chore(deps): update dependency docker/compose to v5.5.0 #127

2026-08-03T17:04:55+02:00

CSRBot commented

2026-08-03 17:04:55 +02:00

This PR contains the following updates:

Package	Update	Change
docker/compose	minor	`5.3.1` → `5.5.0`
docker/compose	minor	`v5.3.1` → `v5.5.0`

Release Notes

docker/compose (docker/compose)

`v5.5.0`

Compare Source

What's Changed

ℹ️ This release overhauls image digest reconciliation to prevent unnecessary container recreation.
Existing containers may be recreated the first time you run compose up after upgrading, as image digests are re-evaluated using the new logic.

compose pull now honors pull_policy refresh windows (daily, weekly, every_N).

✨ Improvements

New image digest reconciliation process by @glours & @ndeloof #14011 #14041

🐛 Fixes

Fix(bridge): skip pulling default image references for build-only ser… by @ericwyles in #14010
Fix(watch): stop pruning every dangling image of the project by @glours in #14012
Fix(config): resolve service environment when computing --hash by @glours in #14002
Fix(watch): skip unreadable directories instead of failing the watch by @Endika in #13992
Fix: ignore one-off container events in up monitor by @brano-osif in #14038
Fix(bridge): validate arguments of bridge subcommands by @glours in #14003
Fix(images): tolerate containers whose image record is gone by @ndeloof in #14028

🔧 Internal

Test: Set stop_signal to SIGTERM in nginx-based services by @ricardobranco777 in #13881
Chore: inline needlessly extracted single-use helpers by @ndeloof in #14048
Add ENGINE column driven by label by @nicksieger in #13959

⚙️ Dependencies

Build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 by @dependabot[bot] in #13999
Build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4 by @dependabot[bot] in #14009
Build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.5 by @dependabot[bot] in #14019
Build(deps): bump github.com/moby/buildkit from 0.32.1 to 0.32.2 by @dependabot[bot] in #14033
Build(deps): bump github.com/docker/buildx from 0.36.0 to 0.36.1 by @dependabot[bot] in #14034
Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.15.0 to 1.16.0 in the docker-actions group by @dependabot[bot] in #14035
Build(deps): bump github.com/moby/go-archive from 0.3.2 to 0.3.3 by @dependabot[bot] in #14043
Build(deps): bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6 by @dependabot[bot] in #14022
Build(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.2+incompatible by @dependabot[bot] in #14042
Build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @dependabot[bot] in #14008
Bump golang to version 1.26.6 by @glours in #14045

New Contributors

@ericwyles made their first contribution in #14010
@Endika made their first contribution in #13992
@brano-osif made their first contribution in #14038

Full Changelog: https://github.com/docker/compose/compare/v5.4.0...v5.5.0

`v5.4.0`

Compare Source

What's Changed

ℹ️ This release introduces a new way to reconcile resources such as volumes and networks

✨ Improvements

Feat(reconcile): model volume recreation in the plan by @ndeloof in #13962
Feat(reconcile): model network lifecycle in the plan by @ndeloof in #13966

🐛 Fixes

Fix(reconcile): preserve zero-replica services during hashing by @junhaoliao in #13931
Fix(config): warn when service selection is silently ignored by @glours in #13950
Fix(build): use platform image-manifest digest, not attested index by @glours in #13949
Fix(oci): honor --insecure-registry when up re-loads the model by @ptrdom in #13894
Fix(config): pin type:image volume sources and pre_start hook images by @glours in #13956
Tolerate missing env file on more runtime commands by @maxproske in #13603
Resolve pre_start hook images alongside service images by @ndeloof in #13937
Fix(cp): return non-nil Content from dry-run CopyFromContainer by @glours in #13982
Fix(config): apply config flags to --services/--volumes/--networks/--models/--hash by @glours in #13979
Fix: tolerate missing env file on scale, watch and shell completion by @glours in #13973

🔧 Internal

README: remove Go Report Card badge by @thaJeztah in #13926
Docs: adopt AGENTS.md standard, symlink CLAUDE.md to it by @glours in #13871
Dockerfile: update golang image to alpine 3.23 by @thaJeztah in #13921
Docs: require dated AI_AGENT_DISCLOSURE.md, drop committed copy by @glours in #13976
CI: publish images to Docker Hub using OIDC by @glours in #13994

⚙️ Dependencies

Build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by @dependabot[bot] in #13942
Build(deps): bump the docker-actions group across 1 directory with 4 updates by @dependabot[bot] in #13941
Build(deps): bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in #13943
Build(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 by @dependabot[bot] in #13948
Build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #13927
Build(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot[bot] in #13928
Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.13.0 to 1.14.0 in the docker-actions group by @dependabot[bot] in #13953
Build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #13922
Build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 by @dependabot[bot] in #13955
Build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #13960
Build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in the go_modules group across 1 directory by @dependabot[bot] in #13961
Build(deps): bump github.com/docker/cli from 29.6.1+incompatible to 29.6.2+incompatible by @dependabot[bot] in #13968
Build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 by @dependabot[bot] in #13981
Build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #13970
Build(deps): bump github.com/moby/buildkit from 0.31.1 to 0.31.2 by @dependabot[bot] in #13969
Bump compose-go to version v2.14.0 by @glours in #13983
Bump go-archive to version v0.3.0 by @glours in #13986
Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.14.0 to 1.15.0 in the docker-actions group by @dependabot[bot] in #13989
Chore(deps): bump github.com/moby/go-archive v0.3.2 by @thaJeztah in #13991
Update to go1.26.5 by @thaJeztah in #13920
Build(deps): bump actions/stale from 10.4.0 to 11.0.0 by @dependabot[bot] in #13996
Build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml from 2.0.2 to 2.0.3 in the docker-actions group by @dependabot[bot] in #13995
Build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in #13984
Chore(deps): github.com/docker/buildx v0.36.0, buildkit v0.32.0 by @glours in #13975
Bump buildkit v0.32.1 by @glours in #13997

New Contributors

@junhaoliao made their first contribution in #13931

Full Changelog: https://github.com/docker/compose/compare/v5.3.1...v5.4.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker/compose](https://github.com/docker/compose) | minor | `5.3.1` → `5.5.0` | | [docker/compose](https://github.com/docker/compose) | minor | `v5.3.1` → `v5.5.0` | --- ### Release Notes <details> <summary>docker/compose (docker/compose)</summary> ### [`v5.5.0`](https://github.com/docker/compose/releases/tag/v5.5.0) [Compare Source](https://github.com/docker/compose/compare/v5.4.0...v5.5.0) ##### What's Changed > ℹ️ This release overhauls image digest reconciliation to prevent unnecessary container recreation.\ > Existing containers may be recreated the first time you run `compose up` after upgrading, as image digests are re-evaluated using the new logic. > > `compose pull` now honors `pull_policy` refresh windows (`daily`, `weekly`, `every_N`). ##### ✨ Improvements - New image digest reconciliation process by [@glours](https://github.com/glours) & [@ndeloof](https://github.com/ndeloof) [#14011](https://github.com/docker/compose/pull/14011) [#14041](https://github.com/docker/compose/pull/14041) ##### 🐛 Fixes - Fix(bridge): skip pulling default image references for build-only ser… by [@ericwyles](https://github.com/ericwyles) in [#14010](https://github.com/docker/compose/pull/14010) - Fix(watch): stop pruning every dangling image of the project by [@glours](https://github.com/glours) in [#14012](https://github.com/docker/compose/pull/14012) - Fix(config): resolve service environment when computing --hash by [@glours](https://github.com/glours) in [#14002](https://github.com/docker/compose/pull/14002) - Fix(watch): skip unreadable directories instead of failing the watch by [@Endika](https://github.com/Endika) in [#13992](https://github.com/docker/compose/pull/13992) - Fix: ignore one-off container events in up monitor by [@brano-osif](https://github.com/brano-osif) in [#14038](https://github.com/docker/compose/pull/14038) - Fix(bridge): validate arguments of bridge subcommands by [@glours](https://github.com/glours) in [#14003](https://github.com/docker/compose/pull/14003) - Fix(images): tolerate containers whose image record is gone by [@ndeloof](https://github.com/ndeloof) in [#14028](https://github.com/docker/compose/pull/14028) ##### 🔧 Internal - Test: Set stop\_signal to SIGTERM in nginx-based services by [@ricardobranco777](https://github.com/ricardobranco777) in [#13881](https://github.com/docker/compose/pull/13881) - Chore: inline needlessly extracted single-use helpers by [@ndeloof](https://github.com/ndeloof) in [#14048](https://github.com/docker/compose/pull/14048) - Add ENGINE column driven by label by [@nicksieger](https://github.com/nicksieger) in [#13959](https://github.com/docker/compose/pull/13959) ##### ⚙️ Dependencies - Build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#13999](https://github.com/docker/compose/pull/13999) - Build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#14009](https://github.com/docker/compose/pull/14009) - Build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.5 by [@dependabot](https://github.com/dependabot)\[bot] in [#14019](https://github.com/docker/compose/pull/14019) - Build(deps): bump github.com/moby/buildkit from 0.32.1 to 0.32.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#14033](https://github.com/docker/compose/pull/14033) - Build(deps): bump github.com/docker/buildx from 0.36.0 to 0.36.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#14034](https://github.com/docker/compose/pull/14034) - Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.15.0 to 1.16.0 in the docker-actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#14035](https://github.com/docker/compose/pull/14035) - Build(deps): bump github.com/moby/go-archive from 0.3.2 to 0.3.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#14043](https://github.com/docker/compose/pull/14043) - Build(deps): bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6 by [@dependabot](https://github.com/dependabot)\[bot] in [#14022](https://github.com/docker/compose/pull/14022) - Build(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.2+incompatible by [@dependabot](https://github.com/dependabot)\[bot] in [#14042](https://github.com/docker/compose/pull/14042) - Build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#14008](https://github.com/docker/compose/pull/14008) - Bump golang to version 1.26.6 by [@glours](https://github.com/glours) in [#14045](https://github.com/docker/compose/pull/14045) ##### New Contributors - [@ericwyles](https://github.com/ericwyles) made their first contribution in [#14010](https://github.com/docker/compose/pull/14010) - [@Endika](https://github.com/Endika) made their first contribution in [#13992](https://github.com/docker/compose/pull/13992) - [@brano-osif](https://github.com/brano-osif) made their first contribution in [#14038](https://github.com/docker/compose/pull/14038) **Full Changelog**: <https://github.com/docker/compose/compare/v5.4.0...v5.5.0> ### [`v5.4.0`](https://github.com/docker/compose/releases/tag/v5.4.0) [Compare Source](https://github.com/docker/compose/compare/v5.3.1...v5.4.0) ##### What's Changed > ℹ️ This release introduces a new way to reconcile resources such as volumes and networks ##### ✨ Improvements - Feat(reconcile): model volume recreation in the plan by [@ndeloof](https://github.com/ndeloof) in [#13962](https://github.com/docker/compose/pull/13962) - Feat(reconcile): model network lifecycle in the plan by [@ndeloof](https://github.com/ndeloof) in [#13966](https://github.com/docker/compose/pull/13966) ##### 🐛 Fixes - Fix(reconcile): preserve zero-replica services during hashing by [@junhaoliao](https://github.com/junhaoliao) in [#13931](https://github.com/docker/compose/pull/13931) - Fix(config): warn when service selection is silently ignored by [@glours](https://github.com/glours) in [#13950](https://github.com/docker/compose/pull/13950) - Fix(build): use platform image-manifest digest, not attested index by [@glours](https://github.com/glours) in [#13949](https://github.com/docker/compose/pull/13949) - Fix(oci): honor --insecure-registry when `up` re-loads the model by [@ptrdom](https://github.com/ptrdom) in [#13894](https://github.com/docker/compose/pull/13894) - Fix(config): pin type:image volume sources and pre\_start hook images by [@glours](https://github.com/glours) in [#13956](https://github.com/docker/compose/pull/13956) - Tolerate missing env file on more runtime commands by [@maxproske](https://github.com/maxproske) in [#13603](https://github.com/docker/compose/pull/13603) - Resolve `pre_start` hook images alongside service images by [@ndeloof](https://github.com/ndeloof) in [#13937](https://github.com/docker/compose/pull/13937) - Fix(cp): return non-nil Content from dry-run CopyFromContainer by [@glours](https://github.com/glours) in [#13982](https://github.com/docker/compose/pull/13982) - Fix(config): apply config flags to `--services`/`--volumes`/`--networks`/`--models`/`--hash` by [@glours](https://github.com/glours) in [#13979](https://github.com/docker/compose/pull/13979) - Fix: tolerate missing env file on scale, watch and shell completion by [@glours](https://github.com/glours) in [#13973](https://github.com/docker/compose/pull/13973) ##### 🔧 Internal - README: remove Go Report Card badge by [@thaJeztah](https://github.com/thaJeztah) in [#13926](https://github.com/docker/compose/pull/13926) - Docs: adopt `AGENTS.md` standard, symlink `CLAUDE.md` to it by [@glours](https://github.com/glours) in [#13871](https://github.com/docker/compose/pull/13871) - Dockerfile: update golang image to alpine `3.23` by [@thaJeztah](https://github.com/thaJeztah) in [#13921](https://github.com/docker/compose/pull/13921) - Docs: require dated `AI_AGENT_DISCLOSURE.md`, drop committed copy by [@glours](https://github.com/glours) in [#13976](https://github.com/docker/compose/pull/13976) - CI: publish images to Docker Hub using OIDC by [@glours](https://github.com/glours) in [#13994](https://github.com/docker/compose/pull/13994) ##### ⚙️ Dependencies - Build(deps): bump github/codeql-action/upload-sarif from `4.36.2` to `4.37.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13942](https://github.com/docker/compose/pull/13942) - Build(deps): bump the docker-actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#13941](https://github.com/docker/compose/pull/13941) - Build(deps): bump actions/stale from `10.3.0` to `10.4.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13943](https://github.com/docker/compose/pull/13943) - Build(deps): bump github.com/mattn/go-shellwords from `1.0.13` to `1.0.14` by [@dependabot](https://github.com/dependabot)\[bot] in [#13948](https://github.com/docker/compose/pull/13948) - Build(deps): bump golang.org/x/sync from `0.21.0` to `0.22.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13927](https://github.com/docker/compose/pull/13927) - Build(deps): bump golang.org/x/sys from `0.46.0` to `0.47.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13928](https://github.com/docker/compose/pull/13928) - Build(deps): bump docker/github-builder/.github/workflows/bake.yml from `1.13.0` to `1.14.0` in the docker-actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#13953](https://github.com/docker/compose/pull/13953) - Build(deps): bump google.golang.org/grpc from `1.81.1` to `1.82.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13922](https://github.com/docker/compose/pull/13922) - Build(deps): bump softprops/action-gh-release from `3.0.1` to `3.0.2` by [@dependabot](https://github.com/dependabot)\[bot] in [#13955](https://github.com/docker/compose/pull/13955) - Build(deps): bump actions/setup-go from `6.5.0` to `7.0.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13960](https://github.com/docker/compose/pull/13960) - Build(deps): bump google.golang.org/grpc from `1.82.0` to `1.82.1` in the go\_modules group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#13961](https://github.com/docker/compose/pull/13961) - Build(deps): bump github.com/docker/cli from `29.6.1+incompatible` to `29.6.2+incompatible` by [@dependabot](https://github.com/dependabot)\[bot] in [#13968](https://github.com/docker/compose/pull/13968) - Build(deps): bump github/codeql-action/upload-sarif from `4.37.0` to `4.37.3` by [@dependabot](https://github.com/dependabot)\[bot] in [#13981](https://github.com/docker/compose/pull/13981) - Build(deps): bump actions/checkout from `7.0.0` to `7.0.1` by [@dependabot](https://github.com/dependabot)\[bot] in [#13970](https://github.com/docker/compose/pull/13970) - Build(deps): bump github.com/moby/buildkit from `0.31.1` to `0.31.2` by [@dependabot](https://github.com/dependabot)\[bot] in [#13969](https://github.com/docker/compose/pull/13969) - Bump compose-go to version `v2.14.0` by [@glours](https://github.com/glours) in [#13983](https://github.com/docker/compose/pull/13983) - Bump go-archive to version `v0.3.0` by [@glours](https://github.com/glours) in [#13986](https://github.com/docker/compose/pull/13986) - Build(deps): bump docker/github-builder/.github/workflows/bake.yml from `1.14.0` to `1.15.0` in the docker-actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#13989](https://github.com/docker/compose/pull/13989) - Chore(deps): bump github.com/moby/go-archive `v0.3.2` by [@thaJeztah](https://github.com/thaJeztah) in [#13991](https://github.com/docker/compose/pull/13991) - Update to `go1.26.5` by [@thaJeztah](https://github.com/thaJeztah) in [#13920](https://github.com/docker/compose/pull/13920) - Build(deps): bump actions/stale from `10.4.0` to `11.0.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13996](https://github.com/docker/compose/pull/13996) - Build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml from `2.0.2` to `2.0.3` in the docker-actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#13995](https://github.com/docker/compose/pull/13995) - Build(deps): bump ossf/scorecard-action from `2.4.3` to `2.4.4` by [@dependabot](https://github.com/dependabot)\[bot] in [#13984](https://github.com/docker/compose/pull/13984) - Chore(deps): github.com/docker/buildx `v0.36.0`, buildkit `v0.32.0` by [@glours](https://github.com/glours) in [#13975](https://github.com/docker/compose/pull/13975) - Bump buildkit `v0.32.1` by [@glours](https://github.com/glours) in [#13997](https://github.com/docker/compose/pull/13997) ##### New Contributors - [@junhaoliao](https://github.com/junhaoliao) made their first contribution in [#13931](https://github.com/docker/compose/pull/13931) **Full Changelog**: <https://github.com/docker/compose/compare/v5.3.1...v5.4.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

CSRBot scheduled this pull request to auto merge when all checks succeed 2026-08-03 17:05:00 +02:00

volker.raschek was assigned by CSRBot

2026-08-03 20:04:53 +02:00

CSRBot force-pushed renovate/docker-compose-5.x from 3d9e11ccf2 to 638027b00d

2026-08-16 11:33:05 +02:00

Compare

CSRBot added 1 commit 2026-08-17 14:09:32 +02:00

chore(deps): update dependency docker/compose to v5.5.0

Build / build-amd64 (pull_request) Successful in 2m55s

Details

Lint Markdown files / markdown-lint (pull_request) Successful in 17s

Details

Build / build-arm64 (pull_request) Successful in 3m20s

Details

Lint Markdown files / markdown-lint (push) Successful in 14s

Details

Auto release tagged / tag_on_change (push) Successful in 24s

Details

Release latest / push-amd64 (push) Failing after 1m57s

Details

Update Docker Hub Description / update-description-on-hub-docker-io (push) Successful in 42s

Details

Release latest / push-arm64 (push) Failing after 3m1s

Details

Release latest / push-manifest (push) Skipped

Details

Release latest / sync-to-hub-docker-io (push) Skipped

Details

8ae2ec231f

CSRBot force-pushed renovate/docker-compose-5.x from 638027b00d to 8ae2ec231f

2026-08-17 14:09:32 +02:00

Compare

CSRBot changed title from ~~chore(deps): update dependency docker/compose to v5.4.0~~ to chore(deps): update dependency docker/compose to v5.5.0

2026-08-17 14:09:34 +02:00

CSRBot merged commit 8ae2ec231f into master

2026-08-17 14:13:48 +02:00

CSRBot deleted branch renovate/docker-compose-5.x

2026-08-17 14:14:04 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: volker.raschek/docker-compose-docker#127