This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryMinor fixes and improvements.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Low |
Bump ruby from 4.0.5 to 4.0.6 in test apps dockerfile-entrypoint. Bump ruby from 4.0.5 to 4.0.6 in test apps dockerfile-entrypoint. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Bump google.golang.org/grpc from 1.82.0 to 1.82.1 in test apps gogrpc. Bump google.golang.org/grpc from 1.82.0 to 1.82.1 in test apps gogrpc. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Bump github.com/mattn/go-isatty from 0.0.22 to 0.0.23 in plugins/app-json. Bump github.com/mattn/go-isatty from 0.0.22 to 0.0.23 in plugins/app-json. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Bump github.com/melbahja/goph from 1.5.1 to 1.5.2 in plugins/common. Bump github.com/melbahja/goph from 1.5.1 to 1.5.2 in plugins/common. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Bump timberio/vector from 0.56.0-debian to 0.57.0-debian in plugins/logs. Bump timberio/vector from 0.56.0-debian to 0.57.0-debian in plugins/logs. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Bump pack to version 0.40.8. Bump pack to version 0.40.8. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Bump traefik from v3.7.7 to v3.7.8 in plugins/traefik-vhosts. Bump traefik from v3.7.7 to v3.7.8 in plugins/traefik-vhosts. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Bump actions/setup-node from 6 to 7 in CI workflows. Bump actions/setup-node from 6 to 7 in CI workflows. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Bump dokku-event-listener to 0.20.0. Bump dokku-event-listener to 0.20.0. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Other | Low |
Link herokuish buildpack references to the buildpack management page (PR #8836). Link herokuish buildpack references to the buildpack management page (PR #8836). Source: llm_adapter@2026-07-18 Confidence: low |
— |
Full changelog
Install/update via the bootstrap script:
wget -NP . https://dokku.com/install/v0.38.24/bootstrap.sh
sudo DOKKU_TAG=v0.38.24 bash bootstrap.sh
Documentation
- #8836: @josegonzalez Link herokuish buildpack references to buildpack management page
Tests
- #8841: @dependabot[bot] chore(deps): bump ruby from 4.0.5 to 4.0.6 in /tests/apps/dockerfile-entrypoint
- #8843: @dependabot[bot] chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in /tests/apps/gogrpc
Dependencies
- #8845: @dependabot[bot] chore(deps): bump github.com/mattn/go-isatty from 0.0.22 to 0.0.23 in /plugins/app-json
- #8844: @dependabot[bot] chore(deps): bump github.com/melbahja/goph from 1.5.1 to 1.5.2 in /plugins/common
- #8842: @dependabot[bot] chore(deps): bump timberio/vector from 0.56.0-debian to 0.57.0-debian in /plugins/logs
- #8838: @dokku-bot chore: bump pack to 0.40.8
- #8846: @dependabot[bot] chore(deps): bump traefik from v3.7.7 to v3.7.8 in /plugins/traefik-vhosts
- #8839: @dependabot[bot] chore(deps): bump actions/setup-node from 6 to 7
- #8834: @dokku-bot chore: bump dokku-event-listener to 0.20.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About dokku
A docker-powered PaaS that helps you build and manage the lifecycle of applications
Beta — feedback welcome: [email protected]