Welcome to the v0.39.0-rc1 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Eshan05
• Ihor Urazov
• Kevin Mingtarja
• SaiPisey2

Notable Changes

• Build history exports from remote builders are now faster by reading blobs in larger chunks. #4137
• Kubernetes builders now use a startup probe to become ready sooner after BuildKit starts. #4124
• The imagetools create command now apply untyped annotations to the image index and report unsupported annotation targets instead of silently discarding them. #4091
• Fix Git source policy host matching by normalizing case, internationalized names, trailing dots, and default ports. Policies must match the normalized host. #4171
• Fix builds selecting detected worker platforms over explicitly configured platform assignments. #4133
• Fix trace decoding failures and data loss in build history and Docker Desktop bundle exports. #4156
• Fix empty traces causing a panic and root spans having invalid parent references in Jaeger conversion. #4157

Dependency Changes

• github.com/Microsoft/go-winio ad3df93bed29 -> v0.6.4
• github.com/aws/aws-sdk-go-v2 v1.47.0 -> v1.47.5
• github.com/aws/aws-sdk-go-v2/config v1.33.4 -> v1.33.13
• github.com/aws/aws-sdk-go-v2/credentials v1.20.4 -> v1.20.13
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.20.0 -> v1.20.5
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.5.3 -> v1.5.8
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.8.3 -> v2.8.8
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.5.3 -> v1.5.8
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.19 -> v1.13.23
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.14.3 -> v1.14.8
• github.com/aws/aws-sdk-go-v2/service/signin v1.10.0 -> v1.12.1
• github.com/aws/aws-sdk-go-v2/service/sso v1.38.0 -> v1.39.1
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.43.0 -> v1.44.1
• github.com/aws/aws-sdk-go-v2/service/sts v1.50.0 -> v1.51.6
• github.com/aws/smithy-go v1.28.2 -> v1.28.8
• github.com/docker/cli v29.8.2 -> v29.9.3
• github.com/go-openapi/analysis v0.25.5 -> v1.0.0
• github.com/go-openapi/errors v0.22.8 -> v0.22.9
• github.com/go-openapi/jsonpointer v1.0.0 -> v1.0.1
• github.com/go-openapi/jsonreference v1.0.0 -> v1.0.1
• github.com/go-openapi/loads v0.25.0 -> v0.25.2
• github.com/go-openapi/runtime v0.33.0 -> v0.33.2
• github.com/go-openapi/runtime/server-middleware v0.30.0 -> v0.33.2
• github.com/go-openapi/spec v0.22.9 -> v1.0.0
• github.com/go-openapi/strfmt v0.27.0 -> v0.27.2
• github.com/go-openapi/swag v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/cmdutils v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/conv v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/fileutils v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/jsonutils v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/loading v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/mangling v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/netutils v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/pools v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/stringutils v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/typeutils v0.28.0 -> v0.29.2
• github.com/go-openapi/swag/yamlutils v0.28.0 -> v0.29.2
• github.com/go-openapi/validate v0.26.1 -> v1.0.0
• github.com/google/go-containerregistry v0.21.7 -> v0.22.0
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0 -> v2.31.0
• github.com/moby/buildkit v0.34.2 -> v0.35.0-rc1
• github.com/moby/policy-helpers bd98f4747414 -> 485a1bec29f6
• github.com/moby/sys/mountinfo v0.7.2 -> v0.7.3
• github.com/oklog/ulid/v2 v2.1.1 -> v2.1.2
• github.com/tonistiigi/fsutil a72de9dcf763 -> e075fd9305eb
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.71.0 -> v0.72.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.71.0 -> v0.72.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0 -> v0.72.0
• go.opentelemetry.io/otel v1.46.0 -> v1.47.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.46.0 -> v1.47.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.46.0 -> v1.47.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0 -> v1.47.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0 -> v1.47.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0 -> v1.47.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.46.0 -> v1.47.0
• go.opentelemetry.io/otel/log v1.47.0 new
• go.opentelemetry.io/otel/metric v1.46.0 -> v1.47.0
• go.opentelemetry.io/otel/sdk v1.46.0 -> v1.47.0
• go.opentelemetry.io/otel/sdk/metric v1.46.0 -> v1.47.0
• go.opentelemetry.io/otel/trace v1.46.0 -> v1.47.0
• go.opentelemetry.io/proto/otlp v1.11.0 -> v1.11.1
• golang.org/x/crypto v0.57.0 -> v0.58.0
• golang.org/x/mod v0.41.0 -> v0.42.0
• golang.org/x/net v0.59.0 -> v0.62.0
• golang.org/x/sync v0.23.0 -> v0.24.0
• golang.org/x/sys v0.48.0 -> v0.49.0
• golang.org/x/term v0.46.0 -> v0.47.0
• golang.org/x/text v0.42.0 -> v0.43.0
• golang.org/x/tools v0.49.0 -> v0.51.0
• google.golang.org/genproto/googleapis/api da73d73af1c5 -> 4341edf3f941
• google.golang.org/genproto/googleapis/rpc da73d73af1c5 -> 4341edf3f941
• google.golang.org/grpc v1.84.0 -> v1.85.0

Previous release can be found at v0.38.2

Welcome to the v0.38.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn

Notable Changes

• Fix Bake filesystem entitlement checks when building multiple targets together so paths from every target are checked against the approved entitlements. GHSA-xg6v-cv2h-2w5h
• Fix Bake filesystem entitlement path boundaries so paths under the same parent directory that share the current working directory's basename prefix cannot bypass fs.read approval. GHSA-rghq-x9hf-hc3r

Dependency Changes

• github.com/containerd/containerd/v2 v2.4.1 -> v2.4.2
• github.com/klauspost/compress v1.20.1 -> v1.20.2
• github.com/moby/buildkit v0.34.0 -> v0.34.2
• github.com/tonistiigi/fsutil 83cac42c1c52 -> a72de9dcf763
• go.yaml.in/yaml/v3 v3.0.5 -> v3.0.6

Previous release can be found at v0.38.1

buildx 0.38.1

Welcome to the v0.38.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Security

This release has been built with updated Go runtime 1.26.10 to address CVE-2026-111943 by rejecting certificate chains that include eight revoked eMudhra intermediate certificates.
Image pulls and pushes fail TLS certificate verification if a registry's certificate chain relies on one of the affected TLS intermediates.
Affected registries need a replacement certificate chain that does not use these intermediates.

The blocked intermediates are:

• Domain-validated TLS: EM DV TLS CA - G3B and EM DV TLS CA - G3C
• Organization-validated TLS: EM OV TLS CA - G3B and EM OV TLS CA - G3C
• Extended-validation TLS: EM EV TLS CA - G3B and EM EV TLS CA - G3C
• Code signing: EM OV CS CA - G3B and EM OV CS CA - G3C

The G3B intermediates belong to eMudhra BV, and the G3C intermediates belong to eMudhra Inc.
The keys for these intermediates were compromised.

Read more about the eMudhra Intermediate CA Compromise

There are no functional changes in Buildx itself compared to the previous release.

Previous release can be found at v0.38.0

buildx 0.38.0

Welcome to the v0.38.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Akihiro Suda
• Tomas Perez Molina
• Dean Chen
• MohammadHasan Akbari
• Nicolas De Loof
• Ricardo Branco
• Ryan Bonnell

Notable Changes

• Bake now supports configuring job execution modes and parallelization limits with --jobs/-j flag. New execution modes include defer-error to delay cancellation of failed jobs and defer-output to wait for all jobs to complete before exporting results. #4044
• New experiment command docker buildx replay build allows rebuilding historical builds based on recorded provenance of a distributed artifact or Docker image. This subcommand is expected to be updated with additional features and improvements in future releases. #4122 #3818
• HTTP hosts passed to build policies are now normalized to assist writing accurate policy rules. #4068
• Bake --set overrides have now been updated to use singular keys for better consistency and clarity. #4089
• Bake --set overrides now support clearing array values with an empty parameter. #4107
• Git advice output can now be controlled with BUILDKIT_GIT_ADVICE and BUILDX_BAKE_GIT_ADVICE. #4103
• Compose support has been updated to v2.16.1 #4118
• Zstd compressed archives can now be passed as build context. #4104
• Update Kubernetes driver to handle AppArmor profile correctly. #4083
• Improve Kubernetes driver dial retry backoff logic. #4039
• Fix possible issues with builder feature detection using stale cached data. #4085 #4082
• Fix possible panic from result image loading and progress race. #4064
• Fix possible stale node status printed by inspect --bootstrap command. #4048
• Fix confusing error messages when encountering undefined variables in bake targets. #4086
• Fix possible incorrect parsing of bake target overrides. #4088
• Fix possible build error with Kubernetes driver and linked targets. #4073
• Fix issue with Kubernetes driver waiting for connection readiness. #4077

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.43.8 -> v1.47.0
• github.com/aws/aws-sdk-go-v2/config v1.32.39 -> v1.33.4
• github.com/aws/aws-sdk-go-v2/credentials v1.19.38 -> v1.20.4
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.39 -> v1.20.0
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.39 -> v1.5.3
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.39 -> v2.8.3
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.40 -> v1.5.3
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.18 -> v1.13.19
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.39 -> v1.14.3
• github.com/aws/aws-sdk-go-v2/service/signin v1.5.8 -> v1.10.0
• github.com/aws/aws-sdk-go-v2/service/sso v1.33.8 -> v1.38.0
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.8 -> v1.43.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.8 -> v1.50.0
• github.com/aws/smithy-go v1.27.10 -> v1.28.2
• github.com/clipperhouse/uax29/v2 v2.2.0 -> v2.6.0
• github.com/compose-spec/compose-go/v2 v2.14.0 -> v2.16.1
• github.com/containerd/containerd/api v1.11.1 -> v1.12.0
• github.com/containerd/containerd/v2 v2.3.6 -> v2.4.1
• github.com/containerd/log/otel v0.1.0 new
• github.com/containerd/ttrpc v1.2.9 -> v1.2.10
• github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 -> v4.4.1
• github.com/docker/cli v29.7.2 -> v29.8.2
• github.com/docker/docker-credential-helpers v0.9.8 -> v0.9.9
• github.com/docker/go-connections v0.7.0 -> v0.8.1
• github.com/fvbommel/sortorder v1.1.0 -> v1.2.0
• github.com/fxamacker/cbor/v2 v2.9.0 -> v2.9.4
• github.com/go-openapi/analysis v0.25.2 -> v0.25.5
• github.com/go-openapi/jsonpointer v0.23.1 -> v1.0.0
• github.com/go-openapi/jsonreference v0.21.6 -> v1.0.0
• github.com/go-openapi/loads v0.24.0 -> v0.25.0
• github.com/go-openapi/runtime v0.32.4 -> v0.33.0
• github.com/go-openapi/spec v0.22.6 -> v0.22.9
• github.com/go-openapi/strfmt v0.26.4 -> v0.27.0
• github.com/go-openapi/swag v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/cmdutils v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/conv v0.27.0 -> v0.28.0
• github.com/go-openapi/swag/fileutils v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/jsonutils v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/loading v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/mangling v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/netutils v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/pools v0.28.0 new
• github.com/go-openapi/swag/stringutils v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/typeutils v0.27.0 -> v0.28.0
• github.com/go-openapi/swag/yamlutils v0.26.1 -> v0.28.0
• github.com/go-openapi/validate v0.26.0 -> v0.26.1
• github.com/goccy/go-json v0.10.5 -> v0.10.6
• github.com/gofrs/flock v0.13.0 -> v0.13.1
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 -> v2.30.0
• github.com/klauspost/compress v1.19.2 -> v1.20.1
• github.com/lestrrat-go/dsig v1.0.0 -> v1.2.1
• github.com/lestrrat-go/httprc/v3 v3.0.2 -> v3.0.5
• github.com/lestrrat-go/jwx/v3 v3.0.13 -> v3.1.1
• github.com/mattn/go-runewidth v0.0.23 -> v0.0.29
• github.com/mattn/go-shellwords v1.0.12 -> v1.0.13
• github.com/moby/buildkit v0.33.1 -> v0.34.0
• github.com/moby/moby/api v1.55.0 -> v1.56.0
• github.com/moby/moby/client v0.5.0 -> v0.6.0
• github.com/moby/policy-helpers dd6c5499c491 -> bd98f4747414
• github.com/open-policy-agent/opa v1.14.1 -> v1.19.0
• github.com/package-url/packageurl-go v0.1.1 -> v0.1.7
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.1 -> v6.0.3
• github.com/valyala/fastjson v1.6.7 -> v1.6.10
• github.com/vektah/gqlparser/v2 v2.5.32 -> v2.5.36
• go.etcd.io/bbolt v1.5.0 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0 -> v0.71.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.70.0 -> v0.71.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 -> v0.71.0
• go.opentelemetry.io/otel v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.44.0 -> v1.46.0
• **go.opentelemetry...

buildx 0.38.0-rc2

Welcome to the v0.38.0-rc2 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Ricardo Branco
• Ryan Bonnell

Notable Changes

• Bake --set overrides now support clearing array values with an empty parameter. #4107
• Git advice output can now be controlled with BUILDKIT_GIT_ADVICE and BUILDX_BAKE_GIT_ADVICE. #4103

Dependency Changes

• github.com/docker/cli v29.8.1 -> v29.8.2
• github.com/moby/buildkit v0.34.0-rc1 -> v0.34.0-rc2
• github.com/moby/policy-helpers 72f704e6cdb6 -> bd98f4747414

Previous release can be found at v0.38.0-rc1

buildx 0.38.0-rc1

Welcome to the v0.38.0-rc1 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Akihiro Suda
• Tomas Perez Molina
• Dean Chen
• MohammadHasan Akbari
• Nicolas De Loof

Notable Changes

• Bake now supports configuring job execution modes and parallelization limits with --jobs/-j flag. New execution modes include defer-error to delay cancellation of failed jobs and defer-output to wait for all jobs to complete before exporting results. #4044
• New experiment command docker buildx replay build allows rebuilding historical builds based on recorded provenance of a distributed artifact or Docker image. This subcommand is expected to be updated with additional features and improvements in future releases. #4122 #3818
• HTTP hosts passed to build policies are now normalized to assist writing accurate policy rules. #4068
• Bake --set overrides have now been updated to use singular keys for better consistency and clarity. #4089
• Compose support has been updated to v2.16.1 #4118
• Zstd compressed archives can now be passed as build context. #4104
• Update Kubernetes driver to handle AppArmor profile correctly. #4083
• Improve Kubernetes driver dial retry backoff logic. #4039
• Fix possible issues with builder feature detection using stale cached data. #4085 #4082
• Fix possible panic from result image loading and progress race. #4064
• Fix possible stale node status printed by inspect --bootstrap command. #4048
• Fix confusing error messages when encountering undefined variables in bake targets. #4086
• Fix possible incorrect parsing of bake target overrides. #4088
• Fix possible build error with Kubernetes driver and linked targets. #4073
• Fix issue with Kubernetes driver waiting for connection readiness. #4077

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.43.8 -> v1.47.0
• github.com/aws/aws-sdk-go-v2/config v1.32.39 -> v1.33.4
• github.com/aws/aws-sdk-go-v2/credentials v1.19.38 -> v1.20.4
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.39 -> v1.20.0
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.39 -> v1.5.3
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.39 -> v2.8.3
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.40 -> v1.5.3
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.18 -> v1.13.19
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.39 -> v1.14.3
• github.com/aws/aws-sdk-go-v2/service/signin v1.5.8 -> v1.10.0
• github.com/aws/aws-sdk-go-v2/service/sso v1.33.8 -> v1.38.0
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.8 -> v1.43.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.8 -> v1.50.0
• github.com/aws/smithy-go v1.27.10 -> v1.28.2
• github.com/clipperhouse/uax29/v2 v2.2.0 -> v2.6.0
• github.com/compose-spec/compose-go/v2 v2.14.0 -> v2.16.1
• github.com/containerd/containerd/api v1.11.1 -> v1.12.0
• github.com/containerd/containerd/v2 v2.3.6 -> v2.4.1
• github.com/containerd/log/otel v0.1.0 new
• github.com/containerd/ttrpc v1.2.9 -> v1.2.10
• github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 -> v4.4.1
• github.com/docker/cli v29.7.2 -> v29.8.1
• github.com/docker/docker-credential-helpers v0.9.8 -> v0.9.9
• github.com/docker/go-connections v0.7.0 -> v0.8.1
• github.com/fvbommel/sortorder v1.1.0 -> v1.2.0
• github.com/fxamacker/cbor/v2 v2.9.0 -> v2.9.4
• github.com/go-openapi/analysis v0.25.2 -> v0.25.5
• github.com/go-openapi/jsonpointer v0.23.1 -> v1.0.0
• github.com/go-openapi/jsonreference v0.21.6 -> v1.0.0
• github.com/go-openapi/loads v0.24.0 -> v0.25.0
• github.com/go-openapi/runtime v0.32.4 -> v0.33.0
• github.com/go-openapi/spec v0.22.6 -> v0.22.9
• github.com/go-openapi/strfmt v0.26.4 -> v0.27.0
• github.com/go-openapi/swag v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/cmdutils v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/conv v0.27.0 -> v0.28.0
• github.com/go-openapi/swag/fileutils v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/jsonutils v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/loading v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/mangling v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/netutils v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/pools v0.28.0 new
• github.com/go-openapi/swag/stringutils v0.26.1 -> v0.28.0
• github.com/go-openapi/swag/typeutils v0.27.0 -> v0.28.0
• github.com/go-openapi/swag/yamlutils v0.26.1 -> v0.28.0
• github.com/go-openapi/validate v0.26.0 -> v0.26.1
• github.com/goccy/go-json v0.10.5 -> v0.10.6
• github.com/gofrs/flock v0.13.0 -> v0.13.1
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 -> v2.30.0
• github.com/klauspost/compress v1.19.2 -> v1.20.1
• github.com/lestrrat-go/dsig v1.0.0 -> v1.2.1
• github.com/lestrrat-go/httprc/v3 v3.0.2 -> v3.0.5
• github.com/lestrrat-go/jwx/v3 v3.0.13 -> v3.1.1
• github.com/mattn/go-runewidth v0.0.23 -> v0.0.29
• github.com/mattn/go-shellwords v1.0.12 -> v1.0.13
• github.com/moby/buildkit v0.33.1 -> v0.34.0-rc1
• github.com/moby/moby/api v1.55.0 -> v1.56.0
• github.com/moby/moby/client v0.5.0 -> v0.6.0
• github.com/moby/policy-helpers dd6c5499c491 -> 72f704e6cdb6
• github.com/open-policy-agent/opa v1.14.1 -> v1.19.0
• github.com/package-url/packageurl-go v0.1.1 -> v0.1.7
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.1 -> v6.0.3
• github.com/valyala/fastjson v1.6.7 -> v1.6.10
• github.com/vektah/gqlparser/v2 v2.5.32 -> v2.5.36
• go.etcd.io/bbolt v1.5.0 new
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0 -> v0.71.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.70.0 -> v0.71.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 -> v0.71.0
• go.opentelemetry.io/otel v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.44.0 -> v1.46.0
• go.opentelemetry.io/otel/metric v1.45.0 -> v1.46.0
• go.opentelemetry.io/otel/sdk v1.45.0 -> v1...

Welcome to the v0.37.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Sebastiaan van Stijn
• Tõnis Tiigi

Notable Changes

• Bake with --progress=rawjson now rejects ungranted entitlements instead of skipping the consent check. Grant the requested privileges explicitly with --allow. GHSA-gwr2-q96m-6682
• Bake now requires fs.read approval for secret files selected by an implicit id fallback and for local OCI layout named contexts. GHSA-p54p-jq4x-rc28

Dependency Changes

• github.com/containerd/containerd/v2 v2.3.4 -> v2.3.6
• github.com/moby/buildkit v0.33.0 -> v0.33.1
• golang.org/x/crypto v0.55.0 -> v0.56.0

Previous release can be found at v0.37.1

Welcome to the v0.37.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tomas Perez Molina
• Tõnis Tiigi

Notable Changes

• Fix failed multi-node image pushes leaving the requested tag pointing to a partial image. #4058
• Fix newly started container builders not getting a full readiness timeout before first use. #4050
• Fix builder removal cleanup being tied to the status timeout. #4072
• Fix linked Bake targets using the Kubernetes driver losing shared clients before the build completes. #4073

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.37.0

Welcome to the v0.37.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Alberto Garcia Hierro
• Brad Davidson
• Guilhem Charles
• Guillaume Lours

Notable Changes

• Buildx now supports cloud driver builder instances to run builds with Docker Build Cloud service. No custom version of Buildx binary is needed anymore. #4017
• Newly started container builders now wait for BuildKit readiness before first use. #4027
• Policy evaluation now uses Docker CLI registry auth for image metadata. #4046
• Several consistency issues with handling Windows platform identifiers with OS version have been fixed. #4035 #4034 #4008
• Using the Kubernetes driver now skips terminating pods when choosing a pod. #3997
• Avoid creating temporary files on the host to send builder configuration to remote containers. #3996
• Fix issue where Bake builds could sometimes drop sending build secrets when using linked targets. #4014
• Fix cases where empty source policy sessions were created for some builds, possibly causing confusing progress output. #4028

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.8
• github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.39
• github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.38
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.39
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.39
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.39
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.40
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.18
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.39
• github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.8
• github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.8
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.8
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.8
• github.com/aws/smithy-go v1.27.4 -> v1.27.10
• github.com/compose-spec/compose-go/v2 v2.13.0 -> v2.14.0
• github.com/containerd/containerd/v2 v2.3.3 -> v2.3.4
• github.com/containerd/platforms v1.0.0-rc.4 -> v1.0.0-rc.5
• github.com/docker/cli v29.6.2 -> v29.7.2
• github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
• github.com/go-logr/logr v1.4.3 -> v1.4.4
• github.com/klauspost/compress v1.19.1 -> v1.19.2
• github.com/moby/buildkit v0.32.2 -> v0.33.0
• github.com/moby/go-archive v0.2.1 -> v0.2.0
• github.com/moby/policy-helpers 856be88baec4 -> dd6c5499c491
• github.com/pelletier/go-toml/v2 v2.3.1 -> v2.4.3
• github.com/sirupsen/logrus v1.9.4 -> v1.10.2
• github.com/stretchr/testify v1.11.1 -> v1.12.1
• github.com/tonistiigi/fsutil 6d9dc2ebad62 -> 83cac42c1c52
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
• go.opentelemetry.io/otel v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
• go.opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0
• go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
• golang.org/x/crypto v0.54.0 -> v0.55.0
• golang.org/x/mod v0.38.0 -> v0.40.0
• golang.org/x/net v0.57.0 -> v0.58.0
• golang.org/x/text v0.40.0 -> v0.41.0
• golang.org/x/tools v0.47.0 -> v0.49.0
• google.golang.org/genproto/googleapis/api 3dc84a4a5aaa -> 6ac0973c030d
• google.golang.org/genproto/googleapis/rpc 3dc84a4a5aaa -> 6ac0973c030d
• google.golang.org/grpc v1.82.1 -> v1.83.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 -> v1.6.2
• google.golang.org/protobuf f2248ac996af -> v1.36.12
• k8s.io/api v0.36.0 -> v0.36.3
• k8s.io/apimachinery v0.36.0 -> v0.36.3
• k8s.io/client-go v0.36.0 -> v0.36.3
• sigs.k8s.io/structured-merge-diff/v6 v6.3.2 -> v6.3.3

Previous release can be found at v0.36.1

Welcome to the v0.37.0-rc2 release of buildx!
This is a pre-release of buildx

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi

Notable Changes

• Policy evaluation now uses Docker CLI registry auth for image metadata. #4046
• Newly started container builders now wait for BuildKit readiness before first use. #4027

Dependency Changes

• github.com/moby/buildkit v0.33.0-rc1 -> v0.33.0-rc2
• github.com/moby/policy-helpers 856be88baec4 -> dd6c5499c491

Previous release can be found at v0.37.0-rc1