diff --git a/_vendor/github.com/moby/buildkit/docs/buildkitd.toml.md b/_vendor/github.com/moby/buildkit/docs/buildkitd.toml.md
index 71061c6268..ec314b9f08 100644
--- a/_vendor/github.com/moby/buildkit/docs/buildkitd.toml.md
+++ b/_vendor/github.com/moby/buildkit/docs/buildkitd.toml.md
@@ -46,6 +46,13 @@ insecure-entitlements = [ "network.host", "security.insecure" ]
   # OTEL collector trace socket path
   socketPath = "/run/buildkit/otel-grpc.sock"
 
+[cdi]
+  # Disables support of the Container Device Interface (CDI).
+  disabled = true
+  # List of directories to scan for CDI spec files. For more details about CDI
+  # specification, please refer to https://github.com/cncf-tags/container-device-interface/blob/main/SPEC.md#cdi-json-specification
+  specDirs = ["/etc/cdi", "/var/run/cdi", "/etc/buildkit/cdi"]
+
 # config for build history API that stores information about completed build commands
 [history]
   # maxAge is the maximum age of history entries to keep, in seconds.
diff --git a/go.mod b/go.mod
index b8f3e2f9a9..455e886100 100644
--- a/go.mod
+++ b/go.mod
@@ -16,6 +16,6 @@ replace (
 	github.com/docker/cli => github.com/docker/cli v27.5.1+incompatible
 	github.com/docker/compose/v2 => github.com/docker/compose/v2 v2.32.4
 	github.com/docker/scout-cli => github.com/docker/scout-cli v1.15.0
-	github.com/moby/buildkit => github.com/moby/buildkit v0.19.0
+	github.com/moby/buildkit => github.com/moby/buildkit v0.20.0
 	github.com/moby/moby => github.com/moby/moby v27.5.1+incompatible
 )
diff --git a/go.sum b/go.sum
index 77dbd8f36d..2bd11aad6e 100644
--- a/go.sum
+++ b/go.sum
@@ -341,6 +341,8 @@ github.com/moby/buildkit v0.18.0 h1:KSelhNINJcNA3FCWBbGCytvicjP+kjU5kZlZhkTUkVo=
 github.com/moby/buildkit v0.18.0/go.mod h1:vCR5CX8NGsPTthTg681+9kdmfvkvqJBXEv71GZe5msU=
 github.com/moby/buildkit v0.19.0 h1:w9G1p7sArvCGNkpWstAqJfRQTXBKukMyMK1bsah1HNo=
 github.com/moby/buildkit v0.19.0/go.mod h1:WiHBFTgWV8eB1AmPxIWsAlKjUACAwm3X/14xOV4VWew=
+github.com/moby/buildkit v0.20.0 h1:aF5RujjQ310Pn6SLL/wQYIrSsPXy0sQ5KvWifwq1h8Y=
+github.com/moby/buildkit v0.20.0/go.mod h1:HYFUIK+iGDRxRgdphZ9Nv0y1Fz7mv0HrU7xZoXx217E=
 github.com/moby/locker v1.0.1/go.mod h1:S7SDdo5zpBK84bzzVlKr2V0hz+7x9hWbYC/kq7oQppc=
 github.com/moby/moby v24.0.2+incompatible h1:yH+5dRHH1x3XRKzl1THA2aGTy6CHYnkt5N924ADMax8=
 github.com/moby/moby v24.0.2+incompatible/go.mod h1:fDXVQ6+S340veQPv35CzDahGBmHsiclFwfEygB/TWMc=