This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
ReleasePort's take
Light signalRelease v0.38.5 of Dokku preserves explicit https:443 port mappings during certificate updates.
Why it matters: If you rely on custom HTTPS:443 ports, upgrade to v0.38.5 immediately to avoid unintended port changes after certificate renewal.
Summary
AI summaryPreserve explicit https:443 port mappings on cert update.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
@josegonzalez Attach vector container to additional docker networks @josegonzalez Attach vector container to additional docker networks Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
@josegonzalez Expose certs-set and certs-remove plugin triggers @josegonzalez Expose certs-set and certs-remove plugin triggers Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
@josegonzalez Split caddy report tls-internal into raw, computed, and global @josegonzalez Split caddy report tls-internal into raw, computed, and global Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
@dependabot[bot] bump k8s.io/kubernetes from 1.36.0 to 1.36.1 @dependabot[bot] bump k8s.io/kubernetes from 1.36.0 to 1.36.1 Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
@josegonzalez Preserve explicit https:443 port mappings on cert update @josegonzalez Preserve explicit https:443 port mappings on cert update Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Other | Medium |
@dependabot[bot] chore(deps-dev): bump heroku/heroku-buildpack-php from 287 to 288 in /tests/apps/php @dependabot[bot] chore(deps-dev): bump heroku/heroku-buildpack-php from 287 to 288 in /tests/apps/php Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Other | Medium |
@dependabot[bot] chore(deps): bump ruby from 4.0.3 to 4.0.4 in /tests/apps/dockerfile-entrypoint @dependabot[bot] chore(deps): bump ruby from 4.0.3 to 4.0.4 in /tests/apps/dockerfile-entrypoint Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
Install/update via the bootstrap script:
wget -NP . https://dokku.com/install/v0.38.5/bootstrap.sh
sudo DOKKU_TAG=v0.38.5 bash bootstrap.sh
Bug Fixes
- #8627: @josegonzalez Preserve explicit https:443 port mappings on cert update
New Features
- #8629: @josegonzalez Attach vector container to additional docker networks
- #8624: @josegonzalez Expose certs-set and certs-remove plugin triggers
- #8626: @josegonzalez Split caddy report tls-internal into raw, computed, and global
Tests
- #8620: @dependabot[bot] chore(deps-dev): bump heroku/heroku-buildpack-php from 287 to 288 in /tests/apps/php
- #8621: @dependabot[bot] chore(deps): bump ruby from 4.0.3 to 4.0.4 in /tests/apps/dockerfile-entrypoint
Dependencies
- #8622: @dependabot[bot] chore(deps): bump k8s.io/kubernetes from 1.36.0 to 1.36.1 in /plugins/scheduler-k3s
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About dokku
A docker-powered PaaS that helps you build and manage the lifecycle of applications
Related context
Beta — feedback welcome: [email protected]