Docker Buildx

Welcome to the v0.33.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Jonathan A. Sternberg
• Sebastiaan van Stijn
• rishabh
• Akihiro Suda

Notable Changes

• Imagetools create and inspect commands now support OCI layout paths as source and destination that can be used together with registry references #3721
• Bake command supports new builtin functions formattimestamp and unixtimestampparse for better handling of time values #3286
• DAP debugger support is now generally available without the need for the experimental features flag #3736
• Policy evaluation now supports verifying HTTP sources with PGP signatures through the verify_http_pgp_signature builtin #3677
• policy eval command now supports --platform flag to specify the platform for evaluated image sources #3738
• policy eval can now read policy from stdin when -f - is used #3738
• policy eval flag --filename has been renamed to --file for consistency with other commands. The previous flag is deprecated. #3738
• Fix issue where imagetools create could in some cases upload the same (attestation) manifest multiple times, possibly causing 400 error in some registries #3731
• Fix rejecting empty string values for BUILDKIT_SYNTAX build argument override #3734
• Fix possible inconsistent build context contents when using remote bake builds with a subdirectory in context path #3678
• Fix possible formatting issue in imagetools inspect based on whitespace in input #3732
• Fix possible error when finalizing build history traces in multi-node builders #3716 #3717
• Fix possible build errors when linking Bake multi-platform targets with session attributes like build secrets #3696
• Fix remote Bake git contexts to preserve subdirectory paths #3682
• Fix proxy build-arg override detection when argument casing differs #3697
• Fix DAP breakpoints on the entrypoint line being skipped in some cases #3691
• Fix DAP breakpoint detection on case-insensitive filesystems such as Windows #3704
• Fix DAP source path mapping for Dockerfiles outside the context root or in subdirectories #3709
• Fix DAP stepping by skipping internal build context load steps without source locations #3712
• Fix over-eager DAP input evaluation while stepping through builds #3687
• Fix DAP checks for whether an exec command can run successfully #3701
• Fix DAP debugger exit status reporting and output delivery on session shutdown #3735

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.41.1 -> v1.41.4
• github.com/aws/aws-sdk-go-v2/config v1.32.7 -> v1.32.12
• github.com/aws/aws-sdk-go-v2/credentials v1.19.7 -> v1.19.12
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.17 -> v1.18.20
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.17 -> v1.4.20
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.17 -> v2.7.20
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 -> v1.8.6
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 -> v1.13.7
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.17 -> v1.13.20
• github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 -> v1.0.8
• github.com/aws/aws-sdk-go-v2/service/sso v1.30.9 -> v1.30.13
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.13 -> v1.35.17
• github.com/aws/aws-sdk-go-v2/service/sts v1.41.6 -> v1.41.9
• github.com/aws/smithy-go v1.24.0 -> v1.24.2
• github.com/containerd/containerd/v2 v2.2.1 -> v2.2.2
• github.com/containerd/ttrpc v1.2.7 -> v1.2.8
• github.com/docker/cli v29.2.1 -> v29.3.1
• github.com/go-openapi/analysis v0.24.1 -> v0.24.3
• github.com/go-openapi/errors v0.22.6 -> v0.22.7
• github.com/go-openapi/jsonpointer v0.22.4 -> v0.22.5
• github.com/go-openapi/jsonreference v0.21.4 -> v0.21.5
• github.com/go-openapi/loads v0.23.2 -> v0.23.3
• github.com/go-openapi/spec v0.22.3 -> v0.22.4
• github.com/go-openapi/strfmt v0.25.0 -> v0.26.1
• github.com/go-openapi/swag/conv v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/fileutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/jsonname v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/jsonutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/loading v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/mangling v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/stringutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/typeutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/yamlutils v0.25.4 -> v0.25.5
• github.com/go-openapi/validate v0.25.1 -> v0.25.2
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 -> v2.27.7
• github.com/klauspost/compress v1.18.4 -> v1.18.5
• github.com/moby/buildkit v0.28.0 -> v0.29.0
• github.com/moby/moby/api v1.53.0 -> v1.54.0
• github.com/moby/moby/client v0.2.2 -> v0.3.0
• github.com/moby/patternmatcher v0.6.0 -> v0.6.1
• github.com/moby/policy-helpers 824747bfdd3c -> b7c0b994300b
• github.com/oklog/ulid/v2 v2.1.1 new
• go.opentelemetry.io/otel v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/metric v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/sdk v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/sdk/metric v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/trace v1.38.0 -> v1.40.0
• go.opentelemetry.io/proto/otlp v1.7.1 -> v1.9.0
• golang.org/x/sys v0.41.0 -> v0.42.0
• golang.org/x/term v0.40.0 -> v0.41.0
• google.golang.org/genproto/googleapis/api ff82c1b0f217 -> 8636f8732409
• google.golang.org/genproto/googleapis/rpc 0a764e51fe1b -> 8636f8732409
• google.golang.org/grpc v1.78.0 -> v1.79.3
• k8s.io/api v0.34.1 -> v0.35.2
• k8s.io/apimachinery v0.34.1 -> v0.35.2
• k8s.io/client-go v0.34.1 -> v0.35.2
• k8s.io/kube-openapi f3f2b991d03b -> 589584f1c912
• k8s.io/utils 4c0f3b243397 -> bc988d571ff4
• sigs.k8s.io/json cfa47c3a1cc8 -> 2d320260d730

Previous release can be found at v0.32.1

buildx 0.33.0-rc1

Welcome to the v0.33.0-rc1 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Jonathan A. Sternberg
• Sebastiaan van Stijn
• rishabh
• Akihiro Suda

Notable Changes

• Imagetools create and inspect commands now support OCI layout paths as source and destination that can be used together with registry references #3721
• Bake command supports new builtin functions formattimestamp and unixtimestampparse for better handling of time values #3286
• DAP debugger support is now generally available without the need for the experimental features flag #3736
• policy eval command now supports --platform flag to specify the platform for evaluated image sources #3738
• policy eval can now read policy from stdin when -f - is used #3738
• policy eval flag --filename has been renamed to --file for consistency with other commands. The previous flag is deprecated. #3738
• Fix issue where imagetools create could in some cases upload the same (attestation) manifest multiple times, possibly causing 400 error in some registries #3731
• Fix rejecting empty string values for BUILDKIT_SYNTAX build argument override #3734
• Fix possible inconsistent build context contents when using remote bake builds with a subdirectory in context path #3678
• Fix possible formatting issue in imagetools inspect based on whitespace in input #3732
• Fix possible error when finalizing build history traces in multi-node builders #3716 #3717
• Fix possible build errors when linking Bake multi-platform targets with session attributes like build secrets #3696
• Fix remote Bake git contexts to preserve subdirectory paths #3682
• Fix proxy build-arg override detection when argument casing differs #3697
• Fix DAP breakpoints on the entrypoint line being skipped in some cases #3691
• Fix DAP breakpoint detection on case-insensitive filesystems such as Windows #3704
• Fix DAP source path mapping for Dockerfiles outside the context root or in subdirectories #3709
• Fix DAP stepping by skipping internal build context load steps without source locations #3712
• Fix over-eager DAP input evaluation while stepping through builds #3687
• Fix DAP checks for whether an exec command can run successfully #3701
• Fix DAP debugger exit status reporting and output delivery on session shutdown #3735

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.41.1 -> v1.41.4
• github.com/aws/aws-sdk-go-v2/config v1.32.7 -> v1.32.12
• github.com/aws/aws-sdk-go-v2/credentials v1.19.7 -> v1.19.12
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.17 -> v1.18.20
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.17 -> v1.4.20
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.17 -> v2.7.20
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 -> v1.8.6
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 -> v1.13.7
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.17 -> v1.13.20
• github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 -> v1.0.8
• github.com/aws/aws-sdk-go-v2/service/sso v1.30.9 -> v1.30.13
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.13 -> v1.35.17
• github.com/aws/aws-sdk-go-v2/service/sts v1.41.6 -> v1.41.9
• github.com/aws/smithy-go v1.24.0 -> v1.24.2
• github.com/containerd/containerd/v2 v2.2.1 -> v2.2.2
• github.com/containerd/ttrpc v1.2.7 -> v1.2.8
• github.com/docker/cli v29.2.1 -> v29.3.1
• github.com/go-openapi/analysis v0.24.1 -> v0.24.3
• github.com/go-openapi/errors v0.22.6 -> v0.22.7
• github.com/go-openapi/jsonpointer v0.22.4 -> v0.22.5
• github.com/go-openapi/jsonreference v0.21.4 -> v0.21.5
• github.com/go-openapi/loads v0.23.2 -> v0.23.3
• github.com/go-openapi/spec v0.22.3 -> v0.22.4
• github.com/go-openapi/strfmt v0.25.0 -> v0.26.1
• github.com/go-openapi/swag/conv v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/fileutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/jsonname v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/jsonutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/loading v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/mangling v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/stringutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/typeutils v0.25.4 -> v0.25.5
• github.com/go-openapi/swag/yamlutils v0.25.4 -> v0.25.5
• github.com/go-openapi/validate v0.25.1 -> v0.25.2
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 -> v2.27.7
• github.com/klauspost/compress v1.18.4 -> v1.18.5
• github.com/moby/buildkit v0.28.0 -> v0.29.0-rc1
• github.com/moby/moby/api v1.53.0 -> v1.54.0
• github.com/moby/moby/client v0.2.2 -> v0.3.0
• github.com/moby/patternmatcher v0.6.0 -> v0.6.1
• github.com/moby/policy-helpers 824747bfdd3c -> b7c0b994300b
• github.com/oklog/ulid/v2 v2.1.1 new
• go.opentelemetry.io/otel v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.38.0 -> v1.39.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.38.0 -> v1.39.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 -> v1.39.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/metric v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/sdk v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/sdk/metric v1.38.0 -> v1.40.0
• go.opentelemetry.io/otel/trace v1.38.0 -> v1.40.0
• go.opentelemetry.io/proto/otlp v1.7.1 -> v1.9.0
• google.golang.org/genproto/googleapis/api ff82c1b0f217 -> 8636f8732409
• google.golang.org/genproto/googleapis/rpc 0a764e51fe1b -> 8636f8732409
• google.golang.org/grpc v1.78.0 -> v1.79.3
• k8s.io/api v0.34.1 -> v0.35.2
• k8s.io/apimachinery v0.34.1 -> v0.35.2
• k8s.io/client-go v0.34.1 -> v0.35.2
• k8s.io/kube-openapi f3f2b991d03b -> 589584f1c912
• k8s.io/utils 4c0f3b243397 -> bc988d571ff4
• sigs.k8s.io/json cfa47c3a1cc8 -> 2d320260d730

Previous release can be found at v0.32.1

buildx 0.32.1

Welcome to the v0.32.1 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi

Notable Changes

• Fix possible error when building private Git repositories with secret credentials directly from remote source #3694

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.32.0

buildx 0.32.0

Welcome to the v0.32.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• Akhil Manoj
• David Karlsson
• yzewei

Notable Changes

• Imagetools now supports --metadata-file flag to capture properties like descriptor/digest values for the new image. #3638
• Imagetools auth libraries have now been combined with the ones used in build commands, enabling previously missing support for scoped credentials and automatic fallbacks for Docker Hardened Image registries. #3627
• Many commands now support --timeout flag to configure the timeout for waiting for responses from remote builders. #3665
• Rego Policy now supports validating builds from remote sources (Git, HTTP) #3661
• Rego Policies now include new builtins for validating signed Sigstore bundle attestations of HTTP source artifacts. Attestations can also be automatically fetched from Github API #3657
• Rego policies can now use input.image.provenance to write rules validating specific provenance attestation fields. Materials of provenance can be accessed as policy secondary inputs. Requires BuildKit v0.28+ #3652 #3662
• Builds failing due to policy violations now have better error messages with the failing step clearly marked and the last policy logs shown with the error. #3656
• Fix possible passing of incorrect Git auth token for Bake builds when multiple remotes with different hosts exist. #3648
• Fixed policy filesystem reference lifecycle handling to avoid stale policy filesystem state during builds. #3674
• Normalized default policy filename resolution from environment configuration for more consistent behavior. #3675
• Named contexts used in different projects now get unique "shared keys" (previously based on context name) to avoid overwriting destinations of other projects, with reduced performance. This feature requires Dockerfile 1.22+ #3618
• Fix local subdir named context copied with wrong parent directory for remote Bake builds #3678
• Bake builds now capture the original URL information of named contexts sent as inputs in request metadata #3682 #3462
• Additional metrics associated with DAP debugger have been added #3633
• DAP file explorer now gets a more accurate state of the file system via updated BuildKit API #3450
• DAP file explorer source names have been improved #3631
• Improve the output of -q used with --call #3655

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.39.6 -> v1.41.1
• github.com/aws/aws-sdk-go-v2/config v1.31.20 -> v1.32.7
• github.com/aws/aws-sdk-go-v2/credentials v1.18.24 -> v1.19.7
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.13 -> v1.18.17
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.13 -> v1.4.17
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.13 -> v2.7.17
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.3 -> v1.13.4
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.13 -> v1.13.17
• github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 new
• github.com/aws/aws-sdk-go-v2/service/sso v1.30.3 -> v1.30.9
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.7 -> v1.35.13
• github.com/aws/aws-sdk-go-v2/service/sts v1.40.2 -> v1.41.6
• github.com/aws/smithy-go v1.23.2 -> v1.24.0
• github.com/cloudflare/circl v1.6.1 -> v1.6.3
• github.com/docker/cli v29.1.5 -> v29.2.1
• github.com/go-openapi/errors v0.22.4 -> v0.22.6
• github.com/go-openapi/jsonpointer v0.22.1 -> v0.22.4
• github.com/go-openapi/jsonreference v0.21.3 -> v0.21.4
• github.com/go-openapi/spec v0.22.1 -> v0.22.3
• github.com/go-openapi/swag v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/cmdutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/conv v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/fileutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/jsonname v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/jsonutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/loading v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/mangling v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/netutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/stringutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/typeutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/yamlutils v0.25.3 -> v0.25.4
• github.com/go-viper/mapstructure/v2 v2.4.0 -> v2.5.0
• github.com/golang/snappy v1.0.0 new
• github.com/google/go-containerregistry v0.20.6 -> v0.20.7
• github.com/in-toto/in-toto-golang v0.9.0 -> v0.10.0
• github.com/klauspost/compress v1.18.2 -> v1.18.4
• github.com/moby/buildkit v0.27.0 -> v0.28.0
• github.com/moby/moby/api v1.52.0 -> v1.53.0
• github.com/moby/moby/client v0.2.1 -> v0.2.2
• github.com/moby/policy-helpers 9fcc1a9ec5c9 -> 824747bfdd3c
• github.com/package-url/packageurl-go v0.1.1 new
• github.com/pelletier/go-toml/v2 v2.2.4 new
• github.com/secure-systems-lab/go-securesystemslib v0.9.1 -> v0.10.0
• github.com/sigstore/rekor v1.4.3 -> v1.5.0
• github.com/sigstore/sigstore v1.10.0 -> v1.10.4
• github.com/sigstore/sigstore-go b5fe07a5a7d7 -> v1.1.4
• github.com/sigstore/timestamp-authority/v2 v2.0.2 -> v2.0.3
• github.com/theupdateframework/go-tuf/v2 v2.3.0 -> v2.4.1
• google.golang.org/genproto/googleapis/api f26f9409b101 -> ff82c1b0f217
• google.golang.org/genproto/googleapis/rpc f26f9409b101 -> 0a764e51fe1b
• google.golang.org/grpc v1.76.0 -> v1.78.0

Previous release can be found at v0.31.1

Welcome to the v0.32.0-rc2 release of buildx! This is a pre-release of buildx

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax

Notable Changes

• Improved policy evaluation for recursive provenance materials. #3662
• Fixed policy filesystem reference lifecycle handling to avoid stale policy filesystem state during builds. #3674
• Normalized default policy filename resolution from environment configuration for more consistent behavior. #3675

Dependency Changes

• github.com/moby/buildkit v0.28.0-rc1 -> v0.28.0-rc2
• github.com/package-url/packageurl-go v0.1.1 new

Previous release can be found at v0.32.0-rc1

buildx 0.32.0-rc1

Welcome to the v0.32.0-rc1 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• Akhil Manoj
• David Karlsson
• yzewei

Notable Changes

• Imagetools now supports --metadata-file flag to capture properties like descriptor/digest values for the new image. #3638
• Imagetools auth libraries have now been combined with the ones used in build commands, enabling previously missing support for scoped credentials and automatic fallbacks for Docker Hardened Image registries. #3627
• Many commands now support --timeout flag to configure the timeout for waiting for responses from remote builders. #3665
• Rego Policy now supports validating builds from remote sources (Git, HTTP) #3661
• Rego Policies now include new builtins for validating signed Sigstore bundle attestations of HTTP source artifacts. Attestations can also be automatically fetched from Github API #3657
• Rego policies can now use input.image.provenance to write rules validating specific provenance attestation fields. Requires BuildKit v0.28+ #3652
• Builds failing due to policy violations now have better error messages with the failing step clearly marked and the last policy logs shown with the error. #3656
• Fix possible passing of incorrect Git auth token for Bake builds when multiple remotes with different hosts exist. #3648
• Named contexts used in different projects now get unique "shared keys" (previously based on context name) to avoid overwriting destinations of other projects, with reduced performance. This feature requires Dockerfile 1.22+ #3618
• Bake builds now capture the original URL information of named contexts sent as inputs in request metadata #3462
• Additional metrics associated with DAP debugger have been added #3633
• DAP file explorer now gets a more accurate state of the file system via updated BuildKit API #3450
• DAP file explorer source names have been improved #3631
• Improve the output of -q used with --call #3655

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.39.6 -> v1.41.1
• github.com/aws/aws-sdk-go-v2/config v1.31.20 -> v1.32.7
• github.com/aws/aws-sdk-go-v2/credentials v1.18.24 -> v1.19.7
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.13 -> v1.18.17
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.13 -> v1.4.17
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.13 -> v2.7.17
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.3 -> v1.13.4
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.13 -> v1.13.17
• github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 new
• github.com/aws/aws-sdk-go-v2/service/sso v1.30.3 -> v1.30.9
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.7 -> v1.35.13
• github.com/aws/aws-sdk-go-v2/service/sts v1.40.2 -> v1.41.6
• github.com/aws/smithy-go v1.23.2 -> v1.24.0
• github.com/docker/cli v29.1.5 -> v29.2.1
• github.com/go-openapi/errors v0.22.4 -> v0.22.6
• github.com/go-openapi/jsonpointer v0.22.1 -> v0.22.4
• github.com/go-openapi/jsonreference v0.21.3 -> v0.21.4
• github.com/go-openapi/spec v0.22.1 -> v0.22.3
• github.com/go-openapi/swag v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/cmdutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/conv v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/fileutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/jsonname v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/jsonutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/loading v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/mangling v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/netutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/stringutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/typeutils v0.25.3 -> v0.25.4
• github.com/go-openapi/swag/yamlutils v0.25.3 -> v0.25.4
• github.com/go-viper/mapstructure/v2 v2.4.0 -> v2.5.0
• github.com/golang/snappy v0.0.4 new
• github.com/google/go-containerregistry v0.20.6 -> v0.20.7
• github.com/in-toto/in-toto-golang v0.9.0 -> v0.10.0
• github.com/klauspost/compress v1.18.2 -> v1.18.4
• github.com/moby/buildkit v0.27.0 -> v0.28.0-rc1
• github.com/moby/moby/api v1.52.0 -> v1.53.0
• github.com/moby/moby/client v0.2.1 -> v0.2.2
• github.com/moby/policy-helpers 9fcc1a9ec5c9 -> 824747bfdd3c
• github.com/pelletier/go-toml/v2 v2.2.4 new
• github.com/secure-systems-lab/go-securesystemslib v0.9.1 -> v0.10.0
• github.com/sigstore/rekor v1.4.3 -> v1.5.0
• github.com/sigstore/sigstore v1.10.0 -> v1.10.4
• github.com/sigstore/sigstore-go b5fe07a5a7d7 -> v1.1.4
• github.com/sigstore/timestamp-authority/v2 v2.0.2 -> v2.0.3
• github.com/theupdateframework/go-tuf/v2 v2.3.0 -> v2.4.1
• google.golang.org/genproto/googleapis/api f26f9409b101 -> ff82c1b0f217
• google.golang.org/genproto/googleapis/rpc f26f9409b101 -> 0a764e51fe1b
• google.golang.org/grpc v1.76.0 -> v1.78.0

Previous release can be found at v0.31.1

buildx 0.31.1

Welcome to the v0.31.1 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi

Notable Changes

• Fix excessive HTTP requests when using buildx imagetools create command #3632

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.31.0

buildx 0.31.0

Welcome to the v0.31.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• Justin Chadwell
• Akihiro Suda
• Brian Goff
• David Karlsson
• Paweł Gronowski
• Sergei Khomenkov
• guimove

Notable Changes

• This is a first version of Buildx with signed artifacts built using Docker Github Builder
• This release comes with new experimental support for source policy enforcement during builds using policies written in Rego language. There are some limitations in this release, for example, only builds from the local build context currently load policies. #3593 #3539 #3592 #3611 docs
  • Matching policy for Dockerfile is loaded automatically if one exists, e.g., Dockerfile.rego or app.Dockerfile.rego.
  • Additional policy configuration can be provided using new build --policy flag.
  • Bake also supports automatic policy loading and a new policy key in the target configuration.
  • New buildx policy command includes subcommands eval and test to help you write and test your policies.
• Bake command has a new --var flag to set variable values from the command line instead of setting environment variables. #3610
• When creating images in Docker image store, they no longer unpack if export was initialized with --push or -o type=registry #3519
• Add semvercmp helper function to Bake stdlib for easier version comparisons #3577
• Retry transient TLS errors when talking to Kubernetes nodes #3493
• Allow disabling Bake env lookups so bake can ignore host environment variables #3595
• Add possibility to load Docker configs scoped to specific repos/scopes for finer credential control #3562
• When building images from Docker Hardened Images (dhi.io) and Docker Scout registries, authentication will now automatically fall back to Docker Hub credentials if no specific credentials are found. #3612
• Fix the --debug flag issues in standalone mode #3554
• Fix handling @ characters inside OCI layout paths passed to build #3583
• Surface policy controls --policy, policy eval, custom builtins/Regos/gitsign checks so builds can enforce policies #3593 #3549
• Prevent DAP breakpoint overlaps from triggering false positives #3534
• Fix mount input names in DAP run mounts #3579
• Fix DAP breakpoint reason reporting #3581

Dependency Changes

• github.com/ProtonMail/go-crypto v1.3.0 new
• github.com/agnivade/levenshtein v1.2.1 new
• github.com/asaskevich/govalidator a9d515a09cc2 new
• github.com/aws/aws-sdk-go-v2 v1.38.1 -> v1.39.6
• github.com/aws/aws-sdk-go-v2/config v1.31.3 -> v1.31.20
• github.com/aws/aws-sdk-go-v2/credentials v1.18.7 -> v1.18.24
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.4 -> v1.18.13
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.4 -> v1.4.13
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.4 -> v2.7.13
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 -> v1.8.4
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.0 -> v1.13.3
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.4 -> v1.13.13
• github.com/aws/aws-sdk-go-v2/service/sso v1.28.2 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.34.0 -> v1.35.7
• github.com/aws/aws-sdk-go-v2/service/sts v1.38.0 -> v1.40.2
• github.com/aws/smithy-go v1.22.5 -> v1.23.2
• github.com/beorn7/perks v1.0.1 new
• github.com/blang/semver v3.5.1 new
• github.com/cespare/xxhash/v2 v2.3.0 new
• github.com/cloudflare/circl v1.6.1 new
• github.com/containerd/containerd/v2 efd86f2b0bc2 -> v2.2.1
• github.com/cyberphone/json-canonicalization 19d51d7fe467 new
• github.com/davecgh/go-spew v1.1.1 -> d8f796af33cc
• github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 new
• github.com/digitorus/pkcs7 3a137a874352 new
• github.com/digitorus/timestamp 220c5c2851b7 new
• github.com/docker/cli v28.5.1 -> v29.1.5
• github.com/docker/cli-docs-tool v0.10.0 -> v0.11.0
• github.com/docker/docker v28.5.1 -> v28.5.2
• github.com/docker/docker-credential-helpers v0.9.3 -> v0.9.5
• github.com/docker/go-connections v0.5.0 -> v0.6.0
• github.com/fvbommel/sortorder v1.0.1 -> v1.1.0
• github.com/go-ini/ini v1.67.0 new
• github.com/go-openapi/analysis v0.24.1 new
• github.com/go-openapi/errors v0.22.4 new
• github.com/go-openapi/jsonpointer v0.21.0 -> v0.22.1
• github.com/go-openapi/jsonreference v0.20.2 -> v0.21.3
• github.com/go-openapi/loads v0.23.2 new
• github.com/go-openapi/runtime v0.29.2 new
• github.com/go-openapi/spec v0.22.1 new
• github.com/go-openapi/strfmt v0.25.0 new
• github.com/go-openapi/swag v0.23.0 -> v0.25.3
• github.com/go-openapi/swag/cmdutils v0.25.3 new
• github.com/go-openapi/swag/conv v0.25.3 new
• github.com/go-openapi/swag/fileutils v0.25.3 new
• github.com/go-openapi/swag/jsonname v0.25.3 new
• github.com/go-openapi/swag/jsonutils v0.25.3 new
• github.com/go-openapi/swag/loading v0.25.3 new
• github.com/go-openapi/swag/mangling v0.25.3 new
• github.com/go-openapi/swag/netutils v0.25.3 new
• github.com/go-openapi/swag/stringutils v0.25.3 new
• github.com/go-openapi/swag/typeutils v0.25.3 new
• github.com/go-openapi/swag/yamlutils v0.25.3 new
• github.com/go-openapi/validate v0.25.1 new
• github.com/gobwas/glob v0.2.3 new
• github.com/goccy/go-json v0.10.5 new
• github.com/google/certificate-transparency-go v1.3.2 new
• github.com/google/go-containerregistry v0.20.6 new
• github.com/google/go-dap v0.12.0 -> d7a2259b058b
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 -> v2.27.3
• github.com/hiddeco/sshsig v0.2.0 new
• github.com/in-toto/attestation v1.1.2 new
• github.com/klauspost/compress v1.18.1 -> v1.18.2
• github.com/lestrrat-go/blackmagic v1.0.4 new
• github.com/lestrrat-go/dsig v1.0.0 new
• github.com/lestrrat-go/dsig-secp256k1 v1.0.0 new
• github.com/lestrrat-go/httpcc v1.0.1 new
• github.com/lestrrat-go/httprc/v3 v3.0.1 new
• github.com/lestrrat-go/jwx/v3 v3.0.11 new
• github.com/lestrrat-go/option v1.0.1 new
• github.com/lestrrat-go/option/v2 v2.0.0 new
• github.com/moby/buildkit v0.26.1 -> v0.27.0
• github.com/moby/go-archive v0.1.0 -> v0.2.0
• github.com/moby/moby/api v1.52.0 new
• github.com/moby/moby/client v0.2.1 new
• github.com/moby/policy-helpers 9fcc1a9ec5c9 new
• github.com/morikuni/aec v1.0.0 -> v1.1.0
• github.com/oklog/ulid v1.3.1 new
• github.com/open-policy-agent/opa v1.10.1 new
• github.com/pmezard/go-difflib v1.0.0 -> 5d4384ee4fb2
• github.com/prometheus/client_golang v1.23.2 new
• github.com/prometheus/client_model v0.6.2 new
• github.com/prometheus/common v0.66.1 new
• github.com/prometheus/procfs v0.17.0 new
• github.com/rcrowley/go-metrics 65e299d6c5c9 new
• github.com/rivo/uniseg v0.2.0 -> v0.4.7
• github.com/segmentio/asm v1.2.0 new
• github.com/sigstore/protobuf-specs v0.5.0 new
• github.com/sigstore/rekor v1.4.3 new
• github.com/sigstore/rekor-tiles/v2 v2.0.1 new
• github.com/sigstore/sigstore v1.10.0 new
• github.com/sigstore/sigstore-go b5fe07a5a7d7 new
• github.com/sigstore/timestamp-authority/v2 v2.0.2 new
• github.com/sirupsen/logrus v1.9.3 -> v1.9.4
• github.com/spf13/cobra v1.10.1 -> v1.10.2
• github.com/tchap/go-patricia/v2 v2.3.3 new
• github.com/theupdateframework/go-tuf/v2 v2.3.0 new
• github.com/tonistiigi/fsutil 586307ad452f -> a2aa163d723f
• github.com/transparency-dev/formats 404c0d5b696c new
• github.com/transparency-dev/merkle v0.0.2 new
• github.com/valyala/fastjson v1.6.4 new
• github.com/vektah/gqlparser/v2 v2.5.30 new
• github.com/xeipuuv/gojsonpointer 02993c407bfb new
• github.com/xeipuuv/gojsonreference bd5ef7bd5415 new
• github.com/yashtewari/glob-intersection v0.2.0 new
• go.mongodb.org/mongo-driver v1.17.6 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 -> v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.61.0 -> v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 -> v0.63.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.31.0 -> v1.38.0
• go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
• google.golang.org/genproto/googleapis/api c5933d9347a5 -> f26f9409b101
• google.golang.org/genproto/googleapis/rpc c5933d9347a5 -> f26f9409b101

Previous release can be found at v0.30.1

buildx 0.31.0-rc2

Welcome to the v0.31.0-rc2 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn

Notable Changes

• Bake command has a new --var flag to set variable values from the command line instead of setting environment variables. #3610
• New buildx policy test command has been added to help validate build policies against test configurations. #3592
• When building images from Docker Hardened Images (dhi.io) and Docker Scout registries, authentication will now automatically fall back to Docker Hub credentials if no specific credentials are found. #3612
• Various improvements and fixes to the build policy feature, including better logging, new built-in helpers, and fixes for image source handling. #3611

Dependency Changes

• github.com/moby/buildkit v0.27.0-rc1 -> v0.27.0-rc2
• github.com/sirupsen/logrus dd1b4c2e81af -> v1.9.4

Previous release can be found at v0.31.0-rc1

Welcome to the v0.31.0-rc1 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• Justin Chadwell
• Akihiro Suda
• Brian Goff
• David Karlsson
• Paweł Gronowski
• Sergei Khomenkov
• guimove

Notable changes

• This is a first version of Buildx with signed artifacts built using Docker Github Builder
• This release comes with new experimental support for source policy enforcement during builds using policies written in Rego language. There are some limitations in this release, for example, only builds from the local build context currently load policies. #3593 #3539
  • Matching policy for Dockerfile is loaded automatically if one exists, e.g., Dockerfile.rego or app.Dockerfile.rego.
  • Additional policy configuration can be provided using new build --policy flag.
  • Bake also supports automatic policy loading and a new policy key in the target configuration.
  • New buildx policy command includes subcommands eval and test to help you write and test your policies.
• When creating images in Docker image store, they no longer unpack if export was initialized with --push or -o type=registry #3519
• Add semvercmp helper function to Bake stdlib for easier version comparisons #3577
• Retry transient TLS errors when talking to Kubernetes nodes #3493
• Allow disabling Bake env lookups so bake can ignore host environment variables #3595
• Add possibility to load Docker configs scoped to specific repos/scopes for finer credential control #3562
• Fix the --debug flag issues in standalone mode #3554
• Fix handling @ characters inside OCI layout paths passed to build #3583
• Surface policy controls --policy, policy eval, custom builtins/Regos/gitsign checks so builds can enforce policies #3593 #3549
• Prevent DAP breakpoint overlaps from triggering false positives #3534
• Fix mount input names in DAP run mounts #3579
• Fix DAP breakpoint reason reporting #3581

Dependency Changes

• github.com/ProtonMail/go-crypto v1.3.0 new
• github.com/agnivade/levenshtein v1.2.1 new
• github.com/asaskevich/govalidator a9d515a09cc2 new
• github.com/aws/aws-sdk-go-v2 v1.38.1 -> v1.39.6
• github.com/aws/aws-sdk-go-v2/config v1.31.3 -> v1.31.20
• github.com/aws/aws-sdk-go-v2/credentials v1.18.7 -> v1.18.24
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.4 -> v1.18.13
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.4 -> v1.4.13
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.4 -> v2.7.13
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 -> v1.8.4
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.0 -> v1.13.3
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.4 -> v1.13.13
• github.com/aws/aws-sdk-go-v2/service/sso v1.28.2 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.34.0 -> v1.35.7
• github.com/aws/aws-sdk-go-v2/service/sts v1.38.0 -> v1.40.2
• github.com/aws/smithy-go v1.22.5 -> v1.23.2
• github.com/beorn7/perks v1.0.1 new
• github.com/blang/semver v3.5.1 new
• github.com/cespare/xxhash/v2 v2.3.0 new
• github.com/cloudflare/circl v1.6.1 new
• github.com/containerd/containerd/v2 v2.2.0 -> v2.2.1
• github.com/cyberphone/json-canonicalization 19d51d7fe467 new
• github.com/davecgh/go-spew v1.1.1 -> d8f796af33cc
• github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 new
• github.com/digitorus/pkcs7 3a137a874352 new
• github.com/digitorus/timestamp 220c5c2851b7 new
• github.com/docker/cli v28.5.1 -> v29.1.4
• github.com/docker/cli-docs-tool v0.10.0 -> v0.11.0
• github.com/docker/docker v28.5.1 -> v28.5.2
• github.com/docker/docker-credential-helpers v0.9.3 -> v0.9.5
• github.com/docker/go-connections v0.5.0 -> v0.6.0
• github.com/fvbommel/sortorder v1.0.1 -> v1.1.0
• github.com/go-ini/ini v1.67.0 new
• github.com/go-openapi/analysis v0.24.1 new
• github.com/go-openapi/errors v0.22.4 new
• github.com/go-openapi/jsonpointer v0.21.0 -> v0.22.1
• github.com/go-openapi/jsonreference v0.20.2 -> v0.21.3
• github.com/go-openapi/loads v0.23.2 new
• github.com/go-openapi/runtime v0.29.2 new
• github.com/go-openapi/spec v0.22.1 new
• github.com/go-openapi/strfmt v0.25.0 new
• github.com/go-openapi/swag v0.23.0 -> v0.25.3
• github.com/go-openapi/swag/cmdutils v0.25.3 new
• github.com/go-openapi/swag/conv v0.25.3 new
• github.com/go-openapi/swag/fileutils v0.25.3 new
• github.com/go-openapi/swag/jsonname v0.25.3 new
• github.com/go-openapi/swag/jsonutils v0.25.3 new
• github.com/go-openapi/swag/loading v0.25.3 new
• github.com/go-openapi/swag/mangling v0.25.3 new
• github.com/go-openapi/swag/netutils v0.25.3 new
• github.com/go-openapi/swag/stringutils v0.25.3 new
• github.com/go-openapi/swag/typeutils v0.25.3 new
• github.com/go-openapi/swag/yamlutils v0.25.3 new
• github.com/go-openapi/validate v0.25.1 new
• github.com/gobwas/glob v0.2.3 new
• github.com/goccy/go-json v0.10.5 new
• github.com/google/certificate-transparency-go v1.3.2 new
• github.com/google/go-containerregistry v0.20.6 new
• github.com/google/go-dap v0.12.0 -> d7a2259b058b
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 -> v2.27.3
• github.com/hiddeco/sshsig v0.2.0 new
• github.com/in-toto/attestation v1.1.2 new
• github.com/klauspost/compress v1.18.1 -> v1.18.2
• github.com/lestrrat-go/blackmagic v1.0.4 new
• github.com/lestrrat-go/dsig v1.0.0 new
• github.com/lestrrat-go/dsig-secp256k1 v1.0.0 new
• github.com/lestrrat-go/httpcc v1.0.1 new
• github.com/lestrrat-go/httprc/v3 v3.0.1 new
• github.com/lestrrat-go/jwx/v3 v3.0.11 new
• github.com/lestrrat-go/option v1.0.1 new
• github.com/lestrrat-go/option/v2 v2.0.0 new
• github.com/moby/buildkit v0.26.0 -> v0.27.0-rc1
• github.com/moby/go-archive v0.1.0 -> v0.2.0
• github.com/moby/moby/api v1.52.0 new
• github.com/moby/moby/client v0.2.1 new
• github.com/moby/policy-helpers 9fcc1a9ec5c9 new
• github.com/morikuni/aec v1.0.0 -> v1.1.0
• github.com/oklog/ulid v1.3.1 new
• github.com/open-policy-agent/opa v1.10.1 new
• github.com/pmezard/go-difflib v1.0.0 -> 5d4384ee4fb2
• github.com/prometheus/client_golang v1.23.2 new
• github.com/prometheus/client_model v0.6.2 new
• github.com/prometheus/common v0.66.1 new
• github.com/prometheus/procfs v0.17.0 new
• github.com/rcrowley/go-metrics 65e299d6c5c9 new
• github.com/rivo/uniseg v0.2.0 -> v0.4.7
• github.com/segmentio/asm v1.2.0 new
• github.com/sigstore/protobuf-specs v0.5.0 new
• github.com/sigstore/rekor v1.4.3 new
• github.com/sigstore/rekor-tiles/v2 v2.0.1 new
• github.com/sigstore/sigstore v1.10.0 new
• github.com/sigstore/sigstore-go b5fe07a5a7d7 new
• github.com/sigstore/timestamp-authority/v2 v2.0.2 new
• github.com/sirupsen/logrus v1.9.3 -> dd1b4c2e81af
• github.com/spf13/cobra v1.10.1 -> v1.10.2
• github.com/tchap/go-patricia/v2 v2.3.3 new
• github.com/theupdateframework/go-tuf/v2 v2.3.0 new
• github.com/tonistiigi/fsutil 586307ad452f -> a2aa163d723f
• github.com/transparency-dev/formats 404c0d5b696c new
• github.com/transparency-dev/merkle v0.0.2 new
• github.com/valyala/fastjson v1.6.4 new
• github.com/vektah/gqlparser/v2 v2.5.30 new
• github.com/xeipuuv/gojsonpointer 02993c407bfb new
• github.com/xeipuuv/gojsonreference bd5ef7bd5415 new
• github.com/yashtewari/glob-intersection v0.2.0 new
• go.mongodb.org/mongo-driver v1.17.6 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 -> v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.61.0 -> v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 -> v0.63.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.31.0 -> v1.38.0
• go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
• google.golang.org/genproto/googleapis/api c5933d9347a5 -> 57b25ae835d4
• google.golang.org/genproto/googleapis/rpc c5933d9347a5 -> f26f9409b101

Previous release can be found at v0.30.0

Welcome to the v0.30.1 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Jonathan A. Sternberg

Notable Changes

• Fix concurrent map write panic. #3524
• Fix possible excessive chunking when fetching blobs. #3529

Dependency Changes

• github.com/containerd/containerd/v2 v2.2.0 -> efd86f2b0bc2
• github.com/moby/buildkit v0.26.0 -> v0.26.1

Previous release can be found at v0.30.0

buildx 0.30.0

Welcome to the v0.30.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Jonathan A. Sternberg
• Remy Suen
• Sebastiaan van Stijn
• aevesdocker
• Akihiro Suda
• Guillaume Lours
• Ricardo Branco
• Roberto Castellotti
• Roberto Villarreal

Notable Changes

• Tar exporter output will now automatically create parent directories. #3478
• Deprecate docker buildx install and docker buildx uninstall in favor of using docker buildx directly without relying on the docker builder aliases. #3472
• Clarify CLI help for the --tag option to give more guidance on a valid argument. #3454
• Bake: Ensure typed variables with no value still carry type to prevent a panic. #3463
• imagetools create now persists attestation manifest and any manifest cosign-based signatures when creating new images. #3433
• Add option to docker-container driver to write github actions payload for provenance with --driver-opt=provenance-add-gha=true. #3453
• Avoid concurrent map write panic with imagetools create. #3510
• Avoid panic when linking a nil target to another build in Bake. #3511
• DAP: Next, step in, and step out requests now respect breakpoints. #3488
• DAP: Verify breakpoints when stopOnEntry is used. #3488
• DAP: Support runInTerminal reverse request when buildx dap is run in standalone mode. #3471
• DAP: Stop sending null in setBreakpoints response when the breakpoints are cleared to conform to the specification. #3481
• DAP: exec command now works when suspended on a COPY line. #3469
• DAP: Debugger now ensures that all inputs are properly executed when suspended on a line. #3469
• DAP: Debugger now pauses on COPY lines when there is a non-existent file. #3437
• Compose support has been updated to v2.9.1. #3494

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.30.3 -> v1.38.1
• github.com/aws/aws-sdk-go-v2/config v1.27.27 -> v1.31.3
• github.com/aws/aws-sdk-go-v2/credentials v1.17.27 -> v1.18.7
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 -> v1.18.4
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 -> v1.4.4
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 -> v2.7.4
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 -> v1.8.3
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 -> v1.13.0
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 -> v1.13.4
• github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 -> v1.28.2
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 -> v1.34.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 -> v1.38.0
• github.com/aws/smithy-go v1.20.3 -> v1.22.5
• github.com/cenkalti/backoff/v5 v5.0.3 new
• github.com/compose-spec/compose-go/v2 v2.9.0 -> v2.9.1
• github.com/containerd/containerd/api v1.9.0 -> v1.10.0
• github.com/containerd/containerd/v2 v2.1.4 -> v2.2.0
• github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
• github.com/docker/cli v28.4.0 -> v28.5.1
• github.com/docker/docker v28.4.0 -> v28.5.1
• github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0
• github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0
• github.com/go-logr/logr v1.4.2 -> v1.4.3
• github.com/gofrs/flock v0.12.1 -> v0.13.0
• github.com/google/gnostic-models v0.6.8 -> v0.7.0
• github.com/gorilla/websocket v1.5.0 -> e064f32e3674
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 -> v2.27.2
• github.com/klauspost/compress v1.18.0 -> v1.18.1
• github.com/moby/buildkit v0.25.0 -> v0.26.0
• github.com/modern-go/reflect2 v1.0.2 -> 35a7c28c31ee
• github.com/secure-systems-lab/go-securesystemslib v0.6.0 -> v0.9.1
• github.com/stretchr/testify v1.11.0 -> v1.11.1
• go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.61.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 -> v0.61.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 -> v0.61.0
• go.opentelemetry.io/otel v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/metric v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/sdk v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/sdk/metric v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/trace v1.35.0 -> v1.38.0
• go.opentelemetry.io/proto/otlp v1.5.0 -> v1.7.1
• go.yaml.in/yaml/v2 v2.4.2 new
• golang.org/x/crypto v0.38.0 -> v0.42.0
• golang.org/x/mod v0.24.0 -> v0.29.0
• golang.org/x/net v0.39.0 -> v0.44.0
• golang.org/x/oauth2 v0.29.0 -> v0.30.0
• golang.org/x/sync v0.16.0 -> v0.17.0
• golang.org/x/sys v0.33.0 -> v0.37.0
• golang.org/x/term v0.32.0 -> v0.35.0
• golang.org/x/text v0.25.0 -> v0.29.0
• golang.org/x/time v0.11.0 -> v0.14.0
• golang.org/x/tools v0.32.0 -> v0.37.0
• google.golang.org/genproto/googleapis/api 56aae31c358a -> c5933d9347a5
• google.golang.org/genproto/googleapis/rpc 56aae31c358a -> c5933d9347a5
• google.golang.org/grpc v1.72.2 -> v1.76.0
• google.golang.org/protobuf v1.36.9 -> v1.36.10
• k8s.io/api v0.32.3 -> v0.34.1
• k8s.io/apimachinery v0.32.3 -> v0.34.1
• k8s.io/client-go v0.32.3 -> v0.34.1
• k8s.io/kube-openapi 32ad38e42d3f -> f3f2b991d03b
• k8s.io/utils 3ea5e8cea738 -> 4c0f3b243397
• sigs.k8s.io/json 9aa6b5e7a4b3 -> cfa47c3a1cc8
• sigs.k8s.io/randfill v1.0.0 new
• sigs.k8s.io/structured-merge-diff/v6 v6.3.0 new
• sigs.k8s.io/yaml v1.4.0 -> v1.6.0

Previous release can be found at v0.29.1

buildx 0.30.0-rc2

Welcome to the v0.30.0-rc2 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Jonathan A. Sternberg
• Tõnis Tiigi

Notable Changes

• Avoid concurrent map write panic with imagetools create. #3510
• Avoid panic when linking a nil target to another build in Bake. #3511

Dependency Changes

• github.com/containerd/containerd/api v1.10.0-rc.0 -> v1.10.0
• github.com/containerd/containerd/v2 v2.2.0-rc.1 -> v2.2.0
• github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
• github.com/moby/buildkit v0.26.0-rc1 -> v0.26.0-rc2

Previous release can be found at v0.30.0-rc1

buildx 0.30.0-rc1

Welcome to the v0.30.0-rc1 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Jonathan A. Sternberg
• Remy Suen
• Sebastiaan van Stijn
• aevesdocker
• Akihiro Suda
• Guillaume Lours
• Ricardo Branco
• Roberto Castellotti
• Roberto Villarreal

Notable Changes

• Tar exporter output will automatically create parent directories for destination path. #3478
• Deprecate docker buildx install and docker buildx uninstall. #3472
• Clarify CLI help for the --tag option to give more guidance on a valid argument. #3454
• imagetools create persists attestation manifest and any manifest cosign-based signatures when creating new images. #3433
• Add option to docker-container driver to write Github Actions environment payload for provenance with --driver-opt=provenance-add-gha=true. #3453
• Bake: Ensure typed variables with no value still carry type to prevent a panic. #3463
• DAP: Next, step in, and step out requests now respect breakpoints. #3488
• DAP: Verify breakpoints when stopOnEntry is used. #3488
• DAP: Support runInTerminal reverse request when buildx dap is run in standalone mode. #3471
• DAP: Stop sending null in setBreakpoints response when the breakpoints are cleared to conform to the specification. #3481
• DAP: exec command now works when suspended on a COPY line. #3469
• DAP: Debugger now ensures that all inputs are properly executed when suspended on a line. #3469
• DAP: Debugger now pauses on COPY lines when there is a non-existent file. #3437
• Compose support has been updated to v2.9.1. #3494

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.30.3 -> v1.38.1
• github.com/aws/aws-sdk-go-v2/config v1.27.27 -> v1.31.3
• github.com/aws/aws-sdk-go-v2/credentials v1.17.27 -> v1.18.7
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 -> v1.18.4
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 -> v1.4.4
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 -> v2.7.4
• github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 -> v1.8.3
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 -> v1.13.0
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 -> v1.13.4
• github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 -> v1.28.2
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 -> v1.34.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 -> v1.38.0
• github.com/aws/smithy-go v1.20.3 -> v1.22.5
• github.com/cenkalti/backoff/v5 v5.0.3 new
• github.com/compose-spec/compose-go/v2 v2.9.0 -> v2.9.1
• github.com/containerd/containerd/api v1.9.0 -> v1.10.0-rc.0
• github.com/containerd/containerd/v2 v2.1.4 -> v2.2.0-rc.1
• github.com/docker/cli v28.4.0 -> v28.5.1
• github.com/docker/docker v28.4.0 -> v28.5.1
• github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0
• github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0
• github.com/go-logr/logr v1.4.2 -> v1.4.3
• github.com/gofrs/flock v0.12.1 -> v0.13.0
• github.com/google/gnostic-models v0.6.8 -> v0.7.0
• github.com/gorilla/websocket v1.5.0 -> e064f32e3674
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 -> v2.27.2
• github.com/klauspost/compress v1.18.0 -> v1.18.1
• github.com/moby/buildkit v0.25.0 -> v0.26.0-rc1
• github.com/modern-go/reflect2 v1.0.2 -> 35a7c28c31ee
• github.com/secure-systems-lab/go-securesystemslib v0.6.0 -> v0.9.1
• github.com/stretchr/testify v1.11.0 -> v1.11.1
• go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.61.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 -> v0.61.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 -> v0.61.0
• go.opentelemetry.io/otel v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/metric v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/sdk v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/sdk/metric v1.35.0 -> v1.38.0
• go.opentelemetry.io/otel/trace v1.35.0 -> v1.38.0
• go.opentelemetry.io/proto/otlp v1.5.0 -> v1.7.1
• go.yaml.in/yaml/v2 v2.4.2 new
• golang.org/x/crypto v0.38.0 -> v0.42.0
• golang.org/x/mod v0.24.0 -> v0.29.0
• golang.org/x/net v0.39.0 -> v0.44.0
• golang.org/x/oauth2 v0.29.0 -> v0.30.0
• golang.org/x/sync v0.16.0 -> v0.17.0
• golang.org/x/sys v0.33.0 -> v0.37.0
• golang.org/x/term v0.32.0 -> v0.35.0
• golang.org/x/text v0.25.0 -> v0.29.0
• golang.org/x/time v0.11.0 -> v0.14.0
• golang.org/x/tools v0.32.0 -> v0.37.0
• google.golang.org/genproto/googleapis/api 56aae31c358a -> c5933d9347a5
• google.golang.org/genproto/googleapis/rpc 56aae31c358a -> c5933d9347a5
• google.golang.org/grpc v1.72.2 -> v1.76.0
• google.golang.org/protobuf v1.36.9 -> v1.36.10
• k8s.io/api v0.32.3 -> v0.34.1
• k8s.io/apimachinery v0.32.3 -> v0.34.1
• k8s.io/client-go v0.32.3 -> v0.34.1
• k8s.io/kube-openapi 32ad38e42d3f -> f3f2b991d03b
• k8s.io/utils 3ea5e8cea738 -> 4c0f3b243397
• sigs.k8s.io/json 9aa6b5e7a4b3 -> cfa47c3a1cc8
• sigs.k8s.io/randfill v1.0.0 new
• sigs.k8s.io/structured-merge-diff/v6 v6.3.0 new
• sigs.k8s.io/yaml v1.4.0 -> v1.6.0

Previous release can be found at v0.29.1

Welcome to the v0.29.1 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax

Notable Changes

• imagetools: fix possible broken chain copy on create. #3447
• imagetools: silence warning for empty-type mediatype used in artifacts. #3448

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.29.0

buildx 0.29.0

Welcome to the v0.29.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Jonathan A. Sternberg
• Sebastiaan van Stijn
• aevesdocker
• Akihiro Suda
• Guillaume Lours

Notable Changes

• imagetools create command now supports --platform option to create final image only for specified platforms. The inline attestation for the specified platforms are also kept in the final image. #3430
• DAP debugger can now show the correct file explorer data when the debugger stops because of a build error. #3410
• New --progress=none option has been added. This is similar to --progress=quiet, but it does not print the image ID after image result export. #3431
• When building from a Git URL, buildx now optionally supports resolution of the context data on the client side. Git repository is still cloned on the server side, but this can help in cases where one can't be sure what version of Git URL resolution the server side supports. #3415
• Fix DAP debugger location resolution when there are multiple build steps with the same BuildKit digest. #3408
• Compose support has been updated to v2.9.0

Dependency Changes

• github.com/compose-spec/compose-go/v2 v2.8.1 -> v2.9.0
• github.com/docker/cli v28.3.3 -> v28.4.0
• github.com/docker/docker v28.3.3 -> v28.4.0
• github.com/go-viper/mapstructure/v2 v2.3.0 -> v2.4.0
• github.com/hashicorp/go-cty-funcs dda779884a9f -> 6aab67130928
• github.com/hashicorp/hcl/v2 v2.23.0 -> v2.24.0
• github.com/mitchellh/go-wordwrap ad45545899c7 -> v1.0.1
• github.com/moby/buildkit v0.24.0 -> v0.25.0
• github.com/spf13/cobra v1.9.1 -> v1.10.1
• github.com/spf13/pflag v1.0.7 -> v1.0.10
• github.com/zclconf/go-cty v1.16.2 -> v1.17.0
• golang.org/x/crypto v0.37.0 -> v0.38.0
• golang.org/x/term v0.31.0 -> v0.32.0
• golang.org/x/text v0.24.0 -> v0.25.0
• google.golang.org/protobuf v1.36.6 -> v1.36.9

Previous release can be found at v0.28.0

buildx 0.29.0-rc1

Welcome to the v0.29.0-rc1 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Jonathan A. Sternberg
• Sebastiaan van Stijn
• aevesdocker
• Akihiro Suda
• Guillaume Lours

Notable Changes

• imagetools create command now supports --platform option to create final image only for specified platforms. The inline attestation for the specified platforms are also kept in the final image. #3430
• DAP debugger can now show the correct file explorer data when the debugger stops because of a build error. #3410
• New --progress=none option has been added. This is similar to --progress=quiet, but it does not print the image ID after image result export. #3431
• When building from a Git URL, buildx now optionally supports resolution of the context data on the client side. Git repository is still cloned on the server side, but this can help in cases where one can't be sure what version of Git URL resolution the server side supports. #3415
• Fix DAP debugger location resolution when there are multiple build steps with the same BuildKit digest. #3408
• Compose support has been updated to v2.9.0

Dependency Changes

• github.com/compose-spec/compose-go/v2 v2.8.1 -> v2.9.0
• github.com/docker/cli v28.3.3 -> v28.4.0
• github.com/docker/docker v28.3.3 -> v28.4.0
• github.com/go-viper/mapstructure/v2 v2.3.0 -> v2.4.0
• github.com/hashicorp/go-cty-funcs dda779884a9f -> 6aab67130928
• github.com/hashicorp/hcl/v2 v2.23.0 -> v2.24.0
• github.com/mitchellh/go-wordwrap ad45545899c7 -> v1.0.1
• github.com/moby/buildkit v0.24.0 -> v0.25.0-rc1
• github.com/spf13/cobra v1.9.1 -> v1.10.1
• github.com/spf13/pflag v1.0.7 -> v1.0.10
• github.com/zclconf/go-cty v1.16.2 -> v1.17.0

Previous release can be found at v0.28.0

Welcome to the v0.28.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Dan Duvall
• Jonathan A. Sternberg
• Sebastiaan van Stijn
• Will Nonnemaker

Notable Changes

• When building with Dockerfile 1.18.0+ frontend (BuildKit v0.24) you can now use new Git URLs with query options for build context and named contexts in build and bake command. More info moby/buildkit#6183
• Add formatting options to the buildx du command for custom and machine-readable output. #3377
• Kubernetes driver now supports env.<key> driver opts. #3373
• Add support for BUILDKIT_SYNTAX build argument when BuildKit has Dockerfile frontend disabled. #3385
• Fix failing early when trying to export index annotations with moby exporter. #3384
• Fix possible errors on Windows from symlink handling. #3386

Dependency Changes

• github.com/cpuguy83/go-md2man/v2 v2.0.6 -> v2.0.7
• github.com/moby/buildkit 955c2b2f7d01 -> v0.24.0
• github.com/spf13/pflag v1.0.6 -> v1.0.7
• github.com/stretchr/testify v1.10.0 -> v1.11.0

Previous release can be found at v0.27.0

buildx 0.28.0-rc2

Welcome to the v0.28.0-rc2 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn

Notable changes

• When building with Dockerfile 1.18.0+ frontend (BuildKit v0.24) you can now use new Git URLs with query options for build context and named contexts in build and bake command. More info

Dependency Changes

• github.com/moby/buildkit v0.24.0-rc1 -> v0.24.0-rc2

Previous release can be found at v0.28.0-rc1

buildx 0.28.0-rc1

Welcome to the v0.28.0-rc1 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Akihiro Suda
• Dan Duvall
• Will Nonnemaker

Notable Changes

• Add formatting options to the buildx du command for custom and machine-readable output. #3377
• Kubernetes driver now supports env.<key> driver opts #3373
• Fix failing early when trying to export index annotations with moby exporter #3384
• Fix possible errors on Windows from symlink handling #3386
• Add support for BUILDKIT_SYNTAX build argument when BuildKit has Dockerfile frontend disabled #3385

Dependency Changes

• github.com/cpuguy83/go-md2man/v2 v2.0.6 -> v2.0.7
• github.com/moby/buildkit 955c2b2f7d01 -> v0.24.0-rc1
• github.com/spf13/pflag v1.0.6 -> v1.0.7
• github.com/stretchr/testify v1.10.0 -> v1.11.0

Previous release can be found at v0.27.0