Shipped · DevOps and infrastructure

What moby/moby shipped

The public repository of Moby · github.com/moby/moby

Written by FoxPlug from the repository's own releases; not affiliated with Moby. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/moby/moby; Moby did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.

Get a weekly update like this for your product, free

Or Use it as a GitHub Action

Follow moby's weekly shipped digest

Week of October 5, 2026

What shipped

Why it matters

This week's changes tighten correctness in areas that directly affect day-to-day container runs: pull behaviour with lazy snapshotters, network resolver file handling in load-balancer sandboxes, and client cancellation during hijack handshakes. Security and build hygiene also moved forward with a Go runtime update carrying 15 security fixes, a lighter merge queue running golangci-lint, and a boltdb allocation overflow fix. Together they reduce unexpected stalls, redundant pulls and silently failing merges for people building and running containers.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: Engine updated to Go 1.26.9 with 15 security fixes. Client honors cancellation during hijack handshakes. Lazy pulls stay lazy with remote snapshotters. libnetwork writes resolver files only when asked and stops running a resolver in load-balancer sandboxes. A lightweig

Post for LinkedIn

Changes of note this week in Moby. The Engine was updated to Go 1.26.9, which carries 15 security fixes. The client now honors context cancellation during hijack handshakes, so an upgrade request can no longer block indefinitely after connecting. Pulls with remote snapshotters such as stargz now keep lazily prepared layers lazy instead of fetching every layer blob, and pull progress for already-present content was corrected, along with a race in progress layer suppression. In networking, libnetwork writes resolver files only when sandbox paths are requested and no longer runs a resolver in load-balancer sandboxes. An integer overflow in boltdb metadata allocation was prevented. A lightweight merge queue that runs golangci-lint was added, and integration build tests now check build errors r

Week of September 28, 2026

What shipped

Why it matters

This week includes critical security releases (v29.8.2 and v25.0.18) addressing CVEs in OCI image handling and tar extraction, plus important fixes for rootless mode, network overlay tunnels, and bridge network connectivity. The v29.9.0-rc1 addresses image layer handling issues in containerd integration.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Moby 29.8.2 and 25.0.18 ship with security fixes for CVE-2026-53493 and CVE-2026-17106. v29.9.0-rc1 improves containerd image layer handling. Network and rootless improvements also included.

Post for LinkedIn

New releases from Moby this week: v29.8.2 and v25.0.18 address security vulnerabilities (CVE-2026-53493, CVE-2026-17106). v29.9.0-rc1 fixes containerd image store layer handling. Additional improvements include rootless mode connection handling, overlay network tunnel management, and bridge network port reachability when inter-container communication is disabled.

Week of September 21, 2026

What shipped

Why it matters

This week includes important fixes for container restore, Swarm networking, bind mounts, and error messages that developers will encounter in production scenarios. The improvements to test infrastructure and OpenAPI compatibility help ensure more reliable deployments and better client code generation. Several dependency updates and CI improvements strengthen the project's foundation.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: host-gateway restore fix, Swarm IPv6 port tests, nested bind mount docker cp fix, improved error messages, and test infrastructure improvements.

Post for LinkedIn

Moby's latest updates focus on reliability and correctness. We fixed daemon live restore for containers using host-gateway mappings, added IPv6 testing for Swarm published ports, resolved docker cp issues with nested bind mounts, and clarified error messages. Infrastructure improvements include better test coverage and OpenAPI specification compliance for improved client generation.

Weeks with too little public activity are left out rather than filled in. Last updated 2026-10-12.

Is this your repo? Ask us to remove this page.