Docker Compose Release Notes & Changelog

update to go1.26.10
These releases include 1 security fix following the security policy:

• crypto/x509: mitigation for security concerns with a specific Certificate Authority

We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation.

Verify will now filter out chains which contain these intermediates, preventing them from being returned to the caller.

We highly recommend immediately upgrading to this release.

This is CVE-2026-111943 and Go issue https://go.dev/issue/82345.

Full Changelog: https://github.com/docker/compose/compare/v5.6.0..

…

What's Changed

ℹ️ This release adds partial support for jobs: only manually-triggered jobs are supported for now, scheduled jobs are not yet available. Full job support will land once the corresponding Docker Engine support is merged.

✨ Improvements

Jobs

• Adopt compose-go jobs and container-spec layering by @ndeloof in https://github.com/docker/compose/pull/14093

Provider services

• Feat(provider): get-service-config provider request by @ndeloof in https://github.com/docker/compose/pull/14175

…

What's Changed

✨ Improvements

• Feat(hooks): capture and surface lifecycle hook output by @glours in https://github.com/docker/compose/pull/14091
• Feat(tracing): surface otel shutdown errors via --debug by @htoyoda18 in https://github.com/docker/compose/pull/14152

🐛 Fixes

• Fix(events): validate service names before subscribing to events by @glours in https://github.com/docker/compose/pull/14076
• Fix: bake target names collision for services differing by . vs _ by @ndeloof in https://github.com/docker/compose/pull/14058

…

What's Changed

ℹ️ This release overhauls image digest reconciliation to prevent unnecessary container recreation.
Existing containers may be recreated the first time you run compose up after upgrading, as image digests are re-evaluated using the new logic.
compose pull now honors pull_policy refresh windows (daily, weekly, every_N).

✨ Improvements

• New image digest reconciliation process by @glours & @ndeloof https://github.com/docker/compose/pull/14011 https://github.com/docker/compose/pull/14041

🐛 Fixes

• Fix(bridge): skip pulling default image references for build-only ser… by @ericwyles in https

…

What's Changed

ℹ️ This release introduces a new way to reconcile resources such as volumes and networks

✨ Improvements

• Feat(reconcile): model volume recreation in the plan by @ndeloof in https://github.com/docker/compose/pull/13962
• Feat(reconcile): model network lifecycle in the plan by @ndeloof in https://github.com/docker/compose/pull/13966

🐛 Fixes

• Fix(reconcile): preserve zero-replica services during hashing by @junhaoliao in https://github.com/docker/compose/pull/13931
• Fix(config): warn when service selection is silently ignored by @glours in https://github.com/docker/compose/pull/13950

…

What's Changed

🔧 Internal

• Ci: add concurrency group to pr-review-trigger to prevent duplicate reviews by @derekmisler in https://github.com/docker/compose/pull/13890
• Fix grammar in Attestations field comment by @blackflytech in https://github.com/docker/compose/pull/13891
• Ci: remove unused desktop-edge-test workflow by @thaJeztah in https://github.com/docker/compose/pull/13897
• Ci: zizmor workflow by @crazy-max in https://github.com/docker/compose/pull/13901
• Ci: fix docs-upstream workflow by @crazy-max in https://github.com/docker/compose/pull/13912

…

What's Changed

ℹ️ This release introduces native support for init containers.

✨ Improvements

• Pre start init containers by @glours in https://github.com/docker/compose/pull/13862

🐛 Fixes

• Fix(oci): route authorizer token fetches through provided transport by @glours in https://github.com/docker/compose/pull/13873
• Fix(run): scope Running events to project.Services by @glours in https://github.com/docker/compose/pull/13883

🔧 Internal

• Chore: migrate cagent-action to docker-agent-action (v2.0.0) by @docker-agent in https://github.com/docker/compose/pull/13869

…

What's Changed

ℹ️ This version introduces a new reconciliation algorithm between the observed state and the expected state.
If you experience any issues with a Compose workload that was previously working, please open an issue.

✨ Improvements

• Reconciliation plan by @ndeloof & @glours in https://github.com/docker/compose/pull/13830
• Add rawsetenv message type for provider plugins by @rajyan in https://github.com/docker/compose/pull/13742

🐛 Fixes

• Fix(build): skip remote URL contexts from bake fs.read allowlist by @ndeloof in https://github.com/docker/compose/pull/13816

…

What's Changed

✨ Improvements

• feat: add stop lifecycle hook for external providers by @glours in https://github.com/docker/compose/pull/13779

🐛 Fixes

• fix: route OCI artifact pulls through Docker Desktop HTTP proxy by @glours in https://github.com/docker/compose/pull/13770
• fix: restore stoppingEvent/stoppedEvent helpers for plugin stop hook by @glours in https://github.com/docker/compose/pull/13794
• fix(publish): flag literal inline environment values by @glours in https://github.com/docker/compose/pull/13760

🔧 Internal

• ci: remove unused e2e job from merge workflow by @glours in https://github.com/do

…