27.4.0-rc.1

This is a pre-release of the upcoming 27.4.0 release.

Pre-releases are intended for testing new releases: only install in a test environment!

curl -fsSL https://get.docker.com -o get-docker.sh
sudo CHANNEL=test sh get-docker.sh

Known issues:

• There is no changelog yet; an overview of pull requests included in this release can be found on GitHub:
  • docker cli: all pull requests for 27.4.0 / all "changelog" pull requests for 27.4.0
  • docker engine: all pull requests for 27.4.0 / all "changelog" pull requests for 27.4.0
• There are no packages available yet for the s390x and ppc64le architectures

Bugs and regressions can be reported in these issue trackers:

• Related to the CLI: https://github.com/docker/cli/issues
• Related to the Docker Engine https://github.com/moby/moby/issues

When reporting issues, include [27.4.0-rc] in the issue title

What's Changed

• [27.x backport] gha: add CodeQL Analysis workflow in [27.x backport] gha: add CodeQL Analysis workflow #48574
• [27.x backport] Dockerfile: update docker CLI to v27.3.1, compose to v2.29.7 in [27.x backport] Dockerfile: update docker CLI to v27.3.1, compose to v2.29.7 #48578
• [27.x backport] update to go1.22.8 in [27.x backport] update to go1.22.8 #48580
• [27.x backport] gha: buildkit: make sure expected Go version is installed in [27.x backport] gha: buildkit: make sure expected Go version is installed #48624
• [27.x backport] vendor assorted dependencies in preparation of BuildKit v0.17 in [27.x backport] vendor assorted dependencies in preparation of BuildKit v0.17 #48621
• [27.x backport] integration/build: remove TestBuildWithSession, and fsutil direct dependency in [27.x backport] integration/build: remove TestBuildWithSession, and fsutil direct dependency #48630
• [27.x backport] gha: add guardrails timeouts on all jobs in [27.x backport] gha: add guardrails timeouts on all jobs #48633
• [27.x backport] vendor: github.com/moby/buildkit v0.17.0-rc1 in [27.x backport] vendor: github.com/moby/buildkit v0.17.0-rc1 #48635
• [27.x backport] gha: restrict cross and bin-image to 20 minutes in [27.x backport] gha: restrict cross and bin-image to 20 minutes #48646
• [27.x backport] docs: api: document w (width) and h (height) query params as required in [27.x backport] docs: api: document w (width) and h (height) query params as required #48666
• [27.x backport] update links to API documentation in [27.x backport] update links to API documentation #48656
• [27.x backport] Set NODAD on bridge IPv6 addresses in [27.x backport] Set NODAD on bridge IPv6 addresses #48684
• [27.x backport] Enable bridge netfiltering if userland-proxy=false in [27.x backport] Enable bridge netfiltering if userland-proxy=false #48685
• [27.x backport] build: create distinct history db for each store in [27.x backport] build: create distinct history db for each store #48688
• [27.x backport] vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e in [27.x backport] vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e #48687
• [27.x backport] Touch-up some errors for missing platforms in [27.x backport] Touch-up some errors for missing platforms #48691
• [27.x backport] cmd/dockerd: Add workaround for OTEL meter leak in [27.x backport] cmd/dockerd: Add workaround for OTEL meter leak #48693
• [27.x backport] dockerd-rootless-setuptool.sh: let --force ignore smoke test errors in [27.x backport] dockerd-rootless-setuptool.sh: let --force ignore smoke test errors #48695
• [27.x backport] gha: more limits, update alpine version, and some minor improvements in [27.x backport] gha: more limits, update alpine version, and some minor improvements #48698
• [27.x backport] container: deprecate ErrNameReserved, ErrNameNotReserved, use errdefs instead in [27.x backport] container: deprecate ErrNameReserved, ErrNameNotReserved, use errdefs instead #48697
• [27.x backport] api: GET /images/json: preserve original manifest order in [27.x backport] api: GET /images/json: preserve original manifest order #48712
• [27.x backport] Fix: setup user chains even if there are running containers in [27.x backport] Fix: setup user chains even if there are running containers #48714
• [27.x backport] daemon: deprecate Daemon.Exists and Daemon.IsPaused in [27.x backport] daemon: deprecate Daemon.Exists and Daemon.IsPaused #48719
• [27.x backport] daemon: use OwnCgroupPath in withCgroups in [27.x backport] daemon: use OwnCgroupPath in withCgroups #48742
• [27.x backport] volume/mounts: fix anonymous volume not being labeled in [27.x backport] volume/mounts: fix anonymous volume not being labeled #48755
• [27.x] c8d/httpfallback: Handle connection errors in [27.x] c8d/httpfallback: Handle connection errors #48758
• [27.x backport] client: prevent idle connections leaking FDs in [27.x backport] client: prevent idle connections leaking FDs #48764
• [27.x backport] volume: VolumesService.Create: fix log-level for debug logs in [27.x backport] volume: VolumesService.Create: fix log-level for debug logs #48768
• [27.x] c8d/inspect: Fix duplicate RepoDigests in [27.x] c8d/inspect: Fix duplicate RepoDigests #48785
• [27.x backport] api/swagger: Improve description for platform in images/push in [27.x backport] api/swagger: Improve description for platform in images/push #48829
• [27.x] update to go1.22.9 in [27.x] update to go1.22.9 #48832
• [27.x] vendor: update buildkit to v0.17.1, pin github.com/microsoft/hcsshim to v0.11.x in [27.x] vendor: update buildkit to v0.17.1, pin github.com/microsoft/hcsshim to v0.11.x #48820
• [27.4] libnet: don't put external DNS answers in OTel spans in [27.4] libnet: don't put external DNS answers in OTel spans #48840
• [27.x backport] Dockerfile: update buildx to v0.18.0, compose to v2.30.3 in [27.x backport] Dockerfile: update buildx to v0.18.0, compose to v2.30.3 #48867
• [27.x backport] Increase test handler sleep, replace deprecated assert in [27.x backport] Increase test handler sleep, replace deprecated assert #48864
• [27.x backport] deprecate pkg/platform and move internal in [27.x backport] deprecate pkg/platform and move internal #48863
• [27.x]: Make log reading more robust to errors in [27.x]: Make log reading more robust to errors #48842

Full Changelog: v27.3.1...v27.4.0-rc.1