dokku

v0.38.23 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 9d Deployment Automation

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

buildpack containers devops docker dokku heroku

+4 more

kubernetes nomad paas self-hosted

Affected surfaces

crypto_tls deps

Summary

AI summary

Updates Tests, deps, and Bug Fixes across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Dependency
Dependency	Low	Updates helm.sh/helm/v3 from 3.21.2 to 3.21.3 in scheduler‑k3s plugin. Updates helm.sh/helm/v3 from 3.21.2 to 3.21.3 in scheduler‑k3s plugin. Source: llm_adapter@2026-07-18 Confidence: high	—
Dependency	Low	Updates github.com/fluxcd/pkg/kustomize from 1.37.0 to 1.38.0 in scheduler‑k3s plugin. Updates github.com/fluxcd/pkg/kustomize from 1.37.0 to 1.38.0 in scheduler‑k3s plugin. Source: llm_adapter@2026-07-18 Confidence: high	—
Dependency	Low	Updates golang.org/x/crypto from 0.53.0 to 0.54.0 in common plugin. Updates golang.org/x/crypto from 0.53.0 to 0.54.0 in common plugin. Source: llm_adapter@2026-07-18 Confidence: high	—
Dependency	Low	Updates github.com/cert-manager/cert-manager from 1.20.3 to 1.21.0 in scheduler‑k3s plugin. Updates github.com/cert-manager/cert-manager from 1.20.3 to 1.21.0 in scheduler‑k3s plugin. Source: llm_adapter@2026-07-18 Confidence: high	—
Dependency	Low	Updates traefik from v3.7.6 to v3.7.7 in traefik‑vhosts plugin. Updates traefik from v3.7.6 to v3.7.7 in traefik‑vhosts plugin. Source: llm_adapter@2026-07-18 Confidence: high	—
Dependency	Low	Updates github.com/go-openapi/jsonpointer from 0.24.0 to 1.0.0 in scheduler‑k3s plugin. Updates github.com/go-openapi/jsonpointer from 0.24.0 to 1.0.0 in scheduler‑k3s plugin. Source: llm_adapter@2026-07-18 Confidence: high	—
Bugfix	Medium	Fixes parsing of cert CN and subject on OpenSSL 3.x. Fixes parsing of cert CN and subject on OpenSSL 3.x. Source: llm_adapter@2026-07-18 Confidence: high	—

Full changelog

Install/update via the bootstrap script:

wget -NP . https://dokku.com/install/v0.38.23/bootstrap.sh
sudo DOKKU_TAG=v0.38.23 bash bootstrap.sh

Bug Fixes

#8833: @josegonzalez Parse cert CN and subject on OpenSSL 3.x

Tests

#8825: @dependabot[bot] chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/zombies-dockerfile-no-tini
#8823: @dependabot[bot] chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/zombies-dockerfile-tini
#8820: @dependabot[bot] chore(deps-dev): bump heroku/heroku-buildpack-php from 292 to 293 in /tests/apps/php
#8821: @dependabot[bot] chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/go-fail-predeploy
#8822: @dependabot[bot] chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/gogrpc
#8824: @dependabot[bot] chore(deps): bump golang from 1.26.4 to 1.26.5 in /tests/apps/go-fail-postdeploy

Dependencies

#8831: @dependabot[bot] chore(deps): bump helm.sh/helm/v3 from 3.21.2 to 3.21.3 in /plugins/scheduler-k3s
#8830: @dependabot[bot] chore(deps): bump github.com/fluxcd/pkg/kustomize from 1.37.0 to 1.38.0 in /plugins/scheduler-k3s
#8826: @dependabot[bot] chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 in /plugins/common
#8827: @dependabot[bot] chore(deps): bump github.com/cert-manager/cert-manager from 1.20.3 to 1.21.0 in /plugins/scheduler-k3s
#8828: @dependabot[bot] chore(deps): bump traefik from v3.7.6 to v3.7.7 in /plugins/traefik-vhosts
#8829: @dependabot[bot] chore(deps): bump github.com/go-openapi/jsonpointer from 0.24.0 to 1.0.0 in /plugins/scheduler-k3s

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track dokku

Get notified when new releases ship.

About dokku

A docker-powered PaaS that helps you build and manage the lifecycle of applications

All releases →