Docker
Docker Buildx
Buildx shipped two minor versions with a clear focus on policy-driven builds and improved credential handling across distributed operations. The v0.31 cycle introduced experimental Rego-based source policy enforcement, which graduated from experimental to generally available by v0.33.0-rc1, alongside a new policy test command and policy eval enhancements like stdin input and platform-specific evaluation. Parallel work hardened imagetools auth to match the build command's scoped credentials and fallback logic, and added --timeout flags across commands for remote builder reliability. v0.33.0-rc1 also expanded bake with time-handling builtins (formattimestamp, unixtimestampparse) and let imagetools work directly with OCI layout paths alongside registry references.
Docker Buildx focused on policy enforcement and authentication consistency in February. The rc1 release expanded Rego policy validation to remote sources and unified imagetools auth with build command libraries, adding scoped credential support and Docker Hardened Image registry fallbacks. Rc2 followed with refinements to policy evaluation for recursive provenance materials and filesystem reference lifecycle handling, plus normalized default policy filename resolution from environment configuration.