v5.0.0-rc.2

What's Changed

• Next release will be major version v5.x by @ndeloof in #13375
• images command should display image Created time or N/A if not available by @ndeloof in #13376

Full Changelog: v5.0.0-rc.1...v5.0.0-rc.2

v5.0.0-rc.1

What's Changed

This is the first (candidate) release for next major Docker Compose release.
To avoid confusion with the "v2" and "v3" legacy compose file formats, we decided to directly jump to version 5.x

Major changes in this release:

• Compose can now officially be used as a SDK to be integrated into third-party softwares
• Internal builder has been removed, build is delegated to Docker Bake (same as docker build command)

✨ Improvements

• Document use as a SDK by @ndeloof in #13350
• Setup Compose service using functional parameters by @ndeloof in #13312
• drop support for internal buildkit builder by @ndeloof in #13056
• document support for OCI and Git remote resources by @ndeloof in #13362
• introduce --insecure-registry, reserved for testing purpose by @ndeloof in #13355
• add (restore) support for detach keys by @ndeloof in #13369

🐛 Fixes

• fix(run): Ensure images exist only for the target service in run command by @idsulik in * fix typo in error message by @stasadev in #13328
  #13325

🔧 Internal

• fix various linting issues by @thaJeztah in #13326

⚙️ Dependencies

• bump compose-go to version v2.9.1 by @glours in #13332
• build(deps): bump github.com/containerd/platforms from 1.0.0-rc.1 to 1.0.0-rc.2 by @dependabot[bot] in #13353
• build(deps): bump github.com/moby/buildkit from 0.25.1 to 0.25.2 by @dependabot[bot] in #13359
• build(deps): bump github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible by @dependabot[bot] in #13361
• build(deps): bump github.com/containerd/containerd/v2 from 2.1.4 to 2.2.0 by @dependabot[bot] in #13358
• build(deps): bump github.com/docker/cli from 28.5.1+incompatible to 28.5.2+incompatible by @dependabot[bot] in #13360
• build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 by @dependabot[bot] in #13367
• build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 by @dependabot[bot] in #13368

New Contributors

• @tonyo made their first contribution in #13314
• @stasadev made their first contribution in #13328
• @JLesDev made their first contribution in #13366

Full Changelog: v2.40.2...v5.0.0-rc.1

v2.40.3

What's Changed

🐛 Fixes

• Fix OCI compose override support by @ndeloof #13311
• Fix help output for "exec --no-tty" option by @tonyo #13314
• Prompt default implementation to prevent a panic by @ndeloof #13317
• Run hooks on restart by @ndeloof #13321
• Fix(run): Ensure images exist only for the target service in run command by @idsulik #13325
• Fix(git): Fix path traversal vulnerability in git remote loader by @idsulik #13331

🔧 Internal

• Test to check writeComposeFile detects invalid OCI artifact by @ndeloof #13309
• Code Cleanup by @ndeloof #13315

⚙️ Dependencies

• Bump compose-go to version v2.9.1 by @glours #13332

Full Changelog: v2.40.2...v2.40.3

v2.40.2

What's Changed

🐛 Fixes

• Compose can't create a tar with adequate uid:gid ownership by @ndeloof in #13299
• Test digest or canonical reference, not only tag, when checking if an image is already present by @glours in #13302

🔧 Internal

• Fail build if minimal required version of buildx isn't installed by @ndeloof in #13295
• remove unused code to only rely on api.Service by @ndeloof in #13300
• Introduce WithPrompt to configure compose backend to use a plugable UI component for user interaction by @ndeloof in #13308

Full Changelog: v2.40.1...v2.40.2

v2.40.1

What's Changed

🐛 Fixes

• Write error to watcher error channel if Start() fails by @Trolldemorted in #13263
• Fix: set PWD only if not set by @kianelbo in #13268
• bake only interpolates ${*} by @ndeloof in #13270
• Fix: make "publish" push all compose files addressed in "extends" statements when using "profiles". by @ogoulpeau-ledger in #13277
• Support Ctrl+Z to run compose in background by @ndeloof in #13289
• Fix race-condition bug in publish command by @paul-kinexon in #13291
• Set secret/config uid:gid to match container's USER by @ndeloof in #13288
• Fix failure to delegate build with bake by @ndeloof in #13275
• Make CTRL+Z a no-op operation on Windows by @glours in #13293

🔧 Internal

• pkg/compose: align classic builder implementation with docker/cli by @thaJeztah in #13278
• pkg/compose: build with bake: drop support for buildx v0.16 and lower by @thaJeztah in #13280
• Use fixed version of compose bridge transformer images by @glours in #13284

⚙️ Dependencies

• Build(deps): bump github.com/docker/docker from 28.5.0+incompatible to 28.5.1+incompatible by @dependabot[bot] in #13274
• Build(deps): bump github.com/docker/cli from 28.5.0+incompatible to 28.5.1+incompatible by @dependabot[bot] in #13273
• Build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by @dependabot[bot] in #13272
• Build(deps): bump docker/buildx v0.29.1, moby/buildkit v0.25.1 by @thaJeztah in #13279
• Bump golang to version 1.24.9 by @glours in #13285

New Contributors

• @Trolldemorted made their first contribution in #13263
• @ogoulpeau-ledger made their first contribution in #13277
• @paul-kinexon made their first contribution in #13291

Full Changelog: v2.40.0...v2.40.1

v2.40.0

What's Changed

✨ Improvements

• publish Compose application as compose.yaml + images by @ndeloof in #13257

🐛 Fixes

• resolve secrets based on env var before executing bake by @ndeloof in #13237
• pass bake secrets by env by @ndeloof in #13249
• escape $ in bake.json as interpolation already has been managed by cpmpose by @ndeloof in #13259

🔧 Internal

• pkg/compose: remove uses of deprecated mitchellh/mapstructure module by @thaJeztah in #13239
• pkg/watch: remove unused IsWindowsShortReadError by @thaJeztah in #13052
• pkg/compose: build: remove permissions warning on Windows by @thaJeztah in #13236
• pluginMain: remove uses of DockerCLI.Apply by @thaJeztah in #13240
• use containerd registry client by @ndeloof in #13245
• provider services: use '--project-name=' notation by @glours in #13250
• gha: update test-matrix: remove docker 26.x by @thaJeztah in #13254
• pkg/compose: explicitly map AuthConfig fields instead of a direct cast by @thaJeztah in #13253
• cmd/compose: fix minor linting issues by @thaJeztah in #13252
• use containerd client for OCI operations by @ndeloof in #13251

⚙️ Dependencies

• build(deps): bump github.com/docker/docker, docker/cli v28.5.0-rc.1 by @thaJeztah in #13241
• build(deps): bump github.com/docker/docker from 28.5.0-rc.1+incompatible to 28.5.0+incompatible by @dependabot[bot] in #13260
• build(deps): bump github.com/docker/cli from 28.5.0-rc.1+incompatible to 28.5.0+incompatible by @dependabot[bot] in #13261

Full Changelog: v2.39.4...v2.40.0

v2.39.4

What's Changed

✨ Improvements

• Add support of develop.watch.initial_sync attribute by @glours in #13232

🐛 Fixes

• Volume ls command can run without a project by @ndeloof in #13221
• Fix support for build with bake when target docker endpoint requires TLS by @ndeloof in #13231
• Disable Tty if run command started from a piped command by @glours in #13233

🔧 Internal

• Test: Set stop_signal to SIGTERM by @ricardobranco777 in #13214

⚙️ Dependencies

• Bump compose-go to version v2.9.0 by @glours in #13234

New Contributors

• @ricardobranco777 made their first contribution in #13214

Full Changelog: v2.39.3...v2.39.4

v2.39.3

What's Changed

✨ Improvements

• Add completions for the --progress flag by @m4rch3n1ng in #13158

🐛 Fixes

• Add --provenance and --sbom flag to generated bake command line, by @glours in #13147
• Fix runtime operations failing when env file is missing by @maxproske in #13156
• Check the assume yes publish flag command before the presence of bind mounts by @glours in #13151
• Fix: incorrect time when last tag time is not set by @kianelbo in #13171
• Fix sigint/sigterm support in logs --follow by @ndeloof in #13193
• Prefer application container vs one-off running exec without index by @ndeloof in #13178
• Only force plain mode build if progress is set to auto by @ndeloof in #13181
• Only propagate os.Env to bake, not the whole project.Environment by @ndeloof in #13180
• Detect container is restarted by @ndeloof in #13210
• Fix run --build support for service:* reference in additional_context by @ndeloof in #13183
• Detect compose run wit --host and set DOCKER_HOST accordingly running bake by @ndeloof in #13182

🔧 Internal

• Refactor to use maps.Copy by @cuiweixie in #13174
• Replace most uses of hashicorp/go-multierror for stdlib by @thaJeztah in #13176
• pkg/compose: composeService.Up: rewrite without go-multierror by @thaJeztah in #13177
• Use enum-consts for State and Health by @thaJeztah in #13186
• Unquote volume names in creation events by @rrjjvv in #13188
• pkg/compose: use state consts from moby API by @thaJeztah in #13216
• Document (hidden) --tty --interactive flags by @ndeloof in #13201

⚙️ Dependencies

• go.mod: github.com/docker/buildx v0.27.0 by @thaJeztah in #13170
• Build(deps): bump go.uber.org/mock from 0.5.2 to 0.6.0 by @dependabot[bot] in #13162
• go.mod: bump buildkit v0.24.0-rc1, buildx v0.28.0-rc1 by @thaJeztah in #13185
• Build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in #13184
• go.mod: bump buildx v0.28.0-rc2, buildkit v0.24.0-rc2 by @thaJeztah in #13197
• Build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9 by @dependabot[bot] in #13195
• Build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @dependabot[bot] in #13198
• go.mod: bump github.com/docker/docker, docker/cli v28.4.0 by @thaJeztah in #13168
• Build(deps): bump github.com/docker/buildx from 0.28.0-rc2 to 0.28.0 by @dependabot[bot] in #13207
• Build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10 by @dependabot[bot] in #13200
• Bump golang to version 1.24.7 by @glours in #13219
• Build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 by @dependabot[bot] in #13218
• Build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0 by @dependabot[bot] in #13217
• Bump compose-go to version v2.8.2 by @glours in #13220

New Contributors

• @cuiweixie made their first contribution in #13174
• @m4rch3n1ng made their first contribution in #13158
• @kianelbo made their first contribution in #13171
• @rrjjvv made their first contribution in #13188

Full Changelog: v2.39.2...v2.39.3

v2.39.2

What's Changed

🐛 Fixes

• Fix (regression): compose build render build output with tty support by @ndeloof in #13107
• Add missing _MODEL suffix to model variable pass to dependent services of a model by @glours in #13109
• Apply BUILDKIT_PROGRESS value when building with bake by @glours in #13110
• Define pull and no_cache from either service or flags values when building with bake by @glours in #13133
• Only monitor attached services on up command by @glours in #13114

🔧 Internal

• Add Streams Comment by @suwakei in #13103
• Add test of json.go by @suwakei in #13106
• Refactoring of redundant condition checks by @suwakei in #13104
• Eliminated magic string by @suwakei in #13105
• Use log API for containers we didn't attached to by @ndeloof in #13111
• Use cli-plugins/metadata package by @thaJeztah in #13130
• pkg/compose: simplify getting auth-config key by @thaJeztah in #13120
• Add go as a prerequisite in build instructions by @mattrunyon in #13131

⚙️ Dependencies

• Build(deps): bump github.com/docker/cli from 28.3.2+incompatible to 28.3.3+incompatible by @dependabot[bot] in #13116
• Build(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible by @dependabot[bot] in #13115
• Build(deps): bump github.com/containerd/containerd/v2 from 2.1.3 to 2.1.4 by @dependabot[bot] in #13119
• Build(deps): bump github.com/docker/go-connections from 0.5.0 to 0.6.0 by @dependabot[bot] in #13137
• Build(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 by @dependabot[bot] in #13138
• Bump golang to 1.23.12 by @austinvazquez in #13142

New Contributors

• @mattrunyon made their first contribution in #13131
• @austinvazquez made their first contribution in #13142

Full Changelog: v2.39.1...v2.39.2

v2.39.1

What's Changed

🔧 Internal

• Add info about models usage to OpenTelemetry spans by @glours in #13094

⚙️ Dependencies

• Bump compose-go to v2.8.1 by @glours in #13096

Full Changelog: v2.39.0...v2.39.1