Apple Virtualization now default; QEMU removed — Kubernetes command added

New

• WSL 2 stability improvements.
• Inspect requests and responses for Docker Model Runner diagnostics.
• Run multiple models with warning on insufficient resources.
• Added MCP clients: Gemini CLI, Goose.
• Introduced --gpu (Windows) and --cors flags for docker desktop enable model-runner.
• Added docker desktop kubernetes command.
• Search for specific configuration options within Settings.
• Apple Virtualization is now the default VMM; QEMU Virtualization removed.
• Performance and stability improvements to DockerVMM.

Upgrades

• Docker Compose v2.39.1
• Docker Buildx v0.26.1
• Docker Engine v28.3.2
• Docker Scout CLI v1.18.2
• Docker Model CLI v0.1.36
• Docker Desktop CLI v0.2.0

Security

• We are aware of CVE-2025-23266 (NVIDIA Container Toolkit). Docker Desktop includes version 1.17.8 which is not impacted. Older versions may be affected if CDI mode was manually enabled. Upgrade to 4.44+ to ensure patched version.

Bug fixes and enhancements

For all platforms

• Fixed pulling images with zstd differential layers when containerd image store is enabled.
• Fixed containers with --restart flag not restarting properly with Enhanced Container Isolation.
• Improved Kubernetes custom registry images interaction with ECI.
• Fixed kind cluster failing to start after restart when sign-in is required.
• Fixed MCP secrets mounting into containers with ECI enabled.
• Fixed --publish-all when --publish was already specified.
• Fixed Images view scrolling infinitely. Fixes docker/for-mac#7725.
• Fixed Volumes tab being blank in Resource Saver mode.
• Updated terms of service text on first launch.
• More robustness in parsing GGUF formats.

For Mac

• Fixed disk corruption on DockerVMM when reclaiming disk space.
• Fixed regression since 4.42.0 on DockerVMM.
• Removed QEMU hypervisor; switched to Apple Virtualization as default.
• Fixed Traefik port autodetection. Fixes docker/for-mac#7693.
• Fixed port mappings breaking on network connect/disconnect.
• Removed eBPF which blocked io_uring. Use --security-opt seccomp=unconfined to enable. Fixes docker/for-mac#7707.
• Docker Model Runner now supports GPT OSS models.

For Windows

• Re-added docker-users group to named pipe security descriptors.
• Fixed installer crash when user has no Uninstall registry key.
• Fixed com.docker.build process leak. Fixes docker/for-win#14840.
• Fixed Kubernetes in kind mode failing with WSL cgroups v1 and ECI enabled.
• Fixed typo in WSL installation URL.
• Docker Model Runner now supports GPT OSS models.