23.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 23.0.2 milestone
• moby/moby, 23.0.2 milestone

Bug fixes and enhancements

• Fully resolve missing checks for apparmor_parser when an AppArmor enabled kernel is detected. containerd/containerd#8087, moby/moby#45043
• Ensure that credentials are redacted from Git URLs when generating BuildKit buildinfo. Fixes CVE-2023-26054. moby/moby#45110
• Fix anonymous volumes created by a VOLUME line in a Dockerfile being excluded from volume prune. moby/moby#45159
• Fix a failure to properly propagate errors during removal of volumes on a Swarm node. moby/moby#45155
• Temporarily work around a bug in BuildKit COPY --link by disabling mergeop/diffop optimization. moby/moby#45112
• Properly clean up child tasks when a parent Swarm job is removed. moby/swarmkit#3112, moby/moby#45107
• Fix Swarm service creation logic so that both a GenericResource and a non-default network can be used together. moby/swarmkit#3082, moby/moby#45107
• Fix Swarm CSI support requiring the CSI plugin to offer staging endpoints in order to publish a volume. moby/swarmkit#3116, moby/moby#45107
• Fix a panic caused by log buffering in some configurations. containerd/fifo#47, moby/moby#45051
• Log errors in the REST to Swarm gRPC API translation layer at the debug level to reduce redundancy and noise. moby/moby#45016
• Fix a DNS resolution issue affecting containers created with --dns-opt or --dns-search when systemd-resolved is used outside the container. moby/moby#45000
• Fix a panic when logging errors in handling DNS queries originating from inside a container. moby/moby#44980
• Improve the speed of docker ps by allowing users to opt out of size calculations with --size=false. docker/cli#4107
• Extend support for Bash completion to all plugins. docker/cli#4092
• Fix docker stack deploy failing on Windows when special environment variables set by cmd.exe are present. docker/cli#4083
• Add forward compatibility for future API versions by considering empty image tags to be the same as <none>. docker/cli#4065
• Atomically write context files to greatly reduce the probability of corruption, and improve the error message for a corrupt context. docker/cli#4063

Packaging

• Upgrade Go to 1.19.7. docker/docker-ce-packaging#857, docker/cli#4086, moby/moby#45137
• Upgrade containerd to v1.6.19. moby/moby#45084, moby/moby#45099
• Upgrade Buildx to v0.10.4. docker/docker-ce-packaging#855
• Upgrade Compose to v2.17.2. docker/docker-ce-packaging#867