ReleaseBytes
docker Docker Engine Releases · · 29.6.0

Docker 29.6.0: New API endpoint, image attestations, and networking fixes

infragadeprecationengineer
deprecation feature patch

Docker version 29.6.0 introduces a new API endpoint for updating container resource settings and adds support for retrieving in-toto attestation statements for images. This release also includes numerous bug fixes, enhancements to image pruning and push commands, and improvements to networking and rootless operation. Users may need to adjust configurations related to container links and bridge networking due to deprecation warnings.

  • →docker image push now respects NO_COLOR. docker/cli#6957
  • →containerd image store: Fix docker system prune to include unpacked image data when reporting reclaimed space. moby/moby#52905
  • →Fix docker system df image size reporting to count only snapshots directly used by images. moby/moby#52901
  • →Fix default BuildKit GC policy to prune reproducible cache types as intended. moby/moby#52814
  • →Fix explicit file modes being filtered by the daemon umask, including COPY --chmod permissions. moby/moby#52892
Deprecations (1) ›

  • The Engine now returns a deprecation warning when a container connected to the default bridge is created with links specified. moby/moby#47427

Features (1) ›

  • Add GET /images/{name}/attestations endpoint to retrieve in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image. Supports optional platform selection, predicate type filtering, and a statement query parameter for verbatim statement bodies

Enhancements (2) ›
  • Update runc (in static binaries) to v1.3.6. moby/moby#52883
  • Update BuildKit to v0.31.0. moby/moby#52904
Fixes (9) ›
  • docker image push now respects NO_COLOR. docker/cli#6957
  • containerd image store: Fix docker system prune to include unpacked image data when reporting reclaimed space. moby/moby#52905
  • Fix docker system df image size reporting to count only snapshots directly used by images. moby/moby#52901

  • Fix a bug where registry authentication failures during worker image pulls were reported as a misleading “No such image” error. moby/moby#52698

  • Fix default BuildKit GC policy to prune reproducible cache types as intended. moby/moby#52814
  • Fix explicit file modes being filtered by the daemon umask, including COPY --chmod permissions. moby/moby#52892
  • Fix image selection with the containerd image store on amd64 hosts when images provide amd64 variant-specific manifests. moby/moby#52773
  • The --password flag on docker login now accepts - to pass the password through STDIN as alternative to --password-stdin. docker/cli#7029
  • Fix a race condition in overlay network bulk sync that caused ~30s DNS resolution delays on newly joined swarm nodes. moby/moby#52862
Read the original announcement →

https://github.com/moby/moby/releases/tag/docker-v29.6.0

Related releases