Docker Releases
Docker Engine (Moby) and Docker Compose releases. New features, breaking changes, security advisories and deprecations - each summarised in plain English and updated continuously.
Tracking 16 Docker releases · Updated
- Docker Compose Releases infragaengineer ·
Docker Compose v5.5.0 Overhauls Image Digest Reconciliation
Docker Compose v5.5.0 introduces an overhauled image digest reconciliation process designed to prevent unnecessary container recreation. This enhancement improves the efficiency of `compose up` operations by re-evaluating image digests with new logic. Users should note that existing containers may be recreated during the initial `compose up` run after upgrading. Additionally, `compose pull` now correctly respects `pull_policy` refresh windows, including `daily`, `weekly`, and `every_N` settings.
patch - Docker Engine Releases securitysecurity-advisoryengineer ·
Docker Engine (moby/moby) v25.0.17 Patch Release Addresses Multiple CVEs
Docker Engine v25.0.17 is a patch release focused on critical security fixes. It resolves several vulnerabilities, including symlink escape issues during mount destination creation and `docker cp` operations, as well as decompressing archives before entering container filesystems. The update also vendors `containerd` v1.7.33 to mitigate an additional CVE. This release is crucial for users to enhance the security posture of their Docker environments.
security patch - Docker Engine Releases infrasecurity-advisoryengineer ·
Moby Project v25.0.16 Patches CVEs and Fixes Image Store Bug
The Moby Project has released version 25.0.16 of its container engine, delivering crucial stability and security enhancements. This patch addresses a bug causing duplicate `PUT` requests during multi-platform image pushes in the containerd image store. Critical dependency updates are included, specifically replacing `github.com/moby/buildkit` with `github.com/Mirantis/buildkit v0.12.6-m.1`, to remediate several identified CVEs. These updates reinforce the reliability of image management and bolster the Moby engine's overall security posture.
security patch - Docker Engine Releases infraengineer ·
Docker Engine 29.7.2 addresses panics, image pull regressions, and networking issues
Docker Engine 29.7.2 has been released with several bug fixes and enhancements, including resolving panics in `docker service` commands and regressions affecting image pulls with absolute hardlink targets. These updates are crucial for users experiencing these specific issues. The release also includes packaging updates and networking improvements for enhanced compatibility.
patch - Docker Compose Releases infra ·
Docker Compose v5.4.0 enhances resource reconciliation and fixes bugs
Docker Compose v5.4.0 introduces a new reconciliation model for resources like volumes and networks, improving how Compose manages your application's infrastructure. The release also includes several bug fixes, such as preserving zero-replica services during hashing and warning when service selection is ignored. These changes primarily affect developers and architects using Docker Compose for defining and managing multi-container applications, with the new reconciliation logic being a key feature.
patch - Docker Engine Releases infraengineer ·
Docker v29.7.1 addresses image pull and CopyToContainer regressions
Docker version 29.7.1 includes fixes for two regressions affecting image pulling and the CopyToContainer command. A fix for image pulling resolves an issue with layers containing directories without explicit parent entries, while another fix prevents CopyToContainer from rejecting container paths that traverse absolute symlinks. These updates are available as a patch release and are relevant to users performing these operations.
patch - Docker Engine Releases securityinfrasecurity-advisory ·
Docker 29.7.0: Embedded containerd, security fix, and numerous enhancements
Docker 29.7.0 introduces an experimental embedded containerd feature, moving it into the daemon process for potentially simpler management. This release also addresses a security vulnerability (CVE-2026-17106) affecting Docker Engine and related components, requiring updates for all users. Several bug fixes and enhancements are included, such as improved networking reliability and updates to underlying dependencies like Go and runc.
security feature patch - Docker Engine Releases infraengineer ·
Moby Client v0.5.1: Fixes for service platforms and query arguments
Moby Client version 0.5.1 includes fixes for duplicate and unknown platforms in service creation and updates, along with improved handling of optional query arguments for inspect and commit operations. These updates aim to enhance the reliability and correctness of Docker service management. The patch is now available for users of the Moby client.
patch - Docker Engine Releases securityinfraengineer ·
Docker Engine v29.6.2: Security fixes and dependency updates
Docker Engine v29.6.2 addresses multiple security vulnerabilities within the buildkit component, mitigating risks of command injection and unauthorized file operations. The release also includes updates to core dependencies like containerd and the Go runtime. These patches are crucial for maintaining the security posture of Docker environments and are relevant to all users running Docker Engine.
security patch - Docker Compose Releases infragaengineer ·
Docker Compose v5.2.0 releases with new reconciliation algorithm
Docker Compose v5.2.0 introduces a new reconciliation algorithm for managing observed and expected states, aiming to improve workload stability. This release includes several improvements and bug fixes, notably around build contexts, progress reporting, and environment variable handling. Users experiencing issues with existing Compose workloads are encouraged to report them via GitHub issues, and the update also brings dependency bumps and internal refactors.
patch - Docker Engine Releases securityinfraengineer ·
Docker Engine 29.6.1 addresses security vulnerabilities and updates components
Docker Engine 29.6.1 is a patch release that addresses multiple security vulnerabilities, including issues with memory consumption and build container security protections. It also includes updates to core components like containerd and BuildKit. This release is recommended for all users, especially those concerned with security and stability.
security patch - Docker Compose Releases infraengineer ·
Docker Compose v5.3.0 Adds Init Containers
Docker Compose v5.3.0 introduces native support for init containers, allowing for sequential execution of setup tasks before main services start. This enhancement provides better control over service startup order and dependency management. This update affects users who manage complex application lifecycles with Docker Compose. The release also includes several bug fixes and internal migrations.
patch - Docker Compose Releases infragaengineer ·
Docker Compose v5.3.1: CI hardening and dependency updates
Docker Compose v5.3.1 includes several internal CI improvements and dependency updates. These changes enhance the robustness and maintenance of the development workflow. The release is available for all users and is a standard patch release.
patch - Docker Engine Releases infragadeprecationengineer ·
Docker 29.6.0: New API endpoint, image attestations, and networking fixes
Docker version 29.6.0 introduces a new API endpoint for updating container resource settings and adds support for retrieving in-toto attestation statements for images. This release also includes numerous bug fixes, enhancements to image pruning and push commands, and improvements to networking and rootless operation. Users may need to adjust configurations related to container links and bridge networking due to deprecation warnings.
deprecation feature patch - Docker Engine Releases infragaengineer ·
Moby API v1.55.0 adds image attestations and container update options
Moby API version 1.55.0 introduces a new endpoint to retrieve in-toto attestation statements for images, allowing tools to access SBOM and provenance data directly from the daemon. It also enhances the container update API to support per-device blkio resource settings. Documentation for swarm join requirements has also been clarified. These changes benefit developers and operators managing containerized applications by simplifying metadata retrieval and resource control.
patch - Docker Engine Releases securityengineer ·
Moby Client 0.5.0: New endpoint for image attestations
The Moby client has released version 0.5.0, introducing a new `/images/{name}/attestations` endpoint. This feature allows users to retrieve in-toto attestation statements, including SLSA provenance and SPDX SBOM, directly from the Docker daemon. This change benefits developers and security teams by streamlining the process of accessing critical image metadata, reducing the need for extra registry calls.
feature
About Docker release tracking on ReleaseBytes
Docker Engine and Docker Compose releases carry security fixes, CLI changes and deprecations that affect nearly every build pipeline and dev machine. ReleaseBytes tracks the Moby (Docker Engine) and Compose release channels, summarising each release and flagging the breaking changes and security advisories worth acting on.
Frequently asked questions
How often are Docker release notes updated on ReleaseBytes? ›
Continuously. ReleaseBytes monitors the official Docker release channels around the clock and publishes a plain-English summary of each announcement shortly after it lands.
What kinds of Docker changes does ReleaseBytes track? ›
New features, enhancements, bug fixes, security advisories, breaking changes, deprecations and end-of-life announcements. Every item is tagged by type so you can filter to just the changes that need action.
How can I get alerts for new Docker releases? ›
Set up a free email or Slack alert filtered to Docker, subscribe to the weekly digest, or follow the RSS feed. Teams can also install the ReleaseBytes GitHub App or connect via MCP.
Where does the Docker release data come from? ›
From the official sources: Docker Engine (Moby) and Docker Compose releases. Every item links back to the original vendor announcement.