moby/buildkit v0.21.0-rc1

on GitHub

Welcome to the v0.21.0-rc1 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Akihiro Suda
• Jonathan A. Sternberg
• Anthony Nandaa
• Sebastiaan van Stijn
• Dan Duvall
• Austin Vazquez
• Billy Owire
• Derek McGowan
• Gleb Nebolyubov
• Michael Korn

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.15.0-rc1 changelog
• Runc container runtime has been updated to v1.2.6 #5845
• The cache manifest created by --cache-to now defaults to OCI artifact manifest (instead of OCI image index).
  For old behavior, set image-manifest=false. #5864
• The cache timeout for registry credentials has been reduced from 10 min to 5 min #5859
• Buildctl: --tlsdir option now allows filenames compatible with cert-manager.io #5886
• Update free-space filter GC/prune filter to not remove all data when no max-space value is set #5827
• Mitigate GitHub Actions cache v2 flakiness #5805
• Add autoallow and entitlements support to CDI devices #5742
• Support authentication in LLB for Git and HTTP #5733
• Support adding additional request header fields for HTTP sources #5732
• Increase number of retries for Github Actions cache backend #5790
• OpenTelemetry traces now contains spans for layer extraction #5831
• containerd image exporter creates dangling images by default #5858
• Fix X mode to be Linux-compatible for file operations using chmod #5850
• Fix --chmod when applied to parent directories #5788
• Fix missing user-agent when buildkit requests layers from the registry #5834
• Fix missing user-agent for GitHub Actions importer #5759 #5760
• Fix reading Bake secrets from transitive targets #5833
• WCOW: add support for bind and cache mounts #5708
• WCOW: Fix race condition causing "file used by another process" errors #5885

Dependency Changes

• github.com/docker/cli v27.5.1 -> v28.0.4
• github.com/docker/docker v27.5.1 -> v28.0.4
• github.com/docker/docker-credential-helpers v0.8.2 -> v0.9.3
• github.com/golang-jwt/jwt/v5 v5.2.1 -> v5.2.2
• github.com/google/go-cmp v0.6.0 -> v0.7.0
• github.com/klauspost/compress v1.17.11 -> v1.18.0
• github.com/moby/go-archive 21f3f3385ab7 new
• github.com/moby/sys/user v0.3.0 -> v0.4.0
• github.com/opencontainers/image-spec v1.1.0 -> v1.1.1
• github.com/tonistiigi/dchapes-mode ca0759fec205 -> 73d941a28323
• github.com/tonistiigi/fsutil b14e27f4135a -> d73a4b3b8a7e
• golang.org/x/crypto v0.31.0 -> v0.37.0
• golang.org/x/exp 2d47ceb2692f -> 7e4ce0ab07d0
• golang.org/x/mod v0.22.0 -> v0.24.0
• golang.org/x/net v0.33.0 -> v0.39.0
• golang.org/x/sync v0.10.0 -> v0.13.0
• golang.org/x/sys v0.29.0 -> v0.32.0
• golang.org/x/text v0.21.0 -> v0.24.0
• golang.org/x/time v0.6.0 -> v0.11.0
• tags.cncf.io/container-device-interface v0.8.1 -> v1.0.1
• tags.cncf.io/container-device-interface/specs-go v0.8.0 -> v1.0.0

Previous release can be found at v0.20.2