buildkit 0.25.1

Welcome to the v0.25.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax

Notable Changes

• Fix possible cache export failure when previously exported cache blob has been deleted #6261
• Fix possible cache corruption or error when using inline cache with multiple exporters #6263
• Fix intermediate wrapper for custom provenance attestation fields #6275

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.25.0

buildkit 0.25.0

Welcome to the v0.25.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Jonathan A. Sternberg
• Akihiro Suda
• Brian Goff
• greggu
• Sebastiaan van Stijn
• Søren Hansen
• Vigilans
• Sam Oluwalana
• Shivam
• Tianon Gravi
• nikelborm

Notable Changes

• Git sources now support working with SHA-256 based code repositories. #6194
• New Checksum has been added to llb.Image to specify verification digest of the image. Unlike the existing digest in the image reference, where digest overrides the tag if both are set, in this mode, the image is resolved by the tag and only verified by checksum. #6234
• The remote cache exporter (also used in provenance creation) has been completely rewritten to solve various concurrency and loop issues. There should be no user-visible changes in the cache format itself. #6129
• BuildKit daemon now supports a way to add custom fields to the provenance attestation to specify the environment BuildKit is running in. Additional field are picked up from config files in /etc/buildkitd/provenance.d directory. #6210
• Containerd executor on Windows now supports HyperVIsolation option. #6224
• Included runc container runtime has been updated to v1.3.1 #6236
• CNI plugins have been updated to v1.8.0 #6185
• Qemu emulation binaries have been updated to v10.0.4. #6215
• Fix possible infinite loop when exporting cache #6186
• Fix issue where some errors could lose their source or stack information when wrapped with errors.Join. #6226
• Multiple fixes to how the builds from Git context are recorded in provenance. #6213
• Fix issue where build arguments could be missing in the history record's provenance attestation. #6221
• Fix issue where materials=false could be incorrectly set in provenance attestation for a build that used frontend inputs. #6203
• Fix not setting the platform in the subject descriptor of the OCI artifact-style attestation manifest. This confused some registries. #6191
• Fix some improper formatting in error messages. #6192
• Fix issue with checking out annotated tags by full reference. #6244

Dependency Changes

• github.com/docker/cli v28.3.3 -> v28.4.0
• google.golang.org/protobuf v1.36.6 -> v1.36.9

Previous release can be found at v0.24.0

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.19.0-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.19.0

Notable changes

• The --exclude flag for COPY and ADD instructions is now generally available. This flag was previously available under the labs channel. #6232
• Fix issue where adding --exclude flag to COPY could cause a broken symlink to fail the build. #6220
• Fix issue where EXPOSE instruction did not correctly format the history record it created (regression from 1.18). #6218

buildkit 0.25.0-rc1

Welcome to the v0.25.0-rc1 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Jonathan A. Sternberg
• greggu
• Brian Goff
• Sebastiaan van Stijn
• Søren Hansen
• Vigilans
• Sam Oluwalana
• Shivam
• Tianon Gravi
• nikelborm

Notable Changes

• Git sources now support working with SHA-256 based code repositories. #6194
• New Checksum has been added to llb.Image to specify verification digest of the image. Unlike the existing digest in the image reference, where digest overrides the tag if both are set, in this mode, the image is resolved by the tag and only verified by the checksum. #6234
• The remote cache exporter (also used in provenance creation) has been completely rewritten to solve various concurrency and loop issues. There should be no user-visible changes in the cache format itself. #6129
• BuildKit daemon now supports a way to add custom fields to the provenance attestation to specify the environment BuildKit is running in. Additional field are picked up from config files in /etc/buildkitd/provenance.d directory. #6210
• Containerd executor on Windows now supports HyperVIsolation option. #6224
• Included runc container runtime has been updated to v1.3.1 #6236
• CNI plugins have been updated to v1.8.0 #6185
• Qemu emulation binaries have been updated to v10.0.4. #6215
• Fix possible infinite loop when exporting cache #6186
• Fix issue where some errors could lose their source or stack information when wrapped with errors.Join. #6226
• Multiple fixes to how the builds from Git context are recorded in provenance. #6213
• Fix issue where build arguments could be missing in the history record's provenance attestation. #6221
• Fix issue where materials=false could be incorrectly set in provenance attestation for a build that used frontend inputs. #6203
• Fix not setting the platform in the subject descriptor of the OCI artifact-style attestation manifest. This confused some registries. #6191
• Fix some improper formatting in error messages. #6192

Dependency Changes

• github.com/docker/cli v28.3.3 -> v28.4.0

Previous release can be found at v0.24.0

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.19.0-rc1-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.19.0-rc1

Notable changes

• The --exclude flag for COPY and ADD instructions is now generally available. This flag was previously available under the labs channel. #6232
• Fix issue where adding --exclude flag to COPY could cause a broken symlink to fail the build. #6220
• Fix issue where EXPOSE instruction did not correctly format the history record it created (regression from 1.18). #6218

Welcome to the v0.24.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Akihiro Suda
• Andrés Delfino
• Alberto Contreras
• Alberto Garcia Hierro
• Anthony Nandaa
• Baptiste Girard-Carrabin
• Derek McGowan
• Justin Chadwell
• Kohei Tokunaga
• Michael Dwan

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.18.0
• LLB Git operation now allows controlling if submodules should be initialized (default) or skipped. #6173
• Max-parallelism control can now also be set with --max-parallelism daemon flag. #6105
• Improve errors when using build arguments in COPY --from flag value. #6153
• Debug server now supports new endpoints for inspecting the cache key database and remote cache manifests. In order to debug plaintexts of the cache keys --save-cache-debug needs to be enabled in the daemon. #6076 #6061 #6133
• Base Alpine version has been updated to 3.22. #6048
• Client now allows configuring exporter content store. #6045
• Release binary artifacts now use Git commit time as timestamp. #6037
• Fix incorrect empty checkout when accessing Git source with subdir pointing to a submodule. #6170
• Fix allowing device entitlement for buildkitd daemon with startup flags. #6080
• Fix possible panic from BoltDB when copying lots of files between build steps. #6159 #6136 #6165
• Fix possible deadlocks from the error handler in the sync package. #6158
• Fix issue with exporting cache with different compression formats for images with lots of layers. #6092 #6088
• Fix displaying error details on unexpected response status code. #6067
• Fix incorrect empty checkout when accessing Git source with subdir pointing to a submodule. #6170

Dependency Changes

• github.com/containerd/containerd/v2 v2.1.3 -> v2.1.4
• github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7
• github.com/docker/cli v28.2.2 -> v28.3.3
• github.com/docker/docker v28.2.2 -> v28.3.3
• github.com/moby/profiles/seccomp v0.1.0 new
• github.com/urfave/cli v1.22.16 -> v1.22.17
• go.etcd.io/bbolt v1.4.0 -> v1.4.3
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.56.0 -> v0.60.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0 -> v1.35.0
• golang.org/x/sync v0.14.0 -> v0.16.0

Previous release can be found at v0.23.2

Usage

# syntax=docker.io/docker/dockerfile:1.18.0-labs

Usage

# syntax=docker.io/docker/dockerfile:1.18.0

Notable changes

• Git URLs for remote build contexts and ADD command now allow new syntax with added query parameters in ?key=value format for better control over the Git clone procedure. Supported options in this release are ref, tag, branch, checksum (alias commit), subdir, keep-git-dir and submodules. #6172 #6173
• New check rules ExposeProtoCasing and ExposeInvalidFormat have been added to improve usage of EXPOSE commands. #6135
• Fix created time not being set correctly from the base image if named context is used. #6096