3997
• Avoid creating temporary files on the host to send builder configuration to remote containers. #​3996
• Fix issue where Bake builds could sometimes drop sending build secrets when using linked targets. #​4014
• Fix cases where empty source policy sessions were created for some builds, possibly causing confusing progress output. #​4028

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.8
• github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.39
• github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.38
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.39
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.39
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.39
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.40
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.18
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.39
• github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.8
• github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.8
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.8
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.8
• github.com/aws/smithy-go v1.27.4 -> v1.27.10
• github.com/compose-spec/compose-go/v2 v2.13.0 -> v2.14.0
• github.com/containerd/containerd/v2 v2.3.3 -> v2.3.4
• github.com/containerd/platforms v1.0.0-rc.4 -> v1.0.0-rc.5
• github.com/docker/cli v29.6.2 -> v29.7.2
• github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
• github.com/go-logr/logr v1.4.3 -> v1.4.4
• github.com/klauspost/compress v1.19.1 -> v1.19.2
• github.com/moby/buildkit v0.32.2 -> v0.33.0
• github.com/moby/go-archive v0.2.1 -> v0.2.0
• github.com/moby/policy-helpers 856be88 -> dd6c549
• github.com/pelletier/go-toml/v2 v2.3.1 -> v2.4.3
• github.com/sirupsen/logrus v1.9.4 -> v1.10.2
• github.com/stretchr/testify v1.11.1 -> v1.12.1
• github.com/tonistiigi/fsutil 6d9dc2e -> 83cac42
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
• go.opentelemetry.io/otel v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
• go.opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0
• go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
• golang.org/x/crypto v0.54.0 -> v0.55.0
• golang.org/x/mod v0.38.0 -> v0.40.0
• golang.org/x/net v0.57.0 -> v0.58.0
• golang.org/x/text v0.40.0 -> v0.41.0
• golang.org/x/tools v0.47.0 -> v0.49.0
• google.golang.org/genproto/googleapis/api 3dc84a4 -> 6ac0973
• google.golang.org/genproto/googleapis/rpc 3dc84a4 -> 6ac0973
• google.golang.org/grpc v1.82.1 -> v1.83.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 -> v1.6.2
• google.golang.org/protobuf f2248ac -> v1.36.12
• k8s.io/api v0.36.0 -> v0.36.3
• k8s.io/apimachinery v0.36.0 -> v0.36.3
• k8s.io/client-go v0.36.0 -> v0.36.3
• sigs.k8s.io/structured-merge-diff/v6 v6.3.2 -> v6.3.3

Previous release can be found at v0.36.1

List of commits

af9cf8e (Update dependency docker/buildx to v0.37.0, 2026-09-03)

v23.1.16

Compare Source

f1bf7c4 (Update dtolnay/rust-toolchain digest, 2026-09-03)

v23.1.15

Compare Source

Update aws-actions/configure-aws-credentials action to v6.2.4

Notable changes

• account-ids handling, mask proxy as secret in logs (#​1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#​1937) (3852440)

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v6.2.4

Compare Source

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#​1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#​1937) (3852440)

List of commits

a8980bf (Update aws-actions/configure-aws-credentials action to v6.2.4, 2026-09-01)

v23.1.14

Compare Source

Update docker/setup-qemu-action action to v4.3.0

Notable changes

• Bump @​​docker/actions-toolkit from 0.92.0 to 0.96.0 in #​336
• Bump @​​sigstore/verify from 3.1.0 to 3.1.1 in #​316
• Bump brace-expansion from 1.1.15 to 1.1.18 in #​332
• Bump js-yaml from 4.2.0 to 4.3.1 in #​334
• Bump postcss from 8.5.10 to 8.5.25 in #​331
• Bump sigstore from 4.1.0 to 4.1.1 in #​317
• Bump undici from 6.27.0 to 6.28.0 in #​333

docker/setup-qemu-action (docker/setup-qemu-action)

v4.3.0

Compare Source

• Bump @​​docker/actions-toolkit from 0.92.0 to 0.96.0 in #​336
• Bump @​​sigstore/verify from 3.1.0 to 3.1.1 in #​316
• Bump brace-expansion from 1.1.15 to 1.1.18 in #​332
• Bump js-yaml from 4.2.0 to 4.3.1 in #​334
• Bump postcss from 8.5.10 to 8.5.25 in #​331
• Bump sigstore from 4.1.0 to 4.1.1 in #​317
• Bump undici from 6.27.0 to 6.28.0 in #​333

Full Changelog: docker/setup-qemu-action@v4.2.0...v4.3.0

List of commits

54fc332 (Update docker/setup-qemu-action action to v4.3.0, 2026-09-01)

v23.1.13

Compare Source

Update dependency aws-cloudformation/cfn-lint to v1.56.0

Notable changes

aws-cloudformation/cfn-lint (aws-cloudformation/cfn-lint)

v1.56.0

Compare Source

v1.56.0

List of commits

50bf427 (Update dependency aws-cloudformation/cfn-lint to v1.56.0, 2026-08-31)

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.