v0.17.0-rc2

buildkit 0.17.0-rc2

Welcome to the v0.17.0-rc2 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• Justin Chadwell
• David Karlsson
• Sebastiaan van Stijn
• CrazyMax
• Eoin Farrell
• Jonathan A. Sternberg
• Shaun Thompson
• Akihiro Suda
• Austin Vazquez
• Sergio Garcez
• Talon Bowler
• castrombithisamm

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.11.0-rc2 changelog
• Allow Git builds from SHA references that are not part of a branch or tag #5441
• Optimize memory allocations for copying build results back to client #5442
• Improve OpenTelemetry tracing for authentication routines #5432
• Fix Git builds with .git directory possibly not containing information about the cloned reference #5444
• Fix issue with FileOp copy with constant timestamps not working correctly for parent directories #5461
• Fix accessing OCI layout from read-only filesystems not working does to file locks #5452
• Fix gRPC h2 protocol identifier to comply with TLS-ALPN #5419

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.0 -> v1.11.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.1.0 -> v1.6.0
• github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0 -> v1.8.0
• github.com/AzureAD/microsoft-authentication-library-for-go v0.6.0 -> v1.2.2
• github.com/Microsoft/hcsshim v0.11.7 -> v0.12.5
• github.com/containerd/cgroups/v3 v3.0.2 new
• github.com/containerd/continuity v0.4.3 -> v0.4.4
• github.com/cpuguy83/go-md2man/v2 v2.0.4 -> v2.0.5
• github.com/golang-jwt/jwt/v5 v5.2.1 new
• github.com/klauspost/compress v1.17.9 -> v1.17.11
• github.com/tonistiigi/fsutil 3f140a1299b0 -> 397af5306b5c
• github.com/urfave/cli v1.22.15 -> v1.22.16

Previous release can be found at v0.17.0-rc1

dockerfile/1.11.0-rc2-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.11.0-rc2-labs

dockerfile/1.11.0-rc2

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.11.0-rc2

Notable changes

• New automatic build argument TARGETSTAGE has been added to expose the name of the target stage for current build #5431
• InvalidDefinitionDescription check has been set to be experimental #5414

v0.17.0-rc1

buildkit 0.17.0-rc1

Note

Slight delay in follow-up RCs and eventual GA release for this round

Welcome to the v0.17.0-rc1 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• Talon Bowler
• Anthony Nandaa
• David Karlsson
• Justin Chadwell
• Akihiro Suda
• Billy Owire
• MohammadHasan Akbari
• Alberto Garcia Hierro
• Austin Vazquez
• Gabriel-Adrian Samfira
• Laurent Goderre
• Marat Radchenko
• Matt Rickard
• Paulo Sousa
• Shaun Thompson
• Silvin Lubecki
• ryio1010

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.11.0-rc1 changelog
• Garbage collection policies and prune filters have been updated to be more flexible and allow more control over used storage. Users can now define storage controls based on how much empty space is available on disk and define reserved and maximum storage limits separately #5359 #5079
• FileOp.Copy now supports non-octal values for setting file mode with chmod #5375
• Protobuf tooling has moved away from GoGo Protobuf. #5356 #5409 #5396 #5342
• Memory allocations, especially when uploading big build contexts, have been reduced #5409
• HTTP requests from build steps now use BuildKit specific user-agent like the Container registry requests #5407
• ExecOp build steps now supports setting expected non-zero exit codes #5339
• Parameter options can now be passed to the SBOM scanner #5372
• Determinism of LLB marshaling has been improved to reduce unnecessary cache lookups #5374
• Completeness of history records is now validated at startup #5378
• Debug address now supports new flight recorder endpoints #5337
• Improve communication with registries that return empty authentication scope #5321
• Fix error handling for requiring AppArmor profiles in unsupported system #5373
• Fix possible panic from nil result conversion in solver #5406
• Fix possible panic from triggered error handler #5335
• Fix missing LLB input validation when checking build policies #5362
• Fix possible "digest mismatch" error when using HTTP(s) build sources #5343
• Fix possible file walking issue in Windows Containers when using certain mount structures #5289

Dependency Changes

• github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
• github.com/containerd/containerd v1.7.21 -> v1.7.22
• github.com/docker/cli v27.2.1 -> v27.3.1
• github.com/docker/docker v27.2.1 -> v27.3.1
• github.com/moby/sys/mount v0.3.3 -> v0.3.4
• github.com/moby/sys/sequential v0.5.0 -> v0.6.0
• github.com/planetscale/vtprotobuf 0393e58bdf10 new
• github.com/tonistiigi/dchapes-mode ca0759fec205 new
• github.com/tonistiigi/fsutil 91a3fc46842c -> 3f140a1299b0
• go.etcd.io/bbolt v1.3.10 -> v1.3.11
• golang.org/x/exp 701f63a606c0 new
• google.golang.org/genproto/googleapis/api ef4313101c80 -> ef581f913117
• google.golang.org/genproto/googleapis/rpc ef4313101c80 -> ef581f913117
• google.golang.org/grpc v1.62.0 -> v1.66.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1 new

Previous release can be found at v0.16.0

dockerfile/1.11.0-rc1-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.11.0-rc1-labs

Notable changes

• COPY --chmod now supports non-octal values #5380

dockerfile/1.11.0-rc1

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.11.0-rc1

Notable changes

• ONBUILD command now supports commands that refer to other stages or images with from, like COPY --from or RUN mount=from=... #5357
• SecretsUsedInArgOrEnv check has been improved with better detection for false-positives #5208
• New InvalidDefinitionDescription check has been added to recommend formatting comments in a way that their contents can become descriptions for build arguments and stages #5208
• Multiple fixes for ONBUILD instruction's progress and error handling #5397
• Error reporting for certain missing flag errors has been improved #5369
• Improve progress output for secret values mounted as environment variables #5336

v0.16.0

Welcome to the v0.16.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Akihiro Suda
• David Karlsson
• Shaun Thompson
• Talon Bowler
• Arkadiusz Drabczyk
• Craig Andrews
• Justin Chadwell
• Mitsuru Kariya
• Anthony Nandaa
• Bertrand Paquet
• Ignas Mikalajūnas
• Jonathan A. Sternberg
• Billy Owire
• Debosmit Ray
• Kai Takac
• Marat Radchenko
• a-palchikov

Notable changes

• Builtin Dockerfile frontend has been updated to v1.10.0 changelog
• Remote cache export to S3 backend can now happen with parallel requests and can be controlled with new upload_parallelism option #5270
• Remote cache export to S3 backend now supports layers larger than 5GB #5266
• History records now contain information about the number of warnings that were generated during the build #5166
• Printing check results with library now allows source mapping modifications #5295
• Unconditionally use /etc/resolv.conf rather than systemd's config in host networking mode #5207
• Certain history, graph consistency, and some syscall errors as now marked as internal and use corresponding gRPC error code #5163 #5182
• Output of errors produced by the container executor has been improved #5179
• Stack traces produced by build errors are now clearer and avoid duplicates #5180
• Build containers killed by OOMKiller are now detected and shown to the user in the error message #5260
• Runc container runtime has been updated to v1.1.14 #5300
• Pre-defined OCI annotations are now set to the BuildKit image #3554
• Fix pruning cache mounts that use uid/gid/mode/from on no-cache builds #5306
• Fix issue where --import-cache flag could be ignored for buildctl #5143
• Fix OTEL trace ID being missing from logs #5315

Dependency Changes

• github.com/containerd/containerd v1.7.19 -> v1.7.21
• github.com/containerd/nydus-snapshotter v0.13.7 -> v0.14.0
• github.com/containerd/typeurl/v2 v2.1.1 -> v2.2.0
• github.com/docker/cli v27.0.3 -> v27.2.1
• github.com/docker/docker v27.0.3 -> v27.2.1
• github.com/moby/sys/signal v0.7.0 -> v0.7.1
• github.com/moby/sys/userns v0.1.0 new
• github.com/pkg/browser ce105d075bb4 -> 5ac0b6a4141c
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.42.0 -> v0.44.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.42.0 -> v0.44.0
• google.golang.org/genproto 49dd2c1f3d0b -> ef4313101c80
• google.golang.org/genproto/googleapis/api 49dd2c1f3d0b -> ef4313101c80
• google.golang.org/genproto/googleapis/rpc 49dd2c1f3d0b -> ef4313101c80
• google.golang.org/grpc v1.59.0 -> v1.62.0

Previous release can be found at v0.15.2

dockerfile/1.10.0-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.10.0-labs

Notable changes

• OCI annotations are now set to the Dockerfile frontend release image #5197

dockerfile/1.10.0

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.10.0

Notable changes

• Build secrets can now be mounted as environment variables in addition to files by defining env=VARIABLE option #5215
• Check directive now allows new experimental attribute for enabling experimental validation rules like CopyIgnoredFile #5213
• Improve validation of unsupported modifiers for variable substitution #5146
• ADD and COPY commands now support variable interpolation for build arguments for the --chmod option values #5151
• Improve validation of the --chmod option arguments for COPY and ADD commands #5148
• Fix missing completions for size and destination attributes on mounts #5245
• OCI annotations are now set to the Dockerfile frontend release image #5197

v0.16.0-rc2

Welcome to the v0.16.0-rc2 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• David Karlsson
• Jonathan A. Sternberg
• Shaun Thompson
• Talon Bowler

Notable changes

• Fix OTEL trace ID being missing from logs #5315
• Fix pruning cache mounts that use uid/gid/mode/from on no-cache builds #5306
• Printing check results with library now allows source mapping modifications #5295
• Runc container runtime has been updated to v1.1.14 #5300

Dependency Changes

• github.com/containerd/containerd v1.7.20 -> v1.7.21
• github.com/pkg/browser ce105d075bb4 -> 5ac0b6a4141c
• google.golang.org/genproto 989df2bf70f3 -> ef4313101c80
• google.golang.org/genproto/googleapis/api 83a465c0220f -> ef4313101c80
• google.golang.org/genproto/googleapis/rpc 995d672761c0 -> ef4313101c80
• google.golang.org/grpc v1.60.1 -> v1.62.0

Previous release can be found at v0.16.0-rc1