Compose release notes 2.40.2 (#23590)

<!--Delete sections as needed -->

## Description

<!-- Tell us what you did and why -->

## Related issues or tickets

<!-- Related issues, pull requests, or Jira tickets -->

## Reviews

<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->

- [ ] Technical review
- [ ] Editorial review
- [ ] Product review

_vendor/modules.txt

@@ -2,7 +2,7 @@
 # github.com/moby/buildkit v0.25.1
 # github.com/docker/buildx v0.29.1
 # github.com/docker/cli v28.5.1+incompatible
-# github.com/docker/compose/v2 v2.40.0
+# github.com/docker/compose/v2 v2.40.2
 # github.com/docker/model-runner/cmd/cli v0.1.44
 # github.com/docker/mcp-gateway v0.22.0
 # github.com/docker/scout-cli v1.18.4

content/manuals/compose/releases/release-notes.md

@@ -15,6 +15,18 @@ aliases:
 
 For more detailed information, see the [release notes in the Compose repo](https://github.com/docker/compose/releases/).
 
+## 2.40.2
+
+{{< release-date date="2025-10-22" >}}
+
+### Bug fixes and enhancements
+
+- Added a check to fail builds if the minimal required Buildx version isn’t installed
+- Removed unused code to rely solely on api.Service
+- Improved image detection by checking digests/canonical references, not just tags
+- Introduced `WithPrompt` which adds a pluggable UI for user interactions
+- Reverted fix for secret/config setup of `uid:gid` to match container's `USER` definition 
+
 ## 2.40.1
 
 {{< release-date date="2025-10-17" >}}
@@ -24,7 +36,7 @@ For more detailed information, see the [release notes in the Compose repo](https
 - Fixed a few issues when building with bake
 - Added support of extends with profiles when using the `publish` command
 - Added support of `CTRL+Z` to run Compose in background
-- Fixed secret/config setup of uid:gid to match container's USER definition 
+- Fixed secret/config setup of `uid:gid` to match container's `USER` definition 
 
 ### Update
 

go.mod

@@ -28,7 +28,7 @@ require (
 	github.com/dlclark/regexp2 v1.11.0 // indirect
 	github.com/docker/buildx v0.29.1 // indirect
 	github.com/docker/cli v28.5.1+incompatible // indirect; see "replace" rule at the bottom for actual version
-	github.com/docker/compose/v2 v2.40.0 // indirect
+	github.com/docker/compose/v2 v2.40.2 // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
 	github.com/docker/docker v28.5.1+incompatible // indirect; see "replace" rule at the bottom for actual version
 	github.com/docker/docker-credential-helpers v0.9.3 // indirect
@@ -132,7 +132,7 @@ require (
 replace (
 	github.com/docker/buildx => github.com/docker/buildx v0.29.1
 	github.com/docker/cli => github.com/docker/cli v28.5.1+incompatible
-	github.com/docker/compose/v2 => github.com/docker/compose/v2 v2.40.1
+	github.com/docker/compose/v2 => github.com/docker/compose/v2 v2.40.2
 	github.com/docker/docker => github.com/docker/docker v28.4.0+incompatible
 	github.com/docker/mcp-gateway => github.com/docker/mcp-gateway v0.22.0
 	github.com/docker/model-runner/cmd/cli => github.com/docker/model-runner/cmd/cli v0.1.44

go.sum

@@ -102,7 +102,10 @@ github.com/docker/compose/v2 v2.39.3 h1:a9itRH/aBf9jJM80hQqQYdIzm4+9hcccJRnK5w0F
 github.com/docker/compose/v2 v2.39.3/go.mod h1:AOUEk2X2GpWNn/x/WNN55cc+JkH3mBd6gmx71lHZHv4=
 github.com/docker/compose/v2 v2.39.4 h1:lXIyl0axf8rZ5ThGm25g0y5nvtj1a9HKS08qfMvHiFM=
 github.com/docker/compose/v2 v2.39.4/go.mod h1:HrP3GcmLSdb1YbhcRhr1zWx/8Ulj/9Y+H443hlTAwMA=
+github.com/docker/compose/v2 v2.40.1 h1:05it8xe0xH3qVGx8KxHf8XFKrcWqY1RpJ0OHCPe+P1w=
 github.com/docker/compose/v2 v2.40.1/go.mod h1:CbSJpKGw20LInVsPjglZ8z7Squ3OBQOD7Ux5nkjGfIU=
+github.com/docker/compose/v2 v2.40.2 h1:h2bDBJkOuqmj93XvT2oI0ArPQonE0lGtWiILXdiXvbA=
+github.com/docker/compose/v2 v2.40.2/go.mod h1:CbSJpKGw20LInVsPjglZ8z7Squ3OBQOD7Ux5nkjGfIU=
 github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
 github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
 github.com/docker/docker v28.2.2+incompatible h1:CjwRSksz8Yo4+RmQ339Dp/D2tGO5JxwYeqtMOEe0LDw=