This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryUpdates What's new in v1.0.37, INFO/WARN/ERROR, and https://hub.docker.com/r/fnsys/dockhand across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds Prometheus metrics endpoint at /metrics, gated by EXPORT_METRICS. Adds Prometheus metrics endpoint at /metrics, gated by EXPORT_METRICS. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds SARIF 2.1.0 export for scan results via manual and API. Adds SARIF 2.1.0 export for scan results via manual and API. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Introduces Vulnerabilities dashboard aggregating CVE findings. Introduces Vulnerabilities dashboard aggregating CVE findings. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Enables direct update of container images from the Stack view. Enables direct update of container images from the Stack view. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Shows update indicator on stacks list for pending image updates. Shows update indicator on stacks list for pending image updates. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Includes log level (INFO/WARN/ERROR) in application log prefixes. Includes log level (INFO/WARN/ERROR) in application log prefixes. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds option to suppress the "What's New" popup. Adds option to suppress the "What's New" popup. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Excludes stacks with `dockhand.adopt=false` label from adoption process. Excludes stacks with `dockhand.adopt=false` label from adoption process. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Prompts to save or discard unsaved changes before closing the file editor. Prompts to save or discard unsaved changes before closing the file editor. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Allows customization of sidebar menu order and visibility. Allows customization of sidebar menu order and visibility. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Displays changed files in git deploy progress before deployment starts. Displays changed files in git deploy progress before deployment starts. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Dependency | Low |
Bumps bundled docker-compose to version 5.2.0-r0. Bumps bundled docker-compose to version 5.2.0-r0. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Updates default scanner images to grype v0.115.0 and trivy 0.71.2. Updates default scanner images to grype v0.115.0 and trivy 0.71.2. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes `more-than-current image` re‑scan to avoid stale cached scan blocking. Fixes `more-than-current image` re‑scan to avoid stale cached scan blocking. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes copying an image to another registry preserving its tag instead of defaulting to latest. Fixes copying an image to another registry preserving its tag instead of defaulting to latest. Source: llm_adapter@2026-07-15 Confidence: low |
— |
| Bugfix | Low |
Preserves original tag when copying an image to another registry. Preserves original tag when copying an image to another registry. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Forwards `email` query parameter in ntfy notifications for email sending. Forwards `email` query parameter in ntfy notifications for email sending. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Keeps "Latest" update‑check result visible without reverting. Keeps "Latest" update‑check result visible without reverting. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Shows real host hostname in dashboard daemon info instead of container ID. Shows real host hostname in dashboard daemon info instead of container ID. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
`GET /api/containers/check-updates` now lists pending updates without triggering a check. `GET /api/containers/check-updates` now lists pending updates without triggering a check. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Activity and audit date filters respect configured timezone instead of UTC. Activity and audit date filters respect configured timezone instead of UTC. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
Full changelog
What's new in v1.0.37
- ✨ Prometheus metrics at /metrics for env state and internals, gated by EXPORT_METRICS (#339)
- ✨ export scan results as SARIF 2.1.0, manual export and API for DefectDojo/Dependency-Track/GitHub (#415)
- ✨ bump bundled docker-compose to 5.2.0-r0 to clear known CVEs
- ✨ Vulnerabilities dashboard: aggregated CVE findings (#1038)
- ✨ update container images directly from the Stack view (#1073)
- ✨ stacks list shows an update indicator for stacks with image updates (#504)
- 🐛 copying an image to another registry keeps its tag instead of defaulting to latest (#1243)
- 🐛
more-than-current imagere-scans the current image so a stale cached scan doesn't block (#1022) - ✨ application logs now include the log level (INFO/WARN/ERROR) in the prefix (#1166)
- ✨ option to suppress the "What's New" popup (#1235)
- 🐛 ntfy notifications now forward the
emailquery parameter so ntfy can send email (#1231) - ✨ default scanner images bumped to grype v0.115.0 and trivy 0.71.2 (#1241)
- 🐛 the "Latest" update-check result now stays visible and doesn't revert (#1019)
- ✨ a stack with container label
dockhand.adopt=falseexcluded from adoption (#998) - 🐛 dashboard daemon info shows the real host hostname, not Dockhand's container id (#1265)
- ✨ file editor prompts to save/discard unsaved changes before closing (#1264)
- 🐛
GET /api/containers/check-updatesnow lists pending updates (POST still triggers a check) (#1266) - ✨ sidebar menu customizable (order and visibility of items) (#1252)
- 🐛 activity and audit date filters respect the configured timezone instead of UTC (#1269)
- ✨ git deploy progress shows the changed files before the deploy starts (#1260)
Docker image
docker pull fnsys/dockhand:v1.0.37
Also available as fnsys/dockhand:latest
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]