chore(deps): update dependency docker/compose to v5.4.0 #127

2026-08-03T17:04:55+02:00

CSRBot commented

2026-08-03 17:04:55 +02:00

This PR contains the following updates:

Package	Update	Change
docker/compose	minor	`5.3.1` → `5.4.0`
docker/compose	minor	`v5.3.1` → `v5.4.0`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

docker/compose (docker/compose)

`v5.4.0`

Compare Source

What's Changed

ℹ️ This release introduces a new way to reconcile resources such as volumes and networks

✨ Improvements

Feat(reconcile): model volume recreation in the plan by @ndeloof in #13962
Feat(reconcile): model network lifecycle in the plan by @ndeloof in #13966

🐛 Fixes

Fix(reconcile): preserve zero-replica services during hashing by @junhaoliao in #13931
Fix(config): warn when service selection is silently ignored by @glours in #13950
Fix(build): use platform image-manifest digest, not attested index by @glours in #13949
Fix(oci): honor --insecure-registry when up re-loads the model by @ptrdom in #13894
Fix(config): pin type:image volume sources and pre_start hook images by @glours in #13956
Tolerate missing env file on more runtime commands by @maxproske in #13603
Resolve pre_start hook images alongside service images by @ndeloof in #13937
Fix(cp): return non-nil Content from dry-run CopyFromContainer by @glours in #13982
Fix(config): apply config flags to --services/--volumes/--networks/--models/--hash by @glours in #13979
Fix: tolerate missing env file on scale, watch and shell completion by @glours in #13973

🔧 Internal

README: remove Go Report Card badge by @thaJeztah in #13926
Docs: adopt AGENTS.md standard, symlink CLAUDE.md to it by @glours in #13871
Dockerfile: update golang image to alpine 3.23 by @thaJeztah in #13921
Docs: require dated AI_AGENT_DISCLOSURE.md, drop committed copy by @glours in #13976
CI: publish images to Docker Hub using OIDC by @glours in #13994

⚙️ Dependencies

Build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by @dependabot[bot] in #13942
Build(deps): bump the docker-actions group across 1 directory with 4 updates by @dependabot[bot] in #13941
Build(deps): bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in #13943
Build(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 by @dependabot[bot] in #13948
Build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #13927
Build(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot[bot] in #13928
Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.13.0 to 1.14.0 in the docker-actions group by @dependabot[bot] in #13953
Build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #13922
Build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 by @dependabot[bot] in #13955
Build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #13960
Build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in the go_modules group across 1 directory by @dependabot[bot] in #13961
Build(deps): bump github.com/docker/cli from 29.6.1+incompatible to 29.6.2+incompatible by @dependabot[bot] in #13968
Build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 by @dependabot[bot] in #13981
Build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #13970
Build(deps): bump github.com/moby/buildkit from 0.31.1 to 0.31.2 by @dependabot[bot] in #13969
Bump compose-go to version v2.14.0 by @glours in #13983
Bump go-archive to version v0.3.0 by @glours in #13986
Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.14.0 to 1.15.0 in the docker-actions group by @dependabot[bot] in #13989
Chore(deps): bump github.com/moby/go-archive v0.3.2 by @thaJeztah in #13991
Update to go1.26.5 by @thaJeztah in #13920
Build(deps): bump actions/stale from 10.4.0 to 11.0.0 by @dependabot[bot] in #13996
Build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml from 2.0.2 to 2.0.3 in the docker-actions group by @dependabot[bot] in #13995
Build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in #13984
Chore(deps): github.com/docker/buildx v0.36.0, buildkit v0.32.0 by @glours in #13975
Bump buildkit v0.32.1 by @glours in #13997

New Contributors

@junhaoliao made their first contribution in #13931

Full Changelog: https://github.com/docker/compose/compare/v5.3.1...v5.4.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker/compose](https://github.com/docker/compose) | minor | `5.3.1` → `5.4.0` | | [docker/compose](https://github.com/docker/compose) | minor | `v5.3.1` → `v5.4.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/110) for more information. --- ### Release Notes <details> <summary>docker/compose (docker/compose)</summary> ### [`v5.4.0`](https://github.com/docker/compose/releases/tag/v5.4.0) [Compare Source](https://github.com/docker/compose/compare/v5.3.1...v5.4.0) ##### What's Changed > ℹ️ This release introduces a new way to reconcile resources such as volumes and networks ##### ✨ Improvements - Feat(reconcile): model volume recreation in the plan by [@ndeloof](https://github.com/ndeloof) in [#13962](https://github.com/docker/compose/pull/13962) - Feat(reconcile): model network lifecycle in the plan by [@ndeloof](https://github.com/ndeloof) in [#13966](https://github.com/docker/compose/pull/13966) ##### 🐛 Fixes - Fix(reconcile): preserve zero-replica services during hashing by [@junhaoliao](https://github.com/junhaoliao) in [#13931](https://github.com/docker/compose/pull/13931) - Fix(config): warn when service selection is silently ignored by [@glours](https://github.com/glours) in [#13950](https://github.com/docker/compose/pull/13950) - Fix(build): use platform image-manifest digest, not attested index by [@glours](https://github.com/glours) in [#13949](https://github.com/docker/compose/pull/13949) - Fix(oci): honor --insecure-registry when `up` re-loads the model by [@ptrdom](https://github.com/ptrdom) in [#13894](https://github.com/docker/compose/pull/13894) - Fix(config): pin type:image volume sources and pre\_start hook images by [@glours](https://github.com/glours) in [#13956](https://github.com/docker/compose/pull/13956) - Tolerate missing env file on more runtime commands by [@maxproske](https://github.com/maxproske) in [#13603](https://github.com/docker/compose/pull/13603) - Resolve `pre_start` hook images alongside service images by [@ndeloof](https://github.com/ndeloof) in [#13937](https://github.com/docker/compose/pull/13937) - Fix(cp): return non-nil Content from dry-run CopyFromContainer by [@glours](https://github.com/glours) in [#13982](https://github.com/docker/compose/pull/13982) - Fix(config): apply config flags to `--services`/`--volumes`/`--networks`/`--models`/`--hash` by [@glours](https://github.com/glours) in [#13979](https://github.com/docker/compose/pull/13979) - Fix: tolerate missing env file on scale, watch and shell completion by [@glours](https://github.com/glours) in [#13973](https://github.com/docker/compose/pull/13973) ##### 🔧 Internal - README: remove Go Report Card badge by [@thaJeztah](https://github.com/thaJeztah) in [#13926](https://github.com/docker/compose/pull/13926) - Docs: adopt `AGENTS.md` standard, symlink `CLAUDE.md` to it by [@glours](https://github.com/glours) in [#13871](https://github.com/docker/compose/pull/13871) - Dockerfile: update golang image to alpine `3.23` by [@thaJeztah](https://github.com/thaJeztah) in [#13921](https://github.com/docker/compose/pull/13921) - Docs: require dated `AI_AGENT_DISCLOSURE.md`, drop committed copy by [@glours](https://github.com/glours) in [#13976](https://github.com/docker/compose/pull/13976) - CI: publish images to Docker Hub using OIDC by [@glours](https://github.com/glours) in [#13994](https://github.com/docker/compose/pull/13994) ##### ⚙️ Dependencies - Build(deps): bump github/codeql-action/upload-sarif from `4.36.2` to `4.37.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13942](https://github.com/docker/compose/pull/13942) - Build(deps): bump the docker-actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#13941](https://github.com/docker/compose/pull/13941) - Build(deps): bump actions/stale from `10.3.0` to `10.4.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13943](https://github.com/docker/compose/pull/13943) - Build(deps): bump github.com/mattn/go-shellwords from `1.0.13` to `1.0.14` by [@dependabot](https://github.com/dependabot)\[bot] in [#13948](https://github.com/docker/compose/pull/13948) - Build(deps): bump golang.org/x/sync from `0.21.0` to `0.22.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13927](https://github.com/docker/compose/pull/13927) - Build(deps): bump golang.org/x/sys from `0.46.0` to `0.47.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13928](https://github.com/docker/compose/pull/13928) - Build(deps): bump docker/github-builder/.github/workflows/bake.yml from `1.13.0` to `1.14.0` in the docker-actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#13953](https://github.com/docker/compose/pull/13953) - Build(deps): bump google.golang.org/grpc from `1.81.1` to `1.82.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13922](https://github.com/docker/compose/pull/13922) - Build(deps): bump softprops/action-gh-release from `3.0.1` to `3.0.2` by [@dependabot](https://github.com/dependabot)\[bot] in [#13955](https://github.com/docker/compose/pull/13955) - Build(deps): bump actions/setup-go from `6.5.0` to `7.0.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13960](https://github.com/docker/compose/pull/13960) - Build(deps): bump google.golang.org/grpc from `1.82.0` to `1.82.1` in the go\_modules group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#13961](https://github.com/docker/compose/pull/13961) - Build(deps): bump github.com/docker/cli from `29.6.1+incompatible` to `29.6.2+incompatible` by [@dependabot](https://github.com/dependabot)\[bot] in [#13968](https://github.com/docker/compose/pull/13968) - Build(deps): bump github/codeql-action/upload-sarif from `4.37.0` to `4.37.3` by [@dependabot](https://github.com/dependabot)\[bot] in [#13981](https://github.com/docker/compose/pull/13981) - Build(deps): bump actions/checkout from `7.0.0` to `7.0.1` by [@dependabot](https://github.com/dependabot)\[bot] in [#13970](https://github.com/docker/compose/pull/13970) - Build(deps): bump github.com/moby/buildkit from `0.31.1` to `0.31.2` by [@dependabot](https://github.com/dependabot)\[bot] in [#13969](https://github.com/docker/compose/pull/13969) - Bump compose-go to version `v2.14.0` by [@glours](https://github.com/glours) in [#13983](https://github.com/docker/compose/pull/13983) - Bump go-archive to version `v0.3.0` by [@glours](https://github.com/glours) in [#13986](https://github.com/docker/compose/pull/13986) - Build(deps): bump docker/github-builder/.github/workflows/bake.yml from `1.14.0` to `1.15.0` in the docker-actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#13989](https://github.com/docker/compose/pull/13989) - Chore(deps): bump github.com/moby/go-archive `v0.3.2` by [@thaJeztah](https://github.com/thaJeztah) in [#13991](https://github.com/docker/compose/pull/13991) - Update to `go1.26.5` by [@thaJeztah](https://github.com/thaJeztah) in [#13920](https://github.com/docker/compose/pull/13920) - Build(deps): bump actions/stale from `10.4.0` to `11.0.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13996](https://github.com/docker/compose/pull/13996) - Build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml from `2.0.2` to `2.0.3` in the docker-actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#13995](https://github.com/docker/compose/pull/13995) - Build(deps): bump ossf/scorecard-action from `2.4.3` to `2.4.4` by [@dependabot](https://github.com/dependabot)\[bot] in [#13984](https://github.com/docker/compose/pull/13984) - Chore(deps): github.com/docker/buildx `v0.36.0`, buildkit `v0.32.0` by [@glours](https://github.com/glours) in [#13975](https://github.com/docker/compose/pull/13975) - Bump buildkit `v0.32.1` by [@glours](https://github.com/glours) in [#13997](https://github.com/docker/compose/pull/13997) ##### New Contributors - [@junhaoliao](https://github.com/junhaoliao) made their first contribution in [#13931](https://github.com/docker/compose/pull/13931) **Full Changelog**: <https://github.com/docker/compose/compare/v5.3.1...v5.4.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

CSRBot added 1 commit 2026-08-03 17:04:56 +02:00

chore(deps): update dependency docker/compose to v5.4.0

Build / build-amd64 (pull_request) Failing after 2s

Details

Build / build-arm64 (pull_request) Failing after 1s

Details

Lint Markdown files / markdown-lint (pull_request) Failing after 1s

Details

3d9e11ccf2

CSRBot scheduled this pull request to auto merge when all checks succeed 2026-08-03 17:05:00 +02:00

volker.raschek was assigned by CSRBot

2026-08-03 20:04:53 +02:00

Some required checks failed

Build / build-amd64 (pull_request) Failing after 2s

Required

Details

Build / build-arm64 (pull_request) Failing after 1s

Required

Details

Lint Markdown files / markdown-lint (pull_request) Failing after 1s

Required

Details

Some required checks were not successful.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/docker-compose-5.x:renovate/docker-compose-5.x

git checkout renovate/docker-compose-5.x

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: volker.raschek/docker-compose-docker#127