8 versions of Docker Buildx are listed here, from October 3, 2025 to the current 0.38.1. Each one links to the publisher’s own installer files.
8 versions over 1 year · about 7.6 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 0.38.1Latest | October 20, 2026 | — | 64-bit PortableARM64 Portable Release notesbuildx 0.38.1
Welcome to the v0.38.1 release of buildx!
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
### Security
This release has been built with updated Go runtime 1.26.10 to address [CVE-2026-111943](https://go.dev/issue/82345) by rejecting certificate chains that include eight revoked eMudhra intermediate certificates.
Image pulls and pushes fail TLS certificate verification if a registry's certificate chain relies on one of the affected TLS intermediates.
Affected registries need a replacement certificate chain that does not use these intermediates.
The blocked intermediates are:
• Domain-validated TLS：`EM DV TLS CA - G3B` and `EM DV TLS CA - G3C`
• Organization-validated TLS：`EM OV TLS CA - G3B` and `EM OV TLS CA - G3C`
• Extended-validation TLS：`EM EV TLS CA - G3B` and `EM EV TLS CA - G3C`
• Code signing：`EM OV CS CA - G3B` and `EM OV CS CA - G3C`
The G3B intermediates belong to eMudhra BV, and the G3C intermediates belong to eMudhra Inc.
The keys for these intermediates were compromised.
[Read more about the eMudhra Intermediate CA Compromise](https://emudhra.we-have-a-problem.com/)
There are no functional changes in Buildx itself compared to the previous release.
Previous release can be found at [v0.38.0](https://github.com/docker/buildx/releases/tag/v0.38.0) |
| 0.38.0 | October 7, 2026 | — | 64-bit PortableARM64 Portable Release notesbuildx 0.38.0
Welcome to the v0.38.0 release of buildx!
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
### Contributors
• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Akihiro Suda
• Tomas Perez Molina
• Dean Chen
• MohammadHasan Akbari
• Nicolas De Loof
• Ricardo Branco
• Ryan Bonnell
### Notable Changes
• Bake now supports configuring job execution modes and parallelization limits with `--jobs/-j` flag. New execution modes include `defer-error` to delay cancellation of failed jobs and `defer-output` to wait for all jobs to complete before exporting results. #4044
• New experiment command `docker buildx replay build` allows rebuilding historical builds based on recorded provenance of a distributed artifact or Docker image. This subcommand is expected to be updated with additional features and improvements in future releases. #4122 #3818
• HTTP hosts passed to build policies are now normalized to assist writing accurate policy rules. #4068
• Bake `--set` overrides have now been updated to use singular keys for better consistency and clarity. #4089
• Bake `--set` overrides now support clearing array values with an empty parameter. #4107
• Git advice output can now be controlled with `BUILDKIT_GIT_ADVICE` and `BUILDX_BAKE_GIT_ADVICE`. #4103
• Compose support has been updated to v2.16.1 #4118
• Zstd compressed archives can now be passed as build context. #4104
• Update Kubernetes driver to handle AppArmor profile correctly. #4083
• Improve Kubernetes driver dial retry backoff logic. #4039
• Fix possible issues with builder feature detection using stale cached data. #4085 #4082
• Fix possible panic from result image loading and progress race. #4064
• Fix possible stale node status printed by `inspect --bootstrap` command. #4048
• Fix confusing error messages when encountering undefined variables in bake targets. #4086
• Fix possible incorrect parsing of bake target overrides. #4088
• Fix possible build error with Kubernetes driver and linked targets. #4073
• Fix issue with Kubernetes driver waiting for connection readiness. #4077
### Dependency Changes
• **github.com/aws/aws-sdk-go-v2** v1.43.8 -> v1.47.0
• **github.com/aws/aws-sdk-go-v2/config** v1.32.39 -> v1.33.4
• **github.com/aws/aws-sdk-go-v2/credentials** v1.19.38 -> v1.20.4
• **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.39 -> v1.20.0
• **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.4.39 -> v1.5.3
• **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.7.39 -> v2.8.3
• **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.4.40 -> v1.5.3
• **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.13.18 -> v1.13.19
• **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.13.39 -> v1.14.3
• **github.com/aws/aws-sdk-go-v2/service/signin** v1.5.8 -> v1.10.0
• **github.com/aws/aws-sdk-go-v2/service/sso** v1.33.8 -> v1.38.0
• **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.38.8 -> v1.43.0
• **github.com/aws/aws-sdk-go-v2/service/sts** v1.45.8 -> v1.50.0
• **github.com/aws/smithy-go** v1.27.10 -> v1.28.2
• **github.com/clipperhouse/uax29/v2** v2.2.0 -> v2.6.0
• **github.com/compose-spec/compose-go/v2** v2.14.0 -> v2.16.1
• **github.com/containerd/containerd/api** v1.11.1 -> v1.12.0
• **github.com/containerd/containerd/v2** v2.3.6 -> v2.4.1
• **github.com/containerd/log/otel** v0.1.0 **_new_**
• **github.com/containerd/ttrpc** v1.2.9 -> v1.2.10
• **github.com/decred/dcrd/dcrec/secp256k1/v4** v4.4.0 -> v4.4.1
• **github.com/docker/cli** v29.7.2 -> v29.8.2
• **github.com/docker/docker-credential-helpers** v0.9.8 -> v0.9.9
• **github.com/docker/go-connections** v0.7.0 -> v0.8.1
• **github.com/fvbommel/sortorder** v1.1.0 -> v1.2.0
• **github.com/fxamacker/cbor/v2** v2.9.0 -> v2.9.4
• **github.com/go-openapi/analysis** v0.25.2 -> v0.25.5
• **github.com/go-openapi/jsonpointer** v0.23.1 -> v1.0.0
• **github.com/go-openapi/jsonreference** v0.21.6 -> v1.0.0
• **github.com/go-open |
| 0.37.2 | September 30, 2026 | — | 64-bit PortableARM64 Portable Release notesWelcome to the v0.37.2 release of buildx!
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
### Contributors
• CrazyMax
• Sebastiaan van Stijn
• Tõnis Tiigi
### Notable Changes
• Bake with `--progress=rawjson` now rejects ungranted entitlements instead of skipping the consent check. Grant the requested privileges explicitly with `--allow`. https://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682
• Bake now requires `fs.read` approval for secret files selected by an implicit `id` fallback and for local OCI layout named contexts. https://github.com/docker/buildx/security/advisories/GHSA-p54p-jq4x-rc28
### Dependency Changes
• **github.com/containerd/containerd/v2** v2.3.4 -> v2.3.6
• **github.com/moby/buildkit** v0.33.0 -> v0.33.1
• **golang.org/x/crypto** v0.55.0 -> v0.56.0
Previous release can be found at [v0.37.1](https://github.com/docker/buildx/releases/tag/v0.37.1) |
| 0.37.1 | September 11, 2026 | — | 64-bit PortableARM64 Portable Release notesWelcome to the v0.37.1 release of buildx!
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
### Contributors
• CrazyMax
• Tomas Perez Molina
• Tõnis Tiigi
### Notable Changes
• Fix failed multi-node image pushes leaving the requested tag pointing to a partial image. #4058
• Fix newly started container builders not getting a full readiness timeout before first use. #4050
• Fix builder removal cleanup being tied to the status timeout. #4072
• Fix linked Bake targets using the Kubernetes driver losing shared clients before the build completes. #4073
### Dependency Changes
This release has no dependency changes
Previous release can be found at [v0.37.0](https://github.com/docker/buildx/releases/tag/v0.37.0) |
| 0.37.0 | September 2, 2026 | — | 64-bit PortableARM64 Portable Release notesWelcome to the v0.37.0 release of buildx!
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
### Contributors
• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Alberto Garcia Hierro
• Brad Davidson
• Guilhem Charles
• Guillaume Lours
### Notable Changes
• Buildx now supports `cloud` driver builder instances to run builds with [Docker Build Cloud](https://docs.docker.com/build-cloud/usage/) service. No custom version of Buildx binary is needed anymore. #4017
• Newly started container builders now wait for BuildKit readiness before first use. #4027
• Policy evaluation now uses Docker CLI registry auth for image metadata. #4046
• Several consistency issues with handling Windows platform identifiers with OS version have been fixed. #4035 #4034 #4008
• Using the Kubernetes driver now skips terminating pods when choosing a pod. #3997
• Avoid creating temporary files on the host to send builder configuration to remote containers. #3996
• Fix issue where Bake builds could sometimes drop sending build secrets when using linked targets. #4014
• Fix cases where empty source policy sessions were created for some builds, possibly causing confusing progress output. #4028
### Dependency Changes
• **github.com/aws/aws-sdk-go-v2** v1.43.0 -> v1.43.8
• **github.com/aws/aws-sdk-go-v2/config** v1.32.31 -> v1.32.39
• **github.com/aws/aws-sdk-go-v2/credentials** v1.19.30 -> v1.19.38
• **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.31 -> v1.18.39
• **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.4.31 -> v1.4.39
• **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.7.31 -> v2.7.39
• **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.4.32 -> v1.4.40
• **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.13.13 -> v1.13.18
• **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.13.31 -> v1.13.39
• **github.com/aws/aws-sdk-go-v2/service/signin** v1.5.0 -> v1.5.8
• **github.com/aws/aws-sdk-go-v2/service/sso** v1.33.0 -> v1.33.8
• **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.38.0 -> v1.38.8
• **github.com/aws/aws-sdk-go-v2/service/sts** v1.45.0 -> v1.45.8
• **github.com/aws/smithy-go** v1.27.4 -> v1.27.10
• **github.com/compose-spec/compose-go/v2** v2.13.0 -> v2.14.0
• **github.com/containerd/containerd/v2** v2.3.3 -> v2.3.4
• **github.com/containerd/platforms** v1.0.0-rc.4 -> v1.0.0-rc.5
• **github.com/docker/cli** v29.6.2 -> v29.7.2
• **github.com/felixge/httpsnoop** v1.0.4 -> v1.1.0
• **github.com/go-logr/logr** v1.4.3 -> v1.4.4
• **github.com/klauspost/compress** v1.19.1 -> v1.19.2
• **github.com/moby/buildkit** v0.32.2 -> v0.33.0
• **github.com/moby/go-archive** v0.2.1 -> v0.2.0
• **github.com/moby/policy-helpers** 856be88baec4 -> dd6c5499c491
• **github.com/pelletier/go-toml/v2** v2.3.1 -> v2.4.3
• **github.com/sirupsen/logrus** v1.9.4 -> v1.10.2
• **github.com/stretchr/testify** v1.11.1 -> v1.12.1
• **github.com/tonistiigi/fsutil** 6d9dc2ebad62 -> 83cac42c1c52
• **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.69.0 -> v0.70.0
• **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.69.0 -> v0.70.0
• **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.69.0 -> v0.70.0
• **go.opentelemetry.io/otel** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/metric** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/sdk** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/sdk/metric** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/trace** v1.44.0 |
| 0.36.1 | August 4, 2026 | — | 64-bit PortableARM64 Portable Release notesbuildx 0.32.1
Welcome to the v0.32.1 release of buildx!
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
Contributors
• CrazyMax
• Tõnis Tiigi
Notable Changes
• Fix possible error when building private Git repositories with secret credentials directly from remote source #3694
Dependency Changes
This release has no dependency changes
Previous release can be found at v0.32.0 |
| 0.32.1 | March 4, 2026 | — | 64-bit PortableARM64 Portable Release notesbuildx 0.32.1
Welcome to the v0.32.1 release of buildx!
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
Contributors
- CrazyMax
- Tõnis Tiigi
Notable Changes
- Fix possible error when building private Git repositories with secret credentials directly from remote source #3694
Dependency Changes
This release has no dependency changes
Previous release can be found at v0.32.0 |
| 0.29.1 | October 3, 2025 | — | 64-bit PortableARM64 Portable |
