v0.20.0-rc1

buildkit 0.20.0-rc1

Welcome to the v0.20.0-rc1 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Akihiro Suda
• Shaun Thompson
• Anthony Nandaa
• Bertrand Paquet
• Brian Goff
• Jonathan A. Sternberg

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.14.0-rc1
• Github Actions cache backend has been updated to support v2 API. Github is expected to stop supporting V1 API from March 1st 2025 #5720
• Support for CDI (Container Device Interface) devices has been added allowing builds to use GPUs and other defined devices. Build steps can now request devices to be injected into the container, if they are permitted to do so. In Dockerfile, devices are currently available in the labs channel. This feature is expected to get more updates before GA release. #4056 #5722
• This release has removed support for Azure remote cache backend due to a problem with stale dependencies. Azure backend may return in a future release. #5719
• History record APIs now support server-side filters and limiting amount of records returned. #5705
• Fix possible errors from credentials expiration for long builds #5684
• Fix possible crash from S3 remote cache backend #5597
• Fix possible record leak in Bolt database #5692

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.11.1 -> v1.16.0
• github.com/Azure/azure-sdk-for-go/sdk/internal v1.8.0 -> v1.10.0
• github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v0.4.1 -> v1.5.0
• github.com/containerd/cgroups/v3 v3.0.3 -> v3.0.5
• github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.0 -> v2.1.1
• github.com/containerd/go-cni v1.1.11 -> v1.1.12
• github.com/docker/cli v27.5.0 -> v27.5.1
• github.com/docker/docker v27.5.0 -> v27.5.1
• github.com/moby/term v0.5.0 -> v0.5.2
• github.com/petermattis/goid 4fcff4a6cae7 new
• github.com/sasha-s/go-deadlock v0.3.5 new
• github.com/tonistiigi/go-actions-cache 017636a73805 -> bd99cf5bbc65
• github.com/vishvananda/netns v0.0.4 -> v0.0.5
• golang.org/x/exp 701f63a606c0 -> 2d47ceb2692f
• google.golang.org/genproto/googleapis/api 5fefd90f89a9 -> 324edc3d5d38
• google.golang.org/grpc v1.68.1 -> v1.69.4

Previous release can be found at v0.19.0

dockerfile/1.14.0-rc1-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.14.0-rc1-labs

Notable changes

• New RUN --device=name,[required] flag allows build to request CDI devices to be available to the build step. Requires BuildKit v0.20.0+ #4056

dockerfile/1.14.0-rc1

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.14.0-rc1

Notable changes

• Fix handling of "os.version" platform property if one is set by the base image #5714
• Fix errors where a named context metadata could be resolved even if it was not reachable by the current build configuration, leading to build error #5688

v0.19.0

Welcome to the v0.19.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Akihiro Suda
• Jonathan A. Sternberg
• Anthony Nandaa
• Brian Goff
• David Karlsson
• Marat Radchenko
• Shaun Thompson
• Alberto Garcia Hierro
• Daniel Githinji
• Peter Engelbert
• Steeve Chailloux
• lvyaoting

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.13.0
• Attestations embedded into build results can now be generated in OCI artifact format with oci-artifact=true option #5573
• Platform specifiers that set Windows OSVersion are now supported #5614
• Add powershell.exe dir to default PATH for WCOW #5446
• Allow unix address for debug address for buildkitd #5568
• Requests that pull in Git sources now inherit proxy environment variables from buildkitd #5613
• Update Runc to v1.2.4 #5639
• Update RootlessKit to v2.3.2 #5674
• Fix possible "unknown file mode" error when transferring files on Windows #5636 #5657
• Fix possible panic from data race in history record serialization #5666
• Fix error message for invalid includepatterns #5649
• Fix invalid index.json annotations on tar=false export #5589
• Fix possible panic when walking provenance due to race condition #5606

Dependency Changes

• github.com/AdaLogics/go-fuzz-headers ced1acdcaa24 -> e8a1dd7889d6
• github.com/AdamKorcz/go-118-fuzz-build 8075edf89bb0 -> 2b5cbb29f3e2
• github.com/Microsoft/hcsshim v0.12.8 -> v0.12.9
• github.com/aws/aws-sdk-go-v2 v1.24.1 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.5.4 -> v1.6.3
• github.com/aws/aws-sdk-go-v2/config v1.26.6 -> v1.27.27
• github.com/aws/aws-sdk-go-v2/credentials v1.16.16 -> v1.17.27
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.11 -> v1.16.11
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.15.15 -> v1.17.8
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.10 -> v1.3.15
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.10 -> v2.6.15
• github.com/aws/aws-sdk-go-v2/internal/ini v1.7.3 -> v1.8.0
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.2.10 -> v1.3.15
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 -> v1.11.3
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.2.10 -> v1.3.17
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.10 -> v1.11.17
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.16.10 -> v1.17.15
• github.com/aws/aws-sdk-go-v2/service/s3 v1.48.1 -> v1.58.2
• github.com/aws/aws-sdk-go-v2/service/sso v1.18.7 -> v1.22.4
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.7 -> v1.26.4
• github.com/aws/aws-sdk-go-v2/service/sts v1.26.7 -> v1.30.3
• github.com/aws/smithy-go v1.19.0 -> v1.20.3
• github.com/containerd/containerd/api v1.7.19 -> v1.8.0
• github.com/containerd/containerd/v2 v2.0.2 new
• github.com/containerd/errdefs v0.3.0 -> v1.0.0
• github.com/containerd/errdefs/pkg v0.3.0 new
• github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.0 new
• github.com/containerd/go-cni v1.1.10 -> v1.1.11
• github.com/containerd/nydus-snapshotter v0.14.0 -> v0.15.0
• github.com/containerd/platforms v0.2.1 -> v1.0.0-rc.1
• github.com/containerd/plugin v1.0.0 new
• github.com/containerd/stargz-snapshotter v0.15.1 -> v0.16.3
• github.com/containerd/stargz-snapshotter/estargz v0.15.1 -> v0.16.3
• github.com/containerd/ttrpc v1.2.5 -> v1.2.7
• github.com/containernetworking/cni v1.2.2 -> v1.2.3
• github.com/containernetworking/plugins v1.4.0 -> v1.5.1
• github.com/docker/cli v27.4.0-rc.2 -> v27.5.0
• github.com/docker/docker v27.4.0-rc.2 -> v27.5.0
• github.com/fsnotify/fsnotify v1.7.0 new
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.22.0
• github.com/hanwen/go-fuse/v2 v2.4.0 -> v2.6.3
• github.com/moby/sys/reexec v0.1.0 new
• github.com/opencontainers/runtime-tools 2e043c6bd626 new
• github.com/opencontainers/selinux v1.11.0 -> v1.11.1
• github.com/prometheus/client_golang v1.20.2 -> v1.20.5
• github.com/stretchr/testify v1.9.0 -> v1.10.0
• github.com/syndtr/gocapability 42c35b437635 new
• github.com/tonistiigi/fsutil 31cf1f437184 -> b14e27f4135a
• github.com/tonistiigi/go-actions-cache 394979b8119e -> 017636a73805
• github.com/vbatts/tar-split v0.11.5 -> v0.11.6
• github.com/vishvananda/netlink v1.3.0 -> 084abd93d350
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.46.1 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 -> v0.56.0
• go.opentelemetry.io/otel v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.44.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.44.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/metric v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk/metric v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/trace v1.28.0 -> v1.31.0
• golang.org/x/crypto v0.27.0 -> v0.31.0
• golang.org/x/net v0.29.0 -> v0.33.0
• golang.org/x/sync v0.8.0 -> v0.10.0
• golang.org/x/sys v0.26.0 -> v0.28.0
• golang.org/x/text v0.18.0 -> v0.21.0
• google.golang.org/genproto/googleapis/api f6361c86f094 -> 5fefd90f89a9
• google.golang.org/genproto/googleapis/rpc f6361c86f094 -> 324edc3d5d38
• google.golang.org/grpc v1.66.3 -> v1.68.1
• google.golang.org/protobuf v1.35.1 -> v1.35.2
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.70 -> v1.2.73
• kernel.org/pub/linux/libs/security/libcap/psx v1.2.70 -> v1.2.73
• sigs.k8s.io/yaml v1.4.0 new
• tags.cncf.io/container-device-interface v0.8.0 new
• tags.cncf.io/container-device-interface/specs-go v0.8.0 new

Previous release can be found at v0.18.2

dockerfile/1.13.0-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.13.0-labs

Notable changes

• Fix support for non-octal values for COPY --chmod #5626

dockerfile/1.13.0

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.13.0

Notable changes

• New TARGETOSVERSION, BUILDOSVERSION builtin build-args are available for Windows builds and TARGETPLATFORM value now also contains OSVersion value #5614
• Fix case where ONBUILD command may have run twice on inherited stage #5593
• Allow syntax forwarding for external frontends for files starting with BOM #5645
• Fix Dockerfile directive parsing to not allow invalid syntax #5646
• Fix possible missing named context replacement for child stages in Dockerfile #5596
• Default PATH in Windows Containers has been updated with powershell.exe directory #5446

v0.19.0-rc3

buildkit 0.19.0-rc3

Welcome to the v0.19.0-rc3 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Jonathan A. Sternberg
• Shaun Thompson
• Akihiro Suda
• Alberto Garcia Hierro
• Brian Goff
• David Karlsson
• Steeve Chailloux

Notable Changes

• Requests that pull in Git sources now inherit proxy environment variables from buildkitd #5613
• Fix possible "unknown file mode" error when transferring files on Windows #5636 #5657
• Fix possible panic from data race in history record serialization #5666

Dependency Changes

• kernel.org/pub/linux/libs/security/libcap/cap v1.2.70 -> v1.2.73
• kernel.org/pub/linux/libs/security/libcap/psx v1.2.70 -> v1.2.73

Previous release can be found at v0.19.0-rc2

v0.19.0-rc2

Welcome to the v0.19.0-rc2 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Akihiro Suda
• Anthony Nandaa
• Jonathan A. Sternberg
• Marat Radchenko
• Brian Goff
• Daniel Githinji
• David Karlsson
• Peter Engelbert
• lvyaoting

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.13.0-rc1
• Attestations embedded into build results can now be generated in OCI artifact format with oci-artifact=true option #5573
• Platform specifiers that set Windows OSVersion are now supported #5614
• Add powershell.exe dir to default PATH for WCOW #5446
• Allow unix address for debug address for buildkitd #5568
• Update Runc to v1.2.4 #5639
• Fix error message for invalid includepatterns #5649
• Fix invalid index.json annotations on tar=false export #5589
• Fix possible panic when walking provenance due to race condition #5606

Dependency Changes

• github.com/AdaLogics/go-fuzz-headers ced1acdcaa24 -> e8a1dd7889d6
• github.com/AdamKorcz/go-118-fuzz-build 8075edf89bb0 -> 2b5cbb29f3e2
• github.com/Microsoft/hcsshim v0.12.8 -> v0.12.9
• github.com/aws/aws-sdk-go-v2 v1.24.1 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.5.4 -> v1.6.3
• github.com/aws/aws-sdk-go-v2/config v1.26.6 -> v1.27.27
• github.com/aws/aws-sdk-go-v2/credentials v1.16.16 -> v1.17.27
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.11 -> v1.16.11
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.15.15 -> v1.17.8
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.10 -> v1.3.15
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.10 -> v2.6.15
• github.com/aws/aws-sdk-go-v2/internal/ini v1.7.3 -> v1.8.0
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.2.10 -> v1.3.15
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 -> v1.11.3
• github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.2.10 -> v1.3.17
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.10 -> v1.11.17
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.16.10 -> v1.17.15
• github.com/aws/aws-sdk-go-v2/service/s3 v1.48.1 -> v1.58.2
• github.com/aws/aws-sdk-go-v2/service/sso v1.18.7 -> v1.22.4
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.7 -> v1.26.4
• github.com/aws/aws-sdk-go-v2/service/sts v1.26.7 -> v1.30.3
• github.com/aws/smithy-go v1.19.0 -> v1.20.3
• github.com/containerd/containerd/api v1.7.19 -> v1.8.0
• github.com/containerd/containerd/v2 v2.0.2 new
• github.com/containerd/errdefs v0.3.0 -> v1.0.0
• github.com/containerd/errdefs/pkg v0.3.0 new
• github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.0 new
• github.com/containerd/go-cni v1.1.10 -> v1.1.11
• github.com/containerd/nydus-snapshotter v0.14.0 -> v0.15.0
• github.com/containerd/platforms v0.2.1 -> v1.0.0-rc.1
• github.com/containerd/plugin v1.0.0 new
• github.com/containerd/stargz-snapshotter v0.15.1 -> v0.16.3
• github.com/containerd/stargz-snapshotter/estargz v0.15.1 -> v0.16.3
• github.com/containerd/ttrpc v1.2.5 -> v1.2.7
• github.com/containernetworking/cni v1.2.2 -> v1.2.3
• github.com/containernetworking/plugins v1.4.0 -> v1.5.1
• github.com/docker/cli v27.4.0-rc.2 -> v27.5.0
• github.com/docker/docker v27.4.0-rc.2 -> v27.5.0
• github.com/fsnotify/fsnotify v1.7.0 new
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.22.0
• github.com/hanwen/go-fuse/v2 v2.4.0 -> v2.6.3
• github.com/moby/sys/reexec v0.1.0 new
• github.com/opencontainers/runtime-tools 2e043c6bd626 new
• github.com/opencontainers/selinux v1.11.0 -> v1.11.1
• github.com/prometheus/client_golang v1.20.2 -> v1.20.5
• github.com/stretchr/testify v1.9.0 -> v1.10.0
• github.com/syndtr/gocapability 42c35b437635 new
• github.com/tonistiigi/fsutil 31cf1f437184 -> b14e27f4135a
• github.com/tonistiigi/go-actions-cache 394979b8119e -> 017636a73805
• github.com/vbatts/tar-split v0.11.5 -> v0.11.6
• github.com/vishvananda/netlink v1.3.0 -> 084abd93d350
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.46.1 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 -> v0.56.0
• go.opentelemetry.io/otel v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.44.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.44.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/metric v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk/metric v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/trace v1.28.0 -> v1.31.0
• golang.org/x/crypto v0.27.0 -> v0.31.0
• golang.org/x/net v0.29.0 -> v0.33.0
• golang.org/x/sync v0.8.0 -> v0.10.0
• golang.org/x/sys v0.26.0 -> v0.28.0
• golang.org/x/text v0.18.0 -> v0.21.0
• google.golang.org/genproto/googleapis/api f6361c86f094 -> 5fefd90f89a9
• google.golang.org/genproto/googleapis/rpc f6361c86f094 -> 324edc3d5d38
• google.golang.org/grpc v1.66.3 -> v1.68.1
• google.golang.org/protobuf v1.35.1 -> v1.35.2
• sigs.k8s.io/yaml v1.4.0 new
• tags.cncf.io/container-device-interface v0.8.0 new
• tags.cncf.io/container-device-interface/specs-go v0.8.0 new

Previous release can be found at v0.18.2

dockerfile/1.13.0-rc1-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.13.0-rc1-labs

Notable changes

• Fix support for non-octal values for COPY --chmod #5626

dockerfile/1.13.0-rc1

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.13.0-rc1

Notable changes

• New TARGETOSVERSION, BUILDOSVERSION builtin build-args are available for Windows builds and TARGETPLATFORM value now also contains OSVersion value #5614
• Fix case where ONBUILD command may have run twice on inherited stage #5593
• Allow syntax forwarding for external frontends for files starting with BOM #5645
• Fix Dockerfile directive parsing to not allow invalid syntax #5646
• Fix possible missing named context replacement for child stages in Dockerfile #5596
• Default PATH in Windows Containers has been updated with powershell.exe directory #5446