chore: Update buildkit and allow dependabot

[erpel]

Updates the buildkit dependency to get rid of CVE scanner findings:

• CVE-2024-23651
• CVE-2024-23652
• CVE-2024-23653
• CVE-2024-23650

Additionally add buildkit to the allowed dependencies in dependabot config.

[robmonct]

The moby/buildkit bump provokes an error into the release:

⨯ release failed after 47s                 
error=failed to build for linux_amd64_v1: exit status 1: # github.com/moby/buildkit/frontend/dockerfile/instructions
Error: ../../../go/pkg/mod/github.com/moby/[email protected]/frontend/dockerfile/instructions/parse.go:592:15: healthcheck.StartInterval undefined (type container.HealthConfig has no field or method StartInterval)

I've been trying to solve, but I can't find the way to configure that healthcheck.StartInterval to be picked up by moby/buildkit

UPDATE:
After some hours, it started to work. I don't know the reason to be honest.

[jalseth]

I don't think conftest uses the vulnerable code path, but including the patch doesn't hurt. Thanks for the PR.