Dokku Bot a553f04966 Release 0.38.2 ...

# History

## 0.38.2

Install/update via the bootstrap script:

```shell
wget -NP . https://dokku.com/install/v0.38.2/bootstrap.sh
sudo DOKKU_TAG=v0.38.2 bash bootstrap.sh
```

### Security

- #8590: @josegonzalez Restrict app names to prevent command injection
- #8591: @josegonzalez Harden archive extraction against symlink traversal
- #8589: @josegonzalez Enforce 0600 permissions on .netrc credentials file
- #8588: @josegonzalez Sanitize openresty include filenames to prevent eval injection

### Bug Fixes

- #8593: @josegonzalez Gate ssl_reject_handshake behind nginx 1.19.4
- #8578: @josegonzalez Reference SOURCECODE_WORK_DIR in builder core-post-extract

### Documentation

- #8592: @josegonzalez Add security section to release changelog
- #8587: @vixalien Correct buildkit builder code block syntax
- #8580: @othercorey Set issue type in bug report template

### Tests

- #8586: @josegonzalez Count assert_output_contains matches as fixed strings
- #8581: @dependabot[bot] chore(deps): bump golang from 1.26.2 to 1.26.3 in /tests/apps/go-fail-predeploy
- #8582: @dependabot[bot] chore(deps): bump golang from 1.26.2 to 1.26.3 in /tests/apps/gogrpc
- #8584: @dependabot[bot] chore(deps): bump golang from 1.26.2 to 1.26.3 in /tests/apps/go-fail-postdeploy
- #8583: @dependabot[bot] chore(deps): bump golang from 1.26.2 to 1.26.3 in /tests/apps/zombies-dockerfile-tini
- #8585: @dependabot[bot] chore(deps): bump golang from 1.26.2 to 1.26.3 in /tests/apps/zombies-dockerfile-no-tini
- #8574: @dependabot[bot] chore(deps): bump node from 25-alpine to 26-alpine in /tests/apps/dockerfile-noexpose
- #8575: @dependabot[bot] chore(deps): bump node from 25-alpine to 26-alpine in /tests/apps/dockerfile-procfile-bad
- #8577: @dependabot[bot] chore(deps): bump node from 25-alpine to 26-alpine in /tests/apps/dockerfile-app-json-formations
- #8576: @dependabot[bot] chore(deps): bump node from 25-alpine to 26-alpine in /tests/apps/dockerfile
- #8573: @dependabot[bot] chore(deps): bump node from 25-alpine to 26-alpine in /tests/apps/dockerfile-procfile

### Dependencies

- #8579: @josegonzalez Use type prefix for dokku-bot dependency label

2026-05-10 20:17:51 +00:00

..

src

Add proxy-keepalive to Nginx properties

2025-12-27 20:27:29 +00:00

subcommands

feat: add nginx:reload command

2026-04-27 14:43:20 -04:00

templates

fix: gate ssl_reject_handshake behind nginx 1.19.4

2026-05-09 16:32:30 -04:00

.gitignore

fix: add nginx-property binary to gitignore

2024-03-14 08:15:40 -04:00

command-functions

fix: preserve info flag in plugin reports with --global

2026-04-30 21:05:46 -04:00

commands

refactor: standardize help generation

2020-02-10 00:37:00 -05:00

core-post-deploy

refactor trigger proxy-build-config from nginx#core-post-deploy

2022-12-01 22:39:20 -05:00

core-post-extract

feat: pre-validate custom nginx.conf.sigil during core-post-extract

2026-04-29 05:01:25 -04:00

dependencies

feat: migrate away from transitional packages

2024-03-26 17:19:41 -04:00

functions

fix: inject placeholder listener for pre-validation upstream blocks

2026-04-29 05:12:05 -04:00

functions.go

refactor: consolidate property fetching for nginx plugin into golang codebase

2024-02-06 00:42:48 -05:00

go.mod

refactor: consolidate nginx.conf.sigil server blocks

2026-04-30 16:36:45 -04:00

go.sum

refactor: consolidate nginx.conf.sigil server blocks

2026-04-30 16:36:45 -04:00

help-functions

feat: add nginx:reload command

2026-04-27 14:43:20 -04:00

install

fix: move proxy-port properties to proxy plugin and fix CI failures

2026-04-25 17:19:42 -04:00

internal-functions

Add proxy-keepalive to Nginx properties

2025-12-27 20:27:29 +00:00

Makefile

refactor: consolidate property fetching for nginx plugin into golang codebase

2024-02-06 00:42:48 -05:00

nginx_vhosts.go

Add proxy-keepalive to Nginx properties

2025-12-27 20:27:29 +00:00

plugin.toml

Release 0.38.2

2026-05-10 20:17:51 +00:00

post-app-clone-setup

fix: switch to using GIT_DIR environment variable to fix Centos 7 support

2021-02-25 06:04:37 -05:00

post-app-rename-setup

fix: add missing clone/rename setup to builder plugins

2021-10-09 23:57:48 -04:00

post-create

fix(nginx): skip post-create config when nginx is stopped

2026-04-24 04:14:49 -04:00

post-delete

fix: check if nginx is running before reloading during an app deletion

2024-09-23 21:25:23 -04:00

post-domains-update

refactor: move domain manipulation into triggers

2020-05-06 00:16:51 -04:00

post-proxy-ports-update

chore: remove unnecessary source/import statements

2020-02-28 06:03:53 -05:00

pre-disable-vhost

fix: move proxy-port properties to proxy plugin and fix CI failures

2026-04-25 17:19:42 -04:00

pre-enable-vhost

fix: clear auto-detected port maps when re-enabling vhost

2026-04-27 15:43:33 -04:00

pre-restore

fix: source property-functions where fn-plugin-property-* helpers are used

2026-05-04 06:11:22 -04:00

proxy-build-config

feat(nginx): generate 502 config for apps without web listeners

2026-04-24 02:10:30 -04:00

proxy-clear-config

feat: add support for clearing all nginx proxy entries in a single go

2022-01-28 20:58:31 -05:00

proxy-disable

feat: drop internal calls to verify_app_name

2020-12-27 15:14:11 -05:00

proxy-enable

feat: drop internal calls to verify_app_name

2020-12-27 15:14:11 -05:00

report

refactor: deprecate nginx:validate

2020-02-19 01:00:47 -05:00

scheduler-post-deploy-process

chore: set different header level

2023-01-21 16:44:35 -05:00

template_test.go

refactor: consolidate nginx.conf.sigil server blocks

2026-04-30 16:36:45 -04:00