v0.17.0

Welcome to the v0.17.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• David Karlsson
• Justin Chadwell
• Talon Bowler
• Anthony Nandaa
• Akihiro Suda
• Shaun Thompson
• Austin Vazquez
• Billy Owire
• Eoin Farrell
• MohammadHasan Akbari
• Alberto Garcia Hierro
• Gabriel-Adrian Samfira
• Laurent Goderre
• Marat Radchenko
• Matt Rickard
• Paulo Sousa
• Sergio Garcez
• Silvin Lubecki
• castrombithisamm
• ryio1010

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.11.0 changelog
• Garbage collection policies and prune filters have been updated to be more flexible and allow more control over used storage. Users can now define storage controls based on how much empty space is available on disk and define reserved and maximum storage limits separately #5359 #5079
• FileOp.Copy now supports non-octal values for setting file mode with chmod #5375
• Protobuf tooling has moved away from GoGo Protobuf. #5356 #5409 #5396 #5342
• Memory allocations, especially when uploading big build contexts or copying build results back to client, have been reduced #5409 #5442
• Allow Git builds from SHA references that are not part of a branch or tag #5441
• Improve OpenTelemetry tracing for authentication routines #5432
• HTTP requests from build steps now use BuildKit specific user-agent like the Container registry requests #5407
• ExecOp build steps now supports setting expected non-zero exit codes #5339
• Parameter options can now be passed to the SBOM scanner #5372
• Determinism of LLB marshaling has been improved to reduce unnecessary cache lookups #5374
• Completeness of history records is now validated at startup #5378
• Debug address now supports new flight recorder endpoints #5337
• Improve communication with registries that return empty authentication scope #5321
• Fix Git builds with .git directory possibly not containing information about the cloned reference #5444
• Fix an issue with FileOp copy with constant timestamps not working correctly for parent directories #5461
• Fix accessing OCI layout from read-only filesystems not working does to file locks #5452
• Fix gRPC h2 protocol identifier to comply with TLS-ALPN #5419
• Fix error handling for requiring AppArmor profiles in unsupported system #5373
• Fix possible panic from nil result conversion in solver #5406
• Fix possible panic from triggered error handler #5335
• Fix missing LLB input validation when checking build policies #5362
• Fix possible "digest mismatch" error when using HTTP(s) build sources #5343
• Fix possible file walking issue in Windows Containers when using certain mount structures #5289

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.0 -> v1.11.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.1.0 -> v1.6.0
• github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0 -> v1.8.0
• github.com/AzureAD/microsoft-authentication-library-for-go v0.6.0 -> v1.2.2
• github.com/Microsoft/hcsshim v0.11.7 -> v0.12.5
• github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
• github.com/containerd/cgroups/v3 v3.0.2 new
• github.com/containerd/containerd v1.7.21 -> v1.7.22
• github.com/containerd/continuity v0.4.3 -> v0.4.4
• github.com/cpuguy83/go-md2man/v2 v2.0.4 -> v2.0.5
• github.com/docker/cli v27.2.1 -> v27.3.1
• github.com/docker/docker v27.2.1 -> v27.3.1
• github.com/golang-jwt/jwt/v5 v5.2.1 new
• github.com/klauspost/compress v1.17.9 -> v1.17.11
• github.com/moby/sys/mount v0.3.3 -> v0.3.4
• github.com/moby/sys/sequential v0.5.0 -> v0.6.0
• github.com/planetscale/vtprotobuf 0393e58bdf10 new
• github.com/tonistiigi/dchapes-mode ca0759fec205 new
• github.com/tonistiigi/fsutil 91a3fc46842c -> 397af5306b5c
• github.com/urfave/cli v1.22.15 -> v1.22.16
• go.etcd.io/bbolt v1.3.10 -> v1.3.11
• golang.org/x/exp 701f63a606c0 new
• google.golang.org/genproto/googleapis/api ef4313101c80 -> ef581f913117
• google.golang.org/genproto/googleapis/rpc ef4313101c80 -> ef581f913117
• google.golang.org/grpc v1.62.0 -> v1.66.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1 new

Previous release can be found at v0.16.0

dockerfile/1.11.0-labs

Usage

# syntax=docker.io/docker/dockerfile:1.11.0-labs

Notable changes

• COPY --chmod now supports non-octal values #5380

dockerfile/1.11.0

Usage

# syntax=docker.io/docker/dockerfile:1.11.0

Notable changes

• ONBUILD command now supports commands that refer to other stages or images with from, like COPY --from or RUN mount=from=... #5357
• SecretsUsedInArgOrEnv check has been improved with better detection for false-positives #5208
• New InvalidDefinitionDescription check has been added to recommend formatting comments in a way that their contents can become descriptions for build arguments and stages. This check is set to experimental in this release #5208 #5414
• Multiple fixes for ONBUILD instruction's progress and error handling #5397
• Error reporting for certain missing flag errors has been improved #5369
• Improve progress output for secret values mounted as environment variables #5336
• New automatic build argument TARGETSTAGE has been added to expose the name of the target stage for current build #5431

v0.17.0-rc2

buildkit 0.17.0-rc2

Welcome to the v0.17.0-rc2 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• Justin Chadwell
• David Karlsson
• Sebastiaan van Stijn
• CrazyMax
• Eoin Farrell
• Jonathan A. Sternberg
• Shaun Thompson
• Akihiro Suda
• Austin Vazquez
• Sergio Garcez
• Talon Bowler
• castrombithisamm

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.11.0-rc2 changelog
• Allow Git builds from SHA references that are not part of a branch or tag #5441
• Optimize memory allocations for copying build results back to client #5442
• Improve OpenTelemetry tracing for authentication routines #5432
• Fix Git builds with .git directory possibly not containing information about the cloned reference #5444
• Fix issue with FileOp copy with constant timestamps not working correctly for parent directories #5461
• Fix accessing OCI layout from read-only filesystems not working does to file locks #5452
• Fix gRPC h2 protocol identifier to comply with TLS-ALPN #5419

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.0 -> v1.11.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.1.0 -> v1.6.0
• github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0 -> v1.8.0
• github.com/AzureAD/microsoft-authentication-library-for-go v0.6.0 -> v1.2.2
• github.com/Microsoft/hcsshim v0.11.7 -> v0.12.5
• github.com/containerd/cgroups/v3 v3.0.2 new
• github.com/containerd/continuity v0.4.3 -> v0.4.4
• github.com/cpuguy83/go-md2man/v2 v2.0.4 -> v2.0.5
• github.com/golang-jwt/jwt/v5 v5.2.1 new
• github.com/klauspost/compress v1.17.9 -> v1.17.11
• github.com/tonistiigi/fsutil 3f140a1299b0 -> 397af5306b5c
• github.com/urfave/cli v1.22.15 -> v1.22.16

Previous release can be found at v0.17.0-rc1

dockerfile/1.11.0-rc2-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.11.0-rc2-labs

dockerfile/1.11.0-rc2

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.11.0-rc2

Notable changes

• New automatic build argument TARGETSTAGE has been added to expose the name of the target stage for current build #5431
• InvalidDefinitionDescription check has been set to be experimental #5414

v0.17.0-rc1

buildkit 0.17.0-rc1

Note

Slight delay in follow-up RCs and eventual GA release for this round

Welcome to the v0.17.0-rc1 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Sebastiaan van Stijn
• Jonathan A. Sternberg
• Talon Bowler
• Anthony Nandaa
• David Karlsson
• Justin Chadwell
• Akihiro Suda
• Billy Owire
• MohammadHasan Akbari
• Alberto Garcia Hierro
• Austin Vazquez
• Gabriel-Adrian Samfira
• Laurent Goderre
• Marat Radchenko
• Matt Rickard
• Paulo Sousa
• Shaun Thompson
• Silvin Lubecki
• ryio1010

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.11.0-rc1 changelog
• Garbage collection policies and prune filters have been updated to be more flexible and allow more control over used storage. Users can now define storage controls based on how much empty space is available on disk and define reserved and maximum storage limits separately #5359 #5079
• FileOp.Copy now supports non-octal values for setting file mode with chmod #5375
• Protobuf tooling has moved away from GoGo Protobuf. #5356 #5409 #5396 #5342
• Memory allocations, especially when uploading big build contexts, have been reduced #5409
• HTTP requests from build steps now use BuildKit specific user-agent like the Container registry requests #5407
• ExecOp build steps now supports setting expected non-zero exit codes #5339
• Parameter options can now be passed to the SBOM scanner #5372
• Determinism of LLB marshaling has been improved to reduce unnecessary cache lookups #5374
• Completeness of history records is now validated at startup #5378
• Debug address now supports new flight recorder endpoints #5337
• Improve communication with registries that return empty authentication scope #5321
• Fix error handling for requiring AppArmor profiles in unsupported system #5373
• Fix possible panic from nil result conversion in solver #5406
• Fix possible panic from triggered error handler #5335
• Fix missing LLB input validation when checking build policies #5362
• Fix possible "digest mismatch" error when using HTTP(s) build sources #5343
• Fix possible file walking issue in Windows Containers when using certain mount structures #5289

Dependency Changes

• github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
• github.com/containerd/containerd v1.7.21 -> v1.7.22
• github.com/docker/cli v27.2.1 -> v27.3.1
• github.com/docker/docker v27.2.1 -> v27.3.1
• github.com/moby/sys/mount v0.3.3 -> v0.3.4
• github.com/moby/sys/sequential v0.5.0 -> v0.6.0
• github.com/planetscale/vtprotobuf 0393e58bdf10 new
• github.com/tonistiigi/dchapes-mode ca0759fec205 new
• github.com/tonistiigi/fsutil 91a3fc46842c -> 3f140a1299b0
• go.etcd.io/bbolt v1.3.10 -> v1.3.11
• golang.org/x/exp 701f63a606c0 new
• google.golang.org/genproto/googleapis/api ef4313101c80 -> ef581f913117
• google.golang.org/genproto/googleapis/rpc ef4313101c80 -> ef581f913117
• google.golang.org/grpc v1.62.0 -> v1.66.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1 new

Previous release can be found at v0.16.0

dockerfile/1.11.0-rc1-labs

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.11.0-rc1-labs

Notable changes

• COPY --chmod now supports non-octal values #5380

dockerfile/1.11.0-rc1

Usage

# syntax=docker.io/docker/dockerfile-upstream:1.11.0-rc1

Notable changes

• ONBUILD command now supports commands that refer to other stages or images with from, like COPY --from or RUN mount=from=... #5357
• SecretsUsedInArgOrEnv check has been improved with better detection for false-positives #5208
• New InvalidDefinitionDescription check has been added to recommend formatting comments in a way that their contents can become descriptions for build arguments and stages #5208
• Multiple fixes for ONBUILD instruction's progress and error handling #5397
• Error reporting for certain missing flag errors has been improved #5369
• Improve progress output for secret values mounted as environment variables #5336

v0.16.0

Welcome to the v0.16.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Akihiro Suda
• David Karlsson
• Shaun Thompson
• Talon Bowler
• Arkadiusz Drabczyk
• Craig Andrews
• Justin Chadwell
• Mitsuru Kariya
• Anthony Nandaa
• Bertrand Paquet
• Ignas Mikalajūnas
• Jonathan A. Sternberg
• Billy Owire
• Debosmit Ray
• Kai Takac
• Marat Radchenko
• a-palchikov

Notable changes

• Builtin Dockerfile frontend has been updated to v1.10.0 changelog
• Remote cache export to S3 backend can now happen with parallel requests and can be controlled with new upload_parallelism option #5270
• Remote cache export to S3 backend now supports layers larger than 5GB #5266
• History records now contain information about the number of warnings that were generated during the build #5166
• Printing check results with library now allows source mapping modifications #5295
• Unconditionally use /etc/resolv.conf rather than systemd's config in host networking mode #5207
• Certain history, graph consistency, and some syscall errors as now marked as internal and use corresponding gRPC error code #5163 #5182
• Output of errors produced by the container executor has been improved #5179
• Stack traces produced by build errors are now clearer and avoid duplicates #5180
• Build containers killed by OOMKiller are now detected and shown to the user in the error message #5260
• Runc container runtime has been updated to v1.1.14 #5300
• Pre-defined OCI annotations are now set to the BuildKit image #3554
• Fix pruning cache mounts that use uid/gid/mode/from on no-cache builds #5306
• Fix issue where --import-cache flag could be ignored for buildctl #5143
• Fix OTEL trace ID being missing from logs #5315

Dependency Changes

• github.com/containerd/containerd v1.7.19 -> v1.7.21
• github.com/containerd/nydus-snapshotter v0.13.7 -> v0.14.0
• github.com/containerd/typeurl/v2 v2.1.1 -> v2.2.0
• github.com/docker/cli v27.0.3 -> v27.2.1
• github.com/docker/docker v27.0.3 -> v27.2.1
• github.com/moby/sys/signal v0.7.0 -> v0.7.1
• github.com/moby/sys/userns v0.1.0 new
• github.com/pkg/browser ce105d075bb4 -> 5ac0b6a4141c
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.42.0 -> v0.44.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.42.0 -> v0.44.0
• google.golang.org/genproto 49dd2c1f3d0b -> ef4313101c80
• google.golang.org/genproto/googleapis/api 49dd2c1f3d0b -> ef4313101c80
• google.golang.org/genproto/googleapis/rpc 49dd2c1f3d0b -> ef4313101c80
• google.golang.org/grpc v1.59.0 -> v1.62.0

Previous release can be found at v0.15.2