chore(deps): update dependency dagger/dagger to v0.21.9

[netic-renovate]

This PR contains the following updates:

Package	Update	Change
dagger/dagger	patch	v0.21.4 → v0.21.9

---

Release Notes

dagger/dagger (dagger/dagger)

v0.21.9

Compare Source

v0.21.9 - 2026-08-25

Added

• Added SSHFS-backed volumes, allowing remote filesystems to be mounted into containers without copying their contents into Dagger's content store by @​sipsma in #​13462

Fixed

• Container.withDirectory and Directory.withDirectory no longer restore by @​sipsma in #​13848
  deleted nested files after execs remove and recreate an ancestor
  directory.
• Engine client enumeration no longer blocks behind another session's by @​sipsma in #​13542
  initialization or teardown, preventing Cloud keeper heartbeats from stalling
  and live engines from being suspended.
• Session teardown now runs in the background after the main client disconnects, by @​sipsma in #​13681
  preventing shutdown responses from timing out while the engine releases
  session-owned cache results.
• The engine now bounds retained DAGQL cache metadata independently of disk by @​sipsma in #​13846
  usage by pruning cold persisted results when the structural estimate exceeds
  its configured limit. This may mitigate metadata growth at scale while
  preserving active and engine-lifetime cache roots.
• Registry protocol probes no longer appear as scary errors in progress output by @​vito in #​13410
  when image pulls or publishes succeed, while genuine registry failures remain
  visible.
• Registry authentication no longer invalidates downstream container cache reuse across sessions when applied before or after Container.from by @​sipsma in #​13901

What to do next?

• Read the documentation
• Join our Discord server
• Follow us on Twitter

v0.21.8

Compare Source

v0.21.8 - 2026-07-29

Changed

• Changeset diffs are now computed from filesystem metadata instead of full-content comparison, significantly speeding up diff computation for large directories. by @​marcosnils in
  #​13615

Fixed

• Dockerfile build layer caching so unrelated build-context changes no longer bust the cache: COPY-ed directories now get a content-based cache identity, re-keying downstream steps only when copied content
  actually changes. by @​marcosnils in #​13765
• The --x-release CLI re-exec so _EXPERIMENTAL_DAGGER_RUNNER_HOST is preserved (with a warning) instead of being stripped, and clarified its startup message to avoid implying it runs from any build. by
  @​tiborvass in #​13752
• Silent SDK sessions no longer retain frontend telemetry in memory while Cloud and OTLP export remain enabled. DAGGER_SILENT is now honored as the equivalent of --silent. by @​sipsma in
  #​13762

What to do next?

• Read the documentation
• Join our Discord server
• Follow us on Twitter

v0.21.7

Compare Source

Changed

• Bump default CNI IP address pool size to reduce address exhaustion under high container concurrency. by @​sipsma in #​13394
• Bump Dang to v2.1.1, moving JSON encoding behind the JSON namespace (with a deprecated top-level toJSON) and picking up constructor scope and nullable input fixes. by @​vito in #​13482

Fixed

• .env file handling so non-matching variables are kept as hidden expansion context instead of being dropped, allowing later variables to expand against them. by @​marcosnils in #​13490
• Filesync so syncing a re-included file under a gitignored directory (e.g. foo/ ignored with !foo/bar.txt) no longer fails with no such file or directory; ignored parent dirs are now created on demand for visible descendants. by @​grouville in #​13439
• A concurrent map panic during GC by guarding session client map iteration, preventing fatal concurrent map iteration and map write crashes. by @​sipsma in #​13474
• Go SDK codegen so SDK auth config is forwarded to typedef generation, allowing modules with private transitive Go dependencies to resolve during codegen. by @​grouville in #​13457
• Core enum handling to preserve conventional enum member names. by @​shykes in #​13435
• The Apple container driver to honor the privileged option by granting all capabilities (--cap-add ALL), so the engine can bind-mount /etc/resolv.conf on startup with container 1.0.0's reduced default capability set. by @​eunomie in #​13460
• Dang directive argument resolution so @cache (and other directive) arguments resolve against the declaring type's file scope, fixing FunctionCachePolicy not found in env errors in multi-file modules. by @​vito in #​13455
• The report-mode heartbeat so it waits for its goroutine to exit before final render, avoiding interleaved output. by @​kpenfound in #​13425
• Nullable result unwrapping for SDK input so nullable values are passed correctly into SDK functions. by @​shykes in #​13401

What to do next?

• Read the documentation
• Join our Discord server
• Follow us on Twitter

v0.21.6

Compare Source

Added

• Add registryService options to Container.from and Container.publish, allowing containers to pull from and publish to a registry provided by a Dagger Service. This supports local ephemeral registries without starting unrelated services attached to the container. by @​grouville in #​13305

Fixed

• Fix image pulls from single-platform image tags so they can resolve correctly even when the image config reports a different platform than the requested platform. by @​sipsma in #​13409
• Fix an intermittent module introspection/codegen cache error that could report add explicit dependency: dep result <id> missing from cache after implementation-scoped module results were reused across sessions. by @​sipsma in #​13412
• Fix filtered host directory imports when excluded files disappear during sync, preventing layer copy errors for paths that should have been ignored by include/exclude filters. by @​sipsma in #​13414
• Fix Dang v2 modules with private Map fields so map values are restored correctly between calls instead of failing with expected module type, got dang.MapType. by @​vito in #​13421
• Fix .env user defaults for module constructors so passing one constructor argument explicitly no longer drops defaults for the other arguments. by @​marcosnils in #​13424
• Fix a rare cache race that could return released directory snapshots and cause invalid immutable ref errors. by @​sipsma in #​13429

What to do next?

• Read the documentation
• Join our Discord server
• Follow us on Twitter

v0.21.5

Compare Source

Added

• Added expand option to container.exists by @​alexcb in #​13310
• Support both Dang v1 and v2, routed by module engineVersion by @​vito in #​13388

Changed

• Prune local cache during disk pressure by @​sipsma in #​13375
• Persist trivial core objects by @​sipsma in #​13387

Fixed

• Correct namespaced type-name mangling and cross-dependency interface dispatch in Dang by @​vito in #​13377
• Surface exec errors correctly on the Bun runtime in the TypeScript SDK by @​marcosnils in #​13395
• Ignore host xattrs for local filesync import identity by @​sipsma in #​13389
• Don't shallow-clone the user's repo for git telemetry labels by @​marcosnils in #​13363
• Preserve pending lazy container parents by @​sipsma in #​13365
• Preserve withChanges parent layers by @​dagger-codex[bot] + @​shykes in #​13342
• Treat incomplete image metadata as cache miss by @​sipsma in #​13346
• Cache registry image metadata by @​dagger-codex[bot] + @​shykes in #​13341
• Don't require id field for interface conformance in Dang by @​vito in #​13318
• Use module-local check names for scale-out by @​dagger-codex[bot] + @​tiborvass in #​13329
• Fix snapshot owner lease attach/remove race by @​sipsma in #​13321
• Follow source symlinks when copying directory contents in layercopy by @​marcosnils in #​13326

What to do next?

• Read the documentation
• Join our Discord server
• Follow us on Twitter

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[gh-netic-robot]

All checks passed, automatically approving.