chore(deps): update docker.io/moby/buildkit docker tag to v0.28.1 in devtools-python3.10-v1beta1 (#3806)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [docker.io/moby/buildkit](https://redirect.github.com/moby/buildkit) |
stage | patch | `v0.28.0-rootless` → `v0.28.1-rootless` |

---

### Release Notes

<details>
<summary>moby/buildkit (docker.io/moby/buildkit)</summary>

###
[`v0.28.1`](https://redirect.github.com/moby/buildkit/releases/tag/v0.28.1)

[Compare
Source](https://redirect.github.com/moby/buildkit/compare/v0.28.0...v0.28.1)

Welcome to the v0.28.1 release of buildkit!

Please try out the release binaries and report any issues at
<https://github.com/moby/buildkit/issues>.

##### Contributors

- Tõnis Tiigi
- CrazyMax
- Sebastiaan van Stijn

##### Notable Changes

- Fix insufficient validation of Git URL `#ref:subdir` fragments that
could allow access to restricted files outside the checked-out
repository root.
[GHSA-4vrq-3vrq-g6gg](https://redirect.github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg)
- Fix a vulnerability where an untrusted custom frontend could cause
files to be written outside the BuildKit state directory.
[GHSA-4c29-8rgm-jvjj](https://redirect.github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj)
- Fix a panic when processing invalid `.dockerignore` patterns during
`COPY`.
[#&#8203;6610](https://redirect.github.com/moby/buildkit/issues/6610)
[moby/patternmatcher#9](https://redirect.github.com/moby/patternmatcher/issues/9)

##### Dependency Changes

- **github.com/moby/patternmatcher**  v0.6.0 -> v0.6.1

Previous release can be found at
[v0.28.0](https://redirect.github.com/moby/buildkit/releases/tag/v0.28.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44My4yIiwidXBkYXRlZEluVmVyIjoiNDMuODMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwicmVub3ZhdGUiXX0=-->

Co-authored-by: renovate-coop-norge[bot] <151545514+renovate-coop-norge[bot]@users.noreply.github.com>

Author: renovate-coop-norge[bot]

images/devtools-python3.10-v1beta1/context/Dockerfile

@@ -1,7 +1,7 @@
 FROM docker.io/library/python:3.10.20@sha256:a5ef46a93e429aa07466f536c25962f3c157c0db77f5b9691d1a04a832cd62f4 AS python
 FROM docker.io/hadolint/hadolint:v2.14.0@sha256:27086352fd5e1907ea2b934eb1023f217c5ae087992eb59fde121dce9c9ff21e AS hadolint
 FROM --platform=linux/amd64 docker.io/goodwithtech/dockle:v0.4.15@sha256:eade932f793742de0aa8755406c7677cd7696f8675b6180926f7eeffa7abe6b9 AS dockle
-FROM docker.io/moby/buildkit:v0.28.0-rootless@sha256:0add53e4362ff54ab59f0d4ef78b0397ed23ee8e2d0366f9b9c3c67575c7c9ef AS buildkit
+FROM docker.io/moby/buildkit:v0.28.1-rootless@sha256:4004494c888b51a51118b68e49662472d48e132ef7b03806d65b04c2eb44774e AS buildkit
 FROM gcr.io/go-containerregistry/crane:latest@sha256:cf88890f8a6b21183cd6628ad1e83051494e9d5094b8412115f798f4ddf35437 AS crane
 FROM docker.io/mikefarah/yq:4@sha256:a4c2cafdf4674b2dc3c6ac457fe1486d55d7d93edb3ed4459637afda3c286af6 AS yq