---
name: Docker
slug: docker
domain: docker.com
category: devops
sources: 5
total_releases: 590
releases_last_30d: 13
avg_releases_per_week: 3.3
last_updated: 2026-10-15
tracking_since: 2017-08-31
canonical: https://releases.sh/docker
overview_url: https://releases.sh/docker/overview.md
accounts:
  github: "docker"
  x: "Docker"
---

## Overview

Shipped Buildx v0.38.0 with tunable Bake job scheduling and a replay command, plus Compose v5.6.0 with partial jobs support.

**Bake gained scheduling controls and consent fixes.**
- `--jobs/-j` sets job execution modes and parallelization limits; `defer-error` delays cancelling failed jobs and `defer-output` waits for all jobs before exporting
- `--set` overrides can clear array values with an empty parameter, and git advice output is controlled by `BUILDKIT_GIT_ADVICE` and `BUILDX_BAKE_GIT_ADVICE`
- v0.37.2 closed two entitlement gaps: `--progress=rawjson` rejects ungranted entitlements instead of skipping consent, and `fs.read` approval is required for secret files resolved via implicit `id` fallback and local OCI layout named contexts

**`docker buildx replay build` rebuilds historical builds.** The new experiment command reconstructs a build from recorded provenance of a distributed artifact or Docker image; expect changes in future releases.

**Compose v5.6.0 added partial jobs support.** Only manually-triggered jobs work for now; scheduled jobs wait on matching Docker Engine support. Provider services gained a relay for published endpoints, a dedicated relay link network, and a role in the image phase.

**Smaller fixes.** Buildx v0.37.1 stopped failed multi-node pushes from leaving tags on partial images and kept linked Bake targets on the Kubernetes driver alive until builds finish. Compose v5.5.1 surfaced lifecycle-hook output in errors and fixed symlink sync in `compose watch`.

<Product name="Buildx" slug="docker-buildx" sources="1" canonical="https://releases.sh/docker/docker-buildx" />
<Product name="Compose" slug="docker-compose" sources="2" canonical="https://releases.sh/docker/docker-compose" />
<Product name="Desktop" slug="docker-desktop" sources="1" canonical="https://releases.sh/docker/docker-desktop" />
<Product name="Engine" slug="docker-engine" sources="1" canonical="https://releases.sh/docker/docker-engine" />

<Source name="Compose Release Notes" slug="docker-compose-release-notes" type="scrape" releases="124" latest-version="v5.6.0" latest-date="2026-10-02T16:07:06.000Z" url="https://releases.sh/docker/docker-compose-release-notes" />
<Source name="Desktop Release Notes" slug="docker-desktop-release-notes" type="scrape" releases="86" latest-version="4.95.0" latest-date="2026-10-12T00:00:00.000Z" url="https://releases.sh/docker/docker-desktop-release-notes" />
<Source name="Docker Buildx" slug="docker-buildx-releases" type="github" releases="144" latest-version="v0.38.0" latest-date="2026-10-07T23:39:15.000Z" url="https://releases.sh/docker/docker-buildx-releases" />
<Source name="Docker Compose" slug="docker-compose-releases" type="github" releases="210" latest-version="v5.6.0" latest-date="2026-10-02T16:07:06.000Z" url="https://releases.sh/docker/docker-compose-releases" />
<Source name="Engine Release Notes" slug="docker-engine-release-notes" type="scrape" releases="26" latest-version="29.9.1" latest-date="2026-10-14T00:00:00.000Z" url="https://releases.sh/docker/docker-engine-release-notes" />

## Recent Releases

_Summaries below — fetch the release's `canonical` URL for full content, or `url` for the original source._

<Release source="docker-engine-release-notes" version="29.9.1" date="October 14, 2026" published="2026-10-14T00:00:00.000Z" url="https://docs.docker.com/engine/release-notes/29/#29-9-1" canonical="https://releases.sh/release/rel_n_az9L0xBQAAQMDTQ62zk" truncated="true">
containerd is updated to v2.4.2, fixing CVE-2026-95839 and two other crashes or disk-exhaustion issues triggered by malformed manifests and layer fetches. Also fixes bridge networks failing to restore when bound to a non-docker firewalld zone, daemon panic with fluentd TLS and fluentd-async, and docker ps -s failing when one container's size can't be computed.
</Release>

<Release source="docker-desktop-release-notes" version="4.95.0" date="October 12, 2026" published="2026-10-12T00:00:00.000Z" url="https://docs.docker.com/desktop/release-notes/#4950" canonical="https://releases.sh/release/rel_dDjp-CjM54V6gIIZnrMWK" truncated="true">
### Docker Desktop 4.95.0

Fixed the Windows installer deleting the WSL data disk, plus `docker info` reporting containerized on WSL 3.0.1 which broke `docker debug`, and an engine restart after start when an admin policy enables Enhanced Container Isolation. Added a `docker desktop auth status` CLI subcommand with `--format pretty|json`.
</Release>

<Release source="docker-engine-release-notes" version="29.9.0" date="October 8, 2026" published="2026-10-08T00:00:00.000Z" url="https://docs.docker.com/engine/release-notes/29/#29-9-0" canonical="https://releases.sh/release/rel_w0eR5Jd9Q4h3Rk1fqDRMw" truncated="true">
A Go runtime update fixes CVE-2026-97032, CVE-2026-78659, CVE-2026-78663, CVE-2026-78669 (HTTP/2 DoS issues) and CVE-2026-56857, a Windows junction directory creation outside the data root. The containerd image store gains a lazy-pull daemon feature, enabled by default for nydus, overlaybd, soci, and stargz, plus numerous networking fixes including encrypted overlay traffic possibly sent in cleartext.
</Release>

<Release source="docker-buildx-releases" version="v0.38.0" date="October 7, 2026" published="2026-10-07T23:39:15.000Z" url="https://github.com/docker/buildx/releases/tag/v0.38.0" canonical="https://releases.sh/release/rel_HuMAfD2tDoXy_e0VL47mC" truncated="true">
Bake now supports configuring job execution modes and parallelization limits with the --jobs/-j flag, including defer-error to delay cancellation of failed jobs and defer-output to wait for all jobs before exporting. Added an experimental buildx replay build command that rebuilds historical builds from recorded provenance, and Buildx --set overrides now use singular keys and can clear array values.
</Release>

<Release source="docker-desktop-release-notes" version="4.94.0" date="October 5, 2026" published="2026-10-05T00:00:00.000Z" url="https://docs.docker.com/desktop/release-notes/#4940" canonical="https://releases.sh/release/rel_9nb6XmHmHDup4s-7KaXND" truncated="true">
### Docker Desktop 4.94.0

New Linux containers now default to the local logging driver, and API keys are no longer written in clear text to logs and diagnostics. Also fixed Resource Saver pausing the VM before the API was ready, a multi-gigabyte error file and memory blowup on backend start failure, repeated privileged-access prompts on Mac auto-start after reboot, and Docker Desktop quitting unrelated apps on Linux.
</Release>

<Release source="docker-compose-releases" version="v5.6.0" date="October 2, 2026" published="2026-10-02T16:07:06.000Z" url="https://github.com/docker/compose/releases/tag/v5.6.0" canonical="https://releases.sh/release/rel_SrsqrdM89fSt_9Dnwu2FL" truncated="true">
Compose adds partial support for jobs — only manually-triggered jobs work for now, scheduled jobs are not yet available until the corresponding Docker Engine support merges. Also adds provider services with a dedicated network relay link, image distribution on demand, and a warning on unsupported compose-file attributes.
</Release>

<Release source="docker-compose-release-notes" version="v5.6.0" date="October 2, 2026" published="2026-10-02T16:07:06.000Z" url="https://docs.docker.com/compose/release-notes/#5-6-0" canonical="https://releases.sh/release/rel_4eo-sJuPftcjmVkZqpPol" truncated="true">
Adds partial support for jobs — only manually-triggered jobs are supported, with scheduled jobs pending Docker Engine support — plus provider service networking including a dedicated network for the relay link and on-demand image distribution. Fixed watch rebuild coalescing during bursts of file changes, logs losing a fast run's output on restart re-attach, and --parallel not being honored across all bulk engine-call fan-outs.
</Release>

<Release source="docker-buildx-releases" version="v0.37.2" date="September 30, 2026" published="2026-09-30T17:55:10.000Z" url="https://github.com/docker/buildx/releases/tag/v0.37.2" canonical="https://releases.sh/release/rel_kbT2haQgjvCKIgXhwoEFE" truncated="true">
Bake with --progress=rawjson now rejects ungranted entitlements instead of skipping the consent check, requiring explicit --allow grants. Secret files selected by an implicit id fallback and local OCI layout named contexts now require fs.read approval.
</Release>

<Release source="docker-engine-release-notes" version="29.8.2" date="September 30, 2026" published="2026-09-30T00:00:00.000Z" url="https://docs.docker.com/engine/release-notes/29/#29-8-2" canonical="https://releases.sh/release/rel_3sV1aWkm1mWy_CM9kFyAK" truncated="true">
Docker Engine 29.8.2 fixes 13 security vulnerabilities: a malicious DNS response could make registry connections skip TLS certificate verification or fall back to HTTP, unprivileged users on a Swarm node could inject forged Ethernet frames into encrypted overlay networks, and pulling a crafted OCI image index could cause unbounded CPU and memory use. The BuildKit update addresses build cache poisoning via mismatched layer DiffIDs, daemon crashes from malformed LLB operations, and a source policy bypass in crafted Git build sources, plus fixes for docker cp on nested bind-mounted sockets and docker info failing after daemon reload with custom default address pools.
</Release>

<Release source="docker-desktop-release-notes" version="4.93.0" date="September 28, 2026" published="2026-09-28T00:00:00.000Z" url="https://docs.docker.com/desktop/release-notes/#4930" canonical="https://releases.sh/release/rel_i9xiSdmG6fwe_ADvt8Mwq" truncated="true">
### Docker Desktop 4.93.0

Fixed a security vulnerability allowing VM-side Unix socket port forwards to expose host paths, and CLI plugin updates are now managed from the app bundle, removing the Automatically update components setting. Plus platform fixes including the Linux kernel update to 7.0.14 for MongoDB 8 containers and a Windows startup crash on UTF-8 BOM config files.
</Release>

## Fetching more

Append `.md` (markdown), `.json` (raw data), or `.atom` (feed) to any URL on this page.

- Per-source history: `https://releases.sh/docker/{source-slug}`
- Atom feed: `https://releases.sh/docker.atom`
- Individual release: `https://releases.sh/release/{release-id}`