Docker Engine v29.4.0

29.4.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 29.4.0 milestone
• moby/moby, 29.4.0 milestone

Bug fixes and enhancements

• docker cp: report both content size and transferred size. docker/cli#6800
• Fix docker stats --all still showing containers that were removed. docker/cli#6863
• Fix a rare bug that could cause containers to become unremovable. moby/moby#51724
• Fixed privileged containers losing their explicit AppArmor profile (--security-opt apparmor=<profile>) after a container restart. moby/moby#52215
• Improved duplicate container-exit handling by using live containerd task state (not timestamps). moby/moby#52156
• Improved image pull and push performance by enabling HTTP keep-alive for registry connections, avoiding redundant TCP and TLS handshakes. moby/moby#52198
• shell completions: add shell completion for docker rm --link and exclude legacy links for container names. docker/cli#6872
• shell completions: don't provide completions that were already used. docker/cli#6871
• Update runc (in static binaries) to v1.3.5. moby/moby#52244
• Windows: Fix DOCKER_TMPDIR not being respected. moby/moby#52181

Packaging updates

• Update BuildKit to v0.29.0. moby/moby#52272

Networking

• Prevent a daemon crash during startup after upgrading if a container config containers a malformed IP-address. moby/moby#52275

Go SDK

• cli/streams: Out, In: preserve original os.File when available. docker/cli#6906
• Update minimum go version to go1.25. docker/cli#6897

Deprecations

• Go SDK: cli-plugins/hooks: deprecate HookMessage and rename to cli-plugins/hooks.Response. docker/cli#6859
• Go SDK: cli-plugins/hooks: deprecate HookType and rename to cli-plugins/hooks.ResponseType. docker/cli#6859
• Go SDK: cli-plugins/manager: deprecate HookPluginData and move to cli-plugins/hooks.Request. docker/cli#6859