Desktop CLI GA; proxy auth credentials no longer exposed in logs

New

• Docker Desktop CLI is now generally available. New docker desktop logs command.
• Support for --platform flag on docker load and docker save.

Upgrades

• Docker Compose v2.33.1
• Docker Buildx v0.21.1
• Kubernetes v1.32.2
• Docker Engine v28.0.1
• Docker Scout CLI v1.16.3

Security

• Fixed CVE-2025-1696 disclosing proxy authentication credentials in plaintext in log files.

Bug fixes and enhancements

For all platforms

• Ask Gordon offers deeper context on images, containers, and volumes with faster support.
• Support multi-platform images in docker history.
• Fixed 3-second delay for clients other than CLI/Docker Desktop when containers have port-mappings. See docker/for-mac#7575.
• Fixed ECI Docker socket permissions blocking allowed images.
• Fixed Docker Desktop not entering Resource Saver mode after engine restart.
• Fixed Kubernetes clusters stopping due to expired PKI certificates.

For Mac

• Downgraded Linux kernel to v6.10.14 to fix OpenJDK cgroups issue.
• Added /usr/share/misc/usb.ids for usbip.
• Fixed CPU limit display capped at 8 with Docker VMM.
• Fixed startup hang with com.docker.backend at 100% CPU.
• Fixed Java SIGILL on M4 Macbook Pro. See docker/for-mac#7583.
• Blocked startup on macOS 15.4 beta 1 due to host crash.
• Fixed myIPAddress PAC file function retrieving wrong host IP.

For Windows

• Fixed docker compose log streaming in WSL.
• Fixed Paketo buildpacks with ECI in WSL.
• Fixed WSL 2 integration failing with WSL Version 1 distributions.
• Fixed CLI plugin updates failing with WSL distributions enabled.
• Fixed sign-in hang when using PAC file for proxy.

For Linux

• Software Updates page now points to latest available version.