@@ -188,7 +188,7 @@ func TestStoreLen(t *testing.T) {

 	expected := 10

 	for i := range expected {

-		_, err := imgStore.Create([]byte(fmt.Sprintf(`{"comment": "abc%d", "rootfs": {"type": "layers"}}`, i)))

+		_, err := imgStore.Create(fmt.Appendf(nil, `{"comment": "abc%d", "rootfs": {"type": "layers"}}`, i))

 		assert.NilError(t, err)

 	}

 	numImages := imgStore.Len()

@@ -393,7 +393,7 @@ func (nDB *NetworkDB) GetEntry(tname, nid, key string) ([]byte, error) {

 }

 func (nDB *NetworkDB) getEntry(tname, nid, key string) (*entry, error) {

-	e, ok := nDB.indexes[byTable].Get([]byte(fmt.Sprintf("/%s/%s/%s", tname, nid, key)))

+	e, ok := nDB.indexes[byTable].Get(fmt.Appendf(nil, "/%s/%s/%s", tname, nid, key))

 	if !ok {

 		return nil, types.NotFoundErrorf("could not get entry in table %s with network id %s and key %s", tname, nid, key)

 	}

@@ -470,7 +470,7 @@ func (nDB *NetworkDB) GetTableByNetwork(tname, nid string) map[string]*TableElem

 	root := nDB.indexes[byTable].Root()

 	nDB.RUnlock()

 	entries := make(map[string]*TableElem)

-	root.WalkPrefix([]byte(fmt.Sprintf("/%s/%s", tname, nid)), func(k []byte, v *entry) bool {

+	root.WalkPrefix(fmt.Appendf(nil, "/%s/%s", tname, nid), func(k []byte, v *entry) bool {

 		if v.deleting {

 			return false

 		}

@@ -794,8 +794,8 @@ func (nDB *NetworkDB) updateLocalNetworkTime() {

 // createOrUpdateEntry this function handles the creation or update of entries into the local

 // tree store. It is also used to keep in sync the entries number of the network (all tables are aggregated)

 func (nDB *NetworkDB) createOrUpdateEntry(nid, tname, key string, v *entry) (okTable bool, okNetwork bool) {

-	nDB.indexes[byTable], _, okTable = nDB.indexes[byTable].Insert([]byte(fmt.Sprintf("/%s/%s/%s", tname, nid, key)), v)

-	nDB.indexes[byNetwork], _, okNetwork = nDB.indexes[byNetwork].Insert([]byte(fmt.Sprintf("/%s/%s/%s", nid, tname, key)), v)

+	nDB.indexes[byTable], _, okTable = nDB.indexes[byTable].Insert(fmt.Appendf(nil, "/%s/%s/%s", tname, nid, key), v)

+	nDB.indexes[byNetwork], _, okNetwork = nDB.indexes[byNetwork].Insert(fmt.Appendf(nil, "/%s/%s/%s", nid, tname, key), v)

 	if !okNetwork {

 		// Add only if it is an insert not an update

 		n, ok := nDB.thisNodeNetworks[nid]

@@ -809,8 +809,8 @@ func (nDB *NetworkDB) createOrUpdateEntry(nid, tname, key string, v *entry) (okT

 // deleteEntry this function handles the deletion of entries into the local tree store.

 // It is also used to keep in sync the entries number of the network (all tables are aggregated)

 func (nDB *NetworkDB) deleteEntry(nid, tname, key string) (okTable bool, okNetwork bool) {

-	nDB.indexes[byTable], _, okTable = nDB.indexes[byTable].Delete([]byte(fmt.Sprintf("/%s/%s/%s", tname, nid, key)))

-	nDB.indexes[byNetwork], _, okNetwork = nDB.indexes[byNetwork].Delete([]byte(fmt.Sprintf("/%s/%s/%s", nid, tname, key)))

+	nDB.indexes[byTable], _, okTable = nDB.indexes[byTable].Delete(fmt.Appendf(nil, "/%s/%s/%s", tname, nid, key))

+	nDB.indexes[byNetwork], _, okNetwork = nDB.indexes[byNetwork].Delete(fmt.Appendf(nil, "/%s/%s/%s", nid, tname, key))

 	if okNetwork {

 		// Remove only if the delete is successful

 		n, ok := nDB.thisNodeNetworks[nid]

@@ -324,14 +324,14 @@ func TestNetworkDBCRUDTableEntries(t *testing.T) {

 	for i := 1; i <= n; i++ {

 		err = dbs[0].CreateEntry("test_table", "network1",

 			fmt.Sprintf("test_key0%d", i),

-			[]byte(fmt.Sprintf("test_value0%d", i)))

+			fmt.Appendf(nil, "test_value0%d", i))

 		assert.NilError(t, err)

 	}

 	for i := 1; i <= n; i++ {

 		err = dbs[1].CreateEntry("test_table", "network1",

 			fmt.Sprintf("test_key1%d", i),

-			[]byte(fmt.Sprintf("test_value1%d", i)))

+			fmt.Appendf(nil, "test_value1%d", i))

 		assert.NilError(t, err)

 	}

@@ -445,7 +445,7 @@ func TestNetworkDBBulkSync(t *testing.T) {

 	for i := 1; i <= n; i++ {

 		err = dbs[0].CreateEntry("test_table", "network1",

 			fmt.Sprintf("test_key0%d", i),

-			[]byte(fmt.Sprintf("test_value0%d", i)))

+			fmt.Appendf(nil, "test_value0%d", i))

 		assert.NilError(t, err)

 	}

@@ -5645,7 +5645,7 @@ func (s *DockerCLIBuildSuite) TestBuildMultiStageCopyFromSyntax(c *testing.T) {

 	assert.Equal(c, strings.Count(result.Combined(), "Using cache"), 7)

 	assert.Equal(c, getIDByName(c, "build1"), getIDByName(c, "build2"))

-	err := os.WriteFile(filepath.Join(ctx.Dir, "Dockerfile"), []byte(fmt.Sprintf(dockerfile, "COPY baz/aa foo")), 0o644)

+	err := os.WriteFile(filepath.Join(ctx.Dir, "Dockerfile"), fmt.Appendf(nil, dockerfile, "COPY baz/aa foo"), 0o644)

 	assert.NilError(c, err)

 	// changing file in parent block should not affect last block

@@ -2125,7 +2125,7 @@ func (s *DockerDaemonSuite) TestShmSizeReload(c *testing.T) {

 	configFile := filepath.Join(configPath, "config.json")

 	size := 67108864 * 2

-	configData := []byte(fmt.Sprintf(`{"default-shm-size": "%dM"}`, size/1024/1024))

+	configData := fmt.Appendf(nil, `{"default-shm-size": "%dM"}`, size/1024/1024)

 	assert.Assert(c, os.WriteFile(configFile, configData, 0o666) == nil, "could not write temp file for config reload")

 	pattern := regexp.MustCompile(fmt.Sprintf("shm on /dev/shm type tmpfs(.*)size=%dk", size/1024))

@@ -2140,7 +2140,7 @@ func (s *DockerDaemonSuite) TestShmSizeReload(c *testing.T) {

 	assert.Equal(c, strings.TrimSpace(out), fmt.Sprintf("%v", size))

 	size = 67108864 * 3

-	configData = []byte(fmt.Sprintf(`{"default-shm-size": "%dM"}`, size/1024/1024))

+	configData = fmt.Appendf(nil, `{"default-shm-size": "%dM"}`, size/1024/1024)

 	assert.Assert(c, os.WriteFile(configFile, configData, 0o666) == nil, "could not write temp file for config reload")

 	pattern = regexp.MustCompile(fmt.Sprintf("shm on /dev/shm type tmpfs(.*)size=%dk", size/1024))

@@ -77,7 +77,7 @@ func (s *DockerRegistryAuthHtpasswdSuite) TestLogoutWithWrongHostnamesStored(c *

 	c.Setenv("PATH", testPath)

 	cmd := exec.Command("docker-credential-shell-test", "store")

-	stdin := bytes.NewReader([]byte(fmt.Sprintf(`{"ServerURL": "https://%s", "Username": %q, "Secret": %q}`, privateRegistryURL, s.reg.Username(), s.reg.Password())))

+	stdin := bytes.NewReader(fmt.Appendf(nil, `{"ServerURL": "https://%s", "Username": %q, "Secret": %q}`, privateRegistryURL, s.reg.Username(), s.reg.Password()))

 	cmd.Stdin = stdin

 	assert.NilError(c, cmd.Run())