Welcome to the v0.34.2 release of buildkit!
Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.
Contributors
- CrazyMax
- Sebastiaan van Stijn
- Tõnis Tiigi
Notable Changes
- Fix a daemon panic caused by resolver cache poisoning when a build resolves metadata for the same Git source reference twice. GHSA-2fqp-xg6f-v7gj
- Prevent malicious clients with access to the BuildKit control APIs from setting extended attributes on files outside the BuildKit state directory, potentially granting elevated privileges to programs on the host. GHSA-w26x-xg27-7qjc
Dependency Changes
- github.com/containerd/containerd/v2 v2.4.1 -> v2.4.2
- github.com/klauspost/compress v1.20.1 -> v1.20.2
- github.com/tonistiigi/fsutil 83cac42c1c52 -> a72de9dcf763
Previous release can be found at v0.34.1