Docker Desktop

Docker Agent v1.128.0 Docker Offload v0.6.15 Docker Desktop CLI v0.4.4 Ask Gordon is now accessible as a right-side drawer, keeping users in context while chatting with Gordon alongside any page being viewed. A container, image, or volume row with a detected issue now shows an Ask Gordon symbol that starts a diagnosis in one click. Fixed a bug where generating a diagnostics bundle could hang until its timeout if a file it collects was on an unresponsive filesystem. Fixed an issue where changing the auto-pause timeout while Docker Desktop was already idle would not apply until the original timer expired. Fixed a crash in the Images view that occurred when many images loaded simultaneously on cold launch or after waking from Resource Saver mode. Fixed a Docker Desktop Dashboard crash issue. Fixes docker/desktop-feedback#611. Added support for starting and stopping a Kubernetes cloud cluster via Docker Offload, with configurable Kubernetes version and node count. The Docker Desktop Dashboard now displays the specific reason Docker Engine failed to start, when available. Fixed a bug where renameat2(RENAME_EXCHANGE) on a shared folder overwrote the target instead of swapping the two files. Fixed a bug where mmap() of a file on a Synchronized File Share failed with "No such device", breaking git and pnpm. Fixes docker/desktop-feedback#627. Fixed a bug where repeatedly replacing files on a shared folder leaked VM disk space until Docker Desktop was restarted. Fixes docker/desktop-feedback#619. Fixed a bug where a bind-mount root intermittently reported ownership as 0:0, causing git to report "detected dubious ownership". Fixes docker/desktop-feedback#628. Fixed an installer crash that occurred when the user's home folder was on a different disk than /Applications. Fresh installs and auto-updates now complete successfully in this configuration. Fixed startup failures caused by VZErrorInvalidVirtualMachineConfiguration due to stale file locks on Docker.raw and APFS disk metadata sync races. Fixed a startup hang where Docker Desktop would get stuck on 'Starting' after a WinGet upgrade due to conflicting engine settings in install-settings.json. The Docker VMM engine option is now always available and no longer flips engines shortly after startup while feature flags load. Fixed an issue where the noWindowsContainers setting in install-settings.json was cleared during a self-update, causing Windows containers to be re-enabled unexpectedly. Added a prompt during in-app updates for all-users installations, offering users the option to migrate to a per-user installation that requires no admin privileges for future updates. Fixed a bug where Docker Desktop could fail to start after an ungraceful shutdown left behind a stuck socket file. Docker Desktop now checks that a Windows host can run Docker VMM before switching to it, and offers to switch back instead of leaving no working engine. Fixed Docker VMM telling users to enable the Windows Hypervisor Platform feature when it was already enabled and the real cause was elsewhere. Fixed a bug where a failing third-party WSL plugin (for example the Microsoft Defender for Endpoint plug-in for WSL) was reported as a missing Docker Desktop disk instead of naming the plugin that blocked WSL from starting. Fixed the MSI installer ignoring ENGINE=docker-vmm, which left the Windows Hypervisor Platform feature disabled and the engine unselected. Fixed a bug where running the installer with only command-line flags and no install verb failed with exit code 4294967291 and no error message. Fixed a bug where Docker VMM did not explain how to fix an unavailable Windows Hypervisor Platform. Updated the Kind cloud provider image to v0.7.0, addressing CVE-2026-46595 and CVE-2026-39834.

Docker Compose v5.5.0 NVIDIA Container Toolkit v1.20.0 Docker Agent v1.127.0 Fixed an issue where background container and image polling was waking the Docker engine unnecessarily when Resource Saver mode was active. Fixed slow Zsh startup caused by duplicated Docker CLI completion setup in .zshrc. Docker Desktop now keeps a single completion block and removes existing duplicates. Fixes docker/desktop-feedback#561. Sidebar customization permanently is now available to all users. Right-click the left-hand navigation, select Customize, and then select, deselect, or re-order the tabs. Fixed the Disk usage slider in Settings to no longer show duplicate tick marks at small ranges, now displaying values in GiB with one decimal place for ranges up to 8 TiB. Fixed excessive update notifications in the notification center so that pop-ups only appear for failures or when user action is required, not during in-progress update steps. Fixed a dashboard crash issue. Fixes docker/desktop-feedback#611 When CONTAINERD_BUILDX_FOR_WINDOWS is enabled, Windows Containers now uses dockerd's embedded containerd and in-process BuildKit, replacing the standalone containerd and buildkitd services. Fixed a bug where Docker Desktop could fail to start after an ungraceful shutdown left behind a stuck socket file. Fixed a bug where Docker VMM did not explain how to fix an unavailable Windows Hypervisor platform.

Fixed an issue where opening the Dashboard would incorrectly redirect unauthenticated users to the sign-in prompt page.

Docker Agent v1.124.0 Docker Offload v0.6.13 Docker Model Runner v1.2.8 containerd v2.3.3 Runc v1.4.3 Fixed an issue where Docker Desktop reported enable fsverity failed: operation not supported as the crash cause instead of the real underlying error. Fixed a bug where changing the hypervisor type in Settings had no effect when Docker Desktop was in Resource saver mode. Fixed port bindings reported by docker ps to accurately reflect active listeners when using 'Localhost by default' or 'Localhost only' settings, and added [::1] loopback listener alongside 127.0.0.1. Fixed an HTTP 500 error that could occur during Docker Desktop startup or wake from idle-shutdown when the engine socket existed but was not yet listening. Fixed a bug where Docker Desktop would fail to start if ~/.docker/daemon.json was corrupted with null bytes (typically caused by a crash or power-loss during a settings save). Docker Desktop now automatically recovers to default daemon settings. Fixed an issue in the Docker Engine config editor in settings where validation error messages would disappear immediately while typing invalid JSON. Fixed a Docker VMM regression that reduced container inbound network throughput to roughly 0.3 GB per second. Fixed error messages shown when the Docker Desktop VM exits unexpectedly to include the exit status code and surface the actual root cause of the crash. Docker VMM can now use more than 28GiB of host memory. Fixed a Windows auto-update failure when a self-updated CLI plugin (e.g docker scout or docker agent) newer than the bundled version was already present in the user's CLI-plugins folder. Fixed an issue on per-user Windows installs where Hyper-V, Windows containers, and related settings are now correctly disabled and grayed out, preventing broken behavior caused by the unavailable priveleged helper service.

Docker Agent v1.122.0 Docker Buildx v0.36.1 Docker Offload v0.6.10 Docker Compose v5.4.0 Linux kernel v7.0.12 Fixed a bug where the in-app update failed with Source and destination path must have identical roots when Docker Desktop was installed to a custom directory on another drive. Fixed a misleading proxy error that named the destination server instead of the unreachable upstream proxy, and included machine-wide proxy configuration in diagnostics. Fixed a bug where updating could keep failing with a file exists error after an earlier update had failed. Fixed an issue where Gordon would lose access to tools and show misleading sign-in prompts after a failed auto-login at startup, without requiring a restart of Docker Desktop. Fixed a false Docker Desktop encountered an unexpected error dialog that could appear during VM shutdown on with the libkrun engine. Fixed a rare crash where the Docker Desktop with the Apple Virtualization Framework VM stopped unexpectedly right after a new connection was opened. Fixed WSL error recovery on Windows not displaying specific, actionable error messages for errors like HCS/0x80070569, showing the generic fallback instead. Fixed an issue on Windows where per-user .EXE installs applying an auto-update wrote install-settings.json to the system-wide path instead of the correct per-user location. Fixed an issue on Windows where diagnostic bundles were missing network connection profile data due to an empty Get-NetConnectionProfile.json file. Fixed a bug on Windows where Docker Desktop repeatedly asked users to run wsl --update when WSL was installed via the Microsoft Store rather than the inbox optional component. Fixed an issue where the Resource Saver settings section was incorrectly shown when using Windows containers instead of Linux containers. Fixed an issue on Windows where the disk image usage limit was hidden in Resources settings when Hyper-V was selected as the hypervisor. Fixed an issue on Windows where installer logs from per-user installations were missing from diagnostic bundles. Fixed the virtual disk limit not being applied when lowered on Windows with Hyper-V. Fixed the disk usage limit slider being hidden and ignored for the Docker VMM backend on Windows, so users can now set and enforce disk size in Settings > Resources > Advanced.

For Mac Fixed a rare crash where the Docker Desktop with the Apple Virtualization Framework VM stopped unexpectedly right after a new connection was opened. For Windows Fixed WSL error recovery on Windows not displaying specific, actionable error messages for errors like HCS/0x80070569, showing the generic fallback instead. Fixed an issue on Windows where per-user .EXE installs applying an auto-update wrote install-settings.json to the system-wide path instead of the correct per-user location. Fixed an issue on Windows where diagnostic bundles were missing network connection profile data due to an empty Get-NetConnectionProfile.json file. Fixed a bug on Windows where Docker Desktop repeatedly asked users to run wsl --update when WSL was installed via the Microsoft Store rather than the inbox optional component. Fixed an issue where the Resource Saver settings section was incorrectly shown when using Windows containers instead of Linux containers. Fixed an issue on Windows where the disk image usage limit was hidden in Resources settings when Hyper-V was selected as the hypervisor. Fixed an issue on Windows where installer logs from per-user installations were missing from diagnostic bundles. Fixed the virtual disk limit not being applied when lowered on Windows with Hyper-V. Fixed the disk usage limit slider being hidden and ignored for the Docker VMM backend on Windows, so users can now set and enforce disk size in Settings > Resources > Advanced. Fixed a Windows auto-update failure when a self-updated CLI plugin (docker scout or docker agent) newer than the bundled version was already present in the user's CLI-plugins folder. For all platforms Docker VMM Beta performance improvements by Docker's own container-optimized hypervisor. Available for Mac and Windows. Gordon now displays specific error messages for tool failures, policy-blocked actions, and loop detection instead of a generic Agent error. Fixed container stop timeouts and unless-stopped restart policies not being honored during engine shutdown. Fixed a bug where enabling Docker Offload from the Docker Desktop Dashboard failed when the proxy was configured by the operating system instead of by environment variables. Fixed a crash on startup after upgrading, for users whose settings file was written by a very old version. Fixed port forwarding for Swarm services that use automatically assigned published ports, including host-mode task ports and repeated ingress port definitions. Added a three-mode safety system (Strict, Balanced, Autonomous) to the Gordon AI agent's tool confirmation UI, replacing the previous binary approve/allow-all dialog, with risk-tier labels on confirmation. Fixed a flash of incorrect UI content on app launch, such as a brief 'Waiting for the Docker Engine...' screen or unexpected navigation away from gated pages. AF_UNIX sockets shared over VirtioFS now work in both directions (host to guest and guest to host). Fixed a bug where restarting the VM would steal the window focus. For Mac Fixed a bug where a Kubernetes (kind) cluster with Enhanced Container Isolation could fail to recover after a Docker Desktop restart. Fixed nftables fib expressions failing with "Operation not supported" in inet tables on Apple Silicon. For Windows Fixed an issue where the Windows installer reported success when it could not write its settings or enterprise policy files. Fixed Model Runner failing to start with CreateJobObject: Access is denied when Docker Desktop is launched via a Secondary Logon (run-as-user) session. Updated the bundled 7-Zip to 26.02 to avoid antivirus software quarantining it during an upgrade on Windows. For Linux Fixed Docker Desktop failing to start on Linux arm64 hosts due to incorrect QEMU binary path resolution. Security Addressed CVE-2026-17106, a destination-escape flaw in docker container cp.

For all platforms Fixed an issue where native crash reports were uploaded to Bugsnag even when analytics was disabled by the user. Fixed an issue where file content previews and diffs were hidden in the Gordon confirmation card when approving write or edit file actions. Fixed an issue where an invalid install-settings.json caused a ~7-minute startup delay before showing the error dialog. The error now appears immediately. Fixed an issue where Gordon's plan mode would silently revert to build mode after the first message, causing subsequent turns to run with full tool access despite plan mode appearing active. Fixed an issue where an invalid config.json at startup would delay the error dialog by up to 7 minutes instead of appearing within seconds. Fixed a Linux VM kernel panic that could hang Docker Desktop when a container's file watcher (inotify/fanotify) observed host-side changes to files on a bind mount. Fixed Docker Hardened Images CLI ampersands being encoded when outputting JSON to the console. Fixed a bug where extensions-related requests would fail on startup due to the extensions selector incorrectly defaulting to enabled before settings were loaded. Fixed an issue where sub-agent message attribution was lost when reloading a historical multi-agent Gordon session, causing sub-agent messages to appear as if produced by the main agent. Fixed Gordon's Clean up Docker suggestion prompt to propose a cleanup plan and wait for user confirmation before removing any resources, preventing unintended deletions. Fixed the Gordon AI plan-mode toggle visibility to accurately reflect backend support, showing only when the connected agent declares plan capability. For Windows Fixed a bug where per-user uninstalls of Docker Desktop on Windows failed with an unauthorized access error when attempting to revert the hosts file. Added per-user install mode as the default for fresh Docker Desktop installations from the Microsoft Store on Windows, removing the need for admin privileges. Fixed an issue where Docker Desktop crashed when the docker-users group is missing, now showing a recoverable group membership dialog instead. For Linux Removing files on a host bind mount inside an Enhanced Container Isolation container no longer fails with "Value too large for data type".

For all platforms Fixed a bug where an invalid ~/.docker/config.json caused Docker Desktop to hang with high CPU/memory and show no error dialog. Docker Desktop now surfaces an error dialog prompting the user to correct the file. Fixed a bug that prevented some Docker Hardened Images customizations from being created. Fixed a bug where deleting an unrelated credential ID could accidentally erase Docker Hub OAuth tokens, causing users to be unexpectedly signed out. Removed Docker Scout CLI hints that previously appeared after running docker pull or docker buildx build commands. For Windows Fixed a bug on Windows where an empty or malformed install-settings.json caused Docker Desktop to hang with high CPU/memory usage and no error dialog on startup. The MSI installer now detects per-user Docker Desktop installations on the machine and blocks installation with a clear message naming the affected users. Affected users must uninstall their per-user Docker Desktop before the MSI can be installed. Fixed a bug where uninstalling Docker Desktop could permanently lock the user out of their own application data directories if the deletion failed mid-way.

For all platforms Added support for migrating a per-machine Docker Desktop installation to a per-user installation in-place via install --user on Windows, preserving user data without requiring a manual uninstall. Fixed kubectl exec and kubectl attach functionality for v1.36. Fixed Docker Engine startup failures being reported as a generic io: read/write on closed pipe error instead of the underlying cause. Fixed the Images view showing 0 Bytes reclaimable size for a while when many images are present. Fixed the volumes list not correctly sorting by size. Fixed an issue where a GPU process crash prevented the Docker Desktop Dashboard from loading by automatically disabling hardware acceleration and restarting the app. Fixed an issue where docker ai sessions launched directly from a terminal were killed when Docker Desktop was restarted. Fixed an issue where a malformed daemon.json would be silently overwritten with defaults on startup, causing users to lose their custom daemon configuration. Added a Custom rules tab to Gordon's permissions dialog. Users can now add allow/deny rules for specific commands or MCP tools. Added pulsing discovery badges to Gordon's Plan mode button, model selector, and Feedback/Issues button to help users find new features. For Mac Fixed an issue where a stale com.docker.virtualization process could prevent Docker Desktop from starting a new VM with a VZErrorInvalidVirtualMachineConfiguration error. For Windows Fixed an issue where a failed delta update would leave users stranded on an old version by automatically falling back to the full installer. Fixed the Windows MSI installer reporting success when the component installation step actually failed. Fixed an issue where the Windows installer wizard froze while enabling Windows features via DISM during Docker Desktop installation. Fixed a UI thread deadlock in the Windows installer that caused a blank or hung window when prerequisite services were registered but not running during admin installs. Fixed the Windows installer silently reporting success when it could not install the Docker CLI plugins. Fixed the Windows installer deleting a previously installed CLI plugin when re-linking it failed. Fixed a bug where registry policy download failures were silently ignored, so users now see proper error reporting when the admin helper exits with a non-zero code. Changed the Windows installer to select a per-user installation by default. Fixed a WSL integration issue on WSL 2.6.x and later where Docker Desktop failed to work in user distros due to a 0-byte proxy binary, causing Permission denied or Exec format error. Fixed the Docker CLI in integrated WSL distributions breaking after Resource Saver stopped the VM. The VM now stays running while a WSL integration is active and wakes when one is enabled. Fixes docker/desktop-feedback#522. For Linux

For all platforms Added thumbs up and thumbs down feedback buttons to Gordon responses. Users can rate replies or report issues directly from the chat.

Fixed an error that caused volumes, images, and containers to fail to load in the Docker Desktop Dashboard. Removed the deprecated cagent binary from Docker Desktop; use docker agent instead. Kubernetes kind cluster now works with Registry Access Management. Fixed a bug where the sign-in/update prompt was not shown when upgrading between versions that cross a version digit boundary (e.g., 4.9.x to 4.10.x). Fixed an issue in Ask Gordon where the tool call permission dialog blocked the chat view, replacing it with an inline approval card so users can read Gordon's full message before approving or rejecting. Fixed a rare case where Docker Desktop could shut down if the build service crashed, for example during a factory reset. Fixed an issue where containers ignored user-configured stop timeouts during normal operation due to a proxy-level override forcing a 1-second timeout on all containers. Fixed Docker Desktop failing to start when the user's environment contained very long environment variables. Fixed a Docker Offload crash on Intel machines due to SG_READ_ONLY not being set in the __DATA_CONST segment, causing the system linker to fail to load the executable. Fixes docker/desktop-feedback#471. Fixed an issue on Windows where stopping Docker Desktop would immediately force off the Hyper-V VM without waiting for a graceful guest shutdown, reducing the risk of data corruption. Fixed a bug on Windows where dockerd failed to connect through the local HTTPS proxy due to a TLS handshake error caused by an incorrect proxy URL scheme. Fixed a Windows update that reverted and showed a Mismatch patch version error when it ran again after the target version was already installed. Fixed Resource Saver not stopping the Docker engine when running on WSL. Fixed a regression where Docker Desktop failed to start on WSL2 kernels that could not attach the Synchronized File Shares eBPF probes, such as Windows on Arm. Fixes docker/desktop-feedback#470. Fixed a bug where Docker Desktop would fail to start after a reset.

The experimental docker sandbox plugin has been removed. Migrate to docker sbx. Fixed an issue where running out of disk space showed a generic error dialog instead of a clear Disk full message prompting users to free up space and restart. Fixed an issue where using docker -c desktop-linux while a cloud context was active would silently route commands to the cloud engine instead of the local desktop Linux engine. Fixed a bug where the backend would incorrectly report a stopped VM as running after an idle shutdown, especially when Enhanced Container Isolation was enabled. Fixed an OS update notification timing issue where users with auto-download enabled were notified when an update was available rather than when it was ready to install. Removed the legacy osxfs file sharing. Users still on osxfs are migrated to VirtioFS. Increased VirtioFS filesharing performance by not persisting (fake) file ownership changes on the host. Calls to chown will succeed, but stat will not be affected. Fixed an issue where the Windows installer failed when the destination directory contained leftover files from a previous interrupted installation. Fixed an issue on Windows where upgrading Docker Desktop would unnecessarily shut down and unregister unrelated WSL distros via wsl --shutdown. Fixed spurious Hyper-V job failures on Windows where operations briefly transitioning through suspended or shutting down states were incorrectly reported as failed. Fixed an issue where the WSL engine failed to start with a Permission denied error on machines where the cross-distro WSL mount was configured as noexec. Fixed an issue on Windows where end users could override the NO_PROXY exclusion list even when an admin had locked the proxy configuration. Fixed an issue on Windows where Docker Desktop would silently disappear on startup failure. An error dialog is now displayed instead. Fixed an issue on Windows where Docker Desktop showed a generic engine-start failure instead of routing to the WSL update recovery when an older wsl.exe did not support the --version flag.

Added context-aware suggested questions to the Ask Gordon menu in the Containers, Images, Volumes, and Builds tabs, surfacing relevant diagnostics first when items are in a problematic state. Added a Give feedback link to Gordon so you can report issues with a redacted conversation preview or share product feedback. Fixed a React warning in Gordon's sidebar search input that appeared on the first keystroke when typing a search query. Fixed an issue where the Docker Engine settings editor displayed minified JSON instead of formatted JSON when first opened. Fixed spurious 500 errors for Docker API calls made right after the VM woke from idle shutdown. Fixed spurious 'Integrity issue detected' notifications caused by leftover symlinks from previously bundled binaries. Fixed a broken documentation link in the error screen shown when the current user is not a member of the docker-users group. Fixed a breaking change to the /app/settings/grouped API that caused integrations such as NVIDIA to stop working correctly. Fixed high CPU usage (~30%) on macOS Retina displays caused by SVG animations in the Gordon landing page. Fixed an issue where OAuth network errors caused Docker Desktop to incorrectly show users as signed out. Fixed an issue where signing in via OAuth would not display the user's username and email in the UI after login.

Docker Agent v1.73.0 docker pass v0.1.4 Credential helpers v0.9.8 Fixed an out-of-memory crash that would cause Docker Desktop to become unresponsive or crash while streaming logs in the Docker Desktop Dashboard. Improved update reliability by retrying stalled and transient download failures and resuming from the partially downloaded file. Added live streaming output to Gordon tool calls so long-running commands like docker compose up display STDOUT/STDERR in real time instead of waiting until completion. Added color-coded labels to the Logs view so each container and build source is visually distinguished by a unique color in both the log grid and the container-filter dropdown. Improved the error message when the Docker Desktop VM fails to start. It now shows the underlying VirtualizationFramework / libkrun reason instead of the generic Use of closed network connection. Fixed a bug where Docker CLI error messages were shown as raw JSON instead of human-readable text while Docker Desktop was in Resource Saver mode. Fixed a crash that occurred in the Logs view when deselecting a container filter. Fixed an issue where the support page was replaced by the no-virtualization override screen when accessed from the troubleshooting popover. Fixed an issue where Docker Desktop failed to start on bare metal EC2 instances (e.g. g4dn.metal) with a Nested virtualization not supported error. Increased the retry delay to accommodate transient rename failures caused by antivirus software holding file locks. Gordon now shows clear network error messages with guidance to check VPN, proxy, or firewall settings when outbound HTTPS to Docker's services is blocked, instead of a generic agent error. Fixed the Gordon AI model picker incorrectly showing an internal model identifier instead of Default for sessions with no explicit model selection. Fixed Docker Desktop getting stuck on Starting the Docker Engine… after an in-place upgrade. Fixed a bug where Docker Desktop was not restarted after a failed update was reverted to the previous version. Fixed delta updates failing to prepare. Fixed an issue on Hyper-V where Docker commands (e.g. docker login) would fail on the first attempt after the engine had been idle-shut-down or paused. Fixed an issue on Windows where Docker Desktop showed a generic engine-start failure instead of a clear, actionable error message when WSL is not installed.

You can now export log data from the Logs view. Docker Offload v0.6.3 Docker Buildx v0.34.1 Docker Agent v1.70.0 Docker MCP gateway v0.42.2 docker pass v0.1.2 containerd v2.2.4 DHI CLI (dhictl) v0.0.4 Docker Engine v29.5.3 Increased the retry delay to accommodate transient rename failures caused by antivirus software holding file locks. Marketplace extensions are now installed and updated by pinned manifest digest, instead of by tag, protecting against tag mutation after publication. Added Buildx version information to the About window. Added a case-sensitivity toggle to the Logs search bar which lets you switch between case-insensitive (default) and case-sensitive log filtering. Fixed a bug where the mouse wheel scroll was not working in the Logs view grid. Fixed an issue where the backend incorrectly exited with error code 150 on clean shutdown via SIGINT or SIGTERM, causing false failure signals. Removed the bundled hub-tool binary from Docker Desktop. Added working Authenticate and Cancel buttons to the MCP OAuth authorization chat bubble in Gordon, letting you complete or decline OAuth sign-in flows from MCP servers. Added two new commands to docker pass: Use docker pass run to inject secrets into host commands. Use docker pass plugins for dynamic plugin management. Fixed a regression where docker cp into a container with Enhanced Container Isolation (ECI) enabled set file ownership to nobody:nogroup. Fixed an issue on Windows where Docker Desktop would get stuck on Starting the Docker Engine... after a failed WSL distro registration left a VHDX on disk. Fixed a backend shutdown hang in Windows Containers mode that caused Docker Desktop to take a long time or fail to exit cleanly.

Docker Model Runner now supports registry mirrors. Docker Desktop Build v0.35.0 Docker Agent v1.62.0 NVIDIA Container Toolkit v1.19.1 Docker Compose v5.1.4 Docker Offload v0.5.93 Docker Scout CLI v1.21.0 docker pass v0.0.29 Addressed CVE-2026-8936, a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event. The docker sbom command has been deprecated and will be removed in a future release. Use the docker scout sbom command instead. Fixed a race condition in Docker Engine when Resource Saver was active. Fixed a bug where anonymous Docker volumes were leaked each time a kind cluster was deleted, causing orphaned volumes to accumulate. Fixed column resizing in the All Logs grid so that Timestamp and Object columns no longer expand unexpectedly, and column widths are now preserved across navigation sessions. Fixed an issue where Docker Desktop failed to start when a VM disk resize operation encountered an error, even if the underlying filesystem was healthy. Fixed an issue that caused Docker Desktop to hang when quit. Fixed a bug where CPU and RAM resource totals could get stuck showing 0 in the Docker Desktop Dashboard after stopping or starting Docker Offload. Fixed a flicker in Gordon where the final answer text would briefly appear inside the working group before jumping to the response bubble. Fixed a daemon panic that could occur during concurrent sign-out and token refresh operations. Fixed a bug where the Volumes view showed incorrect mount targets for containers with multiple volumes. docker pass now has a --force flag on the set command. docker --help now shows docker pass. Fixed stale API cache responses (synthetic 404s) for containers, images, networks, volumes, and plugins after restarting an idle-stopped engine via external API calls. Fixed a bug where the Delete button on the Builds view might not be visible immediately after selecting a build. Fixes docker/desktop-feedback#329 and fixes docker/desktop-feedback#330. Fixed time-namespaces being unavailable when Enhanced Container Isolation (ECI) is enabled. Fixed a regression where the --quiet installer flag did not suppress the install-type dialog during silent installation. Fixed a bug on Windows where a stale PID file with a trailing newline prevented the lingering daemon from being killed, leaving Windows Containers mode unconfigurable. Fixed an issue on Windows where triggering an update while another installer instance was already running showed a generic error instead of a specific message. Fixed an issue on Windows where the installer and updater executables incorrectly triggered UAC elevation prompts due to Windows heuristic installer detection. Fixed double separator in the tray menu when running in Windows container mode. Fixed port-binding failures on Windows Hyper-V where docker run -p 0:N could allocate HNS-reserved ports, causing bind errors. Fixed garbled taskkill error messages in logs on non-English Windows systems (For example, Chinese Windows using GBK encoding). Fixed unbounded growth of the WSL2 ISO cache. Old docker-desktop.iso and docker-wsl-cli.iso entries are now removed when a new version is installed. Fixes docker/desktop-feedback#419.

Docker Offload v0.5.92 Docker Engine v29.5.2 Docker Buildx v0.34.0 Removed the Docker Scout view and disabled Scout-related OS notifications and notification popups. Added support for time namespacing in ECI protected containers. Fixed a bug where the http_proxy environment variable could prevent kind clusters from pulling local images.

Gordon is now generally available. New usage plans are also available. Paid Gordon plans unlock higher usage limits. Fixed a bug where Docker Desktop's own Electron helper processes (GPU, renderer, utility) were incorrectly detected and killed as lingering processes on startup when launching from the Start menu, causing a crash loop. Fixed an issue where the View build logs toggle in Logs view display settings was reset after restarting Docker Desktop instead of persisting the user's preference. Docker Extensions is now disabled by default. Fixed published ports being inaccessible when a container is also connected to a Swarm overlay network. Fixes docker/for-mac#7854. Fixed dashboard TLS failures in some corporate environments. Improved GUI security via content hash validation. Added support for Ubuntu 26.04.

Fixed a bug where Docker Desktop's own Electron processes were incorrectly killed when launching from the Start menu. Fixes docker/desktop-feedback#367.

Fixed Cmd+Q (Mac) and Ctrl+Q (Windows/Linux) not fully quitting Docker Desktop. Fixes docker/for-mac#7833. Fixed a bug where canceling docker load left a containerd ref lock held, causing subsequent loads of the same image to fail. Fixed an issue where Docker Desktop made unnecessary network requests to mcp.docker.com on sign-in when MCP Toolkit was disabled, causing unexpected proxy authentication prompts. Fixed an issue where the search input in Gordon's session sidebar would not close if it was left empty. Improved Docker Desktop handling of transient rename failures caused by antivirus software accessing those files simultaneously. Fixed excessive memory usage on Apple Silicon Macs by improving the Linux VM's ability to return freed container memory back to the host OS. Fixed a bug where containers received connections with a corrupted source IP when another container had an active outbound connection to an IP in the same subnet range. Fixes docker/for-mac#7824.

The Logs view is now generally available. New installations of Docker Desktop for Windows have a choice between per-user (Beta) or all-user installs. The Extensions settings page now includes a security notice that extensions run with host-level privileges and are not audited by Docker. Fixed CVE-2026-31431 ("copy.fail") by backporting an upstream Linux kernel patch that prevents an unprivileged container user from gaining root inside the container via a controlled write into the host VM page cache. Improvements to Docker Offload idle notifications. Fixed the Open Gordon in TUI button not working due to a missing run subcommand in Docker Agent command arguments. Fixed an issue where transient network errors or Docker Hub server errors during sign-in would unexpectedly sign users out instead of retrying automatically. Improved data refresh for the Containers, Images, and Volumes screens by fetching up-to-date data on demand when navigating to those screens, reducing background polling load. Fixed a kernel crash that could occur when changing filesharing technology after significant container file activity. Enable the OpenAI Responses API (/responses) endpoint in Docker Model Runner. Fixed a bug where users were unexpectedly signed out of Docker Desktop mid-flow when signing in via docker login using OAuth. Fixed a bug on Windows where selecting the Docker Desktop taskbar icon multiple times could spawn multiple backend processes. Re-selecting the icon while Docker Desktop is running now brings the dashboard to focus. Fixed a race condition on Windows that caused a false-positive "processes still running" dialog to appear when Docker Desktop starts or exits normally. Support for RHEL 8 has been dropped.

Docker Model Runner is now disabled by default and must be explicitly enabled in Settings. When enabled, TCP host-side support is automatically active. Fixed an issue where downloading a Docker Desktop update would fail without a clear error if the disk had insufficient free space. Fixed an issue where Docker Scout tag recommendations, when inspecting an image, failed when the base image digest or repository name was empty. Added a Switch to local Docker context button on the sign-in screen, allowing users in a cloud context to switch back to their local context without signing in. Added a dedicated Stopped status screen for the cloud engine so users see a clear stopped state instead of an error screen when transitioning away from Docker Offload. Fixed an issue where error tracking would temporarily continue sending session data directly after a user disabled analytics. Fixes docker/for-mac#7768. Fixed a critical issue where Docker Desktop Dashboard failed to open with ERR_FAILED errors caused by process hardening policies conflicting with Chromium. Fixed a bug where Kubernetes could fail to start on WSL 2 when HTTP_PROXY environment variables are set in WSL 2 itself. Fixed a bug in Enhanced Container Isolation (ECI) that was causing loss of container rootfs persistence across Docker Desktop restarts, when using WSL. Addressed CVE-2026-5843, container-to-host code execution in the Docker Model Runner MLX inference backend via MLX-LM model_file importlib loading.

Added a CLI hint that surfaces the Logs view when running logs, compose logs, compose attach, or compose up commands, giving you quick access to logs across all running containers. Available with the Logs (Beta) feature enabled. Fixed a bug where docker login could fail silently in CI environments due to slow Docker Hub responses causing credential store update timeouts. Fixed an issue where disabling Beta features also disabled Docker Model Runner. Fixed docker desktop start causing the Docker AI agent API daemon to fail due to an inherited CLI plugin environment variable. Fixed a crash loop where Docker Desktop repeatedly failed to start with exit status 42 after an update due to a corrupted DockerAppLaunchPath setting. Fixed an issue where a failed update could leave Docker Desktop in a broken state. The installer now automatically reverts to the previous version and shows a clear error message. Fixed a bug where stopping one container could disrupt active Unix socket forwards belonging to other running containers. Fixed an issue where a failed update could leave Docker Desktop in a broken state. The installer now automatically reverts to the previous version and shows a clear error message. Fixed a bug where a failed switch to Windows containers could leave Docker Desktop in a broken state, requiring a restart. Fixed an issue where Docker Desktop failed to launch for users with DEVHOME set in their environment. Temporarily rolled back process hardening that caused Electron crashes on Windows. Fixes docker/desktop-feedback#245.

Fixed an issue where docker logout from the CLI was ignored by Docker Desktop when OAuth tokens remained in the credential store, leaving the user unexpectedly signed in. Fixed an issue where Docker Desktop could unexpectedly sign users out when unrelated credential updates, docker login, or transient network errors triggered a sign-out. Fixed a data loss issue where backup data could be deleted during a failed restore operation, leaving users with no data.

Gordon now has persistent local memory, allowing it to remember your preferences and context across sessions. Fixed a deadlock in Enhanced Container Isolation that caused containers to hang indefinitely during creation when ECI was enabled. Added a warning banner to alert when an MCP server is community-provided and has not been verified by Docker. Added a persistent Show timestamps toggle to the Logs view, allowing timestamps to be hidden in both table and visualiser views across sessions. Fixed an issue where Docker Desktop frontend processes were not properly terminated on quit. Fixed a deadlock when settings controlled by admins reload that could cause Docker Desktop to become unresponsive during sign in or sign out operations. Fixed a bug where Docker Desktop could fail to start due to uncorrectable filesystem errors on the disk image not being repaired. Fixed a bug that caused Enhanced Container Isolation (ECI) to inadvertently block startup of Kubernetes clusters. Fixed an issue where a failed volume size fetch could make the Volumes view inaccessible; container counts on volumes now correctly exclude bind mounts. Fixed race conditions in volume backup that could cause containers to be incorrectly restarted, export logs to be corrupted, or runtime panics when scheduling tasks. Fixed a crash in the API cache that occurred when containers with no names caused a panic disrupting container listing. Fixed a bug where starting a container could fail with ENOENT if a bind-mount parent directory was deleted while no container was using it. Fixed a security vulnerability where tampered user-deployed config profiles could bypass organization sign-in enforcement. Fixed a bug where a failed vmnetd handshake could dispatch a bogus command on a broken connection, causing unexpected networking errors. Fixed a bug where the Docker Desktop Dashboard could be prematurely displayed when restoring to a fullscreen state on launch. Fixed nested bind mounts showing empty child mount content on VirtioFS when using Docker Compose with multiple services sharing a volume. Fixes docker/desktop-feedback#264. Fixed an issue where the installer extraction did not update the progress bar and could take around 5 minutes, depending on the machine. Extraction is now ~60% faster and includes proper progress updates. Fixed a race condition where container ports would sometimes not be published correctly after container start, affecting ephemeral ports, --publish-all, and gateway IP bindings. Fixed an issue where a failed WSL distro move could leave the distro unregistered. Addressed CVE-2026-5817, container-to-host code execution in the Docker Model Runner vllm-metal inference backend via unsandboxed trust_remote_code tokenizer loading.

Docker Model Runner now supports Qwen3.5. With the new Logs (Beta) view, you can now filter container logs by Compose stack. Improved interaction with Settings while the Docker engine or Kubernetes is starting or stopping. Fixed a bug where random UDP port bindings reported port 0 instead of the actual assigned port. Fixed an issue with the Docker Desktop shortcut not reopening the Dashboard when Docker Desktop was already running. Fixed an issue where the Add to existing profile dialog showed profiles that already contained all selected MCP servers in the dropdown. Fixed intermittent exec format error when starting amd64 containers on Apple Silicon Macs due to a race condition between Rosetta binfmt registration and virtiofs device availability. Fixed Hyper-V being silently re-enabled on every EXE upgrade for WSL 2 users. Fixed an MSI installer bug where Docker Desktop processes could be left running after uninstall. Fixed an issue on Windows where installations or updates using --installation-dir would fail due to the installer archive being extracted into the custom installation directory. Improved Docker Desktop startup time on Windows by several seconds when using WSL 2. Fixed a bug on the Models > Logs screen which caused docker-model processes to accumulate on Windows each time the screen was visited. Addressed CVE-2026-33990, SSRF in Docker Model Runner OCI Registry Cli

Docker Engine v29.3.0 NVIDIA Container Toolkit v1.19.0 Gordon improvements: Provides pre-filled prompts when deeplinking from command-line failure hints. Prevents Docker Hub rate limiting by authenticating before making requests. Fixed a Kubernetes pod discovery hang when the kube context is broken or unreachable. Fixed a terminal crash caused by an undefined dimensions error during terminal resize. Fixed volume backup export error handling for file, image, and registry export operations. Fixed high CPU usage in the Windows API proxy caused by unnecessary process enumeration. Fixed the Windows MSI installer failing to update Docker Desktop. Versions between 4.56 and 4.65 need to uninstall before reinstalling version 4.66 or later. Note that uninstalling removes all associated data.

Added a new Logs view where you can explore logs from all sources in one unified view. (Beta) Gordon hints now appear when docker build, docker run, or docker compose commands fail, offering contextual suggestions. Community MCP servers now support OAuth authentication directly in the UI. Added the docker dhi CLI plugin for managing Docker Hardened Images. Docker Scout CLI v1.20.1 Docker Agent v1.29.0 Docker Buildx v0.32.1 Kubernetes now defaults to kind for new clusters. Fixed update progress bar not resuming correctly. Improved startup time by skipping docker-users group check when using WSL2 backend.

Docker Compose v5.1.0 Docker Scout CLI v1.20.0 Docker Agent v1.27.1 Fixed a bug in MCP Toolkit where disabling all tools in a profile would enable all tools. Fixed the docker ai command stopping after a Docker Agent update. Fixed Gordon session title flickering when hover buttons appeared. Improved Gordon summary rendering and reduced narrative verbosity. Fixed a bug where docker ai CLI commands did not correctly shell out to Docker Agent. Fixed the OAuth tab in Docker MCP Toolkit not showing entries from all catalogs. Improved MCP Catalog search. Fixed the Build logs tab not retaining search terms and filters when switching tabs. Fixed Kind container startup to be more reliable. Improved update error reporting with more descriptive diagnostics. Improved update reliability by preparing the updated Docker.app under Application Support instead of /tmp.

Added SLSA v1 provenance support in the Builds view. Kubernetes v1.34.3 Linux kernel v6.12.72 Enhanced the proxy settings UI and added a separate proxy for containers. Fixed an issue where community registry MCP catalogs failed to load when a server's config object contained "required": null. Fixed an issue where mcp-gateway would hang when fetching secrets from the Secrets Engine while the Docker Desktop VM was in Resource Saver mode. Rebranded "Docker AI" references to "Gordon". Improved startup time on Windows.

With Docker MCP Toolkit, you can now use profiles to organize your MCP servers into named collections. You can also create custom catalogs — curated collections of servers for your team or organization. Linux kernel v6.12.69 Fixed an issue where background update checks did not respect the Automatically check for updates setting when disabled. Fixes docker/for-mac#

You can now customize the left-hand navigation to show only the tabs that matter to you, and hide the ones that don't. Linux kernel v6.12.68 Docker Engine v29.2.1 Docker Sandbox v0.12.0 Added automated image caching to prevent re-downloading images unnecessarily. Added Shell mode for blank coding agent sandboxes. Added support for OpenCode. Added support for mounting multiple workspaces. Added experimental Linux support (single user only, UID 1000). Added support for running in WSL 2. Sandboxes now start in the current working directory if no path is provided.

Added a new docker desktop diagnose command to gather diagnostics. Fixed ping6 host.docker.internal. Enabled landlock LSM. Improved agent system prompt with network access documentation

Fixed an issue where CPU usage could spike at regular intervals. Fixes docker/for-mac#7839.

Linux kernel v6.12.67 Docker Compose v5.0.2 Docker Sandbox v0.10.1 Docker Buildx v0.31.1 Added Neo4j as a known publisher to the Docker MCP Catalog. Fixed an issue where the Models tab would crash when displaying requests made via the Anthropic Messages API. Fixed an issue where shared file permissions could be unintentionally modified when using DockerVMM. Fixes docker/for-mac#7830. Fixed an issue where container secrets injection could fail with docker-pass. Temporarily disabled VHDX compaction for the WSL data disk to improve stability. Fixed a security issue in enhanced container isolation where Docker socket mount permissions could be bypassed when using the --use-api-socket flag.

Fixed an issue where CPU usage could spike at regular intervals. Fixes docker/for-mac#7839.

A new version of Docker Sandboxes is now available on Docker Desktop. It provides a secure, isolated, microVM-based environment for running coding agents. Linux kernel v6.12.65 Credential helpers v0.9.5 Docker Engine v29.1.5 Docker Model Runner now exposes an Anthropic-compatible API. Docker Desktop now supports UTF-8 BOM for admin-settings.json and registry.json. Fixed an issue where admin settings incorrectly changed user proxy settings after a restart.

Security Fixed CVE-2025-14740 where the Docker Desktop for Windows installer contained multiple incorrect permission assignment vulnerabilities in the handling of the C:\ProgramData\DockerDesktop directory. New Docker Desktop now has a new issue tracker for all platforms at https://github.com/docker/desktop-feedback. Relevant, actively discussed issues from the previous platform-specific trackers will be migrated. Updates Docker Compose v5.0.1 Bug fixes and enhancements For all platforms Improved alignment of the Ask Gordon streaming indicator so it stays in sync with content on large screens. Fixed a bug where docker debug failed on containers started with environment variables but no '='. For example, docker run -e NONEXISTENT_ENV_VAR.

New Docker Desktop now includes Docker Compose v5 which introduces a new official Go SDK. This SDK provides a comprehensive API that lets you integrate Compose functionality directly into your applications, allowing you to load, validate, and manage multi-container environments without relying on the Compose CLI. For more information, see the Compose SDK docs. Updates containerd v2.2.1 Docker Compose v5.0.0 Docker Agent v1.18.6 Bug fixes and enhancements For all platforms Fixed a panic in filesharing tests when containers don't have an IP address immediately after starting. Added support for custom DNS entries in the LinuxKit VM with the ExtraDNSEntries configuration field. For Windows Fixed a bug on Windows where removing the state directory would fail because log files were still open

Docker Engine v29.1.3 Docker Agent v1.15.1 Fixed an issue that caused Docker Desktop to get stuck during startup. Improved the error message when the daemon.json is invalid. Fixed performance issues on every keystroke within a long Ask Gordon session. Fixed an issue that prevented Kubernetes in kubeadm mode from starting up when an organization has configured Registry Access Management to block Docker Hub.

Added support for vLLM in Docker Model Runner on Windows with WSL2 and NVIDIA GPUs. Fixed a bug where /dev/shm did not have enough permission for containers to write into. Fixes docker/for-mac#7804. Docker Buildx v0.30.1 Docker Engine v29.1.2 Runc v1.3.4 Docker Model Runner CLI v1.0.2 Added a security patch to address CVE-2025-13743 where Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization.

Fixed an issue where the Support Diagnostics tooling inadvertently captured expired Docker Hub authorization bearer tokens. Added security patches to address CVEs 2025-52565, 2025-52881, and 2025-31133 when using Enhanced Container Isolation.

Added new port binding settings to Docker Desktop. This can also be controlled by administrators via Settings Management using the admin-settings.json file. Added a new Docker Model Runner command. With docker model purge you can remove all your models.

New You can now set up your Kubernetes resources from the Kubernetes view. This new view also provides a real-time display of your pods, services, and deployments. Upgrades Docker Engine v28.5.2 Linux kernel v6.12.54 Bug fixes and enhancements For all platforms Kind now only pulls required dependency images if they are not available locally.

New Dynamic MCP(Experimental) is now available in Docker Desktop. Introduced a new Welcome Survey to improve onboarding. New users can now provide information to help tailor their Docker Desktop experience. Upgrades Docker Compose v2.40.3 NVIDIA Container Toolkit v1.18.0 Bug fixes and enhancements For all platforms Docker Desktop now detects and attempts to avoid clashes between the "Docker subnet" and physical networks using RFC1918 addresses. For example if