Docker Buildx: vanhemmat versiot ja versiohistoria

buildx 0.38.1

Welcome to the v0.38.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

### Security

This release has been built with updated Go runtime 1.26.10 to address [CVE-2026-111943](https://go.dev/issue/82345) by rejecting certificate chains that include eight revoked eMudhra intermediate certificates.
Image pulls and pushes fail TLS certificate verification if a registry's certificate chain relies on one of the affected TLS intermediates.
Affected registries need a replacement certificate chain that does not use these intermediates.

The blocked intermediates are:

• Domain-validated TLS：`EM DV TLS CA - G3B` and `EM DV TLS CA - G3C`
• Organization-validated TLS：`EM OV TLS CA - G3B` and `EM OV TLS CA - G3C`
• Extended-validation TLS：`EM EV TLS CA - G3B` and `EM EV TLS CA - G3C`
• Code signing：`EM OV CS CA - G3B` and `EM OV CS CA - G3C`

The G3B intermediates belong to eMudhra BV, and the G3C intermediates belong to eMudhra Inc.
The keys for these intermediates were compromised.

[Read more about the eMudhra Intermediate CA Compromise](https://emudhra.we-have-a-problem.com/)

There are no functional changes in Buildx itself compared to the previous release.

Previous release can be found at [v0.38.0](https://github.com/docker/buildx/releases/tag/v0.38.0)

buildx 0.38.0

Welcome to the v0.38.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

### Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Akihiro Suda
• Tomas Perez Molina
• Dean Chen
• MohammadHasan Akbari
• Nicolas De Loof
• Ricardo Branco
• Ryan Bonnell

### Notable Changes

• Bake now supports configuring job execution modes and parallelization limits with `--jobs/-j` flag. New execution modes include `defer-error` to delay cancellation of failed jobs and `defer-output` to wait for all jobs to complete before exporting results. #4044
• New experiment command `docker buildx replay build` allows rebuilding historical builds based on recorded provenance of a distributed artifact or Docker image. This subcommand is expected to be updated with additional features and improvements in future releases. #4122 #3818
• HTTP hosts passed to build policies are now normalized to assist writing accurate policy rules. #4068
• Bake `--set` overrides have now been updated to use singular keys for better consistency and clarity. #4089
• Bake `--set` overrides now support clearing array values with an empty parameter. #4107
• Git advice output can now be controlled with `BUILDKIT_GIT_ADVICE` and `BUILDX_BAKE_GIT_ADVICE`. #4103
• Compose support has been updated to v2.16.1 #4118
• Zstd compressed archives can now be passed as build context. #4104
• Update Kubernetes driver to handle AppArmor profile correctly. #4083
• Improve Kubernetes driver dial retry backoff logic. #4039
• Fix possible issues with builder feature detection using stale cached data. #4085 #4082
• Fix possible panic from result image loading and progress race. #4064
• Fix possible stale node status printed by `inspect --bootstrap` command. #4048
• Fix confusing error messages when encountering undefined variables in bake targets. #4086
• Fix possible incorrect parsing of bake target overrides. #4088
• Fix possible build error with Kubernetes driver and linked targets. #4073
• Fix issue with Kubernetes driver waiting for connection readiness. #4077

### Dependency Changes

• **github.com/aws/aws-sdk-go-v2** v1.43.8 -> v1.47.0
• **github.com/aws/aws-sdk-go-v2/config** v1.32.39 -> v1.33.4
• **github.com/aws/aws-sdk-go-v2/credentials** v1.19.38 -> v1.20.4
• **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.39 -> v1.20.0
• **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.4.39 -> v1.5.3
• **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.7.39 -> v2.8.3
• **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.4.40 -> v1.5.3
• **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.13.18 -> v1.13.19
• **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.13.39 -> v1.14.3
• **github.com/aws/aws-sdk-go-v2/service/signin** v1.5.8 -> v1.10.0
• **github.com/aws/aws-sdk-go-v2/service/sso** v1.33.8 -> v1.38.0
• **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.38.8 -> v1.43.0
• **github.com/aws/aws-sdk-go-v2/service/sts** v1.45.8 -> v1.50.0
• **github.com/aws/smithy-go** v1.27.10 -> v1.28.2
• **github.com/clipperhouse/uax29/v2** v2.2.0 -> v2.6.0
• **github.com/compose-spec/compose-go/v2** v2.14.0 -> v2.16.1
• **github.com/containerd/containerd/api** v1.11.1 -> v1.12.0
• **github.com/containerd/containerd/v2** v2.3.6 -> v2.4.1
• **github.com/containerd/log/otel** v0.1.0 **_new_**
• **github.com/containerd/ttrpc** v1.2.9 -> v1.2.10
• **github.com/decred/dcrd/dcrec/secp256k1/v4** v4.4.0 -> v4.4.1
• **github.com/docker/cli** v29.7.2 -> v29.8.2
• **github.com/docker/docker-credential-helpers** v0.9.8 -> v0.9.9
• **github.com/docker/go-connections** v0.7.0 -> v0.8.1
• **github.com/fvbommel/sortorder** v1.1.0 -> v1.2.0
• **github.com/fxamacker/cbor/v2** v2.9.0 -> v2.9.4
• **github.com/go-openapi/analysis** v0.25.2 -> v0.25.5
• **github.com/go-openapi/jsonpointer** v0.23.1 -> v1.0.0
• **github.com/go-openapi/jsonreference** v0.21.6 -> v1.0.0
• **github.com/go-open

Welcome to the v0.37.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

### Contributors

• CrazyMax
• Sebastiaan van Stijn
• Tõnis Tiigi

### Notable Changes

• Bake with `--progress=rawjson` now rejects ungranted entitlements instead of skipping the consent check. Grant the requested privileges explicitly with `--allow`. https://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682
• Bake now requires `fs.read` approval for secret files selected by an implicit `id` fallback and for local OCI layout named contexts. https://github.com/docker/buildx/security/advisories/GHSA-p54p-jq4x-rc28

### Dependency Changes

• **github.com/containerd/containerd/v2** v2.3.4 -> v2.3.6
• **github.com/moby/buildkit** v0.33.0 -> v0.33.1
• **golang.org/x/crypto** v0.55.0 -> v0.56.0

Previous release can be found at [v0.37.1](https://github.com/docker/buildx/releases/tag/v0.37.1)

Welcome to the v0.37.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

### Contributors

• CrazyMax
• Tomas Perez Molina
• Tõnis Tiigi

### Notable Changes

• Fix failed multi-node image pushes leaving the requested tag pointing to a partial image. #4058
• Fix newly started container builders not getting a full readiness timeout before first use. #4050
• Fix builder removal cleanup being tied to the status timeout. #4072
• Fix linked Bake targets using the Kubernetes driver losing shared clients before the build completes. #4073

### Dependency Changes

This release has no dependency changes

Previous release can be found at [v0.37.0](https://github.com/docker/buildx/releases/tag/v0.37.0)

Welcome to the v0.37.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

### Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Alberto Garcia Hierro
• Brad Davidson
• Guilhem Charles
• Guillaume Lours

### Notable Changes

• Buildx now supports `cloud` driver builder instances to run builds with [Docker Build Cloud](https://docs.docker.com/build-cloud/usage/) service. No custom version of Buildx binary is needed anymore. #4017
• Newly started container builders now wait for BuildKit readiness before first use. #4027
• Policy evaluation now uses Docker CLI registry auth for image metadata. #4046
• Several consistency issues with handling Windows platform identifiers with OS version have been fixed. #4035 #4034 #4008
• Using the Kubernetes driver now skips terminating pods when choosing a pod. #3997
• Avoid creating temporary files on the host to send builder configuration to remote containers. #3996
• Fix issue where Bake builds could sometimes drop sending build secrets when using linked targets. #4014
• Fix cases where empty source policy sessions were created for some builds, possibly causing confusing progress output. #4028

### Dependency Changes

• **github.com/aws/aws-sdk-go-v2** v1.43.0 -> v1.43.8
• **github.com/aws/aws-sdk-go-v2/config** v1.32.31 -> v1.32.39
• **github.com/aws/aws-sdk-go-v2/credentials** v1.19.30 -> v1.19.38
• **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.31 -> v1.18.39
• **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.4.31 -> v1.4.39
• **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.7.31 -> v2.7.39
• **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.4.32 -> v1.4.40
• **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.13.13 -> v1.13.18
• **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.13.31 -> v1.13.39
• **github.com/aws/aws-sdk-go-v2/service/signin** v1.5.0 -> v1.5.8
• **github.com/aws/aws-sdk-go-v2/service/sso** v1.33.0 -> v1.33.8
• **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.38.0 -> v1.38.8
• **github.com/aws/aws-sdk-go-v2/service/sts** v1.45.0 -> v1.45.8
• **github.com/aws/smithy-go** v1.27.4 -> v1.27.10
• **github.com/compose-spec/compose-go/v2** v2.13.0 -> v2.14.0
• **github.com/containerd/containerd/v2** v2.3.3 -> v2.3.4
• **github.com/containerd/platforms** v1.0.0-rc.4 -> v1.0.0-rc.5
• **github.com/docker/cli** v29.6.2 -> v29.7.2
• **github.com/felixge/httpsnoop** v1.0.4 -> v1.1.0
• **github.com/go-logr/logr** v1.4.3 -> v1.4.4
• **github.com/klauspost/compress** v1.19.1 -> v1.19.2
• **github.com/moby/buildkit** v0.32.2 -> v0.33.0
• **github.com/moby/go-archive** v0.2.1 -> v0.2.0
• **github.com/moby/policy-helpers** 856be88baec4 -> dd6c5499c491
• **github.com/pelletier/go-toml/v2** v2.3.1 -> v2.4.3
• **github.com/sirupsen/logrus** v1.9.4 -> v1.10.2
• **github.com/stretchr/testify** v1.11.1 -> v1.12.1
• **github.com/tonistiigi/fsutil** 6d9dc2ebad62 -> 83cac42c1c52
• **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.69.0 -> v0.70.0
• **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.69.0 -> v0.70.0
• **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.69.0 -> v0.70.0
• **go.opentelemetry.io/otel** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/metric** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/sdk** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/sdk/metric** v1.44.0 -> v1.45.0
• **go.opentelemetry.io/otel/trace** v1.44.0 

buildx 0.32.1
Welcome to the v0.32.1 release of buildx!
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
Contributors
• CrazyMax
• Tõnis Tiigi
Notable Changes
• Fix possible error when building private Git repositories with secret credentials directly from remote source #3694
Dependency Changes
This release has no dependency changes
Previous release can be found at v0.32.0

buildx 0.32.1
Welcome to the v0.32.1 release of buildx!
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
Contributors
- CrazyMax
- Tõnis Tiigi
Notable Changes
- Fix possible error when building private Git repositories with secret credentials directly from remote source #3694
Dependency Changes
This release has no dependency changes
Previous release can be found at v0.32.0