Welcome to the v0.23.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi

Notable Changes

• Fix attestation filename in local exporter. #6051
• Fix expired cache URLs in GitHub Actions cache exporter. #6053

Dependency Changes

• github.com/tonistiigi/go-actions-cache 388a2ec8cdf8 -> 378c5ed1ddd9

Previous release can be found at v0.23.1

Welcome to the v0.23.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Derek McGowan

Notable Changes

• Fix a possible issue where pulling images from some registries that don't handle the Range header correctly(Artifactory) would fail. #6040

Dependency Changes

• github.com/containerd/containerd/v2 v2.1.1 -> v2.1.3

Previous release can be found at v0.23.0

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.17.1-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.17.1

Welcome to the v0.23.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Anthony Nandaa
• Austin Vazquez
• Brian Goff
• Dan Duvall
• Jonathan A. Sternberg
• Nicolas Schweitzer
• Roberto Villarreal
• Sebastiaan van Stijn
• zfrank

Notable Changes

• Add opt-in support for SLSA provenance v1. This is expected to become the default in a future release. #6005 docs
• Allow duration based filters on diskusage requests. #5455
• Allow authorization secrets to be set per hostname with HTTP_AUTH_HEADER_<host> or HTTP_AUTH_TOKEN_<host>. #6023
• Add support for raw mode in the SSH agent provider. #6003
• Improve URL joining to prevent malformed GitHub Cache service URLs. #6026 tonistiigi/go-actions-cache#38
• Update Runc v1.3.0. #5977
• Fix possible "unknown file mode" error when transferring files on Windows (previous fix did not work). #6025
• Fix race condition when enabling and disabling privileges in WCOW. #5959
• Fix unnecessary registry requests for local image lookups if reference contains a digest. #6029
• Fix privileges error for local exporter in WCOW. #6007
• Fix OCI export of multi-platform scratch result. #5996
• Fix handle not found error during cache export. #5999
• Fix type=local,platform-split=true for single platform build to work the same as it would with a multi-platform build. #6007
• Fix some data races shown on the race detector. #6006

Dependency Changes

• github.com/Microsoft/hcsshim v0.12.9 -> v0.13.0
• github.com/containerd/accelerated-container-image v1.2.3 -> v1.3.0
• github.com/containerd/console v1.0.4 -> v1.0.5
• github.com/containerd/containerd/api v1.8.0 -> v1.9.0
• github.com/containerd/containerd/v2 v2.0.5 -> v2.1.1
• github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.1 -> v2.1.6
• github.com/containerd/nydus-snapshotter v0.15.0 -> v0.15.2
• github.com/containernetworking/cni v1.2.3 -> v1.3.0
• github.com/containernetworking/plugins v1.5.1 -> v1.7.1
• github.com/docker/cli v28.1.1 -> v28.2.2
• github.com/docker/docker v28.1.1 -> v28.2.2
• github.com/fsnotify/fsnotify v1.7.0 -> v1.9.0
• github.com/google/pprof a892ee059fd6 -> 27863c87afa6
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 -> v2.26.1
• github.com/in-toto/in-toto-golang v0.5.0 -> v0.9.0
• github.com/opencontainers/runtime-spec v1.2.0 -> v1.2.1
• github.com/opencontainers/selinux v1.11.1 -> v1.12.0
• github.com/prometheus/client_golang v1.20.5 -> v1.22.0
• github.com/prometheus/common v0.55.0 -> v0.62.0
• github.com/secure-systems-lab/go-securesystemslib v0.4.0 -> v0.6.0
• github.com/spdx/tools-golang v0.5.3 -> v0.5.5
• github.com/tonistiigi/fsutil 3f76f8130144 -> 586307ad452f
• github.com/tonistiigi/go-actions-cache 3e9a6642607f -> 388a2ec8cdf8
• github.com/tonistiigi/go-csvvalue ddb21b71c0b4 -> 030d3b2625d0
• github.com/vishvananda/netlink 084abd93d350 -> v1.3.1
• go.etcd.io/bbolt v1.3.11 -> v1.4.0
• go.opentelemetry.io/auto/sdk v1.1.0 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 -> v0.60.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 -> v0.60.0
• go.opentelemetry.io/otel v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/metric v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/sdk v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/sdk/metric v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/trace v1.31.0 -> v1.35.0
• go.opentelemetry.io/proto/otlp v1.3.1 -> v1.5.0
• golang.org/x/sync v0.13.0 -> v0.14.0
• golang.org/x/sys v0.32.0 -> v0.33.0
• google.golang.org/genproto/googleapis/api 324edc3d5d38 -> 56aae31c358a
• google.golang.org/genproto/googleapis/rpc 324edc3d5d38 -> 56aae31c358a
• google.golang.org/grpc v1.69.4 -> v1.72.2
• google.golang.org/protobuf v1.35.2 -> v1.36.6
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.73 -> v1.2.76
• kernel.org/pub/linux/libs/security/libcap/psx v1.2.73 -> v1.2.76

Previous release can be found at v0.22.0

buildkit 0.23.0-rc2

Welcome to the v0.23.0-rc2 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi

Notable Changes

• Fix unnecessary registry requests for local image lookups if reference contains a digest #6029

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.23.0-rc1

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.17.0-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.17.0

Notable changes

• Add ADD --unpack=bool to control whether archives from a URL path are unpacked. The default is to detect unpack behavior based on the source path, as it happened in previous versions. #5991
• Add support for ADD --chown when unpacking archive, similar to when copying regular files. #5987

Welcome to the v0.23.0-rc1 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Anthony Nandaa
• Austin Vazquez
• Brian Goff
• Dan Duvall
• Jonathan A. Sternberg
• Nicolas Schweitzer
• Roberto Villarreal
• Sebastiaan van Stijn
• zfrank

Notable Changes

• Allow duration based filters on diskusage requests. #5455
• Allow authorization secrets to be set per hostname with HTTP_AUTH_HEADER_<host> or HTTP_AUTH_TOKEN_<host>. #6023
• Add support for raw mode in the SSH agent provider. #6003
• Add opt-in support for SLSA provenance v1. This is expected to become the default in a future release. #6005
• Improve URL joining to prevent malformed GitHub Cache service URLs. #6026 tonistiigi/go-actions-cache#38
• Update Runc to v1.3.0. #5977
• Fix possible "unknown file mode" error when transferring files on Windows (previous fix did not work). #6025
• Fix race condition when enabling and disabling privileges in WCOW. #5959
• Fix privileges error for local exporter in WCOW. #6007
• Fix OCI export of multi-platform scratch result. #5996
• Fix handle not found error during cache export. #5999
• Fix type=local,platform-split=true for single platform build to work the same as it would with a multi-platform build. #6007
• Fix some data races shown on the race detector. #6006

Dependency Changes

• github.com/Microsoft/hcsshim v0.12.9 -> v0.13.0
• github.com/containerd/accelerated-container-image v1.2.3 -> v1.3.0
• github.com/containerd/console v1.0.4 -> v1.0.5
• github.com/containerd/containerd/api v1.8.0 -> v1.9.0
• github.com/containerd/containerd/v2 v2.0.5 -> v2.1.1
• github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.1 -> v2.1.6
• github.com/containerd/nydus-snapshotter v0.15.0 -> v0.15.2
• github.com/containernetworking/cni v1.2.3 -> v1.3.0
• github.com/containernetworking/plugins v1.5.1 -> v1.7.1
• github.com/docker/cli v28.1.1 -> v28.2.2
• github.com/docker/docker v28.1.1 -> v28.2.2
• github.com/fsnotify/fsnotify v1.7.0 -> v1.9.0
• github.com/google/pprof a892ee059fd6 -> 27863c87afa6
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 -> v2.26.1
• github.com/in-toto/in-toto-golang v0.5.0 -> v0.9.0
• github.com/opencontainers/runtime-spec v1.2.0 -> v1.2.1
• github.com/opencontainers/selinux v1.11.1 -> v1.12.0
• github.com/prometheus/client_golang v1.20.5 -> v1.22.0
• github.com/prometheus/common v0.55.0 -> v0.62.0
• github.com/secure-systems-lab/go-securesystemslib v0.4.0 -> v0.6.0
• github.com/spdx/tools-golang v0.5.3 -> v0.5.5
• github.com/tonistiigi/fsutil 3f76f8130144 -> 586307ad452f
• github.com/tonistiigi/go-actions-cache 3e9a6642607f -> 388a2ec8cdf8
• github.com/tonistiigi/go-csvvalue ddb21b71c0b4 -> 030d3b2625d0
• github.com/vishvananda/netlink 084abd93d350 -> v1.3.1
• go.etcd.io/bbolt v1.3.11 -> v1.4.0
• go.opentelemetry.io/auto/sdk v1.1.0 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 -> v0.60.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 -> v0.60.0
• go.opentelemetry.io/otel v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/metric v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/sdk v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/sdk/metric v1.31.0 -> v1.35.0
• go.opentelemetry.io/otel/trace v1.31.0 -> v1.35.0
• go.opentelemetry.io/proto/otlp v1.3.1 -> v1.5.0
• golang.org/x/sync v0.13.0 -> v0.14.0
• golang.org/x/sys v0.32.0 -> v0.33.0
• google.golang.org/genproto/googleapis/api 324edc3d5d38 -> 56aae31c358a
• google.golang.org/genproto/googleapis/rpc 324edc3d5d38 -> 56aae31c358a
• google.golang.org/grpc v1.69.4 -> v1.72.2
• google.golang.org/protobuf v1.35.2 -> v1.36.6
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.73 -> v1.2.76
• kernel.org/pub/linux/libs/security/libcap/psx v1.2.73 -> v1.2.76

Previous release can be found at v0.22.0

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.17.0-rc1-labs