Docker

Compose v5.4.0 reworked how volumes and networks reconcile, while Buildx v0.36.1 added an env-var alternative to oci-artifact=false.

Compose v5.4.0 modeled volume and network lifecycle in the reconciliation plan. Resource changes are now planned before they apply. The release also:

• Warns when a service selection is silently ignored
• Uses the platform image-manifest digest, not the attested index, for builds
• Honors --insecure-registry when up reloads the model
• Pins type:image volume sources and pre_start hook images

Buildx v0.36.0 added default source policy validation. Creating a docker-container builder now validates BuildKit release image authenticity by default. Bake gained secret source overrides, and source policies support the array.flatten builtin and OPA template strings. Broken builders are handled correctly on removal, and Kubernetes driver builds no longer hang when the remote exec stream ends. v0.36.1 followed with BUILDX_NO_DEFAULT_OCI_ARTIFACT as an alternative to oci-artifact=false, bumping BuildKit from v0.32.0 to v0.32.2.

Compose v5.3.0 shipped native init container support. Pre-start containers run before service containers using native Compose syntax, alongside fixes to OCI authorizer token routing and the reconciliation algorithm.