Welcome to the v0.33.0-rc2 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax

Notable Changes

• The maximum attestation size for exporters has been raised to 80 MiB. #7104
• Fix QEMU emulator arguments being persisted on an exec operation when a canceled operation is executed again. #7092

Dependency Changes

• github.com/moby/policy-helpers 856be88baec4 -> dd6c5499c491

Previous release can be found at v0.33.0-rc1

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.27.0-rc1-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.27.0-rc1

Notable changes

• Archives with zstd compression can now be used as build context and in ADD instructions. #7069
• RUN --device flag is now promoted from labs to stable. #6999

buildkit 0.33.0-rc1

Welcome to the v0.33.0-rc1 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Matthieu MOREL
• eliuriegas
• Daniel Nephin
• Dawei Wei
• Guthrie McAfee Armstrong
• Jiří Moravčík
• Leo Li
• Ravi Arnan
• Shurong Cao
• Spencer G. Jones
• Vedant Madane

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.27.0-rc1 changelog
• Builds using proxy-based network tracking/monitoring for exec steps now support fallback to the daemon's proxy settings when the BuildKit daemon is running behind a proxy. #7074
• Content produced by Rootless versions of BuildKit has been updated to be compatible with Rootful versions of BuildKit for result reproducibility. #7039
• Buildctl now supports passing valueless build-args read from the environment. #7030
• Sanitize platform IDs returned by frontend to ensure tar exports can't end up with invalid paths for Windows. #7022
• Suppress bogus git advice messages on progress output from the way BuildKit checks out git repositories. #6998
• Build history can now be disabled from daemon configuration #7040
• Redact more possible inline credentials in progress output or HTTP source and Git bundle steps. This didn't include builds that used build secrets to pass credentials. #7068
• MaxRegistryConcurrency now also applies to remote cache requests. #7049
• Windows containers now support RUN --mount=type=secret build secrets. #6944
• Fix possible "no active session for" error when running concurrent builds with remote cache #7047
• Fix possible "failed to apply diffs: snapshot does not exist" error #7035
• Fix possible context upload errors when context directory contains foreign characters. #6989
• Fix possible silently dropped cache link in remote cache exporter. #7053
• Fix xz archive unpacking silently skipping when xz binary was missing in environment. #7071
• Fix possible incorrect platform validation warnings caused by mismatched Windows OS versions #7072

Dependency Changes

• cyphar.com/go-pathrs v0.2.1 -> v0.2.5
• github.com/Microsoft/hcsshim v0.15.0-rc.1 -> v0.15.0-rc.4
• github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.8
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14 -> v1.7.18
• github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.39
• github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.38
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.39
• github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.3.5 -> v0.3.10
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.39
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.39
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.40
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.18
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.24 -> v1.9.28
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.39
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.32 -> v1.19.36
• github.com/aws/aws-sdk-go-v2/service/s3 v1.106.0 -> v1.106.5
• github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.8
• github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.8
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.8
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.8
• github.com/aws/smithy-go v1.27.4 -> v1.27.10
• github.com/containerd/containerd/v2 v2.3.3 -> v2.3.4
• github.com/containerd/go-runc v1.1.0 -> v1.2.1
• github.com/containerd/platforms v1.0.0-rc.4 -> v1.0.0-rc.5
• github.com/cyphar/filepath-securejoin v0.6.0 -> v0.6.1
• github.com/docker/cli v29.6.2 -> v29.7.2
• github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
• github.com/go-logr/logr v1.4.3 -> v1.4.4
• github.com/klauspost/compress v1.19.1 -> v1.19.2
• github.com/moby/sys/userns v0.1.0 -> v0.2.0
• github.com/pelletier/go-toml/v2 v2.3.1 -> v2.4.3
• github.com/prometheus/client_golang v1.23.2 -> v1.24.1
• github.com/prometheus/common v0.67.5 -> v0.70.1
• github.com/prometheus/procfs v0.20.1 -> v0.21.1
• github.com/sirupsen/logrus v1.9.4 -> v1.10.1
• github.com/stretchr/testify v1.11.1 -> v1.12.1
• github.com/tonistiigi/fsutil 6d9dc2ebad62 -> 83cac42c1c52
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
• go.opentelemetry.io/otel v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/prometheus v0.66.0 -> v0.67.0
• go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
• go.opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0
• go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
• google.golang.org/genproto/googleapis/api 3dc84a4a5aaa -> 6ac0973c030d
• google.golang.org/genproto/googleapis/rpc 3dc84a4a5aaa -> 6ac0973c030d
• google.golang.org/grpc v1.82.1 -> v1.83.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 -> v1.6.2
• google.golang.org/protobuf f2248ac996af -> v1.36.12

Previous release can be found at v0.32.2

Welcome to the v0.32.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax

Notable Changes

• Revert the v0.32.1 OCI artifact attestation push-order workaround, restoring BuildKit's spec-aligned behavior of allowing referrers to be pushed before their subject manifests. #7016

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.32.1

Welcome to the v0.32.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax

Notable Changes

• Fix archive extraction through implied parent directories and absolute symlinks. #7005
• Fix OCI artifact attestation pushes to registries that strictly validate subject references. #7012

Dependency Changes

• github.com/moby/go-archive v0.2.1 -> v0.2.0

Previous release can be found at v0.32.0

Welcome to the v0.32.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Akihiro Suda
• Dawei Wei
• Felix de Souza
• Alberto Garcia Hierro
• Devendra Kushwah
• Giles Cope
• Kunalbehbud
• MohammadHasan Akbari
• Natnael Gebremariam
• Pierre Fenoll
• Simon Aguilera
• s3onghyun

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.26.0. changelog
• Attestations now default to OCI artifact descriptors, use oci-artifacts=false if your registry does not support OCI artifacts. #6914
• Build steps can now opt out of default OpenTelemetry tracing or define custom tracing configuration. #6958
• Bolt database performance has been improved. #6943
• Included Runc container runtime has been updated to v1.4.3. #6853
• All remote cache backends now use OCI mediatypes for record descriptors. #6913
• Source policy identifiers are now normalized before sending them to policy evaluation. #6909
• SBOM scanner support for Windows has been added. #6941
• Session exporters now support an optional finalization callback after exports complete, allowing providers to run completion logic while gateway references are still available. #6978
• Lock contention in the LLB solver has been reduced. #6917
• Improve SSH support when using non-standard ports. #6895
• Improve validation of reading contents of invalid files via API. #6903
• Deprecated OTEL fallback variables OTEL_TRACE_PARENT, OTEL_TRACE_STATE are no longer supported. Use TRACEPARENT and TRACESTATE instead. #6874
• Fix possible cache miss issue on parallel builds with shared parts. #6955
• Fix chunked encoding support for S3-compatible remote cache backends. #6970
• Fix regression on handling OTEL_IGNORE_ERROR environment variable. #6966

Dependency Changes

• github.com/Microsoft/go-winio v0.6.2 -> ad3df93bed29
• github.com/Microsoft/hcsshim v0.14.1 -> v0.15.0-rc.1
• github.com/ProtonMail/go-crypto v1.3.0 -> v1.4.1
• github.com/aws/aws-sdk-go-v2 v1.42.0 -> v1.43.0
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.13 -> v1.7.14
• github.com/aws/aws-sdk-go-v2/config v1.32.24 -> v1.32.31
• github.com/aws/aws-sdk-go-v2/credentials v1.19.23 -> v1.19.30
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.29 -> v1.18.31
• github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.2.9 -> v0.3.5
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.29 -> v1.4.31
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29 -> v2.7.31
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30 -> v1.4.32
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12 -> v1.13.13
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.22 -> v1.9.24
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.29 -> v1.13.31
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.29 -> v1.19.32
• github.com/aws/aws-sdk-go-v2/service/s3 v1.103.3 -> v1.106.0
• github.com/aws/aws-sdk-go-v2/service/signin v1.1.5 -> v1.5.0
• github.com/aws/aws-sdk-go-v2/service/sso v1.31.3 -> v1.33.0
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.6 -> v1.38.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.43.3 -> v1.45.0
• github.com/aws/smithy-go v1.27.2 -> v1.27.4
• github.com/containerd/containerd/api v1.10.0 -> v1.11.1
• github.com/containerd/containerd/v2 v2.2.4 -> v2.3.3
• github.com/containerd/plugin v1.0.0 -> v1.1.0
• github.com/containerd/ttrpc v1.2.8 -> v1.2.9
• github.com/docker/cli v29.5.3 -> v29.6.2
• github.com/go-openapi/errors v0.22.7 -> v0.22.8
• github.com/go-openapi/loads v0.23.3 -> v0.24.0
• github.com/go-openapi/runtime v0.32.3 -> v0.32.4
• github.com/go-openapi/spec v0.22.5 -> v0.22.6
• github.com/go-openapi/strfmt v0.26.3 -> v0.26.4
• github.com/go-openapi/swag v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/cmdutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/conv v0.26.0 -> v0.27.0
• github.com/go-openapi/swag/fileutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/jsonname v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/jsonutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/loading v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/mangling v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/netutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/stringutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/typeutils v0.26.0 -> v0.27.0
• github.com/go-openapi/swag/yamlutils v0.26.0 -> v0.26.1
• github.com/go-openapi/validate v0.25.3 -> v0.26.0
• github.com/gohugoio/hashstructure v0.6.0 new
• github.com/google/go-containerregistry v0.21.6 -> v0.21.7
• github.com/klauspost/compress v1.18.6 -> v1.19.1
• github.com/moby/go-archive v0.2.0 -> v0.2.1
• github.com/moby/policy-helpers d5411a945cfc -> 856be88baec4
• github.com/moby/sys/mount fc52b7222d0b -> v0.3.5
• github.com/moby/sys/user v0.4.0 -> v0.4.1
• github.com/sigstore/rekor v1.5.2 -> v1.5.3
• github.com/sigstore/rekor-tiles/v2 5d098a2b6443 -> v2.3.0
• github.com/sigstore/sigstore-go v1.2.1 -> v1.2.2
• github.com/tonistiigi/fsutil 30cd4fc5d911 -> 6d9dc2ebad62
• go.etcd.io/bbolt v1.4.3 -> v1.5.0
• go.opentelemetry.io/otel/exporters/prometheus v0.65.0 -> v0.66.0
• golang.org/x/crypto v0.52.0 -> v0.54.0
• golang.org/x/mod v0.36.0 -> v0.38.0
• golang.org/x/net v0.55.0 -> v0.57.0
• golang.org/x/sync v0.20.0 -> v0.22.0
• golang.org/x/sys v0.45.0 -> v0.47.0
• golang.org/x/term v0.43.0 -> v0.45.0
• golang.org/x/text v0.37.0 -> v0.40.0
• google.golang.org/grpc v1.81.1 -> v1.82.1
• google.golang.org/protobuf v1.36.11 -> f2248ac996af

Previous release can be found at v0.31.2

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.26.0-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.26.0

Notable changes

• Fix incorrect warning when matching dockerignore patterns to COPY . command #6930

Welcome to the v0.32.0-rc2 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Alberto Garcia Hierro
• Sebastiaan van Stijn
• Tõnis Tiigi

Notable Changes

• Built-in Dockerfile frontend has been updated to v1.26.0-rc2 changelog
• Session exporters now support an optional finalization callback after exports complete, allowing providers to run completion logic while gateway references are still available. #6978

Dependency Changes

• github.com/moby/go-archive v0.2.0 -> v0.2.1

Previous release can be found at v0.32.0-rc1