Jose Diaz-Gonzalez
76b033234f
fix: split report global keys into raw and computed across plugins
...
The `<plugin>-global-<property>` keys in `:report` output returned the resolved value with the built-in default substituted in, so external tooling could not distinguish a property that had been set globally to the default from one that had never been set. The bare keys for caddy, haproxy, and traefik global-only properties had the same shape. The `global-<property>` keys now hold the raw stored value and are empty when nothing has been set, and a new `computed-<property>` key holds the effective value used at runtime, falling back through the per-app value (where one exists), the global value, and the built-in default. The bare global-only keys for the three proxy plugins are removed in favor of the raw/computed pair. Closes #8631 .
2026-05-23 00:05:33 -04:00
Jose Diaz-Gonzalez
f3bdd7e4ec
Merge pull request #8646 from dokku/chore/bump-pack-0.40.6
...
chore: bump pack to 0.40.6
2026-05-23 00:01:57 -04:00
Jose Diaz-Gonzalez
3e7f9fdf5b
Merge pull request #8662 from dokku/dependabot/npm_and_yarn/tests/apps/checks-root/qs-6.15.2
...
chore(deps): bump qs from 6.15.0 to 6.15.2 in /tests/apps/checks-root
2026-05-23 00:01:42 -04:00
Jose Diaz-Gonzalez
0acdce85d9
Merge pull request #8659 from dokku/dependabot/go_modules/plugins/common/golang.org/x/crypto-0.52.0
...
chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /plugins/common
2026-05-22 22:39:28 -04:00
Jose Diaz-Gonzalez
c49e4d2f25
chore: bump go modules
2026-05-22 20:04:56 -04:00
dependabot[bot]
a56a4b96e9
chore(deps): bump golang.org/x/crypto in /plugins/common
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.51.0 to 0.52.0.
- [Commits](https://github.com/golang/crypto/compare/v0.51.0...v0.52.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.52.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-22 19:35:02 -04:00
dependabot[bot]
691fd4bed2
chore(deps): bump qs from 6.15.0 to 6.15.2 in /tests/apps/checks-root
...
Bumps [qs](https://github.com/ljharb/qs ) from 6.15.0 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/qs/compare/v6.15.0...v6.15.2 )
---
updated-dependencies:
- dependency-name: qs
dependency-version: 6.15.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-22 23:34:10 +00:00
Jose Diaz-Gonzalez
54c94a8b17
Merge pull request #8661 from dokku/dependabot/npm_and_yarn/tests/apps/multi/sass-1.100.0
...
chore(deps): bump sass from 1.99.0 to 1.100.0 in /tests/apps/multi
2026-05-22 19:33:53 -04:00
Jose Diaz-Gonzalez
8b24336369
Merge pull request #8660 from dokku/dependabot/pip/docs/_build/click-8.4.1
...
chore(deps): bump click from 8.4.0 to 8.4.1 in /docs/_build
2026-05-22 19:33:47 -04:00
Jose Diaz-Gonzalez
5b3fc362a0
Merge pull request #8658 from dokku/dependabot/composer/tests/apps/php/heroku/heroku-buildpack-php-290
...
chore(deps-dev): bump heroku/heroku-buildpack-php from 288 to 290 in /tests/apps/php
2026-05-22 19:33:38 -04:00
Jose Diaz-Gonzalez
d52c4e45f4
Merge pull request #8657 from dokku/dependabot/composer/tests/apps/php/slim/slim-4.15.2
...
chore(deps): bump slim/slim from 4.15.1 to 4.15.2 in /tests/apps/php
2026-05-22 19:33:04 -04:00
dependabot[bot]
ac4e332960
chore(deps): bump sass from 1.99.0 to 1.100.0 in /tests/apps/multi
...
Bumps [sass](https://github.com/sass/dart-sass ) from 1.99.0 to 1.100.0.
- [Release notes](https://github.com/sass/dart-sass/releases )
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sass/dart-sass/compare/1.99.0...1.100.0 )
---
updated-dependencies:
- dependency-name: sass
dependency-version: 1.100.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-22 13:56:23 +00:00
dependabot[bot]
f86ed14668
chore(deps): bump click from 8.4.0 to 8.4.1 in /docs/_build
...
Bumps [click](https://github.com/pallets/click ) from 8.4.0 to 8.4.1.
- [Release notes](https://github.com/pallets/click/releases )
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/click/compare/8.4.0...8.4.1 )
---
updated-dependencies:
- dependency-name: click
dependency-version: 8.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-22 13:55:56 +00:00
dependabot[bot]
d4832baf88
chore(deps-dev): bump heroku/heroku-buildpack-php in /tests/apps/php
...
Bumps [heroku/heroku-buildpack-php](https://github.com/heroku/heroku-buildpack-php ) from 288 to 290.
- [Release notes](https://github.com/heroku/heroku-buildpack-php/releases )
- [Changelog](https://github.com/heroku/heroku-buildpack-php/blob/main/CHANGELOG.md )
- [Commits](https://github.com/heroku/heroku-buildpack-php/compare/v288...v290 )
---
updated-dependencies:
- dependency-name: heroku/heroku-buildpack-php
dependency-version: '290'
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-22 13:54:41 +00:00
dependabot[bot]
54907559b0
chore(deps): bump slim/slim from 4.15.1 to 4.15.2 in /tests/apps/php
...
Bumps [slim/slim](https://github.com/slimphp/Slim ) from 4.15.1 to 4.15.2.
- [Release notes](https://github.com/slimphp/Slim/releases )
- [Changelog](https://github.com/slimphp/Slim/blob/4.x/CHANGELOG.md )
- [Commits](https://github.com/slimphp/Slim/compare/4.15.1...4.15.2 )
---
updated-dependencies:
- dependency-name: slim/slim
dependency-version: 4.15.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-22 13:54:34 +00:00
Dokku Bot
ca4bf93f24
chore: bump pack to 0.40.6
2026-05-22 07:14:57 +00:00
Jose Diaz-Gonzalez
f9ac9cc13c
Merge pull request #8655 from dokku/dependabot/go_modules/plugins/scheduler-k3s/github.com/containerd/containerd-1.7.32
...
chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 in /plugins/scheduler-k3s
2026-05-21 22:29:15 -04:00
Jose Diaz-Gonzalez
11115c4b94
Merge pull request #8654 from dokku/dependabot/docker/tests/apps/dockerfile-entrypoint/ruby-4.0.5
...
chore(deps): bump ruby from 4.0.4 to 4.0.5 in /tests/apps/dockerfile-entrypoint
2026-05-21 22:29:08 -04:00
Jose Diaz-Gonzalez
ee1b6d1fef
Merge pull request #8651 from dokku/dependabot/pip/docs/_build/click-8.4.0
...
chore(deps): bump click from 8.3.3 to 8.4.0 in /docs/_build
2026-05-21 22:28:32 -04:00
Jose Diaz-Gonzalez
b31a8ddb19
Merge pull request #8649 from dokku/dependabot/go_modules/plugins/buildpacks/github.com/onsi/gomega-1.41.0
...
chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.41.0 in /plugins/buildpacks
2026-05-21 22:28:24 -04:00
Jose Diaz-Gonzalez
a8bc49a1c3
Merge pull request #8650 from dokku/dependabot/go_modules/plugins/config/github.com/onsi/gomega-1.41.0
...
chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.41.0 in /plugins/config
2026-05-21 22:28:17 -04:00
Jose Diaz-Gonzalez
1708276aff
Merge pull request #8648 from dokku/dependabot/pip/docs/_build/zipp-4.1.0
...
chore(deps): bump zipp from 3.23.1 to 4.1.0 in /docs/_build
2026-05-21 22:28:04 -04:00
Jose Diaz-Gonzalez
a147017e43
Merge pull request #8645 from zenspider/zenspider__doco_fix
...
Removed outdated warning about dokku-update not being able to upgrade to specific versions.
2026-05-21 22:27:38 -04:00
dependabot[bot]
c41e81e008
chore(deps): bump github.com/containerd/containerd
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.7.30 to 1.7.32.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.30...v1.7.32 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-version: 1.7.32
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 21:52:49 +00:00
dependabot[bot]
a531cf1ab7
chore(deps): bump ruby in /tests/apps/dockerfile-entrypoint
...
Bumps ruby from 4.0.4 to 4.0.5.
---
updated-dependencies:
- dependency-name: ruby
dependency-version: 4.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 15:05:31 +00:00
dependabot[bot]
0042fc3265
chore(deps): bump click from 8.3.3 to 8.4.0 in /docs/_build
...
Bumps [click](https://github.com/pallets/click ) from 8.3.3 to 8.4.0.
- [Release notes](https://github.com/pallets/click/releases )
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/click/compare/8.3.3...8.4.0 )
---
updated-dependencies:
- dependency-name: click
dependency-version: 8.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-18 23:38:05 +00:00
dependabot[bot]
af5421adf0
chore(deps): bump github.com/onsi/gomega in /plugins/buildpacks
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.40.0 to 1.41.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.40.0...v1.41.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-version: 1.41.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-18 23:38:03 +00:00
dependabot[bot]
104f36b408
chore(deps): bump github.com/onsi/gomega in /plugins/config
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.40.0 to 1.41.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.40.0...v1.41.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-version: 1.41.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-18 23:38:03 +00:00
dependabot[bot]
b0ced77d1e
chore(deps): bump zipp from 3.23.1 to 4.1.0 in /docs/_build
...
Bumps [zipp](https://github.com/jaraco/zipp ) from 3.23.1 to 4.1.0.
- [Release notes](https://github.com/jaraco/zipp/releases )
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst )
- [Commits](https://github.com/jaraco/zipp/compare/v3.23.1...v4.1.0 )
---
updated-dependencies:
- dependency-name: zipp
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-18 23:38:00 +00:00
Ryan Davis
f7f31a5c8a
Removed outdated warning about dokku-update not being able to upgrade to specific versions.
2026-05-16 14:35:56 -07:00
Jose Diaz-Gonzalez
55753a822b
Merge pull request #8644 from dokku/chore/bump-pack-0.40.5
...
chore: bump pack to 0.40.5
2026-05-16 14:09:12 -04:00
Jose Diaz-Gonzalez
c1c5afdcbe
Merge pull request #8642 from dokku/dependabot/go_modules/tests/apps/gogrpc/google.golang.org/grpc-1.81.1
...
chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 in /tests/apps/gogrpc
2026-05-16 14:09:02 -04:00
Dokku Bot
0ac7c6d8d7
chore: bump pack to 0.40.5
2026-05-16 06:48:16 +00:00
dependabot[bot]
336c351d87
chore(deps): bump google.golang.org/grpc in /tests/apps/gogrpc
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.81.0 to 1.81.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.81.0...v1.81.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.81.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-15 13:52:29 +00:00
Jose Diaz-Gonzalez
447b7d1e9c
Merge pull request #8641 from dokku/dependabot/docker/plugins/traefik-vhosts/traefik-v3.7.1
...
chore(deps): bump traefik from v3.7.0 to v3.7.1 in /plugins/traefik-vhosts
2026-05-14 14:11:49 -04:00
dependabot[bot]
c61c7354d5
chore(deps): bump traefik in /plugins/traefik-vhosts
...
Bumps traefik from v3.7.0 to v3.7.1.
---
updated-dependencies:
- dependency-name: traefik
dependency-version: v3.7.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-14 13:54:36 +00:00
Jose Diaz-Gonzalez
ca5e8201fc
Merge pull request #8638 from dokku/8637-cron-set-lacks-global-flag-in-dokku-0-38-x
...
Support --global on cron:set
2026-05-13 16:11:58 -04:00
Jose Diaz-Gonzalez
4001f318a6
fix: support --global on cron:set
...
`cron:set --global` wrote the property but emitted `unknown flag: --global` because the post-set `scheduler-cron-write` trigger received `--global` as the appName arg, which pflag rejected before reaching the trigger body.
The trigger args now omit appName for global writes, and the `scheduler-k3s` cron-write trigger short-circuits when called without an app since per-app reconciliation requires a real app name. The docker-local trigger already regenerates the global crontab from all apps so global `mailfrom`/`mailto` are picked up without any further changes.
2026-05-13 12:37:14 -04:00
Jose Diaz-Gonzalez
fee155a0a6
Merge pull request #8634 from dokku/dependabot/pip/docs/_build/pymdown-extensions-10.21.3
...
chore(deps): bump pymdown-extensions from 10.21.2 to 10.21.3 in /docs/_build
2026-05-13 11:08:38 -04:00
dependabot[bot]
536349990e
chore(deps): bump pymdown-extensions in /docs/_build
...
Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions ) from 10.21.2 to 10.21.3.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases )
- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.21.2...10.21.3 )
---
updated-dependencies:
- dependency-name: pymdown-extensions
dependency-version: 10.21.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-13 14:08:42 +00:00
Dokku Bot
f6439d3641
Release 0.38.5
...
# History
## 0.38.5
Install/update via the bootstrap script:
```shell
wget -NP . https://dokku.com/install/v0.38.5/bootstrap.sh
sudo DOKKU_TAG=v0.38.5 bash bootstrap.sh
```
### Bug Fixes
- #8627 : @josegonzalez Preserve explicit https:443 port mappings on cert update
### New Features
- #8629 : @josegonzalez Attach vector container to additional docker networks
- #8624 : @josegonzalez Expose certs-set and certs-remove plugin triggers
- #8626 : @josegonzalez Split caddy report tls-internal into raw, computed, and global
### Tests
- #8620 : @dependabot[bot] chore(deps-dev): bump heroku/heroku-buildpack-php from 287 to 288 in /tests/apps/php
- #8621 : @dependabot[bot] chore(deps): bump ruby from 4.0.3 to 4.0.4 in /tests/apps/dockerfile-entrypoint
### Dependencies
- #8622 : @dependabot[bot] chore(deps): bump k8s.io/kubernetes from 1.36.0 to 1.36.1 in /plugins/scheduler-k3s
v0.38.5
2026-05-13 04:40:12 +00:00
Jose Diaz-Gonzalez
3544bdd308
Merge pull request #8629 from dokku/8628-logs-support-attaching-the-vector-container-to-additional-docker-networks
...
Attach vector container to additional docker networks
2026-05-13 00:38:49 -04:00
Jose Diaz-Gonzalez
6cb5d472e5
Merge pull request #8624 from dokku/8623-expose-certs-add-and-certs-remove-to-plugins-via-triggers-or-sourceable-functions
...
Expose certs-set and certs-remove plugin triggers
2026-05-13 00:09:47 -04:00
Jose Diaz-Gonzalez
a4e6d06fd1
fix: reject app-level vector-networks and vector-image, drop bridge from joined nets
...
The Docker daemon refuses any endpoint settings on the default bridge network and `docker compose` unconditionally attaches the service name as an alias on every joined network, so combining bridge with user-defined networks via compose's `networks:` block is impossible. When `vector-networks` is set, the compose template now joins only the configured networks; outbound to external sinks still works through user-defined network NAT. Additionally, `vector-image` and `vector-networks` are both global-only but `common.CommandPropertySet` silently accepts them at app level by merging global-only keys into the valid-property set, so both now reject explicitly in `validateSetValue`.
2026-05-12 23:45:10 -04:00
Jose Diaz-Gonzalez
b4e3d85024
test: route run_plugn_trigger through dokku plugin:trigger
...
The dokku entrypoint already exports DOKKU_ROOT, PLUGIN_PATH, PLUGIN_AVAILABLE_PATH, PLUGIN_ENABLED_PATH, PLUGIN_CORE_AVAILABLE_PATH and DOKKU_LIB_ROOT before invoking plugn. Delegating to `dokku plugin:trigger` keeps the helper at env-var parity with the production trigger path without enumerating every var the helper must forward.
2026-05-12 22:36:47 -04:00
Jose Diaz-Gonzalez
282b2df71a
test: forward DOKKU_ROOT from run_plugn_trigger
...
Triggers that call verify_app_name or otherwise reference $DOKKU_ROOT fail under bats because the helper did not forward DOKKU_ROOT to the plugn subshell. The production dokku entrypoint exports DOKKU_ROOT before invoking plugn, so bring the helper to env-var parity.
2026-05-12 22:30:49 -04:00
Jose Diaz-Gonzalez
d00a7d741a
feat: attach vector container to additional docker networks
...
Adds a new global `vector-networks` property on the logs plugin that takes a comma-separated list of Docker networks. When set, the rendered compose file declares each network plus `bridge` as external and joins them on the vector service, so `docker compose up` reconciles attachments on every `logs:vector-start`. When unset, the existing `network_mode: bridge` template is preserved unchanged. The value is validated against `docker network inspect` at set time, rejects the reserved `bridge` entry, and is surfaced in `dokku logs:report` via `--logs-vector-global-networks`.
2026-05-12 22:05:50 -04:00
Jose Diaz-Gonzalez
a9b2f56ee8
test: forward PLUGIN_AVAILABLE_PATH and PLUGIN_ENABLED_PATH from run_plugn_trigger
...
The dokku entrypoint exports both vars before invoking plugn, so triggers that source `$PLUGIN_AVAILABLE_PATH/...` work in production. The helper only forwarded PLUGIN_PATH / PLUGIN_CORE_AVAILABLE_PATH / DOKKU_LIB_ROOT, so triggers that follow the same pattern fail under bats.
2026-05-12 21:31:58 -04:00
Jose Diaz-Gonzalez
b096d0f131
Merge pull request #8627 from dokku/8619-certs-add-rewrites-explicit-https-443-port-mappings
...
Preserve explicit https:443 port mappings on cert update
2026-05-12 21:29:47 -04:00
Jose Diaz-Gonzalez
f6448cef2c
Merge pull request #8626 from dokku/8625-caddy-report-tls-internal-has-no-raw-vs-computed-key-separation
...
Split caddy report tls-internal into raw, computed, and global
2026-05-12 20:34:18 -04:00