moby/buildkit v0.21.0

on GitHub

Welcome to the v0.21.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Jonathan A. Sternberg
• Anthony Nandaa
• Sebastiaan van Stijn
• Dan Duvall
• Austin Vazquez
• Billy Owire
• Derek McGowan
• Gleb Nebolyubov
• Michael Korn

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.15.0. changelog
• Runc container runtime has been updated to v1.2.6. #5845
• The cache manifest created by --cache-to now defaults to OCI artifact manifest (instead of OCI image index). For old behavior, set image-manifest=false. #5864
• The cache timeout for registry credentials has been reduced from 10 min to 5 min. #5859
• Buildctl --tlsdir option now allows filenames compatible with cert-manager.io. #5886
• Update free-space filter GC/prune filter to not remove all data when no max-space value is set. #5827
• Mitigate GitHub Actions cache v2 flakiness. #5805
• Add autoallow and entitlements support to CDI devices. #5742
• Support authentication in LLB for Git and HTTP. #5733
• Support for adding additional request header fields for HTTP sources. #5732
• OpenTelemetry traces now contain spans for layer extraction. #5831
• containerd image exporter creates dangling images by default. #5858
• Add support for bind and cache mounts for WCOW. #5708
• Add session exporter capability. #5907 #5908
• Add metadata-only transfer option for local source. #5897
• Fix X mode to be Linux-compatible for file operations using chmod. #5850
• Fix --chmod when applied to parent directories. #5788
• Fix missing user-agent when buildkit requests layers from the registry. #5834
• Fix missing user-agent for GitHub Actions importer. #5759 #5760
• Fix reading secrets from any session on parallel build requests. #5833
• Fix race condition causing "file used by another process" errors with WCOW. #5885

Dependency Changes

• github.com/docker/cli v27.5.1 -> v28.0.4
• github.com/docker/docker v27.5.1 -> v28.0.4
• github.com/docker/docker-credential-helpers v0.8.2 -> v0.9.3
• github.com/golang-jwt/jwt/v5 v5.2.1 -> v5.2.2
• github.com/google/go-cmp v0.6.0 -> v0.7.0
• github.com/klauspost/compress v1.17.11 -> v1.18.0
• github.com/moby/go-archive 21f3f3385ab7 new
• github.com/moby/sys/user v0.3.0 -> v0.4.0
• github.com/opencontainers/image-spec v1.1.0 -> v1.1.1
• github.com/tonistiigi/dchapes-mode ca0759fec205 -> 73d941a28323
• github.com/tonistiigi/fsutil b14e27f4135a -> 5b74a7ad7583
• golang.org/x/crypto v0.31.0 -> v0.37.0
• golang.org/x/exp 2d47ceb2692f -> 7e4ce0ab07d0
• golang.org/x/mod v0.22.0 -> v0.24.0
• golang.org/x/net v0.33.0 -> v0.39.0
• golang.org/x/sync v0.10.0 -> v0.13.0
• golang.org/x/sys v0.29.0 -> v0.32.0
• golang.org/x/text v0.21.0 -> v0.24.0
• golang.org/x/time v0.6.0 -> v0.11.0
• tags.cncf.io/container-device-interface v0.8.1 -> v1.0.1
• tags.cncf.io/container-device-interface/specs-go v0.8.0 -> v1.0.0

Previous release can be found at v0.20.2