v0.14.0

Welcome to the 0.14.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Talon James Bowler
• Akihiro Suda
• Jonathan A. Sternberg
• Justin Chadwell
• David Karlsson
• Sebastiaan van Stijn
• Anthony Nandaa
• Erik Sipsma
• Aleksa Sarai
• Adam Perlin
• Shaun Thompson
• Paweł Gronowski
• Burt Holzman
• Derek McGowan
• Adrien Delorme
• Ahmon Dancy
• Billy Owire
• Dennis Haney
• Felix Fontein
• Félix Mattrat
• Gabriel Samfira
• Höhl, Lukas
• Kirill A. Korinsky
• Petteri Räty
• Salim B
• Stephen Day
• Swagat Bora
• Zhizhen He
• cuiyourong
• guoguangwu
• racequite
• yzewei

Notable Changes

• Default Dockerfile frontend has been updated to v1.8.0 docs
• New validation rules have been added to verify that Frontend returned build results for expected platforms #4908
• Allow configuring cache of scanned emulator support for better performance #4949
• LLB FileOp now supports configuring the behavior of copy conflicts between incompatible file types #4455
• Github cache backend can now check the existence of previous blobs via REST API batch requests to work around limits exposed by Github on the cache API #4788
• Increase the size limit of LLB definitions, allowing bigger builds #4969
• Mitigate restoring from cache DB corrupt state after crash or abrupt kill #4981
• Release image is now based on Alpine 3.20 #4952
• New configuration options allow controlling what frontends BuildKit is allowed to call #4899
• Improve performance of exporting S3 cache #4551
• Buildctl now respects proxy environment variables when setting up gRPC connection #4127
• Improve LLB generation by maintaining consistent order #4706
• More OpenTelemetry tracepoints have been added to track exporting, attestion and history record creation. #4997
• Fix detection of certain Git URLs #4849
• Fix too low maximum layer limit for non-rootfs overlay mounts #4815
• Fix possible cases where some errors could be missing a stacktrace #4982
• Fix possible incorrect resolution of some symlink paths #4896
• Fix provenance created for history record not containing builder ID #4833
• Fix the fallback mechanism for insecure registries to detect more valid error conditions for retry via HTTP protocol #4975
• Fix an issue that could result in "inconsistent graph state" error during many related parallel builds #4887
• Fix minimal terminal bounds check when custom BUILDKIT_TTY_LOG_LINES value is defined #4767
• Fix possible performance issues while walking back cache records during provenance attestation creation #4976 #4947 #4944
• Fix possible goroutine leak from dangling progress stream #4902
• Fix an issue with some filters for disk usage command #4877
• Fix possible "exceeded retry timeout" error #5010
• Fix exporter definitions being missing in history record for certain clients #5017
• Fix possible resource leak in error handling #4816
• Fix missing mediatype in the index of OCI export artifact #4814 #4727
• Fix issue with uncompressed layer digests when exporting cache for workers that don't support compressed layers #4796
• Fix possible FD leak on forwarding SSH #4886

Dependency Changes

• github.com/Microsoft/go-winio v0.6.1 -> v0.6.2
• github.com/Microsoft/hcsshim v0.11.4 -> v0.11.5
• github.com/containerd/containerd v1.7.13 -> v1.7.18
• github.com/containerd/errdefs v0.1.0 new
• github.com/containerd/ttrpc v1.2.2 -> v1.2.4
• github.com/distribution/reference v0.5.0 -> v0.6.0
• github.com/docker/cli v25.0.3 -> v26.1.4
• github.com/docker/docker v25.0.3 -> v26.1.4
• github.com/golang/protobuf v1.5.3 -> v1.5.4
• github.com/opencontainers/image-spec v1.1.0-rc5 -> v1.1.0
• github.com/tonistiigi/go-actions-cache a0b64f338598 -> 9794bdbb2fb4
• github.com/tonistiigi/vt100 f9a4f7ef6531 -> 90bafcd6abab
• go.etcd.io/bbolt v1.3.9 -> v1.3.10

Previous release can be found at v0.13.2

dockerfile/1.8.0-labs

# syntax=docker.io/docker/dockerfile-upstream:1.8.0-labs

dockerfile/1.8.0

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.8.0

Notable changes

• Many new validation rules have been added to verify that your Dockerfile is using best practices. These rules are validated during build and new "lint" subrequest can be used to only trigger validation without completing the whole build. #4925 #4923 #4913 #4897 #4903 #4889 #4843 #4891 #4883 #4878 #4852 #4840 #4839 #4761 #4759 #4990 #4992 #5000 #5001
• New directive #check and build-arg BUILDKIT_DOCKERFILE_CHECK can be set to control the behavior or best practices validation checks #4962
• Using a single-platform base image that does not match your expected platform is now validated #4924
• Errors from the expansion of ARG definitions in global scope are now handled properly #4856
• Expansion of the default value of ARG now only happens if it is not overwritten by the user. Previously, expansion was completed and value was later ignored, which could result in an unexpected expansion error. #4856
• Performance of parsing huge Dockerfiles with many stages has been improved #4970
• Fix some Windows path handling consistency errors #4825

v0.14.0-rc2

Welcome to the 0.14.0-rc2 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• Aleksa Sarai
• CrazyMax
• Sebastiaan van Stijn
• Talon Bowler
• Anthony Nandaa
• David Karlsson
• Derek McGowan
• Gabriel Samfira
• Jonathan A. Sternberg
• Paweł Gronowski
• Shaun Thompson

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.8.0-rc2 changelog
• More OpenTelemetry tracepoints have been added to track exporting, attestion and history record creation. #4997
• Fix possible cases where some errors could be missing a stacktrace #4982
• Fix possible incorrect resolution of some symlink paths #4896

Dependency Changes

• github.com/containerd/containerd v1.7.17 -> v1.7.18
• github.com/containerd/errdefs v0.1.0 new
• github.com/docker/cli v26.1.3 -> v26.1.4
• github.com/docker/docker v26.1.3 -> v26.1.4

Previous release can be found at v0.14.0-rc1

dockerfile/1.8.0-rc2-labs

Merge pull request #4990 from crazy-max/docs-dockerfile-gen

dockerfile: generate lint rules documentation

dockerfile/1.8.0-rc2

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.8.0-rc2

Notable changes

• Validation rules messaging has been updated and warnings now show Documentation URLs #4990 #4992
• Check method will now by default validate all the stages of the Dockerfile, not stages reachable from the last stage #5000 #5001
• Fix possible incorrect base image validation warning in RC1 #4992

v0.14.0-rc1

buildkit 0.14.0-rc1

Welcome to the 0.14.0-rc1 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• Talon Bowler
• CrazyMax
• Akihiro Suda
• Justin Chadwell
• Jonathan A. Sternberg
• David Karlsson
• Erik Sipsma
• Anthony Nandaa
• Adam Perlin
• Sebastiaan van Stijn
• Burt Holzman
• Paweł Gronowski
• Adrien Delorme
• Ahmon Dancy
• Aleksa Sarai
• Billy Owire
• Dennis Haney
• Derek McGowan
• Felix Fontein
• Félix Mattrat
• Höhl, Lukas
• Kirill A. Korinsky
• Petteri Räty
• Salim B
• Shaun Thompson
• Stephen Day
• Swagat Bora
• Zhizhen He
• cuiyourong
• guoguangwu
• racequite
• yzewei

Notable Changes

• Default Dockerfile frontend has been updated to v1.8.0-rc1 docs
• New validation rules have been added to verify that Frontend returned build results for expected platforms #4908
• Allow configuring cache of scanned emulator support for better performance #4949
• LLB FileOp now supports configuring the behavior of copy conflicts between incompatible file types #4455
• Github cache backend can now check the existence of previous blobs via REST API batch requests to work around limits exposed by Github on the cache API #4788
• Increase the size limit of LLB definitions, allowing bigger builds #4969
• Mitigate restoring from cache DB corrupt state after crash or abrupt kill #4981
• Release image is now based on Alpine 3.20 #4952
• New configuration options allow controlling what frontends BuildKit is allowed to call #4899
• Improve performance of exporting S3 cache #4551
• Buildctl now respects proxy environment variables when setting up gRPC connection #4127
• Improve LLB generation by maintaining consistent order #4706
• Fix detection of certain Git URLs #4849
• Fix too-low maximum layer limit for non-rootfs overlay mounts #4815
• Fix provenance created for history record not containing builder ID #4833
• Fix the fallback mechanism for insecure registries to detect more valid error conditions for retry via HTTP protocol #4975
• Fix an issue that could result in "inconsitent graph state" error during many related parallel builds #4887
• Fix minimal terminal bounds check when custom BUILDKIT_TTY_LOG_LINES value is defined #4767
• Fix possible performance issues while walking back cache records during provenance attestation creation #4976 #4947 #4944
• Fix possible goroutine leak from dangling progress stream #4902
• Fix an issue with some filters for disk usage command #4877
• Fix possible resource leak in error handling #4816
• Fix missing mediatype in the index of OCI export artifact #4814 #4727
• Fix issue with uncompressed layer digests when exporting cache for workers that don't support compressed layers #4796
• Fix possible FD leak on forwarding SSH #4886

Dependency Changes

• github.com/Microsoft/go-winio v0.6.1 -> v0.6.2
• github.com/Microsoft/hcsshim v0.11.4 -> v0.11.5
• github.com/containerd/containerd v1.7.13 -> v1.7.17
• github.com/containerd/ttrpc v1.2.2 -> v1.2.4
• github.com/docker/cli v25.0.3 -> v26.1.3
• github.com/docker/docker v25.0.3 -> v26.1.3
• github.com/golang/protobuf v1.5.3 -> v1.5.4
• github.com/opencontainers/image-spec v1.1.0-rc5 -> v1.1.0
• github.com/tonistiigi/go-actions-cache a0b64f338598 -> 9794bdbb2fb4
• github.com/tonistiigi/vt100 f9a4f7ef6531 -> 90bafcd6abab

Previous release can be found at v0.13.2

dockerfile/1.8.0-rc1-labs

Merge pull request #4981 from jsternberg/boltdb-panic-mitigation

bboltcachestorage: mitigate corrupt boltdb cache after panic

dockerfile/1.8.0-rc1

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.8.0-rc1

Notable changes

• Many new validation rules have been added to verify that your Dockerfile is using best practices. These rules are validated during build and new "lint" subrequest can be used to only trigger validation without completing whole build. #4925 #4923 #4913 #4897 #4903 #4889 #4843 #4891 #4883 #4878 #4852 #4840 #4839 #4761 #4759
• New directive #check and build-arg BUILDKIT_DOCKERFILE_CHECK can be set to control the behavior or best practices validation checks #4962
• Using single platform base image that does not match your expected platform is now validated #4924
• Errors from the expansion of ARG definitions in global scope are now handled properly #4856
• Expansion of the default value of ARG now only happens if it is not overwritten by the user. Previously, expansion was completed and value was later ignored, which could result in an unexpected expansion error. #4856
• Performance of parsing huge Dockerfiles with many stages has been improved #4970
• Fix some Windows path handling consistency errors #4825

v0.13.2

buildkit 0.13.2

Welcome to the 0.13.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Notable Changes

• Default Dockerfile frontend has been updated to 1.7.1
• Fix regression on copying hardlinks from buildx context with filters #4870 tonistiigi/fsutil#198
• Windows buildkitd now correctly handles --group flag #4875
• Windows buildkitd default GC is now based on disk size like in Linux #4865
• Fix issues with some path validation for Windows containers #4863
• Fix rewrite-timestamps option incompatibility with COPY --link #4804
• Fix issue where rewite-timestamps rewrites base image layers in some cases #4805

Dependency Changes

• github.com/tonistiigi/fsutil 7525a1af2bb5 -> 91a3fc46842c

Previous release can be found at v0.13.1