dependabot[bot]
90d76060fe
chore(deps): bump ruby in /tests/apps/dockerfile-entrypoint
...
Bumps ruby from 4.0.5 to 4.0.6.
---
updated-dependencies:
- dependency-name: ruby
dependency-version: 4.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-15 13:52:31 +00:00
Dokku Bot
ce76bcd772
chore: bump pack to 0.40.8
2026-07-15 06:46:10 +00:00
Jose Diaz-Gonzalez
0bf2df49c2
Merge pull request #8839 from dokku/dependabot/github_actions/actions/setup-node-7
...
chore(deps): bump actions/setup-node from 6 to 7
2026-07-14 14:01:01 -04:00
dependabot[bot]
2352c09d2a
chore(deps): bump actions/setup-node from 6 to 7
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6 to 7.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-14 13:52:30 +00:00
Jose Diaz-Gonzalez
9847412990
Merge pull request #8836 from dokku/8835-herokuish-documentation-references-the-wrong-page-for-buildpack-management
...
Link herokuish buildpack references to buildpack management page
2026-07-12 21:26:28 -04:00
Jose Diaz-Gonzalez
9f8ef83a02
docs: link herokuish buildpack references to buildpack management page
...
The Herokuish Buildpacks doc linked buildpack topics to anchors on the process management page that do not exist, so those links resolved to the wrong page. Point them at the corresponding sections of the buildpack management page and add that page to the sidebar so it is reachable.
2026-07-12 21:24:38 -04:00
Jose Diaz-Gonzalez
9021ddcdca
Merge pull request #8834 from dokku/chore/bump-dokku-event-listener-0.20.0
...
chore: bump dokku-event-listener to 0.20.0
2026-07-11 05:07:23 -04:00
Dokku Bot
5880ebc298
chore: bump dokku-event-listener to 0.20.0
2026-07-11 06:46:30 +00:00
Dokku Bot
0764529d23
Release 0.38.23
...
# History
## 0.38.23
Install/update via the bootstrap script:
```shell
wget -NP . https://dokku.com/install/v0.38.23/bootstrap.sh
sudo DOKKU_TAG=v0.38.23 bash bootstrap.sh
```
### Bug Fixes
- #8833 : @josegonzalez Parse cert CN and subject on OpenSSL 3.x
### Tests
- #8825 : @dependabot[bot] chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/zombies-dockerfile-no-tini
- #8823 : @dependabot[bot] chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/zombies-dockerfile-tini
- #8820 : @dependabot[bot] chore(deps-dev): bump heroku/heroku-buildpack-php from 292 to 293 in /tests/apps/php
- #8821 : @dependabot[bot] chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/go-fail-predeploy
- #8822 : @dependabot[bot] chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/gogrpc
- #8824 : @dependabot[bot] chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/go-fail-postdeploy
### Dependencies
- #8831 : @dependabot[bot] chore(deps): bump helm.sh/helm/v3 from 3.21.2 to 3.21.3 in /plugins/scheduler-k3s
- #8830 : @dependabot[bot] chore(deps): bump github.com/fluxcd/pkg/kustomize from 1.37.0 to 1.38.0 in /plugins/scheduler-k3s
- #8826 : @dependabot[bot] chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 in /plugins/common
- #8827 : @dependabot[bot] chore(deps): bump github.com/cert-manager/cert-manager from 1.20.3 to 1.21.0 in /plugins/scheduler-k3s
- #8828 : @dependabot[bot] chore(deps): bump traefik from v3.7.6 to v3.7.7 in /plugins/traefik-vhosts
- #8829 : @dependabot[bot] chore(deps): bump github.com/go-openapi/jsonpointer from 0.24.0 to 1.0.0 in /plugins/scheduler-k3s
v0.38.23
2026-07-10 22:48:15 +00:00
Jose Diaz-Gonzalez
e40d325996
Merge pull request #8833 from dokku/8832-cn-and-subject-parsing-broken-on-openssl-3-x-get-ssl-hostnames-reportsslhostnames-reportsslsubject
...
Parse cert CN and subject on OpenSSL 3.x
2026-07-10 17:45:02 -04:00
Jose Diaz-Gonzalez
5496029e07
fix: parse cert CN and subject on OpenSSL 3.x
...
The `certs` plugin extracted a certificate's Common Name and formatted its subject using string assumptions that only held for pre-3.x OpenSSL output, so a certificate with only a Common Name and no Subject Alternative Name reported no hostnames from `certs:report` and was not recognized during nginx config generation, while the subject report retained the `subject=` prefix and used the wrong separators. Normalizing the subject with `-nameopt` before parsing makes the extraction version independent across OpenSSL and LibreSSL.
2026-07-10 15:05:27 -04:00
Jose Diaz-Gonzalez
e47bae8f55
Merge pull request #8831 from dokku/dependabot/go_modules/plugins/scheduler-k3s/helm.sh/helm/v3-3.21.3
...
chore(deps): bump helm.sh/helm/v3 from 3.21.2 to 3.21.3 in /plugins/scheduler-k3s
2026-07-10 12:22:36 -04:00
Jose Diaz-Gonzalez
b01ec9be48
Merge pull request #8830 from dokku/dependabot/go_modules/plugins/scheduler-k3s/github.com/fluxcd/pkg/kustomize-1.38.0
...
chore(deps): bump github.com/fluxcd/pkg/kustomize from 1.37.0 to 1.38.0 in /plugins/scheduler-k3s
2026-07-10 12:22:27 -04:00
dependabot[bot]
3ca52407ed
chore(deps): bump helm.sh/helm/v3 in /plugins/scheduler-k3s
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.21.2 to 3.21.3.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.21.2...v3.21.3 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.21.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 13:53:59 +00:00
dependabot[bot]
2191bafd77
chore(deps): bump github.com/fluxcd/pkg/kustomize
...
Bumps [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg ) from 1.37.0 to 1.38.0.
- [Commits](https://github.com/fluxcd/pkg/compare/kustomize/v1.37.0...kustomize/v1.38.0 )
---
updated-dependencies:
- dependency-name: github.com/fluxcd/pkg/kustomize
dependency-version: 1.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 13:53:51 +00:00
Jose Diaz-Gonzalez
e79dd1b493
Merge pull request #8826 from dokku/dependabot/go_modules/plugins/common/golang.org/x/crypto-0.54.0
...
chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 in /plugins/common
2026-07-09 21:34:30 -04:00
Jose Diaz-Gonzalez
5da5f1dfe6
chore: bump go modules
2026-07-09 21:16:42 -04:00
dependabot[bot]
26914b2fc0
chore(deps): bump golang.org/x/crypto in /plugins/common
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.53.0 to 0.54.0.
- [Commits](https://github.com/golang/crypto/compare/v0.53.0...v0.54.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.54.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 21:16:29 -04:00
Jose Diaz-Gonzalez
7bd866efee
Merge pull request #8825 from dokku/dependabot/docker/tests/apps/zombies-dockerfile-no-tini/golang-1.26.5
...
chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/zombies-dockerfile-no-tini
2026-07-09 21:14:44 -04:00
Jose Diaz-Gonzalez
4205871cec
Merge pull request #8823 from dokku/dependabot/docker/tests/apps/zombies-dockerfile-tini/golang-1.26.5
...
chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/zombies-dockerfile-tini
2026-07-09 21:14:36 -04:00
Jose Diaz-Gonzalez
16ba93f9e2
Merge pull request #8820 from dokku/dependabot/composer/tests/apps/php/heroku/heroku-buildpack-php-293
...
chore(deps-dev): bump heroku/heroku-buildpack-php from 292 to 293 in /tests/apps/php
2026-07-09 21:14:26 -04:00
Jose Diaz-Gonzalez
e2781c0553
Merge pull request #8821 from dokku/dependabot/docker/tests/apps/go-fail-predeploy/golang-1.26.5
...
chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/go-fail-predeploy
2026-07-09 21:14:17 -04:00
Jose Diaz-Gonzalez
91025ee23e
Merge pull request #8822 from dokku/dependabot/docker/tests/apps/gogrpc/golang-1.26.5
...
chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/gogrpc
2026-07-09 21:14:04 -04:00
Jose Diaz-Gonzalez
06a79b3f5c
Merge pull request #8824 from dokku/dependabot/docker/tests/apps/go-fail-postdeploy/golang-1.26.5
...
chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/go-fail-postdeploy
2026-07-09 21:13:53 -04:00
Jose Diaz-Gonzalez
71ce14feca
Merge pull request #8827 from dokku/dependabot/go_modules/plugins/scheduler-k3s/github.com/cert-manager/cert-manager-1.21.0
...
chore(deps): bump github.com/cert-manager/cert-manager from 1.20.3 to 1.21.0 in /plugins/scheduler-k3s
2026-07-09 21:13:34 -04:00
Jose Diaz-Gonzalez
8986a27318
Merge pull request #8828 from dokku/dependabot/docker/plugins/traefik-vhosts/traefik-v3.7.7
...
chore(deps): bump traefik from v3.7.6 to v3.7.7 in /plugins/traefik-vhosts
2026-07-09 21:13:23 -04:00
Jose Diaz-Gonzalez
78977e3402
Merge pull request #8829 from dokku/dependabot/go_modules/plugins/scheduler-k3s/github.com/go-openapi/jsonpointer-1.0.0
...
chore(deps): bump github.com/go-openapi/jsonpointer from 0.24.0 to 1.0.0 in /plugins/scheduler-k3s
2026-07-09 21:13:16 -04:00
dependabot[bot]
7eaaaa7ac2
chore(deps): bump github.com/go-openapi/jsonpointer
...
Bumps [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer ) from 0.24.0 to 1.0.0.
- [Release notes](https://github.com/go-openapi/jsonpointer/releases )
- [Commits](https://github.com/go-openapi/jsonpointer/compare/v0.24.0...v1.0.0 )
---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonpointer
dependency-version: 1.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 13:55:04 +00:00
dependabot[bot]
04486f18ca
chore(deps): bump traefik in /plugins/traefik-vhosts
...
Bumps traefik from v3.7.6 to v3.7.7.
---
updated-dependencies:
- dependency-name: traefik
dependency-version: v3.7.7
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 13:55:00 +00:00
dependabot[bot]
19c167ca1f
chore(deps): bump github.com/cert-manager/cert-manager
...
Bumps [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager ) from 1.20.3 to 1.21.0.
- [Release notes](https://github.com/cert-manager/cert-manager/releases )
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md )
- [Commits](https://github.com/cert-manager/cert-manager/compare/v1.20.3...v1.21.0 )
---
updated-dependencies:
- dependency-name: github.com/cert-manager/cert-manager
dependency-version: 1.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 13:54:58 +00:00
dependabot[bot]
5ff86ec977
chore(deps): bump golang in /tests/apps/zombies-dockerfile-no-tini
...
Bumps golang from 1.26.4 to 1.26.5.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.26.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 13:53:12 +00:00
dependabot[bot]
7e05d6cca4
chore(deps): bump golang in /tests/apps/go-fail-postdeploy
...
Bumps golang from 1.26.4 to 1.26.5.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.26.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 13:53:05 +00:00
dependabot[bot]
58f509ed0c
chore(deps): bump golang in /tests/apps/zombies-dockerfile-tini
...
Bumps golang from 1.26.4 to 1.26.5.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.26.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 13:52:57 +00:00
dependabot[bot]
5462744cf0
chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/gogrpc
...
Bumps golang from 1.26.4 to 1.26.5.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.26.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 13:52:57 +00:00
dependabot[bot]
ab14872c77
chore(deps): bump golang in /tests/apps/go-fail-predeploy
...
Bumps golang from 1.26.4 to 1.26.5.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.26.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 13:52:38 +00:00
dependabot[bot]
01f3280746
chore(deps-dev): bump heroku/heroku-buildpack-php in /tests/apps/php
...
Bumps [heroku/heroku-buildpack-php](https://github.com/heroku/heroku-buildpack-php ) from 292 to 293.
- [Release notes](https://github.com/heroku/heroku-buildpack-php/releases )
- [Changelog](https://github.com/heroku/heroku-buildpack-php/blob/main/CHANGELOG.md )
- [Commits](https://github.com/heroku/heroku-buildpack-php/compare/v292...v293 )
---
updated-dependencies:
- dependency-name: heroku/heroku-buildpack-php
dependency-version: '293'
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 13:52:36 +00:00
Dokku Bot
0dd183e6cc
Release 0.38.22
...
# History
## 0.38.22
Install/update via the bootstrap script:
```shell
wget -NP . https://dokku.com/install/v0.38.22/bootstrap.sh
sudo DOKKU_TAG=v0.38.22 bash bootstrap.sh
```
### New Features
- #8805 : @RichardDorian Allow custom values for chown
- #8810 : @josegonzalez Expose whether a network was created by dokku
- #8807 : @josegonzalez Allow replacing buildpack list atomically
- #8808 : @josegonzalez Expose docker-options as structured lists in JSON report
- #8806 : @josegonzalez Expose scheduler-k3s autoscaling-auth state for read-back
- #8801 : @josegonzalez Add --format json support to plugin:list
### Refactors
- #8804 : @josegonzalez Port bash :report subcommands to golang
### Documentation
- #8809 : @josegonzalez Document nginx validate-config load_module override
### Tests
- #8803 : @dependabot[bot] chore(deps): bump django from 5.2.15 to 5.2.16 in /tests/apps/dockerfile-release
### Dependencies
- #8816 : @dependabot[bot] chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 in /plugins/common
- #8818 : @dependabot[bot] chore(deps): bump github.com/traefik/traefik/v2 from 2.11.51 to 2.11.52 in /plugins/scheduler-k3s
- #8817 : @dependabot[bot] chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 in /plugins/scheduler-docker-local
- #8819 : @dependabot[bot] chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 in /plugins/scheduler-k3s
v0.38.22
2026-07-08 22:12:05 +00:00
Jose Diaz-Gonzalez
611cb89711
Merge pull request #8805 from RichardDorian/master
...
Allow custom values for chown
2026-07-08 18:09:31 -04:00
Jose Diaz-Gonzalez
e38c1754e4
Merge pull request #8816 from dokku/dependabot/go_modules/plugins/common/golang.org/x/sync-0.22.0
...
chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 in /plugins/common
2026-07-08 17:04:07 -04:00
Jose Diaz-Gonzalez
807e50edbf
chore: bump go modules
2026-07-08 15:43:21 -04:00
dependabot[bot]
f931a84191
chore(deps): bump golang.org/x/sync in /plugins/common
...
Bumps [golang.org/x/sync](https://github.com/golang/sync ) from 0.21.0 to 0.22.0.
- [Commits](https://github.com/golang/sync/compare/v0.21.0...v0.22.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sync
dependency-version: 0.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-08 15:40:54 -04:00
Jose Diaz-Gonzalez
4a4ae6256f
Merge pull request #8818 from dokku/dependabot/go_modules/plugins/scheduler-k3s/github.com/traefik/traefik/v2-2.11.52
...
chore(deps): bump github.com/traefik/traefik/v2 from 2.11.51 to 2.11.52 in /plugins/scheduler-k3s
2026-07-08 14:54:14 -04:00
dependabot[bot]
515d030689
chore(deps): bump github.com/traefik/traefik/v2
...
Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik ) from 2.11.51 to 2.11.52.
- [Release notes](https://github.com/traefik/traefik/releases )
- [Changelog](https://github.com/traefik/traefik/blob/v2.11.52/CHANGELOG.md )
- [Commits](https://github.com/traefik/traefik/compare/v2.11.51...v2.11.52 )
---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
dependency-version: 2.11.52
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-08 18:54:06 +00:00
Jose Diaz-Gonzalez
f5e81cdcbe
Merge pull request #8817 from dokku/dependabot/go_modules/plugins/scheduler-docker-local/golang.org/x/sync-0.22.0
...
chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 in /plugins/scheduler-docker-local
2026-07-08 14:52:53 -04:00
Jose Diaz-Gonzalez
57d23db98a
Merge pull request #8819 from dokku/dependabot/go_modules/plugins/scheduler-k3s/golang.org/x/sync-0.22.0
...
chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 in /plugins/scheduler-k3s
2026-07-08 14:52:41 -04:00
Jose Diaz-Gonzalez
c37ba0f255
Merge pull request #8810 from dokku/8797-network-list-expose-whether-a-network-was-created-by-dokku
...
Expose whether a network was created by dokku
2026-07-08 14:52:32 -04:00
RichardDorian
513b200f5c
test(storage): add out-of-bounds chown coverage for go code and script
2026-07-08 19:38:08 +02:00
dependabot[bot]
b0ba167df8
chore(deps): bump golang.org/x/sync in /plugins/scheduler-k3s
...
Bumps [golang.org/x/sync](https://github.com/golang/sync ) from 0.21.0 to 0.22.0.
- [Commits](https://github.com/golang/sync/compare/v0.21.0...v0.22.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sync
dependency-version: 0.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-08 13:55:26 +00:00
dependabot[bot]
e71893621b
chore(deps): bump golang.org/x/sync in /plugins/scheduler-docker-local
...
Bumps [golang.org/x/sync](https://github.com/golang/sync ) from 0.21.0 to 0.22.0.
- [Commits](https://github.com/golang/sync/compare/v0.21.0...v0.22.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sync
dependency-version: 0.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-08 13:54:20 +00:00
RichardDorian
06bedebce3
fix(storage): allow custom chown values in chown-storage-dir script
2026-07-08 08:29:13 +02:00