v2.35.1

What's Changed

🐛 Fixes

• Use bind API for bind mounts by @ndeloof in #12733
• Prefer bind API by @ndeloof in #12734

🔧 Internal

• CI(bin-image): free disk space by @crazy-max in #12732
• Fix zizmor security alerts on GHA workflows by @glours in #12737
• Chore: make function comment match function name by @dufucun in #12748
• Migrate to use github.com/moby/go-archive by @thaJeztah in #12716

⚙️ Dependencies

• Build(deps): bump github.com/moby/buildkit from 0.20.1 to 0.20.2 by @dependabot in #12667
• Build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @dependabot in #12691
• Build(deps): bump go.uber.org/mock from 0.5.0 to 0.5.1 by @dependabot in #12720
• Build(deps): bump golang.org/x/crypto from 0.32.0 to 0.35.0 by @dependabot in #12745
• Bump buildkit v0.21.0, buildx v0.23.0 by @thaJeztah in #12754
• Downgrade go-difflib and go-spew to tagged releases by @thaJeztah in #12755
• Bump github.com/docker/docker, github.com/docker/cli v28.1.0 by @thaJeztah in #12738

New Contributors

• @dufucun made their first contribution in #12748

Full Changelog: v2.35.0...v2.35.1

v2.35.0

What's Changed

🎉 1st implementation of external services feature to support Docker Model Runner in Compose by @ndeloof in #12692

✨ Improvements

• Set $PWD (may not be supported on Windows) by @ndeloof in #12643
• Introduce config --no-env-resolution by @ndeloof in #12665
• Introduce build --print to dump equivalent bakefile by @ndeloof in #12675
• Feat(run): Add --quiet and --quiet-build options for the run command by @idsulik in #12685
• Introduce volume.type=image by @ndeloof in #12725

🐛 Fixes

• Fix support for secret set by env inside included file by @ndeloof in #12635
• Fix edge-case bug checking path prefix in watch for bind mount volumes by @matiboux in #12640
• Run only loads required service env_file and ignores others by @ndeloof in #12645
• Fixed support for depends_on.restart in up and restart commands by @ndeloof in #12649
• Bake parses "${}" in DockerfileInline as a variable by @ndeloof in #12664
• Fix(secrets): Reverted secrets file mode 440 -> 444 by @idsulik in #12666
• Fix scale completion by @ndeloof in #12672
• Fix: replace docker-compose.yml with compose.yaml by @k-kbk in #12680
• Include implicit build dependencies in build command by @ndeloof in #12683
• Capture git fetch output when debug output is enabled by @ndeloof in #12719
• Mount API is not strictly equivalent to bind by @ndeloof in #12722

🔧 Internal

• Test commandName subcommand order by @maxproske in #12535
• Set watch option --prune=true as default by @remcokranenburg in #12650
• Plugin Docker Desktop Model Runner check by @glours in #12718
• pkg/compose: implement Export using atomicwriter by @thaJeztah in #12715
• Style: refactor Desktop client for readability and maintainability by @Saracomethstein in #12723

⚙️ Dependencies

• Build(deps): bump github.com/docker/buildx from 0.21.2 to 0.21.3 by @dependabot in #12646
• Build(deps): bump github.com/containerd/containerd/v2 from 2.0.3 to 2.0.4 by @dependabot in #12647
• Bump docker & cli v28.0.4 and buildx v0.22.0 by @ndeloof in #12674
• Bump golangci-lint to version v2.0.2 by @glours in #12689
• Bump golang to 1.23.8 by @glours in #12698
• Update secret detector to fix vulnerability https://github.com/golang… by @sigi-glovebox in #12707
• Build(deps): bump golang.org/x/sys from 0.31.0 to 0.32.0 by @dependabot in #12713
• Build(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 by @dependabot in #12712
• Build(deps): bump github.com/compose-spec/compose-go/v2 from 2.5.1-0.20250409070949-8e1a035095ca to 2.6.0 by @dependabot in #12729

New Contributors

• @matiboux made their first contribution in #12640
• @k-kbk made their first contribution in #12680
• @sigi-glovebox made their first contribution in #12707
• @Saracomethstein made their first contribution in #12723

Full Changelog: v2.34.0...v2.35.0

v2.34.0

What's Changed

✨ Improvements

• Support refresh pull policy by @ndeloof in #12568
• Introduced include to filter files considered by watch by @ndeloof in #12584
• Introduced --env-from-file in docker compose run command by @ndeloof in #12626
• Make publish a regular command of Compose by @glours in #12629

🐛 Fixes

• Build: only print COMPOSE_BAKE recommendation when disabled by @emersion in #12572
• Improve message suggesting using bake by @glours in #12612
• Fixed service: reference in additional_contexts for builds without bake by @ndeloof in #12582
• Block the publication of an OCI artifact if one or more services contain only a build section by @glours in #12597
• Display the location of OCI or GIT Compose stack download by @glours in #12595
• Refuse to publish compose file with local include by @ndeloof in #12600
• publishreject compose file with bind mounts by @ndeloof in #12601
• Display interpolation variables and their values when running a remote stack by @glours in #12604
• Publish compose file with required siblings used by extends by @ndeloof in #12606
• Add warning message when a remote configuration include an another remote config by @glours in #12610
• Only load env_file after services have been selected by @ndeloof in #12611
• Deprecate --y, prefer --yes by @ndeloof in #12623
• Use Defang secret-detector to identify potential secret leaks before publishing OCI artifacts by @glours in #12620

🔧 Internal

• Link to configuration file docs by @andrew-kramer in #12559
• Otel attribute to track builder implementation selected by @ndeloof in #12586
• Test version command by @maxproske in #12576
• Implement extends.file replace without yqlib by @ndeloof in #12615
• Add cli.isatty attribute to spans generated by compose by @landism in #12630
• Condense output of compose top by @dmke in #12628

⚙️ Dependencies

• Require go 1.23|1.24 (stable) by @ndeloof in #12571
• Build(deps): bump tags.cncf.io/container-device-interface from 0.8.0 to 0.8.1 by @dependabot in #12583
• Build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in #12578
• Build(deps): bump github.com/docker/cli from 28.0.0+incompatible to 28.0.1+incompatible by @dependabot in #12590
• Build(deps): bump github.com/docker/docker from 28.0.0+incompatible to 28.0.1+incompatible by @dependabot in #12591
• Build(deps): bump github.com/docker/buildx from 0.21.1 to 0.21.2 by @dependabot in #12598
• Build(deps): bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1 by @dependabot in #12599
• Build(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0 by @dependabot in #12607
• Build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0 by @dependabot in #12603
• Build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0 by @dependabot in #12608
• Build(deps): bump github.com/moby/buildkit from 0.20.0 to 0.20.1 by @dependabot in #12609
• Build(deps): bump tags.cncf.io/container-device-interface from 0.8.1 to 1.0.0 by @dependabot in #12617
• Bump compose-go to version v2.4.9 by @glours in #12633

New Contributors

• @emersion made their first contribution in #12572
• @andrew-kramer made their first contribution in #12559
• @landism made their first contribution in #12630
• @dmke made their first contribution in #12628

Full Changelog: v2.33.1...v2.34.0

v2.33.1

What's Changed

✨ Improvements

• Add support for gw_priority, enable_ipv4 (requires docker v28.0) by @thaJeztah in #12570

🐛 Fixes

• Run watch standalone if menu fails to start by @ndeloof in #12536
• Report error using non-file secret|config with read-only service by @ndeloof in #12531
• Don't display bake suggestion when using --progress with quiet or json option by @glours in #12561
• Fix pull --parallel and --no-parallel deprecation warnings missing by @maxproske in #12555
• Fix error message when detach is implied by wait by @ndeloof in #12566

⚙️ Dependencies

• build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot in #12556
• build(deps): bump google.golang.org/grpc from 1.68.1 to 1.70.0 by @dependabot in #12494
• go.mod: update to docker v28.0.0 by @thaJeztah in #12545

Full Changelog: v2.33.0...v2.33.1

v2.33.0

What's Changed

Important

This release introduce support for Bake to manage builds as an alternative to the internal buildkit client. This new feature can be enabled by setting COMPOSE_BAKE=1 variable. Bake will become the default builder in a future release.

✨ Improvements

• let user know bake is now supported by @ndeloof in #12524
• support additional_context reference to another service by @ndeloof in #12485
• add support for BUILDKIT_PROGRESS by @ndeloof in #12458
• add --with-env flag to publish command by @glours in #12482
• Update ls --quiet help description by @maxproske in #12541
• Publish warn display env vars by @glours in #12486

🐛 Fixes

• Fix bake support by @ndeloof in #12507
• Update link in stats --help output by @maxproske in #12523
• Properly handle "builtin" seccomp profile by @r-bk in #12478
• manage watch applied to mulitple services by @ndeloof in #12469

🔧 Internal

• use main branch for docs upstream validation workflow by @crazy-max in #12487
• fix provenance for binaries and generate sbom by @crazy-max in #12479
• add codeowners file by @glours in #12480
• remove exit code per error type used by legacy metrics system by @ndeloof in #12502
• Dockerfile: update golangci-lint to v1.63.4 by @thaJeztah in #12546
• Full test coverage for compatibility cmd by @maxproske in #12528
• don't send raw os.Args to opentelemetry but a pseudo command line by @ndeloof in #12530
• add docker engine v28.x to the test-matrix by @thaJeztah in #12539
• enable copyloopvar linter by @thaJeztah in #12542
• go.mod: remove toolchain directive by @thaJeztah in #12551

⚙️ Dependencies

• bump buildx v0.20.1 by @ndeloof in #12488
• bump docker to v27.5.1 by @ndeloof in #12491
• bump compose-go v2.4.8 by @ndeloof in #12543
• bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot in #12529
• bump github.com/moby/term v0.5.2 by @thaJeztah in #12540
• bump github.com/otiai10/copy from 1.14.0 to 1.14.1 by @dependabot in #12493
• bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0 by @dependabot in #12430
• bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by @dependabot in #12548
• bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot in #12547
• bump gotest.tools/v3 from 3.5.1 to 3.5.2 by @dependabot in #12549

New Contributors

• @r-bk made their first contribution in #12478
• @maxproske made their first contribution in #12523

Full Changelog: v2.32.4...v2.33.0

v2.32.4

What's Changed

This release fixes the version issue of v2.32.3

🔧 Internal

• ci: use local source for binary builds by @crazy-max in #12470
• ci: re-use local source to build binary images by @glours in #12471
• add missing tag for build during merge workflow by @glours in #12473

Full Changelog: v2.32.3...v2.32.4

v2.32.3

What's Changed

⚠️ This release don't display properly its version! Instead of displaying the tag the docker compose version display its commit hash.

🐛 Fixes

• Only override service mac if set on the main network. by @apollo13 (12439)
• Exclude one-off container running convergence by @ndeloof (12441)
• Can't render progress concurrently with buildkit by @ndeloof (12442)
• Image can be set to a local ID, that isn't a valid docker ref by @ndeloof (12446)

🔧 Internal

• CI: update bake-action to v6 by @crazy-max (12452)
• Simplification by @ndeloof (12451)

Full Changelog: v2.32.2...v2.32.3

v2.32.2

What's Changed

✨ Improvements

• Add --pull to run command by @glours (12397)

🐛 Fixes

• Only check bind mount conflict if sync action is involved by @ndeloof (12409)
• When retrying to resolveOrCreateNetwork, retry with a valid network name by @gtardif (12422)
• checkExpectedVolumes must ignore anonymous volumes by @ndeloof in #12410

🔧 Internal

• Gofumpt all the things by @ndeloof (12392)
• Use the 3 latest major versions of the engine to run e2e step by @glours (12401)
• Replace tibdex/github-app-token by official GitHub create-github-app-token by @glours (12411)

⚙️ Dependencies

• Bump Golang version to v1.22.10 and update CI actions by @glours (12399)
• Bump golang.org/x/net to v0.33.0 to fix potential security issue by @glours (12405)
• Bump compose-go to v2.4.7 by @glours (12438)

Full Changelog: v2.32.1...v2.32.2

v2.32.1

What's Changed

🐛 Fixes

• only check volume mounts for updated config by @ndeloof in #12386
• e2e test to prevent future regression by @ndeloof in #12389

Full Changelog: v2.32.0...v2.32.1

v2.32.0

What's Changed

✨ Improvements

• build with bake by @ndeloof in #12344
• introduce watch restart action by @ndeloof in #12375
• introduce sync+exec watch action by @ndeloof in #12330
• Recreate container on volume configuration change by @ndeloof in #12363

🐛 Fixes

• fix support for service.mac_address by @ndeloof in #12371
• pull --quiet should not drop status message, only progress by @ndeloof in #12358
• do not require a build section but for rebuild action by @ndeloof in #12343
• log configuration error as a watch log event by @ndeloof in #12359

🔧 Internal

• disable failing TestBuildSSH test by @ndeloof in #12349
• Make e2e tests pass locally by @glours in #12348

⚙️ Dependencies

• bump docker + buildx to latest release by @ndeloof in #12372
• bump otel dependencies to v1.28.0 and v0.53.0 to align with buildx, buildkit and engine versions by @glours in #12338
• build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0 by @dependabot in #12378
• build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0 by @dependabot in #12377
• build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1 by @dependabot in #12353
• build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 by @dependabot in #12352
• update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+ by @thaJeztah in #12366

Full Changelog: v2.31.0...v2.32.0