2974 Commits

Author SHA1 Message Date
Jose Diaz-Gonzalez
c712429b09 Merge pull request #8970 from dokku/dependabot/pip/tests/apps/dockerfile-release/gunicorn-26.2.0
chore(deps): bump gunicorn from 26.1.0 to 26.2.0 in /tests/apps/dockerfile-release
2026-08-28 14:19:19 -04:00
Jose Diaz-Gonzalez
892648041b Merge pull request #8969 from dokku/dependabot/pip/tests/apps/python-flask/gunicorn-26.2.0
chore(deps): bump gunicorn from 26.1.0 to 26.2.0 in /tests/apps/python-flask
2026-08-28 14:19:11 -04:00
dependabot[bot]
8058611105 chore(deps): bump gunicorn in /tests/apps/dockerfile-release
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 26.1.0 to 26.2.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/26.1.0...26.2.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-28 13:54:20 +00:00
dependabot[bot]
3960c27b2f chore(deps): bump gunicorn in /tests/apps/python-flask
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 26.1.0 to 26.2.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/26.1.0...26.2.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-28 13:52:32 +00:00
dependabot[bot]
8c1ba6940b chore(deps): bump gunicorn from 26.1.0 to 26.2.0 in /tests/apps/multi
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 26.1.0 to 26.2.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/26.1.0...26.2.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-28 13:52:30 +00:00
Jose Diaz-Gonzalez
78704fe13f Merge pull request #8965 from dokku/dependabot/npm_and_yarn/tests/apps/multi/sass-1.103.1
chore(deps): bump sass from 1.102.0 to 1.103.1 in /tests/apps/multi
2026-08-25 14:05:27 -04:00
Jose Diaz-Gonzalez
1933f6e5eb Merge pull request #8962 from dokku/dependabot/docker/tests/apps/go-fail-predeploy/golang-1.27.0
chore(deps): bump golang from 1.26.6 to 1.27.0 in /tests/apps/go-fail-predeploy
2026-08-25 14:05:11 -04:00
Jose Diaz-Gonzalez
b2b1f317f9 Merge pull request #8961 from dokku/dependabot/docker/tests/apps/go-fail-postdeploy/golang-1.27.0
chore(deps): bump golang from 1.26.6 to 1.27.0 in /tests/apps/go-fail-postdeploy
2026-08-25 14:05:01 -04:00
Jose Diaz-Gonzalez
6baf27320f Merge pull request #8960 from dokku/dependabot/docker/tests/apps/gogrpc/golang-1.27.0
chore(deps): bump golang from 1.26.6 to 1.27.0 in /tests/apps/gogrpc
2026-08-25 14:04:52 -04:00
Jose Diaz-Gonzalez
1d37ac0a07 Merge pull request #8959 from dokku/dependabot/docker/tests/apps/zombies-dockerfile-tini/golang-1.27.0
chore(deps): bump golang from 1.26.6 to 1.27.0 in /tests/apps/zombies-dockerfile-tini
2026-08-25 14:00:23 -04:00
Jose Diaz-Gonzalez
830868f08d Merge pull request #8958 from dokku/dependabot/docker/tests/apps/zombies-dockerfile-no-tini/golang-1.27.0
chore(deps): bump golang from 1.26.6 to 1.27.0 in /tests/apps/zombies-dockerfile-no-tini
2026-08-25 14:00:04 -04:00
dependabot[bot]
9415027a1c chore(deps): bump sass from 1.102.0 to 1.103.1 in /tests/apps/multi
Bumps [sass](https://github.com/sass/dart-sass) from 1.102.0 to 1.103.1.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.102.0...1.103.1)

---
updated-dependencies:
- dependency-name: sass
  dependency-version: 1.103.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-24 13:56:20 +00:00
dependabot[bot]
b90ba2e67e chore(deps): bump golang in /tests/apps/go-fail-predeploy
Bumps golang from 1.26.6 to 1.27.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-24 13:53:38 +00:00
dependabot[bot]
6c5f18b9e6 chore(deps): bump golang in /tests/apps/go-fail-postdeploy
Bumps golang from 1.26.6 to 1.27.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-24 13:53:34 +00:00
dependabot[bot]
31a57b62ee chore(deps): bump golang from 1.26.6 to 1.27.0 in /tests/apps/gogrpc
Bumps golang from 1.26.6 to 1.27.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-24 13:53:33 +00:00
dependabot[bot]
5a2e7f3a20 chore(deps): bump golang in /tests/apps/zombies-dockerfile-tini
Bumps golang from 1.26.6 to 1.27.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-24 13:53:26 +00:00
dependabot[bot]
be8e24bfb8 chore(deps): bump golang in /tests/apps/zombies-dockerfile-no-tini
Bumps golang from 1.26.6 to 1.27.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-24 13:53:21 +00:00
dependabot[bot]
37694f2530 chore(deps): bump google.golang.org/grpc in /tests/apps/gogrpc
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.0 to 1.83.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.83.0...v1.83.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-24 13:52:39 +00:00
Jose Diaz-Gonzalez
33896f5d7e Merge pull request #8954 from dokku/dependabot/pip/tests/apps/dockerfile-release/gunicorn-26.1.0
chore(deps): bump gunicorn from 26.0.0 to 26.1.0 in /tests/apps/dockerfile-release
2026-08-21 16:18:10 -04:00
Jose Diaz-Gonzalez
8194d27cf9 Merge pull request #8952 from dokku/dependabot/pip/tests/apps/multi/gunicorn-26.1.0
chore(deps): bump gunicorn from 26.0.0 to 26.1.0 in /tests/apps/multi
2026-08-21 16:17:49 -04:00
dependabot[bot]
bb0086798d chore(deps): bump gunicorn in /tests/apps/dockerfile-release
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 26.0.0 to 26.1.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/26.0.0...26.1.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-21 13:55:25 +00:00
dependabot[bot]
5129582c85 chore(deps): bump gunicorn from 26.0.0 to 26.1.0 in /tests/apps/multi
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 26.0.0 to 26.1.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/26.0.0...26.1.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-21 13:52:58 +00:00
dependabot[bot]
2e27889d50 chore(deps): bump gunicorn in /tests/apps/python-flask
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 26.0.0 to 26.1.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/26.0.0...26.1.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-21 13:52:53 +00:00
Jose Diaz-Gonzalez
d03c9df862 Merge pull request #8943 from dokku/dependabot/docker/tests/apps/zombies-dockerfile-no-tini/golang-1.26.6
chore(deps): bump golang from 1.26.5 to 1.26.6 in /tests/apps/zombies-dockerfile-no-tini
2026-08-18 23:22:23 -04:00
Jose Diaz-Gonzalez
9afb439d52 Merge pull request #8944 from dokku/dependabot/docker/tests/apps/go-fail-postdeploy/golang-1.26.6
chore(deps): bump golang from 1.26.5 to 1.26.6 in /tests/apps/go-fail-postdeploy
2026-08-18 23:22:16 -04:00
Jose Diaz-Gonzalez
d11543bbf9 Merge pull request #8942 from dokku/dependabot/docker/tests/apps/go-fail-predeploy/golang-1.26.6
chore(deps): bump golang from 1.26.5 to 1.26.6 in /tests/apps/go-fail-predeploy
2026-08-18 23:22:09 -04:00
Jose Diaz-Gonzalez
3cb090294a Merge pull request #8941 from dokku/dependabot/docker/tests/apps/gogrpc/golang-1.26.6
chore(deps): bump golang from 1.26.5 to 1.26.6 in /tests/apps/gogrpc
2026-08-18 23:22:01 -04:00
Jose Diaz-Gonzalez
b18273378e Merge pull request #8940 from dokku/dependabot/docker/tests/apps/zombies-dockerfile-tini/golang-1.26.6
chore(deps): bump golang from 1.26.5 to 1.26.6 in /tests/apps/zombies-dockerfile-tini
2026-08-18 23:21:54 -04:00
dependabot[bot]
f494537817 chore(deps): bump sqlparse in /tests/apps/dockerfile-release
Bumps [sqlparse](https://github.com/andialbrecht/sqlparse) from 0.5.5 to 0.6.0.
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)
- [Commits](https://github.com/andialbrecht/sqlparse/compare/0.5.5...0.6.0)

---
updated-dependencies:
- dependency-name: sqlparse
  dependency-version: 0.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-17 21:29:38 +00:00
dependabot[bot]
b1273cc4fe chore(deps): bump golang in /tests/apps/zombies-dockerfile-no-tini
Bumps golang from 1.26.5 to 1.26.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-17 13:53:00 +00:00
dependabot[bot]
4a6471ba16 chore(deps): bump golang in /tests/apps/go-fail-postdeploy
Bumps golang from 1.26.5 to 1.26.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-17 13:53:00 +00:00
dependabot[bot]
16936697a5 chore(deps): bump golang in /tests/apps/go-fail-predeploy
Bumps golang from 1.26.5 to 1.26.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-17 13:52:55 +00:00
dependabot[bot]
50ad9cfb09 chore(deps): bump golang from 1.26.5 to 1.26.6 in /tests/apps/gogrpc
Bumps golang from 1.26.5 to 1.26.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-17 13:52:55 +00:00
dependabot[bot]
140895f4cc chore(deps): bump golang in /tests/apps/zombies-dockerfile-tini
Bumps golang from 1.26.5 to 1.26.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-17 13:52:48 +00:00
dependabot[bot]
fd95223052 chore(deps): bump google.golang.org/protobuf in /tests/apps/gogrpc
Bumps google.golang.org/protobuf from 1.36.11 to 1.36.12.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-13 13:52:25 +00:00
Jose Diaz-Gonzalez
96d726c43c fix: retire cron containers past their active deadline
Cron containers were never reaped once they exceeded their active deadline, so a hung cron task ran indefinitely instead of being retired after 24 hours as documented. `cron:run` now also accepts a `--ttl-seconds` argument, matching the one `dokku run` already takes.
2026-08-12 13:11:34 -04:00
Jose Diaz-Gonzalez
81a929d768 fix: report traefik dns-provider env vars as global keys
The dynamic `dns-provider-*` properties were reported as `--traefik-dns-provider-<env_var>`, outside the `global`/`computed` namespace every other traefik property uses, so a consumer reading the json report could not tell which of the two a key represented. They are now reported as `--traefik-global-dns-provider-<env_var>`. The `basic-auth-password` property is a credential as well and is now masked in the default report output on the same terms as the dns provider values, meaning the raw value is returned only for `--format json` or when the flag is queried by name.
2026-08-12 03:22:04 -04:00
Jose Diaz-Gonzalez
adf2bd14fb Merge pull request #8930 from dokku/8929-0-38-26-regression-drainlegacyenvfile-silently-overwrites-current-config-with-the-stale-legacy-env-file
fix: do not import an already-migrated ENV file
2026-08-12 02:13:59 -04:00
Jose Diaz-Gonzalez
25a5bacde9 docs: note the preserved ENV file can be deleted
The preserved copy holds everything the legacy file was not allowed to import, which includes keys that had been `config:unset` on purpose, so a revoked secret can outlive its revocation in a file `dokku config:*` no longer reads. Nothing said the copy was the operator's to remove once reviewed.
2026-08-11 19:11:06 -04:00
dependabot[bot]
71df7da367 chore(deps): bump djangorestframework in /tests/apps/dockerfile-release
Bumps [djangorestframework](https://github.com/encode/django-rest-framework) from 3.17.2 to 3.18.0.
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](https://github.com/encode/django-rest-framework/compare/3.17.2...3.18.0)

---
updated-dependencies:
- dependency-name: djangorestframework
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-11 13:55:03 +00:00
Jose Diaz-Gonzalez
685f16e6b1 fix: do not import an already-migrated ENV file
Releases 0.38.0 through 0.38.25 recorded the ENV file migration and deliberately left the file at the old path, so 0.38.26 treating a leftover file as a hand-edit replayed the environment as it stood at that upgrade over every `config:set` and `config:unset` made since, reinstating variables and secrets that had been deliberately unset. A file found at the old path once its migration is on record is no longer imported: it is removed when it agrees with the current config, and is otherwise moved aside to `ENV.migrated` with the keys it disagrees on named in a warning. That warning now reaches the operator during an upgrade rather than being swallowed, which is why the overwrite went unreported.
2026-08-10 17:58:10 -04:00
Jose Diaz-Gonzalez
2d34caec00 Merge pull request #8920 from dokku/8913-storage-host-directories-have-no-mode-flag-and-no-removal-path
Add storage directory mode and removal flags
2026-08-10 17:22:31 -04:00
Jose Diaz-Gonzalez
4e169e8842 Merge pull request #8927 from dokku/dependabot/pip/tests/apps/dockerfile-release/djangorestframework-3.17.2
chore(deps): bump djangorestframework from 3.17.1 to 3.17.2 in /tests/apps/dockerfile-release
2026-08-10 15:03:49 -04:00
Jose Diaz-Gonzalez
9c31ff8792 Merge pull request #8919 from dokku/8918-renaming-or-cloning-an-app-silently-stops-vector-log-shipping
Regenerate vector config on app lifecycle changes
2026-08-10 15:03:22 -04:00
Jose Diaz-Gonzalez
74f9acf7ba refactor: align storage:set with dokku conventions
`storage:set` now takes `<name> <property> [<value>]` like every other `:set` command, where omitting the value unsets the property. Previously it took flags and could not distinguish an empty value from an omitted one, so nothing it set could ever be cleared. The flag form keeps working and emits a deprecation warning.

Annotations and labels move to `storage:annotations:set`, `storage:annotations:report`, `storage:labels:set`, and `storage:labels:report`, matching the `scheduler-k3s` equivalents. These operate on a single key, so clearing one leaves the rest in place rather than replacing the whole map as the `--annotation` and `--label` flags do.
2026-08-10 15:00:45 -04:00
dependabot[bot]
3e412ccae0 chore(deps): bump djangorestframework in /tests/apps/dockerfile-release
Bumps [djangorestframework](https://github.com/encode/django-rest-framework) from 3.17.1 to 3.17.2.
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](https://github.com/encode/django-rest-framework/compare/3.17.1...3.17.2)

---
updated-dependencies:
- dependency-name: djangorestframework
  dependency-version: 3.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-10 13:55:27 +00:00
dependabot[bot]
35f54a5e45 chore(deps): bump python in /tests/apps/dockerfile-release
Bumps python from 3.15.0b4-bookworm to 3.15.0rc1-bookworm.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.15.0rc1-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-10 13:53:09 +00:00
Jose Diaz-Gonzalez
87b240054f feat: add storage directory mode and removal flags
`storage:create` and `storage:set` accept a `--mode` flag that sets the octal permissions of a docker-local host directory, and `storage:destroy` accepts a `--destroy-host-dir` flag that removes the directory along with its contents. A docker-local entry also honors `--reclaim-policy Delete` at destroy time now, matching how that policy governs a k3s PersistentVolume. Both are limited to the default `/var/lib/dokku/data/storage/<name>` location, the same restriction `--chown` already carries. `storage:set` applies `--chown` and `--mode` to the directory rather than only recording them.
2026-08-10 01:23:10 -04:00
Jose Diaz-Gonzalez
b43929df27 fix: regenerate vector config on app lifecycle changes
The generated vector config is a snapshot of the app list and their sink properties, but it was only ever written by `logs:set` and `logs:vector-start`. Renaming an app left a source filtering on a label no container carries and gave the new name no source at all, so the app kept a sink with nothing feeding it. Cloning produced the same result for the clone, and destroying an app left its source and sink behind, the latter still pointing at an endpoint decommissioned along with the app. The global relabel transform embeds app names directly in generated VRL, so a rename also left behind a branch naming an app that no longer existed. Every case was silent, and the only repair was an operator running `logs:vector-start`. The `post-app-clone-setup`, `post-app-rename-setup` and `post-delete` triggers now rewrite the config, warning rather than failing so that a config write cannot abort the app operation whose state it is derived from.

Closes #8918.
2026-08-09 23:53:12 -04:00
Jose Diaz-Gonzalez
5b5d3d761b fix: apply app-label-alias to shipped events
The alias was only ever used to build the `include_labels` filter on the generated vector source, while dokku labels containers with `com.dokku.app-name` unconditionally. Setting the property therefore pointed the source at a label no container carries, and log collection stopped without any error. The source now always filters the label dokku applies, and a generated remap renames the field on its way to the sink, which is what the property was documented to do. An app whose own alias differs from the global one gets a branch in the global pipeline, so a per-app value is honored even when the app ships through the global sink.

Closes #8916.
2026-08-09 14:01:43 -04:00