← Back to all sparks
D

Dashy

INFRA · APIS
Velocity5.0

Self-hosted dashboard for organizing services

Dashy shipped ten releases in five days; one fixes how auth headers trust origins

self-hosteddashboardhomelabsecuritydependency-updates
◆Current state
Dashy ships one release per merged PR. From October 26 to 31 that meant ten releases: six were Dependabot bumps, and the rest were fixes, including accepting IPv6 connections by default, a workspace header and search fix, an icon color fix, and a security fix for auth headers used with lookalike origins.
◆Where it's heading
The cadence stays automated and small-grained, with the maintainer's own fixes interleaved with dependency updates.
◆Prediction
More single-PR releases will follow; the entries give no sign of a larger feature release.

◆Recent moves

  1. 2d ago

    Dashy 4.9.12 fixes auth-header trust of lookalike origins

    Fixes auth-header handling so lookalike origins are no longer trusted. The one security change in this run, and worth taking for instances behind header auth.

    View source ↗
  2. 3d ago

    Dashy 4.9.11 bumps brace-expansion for security

    A brace-expansion bump from the security dependency group.

    View source ↗
  3. 3d ago

    Dashy 4.9.10 fixes icon color bleeding into text

    Item icon color no longer tints icon text.

    View source ↗
  4. 3d ago

    Dashy 4.9.9 bundles three dependency updates

    Three minor and patch dependency updates.

    View source ↗
  5. 7d ago

    Dashy 4.9.8 fixes workspace header and search

    Fixes the workspace header and search, closing a long-open issue.

    View source ↗
  6. 7d ago

    Dashy 4.9.7 bundles three dependency updates

    Another grouped dependency update.

    View source ↗