Sourced fromgithub.com/docker/docker's releases.

v27.4.0

27.4.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 27.4.0 milestone
• moby/moby, 27.4.0 milestone

API

• GET /images/json with themanifests option enabled now preserves the original order in which manifests appeared in the manifest-index.moby/moby#48712

Bug fixes and enhancements

• When reading logs with thejsonfile orlocal log drivers, any errors while trying to read or parse underlying log files will cause the rest of the file to be skipped and move to the next log file (if one exists) rather than returning an error to the client and closing the stream. The errors are viewable in the Docker Daemon logs and exported to traces when tracing is configured.moby/moby#48842
• When reading log files, compressed log files are now only decompressed when needed rather than decompressing all files before starting the log stream.moby/moby#48842
• Fix an issue that meant published ports from one container on a bridge network were not accessible from another container on the same network withuserland-proxy disabled, if the kernel'sbr_netfilter module was not loaded and enabled. The daemon will now attempt to load the module and enablebridge-nf-call-iptables orbridge-nf-call-ip6tables when creating a network with the userland proxy disabled.moby/moby#48685
• Fix loading ofbridge andbr_netfilter kernel modules.moby/moby#48966
• containerd image store: Fix Docker daemon failing to fully start with a "context deadline exceeded error" with containerd snapshotter and many builds/images.moby/moby#48954
• containerd image-store: Fix partially pulled images not being garbage-collected.moby#48910,moby/moby#48957
• containerd image store: Fixdocker image inspect outputting duplicate references inRepoDigests.moby/moby#48785
• containerd image store: Fix not being able to connect to some insecure registries in cases where the HTTPS request failed due to a non-TLS related error.moby/moby#48758
• containerd image store: Remove a confusing warning log when tagging a non-dangling image.moby/moby#49010
• dockerd-rootless-setuptool.sh: let --force ignore smoke test errorsmoby/moby#48695
• Disable IPv6 Duplicate Address Detection (DAD) for addresses assigned to the bridges belonging to bridge networks.moby/moby#48684
• Remove BuildKit init timeout.moby/moby#48963
• Ignore "dataset does not exist" error when removing dataset on ZFS.moby/moby#48968
• Client: Prevent idle connections leaking FDs.moby/moby#48764
• Fix anonymous volumes being created through the--mount option not being marked as anonymous.moby/moby#48755
• After a daemon restart with live-restore, ensure an iptables jump to theDOCKER-USER chain is placed before other rules.moby/moby#48714
• Fix a possible memory leak caused by OTel meters.moby/moby#48693
• Create distinct build history db for each store.moby/moby#48688
• Fix an issue that caused excessive memory usage when DNS resolution was made in a tight loop.moby/moby#48840
• containerd image store: Do not underline names indocker image ls --tree.docker/cli#5519
• containerd image store: Change name ofUSED column indocker image ls --tree toIN USE.docker/cli#5518
• Fix a bug preventing image pulls from being cancelled duringdocker run.docker/cli#5654
• Port some completions from the bash completion to the new cobra based completion.docker/cli#5618
• Thedocker login anddocker logout command no longer update the configuration file if the credentials didn't change.docker/cli#5569
• Optimisedocker stats to reduce flickering issues.docker/cli#5588,docker/cli#5635
• Fix inaccessible plugins paths preventing plugins from being detected.docker/cli#5652
• Add support forevents --filter in cobra generated shell completions.docker/cli#5614
• Fix bash completion forevents --filter daemon=.docker/cli#5563
• Improve shell-completion of containers fordocker rm.docker/cli#5540
• Add shell-completion for--platform flags.docker/cli#5540
• rootless: Make/etc/cdi and/var/run/cdi accessible by the Container Device Interface (CDI) integration.moby/moby#49027

Removed

• DeprecateDaemon.Exists() andDaemon.IsPaused(). These functions are no longer used and will be removed in the next release.moby/moby#48719
• Deprecatecontainer.ErrNameReserved andcontainer.ErrNameNotReserved.moby/moby#48697

... (truncated)

• 92a8393 Merge pull request#49027 from thaJeztah/27.x_backport_cdi-rootless
• 9163aa3 Merge pull request#49026 from thaJeztah/27.x_update_go_1.22.10
• 4775621 Dockerd rootless: make {/etc,/var/run}/cdi available
• 0176f4a Merge pull request#49024 from thaJeztah/27.x_vendor_buildkit_0.17.3
• 0e34b39 update to go1.22.10
• 7919b80 [27.x] vendor: github.com/moby/buildkit v0.17.3
• a92d4c5 Merge pull request#49013 from vvoland/49006-27.x
• 1cc1274 Merge pull request#49010 from vvoland/49009-27.x
• 525b929 registry: deprecate RepositoryInfo.Class
• d6d43b2 c8d/tag: Don't log a warning if the source image is not dangling
• Additional commits viewable incompare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)