Docker

Image digest reconciliation is overhauled to prevent unnecessary container recreation, though existing containers may be recreated on the first run after upgrading as digests are re-evaluated with the new logic. compose pull now honors pull_policy refresh windows (daily, weekly, every_N). Includes fixes for build-only services, watch pruning, config hashing, and unreadable directories.

Image digest reconciliation is overhauled so compose up no longer recreates containers unnecessarily, though existing containers may be recreated on the first run after upgrading as digests are re-evaluated. compose pull now honors pull_policy refresh windows like daily, weekly, and every_N. Includes several watch, bridge, and config fixes.

BUILDX_NO_DEFAULT_OCI_ARTIFACT environment variable added as an alternative to the oci-artifact=false flag for users who have not set it explicitly. Includes buildkit dependency update from v0.32.0 to v0.32.2.

Compose v5.4.0 introduces a new reconciliation workflow that models volume and network lifecycle changes in the plan, fixing cases where resources were recreated unnecessarily. Also fixes build digest resolution to use the platform image-manifest digest instead of the attested index, ensures config flags apply to --services/--volumes/--networks/--models/--hash, and tolerates missing env files on scale, watch, and shell completion.

Compose now models volume and network lifecycle changes in the reconciliation plan, enabling safe resource recreation during apply. Fixes include preserving zero-replica services during hashing, honoring --insecure-registry on reload, and tolerating missing env files on more commands.

Default source policy can now validate BuildKit release image authenticity when creating a docker-container builder with docker buildx create, and bake supports resolving files relative to the bake file location with BUILDX_BAKE_FILE_RELATIVE_PATHS=true. Also fixes a Kubernetes driver hang and FD leak with source policies.

Fixed a bug where Kubernetes driver builds would hang indefinitely when the remote exec stream ended.

Default source policy now validates BuildKit release image authenticity when creating a docker-container builder with docker buildx create. The Bake command supports overriding declared secret sources, and a new BUILDX_BAKE_FILE_RELATIVE_PATHS=true resolves files relative to the bake file location instead of the working directory.

The experimental docker sandbox plugin has been removed; migrate to docker sbx. Fixed disk-full error reporting to show a clear message instead of a generic dialog, and corrected several platform-specific issues including a cloud-context routing bug on Linux, WSL distro shutdown during upgrades on Windows, and VirtioFS file ownership persistence on Mac.

What's Changed

🔧 Internal

• Ci: add concurrency group to pr-review-trigger to prevent duplicate reviews by @derekmisler in https://github.com/docker/compose/pull/13890
• Fix grammar in Attestations field comment by @blackflytech in…

What's Changed

🔧 Internal

• Ci: add concurrency group to pr-review-trigger to prevent duplicate reviews by @derekmisler in https://github.com/docker/compose/pull/13890
• Fix grammar in Attestations field comment by @blackflytech in…

Fixed an error that caused volumes, images, and containers to fail to load in the Docker Desktop Dashboard, and a bug where containers ignored user-configured stop timeouts due to a proxy-level override forcing a 1-second timeout. Also fixed Docker Offload crashes on Intel Macs, Hyper-V graceful shutdown on Windows, and Docker Desktop startup failures on WSL2 ARM kernels.

Adds native support for pre-start init containers in Compose files, and fixes OCI route authorizer token fetches through the provided transport. Also scopes running events to project services for the run command.

Init containers are now natively supported via the pre_start_init_containers field. Fixed an issue where OCI registry authorizer tokens were not routed through the configured transport, and scoped docker compose run events to project services only.

Security

Introduced a new reconciliation algorithm between observed and expected container state, and added rawsetenv message type for provider plugins. Fixed TTY auto-detection via stderr, publish env_file handling with missing optional files, and skip validation when extracting config variables.

Introduces a new reconciliation algorithm between observed and expected state, which may affect existing Compose workloads. Adds rawsetenv message type for provider plugins. Fixes include bypassing Docker Desktop proxy for loopback registries, honoring env_file required: false on publish, and skipping remote URL contexts from bake fs.read allowlist.

2026-06-22

New

Local output now supports a mode=delete attribute that replaces the destination directory with the build result, restricted to subdirectories of the working directory by default. Resource limits for CPU and memory can be set via the --resource flag. Source policies support the BuildKit exec proxy feature for controlling build-step network traffic. Also fixes a possible closed channel panic.