diff --git a/ci/Dockerfile-buildkit b/ci/Dockerfile-buildkit
index 73f813bdcd3c1..35532517fa65a 100644
--- a/ci/Dockerfile-buildkit
+++ b/ci/Dockerfile-buildkit
@@ -1,3 +1,3 @@
 # We dont build from this dockerfile - we just parse the version, but storing
 # here means we get the dependabot updates
-FROM moby/buildkit:v0.29.0@sha256:0039c1d47e8748b5afea56f4e85f14febaf34452bd99d9552d2daa82262b5cc5
+FROM moby/buildkit:v0.31.0@sha256:a095b3d11ce1a9a05b6064ef515dfca0291ec5bcf2ea8178da8f6461924294e1