Welcome to the v0.36.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• MohammadHasan Akbari
• Matt Van Horn
• amarkdotdev
• Areeb Ahmed
• Guillaume Lours
• Paweł Gronowski
• Pierre Gimalac
• s3onghyun

Notables Changes

• Default source policy can now validate the authenticity of BuildKit release images when creating docker-container builder with docker buildx create command. #3961
• Bake command now supports overriding declared secret sources. #3962
• Broken builder instances are now correctly handled on removal. #3934
• Bake now supports resolving files relative to the bake file location instead of the current working directory with BUILDX_BAKE_FILE_RELATIVE_PATHS=true. #3935
• Source policies now support new array.flatten builtin and OPA template strings. #3913
• Imagetools commands now do extra validation of the descriptor inputs from files. #3933
• Windows release binaries are now code-signed, matching the signing coverage already provided for macOS release artifacts. #3978
• Compose compatibility has been updated to v2.13.0. #3929
• Fix source policy support on Windows when loading local files inside policy. #3944
• Fix Kubernetes driver random load balancer support. #3861
• Fix Kubernetes driver builds hanging indefinitely when the remote exec stream ends. #3966
• Fix iidfile for containerd-backed Docker driver. #3952
• Fix authority pseudo-header when using remote driver. #3928
• Fix possible FD leak when using source policies. #3943

Dependency Changes

• github.com/Microsoft/go-winio v0.6.2 -> ad3df93bed29
• github.com/ProtonMail/go-crypto v1.3.0 -> v1.4.1
• github.com/aws/aws-sdk-go-v2 v1.42.0 -> v1.43.0
• github.com/aws/aws-sdk-go-v2/config v1.32.24 -> v1.32.31
• github.com/aws/aws-sdk-go-v2/credentials v1.19.23 -> v1.19.30
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.29 -> v1.18.31
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.29 -> v1.4.31
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29 -> v2.7.31
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30 -> v1.4.32
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12 -> v1.13.13
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.29 -> v1.13.31
• github.com/aws/aws-sdk-go-v2/service/signin v1.1.5 -> v1.5.0
• github.com/aws/aws-sdk-go-v2/service/sso v1.31.3 -> v1.33.0
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.6 -> v1.38.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.43.3 -> v1.45.0
• github.com/aws/smithy-go v1.27.2 -> v1.27.4
• github.com/compose-spec/compose-go/v2 v2.10.2 -> v2.13.0
• github.com/containerd/containerd/api v1.10.0 -> v1.11.1
• github.com/containerd/containerd/v2 v2.2.4 -> v2.3.3
• github.com/containerd/ttrpc v1.2.8 -> v1.2.9
• github.com/docker/cli v29.5.3 -> v29.6.2
• github.com/go-openapi/errors v0.22.7 -> v0.22.8
• github.com/go-openapi/loads v0.23.3 -> v0.24.0
• github.com/go-openapi/runtime v0.32.3 -> v0.32.4
• github.com/go-openapi/spec v0.22.5 -> v0.22.6
• github.com/go-openapi/strfmt v0.26.3 -> v0.26.4
• github.com/go-openapi/swag v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/cmdutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/conv v0.26.0 -> v0.27.0
• github.com/go-openapi/swag/fileutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/jsonname v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/jsonutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/loading v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/mangling v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/netutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/stringutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/typeutils v0.26.0 -> v0.27.0
• github.com/go-openapi/swag/yamlutils v0.26.0 -> v0.26.1
• github.com/go-openapi/validate v0.25.3 -> v0.26.0
• github.com/google/go-containerregistry v0.21.6 -> v0.21.7
• github.com/klauspost/compress v1.18.6 -> v1.19.1
• github.com/lestrrat-go/httprc/v3 v3.0.1 -> v3.0.2
• github.com/lestrrat-go/jwx/v3 v3.0.11 -> v3.0.13
• github.com/moby/buildkit v0.31.0 -> v0.32.0
• github.com/moby/go-archive v0.2.0 -> v0.2.1
• github.com/moby/moby/api v1.54.2 -> v1.55.0
• github.com/moby/moby/client v0.4.1 -> v0.5.0
• github.com/moby/policy-helpers d5411a945cfc -> 856be88baec4
• github.com/moby/sys/user v0.4.0 -> v0.4.1
• github.com/open-policy-agent/opa v1.10.1 -> v1.14.1
• github.com/segmentio/asm v1.2.0 -> v1.2.1
• github.com/sigstore/rekor v1.5.2 -> v1.5.3
• github.com/sigstore/rekor-tiles/v2 5d098a2b6443 -> v2.3.0
• github.com/sigstore/sigstore-go v1.2.1 -> v1.2.2
• github.com/tonistiigi/fsutil 0257b3308df4 -> 6d9dc2ebad62
• github.com/valyala/fastjson v1.6.4 -> v1.6.7
• github.com/vektah/gqlparser/v2 v2.5.30 -> v2.5.32
• golang.org/x/crypto v0.52.0 -> v0.54.0
• golang.org/x/mod v0.36.0 -> v0.38.0
• golang.org/x/net v0.55.0 -> v0.57.0
• golang.org/x/sync v0.20.0 -> v0.22.0
• golang.org/x/sys v0.45.0 -> v0.47.0
• golang.org/x/term v0.43.0 -> v0.45.0
• golang.org/x/text v0.37.0 -> v0.40.0
• golang.org/x/tools v0.45.0 -> v0.47.0
• google.golang.org/grpc v1.81.1 -> v1.82.1
• google.golang.org/protobuf v1.36.11 -> f2248ac996af
• k8s.io/api v0.35.4 -> v0.36.0
• k8s.io/apimachinery v0.35.4 -> v0.36.0
• k8s.io/client-go v0.35.4 -> v0.36.0
• k8s.io/kube-openapi 589584f1c912 -> 5883c5ee87b9
• k8s.io/streaming v0.36.0 new
• k8s.io/utils bc988d571ff4 -> 28399d86e0b5
• sigs.k8s.io/structured-merge-diff/v6 v6.3.0 -> v6.3.2

Previous release can be found at v0.35.0