diff --git a/ci/Dockerfile-buildkit b/ci/Dockerfile-buildkit
index 73f813bdcd3c1..d4be4b7821320 100644
--- a/ci/Dockerfile-buildkit
+++ b/ci/Dockerfile-buildkit
@@ -1,3 +1,3 @@
 # We dont build from this dockerfile - we just parse the version, but storing
 # here means we get the dependabot updates
-FROM moby/buildkit:v0.29.0@sha256:0039c1d47e8748b5afea56f4e85f14febaf34452bd99d9552d2daa82262b5cc5
+FROM moby/buildkit:v0.31.2@sha256:2f5adac4ecd194d9f8c10b7b5d7bceb5186853db1b26e5abd3a657af0b7e26ec