v0.20.1

Welcome to the v0.20.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• David Karlsson
• Jonathan A. Sternberg
• Tõnis Tiigi
• CrazyMax

Notable Changes

• Fix bake --print output missing some attributes for attestations #2937
• Fix allowing comma separated image reference strings for cache import and export values #2944

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.20.0

v0.20.0

Welcome to the v0.20.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Note

This version of buildx enables filesystem entitlement checks for buildx bake command by default. If your Bake definition needs to read or write files outside your current working directory, you need to allow access to these paths with --allow fs=<path|*>. On the terminal, you can also interactively approve these paths with the provided prompt. Optionally, you can disable these checks by setting BUILDX_BAKE_ENTITLEMENTS_FS=0. This validation produced a warning in buildx v0.19.0+, but starting from current release it produces an error. docs

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Guillaume Lours
• Jonathan A. Sternberg
• Arran Walker
• David Karlsson
• Nicolas De Loof

Notable Changes

• New buildx history command has been added that allows working with build records of completed and running builds. You can use these commands to list, inspect, remove your builds, replay the logs of already completed builds, and quickly open your builds in Docker Desktop Build UI for further debugging. This is an early version of this command and we expect to add more features in the future releases. #2891 #2925
• Bake: Definition now supports new object notation for the fields that previously required CSV strings as inputs (attest, output, cache-from, cache-to, secret, ssh) #2758 #2848 #2871 #2814
• Bake: Make FS entitlements error by default. To disable it, you can set BUILDX_BAKE_ENTITLEMENTS_FS=0 #2875
• Bake: Infer git auth token from remote files to build request #2905
• Bake: Add support for --list flag to list targets and variables #2900 #2907
• Bake: Update lookup order for default definition files to load the files with "override" suffix later #2886
• Bake: Fix entitlements check for default SSH socket #2898
• Bake: Fix named context from target platform matching #2877
• Bake: Fix missing default target in group's default targets #2863
• Validate BuildKit configuration before creating a builder #2864
• Compose compatibility has been updated to v2.4.7 #2893 #2857 #2829
• Fix missing last progress from loading layers #2876
• Fix missing documentation for quiet progress mode #2899

Dependency Changes

• github.com/AdaLogics/go-fuzz-headers ced1acdcaa24 -> e8a1dd7889d6
• github.com/aws/aws-sdk-go-v2 v1.24.1 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/config v1.26.6 -> v1.27.27
• github.com/aws/aws-sdk-go-v2/credentials v1.16.16 -> v1.17.27
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.11 -> v1.16.11
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.10 -> v1.3.15
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.10 -> v2.6.15
• github.com/aws/aws-sdk-go-v2/internal/ini v1.7.3 -> v1.8.0
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 -> v1.11.3
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.10 -> v1.11.17
• github.com/aws/aws-sdk-go-v2/service/sso v1.18.7 -> v1.22.4
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.7 -> v1.26.4
• github.com/aws/aws-sdk-go-v2/service/sts v1.26.7 -> v1.30.3
• github.com/aws/smithy-go v1.19.0 -> v1.20.3
• github.com/compose-spec/compose-go/v2 v2.4.4 -> v2.4.7
• github.com/containerd/containerd/api v1.7.19 -> v1.8.0
• github.com/containerd/containerd/v2 v2.0.2 new
• github.com/containerd/errdefs v0.3.0 -> v1.0.0
• github.com/containerd/errdefs/pkg v0.3.0 new
• github.com/containerd/platforms v0.2.1 -> v1.0.0-rc.1
• github.com/containerd/ttrpc v1.2.5 -> v1.2.7
• github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.6
• github.com/creack/pty v1.1.21 -> v1.1.24
• github.com/docker/cli v27.4.0-rc.2 -> v27.5.0
• github.com/docker/cli-docs-tool v0.8.0 -> v0.9.0
• github.com/docker/docker v27.4.0-rc.2 -> v27.5.0
• github.com/fxamacker/cbor/v2 v2.7.0 new
• github.com/go-openapi/swag v0.22.3 -> v0.22.4
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.22.0
• github.com/hashicorp/go-cty-funcs a090f58aa992 -> c51673e0b3dd
• github.com/hashicorp/hcl/v2 v2.20.1 -> v2.23.0
• github.com/moby/buildkit v0.18.0 -> v0.19.0
• github.com/moby/spdystream v0.2.0 -> v0.4.0
• github.com/pkg/browser 5ac0b6a4141c new
• github.com/prometheus/client_golang v1.20.2 -> v1.20.5
• github.com/stretchr/testify v1.9.0 -> v1.10.0
• github.com/tonistiigi/fsutil 31cf1f437184 -> b14e27f4135a
• github.com/x448/float16 v0.8.4 new
• github.com/zclconf/go-cty v1.14.4 -> v1.16.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.46.1 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 -> v0.56.0
• go.opentelemetry.io/otel v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.44.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.44.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/metric v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk/metric v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/trace v1.28.0 -> v1.31.0
• golang.org/x/crypto v0.27.0 -> v0.31.0
• golang.org/x/net v0.29.0 -> v0.33.0
• golang.org/x/oauth2 v0.21.0 -> v0.23.0
• golang.org/x/sync v0.8.0 -> v0.10.0
• golang.org/x/sys v0.26.0 -> v0.28.0
• golang.org/x/term v0.24.0 -> v0.27.0
• golang.org/x/text v0.18.0 -> v0.21.0
• google.golang.org/genproto/googleapis/api f6361c86f094 -> 5fefd90f89a9
• google.golang.org/genproto/googleapis/rpc f6361c86f094 -> 324edc3d5d38
• google.golang.org/grpc v1.66.3 -> v1.68.1
• google.golang.org/protobuf v1.35.1 -> v1.35.2
• k8s.io/api v0.29.2 -> v0.31.2
• k8s.io/apimachinery v0.29.2 -> v0.31.2
• k8s.io/client-go v0.29.2 -> v0.31.2
• k8s.io/klog/v2 v2.110.1 -> v2.130.1
• k8s.io/kube-openapi 2dd684a91f00 -> 70dd3763d340
• k8s.io/utils 3b25d923346b -> 18e509b52bc8
• sigs.k8s.io/yaml v1.3.0 -> v1.4.0

Previous release can be found at v0.19.3

v0.20.0-rc3

buildx 0.20.0-rc3

Welcome to the v0.20.0-rc3 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax

Notable Changes

• Add additional error details like source code location, stacktraces, and logs to buildx history inspect when inspecting a failed build. #2925
• Fix printing desktop URL and timestamps in buildx history inspect #2925

Dependency Changes

• github.com/moby/buildkit v0.19.0-rc2 -> v0.19.0-rc3

Previous release can be found at v0.20.0-rc2

v0.20.0-rc2

buildx 0.20.0-rc2

Welcome to the v0.20.0-rc2 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn

Notable Changes

• New buildx history command has been added that allows working with build records of completed and running builds. You can use these commands to list, inspect, remove your builds, replay the logs of already completed builds, and quickly open your builds in Docker Desktop Build UI for further debugging. This is an early version of this command and we expect to add more features in the future releases. #2891

Dependency Changes

• github.com/davecgh/go-spew d8f796af33cc -> v1.1.1
• github.com/pkg/browser 5ac0b6a4141c new
• github.com/pmezard/go-difflib 5d4384ee4fb2 -> v1.0.0

Previous release can be found at v0.20.0-rc1

v0.20.0-rc1

Welcome to the v0.20.0-rc1 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Guillaume Lours
• Jonathan A. Sternberg
• Arran Walker
• David Karlsson
• Nicolas De Loof

Notable Changes

• Bake: Definition now supports new object notation for the fields that previously required CSV strings as inputs (attest, output, cache-from, cache-to, secret, ssh) #2758 #2848 #2871 #2814
• Bake: Make FS entitlements error by default. To disable it, you can set BUILDX_BAKE_ENTITLEMENTS_FS=0 #2875
• Bake: Infer git auth token from remote files to build request #2905
• Bake: Add support for --list flag to list targets and variables #2900 #2907
• Bake: Update lookup order for override files #2886
• Bake: Fix entitlements check for default SSH socket #2898
• Bake: Fix named context from target platform matching #2877
• Bake: Fix missing default target in group's default targets #2863
• Validate BuildKit configuration before creating a builder #2864
• Compose compatibility has been updated to v2.4.7 #2893 #2857 #2829
• Fix missing last progress from loading layers #2876
• Fix missing documentation for quiet progress mode #2899

Dependency Changes

• github.com/AdaLogics/go-fuzz-headers ced1acdcaa24 -> e8a1dd7889d6
• github.com/aws/aws-sdk-go-v2 v1.24.1 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/config v1.26.6 -> v1.27.27
• github.com/aws/aws-sdk-go-v2/credentials v1.16.16 -> v1.17.27
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.11 -> v1.16.11
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.10 -> v1.3.15
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.10 -> v2.6.15
• github.com/aws/aws-sdk-go-v2/internal/ini v1.7.3 -> v1.8.0
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 -> v1.11.3
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.10 -> v1.11.17
• github.com/aws/aws-sdk-go-v2/service/sso v1.18.7 -> v1.22.4
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.7 -> v1.26.4
• github.com/aws/aws-sdk-go-v2/service/sts v1.26.7 -> v1.30.3
• github.com/aws/smithy-go v1.19.0 -> v1.20.3
• github.com/compose-spec/compose-go/v2 v2.4.4 -> v2.4.7
• github.com/containerd/containerd/api v1.7.19 -> v1.8.0
• github.com/containerd/containerd/v2 v2.0.2 new
• github.com/containerd/errdefs v0.3.0 -> v1.0.0
• github.com/containerd/errdefs/pkg v0.3.0 new
• github.com/containerd/platforms v0.2.1 -> v1.0.0-rc.1
• github.com/containerd/ttrpc v1.2.5 -> v1.2.7
• github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.6
• github.com/creack/pty v1.1.21 -> v1.1.24
• github.com/davecgh/go-spew v1.1.1 -> d8f796af33cc
• github.com/docker/cli v27.4.0-rc.2 -> v27.5.0
• github.com/docker/cli-docs-tool v0.8.0 -> v0.9.0
• github.com/docker/docker v27.4.0-rc.2 -> v27.5.0
• github.com/fxamacker/cbor/v2 v2.7.0 new
• github.com/go-openapi/swag v0.22.3 -> v0.22.4
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.22.0
• github.com/hashicorp/go-cty-funcs a090f58aa992 -> c51673e0b3dd
• github.com/hashicorp/hcl/v2 v2.20.1 -> v2.23.0
• github.com/moby/buildkit v0.18.0 -> v0.19.0-rc2
• github.com/moby/spdystream v0.2.0 -> v0.4.0
• github.com/pmezard/go-difflib v1.0.0 -> 5d4384ee4fb2
• github.com/prometheus/client_golang v1.20.2 -> v1.20.5
• github.com/stretchr/testify v1.9.0 -> v1.10.0
• github.com/tonistiigi/fsutil 31cf1f437184 -> b14e27f4135a
• github.com/x448/float16 v0.8.4 new
• github.com/zclconf/go-cty v1.14.4 -> v1.16.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.46.1 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 -> v0.56.0
• go.opentelemetry.io/otel v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.44.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.44.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/metric v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk/metric v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/trace v1.28.0 -> v1.31.0
• golang.org/x/crypto v0.27.0 -> v0.31.0
• golang.org/x/net v0.29.0 -> v0.33.0
• golang.org/x/oauth2 v0.21.0 -> v0.23.0
• golang.org/x/sync v0.8.0 -> v0.10.0
• golang.org/x/sys v0.26.0 -> v0.28.0
• golang.org/x/term v0.24.0 -> v0.27.0
• golang.org/x/text v0.18.0 -> v0.21.0
• google.golang.org/genproto/googleapis/api f6361c86f094 -> 5fefd90f89a9
• google.golang.org/genproto/googleapis/rpc f6361c86f094 -> 324edc3d5d38
• google.golang.org/grpc v1.66.3 -> v1.68.1
• google.golang.org/protobuf v1.35.1 -> v1.35.2
• k8s.io/api v0.29.2 -> v0.31.2
• k8s.io/apimachinery v0.29.2 -> v0.31.2
• k8s.io/client-go v0.29.2 -> v0.31.2
• k8s.io/klog/v2 v2.110.1 -> v2.130.1
• k8s.io/kube-openapi 2dd684a91f00 -> 70dd3763d340
• k8s.io/utils 3b25d923346b -> 18e509b52bc8
• sigs.k8s.io/yaml v1.3.0 -> v1.4.0

Previous release can be found at v0.19.3

v0.19.3

Welcome to the v0.19.3 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax

Notable changes

• Bake: change evaluation of entitlement paths to allow non-existing paths #2860
• Bake: ignore empty values set by --set #2861

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.19.2

v0.19.2

Welcome to the v0.19.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Notable changes

• Bake: fix issue where entitlement requests may have been not detected when Bake target writes output outside of the current working directory #2834
• Bake: automatically add filesystem entitlements to the paths defined with --set flag to avoid the need to allow the same path multiple times #2834

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.19.1

v0.19.1

buildx 0.19.1

Welcome to the v0.19.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Notable Changes

• Unfortunately, we had to revert the change that added new object notation for the fields that previously required CSV strings in Bake definition because of backwards incompatibility issues were discovered in some edge cases. This feature has now been postponed for future v0.20.0 release #2824

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.19.0

v0.19.0

buildx 0.19.0

Welcome to the v0.19.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• David Karlsson
• Jonathan A. Sternberg
• Akihiro Suda
• Guillaume Lours
• Laurent Goderre
• Sebastiaan van Stijn

Notable Changes

• Bake command now requires passing filesystem entitlements with --allow when your build needs to read or write files outside of your current working directory. This feature currently only reports a warning when using local Bake definition, but will start to produce an error starting from the v0.20 release. If you wish to enable the error in the current release, you can set BUILDX_BAKE_ENTITLEMENTS_FS=1 #2796 #2812
• Bake definition now supports new object notation for the fields that previously required CSV strings as inputs (output, cache-from, cache-to, secret, ssh) #2758
• Bake definition now allows defining validation conditions to variables #2794
• Compose support has been updated to v2.4.4 #2806 #2780
• Metadata file values can now contain JSON array values #2777
• Improve error messages when using an incorrect format for labels #2778
• FreeBSD and OpenBSD artifacts are now included in release #2774 #2775 #2781
• Fix printing bake definition with empty Compose networks #2790

Dependency Changes

• github.com/cenkalti/backoff/v4 v4.2.1 -> v4.3.0
• github.com/compose-spec/compose-go/v2 v2.4.1 -> v2.4.4
• github.com/containerd/containerd v1.7.22 -> v1.7.24
• github.com/containerd/continuity v0.4.4 -> v0.4.5
• github.com/containerd/errdefs v0.1.0 -> v0.3.0
• github.com/containerd/typeurl/v2 v2.2.0 -> v2.2.3
• github.com/docker/cli v27.3.1 -> v27.4.0-rc.2
• github.com/docker/docker v27.3.1 -> v27.4.0-rc.2
• github.com/go-logr/logr v1.4.1 -> v1.4.2
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 -> v2.20.0
• github.com/moby/buildkit v0.17.0 -> v0.18.0
• github.com/prometheus/client_golang v1.17.0 -> v1.20.2
• github.com/prometheus/client_model v0.5.0 -> v0.6.1
• github.com/prometheus/common v0.44.0 -> v0.55.0
• github.com/tonistiigi/fsutil 397af5306b5c -> 31cf1f437184
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 -> v0.53.0
• go.opentelemetry.io/otel v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/metric v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/sdk v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/sdk/metric v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/trace v1.21.0 -> v1.28.0
• go.opentelemetry.io/proto/otlp v1.0.0 -> v1.3.1
• google.golang.org/genproto/googleapis/api ef581f913117 -> f6361c86f094
• google.golang.org/genproto/googleapis/rpc ef581f913117 -> f6361c86f094
• google.golang.org/grpc v1.66.2 -> v1.66.3

Previous release can be found at v0.18.0

v0.19.0-rc2

buildx 0.19.0-rc2

Welcome to the v0.19.0-rc2 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax

Notable Changes

• Filesystem entitlements in Bake now allow wildcard * value to allow access to any path #2812

Dependency Changes

• github.com/moby/buildkit v0.18.0-rc1 -> v0.18.0-rc2

Previous release can be found at v0.19.0-rc1