Moby changelog

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.9.0 milestone moby/moby, 29.9.0 milestone Security The Go runtime update fixes the following security vulnerabilities in D

client: bump github.com/docker/go-connections v0.8.2, github.com/Azure/go-ansiterm 8c912ac31dd4. moby/moby#53891 Fix request cancellation and deadlines during client HTTP upgrade handshakes. moby/moby#53889

client: add WithHTTPRequestHook option. moby/moby#53671 client: deprecate WithResponseHook in favor of WithHTTPResponseHook. moby/moby#53666 client: fix WithHTTPResponseHook hooks not being called for hijacked HTTP connections. moby/moby#53

api/scripts: Allow isolated model generation with an API directory. moby/moby#53629 api/swagger: Improve OpenAPI compatibility. moby/moby#53626 api/swagger: Quote HTTP response status codes. moby/moby#53759 api/templates: schema: disable va

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.8.2 milestone moby/moby, 29.8.2 milestone Security This release fixes the following security vulnerabilities in Docker Eng

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.8.1 milestone moby/moby, 29.8.1 milestone Bug fixes and enhancements containerd image store: Fix docker load leaving dangl

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.8.0 milestone moby/moby, 29.8.0 milestone New Add HostConfig.Umask option and a corresponding --umask <octal> flag to dock

pkg/jsonmessage: add new WithMessagePrinter option to use a custom printer for messages. moby/moby#53489 api: Bump to 1.56. moby/moby#53425 minor cleanups, refactors. moby/moby#53509

GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538 POST /containers/c

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.7.2 milestone moby/moby, 29.7.2 milestone Bug fixes and enhancements Fix docker service create and docker service update p

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.7.1 milestone moby/moby, 29.7.1 milestone Bug fixes and enhancements Fix a regression that prevented pulling images whose

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.7.0 milestone moby/moby, 29.7.0 milestone New Add an experimental embedded-containerd feature that runs containerd inside

client/pkg/jsonmessage: Display: fix godoc link. moby/moby#53070 client: ServiceCreate, ServiceUpdate: fix duplicate and 'unkown' platforms. moby/moby#53012 client: ServiceInspect, ContainerCommit: omit optional query args if not set. moby/

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.6.2 milestone moby/moby, 29.6.2 milestone Security This release includes fixes for multiple security vulnerabilities affec

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.6.1 milestone moby/moby, 29.6.1 milestone Security This release includes fixes for multiple security vulnerabilities affec

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.6.0 milestone moby/moby, 29.6.0 milestone New POST /containers/{id}/update now supports per-device blkio resource settings

The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query

POST /containers/{id}/update now supports per-device blkio resource settingss. moby/moby#52651 The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an im

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.5.3 milestone moby/moby, 29.5.3 milestone Bug fixes and enhancements Reduce docker system df errors when images are pruned

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.5.2 milestone moby/moby, 29.5.2 milestone Bug fixes and enhancements Fix docker cp failing with "mkdirat: file exists" whe

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.5.1 milestone moby/moby, 29.5.1 milestone Security This release includes fixes for multiple security vulnerabilities affec

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.5.0 milestone moby/moby, 29.5.0 milestone [!NOTE] Rootless: gvisor-tap-vsock is now the new default rootless network drive

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.4.3 milestone moby/moby, 29.4.3 milestone Bug fixes CVE-2026-31431: Fix the 29.4.2 regression that broke 32-bit programs a

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.4.2 milestone moby/moby, 29.4.2 milestone Security This release includes hardening for CVE-2026-31431. Block AF_ALG socket

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.4.1 milestone moby/moby, 29.4.1 milestone Bug fixes and enhancements containerd image store: Fix docker image prune --filt

Bug fixes client: fix ImagePullResponse.Wait, ImagePushResponse.Wait not returning an error if pull/push errors happend during the pull operation. moby/moby#52305 Other daemon, client: diskUsage: explicitly exclude "-1" for containers. moby

api/docs: cleanup changelog. moby/moby#52379 api/docs: lower deprecation heading to a h4. moby/moby#52315 api/docs: restore API docs and change-logs for API v1.0 - v1.23. moby/moby#52312 api: align Topology swagger with Segments JSON shape.

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.4.0 milestone moby/moby, 29.4.0 milestone Bug fixes and enhancements docker cp: report both content size and transferred s

Bug fixes and enhancements api, client: add //go:fix inline directives to deprecated functions to help automatically migrating using go fix. moby/moby#52178 client/pkg/jsonmessage: add DisplayStream and DisplayMessages utils. moby/moby#5227

api/types/network: add Port.Port() method to return the port-number as a string. moby/moby#52165 api, client: add //go:fix inline directives to deprecated functions. moby/moby#52178 api, client: go.mod: remove patch version. moby/moby#52174

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.3.1 milestone moby/moby, 29.3.1 milestone Security This release includes fixes for multiple security vulnerabilities affec

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.3.0 milestone moby/moby, 29.3.0 milestone New Add bind-create-src option to --mount flag for bind mounts. docker/cli#6792

New client: ImageListOptions now supports Identity field. When set, the response includes manifest summaries and may include an Identity field for each manifest with trusted identity and origin information. moby/moby#52030 Bug fixes and enh

New GET /images/json now supports an identity query parameter. When set, the response includes manifest summaries and may include an Identity field for each manifest with trusted identity and origin information. moby/moby#52030 Bug fixes an

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.2.1 milestone moby/moby, 29.2.1 milestone Bug fixes and enhancements Update BuildKit to v0.27.1. moby/moby#51962 Fix docke

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.2.0 milestone moby/moby, 29.2.0 milestone New docker info now includes NRI section. docker/cli#6710 Add experimental NRI s

client/v0.2.2 Bug fixes and enhancements GET /events now also supports application/jsonl when negotiating content-type. moby/moby#51668 The http.Client value passed to client.WithHTTPClient() is now copied rather than mutated in-place. moby

api/v1.53.0 New GET /info now includes an NRI field. If the Node Resource Interface (NRI) is enabled, this field contains information describing it. moby/moby#51713 New Identity field has been added to the inspect endpoint to show trusted o

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.1.5 milestone moby/moby, 29.1.5 milestone Packaging updates Update Go runtime to 1.25.6. moby/moby#51860, docker/cli#6750

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.1.4 milestone moby/moby, 29.1.4 milestone Bug fixes and enhancements Fix docker run --network none panic on Windows. moby/