Releases: moby/buildkit
Releases · moby/buildkit
v0.10.5
https://hub.docker.com/r/moby/buildkit
Notable changes:
This release contains two security fixes.
- Provide mitigation for Git vulnerability CVE-2022-39253. In systems with Git version lower than 2.38.1 invoking a build of a maliciously crafted Git repository with
BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
build-arg could lead to copying arbitrary file system paths into resulting containers/images. - Add additional validation when loading content for
image@digest
references from the local build cache. The new validation makes sure that the same repository name populated the local data and invalid name and digest combinations are detected.
v0.10.4
https://hub.docker.com/r/moby/buildkit
Notable changes:
- Default Dockerfile frontend has been updated to v1.4.3 with fixes to handling platforms and timestamps for named image contexts. changelog
- Fix cancellation error not being detected and erroneously cached #2926
- Fix interactive containers not releasing resources when client doesn't gracefully disconnect them #3025
- Fix possible panic on handling nil results #3043
- Add logging to healthcheck monitoring and mitigate possibility of healthcheck failing under load2998
- Add fallback when rootless buildkitd cannot access containerd socket #2968
dockerfile/1.4.3-labs
Usage
# syntax=docker.io/docker/dockerfile-upstream:1.4.3-labs
dockerfile/1.4.3
v0.10.3
https://hub.docker.com/r/moby/buildkit
Notable changes:
dockerfile/1.4.2-labs
Usage
# syntax=docker.io/docker/dockerfile:1.4.2-labs
dockerfile/1.4.2
Usage
# syntax=docker.io/docker/dockerfile:1.4.2
Notable changes
- Fix loading certain environment variables from an image passed with built context #2847
v0.10.2
https://hub.docker.com/r/moby/buildkit
Notable changes:
- Fix possible corruption of records created by Merge and Diff steps after a daemon restart #2796
v0.10.1
https://hub.docker.com/r/moby/buildkit
Notable changes
- Builtin Dockerfile frontend updated to 1.4.1
- Fix buildinfo still including attributes for passed named contexts even if no opt-in #2716
- Fix possible panic on printing progress groups #2763
- Fix exporting/extracting certain multi-platform images to Containerd image store #2755
- Fix sending correct User-Agent #2776
- Update Continuity and Containerd to v1.6.2. Fixes regression on pulling certain images with native snapshotter and possible deadlocks on error handling. #2764
- Update Stargz snapshotter to v0.11.3. Fixes possible missing file issue #2732
dockerfile/1.4.1-labs
Usage
# syntax=docker.io/docker/dockerfile:1.4.1-labs