Bump compose to v2.40.0

_vendor/modules.txt

@@ -2,7 +2,7 @@
 # github.com/moby/buildkit v0.25.0
 # github.com/docker/buildx v0.29.0
 # github.com/docker/cli v28.4.0+incompatible
-# github.com/docker/compose/v2 v2.39.4
+# github.com/docker/compose/v2 v2.40.0
 # github.com/docker/model-cli v0.1.41
 # github.com/docker/mcp-gateway v0.13.1-0.20250730013131-e08a3be84765
 # github.com/docker/scout-cli v1.18.1

content/manuals/compose/releases/release-notes.md

@@ -29,6 +29,21 @@ For more detailed information, see the [release notes in the Compose repo](https
 
 - Dependencies upgrade: bump compose-go to v2.9.0
 
+## 2.40.0
+
+{{< release-date date="2025-10-03" >}}
+
+### Bug fixes and enhancements
+
+- Added the option to publish Compose applications as a `compose.yaml` with images
+- Fixed support for secrets based on environment variables when building with bake
+- Fixed support for escaped '$' character when building with bake
+
+### Update
+
+- Dependencies upgrade: bump docker engine and cli to v28.5.0
+
+
 ## 2.39.3
 
 {{< release-date date="2025-09-09" >}}

go.mod

@@ -17,7 +17,7 @@ require (
 	github.com/distribution/reference v0.6.0 // indirect
 	github.com/docker/buildx v0.29.0 // indirect
 	github.com/docker/cli v28.4.0+incompatible // indirect; see "replace" rule at the bottom for actual version
-	github.com/docker/compose/v2 v2.39.4 // indirect
+	github.com/docker/compose/v2 v2.40.0 // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
 	github.com/docker/docker v28.4.0+incompatible // indirect; see "replace" rule at the bottom for actual version
 	github.com/docker/docker-credential-helpers v0.9.3 // indirect

hugo.yaml

@@ -140,7 +140,7 @@ params:
   # (Used to show e.g., "latest" and "latest"-1 in engine install examples
   docker_ce_version_prev: "28.4.0"
   # Latest Docker Compose version
-  compose_version: "v2.39.4"
+  compose_version: "v2.40.0"
   # Latest BuildKit version
   buildkit_version: "0.25.0"