Release history
buildkit releases
concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit
All releases
14 shown
No immediate action
dockerfile/1.24.0-labs
Maintenance
Routine maintenance and dependency updates.
v0.29.0
New feature
Notable features
- Dockerfile frontend updated to v1.23.0
- Git sources support mtime=commit for reproducibility
- Frontends can report updated SOURCE_DATE_EPOCH via result metadata
dockerfile/1.23.0-labs
Maintenance
### Usage ``` # syntax=docker.io/docker/dockerfile-upstream:1.23.0-labs ```
dockerfile/1.23.0
New feature
Notable features
- Git URLs accept mtime=commit query parameter
- SOURCE_DATE_EPOCH definable as build-arg with default
- Fixed non-deterministic proxy build-args ordering
v0.28.1
Security relevant
Security fixes
- Fixed insufficient validation of Git URL fragments (GHSA-4vrq-3vrq-g6gg)
- Fixed untrusted custom frontend file write vulnerability (GHSA-4c29-8rgm-jvjj)
dockerfile/1.22.0
New feature
Notable features
- Fixed linter warning for copying ignored files with negated patterns
- Updated SecretsUsedInArgOrEnv linter rule
- Named sources support different shared keys for local sources
dockerfile/1.22.0-labs
Maintenance
### Usage ``` # syntax=docker.io/docker/dockerfile-upstream:1.22.0-labs ```
v0.28.0
Breaking risk
Breaking changes
- InvocationID changed to InvocationId in provenance attestation for SLSA spec compliance
Notable features
- Dockerfile frontend updated to v1.22.0
- Parallel image pushing and cache export
- LLB API supports docker-image+blob and oci-layout+blob source types
dockerfile/1.21.0-labs
Maintenance
### Usage ``` # syntax=docker.io/docker/dockerfile-upstream:1.21.0-labs ```
dockerfile/1.21.0
New feature
Notable features
- Skip linter checks with per-command comment
- Strip heredoc shebang whitespace
- Signed release images
Full changelog
Usage
# syntax=docker.io/docker/dockerfile-upstream:1.21.0
Notable changes
- This is a first version of Dockerfile frontend with signed release images built using Docker Github Builder
- Allow skipping Dockerfile linter checks with a per-command comment #6334
- Strip heredoc shebang whitespace before parsing Dockerfile frontends #6402
- Fix
CopyIgnoredFilelinter rule ignoring negating matches #6356
v0.27.0
New feature
Notable features
- Signed release images built with Docker Github Builder
- GitHub Cache backend supports optional signed cache verification
- Gateway interface for reading container filesystems