Add checks for some image config fields that were missing.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
(cherry picked from commit 5373487)
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>

Store additional image property which makes it possible to distinguish
if image was built locally.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
(cherry picked from commit c6156dc)
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>

Restrict cache candidates only to images that were built locally.
This doesn't affect builds using `--cache-from`.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
(cherry picked from commit 96ac227)
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>

Make sure the cache candidate platform matches the requested.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
(cherry picked from commit 877ebbe)
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>

Previously this was done indirectly - the `compare` function didn't
check the `ArgsEscaped`.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
(cherry picked from commit 96d461d)
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>

The double quotes inside a single quoted string don't need to be
escaped.
Looks like different Powershell versions are treating this differently
and it started failing unexpectedly without any changes on our side.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
(cherry picked from commit ecb217c)

[25.0 backport] hack/make.ps1: Fix go list pattern

Update the runc binary that's used in CI and for the static packages, which
includes a fix for [CVE-2024-21626].

- release notes: https://github.com/opencontainers/runc/releases/tag/v1.1.12
- full diff: opencontainers/runc@v1.1.11...v1.1.12

[CVE-2024-21626]: GHSA-xr7r-f8xq-vfvv

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 44bf407)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

- release notes: https://github.com/opencontainers/runc/releases/tag/v1.1.12
- full diff: opencontainers/runc@v1.1.11...v1.1.12

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit b20dccb)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

full diff: moby/buildkit@v0.12.4...v0.12.5

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>

Update the containerd binary that's used in CI

- full diff: containerd/containerd@v1.7.12...v1.7.13
- release notes: https://github.com/containerd/containerd/releases/tag/v1.7.13

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 835cdca)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

[25.0 backport] vendor: github.com/opencontainers/runc v1.1.12

[25.0 backport] vendor: github.com/moby/buildkit v0.12.5

…d_binary_1.7.13

[25.0 backport] update containerd binary to v1.7.13

…ry_1.1.12

[25.0 backport] update runc binary to v1.1.12

[25.0 backport] image/cache: Restrict cache candidates to locally built images